{
  "resultsPerPage" : 31177,
  "startIndex" : 0,
  "totalResults" : 31177,
  "format" : "NVD_CVE",
  "version" : "2.0",
  "timestamp" : "2026-05-06T03:00:57.7822482",
  "vulnerabilities" : [ {
    "cve" : {
      "id" : "CVE-2023-0028",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-01T01:15:12.627",
      "lastModified" : "2024-11-21T07:36:25.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository linagora/twake prior to 2023.Q1.1200+.\n\n"
      }, {
        "lang" : "es",
        "value" : "Cross-site scripting (XSS) almacenado en el repositorio de GitHub linagora/twake antes de 2023.Q1.1200+."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linagora:twake:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2022.q4.1120",
            "matchCriteriaId" : "B6CE098A-AAD8-4CDE-AF83-CD9BA8728F50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linagora/Twake/pull/2678/commits/c0708c397e199c68cea0db9f59d29d7dbdcdde7b",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/bfd935f4-2d1d-4d3f-8b59-522abe7dd065",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/linagora/Twake/pull/2678/commits/c0708c397e199c68cea0db9f59d29d7dbdcdde7b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/bfd935f4-2d1d-4d3f-8b59-522abe7dd065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0029",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-01T14:15:09.963",
      "lastModified" : "2024-11-21T07:36:25.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Multilaser RE708 RE1200R4GC-2T2R-V3_v3411b_MUL029B. It has been rated as problematic. This issue affects some unknown processing of the component Telnet Service. The manipulation leads to denial of service. The attack may be initiated remotely. The identifier VDB-217169 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Multilaser RE708 RE1200R4GC-2T2R-V3_v3411b_MUL029B. Ha sido calificada como problemática. Este problema afecta un procesamiento desconocido del componente Telnet Service. La manipulación conduce a la denegación del servicio. El ataque puede iniciarse de forma remota. A esta vulnerabilidad se le asignó el identificador VDB-217169."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:multilaserempresas:re708_firmware:re1200r4gc-2t2r-v3_v3411b_mul029b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1B2917-2287-49DC-88BD-6310ACFFB2DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:multilaserempresas:re708:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0377AF01-69CC-4BDE-BDCD-186B09D0B414"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.217169",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217169",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=yh0pK7YlmI4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=yh0pK7YlmI4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-01T18:15:17.157",
      "lastModified" : "2025-04-07T19:15:49.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FTP (aka \"Implementation of a simple FTP client and server\") project through 96c1a35 allows remote attackers to cause a denial of service (memory consumption) by engaging in client activity, such as establishing and then terminating a connection. This occurs because malloc is used but free is not."
      }, {
        "lang" : "es",
        "value" : "El proyecto FTP (también conocido como \"Implementación de un cliente y servidor FTP simple\") a través de 96c1a35 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) al participar en la actividad del cliente, como establecer y luego finalizar una conexión. Esto ocurre porque se usa malloc pero no free."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ftp_project:ftp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2012-03-28",
            "matchCriteriaId" : "14F70804-6AC4-4604-9F79-27C5805CE82B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rovinbhandari/FTP/issues/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rovinbhandari/FTP/issues/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22451",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-02T16:15:11.063",
      "lastModified" : "2024-11-21T07:44:49.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kiwi TCMS is an open source test management system. In version 11.6 and prior, when users register new accounts and/or change passwords, there is no validation in place which would prevent them from picking an easy to guess password. This issue is resolved by providing defaults for the `AUTH_PASSWORD_VALIDATORS` configuration setting. As of version 11.7, the password can’t be too similar to other personal information, must contain at least 10 characters, can’t be a commonly used password, and can’t be entirely numeric. As a workaround, an administrator may reset all passwords in Kiwi TCMS if they think a weak password may have been chosen. "
      }, {
        "lang" : "es",
        "value" : "Kiwi TCMS es un sistema de gestión de pruebas de código abierto. En la versión 11.6 y anteriores, cuando los usuarios registran nuevas cuentas y/o cambian contraseñas, no existe ninguna validación que les impida elegir una contraseña fácil de adivinar. Este problema se resuelve proporcionando valores predeterminados para la configuración `AUTH_PASSWORD_VALIDATORS`. A partir de la versión 11.7, la contraseña no puede ser muy similar a otra información personal, debe contener al menos 10 caracteres, no puede ser una contraseña de uso común y no puede ser completamente numérica. Como workaround, un administrador puede restablecer todas las contraseñas en Kiwi TCMS si cree que se puede haber elegido una contraseña débil."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kiwitcms:kiwi_tcms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.7",
            "matchCriteriaId" : "9D4D9099-B528-4D0B-81ED-F66A74604B2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kiwitcms/Kiwi/commit/3759fb68aed36315cdde9fc573b2fe7c11544985",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-496x-2jqf-hp7g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/32a873c8-f605-4aae-9272-d80985ef2b73",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/commit/3759fb68aed36315cdde9fc573b2fe7c11544985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-496x-2jqf-hp7g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/32a873c8-f605-4aae-9272-d80985ef2b73",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22452",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-02T20:15:10.163",
      "lastModified" : "2024-11-21T07:44:49.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of input names. Prior to commit a947d7c, no validation was performed to ensure that the channel IDs submitted actually belonged to the server being configured. Thus anyone who has access to the channel ID they wish to change settings for and the server settings panel for any server could change settings for the requested channel no matter which server it belonged to. Commit a947d7c resolves the issue and has been deployed to the official instance of the bot. The only workaround that exists is to disable the web config entirely by changing it to run on localhost. Note that a workaround is only necessary for those who run their own instance of the bot."
      }, {
        "lang" : "es",
        "value" : "kenny2automate es un robot de Discord. En la interfaz web para la configuración del servidor, los elementos del formulario se generaron con ID de canal de Discord como parte de los nombres de entrada. Antes de confirmar a947d7c, no se realizó ninguna validación para garantizar que los ID de canal enviados realmente pertenecieran al servidor que se estaba configurando. Por lo tanto, cualquiera que tenga acceso al ID del canal cuya configuración desea cambiar y al panel de configuración del servidor de cualquier servidor podría cambiar la configuración del canal solicitado sin importar a qué servidor pertenezca. La confirmación a947d7c resuelve el problema y se implementa en la instancia oficial del bot. La única solución que existe es deshabilitar completamente la configuración web cambiándola para que se ejecute en localhost. Tenga en cuenta que una solución alternativa solo es necesaria para quienes ejecutan su propia instancia del bot."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kenny2automate_project:kenny2automate:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "a947d7c",
            "matchCriteriaId" : "096ADE91-2218-4D24-9731-D0B8EA5432FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Kenny2github/kenny2automate/commit/a947d7ce408687b587c7e6dfd6026f7c4ee31ac2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kenny2github/kenny2automate/security/advisories/GHSA-73j8-xrcr-q6j7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kenny2github/kenny2automate/commit/a947d7ce408687b587c7e6dfd6026f7c4ee31ac2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kenny2github/kenny2automate/security/advisories/GHSA-73j8-xrcr-q6j7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0038",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-03T14:15:10.390",
      "lastModified" : "2026-04-08T19:17:59.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"Survey Maker – Best WordPress Survey Plugin\" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via survey answers in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts when submitting quizzes that will execute whenever a user accesses the submissions page."
      }, {
        "lang" : "es",
        "value" : "El complemento \"Survey Maker – Best WordPress Survey Plugin\" para WordPress es vulnerable a cross-site scripting almacenado a través de respuestas de encuestas en versiones hasta la 3.1.3 incluida debido a una desinfección de entrada y a un escape de salida insuficientes. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios al enviar cuestionarios que se ejecutarán cada vez que un usuario acceda a la página de envíos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ays-pro:survey_maker:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.1.3",
            "matchCriteriaId" : "CA38B862-DB58-4C45-A29B-39B0007C58A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/survey-maker/tags/3.1.4/public/partials/class-survey-maker-submissions-summary-shortcode.php?rev=2839688#L311",
        "source" : "security@wordfence.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a2a58fab-d4a3-4333-8495-e094ed85bb61?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/survey-maker/tags/3.1.4/public/partials/class-survey-maker-submissions-summary-shortcode.php?rev=2839688#L311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a2a58fab-d4a3-4333-8495-e094ed85bb61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0039",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-03T15:15:10.530",
      "lastModified" : "2023-11-07T03:59:29.950",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Duplicate. Please use CVE-2022-4060 instead."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22456",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-03T19:15:10.483",
      "lastModified" : "2024-11-21T07:44:50.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository exposed by an otherwise trusted ViewVC instance. The attack vector involves files with unsafe names (names that, when embedded into an HTML stream, would cause the browser to run unwanted code), which themselves can be challenging to create. Users should update to at least version 1.2.2 (if they are using a 1.2.x version of ViewVC) or 1.1.29 (if they are using a 1.1.x version).\n\nViewVC 1.0.x is no longer supported, so users of that release lineage should implement a workaround. Users can edit their ViewVC EZT view templates to manually HTML-escape changed paths during rendering. Locate in your template set's `revision.ezt` file references to those changed paths, and wrap them with `[format \"html\"]` and `[end]`. For most users, that means that references to `[changes.path]` will become `[format \"html\"][changes.path][end]`. (This workaround should be reverted after upgrading to a patched version of ViewVC, else changed path names will be doubly escaped.)"
      }, {
        "lang" : "es",
        "value" : "ViewVC, una interfaz de navegador para repositorios de control de versiones de CVS y Subversion, es una vulnerabilidad de cross-site scripting que afecta a versiones anteriores a 1.2.2 y 1.1.29. El impacto de esta vulnerabilidad se ve mitigado por la necesidad de que un atacante tenga privilegios de confirmación en un repositorio de Subversion expuesto por una instancia de ViewVC que, de otro modo, sería de confianza. El vector de ataque implica archivos con nombres no seguros (nombres que, al incrustarse en una secuencia HTML, harían que el navegador ejecutara código no deseado), que pueden ser difíciles de crear. Los usuarios deben actualizar al menos a la versión 1.2.2 (si están usando una versión 1.2.x de ViewVC) o 1.1.29 (si están usando una versión 1.1.x). ViewVC 1.0.x ya no es compatible, por lo que los usuarios de esa línea de versiones deben implementar un workaround. Los usuarios pueden editar sus plantillas de vista EZT de ViewVC para escapar manualmente mediante HTML las rutas modificadas durante la representación. Localice en el archivo `revision.ezt` de su conjunto de plantillas las referencias a esas rutas modificadas y enciérrelas con `[format \"html\"]` y `[end]`. Para la mayoría de los usuarios, eso significa que las referencias a `[changes.path]` se convertirán en `[format \"html\"][changes.path][end]`. (Este workaround se debe revertir después de actualizar a una versión parcheada de ViewVC, de lo contrario, los nombres de las rutas modificadas se escaparán dos veces)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewvc:viewvc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.29",
            "matchCriteriaId" : "EB51E00C-7F8B-426A-80EF-C57BDE6DE88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewvc:viewvc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "1.2.2",
            "matchCriteriaId" : "227BB175-E196-488C-9E25-3F39111283E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/viewvc/viewvc/issues/311",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/releases/tag/1.1.29",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/releases/tag/1.2.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/security/advisories/GHSA-j4mx-f97j-gc5g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/issues/311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/releases/tag/1.1.29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/releases/tag/1.2.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/security/advisories/GHSA-j4mx-f97j-gc5g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0046",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-04T12:15:08.613",
      "lastModified" : "2024-11-21T07:36:27.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch."
      }, {
        "lang" : "es",
        "value" : "Restricción inadecuada de nombres de archivos y otros recursos en el repositorio de GitHub lirantal/daloradius antes de la rama maestra."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-641"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daloradius:daloradius:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-01-04",
            "matchCriteriaId" : "7DD76224-4B00-4D98-80C7-66C46785EB22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lirantal/daloradius/commit/2013c2d1231e99dac918247b69b198ded1f30a1c",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/2214dc41-f283-4342-95b1-34a2f4fea943",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lirantal/daloradius/commit/2013c2d1231e99dac918247b69b198ded1f30a1c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/2214dc41-f283-4342-95b1-34a2f4fea943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0048",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-04T14:15:10.117",
      "lastModified" : "2024-11-21T07:36:27.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code Injection in GitHub repository lirantal/daloradius prior to master-branch."
      }, {
        "lang" : "es",
        "value" : "Inyección de código en el repositorio de GitHub lirantal/daloradius  de la rama maestra."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daloradius:daloradius:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-01-04",
            "matchCriteriaId" : "7DD76224-4B00-4D98-80C7-66C46785EB22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lirantal/daloradius/commit/3650eea7277a5c278063214a5b71dbd7d77fc5aa",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/57abd666-4b9c-4f59-825d-1ec832153e79",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lirantal/daloradius/commit/3650eea7277a5c278063214a5b71dbd7d77fc5aa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/57abd666-4b9c-4f59-825d-1ec832153e79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22457",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-04T15:15:09.350",
      "lastModified" : "2024-11-21T07:44:50.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3,t he `CKEditor.HTMLConverter` document lacked a protection against Cross-Site Request Forgery (CSRF), allowing to execute macros with the rights of the current user. If a privileged user with programming rights was tricked into executing a GET request to this document with certain parameters (e.g., via an image with a corresponding URL embedded in a comment or via a redirect), this would allow arbitrary remote code execution and the attacker could gain rights, access private information or impact the availability of the wiki. The issue has been patched in the CKEditor Integration version 1.64.3. This has also been patched in the version of the CKEditor integration that is bundled starting with XWiki 14.6 RC1. There are no known workarounds for this other than upgrading the CKEditor integration to a fixed version."
      }, {
        "lang" : "es",
        "value" : "CKEditor Integration UI agrega soporte para editar páginas wiki usando CKEditor. Antes de las versiones 1.64.3, el documento `CKEditor.HTMLConverter` carecía de protección contra Cross Site Request Forgery (CSRF), lo que permitía ejecutar macros con los derechos del usuario actual. Si se engañara a un usuario privilegiado para que ejecutara una solicitud GET a este documento con ciertos parámetros (por ejemplo, a través de una imagen con una URL correspondiente incrustada en un comentario o mediante una redirección), esto permitiría la ejecución remota arbitraria de código y el atacante podría obtener derechos, acceder a información privada o afectar la disponibilidad de la wiki. El problema se solucionó en la versión 1.64.3 de CKEditor Integration. Esto también se ha parcheado en la versión de CKEditor Integration que se incluye a partir de XWiki 14.6 RC1. No existen workarounds para esto aparte de actualizar CKEditor Integration a una versión fija."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:ckeditor_integration:*:*:*:*:*:xwiki:*:*",
            "versionEndExcluding" : "1.64.3",
            "matchCriteriaId" : "EBD1A4D4-065A-4F7B-B31F-15383CCC6BD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki-contrib/application-ckeditor/commit/6b1053164386aefc526df7512bc664918aa6849b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xwiki-contrib/application-ckeditor/security/advisories/GHSA-6mjp-2rm6-9g85",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/CKEDITOR-475",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki-contrib/application-ckeditor/commit/6b1053164386aefc526df7512bc664918aa6849b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xwiki-contrib/application-ckeditor/security/advisories/GHSA-6mjp-2rm6-9g85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/CKEDITOR-475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22460",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-04T15:15:09.437",
      "lastModified" : "2024-11-21T07:44:50.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for basic operations on IPLD objects. Encoding data which contains a Bytes kind Node will pass a Bytes token to the JSON encoder which will panic as it doesn't expect to receive Bytes tokens. Such an encode should be treated as an error, as plain JSON should not be able to encode Bytes. This only impacts uses of the `json` codec. `dag-json` is not impacted. Use of `json` as a decoder is not impacted. This issue is fixed in v0.19.0. As a workaround, one may prefer the `dag-json` codec, which has the ability to encode bytes."
      }, {
        "lang" : "es",
        "value" : "go-ipld-prime es una implementación de las interfaces de especificaciones de datos vinculados interplanetarios (IPLD), que incluye implementaciones de códec de IPLD para CBOR y JSON y herramientas para operaciones básicas en objetos IPLD. La codificación de datos que contiene un nodo de tipo Bytes pasará un token de Bytes al codificador JSON, lo que entrará en pánico porque no espera recibir tokens de Bytes. Dicha codificación debe tratarse como un error, ya que JSON simple no debería poder codificar bytes. Esto solo afecta los usos del códec \"json\". `dag-json` no se ve afectado. El uso de `json` como decodificador no se ve afectado. Este problema se solucionó en v0.19.0. Como workaround, se puede preferir el códec `dag-json`, que tiene la capacidad de codificar bytes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:protocol:go-ipld-prime:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "0.19.0",
            "matchCriteriaId" : "75FFBC2F-60A8-4C3E-8F3D-EEBA466274D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ipld/go-ipld-prime/pull/472",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ipld/go-ipld-prime/releases/tag/v0.19.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ipld/go-ipld-prime/security/advisories/GHSA-c653-6hhg-9x92",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ipld/go-ipld-prime/pull/472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ipld/go-ipld-prime/releases/tag/v0.19.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ipld/go-ipld-prime/security/advisories/GHSA-c653-6hhg-9x92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22461",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-04T15:15:09.510",
      "lastModified" : "2024-11-21T07:44:51.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The `sanitize-svg` package, a small SVG sanitizer to prevent cross-site scripting attacks, uses a deny-list-pattern to sanitize SVGs to prevent XSS. In doing so, literal `<script>`-tags and on-event handlers were detected in versions prior to 0.4.0. As a result, downstream software that relies on `sanitize-svg` and expects resulting SVGs to be safe, may be vulnerable to cross-site scripting. This vulnerability was addressed in v0.4.0. There are no known workarounds\n\n"
      }, {
        "lang" : "es",
        "value" : "El paquete `sanitize-svg`, un pequeño \"sanitizador\" de SVG para evitar ataques de cross-site scripting, utiliza un patrón de lista de denegación para desinfectar los SVG y evitar XSS. Al hacerlo, se detectaron etiquetas literales `"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sanitize-svg_project:sanitize-svg:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.4.0",
            "matchCriteriaId" : "F34D2E17-9B60-4263-A693-08F3930F8B7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mattkrick/sanitize-svg/commit/b107e453ede7b58adcccae74a3e474c012eec85d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mattkrick/sanitize-svg/security/advisories/GHSA-h857-2g56-468g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mattkrick/sanitize-svg/commit/b107e453ede7b58adcccae74a3e474c012eec85d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mattkrick/sanitize-svg/security/advisories/GHSA-h857-2g56-468g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0049",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-04T16:15:09.047",
      "lastModified" : "2025-01-17T20:15:26.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143."
      }, {
        "lang" : "es",
        "value" : "Lectura fuera de los límites en el repositorio de GitHub vim/vim, afectando a las versiones anteriores a la 9.0.1143."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.1143",
            "matchCriteriaId" : "FF2F5C04-F7F7-43E5-97E8-687E740139C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/17",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/vim/vim/commit/7b17eb4b063a234376c1ec909ee293e42cff290c",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/5e6f325c-ba54-4bf0-b050-dca048fd3fd9",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3Y752EAVACVC5XY2TMGGOAIU25VQRPDW/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T33LLWHLH63XDCO5OME7NWN63RA4U5HF/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-16",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://support.apple.com/kb/HT213670",
        "source" : "security@huntr.dev"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/vim/vim/commit/7b17eb4b063a234376c1ec909ee293e42cff290c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/5e6f325c-ba54-4bf0-b050-dca048fd3fd9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3Y752EAVACVC5XY2TMGGOAIU25VQRPDW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T33LLWHLH63XDCO5OME7NWN63RA4U5HF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20250117-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22463",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-04T16:15:09.143",
      "lastModified" : "2024-11-21T07:44:51.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the administrator account of any online project. Furthermore, they may use the administrator to take over the k8s cluster of the target enterprise. `session.go`, the use of hard-coded JwtSigKey, allows an attacker to use this value to forge jwt tokens arbitrarily. The JwtSigKey is confidential and should not be hard-coded in the code. The vulnerability has been fixed in 1.6.3. In the patch, JWT key is specified in app.yml. If the user leaves it blank, a random key will be used. There are no workarounds aside from upgrading."
      }, {
        "lang" : "es",
        "value" : "KubePi es un panel de k8s. La función de autenticación jwt de KubePi hasta la versión 1.6.2 utiliza Jwtsigkeys codificadas, lo que da como resultado las mismas Jwtsigkeys para todos los proyectos en línea. Esto significa que un atacante puede falsificar cualquier token jwt para hacerse cargo de la cuenta de administrador de cualquier proyecto en línea. Además, pueden utilizar el administrador para hacerse cargo del clúster k8s de la empresa de destino. `session.go`, el uso de JwtSigKey codificado, permite a un atacante usar este valor para falsificar tokens jwt de forma arbitraria. La JwtSigKey es confidencial y no debe estar codificada en el código. La vulnerabilidad se ha solucionado en 1.6.3. En el parche, la clave JWT se especifica en app.yml. Si el usuario lo deja en blanco, se utilizará una clave aleatoria. No existen workarounds aparte de la actualización."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fit2cloud:kubepi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.3",
            "matchCriteriaId" : "433EBCCD-AD47-4115-8C3A-026360EBBBAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/KubeOperator/KubePi/blob/da784f5532ea2495b92708cacb32703bff3a45a3/internal/api/v1/session/session.go#L35",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubePi/commit/3be58b8df5bc05d2343c30371dd5fcf6a9fbbf8b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubePi/releases/tag/v1.6.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubePi/security/advisories/GHSA-vjhf-8vqx-vqpq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubePi/blob/da784f5532ea2495b92708cacb32703bff3a45a3/internal/api/v1/session/session.go#L35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubePi/commit/3be58b8df5bc05d2343c30371dd5fcf6a9fbbf8b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubePi/releases/tag/v1.6.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubePi/security/advisories/GHSA-vjhf-8vqx-vqpq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22464",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-04T16:15:09.237",
      "lastModified" : "2024-11-21T07:44:51.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ViewVC is a browser interface for CVS and Subversion version control repositories. Versions prior to 1.2.3 and 1.1.30 are vulnerable to cross-site scripting. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository exposed by an otherwise trusted ViewVC instance. The attack vector involves files with unsafe names (names that, when embedded into an HTML stream, would cause the browser to run unwanted code), which themselves can be challenging to create. Users should update to at least version 1.2.3 (if they are using a 1.2.x version of ViewVC) or 1.1.30 (if they are using a 1.1.x version).\n\nViewVC 1.0.x is no longer supported, so users of that release lineage should implement one of the following workarounds. Users can edit their ViewVC EZT view templates to manually HTML-escape changed path \"copyfrom paths\" during rendering. Locate in your template set's `revision.ezt` file references to those changed paths, and wrap them with `[format \"html\"]` and `[end]`.  For most users, that means that references to `[changes.copy_path]` will become `[format \"html\"][changes.copy_path][end]`. (This workaround should be reverted after upgrading to a patched version of ViewVC, else \"copyfrom path\" names will be doubly escaped.)\n"
      }, {
        "lang" : "es",
        "value" : "ViewVC es una interfaz de navegador para repositorios de control de versiones CVS y Subversion. Las versiones anteriores a 1.2.3 y 1.1.30 son vulnerables a cross-site scripting. El impacto de esta vulnerabilidad se ve mitigado por la necesidad de que un atacante tenga privilegios de confirmación en un repositorio de Subversion expuesto por una instancia de ViewVC que de otro modo sería confiable. El vector de ataque involucra archivos con nombres no seguros (nombres que, cuando se incrustan en una secuencia HTML, harían que el navegador ejecute código no deseado), que a su vez pueden ser difíciles de crear. Los usuarios deben actualizar al menos a la versión 1.2.3 (si usan una versión 1.2.x de ViewVC) o 1.1.30 (si usan una versión 1.1.x). ViewVC 1.0.x ya no es compatible, por lo que los usuarios de ese linaje de versiones deben implementar una de las siguientes soluciones. Los usuarios pueden editar sus plantillas de vista ViewVC EZT para escapar manualmente de la ruta cambiada en HTML \"copiar desde rutas\" durante el renderizado. Ubique en el archivo `revision.ezt` de su conjunto de plantillas las referencias a esas rutas modificadas y envuélvalas con `[formato \"html\"]` y `[end]`. Para la mayoría de los usuarios, eso significa que las referencias a `[changes.copy_path]` se convertirán en `[format \"html\"][changes.copy_path][end]`. (Este workaround debe revertirse después de actualizar a una versión parcheada de ViewVC; de lo contrario, los nombres de \"ruta de copia\" aparecerán doblemente como escape)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewvc:viewvc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.30",
            "matchCriteriaId" : "FC8C4A66-8160-4D22-B5D3-F7E59305B977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:viewvc:viewvc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "DF380062-387A-470F-9E82-B9323FF0E737"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/viewvc/viewvc/issues/311",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/releases/tag/1.1.30",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/releases/tag/1.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/security/advisories/GHSA-jvpj-293q-q53h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/issues/311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/releases/tag/1.1.30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/releases/tag/1.2.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viewvc/viewvc/security/advisories/GHSA-jvpj-293q-q53h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22465",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-04T16:15:09.323",
      "lastModified" : "2024-11-21T07:44:51.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Http4s is a Scala interface for HTTP services. Starting with version 0.1.0 and prior to versions 0.21.34, 0.22.15, 0.23.17, and 1.0.0-M38, the `User-Agent` and `Server` header parsers are susceptible to a fatal error on certain inputs.  In http4s, modeled headers are lazily parsed, so this only applies to services that explicitly request these typed headers. Fixes are released in 0.21.34, 0.22.15, 0.23.17, and 1.0.0-M38. As a workaround, use the weakly typed header interface."
      }, {
        "lang" : "es",
        "value" : "Http4s es una interfaz de Scala para servicios HTTP. A partir de la versión 0.1.0 y anteriores a las versiones 0.21.34, 0.22.15, 0.23.17 y 1.0.0-M38, los analizadores de encabezado `User-Agent` y `Server` son susceptibles a un error fatal en ciertas entradas. En http4s, los encabezados modelados se analizan de forma diferida, por lo que esto solo se aplica a los servicios que solicitan explícitamente estos encabezados escritos. Las correcciones se publicaron en 0.21.34, 0.22.15, 0.23.17 y 1.0.0-M38. Como workaround, utilice la interfaz de encabezado con tipos débiles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.1.0",
            "versionEndExcluding" : "0.21.34",
            "matchCriteriaId" : "185B0C49-B7B4-436A-9577-3276FCE1181F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.22.0",
            "versionEndExcluding" : "0.22.15",
            "matchCriteriaId" : "AF811C59-F1EA-49A0-A335-D395AC17EC76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.23.0",
            "versionEndExcluding" : "0.23.17",
            "matchCriteriaId" : "79816BBF-3E40-4E20-8138-281DA5CF65E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "65C497F9-281C-4565-BD36-B6B4D7E6F8BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCFC3E5-7530-4AAA-A2C7-36DC307B613B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "D03CBFE3-0B31-4D7C-BC5D-61DCD3C2C486"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "76F8BC53-544C-4285-8D9B-CB91AD080048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "778947CA-20BA-469F-87E1-97D8713ACC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B02828-1E40-49BE-8367-10296625C696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "A569F32F-3C8C-4F8F-B0BC-6ADC993596A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "525DBF4B-F574-459D-9CE2-6AF597ABAE10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "FD05B15E-1E4F-43EA-B21A-3B96A77814D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone18:*:*:*:*:*:*",
            "matchCriteriaId" : "65C79F52-F05F-4F0A-AC27-393197B9EF00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone19:*:*:*:*:*:*",
            "matchCriteriaId" : "A426B4C0-643A-492F-B7FB-725549F613F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "D95E231C-3D13-45FC-AF9A-CB8CF1FFC983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone20:*:*:*:*:*:*",
            "matchCriteriaId" : "CF973F58-0AC7-4B58-A2CF-654133CE7F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone21:*:*:*:*:*:*",
            "matchCriteriaId" : "35C40331-C96C-477C-B6BD-D5506E612DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone22:*:*:*:*:*:*",
            "matchCriteriaId" : "615BC827-3E0F-4C1E-8FD2-B59FF31F2D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone23:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFB35FD-4D08-4895-B1B6-FC03BCB3EB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone24:*:*:*:*:*:*",
            "matchCriteriaId" : "97F74D04-031E-47D4-BA57-DBE9C74CE256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone25:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDC2E12-DE86-4A82-BD2F-C18F715CA673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone26:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C18467-5FD0-4DCC-8B75-979C03BFF1C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone27:*:*:*:*:*:*",
            "matchCriteriaId" : "6724B3CF-A393-469B-BA80-CED8AB98358A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone28:*:*:*:*:*:*",
            "matchCriteriaId" : "804EF10D-46A9-49C0-B1C4-74B832115662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone29:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE365D6-17C4-4E82-8F2B-1DA18CC8382F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE093D65-1B3A-4A4A-BC76-05DEF9529712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone30:*:*:*:*:*:*",
            "matchCriteriaId" : "078E27D3-AD80-44E8-A97C-328AEB4E2929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone31:*:*:*:*:*:*",
            "matchCriteriaId" : "548DB4B7-872D-4A7E-9DA7-D0BF15BDE969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone32:*:*:*:*:*:*",
            "matchCriteriaId" : "07037A73-F463-4F8B-8F8B-AF513B31DA21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone33:*:*:*:*:*:*",
            "matchCriteriaId" : "801D2731-BD6D-4CD9-B69F-75DC1A0FE3CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone34:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2C32F3-93A3-4A2F-9A9A-DC06056EDC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone35:*:*:*:*:*:*",
            "matchCriteriaId" : "59C3ECBA-47D1-4A9B-8193-8033BC27CC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone36:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7AF9D4-4548-4D25-84BC-54C525179342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone37:*:*:*:*:*:*",
            "matchCriteriaId" : "0D884D1D-F74D-406F-A363-C008097C997E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3CA618-148D-4F97-9913-316DDDD97838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "02FA538C-9D8A-49D5-8268-1A2C3E96B89B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "D18A3ABC-5C47-45BF-978C-5BB17787DCFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE1CF51-E61A-418A-AB22-9D7A6D690BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "29A70AAA-B77A-4291-A700-C910362DB8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:1.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "9F8F3C38-57AB-4CBC-8959-7FF51CBA7907"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/http4s/http4s/security/advisories/GHSA-54w6-vxfh-fw7f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/http4s/http4s/security/advisories/GHSA-54w6-vxfh-fw7f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0051",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-04T18:15:09.287",
      "lastModified" : "2024-11-21T07:36:27.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer de almacenamiento dinámico en el repositorio de GitHub vim/vim anterior a 9.0.1144."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.1144",
            "matchCriteriaId" : "0350CD80-58F9-4C55-A48A-1F46BBB22DEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/17",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/vim/vim/commit/c32949b0779106ed5710ae3bffc5053e49083ab4",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/1c8686db-baa6-42dc-ba45-aed322802de9",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-16",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://support.apple.com/kb/HT213670",
        "source" : "security@huntr.dev"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/vim/vim/commit/c32949b0779106ed5710ae3bffc5053e49083ab4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/1c8686db-baa6-42dc-ba45-aed322802de9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0054",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-04T19:15:09.573",
      "lastModified" : "2025-11-03T21:15:55.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145."
      }, {
        "lang" : "es",
        "value" : "Fuera de los límites Escritura en el repositorio de GitHub vim/vim anterior a 9.0.1145."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.1145",
            "matchCriteriaId" : "7A64F3DA-66B5-4F73-A776-7457E9CBCE52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/17",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/vim/vim/commit/3ac1d97a1d9353490493d30088256360435f7731",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/b289ee0f-fd16-4147-bd01-c6289c45e49d",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-16",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://support.apple.com/kb/HT213670",
        "source" : "security@huntr.dev"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/vim/vim/commit/3ac1d97a1d9353490493d30088256360435f7731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/b289ee0f-fd16-4147-bd01-c6289c45e49d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0055",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-04T22:15:09.180",
      "lastModified" : "2024-11-21T07:36:28.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32."
      }, {
        "lang" : "es",
        "value" : "Cookie confidencial en sesión HTTPS sin atributo 'seguro' en el repositorio de GitHub pyload/pyload anterior a 0.5.0b3.dev32."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-614"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyload:pyload:0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A06D79-6D64-41FB-9040-17E9630DF4E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pyload/pyload/commit/7b53b8d43c2c072b457dcd19c8a09bcfc3721703",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/ed88e240-99ff-48a1-bf32-8e1ef5f13cce",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pyload/pyload/commit/7b53b8d43c2c072b457dcd19c8a09bcfc3721703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/ed88e240-99ff-48a1-bf32-8e1ef5f13cce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22466",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-04T22:15:09.267",
      "lastModified" : "2024-11-21T07:44:51.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tokio is a runtime for writing applications with Rust. Starting with version 1.7.0 and prior to versions 1.18.4, 1.20.3, and 1.23.1, when configuring a Windows named pipe server, setting `pipe_mode` will reset `reject_remote_clients` to `false`. If the application has previously configured `reject_remote_clients` to `true`, this effectively undoes the configuration. Remote clients may only access the named pipe if the named pipe's associated path is accessible via a publicly shared folder (SMB). Versions 1.23.1, 1.20.3, and 1.18.4 have been patched. The fix will also be present in all releases starting from version 1.24.0. Named pipes were introduced to Tokio in version 1.7.0, so releases older than 1.7.0 are not affected. As a workaround, ensure that `pipe_mode` is set first after initializing a `ServerOptions`."
      }, {
        "lang" : "es",
        "value" : "Tokio es un runtime para escribir aplicaciones con Rust. A partir de la versión 1.7.0 y anteriores a las versiones 1.18.4, 1.20.3 y 1.23.1, al configurar un servidor de canalización con nombre de Windows, configurar `pipe_mode` restablecerá `reject_remote_clients` a `false`. Si la aplicación ha configurado previamente `reject_remote_clients` en `true`, esto efectivamente deshace la configuración. Los clientes remotos solo pueden acceder a la canalización con nombre si se puede acceder a la ruta asociada a la canalización con nombre a través de una carpeta compartida públicamente (SMB). Se han parcheado las versiones 1.23.1, 1.20.3 y 1.18.4. La solución también estará presente en todas las versiones a partir de la versión 1.24.0. Las canalizaciones con nombre se introdujeron en Tokio en la versión 1.7.0, por lo que las versiones anteriores a 1.7.0 no se ven afectadas. Como workaround, asegúrese de que `pipe_mode` esté configurado primero después de inicializar `ServerOptions`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tokio:tokio:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.18.4",
            "matchCriteriaId" : "443488FE-C04F-4785-A677-914F87E2C6FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tokio:tokio:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "1.19.0",
            "versionEndExcluding" : "1.20.3",
            "matchCriteriaId" : "ECF2500F-3709-4738-BA16-38406FB5BB4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tokio:tokio:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "1.21.0",
            "versionEndExcluding" : "1.23.1",
            "matchCriteriaId" : "A4BA373F-B995-4308-9583-2E9B4546B16C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tokio-rs/tokio/pull/5336",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tokio-rs/tokio/releases/tag/tokio-1.23.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tokio-rs/tokio/security/advisories/GHSA-7rrj-xr53-82p7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://learn.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-createnamedpipea#pipe_reject_remote_clients",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tokio-rs/tokio/pull/5336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tokio-rs/tokio/releases/tag/tokio-1.23.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tokio-rs/tokio/security/advisories/GHSA-7rrj-xr53-82p7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://learn.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-createnamedpipea#pipe_reject_remote_clients",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22467",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-04T22:15:09.357",
      "lastModified" : "2024-11-21T07:44:51.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Luxon is a library for working with dates and times in JavaScript. On the 1.x branch prior to 1.38.1, the 2.x branch prior to 2.5.2, and the 3.x branch on 3.2.1, Luxon's `DateTime.fromRFC2822() has quadratic (N^2) complexity on some specific inputs. This causes a noticeable slowdown for inputs with lengths above 10k characters. Users providing untrusted data to this method are therefore vulnerable to (Re)DoS attacks. This issue also appears in Moment as CVE-2022-31129. Versions 1.38.1, 2.5.2, and 3.2.1 contain patches for this issue. As a workaround, limit the length of the input."
      }, {
        "lang" : "es",
        "value" : "Luxon es una librería para trabajar con fechas y horas en JavaScript. En la rama 1.x anterior a 1.38.1, la rama 2.x anterior a 2.5.2 y la rama 3.x en 3.2.1, `DateTime.fromRFC2822() de Luxon tiene complejidad cuadrática (N^2) en algunas entradas específicas. Esto provoca una notable desaceleración en las entradas con longitudes superiores a 10&#xa0;000 caracteres. Por lo tanto, los usuarios que proporcionan datos no confiables a este método son vulnerables a ataques (Re)DoS. Este problema también aparece en Moment como CVE-2022-31129. Las versiones 1.38.1, 2.5.2 y 3.2.1 contienen parches para este problema. Como workaround, limite la longitud de la entrada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:momentjs:luxon:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "D11AA49A-C83C-4BE7-8F35-A0B653A4600C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:momentjs:luxon:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.5.2",
            "matchCriteriaId" : "E5B6E3EF-4FF5-4BD3-9DE6-D81C49DB16AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:momentjs:luxon:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.2.1",
            "matchCriteriaId" : "D29FCF30-14B9-4943-9164-E395080794BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/moment/luxon/commit/5ab3bf64a10da929a437629cdb2f059bb83212bf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moment/luxon/security/advisories/GHSA-3xq5-wjfh-ppjc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moment/moment/pull/6015#issuecomment-1152961973",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/44I3WAJKYXDLOVYRGMHAUXMIV4SPFXDZ/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LIVOASKBQH7FEUI5RWM3SOHR6VK7ZZR/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/moment/luxon/commit/5ab3bf64a10da929a437629cdb2f059bb83212bf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moment/luxon/security/advisories/GHSA-3xq5-wjfh-ppjc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moment/moment/pull/6015#issuecomment-1152961973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/44I3WAJKYXDLOVYRGMHAUXMIV4SPFXDZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4LIVOASKBQH7FEUI5RWM3SOHR6VK7ZZR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0057",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-05T01:15:09.123",
      "lastModified" : "2024-11-21T07:36:28.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33."
      }, {
        "lang" : "es",
        "value" : "Restricción inadecuada de capas o marcos de interfaz de usuario renderizados en pyload/pyload del repositorio de GitHub antes de 0.5.0b3.dev33."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyload:pyload:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-01-05",
            "matchCriteriaId" : "E7EA254D-412B-4CE1-B078-ADC5AD328A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyload-ng_project:pyload-ng:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.5.0b3.dev33",
            "matchCriteriaId" : "BB4755AB-9AEB-4DC2-9EC8-C55756DC7D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pyload/pyload/commit/bd2a31b7de54570b919aa1581d486e6ee18c0f64",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/12b64f91-d048-490c-94b0-37514b6d694d",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pyload/pyload/commit/bd2a31b7de54570b919aa1581d486e6ee18c0f64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/12b64f91-d048-490c-94b0-37514b6d694d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-05T02:15:07.980",
      "lastModified" : "2025-04-07T19:15:49.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and the resulting security updates, and the source code describes \"the scenario where a site may not receive enough visits to execute scheduled tasks in a timely manner,\" but neither the installation guide nor the security guide mentions this default behavior, or alerts the user about security risks on installations with very few visits."
      }, {
        "lang" : "es",
        "value" : "WordPress hasta 6.1.1 depende de visitas impredecibles de clientes para provocar la ejecución de wp-cron.php y las actualizaciones de seguridad resultantes, y el código fuente describe \"el escenario en el que un sitio puede no recibir suficientes visitas para ejecutar las tareas programadas de manera oportuna\" pero ni la guía de instalación ni la guía de seguridad mencionan este comportamiento predeterminado, ni alertan al usuario sobre riesgos de seguridad en instalaciones con muy pocas visitas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.1",
            "matchCriteriaId" : "D5D6AAC8-2C73-4F36-B992-3EB9B31359A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.wordpress.org/plugins/cron/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/blob/dca7b5204b5fea54e6d1774689777b359a9222ab/wp-cron.php#L5-L8",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/%40thecpanelguy/the-nightmare-that-is-wpcron-php-ae31c1d3ae30",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://patchstack.com/articles/solving-unpredictable-wp-cron-problems-addressing-cve-2023-22622/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/about/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/support/article/how-to-install-wordpress/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/plugins/was/113449",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://developer.wordpress.org/plugins/cron/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/WordPress/blob/dca7b5204b5fea54e6d1774689777b359a9222ab/wp-cron.php#L5-L8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/%40thecpanelguy/the-nightmare-that-is-wpcron-php-ae31c1d3ae30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://patchstack.com/articles/solving-unpredictable-wp-cron-problems-addressing-cve-2023-22622/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/about/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wordpress.org/support/article/how-to-install-wordpress/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/plugins/was/113449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-05T08:15:08.947",
      "lastModified" : "2025-04-07T19:15:49.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. (Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server.)"
      }, {
        "lang" : "es",
        "value" : "PgHero anterior a 3.1.0 permite la divulgación de información a través de EXPLAIN porque los resultados de la consulta pueden aparecer en un mensaje de error. (Dependiendo de los privilegios del usuario de la base de datos, esto puede ser solo información de la base de datos o puede ser información del contenido del archivo en el servidor de la base de datos)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pghero_project:pghero:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "0.1.1",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "9CC3B8EB-0B8D-4471-BD21-5EB23EEB2DE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ankane/pghero/issues/439",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ankane/pghero/issues/439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0077",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2023-01-05T10:15:10.147",
      "lastModified" : "2024-11-21T07:36:30.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow or wraparound vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to overflow buffers via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de enteros o envoltura en el componente CGI en Synology Router Manager (SRM) anterior a 1.2.5-8227-6 y 1.3.1-9346-3 permite a atacantes remotos desbordar búfers a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2",
            "versionEndExcluding" : "1.2.5-8227-6",
            "matchCriteriaId" : "9701AC9D-05E6-4EAA-BD8D-E7993E92CFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3",
            "versionEndExcluding" : "1.3.1-9346-3",
            "matchCriteriaId" : "5BE8A994-AE91-473C-9E84-42F72585700F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/en-global/security/advisory/Synology_SA_22_25",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/en-global/security/advisory/Synology_SA_22_25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0086",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-05T17:15:09.543",
      "lastModified" : "2026-04-08T18:17:40.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JetWidgets for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.12. This is due to missing nonce validation on the save() function. This makes it possible for unauthenticated attackers to to modify the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.  This can be used to enable SVG uploads that could make Cross-Site Scripting possible."
      }, {
        "lang" : "es",
        "value" : "El complemento JetWidgets for Elementor para WordPress es vulnerable a Cross-Site Request Forgery  en versiones hasta la 1.0.12 incluida. Esto se debe a que falta la validación nonce en la función save(). Esto hace posible que atacantes no autenticados modifiquen la configuración del complemento mediante una solicitud falsificada, siempre que puedan engañar al administrador del sitio para que realice una acción como hacer clic en un enlace. Esto se puede utilizar para habilitar cargas SVG que podrían hacer posible Cross-Site Scripting."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crocoblock:jetwidgets_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.12",
            "matchCriteriaId" : "B2180FB6-90BC-43F6-AEE4-6911D2C48B6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/jetwidgets-for-elementor/trunk/includes/class-jet-widgets-settings.php#L149",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2846332%40jetwidgets-for-elementor&new=2846332%40jetwidgets-for-elementor&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8de3d3c7-bde2-4455-8d60-20307f0a53ee?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/jetwidgets-for-elementor/trunk/includes/class-jet-widgets-settings.php#L149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8de3d3c7-bde2-4455-8d60-20307f0a53ee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0087",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-05T19:15:09.600",
      "lastModified" : "2026-04-08T18:17:41.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Swifty Page Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘spm_plugin_options_page_tree_max_width’ parameter in versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El complemento Swifty Page Manager para WordPress es vulnerable a cross-site scripting almacenado a través del parámetro 'spm_plugin_options_page_tree_max_width' en versiones hasta la 3.0.1 incluida debido a una limpieza de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a las instalaciones multisitio y a las instalaciones en las que se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swifty_page_manager_project:swifty_page_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "7621748C-FA78-4996-B60D-7C5E2D6C479A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/swifty-page-manager/trunk/view/page_tree.php?rev=1555394#L174",
        "source" : "security@wordfence.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8550a405-9fa2-41a3-b556-05ff9f577ce4?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/swifty-page-manager/trunk/view/page_tree.php?rev=1555394#L174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8550a405-9fa2-41a3-b556-05ff9f577ce4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0088",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-05T19:15:09.687",
      "lastModified" : "2026-04-08T18:17:41.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Swifty Page Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on several AJAX actions handling page creation and deletion among other things. This makes it possible for unauthenticated attackers to invoke those functions, via forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El complemento Swifty Page Manager para WordPress es vulnerable a Cross-Site Request Forgery en versiones hasta la 3.0.1 incluida. Esto se debe a una validación nonce faltante o incorrecta en varias acciones AJAX que manejan la creación y eliminación de páginas, entre otras cosas. Esto hace posible que atacantes no autenticados invoquen esas funciones; a través de una solicitud falsificada, pueden engañar al administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swifty_page_manager_project:swifty_page_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "7621748C-FA78-4996-B60D-7C5E2D6C479A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/swifty-page-manager/trunk/swifty-page-manager.php?rev=1555394#L994",
        "source" : "security@wordfence.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/75b8f71d-9f75-4b42-ac5f-c6ffb476aae4?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/swifty-page-manager/trunk/swifty-page-manager.php?rev=1555394#L994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/75b8f71d-9f75-4b42-ac5f-c6ffb476aae4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22453",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-05T20:15:18.743",
      "lastModified" : "2024-11-21T07:44:50.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` and `tests-passed` branches, the number of times a user posted in an arbitrary topic is exposed to unauthorized users through the `/u/username.json` endpoint. The issue is patched in version 2.8.14 and 3.0.0.beta16. There is no known workaround."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de fuentes de opciones. Antes de la versión 2.8.14 en la rama \"estable\" y la versión 3.0.0.beta16 en las ramas \"beta\" y \"pruebas aprobadas\", la cantidad de veces que un usuario publicaba en un tema arbitrario estaba expuesto a usuarios no autorizados a través de la Punto final `/u/nombredeusuario.json`. El problema se solucionó en las versiones 2.8.14 y 3.0.0.beta16. No se conoce ningún workaround."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "2.8.14",
            "matchCriteriaId" : "B45CE307-9D3B-4733-BEF2-862A06BE3B8E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BF272688-1B08-4ABC-8002-66B59690F9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "A29A2465-B21D-4147-8292-DCF864D385B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBC3511E-3D68-42E2-B521-966FB429B640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "EC8B99C2-E267-4EC2-AF09-C9AD1EEE76D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "F21A22EE-081A-4489-A7F8-22E2DBC5B00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E6C8FB3-4B19-4510-B9A8-BCF9ED8ED7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6b:*:*:beta:*:*:*",
            "matchCriteriaId" : "5B827291-6483-4BB7-AF76-530B669B3ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "551E70ED-34FF-4989-91C9-6312DE4AB4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "204FB99A-8F11-4F04-9ED9-D94551790116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "46A8705C-0DF6-45D7-A38C-D2AB69194C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F59B0D8E-CFFB-4EBA-9D6A-526F9541BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D801A898-27D0-4076-8AF9-2B574FA11723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E7CBBD4A-4FDB-49E0-A5B6-22701C12BDF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9E7328DF-1924-4D0D-AC6B-1BA2D9CF1D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9421CE10-F226-4F2C-9DA7-EBB44B73C304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "1E71FBB6-ECAD-4581-9982-4C330D55FEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B631CCC-D456-49FF-B626-59C40BD4E167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE83F98D-F7AA-434B-8438-5B1FB96681B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB93F19B-9087-44CE-B884-45F434B7906F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5A88A5A3-EF1A-4E86-B074-CE0AC4325484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "0650B4C7-BCFE-4180-8FEF-4170A67E8BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "388F376E-46C9-4163-992D-95E3E4548D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D661090A-DA61-4BBE-85C3-6F48C053C84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "4A458242-D6DD-46E3-AF09-66BC87C5D7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8FACCBA-0D3B-4E6F-85A0-1CBD2B367F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F1D83D80-A0BE-4794-91A1-599AF558FB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "BD15B6B2-BFB3-4271-A507-48E9B827FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "E0003042-9B14-4E1B-800F-3D154FFE8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "E449EA29-81C8-4477-977E-746EACDBED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6FC6D4DF-8686-4054-A0C1-784E194171E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "C574C37D-3D99-4430-A3D5-199883556B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "F344E950-EFF9-4405-99D7-0B615C32873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "0A50DE1B-29EB-4014-B5B6-46CF493485F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "638B3E17-9F0A-4A96-B8D3-DDFEA518DBE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6D3E3AEB-8CD4-4EE7-9C81-2F74512071DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "254FF9D9-E696-41C8-B15B-DA089D2C6597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A5001E1-E716-43AA-8093-E0EED9E07909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "7FD16B13-516A-4D03-B1EF-A11156471A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E886D9EF-7FBD-4A24-A8B6-54E4B15403C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "369A83D1-AB7E-488D-9D74-26A69DFC1AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "3189CAC1-8970-4A33-B1E4-EB9EC3C19A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8733438-7625-400E-8237-BAE3D9F147AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "E87F1ED0-FD0D-4767-8E7C-325D920B79BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "97811266-A13C-4441-A1B5-BFA4B0862DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "3D09D157-4B19-4561-AB20-952F2EA9BA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "789087AF-0011-4E8F-A5AB-432A5F91BBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13b:*:*:beta:*:*:*",
            "matchCriteriaId" : "8EC9DC8C-56DC-482B-8847-BD0CFACA6F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "F63B3D13-24F6-4EFA-9528-DBF59D973A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F3A2388-18DE-46B0-BC13-7714E25D1B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "940B11CB-053F-4D60-8BC4-81CA659D2F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "83684DCB-B201-43B8-8B6E-6D0B13B7E437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "DF92E1FD-9B41-4A41-8B13-9D789C5729D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "351D224A-E67C-454C-AF43-8AD6CD44C685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E058CA6D-A295-4CAD-8C85-E8C83BAFEBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF99C114-1BCA-4400-BC7E-EDA1F55559CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBA1EFBA-5A26-46A0-B2A6-53B9924253BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE5B90B0-B6CC-4189-9C98-CF29017A47B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1818628-5F4E-4E5D-974A-0BEBCE821209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "14785840-3BC0-4030-AE44-E3013DF19AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "90444209-684C-4BF8-9BCF-6B29EA0A0593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "668E15DE-8CF2-4AF3-B13A-9080046B1E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "1191861C-1B2C-4762-805D-FCDC20F84D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "3CB518E5-CCC0-46B8-848E-C492BCF7E9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA1F68FE-67EA-4408-8E0F-558B0FAFFF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "66E9F05C-799A-43D3-9367-FCA86166BD65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "85DB4097-6EFC-4017-ADFD-56EE49BB2F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD283EA2-9026-497F-A7DE-E16CE0764ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "ED19DDDF-A29E-4C3F-A818-23D7E37B6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "508D0052-B7D7-4A08-8BB0-7D7A1EDAB96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "3E50BFB0-67D3-4EDE-93FE-85EAF605461E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "D7EE0134-6AD7-4695-B536-1959FE3A9672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "25DFFB5C-277F-4436-9BCE-643E98721C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "B8B80EB2-0B48-4AFA-8A09-26006CCDB022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AC8705E0-23ED-4817-8B69-21A4963C27F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "BAA156A9-A9FB-4D03-B0EE-4AA303D7A9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F733E585-075C-402A-9B34-1FE79DE4137E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "05C43439-C694-47AA-90AF-0AC2277E3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "B391F8A1-F102-4C88-864C-1386452CDAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC33C93-9947-4983-96A3-7DE223929817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B46DE141-1224-499E-AAE0-6CC0D5249B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "D8D07501-A07E-4743-A188-2E5BBC3C8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "64FD2A30-EE33-4680-9DCF-29283DBA3C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "B517F7A2-6FD1-4A7B-80E7-1167EC296591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "E6CA6EA5-DDAD-4882-AD1B-634C0CD741BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F14DCB07-9464-4DDE-98A1-FAE85DD60FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6EDFD679-4710-4A62-B254-E658EED4295B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1B81072-08A5-4EC6-B737-E35C505C1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A0748A9E-5737-48F9-BB66-6576AFE16198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "453E51D9-89A1-4A91-B218-05C45CC4E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "51542BA7-8151-4FC9-9C86-36CEB476B912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "5F95391C-0B75-47D2-9770-561E05414CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "10384675-B949-4B50-AF42-B5A3EE27250B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "7C0DB1C0-5749-4508-A265-C2138F7852E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA9977CF-575C-4A19-84C8-EBB68EBE88C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "87C525C5-E282-4EC6-956F-0C94DC11FC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F02A2A8-6312-4F6D-ABBF-952CA4C5E02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "DE54D1A3-FC2A-40DE-9177-50332208B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "170AE3DA-92C1-4D1D-9CAC-543C01FFF479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "2130C3C5-E4A5-41C3-89F0-C6FB4E47D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "74248527-B884-4134-95C8-DEAF3D774A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta17:*:*:beta:*:*:*",
            "matchCriteriaId" : "01A8AF9C-8BF6-4ADC-A85A-A5C1F9FFB2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "B4038D09-467C-4815-A429-F0E1E3E545E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6F273237-7223-4047-83B7-16A49B7E554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF26EE13-554C-4180-98A2-238D84E40927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "12688C9C-291D-4BF2-93F9-09AA323C52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "A7F7A437-D538-4B44-AC41-C95641A11A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "9BB61DCF-52DB-498D-8779-D565E548C285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "EE56BB77-B7F7-4BE7-AD9C-33888C5D01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "9DB49E1D-BCC8-4984-A81D-5DAC5E3DF168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "F775EA72-CCE3-4230-A666-EFDAA61F71FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E65BDEE-850A-41C6-8CFB-BD8B3A105CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "AF196429-FDED-4C3F-9F7D-0A2BF7DCAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "64B84326-5397-4C60-8007-F7E7D81DC661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "9A0A526A-9662-4E39-8BF6-E464BE1A2B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "712DACC2-A21E-429F-8A7B-86D8F7CE3468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E93F9F6-5B03-4F77-B8B4-AEC9E4011692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "C5B2B98E-804F-4525-B726-3F1DF2693F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "582E339F-678A-4377-8EE0-8F4208E3EF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "1BF1D945-6EAA-4FA7-8252-2FED079587F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9325DFF5-EA7B-4B8D-A227-4B1A59449CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0ECB28DA-3CA1-4011-9170-BFBF2ED3E091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A6399B0-471B-4B26-859C-3836F2A6B7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "131E2AE4-E35D-495D-8907-3B899BB8AC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "83601528-0DD9-4835-B6C0-0F341871CC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4AEB5AAF-73EB-4356-8C53-10E22B2F910E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EB199D6-E253-4EC2-BF0B-059F7B6662ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "94A586EB-B0E0-4190-88DF-3BCC04E5EF84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BF27B44-9AA7-4B91-9B4B-0E84418F5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "461744BD-3974-4C33-8514-0A917DC90C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A86FB2B-6915-49C0-B993-0711AAECA5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EF3DD36-2776-4CD2-A3F1-88872024D223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "D91D71ED-F08F-4DB5-B7DD-062E7C11435F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "62B5812A-FB52-4F4B-9A15-3AA5CD6562E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "83231EC0-E3F7-4E35-B165-487C2725B4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "A53AFFA6-7B98-47F2-9BD7-71C83A69CE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A42D3FB9-9197-4101-A729-876C490BD572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A5DE0C47-0C66-4EFE-AF82-1B22F4F54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "E587D10F-BEF8-4923-AF76-6DC3172880EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "155568EF-6A7E-423A-B5EA-D20E407B271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "7E94B119-8C75-43DF-A2DF-A5B3E04F0778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5348F94F-F6AE-4400-8AC7-036111EF43D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "57948A73-C9C5-4C24-947D-0A4659C7002E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "3532EE37-2D0F-496C-B5A8-F9315FFB4552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "2CAE7CC9-B91D-494C-B91A-497D6FE6B14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "623BBBF8-4121-466A-82C8-D179B02B3E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "648D010A-8B8D-42AA-8888-09E4E0FAA954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "8ADC7613-25E3-4CB8-A962-2775C20E4D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B0099F0-A275-4C65-9B79-041374F183DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE69800E-5CB5-4916-879C-51DE5E94489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "8C64EAFE-2B60-4D95-869F-4A2FC98B99C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "AB2045F1-AC39-4738-B3F0-33F00D23C921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E32589F8-2E87-40D2-BAD3-E6C1C088CA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "4868BAFD-BFE5-4361-855A-644B040E7233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4B6C25BF-5B2A-43C4-8918-E32BA9DD8A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB9917D3-D848-4D2B-8A44-B3723BA377DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "7046D95B-73CE-406B-ACC3-FD71F7DEC7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "D3BA5033-2C06-42FF-962E-48EBA2EBB469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "630D29DE-0FD7-4306-BA80-20D0791D334B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "08F94E42-07A1-480D-B6DD-D96AE38F1EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "FA4B3DE5-21DA-4185-AF74-AAA6DD89FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E602BEF9-E89D-40F7-BC6F-5C6F9F25BA97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "C06A8627-683D-4328-BE7A-4A33A4B736F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E3EF8240-D3F5-422C-B70A-90C6CBA4E622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "93CC792D-AE0B-498E-8374-5D09EF4E28FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "093D4EA8-B002-4AB4-97C9-CEE4D70BF3C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "4C778180-E7BF-4EF2-8B19-0388E23E1424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "0C0B2BC1-35F1-4A1D-B9B2-54426B4ADF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6BCAB620-465A-41FF-A064-FB638DD3A557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "6AFCB802-A275-444C-8245-D0397322125F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9F9B70E2-AAAD-4E61-AEB2-E5F635F6AAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6182074E-C467-448C-9299-B92CFE4EEBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "09EA8F36-7647-42D0-8675-34C002E0754D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "9CE2276A-9680-4B14-9636-806F7E4C1669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD150166-4C8D-47E3-989A-1A71A46C36A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF5CA6AD-FA4D-47DF-A684-5DAD7662EA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "B94F75B8-7C84-4727-9D18-114A815E1906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "4D94E03A-32EE-408F-81FA-4B9C25AA7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD495875-007C-4A90-B940-B62E6FA492CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F1B84E-8AF8-46E8-9DE9-00D1DE348C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BCCEFDFB-61E6-4846-8093-B5CEB0D8450C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC63647-B692-4BB9-9A3D-6F8DF19C3494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F0ED55-C8C6-47C1-859A-60046838B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A2D59BC-2EE8-4F9C-AB5B-B9D01B44F7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "933DFEBC-5568-431B-809D-AFAEFD08E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE920E80-C02B-4EC8-982F-ADE89C936684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CDAE3441-12BA-41F4-8A5A-B2EE844C86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "1443EA1B-D210-4219-8452-CBFD5FACBC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "948A4B4A-A11F-477E-BEC5-0D60C7E3570C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "98B2A052-5427-4B72-9F59-82F430836CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "CB6D636E-B51F-4648-A637-62B2603BA18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "3DA17871-7ED7-4D68-A46D-D15DC5B3235F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "705FE965-0415-4382-8CA1-A19DF3B5EF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "BC6EDCE3-D564-434F-9A7F-D4A6D579F8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "FB05E54B-9CF6-45A7-8D47-C98DB6D19E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "03CD1C5E-18F5-4C6D-B92C-C511C8C12D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF4ABB9D-69DF-42D5-AD60-F9CEEC1B6730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7B4DCCF5-E290-4BDA-AAB9-DF362A2EB7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "3AE1F3A2-8340-4ED7-B943-ACDA9617DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E033AB7-9987-4C30-849F-2495376CA4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "D87E9338-C7F6-43BA-886F-C30987ADBA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E24EB90F-FE81-4746-8741-8DC9346F79C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "D237956F-FC90-467E-A493-24EFDA1A9F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "F7AA9AB8-AB6F-43E2-B3E5-685EE9BFE7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "5BC240A1-431E-4A50-88DC-7AC9BC674254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "3F85AFD4-D397-4FDB-B762-521BD5FF14C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/cbcf8a064b4889a19c991641e09c399bfa1ef2ad",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-xx97-6494-p2rv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/cbcf8a064b4889a19c991641e09c399bfa1ef2ad",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-xx97-6494-p2rv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22454",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-05T20:15:18.900",
      "lastModified" : "2024-11-21T07:44:50.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` and `tests-passed` branches, pending post titles can be used for cross-site scripting attacks. Pending posts can be created by unprivileged users when a category has the \"require moderator approval of all new topics\" setting set. This vulnerability can lead to a full XSS on sites which have modified or disabled Discourse’s default Content Security Policy. A patch is available in versions 2.8.14 and 3.0.0.beta16."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de fuentes de opciones. Antes de la versión 2.8.14 en la rama `stable` y la versión 3.0.0.beta16 en las ramas `beta` y `tests-passed`, los títulos de las publicaciones pendientes se podían usar para ataques de cross-site scripting. Los usuarios sin privilegios pueden crear publicaciones pendientes cuando una categoría tiene configurada la configuración \"requerir la aprobación del moderador para todos los temas nuevos\". Esta vulnerabilidad puede provocar un XSS completo en sitios que han modificado o deshabilitado la Política de seguridad de contenido predeterminada de Discourse. Hay un parche disponible en las versiones 2.8.14 y 3.0.0.beta16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "2.8.14",
            "matchCriteriaId" : "B45CE307-9D3B-4733-BEF2-862A06BE3B8E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BF272688-1B08-4ABC-8002-66B59690F9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "A29A2465-B21D-4147-8292-DCF864D385B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBC3511E-3D68-42E2-B521-966FB429B640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "EC8B99C2-E267-4EC2-AF09-C9AD1EEE76D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "F21A22EE-081A-4489-A7F8-22E2DBC5B00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E6C8FB3-4B19-4510-B9A8-BCF9ED8ED7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6b:*:*:beta:*:*:*",
            "matchCriteriaId" : "5B827291-6483-4BB7-AF76-530B669B3ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "551E70ED-34FF-4989-91C9-6312DE4AB4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "204FB99A-8F11-4F04-9ED9-D94551790116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "46A8705C-0DF6-45D7-A38C-D2AB69194C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F59B0D8E-CFFB-4EBA-9D6A-526F9541BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D801A898-27D0-4076-8AF9-2B574FA11723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E7CBBD4A-4FDB-49E0-A5B6-22701C12BDF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9E7328DF-1924-4D0D-AC6B-1BA2D9CF1D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9421CE10-F226-4F2C-9DA7-EBB44B73C304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "1E71FBB6-ECAD-4581-9982-4C330D55FEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B631CCC-D456-49FF-B626-59C40BD4E167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE83F98D-F7AA-434B-8438-5B1FB96681B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB93F19B-9087-44CE-B884-45F434B7906F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5A88A5A3-EF1A-4E86-B074-CE0AC4325484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "0650B4C7-BCFE-4180-8FEF-4170A67E8BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "388F376E-46C9-4163-992D-95E3E4548D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D661090A-DA61-4BBE-85C3-6F48C053C84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "4A458242-D6DD-46E3-AF09-66BC87C5D7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8FACCBA-0D3B-4E6F-85A0-1CBD2B367F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F1D83D80-A0BE-4794-91A1-599AF558FB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "BD15B6B2-BFB3-4271-A507-48E9B827FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "E0003042-9B14-4E1B-800F-3D154FFE8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "E449EA29-81C8-4477-977E-746EACDBED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6FC6D4DF-8686-4054-A0C1-784E194171E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "C574C37D-3D99-4430-A3D5-199883556B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "F344E950-EFF9-4405-99D7-0B615C32873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "0A50DE1B-29EB-4014-B5B6-46CF493485F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "638B3E17-9F0A-4A96-B8D3-DDFEA518DBE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6D3E3AEB-8CD4-4EE7-9C81-2F74512071DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "254FF9D9-E696-41C8-B15B-DA089D2C6597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A5001E1-E716-43AA-8093-E0EED9E07909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "7FD16B13-516A-4D03-B1EF-A11156471A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E886D9EF-7FBD-4A24-A8B6-54E4B15403C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "369A83D1-AB7E-488D-9D74-26A69DFC1AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "3189CAC1-8970-4A33-B1E4-EB9EC3C19A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8733438-7625-400E-8237-BAE3D9F147AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "E87F1ED0-FD0D-4767-8E7C-325D920B79BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "97811266-A13C-4441-A1B5-BFA4B0862DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "3D09D157-4B19-4561-AB20-952F2EA9BA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "789087AF-0011-4E8F-A5AB-432A5F91BBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13b:*:*:beta:*:*:*",
            "matchCriteriaId" : "8EC9DC8C-56DC-482B-8847-BD0CFACA6F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "F63B3D13-24F6-4EFA-9528-DBF59D973A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F3A2388-18DE-46B0-BC13-7714E25D1B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "940B11CB-053F-4D60-8BC4-81CA659D2F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "83684DCB-B201-43B8-8B6E-6D0B13B7E437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "DF92E1FD-9B41-4A41-8B13-9D789C5729D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "351D224A-E67C-454C-AF43-8AD6CD44C685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E058CA6D-A295-4CAD-8C85-E8C83BAFEBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF99C114-1BCA-4400-BC7E-EDA1F55559CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBA1EFBA-5A26-46A0-B2A6-53B9924253BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE5B90B0-B6CC-4189-9C98-CF29017A47B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1818628-5F4E-4E5D-974A-0BEBCE821209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "14785840-3BC0-4030-AE44-E3013DF19AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "90444209-684C-4BF8-9BCF-6B29EA0A0593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "668E15DE-8CF2-4AF3-B13A-9080046B1E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "1191861C-1B2C-4762-805D-FCDC20F84D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "3CB518E5-CCC0-46B8-848E-C492BCF7E9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA1F68FE-67EA-4408-8E0F-558B0FAFFF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "66E9F05C-799A-43D3-9367-FCA86166BD65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "85DB4097-6EFC-4017-ADFD-56EE49BB2F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD283EA2-9026-497F-A7DE-E16CE0764ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "ED19DDDF-A29E-4C3F-A818-23D7E37B6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "508D0052-B7D7-4A08-8BB0-7D7A1EDAB96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "3E50BFB0-67D3-4EDE-93FE-85EAF605461E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "D7EE0134-6AD7-4695-B536-1959FE3A9672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "25DFFB5C-277F-4436-9BCE-643E98721C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "B8B80EB2-0B48-4AFA-8A09-26006CCDB022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AC8705E0-23ED-4817-8B69-21A4963C27F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "BAA156A9-A9FB-4D03-B0EE-4AA303D7A9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F733E585-075C-402A-9B34-1FE79DE4137E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "05C43439-C694-47AA-90AF-0AC2277E3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "B391F8A1-F102-4C88-864C-1386452CDAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC33C93-9947-4983-96A3-7DE223929817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B46DE141-1224-499E-AAE0-6CC0D5249B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "D8D07501-A07E-4743-A188-2E5BBC3C8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "64FD2A30-EE33-4680-9DCF-29283DBA3C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "B517F7A2-6FD1-4A7B-80E7-1167EC296591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "E6CA6EA5-DDAD-4882-AD1B-634C0CD741BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F14DCB07-9464-4DDE-98A1-FAE85DD60FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6EDFD679-4710-4A62-B254-E658EED4295B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1B81072-08A5-4EC6-B737-E35C505C1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A0748A9E-5737-48F9-BB66-6576AFE16198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "453E51D9-89A1-4A91-B218-05C45CC4E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "51542BA7-8151-4FC9-9C86-36CEB476B912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "5F95391C-0B75-47D2-9770-561E05414CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "10384675-B949-4B50-AF42-B5A3EE27250B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "7C0DB1C0-5749-4508-A265-C2138F7852E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA9977CF-575C-4A19-84C8-EBB68EBE88C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "87C525C5-E282-4EC6-956F-0C94DC11FC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F02A2A8-6312-4F6D-ABBF-952CA4C5E02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "DE54D1A3-FC2A-40DE-9177-50332208B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "170AE3DA-92C1-4D1D-9CAC-543C01FFF479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "2130C3C5-E4A5-41C3-89F0-C6FB4E47D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "74248527-B884-4134-95C8-DEAF3D774A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta17:*:*:beta:*:*:*",
            "matchCriteriaId" : "01A8AF9C-8BF6-4ADC-A85A-A5C1F9FFB2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "B4038D09-467C-4815-A429-F0E1E3E545E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6F273237-7223-4047-83B7-16A49B7E554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF26EE13-554C-4180-98A2-238D84E40927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "12688C9C-291D-4BF2-93F9-09AA323C52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "A7F7A437-D538-4B44-AC41-C95641A11A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "9BB61DCF-52DB-498D-8779-D565E548C285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "EE56BB77-B7F7-4BE7-AD9C-33888C5D01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "9DB49E1D-BCC8-4984-A81D-5DAC5E3DF168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "F775EA72-CCE3-4230-A666-EFDAA61F71FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E65BDEE-850A-41C6-8CFB-BD8B3A105CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "AF196429-FDED-4C3F-9F7D-0A2BF7DCAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "64B84326-5397-4C60-8007-F7E7D81DC661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "9A0A526A-9662-4E39-8BF6-E464BE1A2B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "712DACC2-A21E-429F-8A7B-86D8F7CE3468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E93F9F6-5B03-4F77-B8B4-AEC9E4011692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "C5B2B98E-804F-4525-B726-3F1DF2693F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "582E339F-678A-4377-8EE0-8F4208E3EF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "1BF1D945-6EAA-4FA7-8252-2FED079587F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9325DFF5-EA7B-4B8D-A227-4B1A59449CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0ECB28DA-3CA1-4011-9170-BFBF2ED3E091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A6399B0-471B-4B26-859C-3836F2A6B7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "131E2AE4-E35D-495D-8907-3B899BB8AC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "83601528-0DD9-4835-B6C0-0F341871CC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4AEB5AAF-73EB-4356-8C53-10E22B2F910E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EB199D6-E253-4EC2-BF0B-059F7B6662ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "94A586EB-B0E0-4190-88DF-3BCC04E5EF84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BF27B44-9AA7-4B91-9B4B-0E84418F5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "461744BD-3974-4C33-8514-0A917DC90C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A86FB2B-6915-49C0-B993-0711AAECA5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EF3DD36-2776-4CD2-A3F1-88872024D223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "D91D71ED-F08F-4DB5-B7DD-062E7C11435F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "62B5812A-FB52-4F4B-9A15-3AA5CD6562E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "83231EC0-E3F7-4E35-B165-487C2725B4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "A53AFFA6-7B98-47F2-9BD7-71C83A69CE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A42D3FB9-9197-4101-A729-876C490BD572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A5DE0C47-0C66-4EFE-AF82-1B22F4F54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "E587D10F-BEF8-4923-AF76-6DC3172880EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "155568EF-6A7E-423A-B5EA-D20E407B271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "7E94B119-8C75-43DF-A2DF-A5B3E04F0778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5348F94F-F6AE-4400-8AC7-036111EF43D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "57948A73-C9C5-4C24-947D-0A4659C7002E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "3532EE37-2D0F-496C-B5A8-F9315FFB4552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "2CAE7CC9-B91D-494C-B91A-497D6FE6B14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "623BBBF8-4121-466A-82C8-D179B02B3E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "648D010A-8B8D-42AA-8888-09E4E0FAA954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "8ADC7613-25E3-4CB8-A962-2775C20E4D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B0099F0-A275-4C65-9B79-041374F183DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE69800E-5CB5-4916-879C-51DE5E94489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "8C64EAFE-2B60-4D95-869F-4A2FC98B99C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "AB2045F1-AC39-4738-B3F0-33F00D23C921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E32589F8-2E87-40D2-BAD3-E6C1C088CA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "4868BAFD-BFE5-4361-855A-644B040E7233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4B6C25BF-5B2A-43C4-8918-E32BA9DD8A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB9917D3-D848-4D2B-8A44-B3723BA377DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "7046D95B-73CE-406B-ACC3-FD71F7DEC7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "D3BA5033-2C06-42FF-962E-48EBA2EBB469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "630D29DE-0FD7-4306-BA80-20D0791D334B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "08F94E42-07A1-480D-B6DD-D96AE38F1EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "FA4B3DE5-21DA-4185-AF74-AAA6DD89FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E602BEF9-E89D-40F7-BC6F-5C6F9F25BA97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "C06A8627-683D-4328-BE7A-4A33A4B736F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E3EF8240-D3F5-422C-B70A-90C6CBA4E622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "93CC792D-AE0B-498E-8374-5D09EF4E28FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "093D4EA8-B002-4AB4-97C9-CEE4D70BF3C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "4C778180-E7BF-4EF2-8B19-0388E23E1424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "0C0B2BC1-35F1-4A1D-B9B2-54426B4ADF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6BCAB620-465A-41FF-A064-FB638DD3A557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "6AFCB802-A275-444C-8245-D0397322125F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9F9B70E2-AAAD-4E61-AEB2-E5F635F6AAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6182074E-C467-448C-9299-B92CFE4EEBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "09EA8F36-7647-42D0-8675-34C002E0754D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "9CE2276A-9680-4B14-9636-806F7E4C1669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD150166-4C8D-47E3-989A-1A71A46C36A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF5CA6AD-FA4D-47DF-A684-5DAD7662EA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "B94F75B8-7C84-4727-9D18-114A815E1906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "4D94E03A-32EE-408F-81FA-4B9C25AA7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD495875-007C-4A90-B940-B62E6FA492CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F1B84E-8AF8-46E8-9DE9-00D1DE348C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BCCEFDFB-61E6-4846-8093-B5CEB0D8450C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC63647-B692-4BB9-9A3D-6F8DF19C3494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F0ED55-C8C6-47C1-859A-60046838B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A2D59BC-2EE8-4F9C-AB5B-B9D01B44F7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "933DFEBC-5568-431B-809D-AFAEFD08E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE920E80-C02B-4EC8-982F-ADE89C936684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CDAE3441-12BA-41F4-8A5A-B2EE844C86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "1443EA1B-D210-4219-8452-CBFD5FACBC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "948A4B4A-A11F-477E-BEC5-0D60C7E3570C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "98B2A052-5427-4B72-9F59-82F430836CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "CB6D636E-B51F-4648-A637-62B2603BA18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "3DA17871-7ED7-4D68-A46D-D15DC5B3235F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "705FE965-0415-4382-8CA1-A19DF3B5EF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "BC6EDCE3-D564-434F-9A7F-D4A6D579F8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "FB05E54B-9CF6-45A7-8D47-C98DB6D19E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "03CD1C5E-18F5-4C6D-B92C-C511C8C12D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF4ABB9D-69DF-42D5-AD60-F9CEEC1B6730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7B4DCCF5-E290-4BDA-AAB9-DF362A2EB7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "3AE1F3A2-8340-4ED7-B943-ACDA9617DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E033AB7-9987-4C30-849F-2495376CA4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "D87E9338-C7F6-43BA-886F-C30987ADBA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E24EB90F-FE81-4746-8741-8DC9346F79C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "D237956F-FC90-467E-A493-24EFDA1A9F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "F7AA9AB8-AB6F-43E2-B3E5-685EE9BFE7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "5BC240A1-431E-4A50-88DC-7AC9BC674254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "3F85AFD4-D397-4FDB-B762-521BD5FF14C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/c0e2d7badac276d82a4056a994b48d68a8993a12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-ggq4-4qxc-c462",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/c0e2d7badac276d82a4056a994b48d68a8993a12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-ggq4-4qxc-c462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22455",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-05T21:15:09.157",
      "lastModified" : "2024-11-21T07:44:50.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` and `tests-passed` branches, tag descriptions, which can be updated by moderators, can be used for cross-site scripting attacks. This vulnerability can lead to a full XSS on sites which have modified or disabled Discourse’s default Content Security Policy. Versions 2.8.14 and 3.0.0.beta16 contain a patch."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de fuentes de opciones. Antes de la versión 2.8.14 en la rama `stable` y la versión 3.0.0.beta16 en las ramas `beta` y `tests-passed`, las descripciones de etiquetas, que pueden ser actualizadas por los moderadores, se pueden usar ataques de cross-site scripting. Esta vulnerabilidad puede provocar un XSS completo en sitios que han modificado o deshabilitado la Política de seguridad de contenido predeterminada de Discourse. Las versiones 2.8.14 y 3.0.0.beta16 contienen un parche."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "2.8.14",
            "matchCriteriaId" : "B45CE307-9D3B-4733-BEF2-862A06BE3B8E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BF272688-1B08-4ABC-8002-66B59690F9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "A29A2465-B21D-4147-8292-DCF864D385B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBC3511E-3D68-42E2-B521-966FB429B640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "EC8B99C2-E267-4EC2-AF09-C9AD1EEE76D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "F21A22EE-081A-4489-A7F8-22E2DBC5B00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E6C8FB3-4B19-4510-B9A8-BCF9ED8ED7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6b:*:*:beta:*:*:*",
            "matchCriteriaId" : "5B827291-6483-4BB7-AF76-530B669B3ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "551E70ED-34FF-4989-91C9-6312DE4AB4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "204FB99A-8F11-4F04-9ED9-D94551790116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "46A8705C-0DF6-45D7-A38C-D2AB69194C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F59B0D8E-CFFB-4EBA-9D6A-526F9541BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D801A898-27D0-4076-8AF9-2B574FA11723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E7CBBD4A-4FDB-49E0-A5B6-22701C12BDF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9E7328DF-1924-4D0D-AC6B-1BA2D9CF1D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9421CE10-F226-4F2C-9DA7-EBB44B73C304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "1E71FBB6-ECAD-4581-9982-4C330D55FEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B631CCC-D456-49FF-B626-59C40BD4E167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE83F98D-F7AA-434B-8438-5B1FB96681B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB93F19B-9087-44CE-B884-45F434B7906F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5A88A5A3-EF1A-4E86-B074-CE0AC4325484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "0650B4C7-BCFE-4180-8FEF-4170A67E8BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "388F376E-46C9-4163-992D-95E3E4548D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D661090A-DA61-4BBE-85C3-6F48C053C84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "4A458242-D6DD-46E3-AF09-66BC87C5D7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8FACCBA-0D3B-4E6F-85A0-1CBD2B367F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F1D83D80-A0BE-4794-91A1-599AF558FB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "BD15B6B2-BFB3-4271-A507-48E9B827FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "E0003042-9B14-4E1B-800F-3D154FFE8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "E449EA29-81C8-4477-977E-746EACDBED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6FC6D4DF-8686-4054-A0C1-784E194171E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "C574C37D-3D99-4430-A3D5-199883556B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "F344E950-EFF9-4405-99D7-0B615C32873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "0A50DE1B-29EB-4014-B5B6-46CF493485F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "638B3E17-9F0A-4A96-B8D3-DDFEA518DBE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6D3E3AEB-8CD4-4EE7-9C81-2F74512071DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "254FF9D9-E696-41C8-B15B-DA089D2C6597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A5001E1-E716-43AA-8093-E0EED9E07909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "7FD16B13-516A-4D03-B1EF-A11156471A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E886D9EF-7FBD-4A24-A8B6-54E4B15403C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "369A83D1-AB7E-488D-9D74-26A69DFC1AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "3189CAC1-8970-4A33-B1E4-EB9EC3C19A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8733438-7625-400E-8237-BAE3D9F147AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "E87F1ED0-FD0D-4767-8E7C-325D920B79BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "97811266-A13C-4441-A1B5-BFA4B0862DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "3D09D157-4B19-4561-AB20-952F2EA9BA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "789087AF-0011-4E8F-A5AB-432A5F91BBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13b:*:*:beta:*:*:*",
            "matchCriteriaId" : "8EC9DC8C-56DC-482B-8847-BD0CFACA6F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "F63B3D13-24F6-4EFA-9528-DBF59D973A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F3A2388-18DE-46B0-BC13-7714E25D1B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "940B11CB-053F-4D60-8BC4-81CA659D2F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "83684DCB-B201-43B8-8B6E-6D0B13B7E437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "DF92E1FD-9B41-4A41-8B13-9D789C5729D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "351D224A-E67C-454C-AF43-8AD6CD44C685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E058CA6D-A295-4CAD-8C85-E8C83BAFEBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF99C114-1BCA-4400-BC7E-EDA1F55559CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBA1EFBA-5A26-46A0-B2A6-53B9924253BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE5B90B0-B6CC-4189-9C98-CF29017A47B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1818628-5F4E-4E5D-974A-0BEBCE821209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "14785840-3BC0-4030-AE44-E3013DF19AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "90444209-684C-4BF8-9BCF-6B29EA0A0593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "668E15DE-8CF2-4AF3-B13A-9080046B1E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "1191861C-1B2C-4762-805D-FCDC20F84D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "3CB518E5-CCC0-46B8-848E-C492BCF7E9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA1F68FE-67EA-4408-8E0F-558B0FAFFF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "66E9F05C-799A-43D3-9367-FCA86166BD65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "85DB4097-6EFC-4017-ADFD-56EE49BB2F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD283EA2-9026-497F-A7DE-E16CE0764ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "ED19DDDF-A29E-4C3F-A818-23D7E37B6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "508D0052-B7D7-4A08-8BB0-7D7A1EDAB96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "3E50BFB0-67D3-4EDE-93FE-85EAF605461E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "D7EE0134-6AD7-4695-B536-1959FE3A9672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "25DFFB5C-277F-4436-9BCE-643E98721C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "B8B80EB2-0B48-4AFA-8A09-26006CCDB022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AC8705E0-23ED-4817-8B69-21A4963C27F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "BAA156A9-A9FB-4D03-B0EE-4AA303D7A9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F733E585-075C-402A-9B34-1FE79DE4137E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "05C43439-C694-47AA-90AF-0AC2277E3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "B391F8A1-F102-4C88-864C-1386452CDAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC33C93-9947-4983-96A3-7DE223929817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B46DE141-1224-499E-AAE0-6CC0D5249B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "D8D07501-A07E-4743-A188-2E5BBC3C8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "64FD2A30-EE33-4680-9DCF-29283DBA3C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "B517F7A2-6FD1-4A7B-80E7-1167EC296591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "E6CA6EA5-DDAD-4882-AD1B-634C0CD741BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F14DCB07-9464-4DDE-98A1-FAE85DD60FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6EDFD679-4710-4A62-B254-E658EED4295B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1B81072-08A5-4EC6-B737-E35C505C1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A0748A9E-5737-48F9-BB66-6576AFE16198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "453E51D9-89A1-4A91-B218-05C45CC4E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "51542BA7-8151-4FC9-9C86-36CEB476B912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "5F95391C-0B75-47D2-9770-561E05414CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "10384675-B949-4B50-AF42-B5A3EE27250B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "7C0DB1C0-5749-4508-A265-C2138F7852E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA9977CF-575C-4A19-84C8-EBB68EBE88C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "87C525C5-E282-4EC6-956F-0C94DC11FC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F02A2A8-6312-4F6D-ABBF-952CA4C5E02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "DE54D1A3-FC2A-40DE-9177-50332208B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "170AE3DA-92C1-4D1D-9CAC-543C01FFF479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "2130C3C5-E4A5-41C3-89F0-C6FB4E47D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "74248527-B884-4134-95C8-DEAF3D774A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta17:*:*:beta:*:*:*",
            "matchCriteriaId" : "01A8AF9C-8BF6-4ADC-A85A-A5C1F9FFB2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "B4038D09-467C-4815-A429-F0E1E3E545E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6F273237-7223-4047-83B7-16A49B7E554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF26EE13-554C-4180-98A2-238D84E40927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "12688C9C-291D-4BF2-93F9-09AA323C52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "A7F7A437-D538-4B44-AC41-C95641A11A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "9BB61DCF-52DB-498D-8779-D565E548C285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "EE56BB77-B7F7-4BE7-AD9C-33888C5D01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "9DB49E1D-BCC8-4984-A81D-5DAC5E3DF168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "F775EA72-CCE3-4230-A666-EFDAA61F71FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E65BDEE-850A-41C6-8CFB-BD8B3A105CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "AF196429-FDED-4C3F-9F7D-0A2BF7DCAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "64B84326-5397-4C60-8007-F7E7D81DC661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "9A0A526A-9662-4E39-8BF6-E464BE1A2B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "712DACC2-A21E-429F-8A7B-86D8F7CE3468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E93F9F6-5B03-4F77-B8B4-AEC9E4011692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "C5B2B98E-804F-4525-B726-3F1DF2693F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "582E339F-678A-4377-8EE0-8F4208E3EF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "1BF1D945-6EAA-4FA7-8252-2FED079587F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9325DFF5-EA7B-4B8D-A227-4B1A59449CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0ECB28DA-3CA1-4011-9170-BFBF2ED3E091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A6399B0-471B-4B26-859C-3836F2A6B7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "131E2AE4-E35D-495D-8907-3B899BB8AC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "83601528-0DD9-4835-B6C0-0F341871CC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4AEB5AAF-73EB-4356-8C53-10E22B2F910E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EB199D6-E253-4EC2-BF0B-059F7B6662ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "94A586EB-B0E0-4190-88DF-3BCC04E5EF84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BF27B44-9AA7-4B91-9B4B-0E84418F5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "461744BD-3974-4C33-8514-0A917DC90C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A86FB2B-6915-49C0-B993-0711AAECA5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EF3DD36-2776-4CD2-A3F1-88872024D223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "D91D71ED-F08F-4DB5-B7DD-062E7C11435F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "62B5812A-FB52-4F4B-9A15-3AA5CD6562E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "83231EC0-E3F7-4E35-B165-487C2725B4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "A53AFFA6-7B98-47F2-9BD7-71C83A69CE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A42D3FB9-9197-4101-A729-876C490BD572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A5DE0C47-0C66-4EFE-AF82-1B22F4F54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "E587D10F-BEF8-4923-AF76-6DC3172880EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "155568EF-6A7E-423A-B5EA-D20E407B271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "7E94B119-8C75-43DF-A2DF-A5B3E04F0778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5348F94F-F6AE-4400-8AC7-036111EF43D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "57948A73-C9C5-4C24-947D-0A4659C7002E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "3532EE37-2D0F-496C-B5A8-F9315FFB4552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "2CAE7CC9-B91D-494C-B91A-497D6FE6B14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "623BBBF8-4121-466A-82C8-D179B02B3E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "648D010A-8B8D-42AA-8888-09E4E0FAA954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "8ADC7613-25E3-4CB8-A962-2775C20E4D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B0099F0-A275-4C65-9B79-041374F183DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE69800E-5CB5-4916-879C-51DE5E94489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "8C64EAFE-2B60-4D95-869F-4A2FC98B99C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "AB2045F1-AC39-4738-B3F0-33F00D23C921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E32589F8-2E87-40D2-BAD3-E6C1C088CA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "4868BAFD-BFE5-4361-855A-644B040E7233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4B6C25BF-5B2A-43C4-8918-E32BA9DD8A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB9917D3-D848-4D2B-8A44-B3723BA377DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "7046D95B-73CE-406B-ACC3-FD71F7DEC7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "D3BA5033-2C06-42FF-962E-48EBA2EBB469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "630D29DE-0FD7-4306-BA80-20D0791D334B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "08F94E42-07A1-480D-B6DD-D96AE38F1EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "FA4B3DE5-21DA-4185-AF74-AAA6DD89FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E602BEF9-E89D-40F7-BC6F-5C6F9F25BA97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "C06A8627-683D-4328-BE7A-4A33A4B736F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E3EF8240-D3F5-422C-B70A-90C6CBA4E622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "93CC792D-AE0B-498E-8374-5D09EF4E28FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "093D4EA8-B002-4AB4-97C9-CEE4D70BF3C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "4C778180-E7BF-4EF2-8B19-0388E23E1424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "0C0B2BC1-35F1-4A1D-B9B2-54426B4ADF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6BCAB620-465A-41FF-A064-FB638DD3A557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "6AFCB802-A275-444C-8245-D0397322125F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9F9B70E2-AAAD-4E61-AEB2-E5F635F6AAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6182074E-C467-448C-9299-B92CFE4EEBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "09EA8F36-7647-42D0-8675-34C002E0754D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "9CE2276A-9680-4B14-9636-806F7E4C1669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD150166-4C8D-47E3-989A-1A71A46C36A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF5CA6AD-FA4D-47DF-A684-5DAD7662EA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "B94F75B8-7C84-4727-9D18-114A815E1906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "4D94E03A-32EE-408F-81FA-4B9C25AA7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD495875-007C-4A90-B940-B62E6FA492CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F1B84E-8AF8-46E8-9DE9-00D1DE348C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BCCEFDFB-61E6-4846-8093-B5CEB0D8450C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC63647-B692-4BB9-9A3D-6F8DF19C3494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F0ED55-C8C6-47C1-859A-60046838B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A2D59BC-2EE8-4F9C-AB5B-B9D01B44F7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "933DFEBC-5568-431B-809D-AFAEFD08E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE920E80-C02B-4EC8-982F-ADE89C936684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CDAE3441-12BA-41F4-8A5A-B2EE844C86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "1443EA1B-D210-4219-8452-CBFD5FACBC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "948A4B4A-A11F-477E-BEC5-0D60C7E3570C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "98B2A052-5427-4B72-9F59-82F430836CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "CB6D636E-B51F-4648-A637-62B2603BA18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "3DA17871-7ED7-4D68-A46D-D15DC5B3235F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "705FE965-0415-4382-8CA1-A19DF3B5EF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "BC6EDCE3-D564-434F-9A7F-D4A6D579F8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "FB05E54B-9CF6-45A7-8D47-C98DB6D19E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "03CD1C5E-18F5-4C6D-B92C-C511C8C12D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF4ABB9D-69DF-42D5-AD60-F9CEEC1B6730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7B4DCCF5-E290-4BDA-AAB9-DF362A2EB7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "3AE1F3A2-8340-4ED7-B943-ACDA9617DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E033AB7-9987-4C30-849F-2495376CA4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "D87E9338-C7F6-43BA-886F-C30987ADBA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E24EB90F-FE81-4746-8741-8DC9346F79C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "D237956F-FC90-467E-A493-24EFDA1A9F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "F7AA9AB8-AB6F-43E2-B3E5-685EE9BFE7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "5BC240A1-431E-4A50-88DC-7AC9BC674254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "3F85AFD4-D397-4FDB-B762-521BD5FF14C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/692329896ac64d8581947e977202c243eef3b5a2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-5rq6-466r-6mr9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/692329896ac64d8581947e977202c243eef3b5a2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-5rq6-466r-6mr9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-06T07:15:08.583",
      "lastModified" : "2025-04-07T19:15:49.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injection when calling analyzeHeadless with untrusted input."
      }, {
        "lang" : "es",
        "value" : "Ghidra/RuntimeScripts/Linux/support/launch.sh en NSA Ghidra hasta 10.2.2 pasa la entrada proporcionada por el usuario a eval, lo que genera una inyección de comando al llamar a analyseHeadless con entrada que no es de confianza."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nsa:ghidra:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.2",
            "matchCriteriaId" : "BA9D21C2-1C28-4DCD-9A54-E202E6E91774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NationalSecurityAgency/ghidra/issues/4869",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NationalSecurityAgency/ghidra/pull/4872",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NationalSecurityAgency/ghidra/issues/4869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NationalSecurityAgency/ghidra/pull/4872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22475",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-06T15:15:09.903",
      "lastModified" : "2024-11-21T07:44:52.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Canarytokens is an open source tool which helps track activity and actions on your network. A Cross-Site Scripting vulnerability was identified in the history page of triggered Canarytokens prior to sha-fb61290. An attacker who discovers an HTTP-based Canarytoken (a URL) can use this to execute Javascript in the Canarytoken's trigger history page (domain: canarytokens.org) when the history page is later visited by the Canarytoken's creator.\n\nThis vulnerability could be used to disable or delete the affected Canarytoken, or view its activation history. It might also be used as a stepping stone towards revealing more information about the Canarytoken's creator to the attacker. For example, an attacker could recover the email address tied to the Canarytoken, or place Javascript on the history page that redirect the creator towards an attacker-controlled Canarytoken to show the creator's network location.\n\nThis vulnerability is similar to CVE-2022-31113, but affected parameters reported differently from the Canarytoken trigger request. An attacker could only act on the discovered Canarytoken. This issue did not expose other Canarytokens or other Canarytoken creators. Canarytokens Docker images sha-fb61290 and later contain a patch for this issue."
      }, {
        "lang" : "es",
        "value" : "Canarytokens es una herramienta de código abierto que ayuda a rastrear la actividad y las acciones en su red. Se identificó una vulnerabilidad de cross site scripting en la página del historial de Canarytokens activados antes de sha-fb61290. Un atacante que descubre un Canarytoken basado en HTTP (una URL) puede usarlo para ejecutar Javascript en la página del historial de activación del Canarytoken (dominio: canarytokens.org) cuando el creador del Canarytoken visite posteriormente la página del historial. Esta vulnerabilidad podría usarse para deshabilitar o eliminar el Canarytoken afectado, o ver su historial de activación. También podría usarse como un trampolín para revelar más información sobre el creador del Canarytoken al atacante. Por ejemplo, un atacante podría recuperar la dirección de correo electrónico vinculada al Canarytoken o colocar Javascript en la página del historial que redirige al creador hacia un Canarytoken controlado por el atacante para mostrar la ubicación de red del creador. Esta vulnerabilidad es similar a CVE-2022-31113, pero los parámetros afectados se informaron de manera diferente a la solicitud de activación de Canarytoken. Un atacante sólo podría actuar sobre el Canarytoken descubierto. Este problema no expuso a otros Canarytokens ni a otros creadores de Canarytoken. Las imágenes de Canarytokens Docker sha-fb61290 y posteriores contienen un parche para este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thinkst:canarytokens:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-01-06",
            "matchCriteriaId" : "81509DD9-44EC-440D-A0EC-9CE8563D0A72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thinkst/canarytokens/commit/fb612906f2217bbb8863199694891d16e20bad3e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thinkst/canarytokens/security/advisories/GHSA-3h2c-3fgr-74vh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thinkst/canarytokens/security/advisories/GHSA-5675-3424-hpqr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thinkst/canarytokens/commit/fb612906f2217bbb8863199694891d16e20bad3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thinkst/canarytokens/security/advisories/GHSA-3h2c-3fgr-74vh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thinkst/canarytokens/security/advisories/GHSA-5675-3424-hpqr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0106",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-07T04:15:08.083",
      "lastModified" : "2024-11-21T07:36:33.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0."
      }, {
        "lang" : "es",
        "value" : "cross site scripting (XSS): almacenado en el repositorio de GitHub usememos/memos anteriores a 0.10.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usememos:memos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.10.0",
            "matchCriteriaId" : "460E8407-0D60-4523-BEED-804ACEED0C66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/usememos/memos/commit/0f8ce3dd1696722f951d7195ad1f88b39a5d15d7",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/5c0809cb-f4ff-4447-bed6-b5625fb374bb",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/usememos/memos/commit/0f8ce3dd1696722f951d7195ad1f88b39a5d15d7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/5c0809cb-f4ff-4447-bed6-b5625fb374bb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0107",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-07T04:15:08.167",
      "lastModified" : "2024-11-21T07:36:33.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting (XSS): almacenado en el repositorio de GitHub usememos/memos anteriores a 0.10.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usememos:memos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.10.0",
            "matchCriteriaId" : "460E8407-0D60-4523-BEED-804ACEED0C66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/usememos/memos/commit/0f8ce3dd1696722f951d7195ad1f88b39a5d15d7",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/0b28fa57-acb0-47c8-ac48-962ff3898156",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/usememos/memos/commit/0f8ce3dd1696722f951d7195ad1f88b39a5d15d7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/0b28fa57-acb0-47c8-ac48-962ff3898156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0108",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-07T04:15:08.240",
      "lastModified" : "2024-11-21T07:36:34.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting (XSS): almacenado en el repositorio de GitHub usememos/memos anteriores a 0.10.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usememos:memos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.10.0",
            "matchCriteriaId" : "460E8407-0D60-4523-BEED-804ACEED0C66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/f66d33df-6588-4ab4-80a0-847451517944",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/f66d33df-6588-4ab4-80a0-847451517944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0110",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-07T04:15:08.317",
      "lastModified" : "2024-11-21T07:36:34.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting (XSS): almacenado en el repositorio de GitHub usememos/memos anteriores a 0.10.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usememos:memos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.10.0",
            "matchCriteriaId" : "460E8407-0D60-4523-BEED-804ACEED0C66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/6e4a1961-dbca-46f6-ae21-c25a621e54a7",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/6e4a1961-dbca-46f6-ae21-c25a621e54a7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0111",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-07T04:15:08.393",
      "lastModified" : "2024-11-21T07:36:34.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting (XSS): almacenado en el repositorio de GitHub usememos/memos anteriores a 0.10.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usememos:memos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.10.0",
            "matchCriteriaId" : "460E8407-0D60-4523-BEED-804ACEED0C66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/70da256c-977a-487e-8a6a-9ae22caedbe3",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/70da256c-977a-487e-8a6a-9ae22caedbe3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0112",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-07T04:15:08.467",
      "lastModified" : "2024-11-21T07:36:34.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0."
      }, {
        "lang" : "es",
        "value" : "cross site scripting (XSS): almacenado en el repositorio de GitHub usememos/memos anteriores a 0.10.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:usememos:memos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.10.0",
            "matchCriteriaId" : "460E8407-0D60-4523-BEED-804ACEED0C66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/ec2a29dc-79a3-44bd-a58b-15f676934af6",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/ec2a29dc-79a3-44bd-a58b-15f676934af6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0113",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-07T09:15:21.820",
      "lastModified" : "2024-11-21T07:36:34.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Netis Netcore Router up to 2.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-217591."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Netis Netcore Router hasta 2.2.6. Ha sido declarada problemática. Una función desconocida del archivo param.file.tgz del componente Backup Handler es afectada por esta vulnerabilidad. La manipulación conduce a la divulgación de información. El ataque se puede lanzar de forma remota. El identificador asociado de esta vulnerabilidad es VDB-217591."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netis-systems:netcore_router_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B4C921-426B-4707-A7EB-E234D2745FB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netis-systems:netcore_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5F7E1A-E6AC-444C-ADA6-E7DC8B91B32D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.217591",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.217591",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.217591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0114",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-07T09:15:21.900",
      "lastModified" : "2024-11-21T07:36:34.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Netis Netcore Router. It has been rated as problematic. Affected by this issue is some unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to cleartext storage in a file or on disk. Local access is required to approach this attack. The identifier of this vulnerability is VDB-217592."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Netis Netcore Router. Ha sido calificada como problemática. Una función desconocida del archivo param.file.tgz del componente Backup Handler es afectada por esta vulnerabilidad. La manipulación conduce al almacenamiento de texto plano en un archivo o en un disco. Se requiere acceso local para abordar este ataque. El identificador de esta vulnerabilidad es VDB-217592."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-313"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netis-systems:netcore_router_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B4C921-426B-4707-A7EB-E234D2745FB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netis-systems:netcore_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5F7E1A-E6AC-444C-ADA6-E7DC8B91B32D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.217592",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.217592",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.217592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0035",
      "sourceIdentifier" : "scy@openharmony.io",
      "published" : "2023-01-09T03:15:09.503",
      "lastModified" : "2024-11-21T07:36:26.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "softbus_client_stub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an \"SA relay attack\".Local attackers can bypass authentication and attack other SAs with high privilege.\n"
      }, {
        "lang" : "es",
        "value" : "softbus_client_stub en el subsistema de comunicación dentro de OpenHarmony-v3.0.5 y versiones anteriores tiene una vulnerabilidad de omisión de autenticación que permite un \"SA relay attack\". Los atacantes locales pueden omitir la autenticación y atacar a otras SA con altos privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "scy@openharmony.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "scy@openharmony.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openatom:openharmony:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndIncluding" : "3.0.5",
            "matchCriteriaId" : "3EB94C88-3DA9-4A6C-B8CA-EBA06D8405CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-01.md",
        "source" : "scy@openharmony.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-01.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0036",
      "sourceIdentifier" : "scy@openharmony.io",
      "published" : "2023-01-09T03:15:09.580",
      "lastModified" : "2024-11-21T07:36:26.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "platform_callback_stub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an \"SA relay attack\".Local attackers can bypass authentication and attack other SAs with high privilege.\n"
      }, {
        "lang" : "es",
        "value" : "platform_callback_stub en el subsistema misceláneo dentro de OpenHarmony-v3.0.5 y versiones anteriores tiene una vulnerabilidad de omisión de autenticación que permite un \"SA relay attack\". Los atacantes locales pueden omitir la autenticación y atacar a otras SA con altos privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "scy@openharmony.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "scy@openharmony.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openatom:openharmony:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndIncluding" : "3.0.5",
            "matchCriteriaId" : "3EB94C88-3DA9-4A6C-B8CA-EBA06D8405CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-01.md",
        "source" : "scy@openharmony.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-01.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22472",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-09T14:15:10.097",
      "lastModified" : "2024-11-21T07:44:52.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. It is possible to make a user send any POST request with an arbitrary body given they click on a malicious deep link on a Windows computer. (e.g. in an email, chat link, etc). There are currently no known workarounds. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.2.\n"
      }, {
        "lang" : "es",
        "value" : "Deck es una herramienta de organización estilo kanban destinada a la planificación personal y organización de proyectos para equipos integrada con Nextcloud. Es posible hacer que un usuario envíe cualquier solicitud POST con un cuerpo arbitrario siempre que haga clic en un enlace profundo malicioso en una computadora con Windows. (por ejemplo, en un correo electrónico, enlace de chat, etc.). Actualmente no se conocen workarounds. Se recomienda actualizar el cliente de escritorio Nextcloud a 3.6.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:desktop:3.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC850E1-0547-4D38-A24E-157F4154AB98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/desktop/pull/5106",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-4gfv-xqpx-42qj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/desktop/pull/5106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-4gfv-xqpx-42qj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22473",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-09T15:15:11.037",
      "lastModified" : "2024-11-21T07:44:52.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Talk-Android enables users to have video & audio calls through Nextcloud on Android. Due to passcode bypass, an attacker is able to access the user's Nextcloud files and view conversations. To exploit this the attacker needs to have physical access to the target's device. There are currently no known workarounds available. It is recommended that the Nextcloud Talk Android app is upgraded to 15.0.2. \n"
      }, {
        "lang" : "es",
        "value" : "Talk-Android permite a los usuarios tener video y videollamadas de audio a través de Nextcloud en Android. Debido a la omisión del código de acceso, un atacante puede acceder a los archivos de Nextcloud del usuario y ver las conversaciones. Para aprovechar esto, el atacante necesita tener acceso físico al dispositivo del objetivo. Actualmente no hay soluciones conocidas disponibles. Se recomienda actualizar la aplicación de Android Nextcloud Talk a 15.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:talk:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "15.0.2",
            "matchCriteriaId" : "F047F462-A067-416B-B882-CBB1ED99489D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wvr4-gc4c-6vmx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/talk-android/pull/2598",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1784645",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wvr4-gc4c-6vmx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/talk-android/pull/2598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1784645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22477",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-09T15:15:11.127",
      "lastModified" : "2024-11-21T07:44:53.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mercurius is a GraphQL adapter for Fastify. Any users of Mercurius until version 10.5.0 are subjected to a denial of service attack by sending a malformed packet over WebSocket to `/graphql`. This issue was patched in #940. As a workaround, users can disable subscriptions.\n\n"
      }, {
        "lang" : "es",
        "value" : "Mercurius es un adaptador GraphQL para Fastify. Cualquier usuario de Mercurius hasta la versión 10.5.0 está sujeto a un ataque de denegación de servicio al enviar un paquete con formato incorrecto a través de WebSocket a \"/graphql\". Este problema se solucionó en el n.° 940. Como workaround, los usuarios pueden desactivar las suscripciones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercurius_project:mercurius:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "8.13.2",
            "matchCriteriaId" : "78357691-02E7-4644-9A54-02DCBE4A6B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mercurius_project:mercurius:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "11.5.0",
            "matchCriteriaId" : "8FDDE8C9-B8CC-417B-9250-5950C2E48CC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mercurius-js/mercurius/issues/939",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mercurius-js/mercurius/pull/940",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mercurius-js/mercurius/security/advisories/GHSA-cm8h-q92v-xcfc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mercurius-js/mercurius/issues/939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mercurius-js/mercurius/pull/940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mercurius-js/mercurius/security/advisories/GHSA-cm8h-q92v-xcfc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0125",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-09T21:15:11.070",
      "lastModified" : "2024-11-21T07:36:36.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Control iD Gerencia Web 1.30. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Interface. The manipulation of the argument Nome leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-217717 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en Control iD Gerencia Web 1.30. Ha sido declarada problemática. Una función desconocida del componente Web Interface es afectada por esta vulnerabilidad. La manipulación del argumento Nome conduce a cross-site scripting. El ataque se puede lanzar de forma remota. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-217717."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:control_id_panel_project:control_id_panel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C13DE22-FBC0-4099-BF5B-F2927BE8120D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.217717",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217717",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.notion.so/ControlID-XSS-7ab891644a794103b582a59360f071a5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.217717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.217717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.notion.so/ControlID-XSS-7ab891644a794103b582a59360f071a5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22895",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-10T01:15:10.677",
      "lastModified" : "2025-04-07T19:15:50.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product."
      }, {
        "lang" : "es",
        "value" : "bzip2 crate anterior a 0.4.4 para Rust permite a los atacantes provocar una denegación de servicio a través de un archivo grande que desencadena un desbordamiento de enteros en mem.rs. NOTA: esto no está relacionado con el producto https://crates.io/crates/bzip2-rs."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip2_project:bzip2:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.4.4",
            "matchCriteriaId" : "15C9A361-3E94-4D9F-8319-EB5E27B57773"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://crates.io/crates/bzip2/versions",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alexcrichton/bzip2-rs/pull/86",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MI5SVRSGKBWB2JGDLDVIFY5ZQVDZP6I7/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SQK57GGXJX3AH7KF6S7S3N7JC5QOYUQ7/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UUK2JO25PPA6XBREKJRBLRCD22LKIOLO/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://crates.io/crates/bzip2/versions",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alexcrichton/bzip2-rs/pull/86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MI5SVRSGKBWB2JGDLDVIFY5ZQVDZP6I7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SQK57GGXJX3AH7KF6S7S3N7JC5QOYUQ7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UUK2JO25PPA6XBREKJRBLRCD22LKIOLO/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-10T02:15:09.900",
      "lastModified" : "2025-04-07T19:15:50.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive (aka ZIP bomb)."
      }, {
        "lang" : "es",
        "value" : "Workers/extractor.py en Pandora (también conocido como pandora-analysis/pandora) 1.3.0 permite una denegación de servicio cuando un atacante envía un archivo ZIP profundamente anidado (también conocido como bomba ZIP)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:circl:pandora:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.1",
            "matchCriteriaId" : "5D921D8A-0EFD-4FBB-8B02-22E682A059C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pandora-analysis/pandora/commit/1dc06327fdc07c56eae653e497dd137ec70d8265",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pandora-analysis/pandora/commit/1dc06327fdc07c56eae653e497dd137ec70d8265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-10T02:15:09.997",
      "lastModified" : "2025-04-09T16:15:23.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive."
      }, {
        "lang" : "es",
        "value" : "Zip4j hasta 2.11.2, como se usa en Threema y otros productos, no siempre verifica la MAC al descifrar un archivo ZIP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zip4j_project:zip4j:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.11.2",
            "matchCriteriaId" : "EB7DECD0-B6E1-49CD-A63C-47C38DFE663D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://breakingthe3ma.app",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://breakingthe3ma.app/files/Threema-PST22.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/srikanth-lingala/zip4j/issues/485",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/srikanth-lingala/zip4j/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=34316206",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://threema.ch/en/blog/posts/news-alleged-weaknesses-statement",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://breakingthe3ma.app",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://breakingthe3ma.app/files/Threema-PST22.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/srikanth-lingala/zip4j/issues/485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/srikanth-lingala/zip4j/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=34316206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://threema.ch/en/blog/posts/news-alleged-weaknesses-statement",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0012",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-01-10T03:15:10.067",
      "lastModified" : "2024-11-21T07:36:23.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SAP Host Agent (Windows) - versions 7.21, 7.22, an attacker who gains local membership to SAP_LocalAdmin could be able to replace executables with a malicious file that will be started under a privileged account. Note that by default all user members of SAP_LocaAdmin are denied the ability to logon locally by security policy so that this can only occur if the system has already been compromised."
      }, {
        "lang" : "es",
        "value" : "En SAP Host Agent (Windows), versiones 7.21, 7.22, un atacante que obtenga membresía local en SAP_LocalAdmin podría reemplazar archivos ejecutables con un archivo malicioso que se iniciará con una cuenta privilegiada. Tenga en cuenta que, de forma predeterminada, a todos los usuarios miembros de SAP_LocaAdmin se les niega la capacidad de iniciar sesión localmente por política de seguridad, por lo que esto solo puede ocurrir si el sistema ya se ha visto comprometido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:host_agent:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7ED1A15-9AC7-4CC8-9B8E-50D83066E4FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:host_agent:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E135017-1492-49F5-B3ED-F69D5476FB46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3276120",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3276120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0013",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-01-10T03:15:10.173",
      "lastModified" : "2024-11-21T07:36:23.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ABAP Keyword Documentation of SAP NetWeaver Application Server - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, for ABAP and ABAP Platform does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application."
      }, {
        "lang" : "es",
        "value" : "ABAP Keyword Documentation de SAP NetWeaver Application Server (versiones 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757) para ABAP y la plataforma ABAP no codifica suficientemente las entradas controladas por el usuario, lo que genera una vulnerabilidad de cross-site scripting (XSS). Si se explota con éxito, un atacante puede causar un impacto limitado en la confidencialidad y la integridad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706FEB9E-3EE9-405E-A8C9-733DAF68AC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC29738-CF17-4E6B-9C9E-879B17F7E001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416C064-BB8A-4230-A761-84A93E017F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72491771-4492-4902-9F0C-CE6A60BAA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421A5354-F764-402B-A3A4-2D746EACEB46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3283283",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3283283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0014",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-01-10T04:15:09.550",
      "lastModified" : "2024-11-21T07:36:23.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver ABAP Server and ABAP Platform - versions SAP_BASIS 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, KERNEL 7.22, 7.53, 7.77, 7.81, 7.85, 7.89, KRNL64UC 7.22, 7.22EXT, 7.53, KRNL64NUC 7.22, 7.22EXT, creates information about system identity in an ambiguous format. This could lead to capture-replay vulnerability and may be exploited by malicious users to obtain illegitimate access to the system.\n\n\n"
      }, {
        "lang" : "es",
        "value" : "SAP Netweaver ABAP Server y ABAP Platform - Versiones SAP_BASIS 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, Kernel 7.22, 7.53, 7.77, 7.81 , 7.85, 7.89, KRNL64UC 7.22, 7.22EXT, 7.53, KRNL64NUC 7.22, 7.22EXT, crea información sobre la identidad del sistema en un formato ambiguo. Esto podría generar una vulnerabilidad de captura-reproducción y podría ser aprovechado por usuarios malintencionados para obtener acceso ilegítimo al sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "6F048ED9-2DDF-4EB9-8571-73832AFABF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "C37DC475-6B9A-493C-9A6F-28CDD65D2A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "2BD9FE51-F76C-439A-A3C0-5279EC1059F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:710:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "9A8726A6-2AC2-4282-951F-A71AD03572F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:711:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "6E783E21-1F2A-44A2-BE1C-770370A6739B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:730:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "1E8E6E23-EA96-45D5-BC81-3E5990701AD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "4EB54432-0E1A-45F2-BEE1-8DC28FAADA9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "8E96C58C-ED44-487B-A67E-FDAE3C29023A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "A14DF5EB-B8CE-4A47-9959-2F65A5DCEF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "3E0CA53D-4335-4872-B527-30802E31B893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "419BA423-0803-4F51-8889-014A521F02CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "DA20ECDC-8807-462C-A0F0-70DF6F5A119B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "800AAC21-325C-4F16-AE5A-9F89327E5356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "BDC15DB7-A95B-475F-AAA6-60A801F65690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "55A2FECF-A32E-4188-9563-E8BA0E952261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:sap_basis:*:*:*",
            "matchCriteriaId" : "9CBF2E53-17F0-4BF0-9C38-749C7E611BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap_kernel:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A145BFD2-92C8-46B1-8F72-53F6C37018C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap_kernel:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5F121E-49BF-4F08-8623-79DDE0A37B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap_kernel:7.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF066A7-91C2-4B36-9A1B-80B1BC8A3E8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap_kernel:7.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A677338F-5955-435C-91FD-CC5C1A387024"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap_kernel:7.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A13006BE-0874-48D6-B8F6-47A117A2AE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap_kernel:7.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C7E312-AC74-4997-995F-74AB2E53B24B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap_krnl64nuc:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A4DCE73-B47A-4FDA-A96D-C251891C8E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap_krnl64nuc:7.22ext:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC795F5-1AE7-4B4C-B1DD-DEF46BB4122F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap_krnl64uc:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14757DC0-6CAC-4082-B726-719098C2216C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap_krnl64uc:7.22ext:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D24E493-7256-4881-9761-D84918EC1D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap_krnl64uc:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C060979B-38D0-40FD-B1A1-571F5F7C5E8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3089413",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3089413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0015",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-01-10T04:15:09.680",
      "lastModified" : "2024-11-21T07:36:23.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application."
      }, {
        "lang" : "es",
        "value" : "En la plataforma SAP BusinessObjects Business Intelligence (interfaz de usuario de Web Intelligence), versión 420, algunas llamadas devuelven json con un tipo de contenido incorrecto en el encabezado de la respuesta. Como resultado, una aplicación personalizada que llama directamente al jsp de Web Intelligence DHTML puede ser vulnerable a ataques XSS. Si se explota con éxito, un atacante puede causar un impacto limitado en la confidencialidad y la integridad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_objects_business_intelligence_platform:420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F7F8064-45BC-4A01-897A-0A2893BBBEC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3251447",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3251447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0016",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-01-10T04:15:09.797",
      "lastModified" : "2024-11-21T07:36:23.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP BPC MS 10.0 - version 810, allows an unauthorized attacker to execute crafted database queries. The exploitation of this issue could lead to SQL injection vulnerability and could allow an attacker to access, modify, and/or delete data from the backend database."
      }, {
        "lang" : "es",
        "value" : "SAP BPC MS 10.0 - versión 810, permite a un atacante no autorizado ejecutar consultas de bases de datos manipuladas. La explotación de este problema podría conducir a una vulnerabilidad de inyección SQL y podría permitir a un atacante acceder, modificar y/o eliminar datos de la base de datos backend."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_planning_and_consolidation:800:*:*:*:*:microsoft:*:*",
            "matchCriteriaId" : "6C81EEA1-659E-4080-84E6-8F61937F95B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_planning_and_consolidation:810:*:*:*:*:microsoft:*:*",
            "matchCriteriaId" : "AAB2F486-AF82-4469-ACC5-9AC62E8449E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3275391",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3275391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0017",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-01-10T04:15:09.887",
      "lastModified" : "2024-11-21T07:36:24.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and data on the current system. This could allow the attacker to have full read access to user data, make modifications to user data, and make services within the system unavailable."
      }, {
        "lang" : "es",
        "value" : "Un atacante no autenticado en SAP NetWeaver AS para Java - versión 7.50, debido a un control de acceso inadecuado, puede conectarse a una interfaz abierta y hacer uso de una API abierta de nombres y directorios para acceder a servicios que pueden usarse para realizar operaciones no autorizadas que afectan a los usuarios y los datos. sobre el sistema actual. Esto podría permitir al atacante tener acceso de lectura completo a los datos del usuario, realizar modificaciones en los datos del usuario y hacer que los servicios dentro del sistema no estén disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_for_java:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A80232-F2C2-4B40-A00C-25611D3409AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3268093",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3268093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0018",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-01-10T04:15:09.980",
      "lastModified" : "2024-11-21T07:36:24.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to improper input sanitization of user-controlled input in SAP BusinessObjects Business Intelligence Platform CMC application - versions 420, and 430, an attacker with basic user-level privileges can modify/upload crystal reports containing a malicious payload. Once these reports are viewable, anyone who opens those reports would be susceptible to stored XSS attacks. As a result of the attack, information maintained in the victim's web browser can be read, modified, and sent to the attacker."
      }, {
        "lang" : "es",
        "value" : "Debido a una desinfección inadecuada de la entrada controlada por el usuario en SAP BusinessObjects Business Intelligence Platform CMC application (versiones 420 y 430), un atacante con privilegios básicos de nivel de usuario puede modificar/cargar informes Crystal que contengan un payload malicioso. Una vez que estos informes sean visibles, cualquiera que los abra será susceptible a ataques XSS almacenados. Como resultado del ataque, la información mantenida en el navegador web de la víctima puede leerse, modificarse y enviarse al atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2909B78-C7F9-4267-B9A0-B6A1F776EB73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3DF21A-C043-4F60-944D-7ADD6BDDDF51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3266006",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3266006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0022",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-01-10T04:15:10.080",
      "lastModified" : "2024-11-21T07:36:24.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP BusinessObjects Business Intelligence Analysis edition for OLAP allows an authenticated attacker to inject malicious code that can be executed by the application over the network. On successful exploitation, an attacker can perform operations that may completely compromise the application causing a high impact on the confidentiality, integrity, and availability of the application."
      }, {
        "lang" : "es",
        "value" : "SAP BusinessObjects Business Intelligence Analysis edition for OLAP permite a un atacante autenticado inyectar código malicioso que la aplicación puede ejecutar a través de la red. Si la explotación tiene éxito, un atacante puede realizar operaciones que pueden comprometer completamente la aplicación y causar un alto impacto en la confidencialidad, integridad y disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:420:*:*:*:analysis:olap:*:*",
            "matchCriteriaId" : "0DADEB14-CCB0-4D17-BC3F-224402579BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:analysis:olap:*:*",
            "matchCriteriaId" : "BB42F6BB-3C80-4E9E-AF11-E823152E60F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3262810",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3262810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0023",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-01-10T04:15:10.187",
      "lastModified" : "2024-11-21T07:36:24.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application."
      }, {
        "lang" : "es",
        "value" : "En la aplicación SAP Bank Account Management (Manage Banks), cuando un usuario hace clic en un enlace inteligente para navegar a otra aplicación, los datos personales se muestran directamente en la URL. Es posible que queden capturados en archivos de registro, marcadores, etc., que revelen datos confidenciales de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:bank_account_management:800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "963456EB-CC8B-4705-B2B5-7AD2014F412F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:bank_account_management:900:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220EFF78-6FB8-4897-84D1-CB63746E22E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3150704",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3150704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22320",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-10T04:15:10.293",
      "lastModified" : "2025-04-07T19:15:48.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22). Furthermore, a crafted URL may be evaluated incorrectly."
      }, {
        "lang" : "es",
        "value" : "OpenAM Web Policy Agent (OpenAM Consortium Edition) proporcionado por OpenAM Consortium analiza las URL de forma incorrecta, lo que genera una vulnerabilidad de path traversal (CWE-22). Además, una URL manipulada puede evaluarse incorrectamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openam:openam:4.1.0:*:*:*:consortium:*:*:*",
            "matchCriteriaId" : "0D902605-E743-4A84-82FC-C8E8CDF013EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openam-jp/web-agents/issues/3",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVN91740661/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/openam-jp/web-agents/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVN91740661/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-10T06:15:09.947",
      "lastModified" : "2025-04-07T19:15:51.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "api/views/user.py in LibrePhotos before e19e539 has incorrect access control."
      }, {
        "lang" : "es",
        "value" : "api/views/user.py en LibrePhotos anterior a e19e539 tiene un control de acceso incorrecto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:librephotos_project:librephotos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-01-09",
            "matchCriteriaId" : "63F1A949-95F6-4C1A-9516-444D4E790A4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LibrePhotos/librephotos/commit/e19e539356df77f6f59e7d1eea22d452b268e120",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://raw.githubusercontent.com/go-compile/security-advisories/master/CVE-2023-22903.pdf",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/LibrePhotos/librephotos/commit/e19e539356df77f6f59e7d1eea22d452b268e120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://raw.githubusercontent.com/go-compile/security-advisories/master/CVE-2023-22903.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-10T08:15:10.270",
      "lastModified" : "2025-04-07T19:15:51.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. SpecialMobileHistory allows remote attackers to cause a denial of service because database queries are slow."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en MediaWiki antes de 1.35.9, 1.36.x hasta 1.38.x antes de 1.38.5 y 1.39.x antes de 1.39.1. SpecialMobileHistory permite a atacantes remotos provocar una denegación de servicio porque las consultas a la base de datos son lentas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.35.9",
            "matchCriteriaId" : "357C67CA-8586-4F8D-951C-51220DD6AA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.36.0",
            "versionEndExcluding" : "1.38.5",
            "matchCriteriaId" : "13962AAD-4625-42E8-B960-53FAE7699070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.39.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "243E4420-7054-4190-8270-76E09207FC9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.39.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "90D9672A-851F-46B0-AA0D-35991D7802E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.39.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5141FCFC-D842-49B8-9385-5EE2DB6E7BFA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AP65YEN762IBNQPOYGUVLTQIDLM5XD2A/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://phabricator.wikimedia.org/T320987",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AP65YEN762IBNQPOYGUVLTQIDLM5XD2A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://phabricator.wikimedia.org/T320987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-10T08:15:10.433",
      "lastModified" : "2025-04-07T19:15:51.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. E-Widgets does widget replacement in HTML attributes, which can lead to XSS, because widget authors often do not expect that their widget is executed in an HTML attribute context."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en MediaWiki antes de 1.35.9, 1.36.x hasta 1.38.x antes de 1.38.5 y 1.39.x antes de 1.39.1. E-Widgets reemplaza widgets en atributos HTML, lo que puede conducir a XSS, porque los autores de widgets a menudo no esperan que su widget se ejecute en un contexto de atributo HTML."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.35.9",
            "matchCriteriaId" : "357C67CA-8586-4F8D-951C-51220DD6AA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.36.0",
            "versionEndExcluding" : "1.38.5",
            "matchCriteriaId" : "13962AAD-4625-42E8-B960-53FAE7699070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.39.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "243E4420-7054-4190-8270-76E09207FC9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.39.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "90D9672A-851F-46B0-AA0D-35991D7802E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.39.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5141FCFC-D842-49B8-9385-5EE2DB6E7BFA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AP65YEN762IBNQPOYGUVLTQIDLM5XD2A/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://phabricator.wikimedia.org/T149488",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AP65YEN762IBNQPOYGUVLTQIDLM5XD2A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://phabricator.wikimedia.org/T149488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0162",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-10T18:15:10.593",
      "lastModified" : "2026-04-08T18:17:41.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CPO Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of its content type settings parameters in versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El complemento CPO Companion para WordPress es vulnerable a Cross-Site Scripting almacenado a través de varios de sus parámetros de content type settings en versiones hasta la 1.0.4 incluida debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:machothemes:cpo_companion:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.4",
            "matchCriteriaId" : "E7893CDA-7BE1-470F-86A7-77362F53EF51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2844012%40cpo-companion%2Ftrunk&old=2574013%40cpo-companion%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9195ac7e-2995-44d0-b5c6-8ffb47395f24?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2844012%40cpo-companion%2Ftrunk&old=2574013%40cpo-companion%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9195ac7e-2995-44d0-b5c6-8ffb47395f24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0128",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-10T20:15:10.703",
      "lastModified" : "2025-05-05T16:15:23.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "El use after free en el modo de descripción general en Google Chrome en Chrome OS anterior a 109.0.5414.74 permitía a un atacante remoto convencer a un usuario de participar en interacciones específicas de la interfaz de usuario para explotar potencialmente la corrupción del montón a través de una página HTML manipulada. (Severidad de seguridad de Chromium: alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.74",
            "matchCriteriaId" : "928C6CC5-27ED-419A-A48E-567D24444D52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1353208",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1353208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0129",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-10T20:15:10.760",
      "lastModified" : "2025-05-05T16:15:23.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and specific interactions. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "El desbordamiento de búfer en la región Heap de la memoria en el servicio de red de Google Chrome anterior a 109.0.5414.74 permitió a un atacante convencer a un usuario de instalar una extensión maliciosa para explotar potencialmente la corrupción del montón a través de una página HTML manipulada e interacciones específicas. (Severidad de seguridad de Chromium: alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.74",
            "matchCriteriaId" : "928C6CC5-27ED-419A-A48E-567D24444D52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1382033",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1382033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0130",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-10T20:15:10.817",
      "lastModified" : "2025-03-20T21:15:15.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "La implementación inapropiada en la API de pantalla completa en Google Chrome en Android anterior a 109.0.5414.74 permitió a un atacante remoto falsificar el contenido del Omnibox (barra de URL) a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.74",
            "matchCriteriaId" : "928C6CC5-27ED-419A-A48E-567D24444D52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1370028",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1370028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0131",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-10T20:15:10.867",
      "lastModified" : "2025-03-20T21:15:15.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "La implementación inapropiada en iframe Sandbox en Google Chrome anterior a 109.0.5414.74 permitió a un atacante remoto omitir las restricciones de descarga de archivos a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.74",
            "matchCriteriaId" : "928C6CC5-27ED-419A-A48E-567D24444D52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1357366",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1357366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0132",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-10T20:15:10.923",
      "lastModified" : "2025-03-20T21:15:16.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a permission prompt via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "La implementación inadecuada de las solicitudes de permiso en Google Chrome en Windows anteriores a 109.0.5414.74 permitió a un atacante remoto forzar la aceptación de una solicitud de permiso a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.74",
            "matchCriteriaId" : "928C6CC5-27ED-419A-A48E-567D24444D52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1371215",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1371215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0133",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-10T20:15:10.977",
      "lastModified" : "2025-03-20T21:15:16.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypass main origin permission delegation via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "La implementación inapropiada de las solicitudes de permiso en Google Chrome en Android anterior a 109.0.5414.74 permitió a un atacante remoto omitir la delegación de permisos del origen principal a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.74",
            "matchCriteriaId" : "928C6CC5-27ED-419A-A48E-567D24444D52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1375132",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1375132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0134",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-10T20:15:11.030",
      "lastModified" : "2025-05-05T16:15:24.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "El use after free en Cart en Google Chrome anterior a 109.0.5414.74 permitió a un atacante convencer a un usuario de instalar una extensión maliciosa para explotar potencialmente la corrupción del montón a través de la corrupción de la base de datos y una página HTML manipulada. (Severidad de seguridad de Chromium: media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.74",
            "matchCriteriaId" : "928C6CC5-27ED-419A-A48E-567D24444D52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1385709",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1385709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0135",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-10T20:15:11.083",
      "lastModified" : "2025-05-05T16:15:24.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "El use after free en Cart en Google Chrome anterior a 109.0.5414.74 permitió a un atacante convencer a un usuario de instalar una extensión maliciosa para explotar potencialmente la corrupción del montón a través de la corrupción de la base de datos y una página HTML manipulada. (Severidad de seguridad de Chromium: media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.74",
            "matchCriteriaId" : "928C6CC5-27ED-419A-A48E-567D24444D52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1385831",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1385831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0136",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-10T20:15:11.137",
      "lastModified" : "2025-05-05T16:15:24.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "La implementación inapropiada en Fullscreen API en Google Chrome en Android anterior a 109.0.5414.74 permitió a un atacante remoto ejecutar una IU de seguridad incorrecta a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.74",
            "matchCriteriaId" : "928C6CC5-27ED-419A-A48E-567D24444D52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1356987",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1356987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0137",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-10T20:15:11.190",
      "lastModified" : "2025-05-05T16:15:24.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "El desbordamiento de búfer en la región Heap de la memoria en Platform Apps en Google Chrome en Chrome OS anterior a 109.0.5414.74 permitió a un atacante convencer a un usuario de instalar una extensión maliciosa para explotar potencialmente la corrupción del montón a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.74",
            "matchCriteriaId" : "928C6CC5-27ED-419A-A48E-567D24444D52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1399904",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1399904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0138",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-10T20:15:11.243",
      "lastModified" : "2025-05-05T16:15:24.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)"
      }, {
        "lang" : "es",
        "value" : "El desbordamiento de búfer en la región Heap de la memoria en libphonenumber en Google Chrome anterior a 109.0.5414.74 permitía a un atacante remoto explotar potencialmente la corrupción del montón a través de una página HTML manipulada. (Severidad de seguridad de Chrome: baja)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.74",
            "matchCriteriaId" : "928C6CC5-27ED-419A-A48E-567D24444D52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1346675",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1346675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0139",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-10T20:15:11.293",
      "lastModified" : "2024-11-21T07:36:37.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Low)"
      }, {
        "lang" : "es",
        "value" : "La validación insuficiente de entradas no confiables en Descargas en Google Chrome en Windows anteriores a 109.0.5414.74 permitió a un atacante remoto evitar las restricciones de descarga a través de una página HTML manipulada. (Severidad de seguridad de Chrome: baja)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.74",
            "matchCriteriaId" : "928C6CC5-27ED-419A-A48E-567D24444D52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1367632",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1367632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0140",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-10T20:15:11.350",
      "lastModified" : "2024-11-21T07:36:37.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Low)"
      }, {
        "lang" : "es",
        "value" : "La implementación inadecuada en la API del sistema de archivos en Google Chrome en Windows anterior a 109.0.5414.74 permitió a un atacante remoto omitir las restricciones del sistema de archivos a través de una página HTML manipulada. (Severidad de seguridad de Chrome: baja)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.74",
            "matchCriteriaId" : "928C6CC5-27ED-419A-A48E-567D24444D52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1326788",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1326788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0141",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-10T20:15:11.400",
      "lastModified" : "2025-03-20T21:15:16.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)"
      }, {
        "lang" : "es",
        "value" : "La aplicación insuficiente de políticas en CORS en Google Chrome antes de 109.0.5414.74 permitió que un atacante remoto filtrara datos de orígenes cruzados a través de una página HTML manipulada. (Severidad de seguridad de Chrome: baja)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.74",
            "matchCriteriaId" : "928C6CC5-27ED-419A-A48E-567D24444D52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1362331",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1362331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22469",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-10T21:15:12.830",
      "lastModified" : "2024-11-21T07:44:52.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. When getting the reference preview for Deck cards the user has no access to, unauthorized user could eventually get the cached data of a user that has access. There are currently no known workarounds. It is recommended that the Nextcloud app Deck is upgraded to 1.8.2.\n"
      }, {
        "lang" : "es",
        "value" : "Deck es una herramienta de organización estilo kanban destinada a la planificación personal y organización de proyectos para equipos integrada con Nextcloud. Al obtener la vista previa de referencia de las cartas de Deck a las que el usuario no tiene acceso, un usuario no autorizado podría eventualmente obtener los datos almacenados en caché de un usuario que tiene acceso. Actualmente no se conocen workarounds. Se recomienda actualizar la aplicación Deck de Nextcloud a 1.8.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:deck:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.2",
            "matchCriteriaId" : "145B2827-0F46-4699-A6D4-FE4D800D8411"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/deck/pull/4196",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8fjp-w9gp-j5hq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/deck/pull/4196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8fjp-w9gp-j5hq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22479",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-10T21:15:12.917",
      "lastModified" : "2024-11-21T07:44:53.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KubePi is a modern Kubernetes panel. A session fixation attack allows an attacker to hijack a legitimate user session, versions 1.6.3 and below are susceptible. A patch will be released in version 1.6.4."
      }, {
        "lang" : "es",
        "value" : "KubePi es un panel de Kubernetes moderno. Un ataque de fijación de sesión permite a un atacante secuestrar una sesión de usuario legítima; las versiones 1.6.3 e inferiores son susceptibles. Se lanzará un parche en la versión 1.6.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fit2cloud:kubepi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "A6B7CC4D-D5A0-4221-854C-2F37D2BB873C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/KubeOperator/KubePi/security/advisories/GHSA-v4w5-r2xc-7f8h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubePi/security/advisories/GHSA-v4w5-r2xc-7f8h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21524",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:14.260",
      "lastModified" : "2024-11-21T07:43:00.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de Windows Local Security Authority."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21524",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21525",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:14.360",
      "lastModified" : "2024-11-21T07:43:00.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio en tiempo de ejecución de llamada a procedimiento remoto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21525",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21527",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:14.430",
      "lastModified" : "2024-11-21T07:43:01.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows iSCSI Service Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio del servicio Windows iSCSI "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21527",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21531",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:14.493",
      "lastModified" : "2024-11-21T07:43:01.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure Service Fabric Container Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en el contenedor de Azure Service Fabric"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_service_fabric:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22CCCF25-71AB-469B-A5C1-2602AEBF4AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_service_fabric:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717B3120-7B4D-4DF8-8105-B9835367E111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_service_fabric:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3069D22-5413-4083-8B01-02474DCA25E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21531",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21532",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:14.563",
      "lastModified" : "2024-11-21T07:43:01.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows GDI Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de Windows GDI"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21532",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21535",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:14.630",
      "lastModified" : "2024-11-21T07:43:01.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código en Windows Secure Socket Tunneling Protocol (SSTP)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21535",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21536",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:14.697",
      "lastModified" : "2024-11-21T07:43:01.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Event Tracing for Windows Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en Event Tracing para Windows."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21536",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21537",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:14.763",
      "lastModified" : "2024-11-21T07:43:01.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de Microsoft Message Queuing (MSMQ)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21537",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21538",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:14.837",
      "lastModified" : "2024-11-21T07:43:02.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : ".NET Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio de .NET"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net:6.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1DE0C8DD-9C73-4876-8193-068F18074B58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powershell:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B311D133-90AD-4574-9CFD-7243F3A8B50E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21538",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21538",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21539",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:14.903",
      "lastModified" : "2024-11-21T07:43:02.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Authentication Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de autenticación de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21539",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21540",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:14.967",
      "lastModified" : "2024-11-21T07:43:02.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Cryptographic Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información criptográfica de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21540",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21541",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:15.037",
      "lastModified" : "2024-11-21T07:43:02.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Task Scheduler Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del Programador de tareas de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21541",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21542",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:15.177",
      "lastModified" : "2024-11-21T07:43:02.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Installer Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del instalador de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21542",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21543",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:15.257",
      "lastModified" : "2024-11-21T07:43:02.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código del protocolo de túnel de capa 2 de Windows (L2TP)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21543",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21546",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:15.320",
      "lastModified" : "2024-11-21T07:43:03.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código del protocolo de túnel de capa 2 de Windows (L2TP)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21546",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21546",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21547",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:15.383",
      "lastModified" : "2024-11-21T07:43:03.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio del protocolo de intercambio de claves de Internet (IKE)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21547",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21548",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:15.447",
      "lastModified" : "2024-11-21T07:43:03.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código del protocolo de túnel de socket seguro (SSTP) de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21548",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21549",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:15.510",
      "lastModified" : "2024-11-21T07:43:03.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows SMB Witness Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del servicio testigo de SMB de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21549",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21550",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:15.577",
      "lastModified" : "2024-11-21T07:43:03.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Cryptographic Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información criptográfica de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21550",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21551",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:15.643",
      "lastModified" : "2024-11-21T07:43:03.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Cryptographic Services Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de los servicios criptográficos de Microsoft"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21551",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21552",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:15.710",
      "lastModified" : "2024-11-21T07:43:03.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows GDI Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de Windows GDI"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21552",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21555",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:15.773",
      "lastModified" : "2024-11-21T07:43:04.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código del protocolo de túnel de capa 2 de Windows (L2TP)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21555",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21556",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:15.843",
      "lastModified" : "2024-11-21T07:43:04.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código del protocolo de túnel de capa 2 de Windows (L2TP)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21556",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21557",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:15.910",
      "lastModified" : "2024-11-21T07:43:04.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio del Protocolo ligero de acceso a directorios (LDAP) de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21557",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21558",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:15.977",
      "lastModified" : "2024-11-21T07:43:04.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Error Reporting Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del servicio de informes de errores de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E65CB9-6DC2-4A90-8C6A-103BEDC99823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5DE444-AEA8-4674-AC58-31FC1F12BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B9F64296-66BF-4F1D-A11C-0C44C347E2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5D7F7DDB-440E-42CD-82F4-B2C13F3CC462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:-:*",
            "matchCriteriaId" : "C95BE92D-773A-47D4-9097-AC6A91D88777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:-:*",
            "matchCriteriaId" : "25D90B13-CFA5-48B7-824A-39C096AA27E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21558",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21559",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.043",
      "lastModified" : "2024-11-21T07:43:05.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Cryptographic Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información criptográfica de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21559",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21560",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.110",
      "lastModified" : "2024-11-21T07:43:05.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Boot Manager Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de la función de seguridad del Administrador de arranque de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21560",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21561",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.177",
      "lastModified" : "2024-11-21T07:43:05.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Cryptographic Services Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de los servicios criptográficos de Microsoft"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21561",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21563",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.243",
      "lastModified" : "2024-11-21T07:43:05.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BitLocker Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de la característica de seguridad de BitLocker"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21563",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21674",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.307",
      "lastModified" : "2025-10-30T19:16:50.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de llamada a procedimiento local avanzado (ALPC) de Windows."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "cisaExploitAdd" : "2023-01-10",
      "cisaActionDue" : "2023-01-31",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19685",
            "matchCriteriaId" : "2A983693-C39E-424B-8A1E-BD7B3A199632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5648",
            "matchCriteriaId" : "960B3437-DF2C-4CF6-AF06-9AF1E6AC9EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.3887",
            "matchCriteriaId" : "A7F8B54C-4564-497A-9786-876A516219C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2486",
            "matchCriteriaId" : "9EC1EA32-6810-4092-BEBF-120FBE093A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2486",
            "matchCriteriaId" : "05BF289F-51FE-4CE5-8487-D909E4CA3D77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2486",
            "matchCriteriaId" : "127FA76C-101B-4DAB-9034-1B893016D06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1455",
            "matchCriteriaId" : "84D221BE-D305-4BB8-ADAF-DEDFF7E35C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1105",
            "matchCriteriaId" : "3E62759B-9029-42E8-8807-1AC4C2D00401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5648",
            "matchCriteriaId" : "D1FFC699-725E-4F6A-988D-228613256CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.3887",
            "matchCriteriaId" : "7F9F1524-807A-49CC-9F15-B4967AF78E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.1487",
            "matchCriteriaId" : "D47581C0-F0DF-45D3-8BBF-B49E2172E01C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21674",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21674",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21675",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.370",
      "lastModified" : "2024-11-21T07:43:24.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del kernel de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21675",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21676",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.430",
      "lastModified" : "2024-11-21T07:43:24.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código del Protocolo ligero de acceso a directorios (LDAP) de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21676",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21677",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.493",
      "lastModified" : "2024-11-21T07:43:24.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio de extensión de intercambio de claves de Internet (IKE) de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21677",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21678",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.557",
      "lastModified" : "2024-11-21T07:43:24.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Print Spooler Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en la cola de impresión de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21678",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21679",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.620",
      "lastModified" : "2024-11-21T07:43:25.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código del protocolo de túnel de capa 2 de Windows (L2TP)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21679",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21680",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.680",
      "lastModified" : "2024-11-21T07:43:25.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Win32k Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de escalada de privilegios en Windows Win32k"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21680",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21681",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.747",
      "lastModified" : "2024-11-21T07:43:25.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Proveedor Microsoft WDAC OLE DB para la vulnerabilidad de ejecución remota de código de SQL Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21681",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21682",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.810",
      "lastModified" : "2024-11-21T07:43:25.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información del protocolo punto a punto (PPP) de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21682",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21683",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.870",
      "lastModified" : "2024-11-21T07:43:25.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio de extensión de intercambio de claves de Internet (IKE) de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21683",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21724",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.937",
      "lastModified" : "2024-11-21T07:43:30.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft DWM Core Library Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de la librería principal de Microsoft DWM"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21724",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21725",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:16.997",
      "lastModified" : "2024-11-21T07:43:30.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad que permite realizar una escalada de privilegios a través de la herramienta de eliminación de software malicioso de Windows (MSRT)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_malicious_software_removal_tool:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.109",
            "matchCriteriaId" : "8786B1AE-05E7-4B55-8D9A-63D4D280A18E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21725",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21726",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.090",
      "lastModified" : "2024-11-21T07:43:31.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Credential Manager User Interface Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en la interfaz de usuario de Windows Credential Manager"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-257"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21726",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21728",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.160",
      "lastModified" : "2024-11-21T07:43:31.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Netlogon Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio de Windows Netlogon"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21728",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21730",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.227",
      "lastModified" : "2024-11-21T07:43:31.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Cryptographic Services Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de Microsoft Cryptographic Services"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21730",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21732",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.290",
      "lastModified" : "2024-11-21T07:43:31.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft ODBC Driver Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Ejecución de Código Remota de Microsoft ODBC Driver"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21732",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21733",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.350",
      "lastModified" : "2024-11-21T07:43:31.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Bind Filter Driver Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del controlador del filtro de enlace de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21733",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21734",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.413",
      "lastModified" : "2024-11-21T07:43:32.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de Microsoft Office"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21734",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21735",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.473",
      "lastModified" : "2024-11-21T07:43:32.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de Microsoft Office"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21735",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21736",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.537",
      "lastModified" : "2024-11-21T07:43:32.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Visio Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Microsoft Office Visio Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF177984-A906-43FA-BF60-298133FBBD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3EF1E5-4757-4CFA-AE72-6BA876D3C9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "87EBA8C7-E317-4EFD-B1AA-DD6A8B0DFDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89229922-0836-4CC2-AED2-107C3142D0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21736",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21737",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.600",
      "lastModified" : "2024-11-21T07:43:32.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Visio Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código en Microsoft Office Visio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF177984-A906-43FA-BF60-298133FBBD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3EF1E5-4757-4CFA-AE72-6BA876D3C9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "87EBA8C7-E317-4EFD-B1AA-DD6A8B0DFDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89229922-0836-4CC2-AED2-107C3142D0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21737",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21738",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.660",
      "lastModified" : "2024-11-21T07:43:32.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Visio Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código en Microsoft Office Visio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF177984-A906-43FA-BF60-298133FBBD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3EF1E5-4757-4CFA-AE72-6BA876D3C9FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21738",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21739",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.727",
      "lastModified" : "2024-11-21T07:43:32.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Bluetooth Driver Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del controlador Bluetooth de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19685",
            "matchCriteriaId" : "2C1346B1-2E6B-43BA-B4FE-921668FE7FA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.10240.19685",
            "matchCriteriaId" : "837328F0-3327-4282-A052-4B2B70A32AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5648",
            "matchCriteriaId" : "ACFC4492-F6E5-4E87-9ACD-73AFCBF83549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5648",
            "matchCriteriaId" : "9010C07B-7688-4847-9847-6FCD52F57EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.3887",
            "matchCriteriaId" : "A7F8B54C-4564-497A-9786-876A516219C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2486",
            "matchCriteriaId" : "AED7EFB9-EC40-46C7-B7E2-B0FE245D83E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2486",
            "matchCriteriaId" : "940EAE2A-CF3C-4372-B00C-0E078FDA4998"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2486",
            "matchCriteriaId" : "05BF289F-51FE-4CE5-8487-D909E4CA3D77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2486",
            "matchCriteriaId" : "127FA76C-101B-4DAB-9034-1B893016D06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1455",
            "matchCriteriaId" : "0EB4809B-34A4-4F53-A0AF-689638CF2F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1455",
            "matchCriteriaId" : "A809468E-4FB6-4421-924E-246A2A447F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22621.1105",
            "matchCriteriaId" : "088C88B9-1BAD-49B2-8E7C-7003C207E311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1105",
            "matchCriteriaId" : "829629EE-33A6-405B-972E-EF0AD42A3574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "6.3.9600.20778",
            "matchCriteriaId" : "774117D4-07C8-49B6-A2CA-842FD898CFF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "6.3.9600.20778",
            "matchCriteriaId" : "DCD363DB-4667-472D-832F-760AE785E607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "6.3.9600.20778",
            "matchCriteriaId" : "943EF503-E48A-4756-A78D-C26F8CC3417F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "6.3.9600.20778",
            "matchCriteriaId" : "5095B736-5803-4695-ADD9-7AEC06F72C83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21739",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21741",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.790",
      "lastModified" : "2024-11-21T07:43:33.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Visio Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información en Microsoft Office Visio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF177984-A906-43FA-BF60-298133FBBD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3EF1E5-4757-4CFA-AE72-6BA876D3C9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "87EBA8C7-E317-4EFD-B1AA-DD6A8B0DFDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89229922-0836-4CC2-AED2-107C3142D0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21741",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21742",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.860",
      "lastModified" : "2024-11-21T07:43:33.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de Microsoft SharePoint Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:-:*:*:*:subscription:*:*:*",
            "matchCriteriaId" : "AC8BB33F-44C4-41FE-8B17-68E3C4B38142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "157CBD57-8A1B-4B57-8371-88EF4254A663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21742",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21743",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.923",
      "lastModified" : "2024-11-21T07:43:33.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de la función de seguridad de Microsoft SharePoint Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:-:*:*:*:subscription:*:*:*",
            "matchCriteriaId" : "AC8BB33F-44C4-41FE-8B17-68E3C4B38142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21743",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21744",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:17.987",
      "lastModified" : "2024-11-21T07:43:33.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de Microsoft SharePoint Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:-:*:*:*:subscription:*:*:*",
            "matchCriteriaId" : "AC8BB33F-44C4-41FE-8B17-68E3C4B38142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "157CBD57-8A1B-4B57-8371-88EF4254A663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21744",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21745",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.060",
      "lastModified" : "2024-11-21T07:43:33.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Spoofing Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de suplantación de identidad de Microsoft Exchange Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "FF76AEDA-E574-40ED-B64F-8FDEF8CAC802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "435343A4-BF10-461A-ABF2-D511A5FBDA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B23C8E3E-5243-4DA6-B9AA-F6053084B55E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21745",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21746",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.123",
      "lastModified" : "2024-11-21T07:43:33.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows NTLM Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios NTLM de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E65CB9-6DC2-4A90-8C6A-103BEDC99823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5DE444-AEA8-4674-AC58-31FC1F12BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B9F64296-66BF-4F1D-A11C-0C44C347E2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5D7F7DDB-440E-42CD-82F4-B2C13F3CC462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B4120497-0B6E-4704-99A5-D98EB8271C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D9C194F4-12C5-452D-913A-AAAF04598FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "747ED159-1972-4310-AAD1-8E02AFB08826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "62B9100B-206D-4FD1-8D23-A355DCA37460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21746",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21747",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.183",
      "lastModified" : "2024-11-21T07:43:33.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del kernel de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21747",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21748",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.240",
      "lastModified" : "2024-11-21T07:43:33.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del kernel de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21748",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21749",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.303",
      "lastModified" : "2024-11-21T07:43:34.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del kernel de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21749",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21750",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.367",
      "lastModified" : "2024-11-21T07:43:34.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del kernel de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21750",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21752",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.433",
      "lastModified" : "2024-11-21T07:43:34.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Backup Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del servicio de copia de seguridad de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E65CB9-6DC2-4A90-8C6A-103BEDC99823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5DE444-AEA8-4674-AC58-31FC1F12BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B9F64296-66BF-4F1D-A11C-0C44C347E2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5D7F7DDB-440E-42CD-82F4-B2C13F3CC462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B4120497-0B6E-4704-99A5-D98EB8271C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D9C194F4-12C5-452D-913A-AAAF04598FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "747ED159-1972-4310-AAD1-8E02AFB08826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "62B9100B-206D-4FD1-8D23-A355DCA37460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21753",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.493",
      "lastModified" : "2024-11-21T07:43:34.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Event Tracing for Windows Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Seguimiento de eventos para la vulnerabilidad de divulgación de información de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21753",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21754",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.557",
      "lastModified" : "2024-11-21T07:43:34.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del kernel de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21754",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21755",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.613",
      "lastModified" : "2024-11-21T07:43:34.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del kernel de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21755",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21757",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.677",
      "lastModified" : "2024-11-21T07:43:35.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio del protocolo de túnel de capa 2 de Windows (L2TP)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E65CB9-6DC2-4A90-8C6A-103BEDC99823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5DE444-AEA8-4674-AC58-31FC1F12BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B9F64296-66BF-4F1D-A11C-0C44C347E2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5D7F7DDB-440E-42CD-82F4-B2C13F3CC462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B4120497-0B6E-4704-99A5-D98EB8271C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D9C194F4-12C5-452D-913A-AAAF04598FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "747ED159-1972-4310-AAD1-8E02AFB08826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "62B9100B-206D-4FD1-8D23-A355DCA37460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21757",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21758",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.740",
      "lastModified" : "2024-11-21T07:43:35.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de denegación de servicio de extensión de intercambio de claves de Internet (IKE) de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E65CB9-6DC2-4A90-8C6A-103BEDC99823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5DE444-AEA8-4674-AC58-31FC1F12BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B9F64296-66BF-4F1D-A11C-0C44C347E2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5D7F7DDB-440E-42CD-82F4-B2C13F3CC462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B4120497-0B6E-4704-99A5-D98EB8271C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D9C194F4-12C5-452D-913A-AAAF04598FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "747ED159-1972-4310-AAD1-8E02AFB08826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "62B9100B-206D-4FD1-8D23-A355DCA37460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21758",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21759",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.807",
      "lastModified" : "2024-11-21T07:43:35.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de la función de seguridad del servidor de administración de recursos de tarjetas inteligentes de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E65CB9-6DC2-4A90-8C6A-103BEDC99823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5DE444-AEA8-4674-AC58-31FC1F12BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B4120497-0B6E-4704-99A5-D98EB8271C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D9C194F4-12C5-452D-913A-AAAF04598FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "747ED159-1972-4310-AAD1-8E02AFB08826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "62B9100B-206D-4FD1-8D23-A355DCA37460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21759",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21760",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.867",
      "lastModified" : "2024-11-21T07:43:35.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Print Spooler Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en la cola de impresión de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E65CB9-6DC2-4A90-8C6A-103BEDC99823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5DE444-AEA8-4674-AC58-31FC1F12BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B9F64296-66BF-4F1D-A11C-0C44C347E2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5D7F7DDB-440E-42CD-82F4-B2C13F3CC462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B4120497-0B6E-4704-99A5-D98EB8271C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D9C194F4-12C5-452D-913A-AAAF04598FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "747ED159-1972-4310-AAD1-8E02AFB08826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "62B9100B-206D-4FD1-8D23-A355DCA37460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21760",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21761",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.927",
      "lastModified" : "2024-11-21T07:43:35.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información de Microsoft Exchange Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "FF76AEDA-E574-40ED-B64F-8FDEF8CAC802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "435343A4-BF10-461A-ABF2-D511A5FBDA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B23C8E3E-5243-4DA6-B9AA-F6053084B55E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21761",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21762",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:18.987",
      "lastModified" : "2024-11-21T07:43:35.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Spoofing Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de suplantación de identidad de Microsoft Exchange Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "DA166F2A-D83B-4D50-AD0B-668D813E0585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "FF76AEDA-E574-40ED-B64F-8FDEF8CAC802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "435343A4-BF10-461A-ABF2-D511A5FBDA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B23C8E3E-5243-4DA6-B9AA-F6053084B55E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21762",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21763",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.047",
      "lastModified" : "2024-11-21T07:43:36.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de Microsoft Exchange Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "FF76AEDA-E574-40ED-B64F-8FDEF8CAC802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "435343A4-BF10-461A-ABF2-D511A5FBDA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B23C8E3E-5243-4DA6-B9AA-F6053084B55E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21763",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21764",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.117",
      "lastModified" : "2024-11-21T07:43:36.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de Microsoft Exchange Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "FF76AEDA-E574-40ED-B64F-8FDEF8CAC802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "435343A4-BF10-461A-ABF2-D511A5FBDA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B23C8E3E-5243-4DA6-B9AA-F6053084B55E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21764",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21765",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.177",
      "lastModified" : "2024-11-21T07:43:36.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Print Spooler Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en la cola de impresión de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E65CB9-6DC2-4A90-8C6A-103BEDC99823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5DE444-AEA8-4674-AC58-31FC1F12BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B9F64296-66BF-4F1D-A11C-0C44C347E2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5D7F7DDB-440E-42CD-82F4-B2C13F3CC462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B4120497-0B6E-4704-99A5-D98EB8271C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D9C194F4-12C5-452D-913A-AAAF04598FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "747ED159-1972-4310-AAD1-8E02AFB08826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "62B9100B-206D-4FD1-8D23-A355DCA37460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21765",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21766",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.243",
      "lastModified" : "2024-11-21T07:43:36.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Overlay Filter Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información del filtro de superposición de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E65CB9-6DC2-4A90-8C6A-103BEDC99823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5DE444-AEA8-4674-AC58-31FC1F12BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B9F64296-66BF-4F1D-A11C-0C44C347E2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5D7F7DDB-440E-42CD-82F4-B2C13F3CC462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B4120497-0B6E-4704-99A5-D98EB8271C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D9C194F4-12C5-452D-913A-AAAF04598FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "747ED159-1972-4310-AAD1-8E02AFB08826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "62B9100B-206D-4FD1-8D23-A355DCA37460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21766",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21767",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.303",
      "lastModified" : "2024-11-21T07:43:36.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Overlay Filter Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del filtro de superposición de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E65CB9-6DC2-4A90-8C6A-103BEDC99823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5DE444-AEA8-4674-AC58-31FC1F12BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B9F64296-66BF-4F1D-A11C-0C44C347E2AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5D7F7DDB-440E-42CD-82F4-B2C13F3CC462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B4120497-0B6E-4704-99A5-D98EB8271C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D9C194F4-12C5-452D-913A-AAAF04598FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "747ED159-1972-4310-AAD1-8E02AFB08826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "62B9100B-206D-4FD1-8D23-A355DCA37460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21767",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21768",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.367",
      "lastModified" : "2024-11-21T07:43:36.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Controlador de función auxiliar de Windows para la vulnerabilidad de elevación de privilegios de WinSock"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B4120497-0B6E-4704-99A5-D98EB8271C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D9C194F4-12C5-452D-913A-AAAF04598FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "747ED159-1972-4310-AAD1-8E02AFB08826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "62B9100B-206D-4FD1-8D23-A355DCA37460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21768",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21771",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.427",
      "lastModified" : "2024-11-21T07:43:36.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del Administrador de sesión local (LSM) de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E65CB9-6DC2-4A90-8C6A-103BEDC99823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5DE444-AEA8-4674-AC58-31FC1F12BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B4120497-0B6E-4704-99A5-D98EB8271C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D9C194F4-12C5-452D-913A-AAAF04598FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "747ED159-1972-4310-AAD1-8E02AFB08826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "62B9100B-206D-4FD1-8D23-A355DCA37460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21771",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21772",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.487",
      "lastModified" : "2024-11-21T07:43:37.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del kernel de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21772",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21773",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.547",
      "lastModified" : "2024-11-21T07:43:37.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del kernel de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21773",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21774",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.613",
      "lastModified" : "2024-11-21T07:43:37.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios del kernel de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "73D24713-D897-408D-893B-77A61982597D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E4150CE0-6A16-4C62-989B-840EF7880C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83C0919F-C4C8-45AE-BDA8-4D88BF0450D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "47D30450-851A-4C4E-9116-8CFCE5CFA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "8FC46499-DB6E-48BF-9334-85EE27AFE7AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "83A79DD6-E74E-419F-93F1-323B68502633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "61959ACC-B608-4556-92AF-4D94B338907A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "A9D54EE6-30AF-411C-A285-A4DCB6C6EC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C230D3BF-7FCE-405C-B62E-B9190C995C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1FD62DCB-66D1-4CEA-828E-0BD302AC63CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0C3552E0-F793-4CDD-965D-457495475805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B2D24C54-F04F-4717-B614-FE67B3ED9DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D5EC3F68-8F41-4F6B-B2E5-920322A4A321"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "06BBFA69-94E2-4BAB-AFD3-BC434B11D106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "DF8ABB14-84CF-4BBC-99C9-DA6C0F7A0619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21774",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21776",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.677",
      "lastModified" : "2025-01-01T01:15:26.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de divulgación de información del kernel de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E65CB9-6DC2-4A90-8C6A-103BEDC99823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:22h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5DE444-AEA8-4674-AC58-31FC1F12BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "B4120497-0B6E-4704-99A5-D98EB8271C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:21h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D9C194F4-12C5-452D-913A-AAAF04598FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "747ED159-1972-4310-AAD1-8E02AFB08826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:22h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "62B9100B-206D-4FD1-8D23-A355DCA37460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21776",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://packetstormsecurity.com/files/172300/Windows-Kernel-CmpDoReDoCreateKey-CmpDoReOpenTransKey-Out-Of-Bounds-Read.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21776",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21779",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.733",
      "lastModified" : "2024-11-21T07:43:38.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de Visual Studio Code"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.74.3",
            "matchCriteriaId" : "39EF35B0-1A8F-48AE-A9D3-BEB64FE079E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21779",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21780",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.797",
      "lastModified" : "2024-11-21T07:43:38.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de 3D Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.1",
            "matchCriteriaId" : "12CF8513-78EA-49DF-AF0F-64FA409D9CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21780",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21781",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.860",
      "lastModified" : "2024-11-21T07:43:38.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de 3D Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.1",
            "matchCriteriaId" : "12CF8513-78EA-49DF-AF0F-64FA409D9CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21781",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21782",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.920",
      "lastModified" : "2024-11-21T07:43:38.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de 3D Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.1",
            "matchCriteriaId" : "12CF8513-78EA-49DF-AF0F-64FA409D9CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21782",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21783",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:19.983",
      "lastModified" : "2024-11-21T07:43:38.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de 3D Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.1",
            "matchCriteriaId" : "12CF8513-78EA-49DF-AF0F-64FA409D9CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21783",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21784",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:20.047",
      "lastModified" : "2024-11-21T07:43:38.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de 3D Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.1",
            "matchCriteriaId" : "12CF8513-78EA-49DF-AF0F-64FA409D9CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21784",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21785",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:20.203",
      "lastModified" : "2024-11-21T07:43:38.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de 3D Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.1",
            "matchCriteriaId" : "12CF8513-78EA-49DF-AF0F-64FA409D9CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21785",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21786",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:20.270",
      "lastModified" : "2024-11-21T07:43:38.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de 3D Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.1",
            "matchCriteriaId" : "12CF8513-78EA-49DF-AF0F-64FA409D9CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21786",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21787",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:20.330",
      "lastModified" : "2024-11-21T07:43:38.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de 3D Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.1",
            "matchCriteriaId" : "12CF8513-78EA-49DF-AF0F-64FA409D9CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21787",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21788",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:20.393",
      "lastModified" : "2024-11-21T07:43:39.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de 3D Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.1",
            "matchCriteriaId" : "12CF8513-78EA-49DF-AF0F-64FA409D9CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21788",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21789",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:20.450",
      "lastModified" : "2024-11-21T07:43:39.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de 3D Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.1",
            "matchCriteriaId" : "12CF8513-78EA-49DF-AF0F-64FA409D9CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21789",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21790",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:20.517",
      "lastModified" : "2024-11-21T07:43:39.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de 3D Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.1",
            "matchCriteriaId" : "12CF8513-78EA-49DF-AF0F-64FA409D9CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21790",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21790",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21791",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:20.573",
      "lastModified" : "2024-11-21T07:43:39.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de 3D Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.1",
            "matchCriteriaId" : "12CF8513-78EA-49DF-AF0F-64FA409D9CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21791",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21792",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:20.637",
      "lastModified" : "2024-11-21T07:43:39.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de 3D Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.1",
            "matchCriteriaId" : "12CF8513-78EA-49DF-AF0F-64FA409D9CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21792",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21793",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-10T22:15:20.700",
      "lastModified" : "2024-11-21T07:43:39.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de 3D Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.1",
            "matchCriteriaId" : "12CF8513-78EA-49DF-AF0F-64FA409D9CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21793",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-11T01:15:10.377",
      "lastModified" : "2025-04-07T19:15:51.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMentorList) to enroll as mentors or edit any of their mentorship-related properties."
      }, {
        "lang" : "es",
        "value" : "En la extensión GrowthExperiments para MediaWiki hasta la versión 1.39, la API growthmanagementorlist permite a los usuarios bloqueados (bloqueados en ApiManageMentorList) inscribirse como mentores o editar cualquiera de sus propiedades relacionadas con la tutoría."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.39.0",
            "matchCriteriaId" : "DAF2D886-AEE0-480E-BA59-5D69D811D65E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/Id1b83fcd58eccb8b2dfea44a3ab2f72314860d88",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AP65YEN762IBNQPOYGUVLTQIDLM5XD2A/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://phabricator.wikimedia.org/T321733",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/Id1b83fcd58eccb8b2dfea44a3ab2f72314860d88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AP65YEN762IBNQPOYGUVLTQIDLM5XD2A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://phabricator.wikimedia.org/T321733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-11T02:15:11.550",
      "lastModified" : "2025-04-07T19:15:51.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure folder permissions in the Windows installation path of Shibboleth Service Provider (SP) before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via DLL planting in the service executable's folder. This occurs because the installation goes under C:\\opt (rather than C:\\Program Files) by default. NOTE: the vendor disputes the significance of this report, stating that \"We consider the ACLs a best effort thing\" and \"it was a documentation mistake.\""
      }, {
        "lang" : "es",
        "value" : "Los permisos de carpeta inseguros en la ruta de instalación de Windows de Shibboleth Service Provider (SP) anterior a 3.4.1 permiten a un atacante local sin privilegios escalar privilegios a SYSTEM mediante la instalación de DLL en la carpeta del ejecutable del servicio. Esto ocurre porque la instalación se realiza en C:\\opt (en lugar de C:\\Program Files) de forma predeterminada. NOTA: el proveedor cuestiona la importancia de este informe y afirma que \"Consideramos que las ACL son el mejor esfuerzo\" y \"fue un error de documentación\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shibboleth:service_provider:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.1",
            "matchCriteriaId" : "66776430-A405-4D69-9067-9996AC30AAB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://shibboleth.atlassian.net/browse/SSPCPP-961",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065335545/Install+on+Windows#Restricting-ACLs",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://shibboleth.atlassian.net/browse/SSPCPP-961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065335545/Install+on+Windows#Restricting-ACLs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-11T03:15:10.223",
      "lastModified" : "2025-04-07T19:15:52.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Syracom Secure Login plugin before 3.1.1.0 for Jira may allow spoofing of 2FA PIN validation via the plugins/servlet/twofactor/public/pinvalidation target parameter."
      }, {
        "lang" : "es",
        "value" : "El complemento Syracom Secure Login anterior a 3.1.1.0 para Jira puede permitir la suplantación de la validación del PIN 2FA a través del parámetro de destino plugins/servlet/twofactor/public/pinvalidation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:syracom:secure_login:*:*:*:*:*:jira:*:*",
            "versionEndExcluding" : "3.1.1.0",
            "matchCriteriaId" : "DA1D0BFB-22BB-4846-B250-E1AB14D588D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/piuppi/Proof-of-Concepts/blob/main/Syracom/SecureLogin2FA-OpenRedirect.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/piuppi/Proof-of-Concepts/blob/main/Syracom/SecureLogin2FA-OpenRedirect.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-11T04:15:10.327",
      "lastModified" : "2025-04-07T19:15:52.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php (txtFirstName, txtLastName)."
      }, {
        "lang" : "es",
        "value" : "WebChess hasta 0.9.0 y 1.0.0.rc2 permite la inyección de SQL: mainmenu.php, chess.php y oponentespassword.php (txtFirstName, txtLastName)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webchess_project:webchess:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.0",
            "matchCriteriaId" : "1E18BBB5-1507-4DBA-8F29-85A5F4E06825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webchess_project:webchess:1.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC32C69F-6BC1-4756-90A0-4CA1853E4E74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chenan224/webchess_sqli_poc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/webchess/bugs/84/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chenan224/webchess_sqli_poc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/webchess/bugs/84/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-11T06:15:08.940",
      "lastModified" : "2025-04-07T19:15:52.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000[0-9]$ regular expression."
      }, {
        "lang" : "es",
        "value" : "La implementación de personnummer anterior a 3.0.3 para Dart maneja mal los números en los que los últimos cuatro dígitos coinciden con la expresión regular ^000[0-9]$."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:personnummer:personnummer:*:*:*:*:*:dart:*:*",
            "versionEndExcluding" : "3.0.3",
            "matchCriteriaId" : "973E0827-B597-4520-A241-A20C1C35CAD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advisories/GHSA-4xh4-v2pq-jvhm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/personnummer/dart/security/advisories/GHSA-4xh4-v2pq-jvhm",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-4xh4-v2pq-jvhm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/personnummer/dart/security/advisories/GHSA-4xh4-v2pq-jvhm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0161",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2023-01-11T08:15:13.580",
      "lastModified" : "2023-11-07T03:59:46.593",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20522",
      "sourceIdentifier" : "psirt@amd.com",
      "published" : "2023-01-11T08:15:13.643",
      "lastModified" : "2025-04-07T16:15:20.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service.\n"
      }, {
        "lang" : "es",
        "value" : "Una validación de entrada insuficiente en ASP puede permitir que un atacante con un BIOS malicioso provoque potencialmente una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:milanpi_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.5",
            "matchCriteriaId" : "46D6FD1B-4833-425D-A39E-2FC0A769C036"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:milanpi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F64A4AA-A66B-4B2E-B8F1-F332E3945903"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:romepi_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "100d",
            "matchCriteriaId" : "3746E49E-AA03-462F-A4A2-017D50CD08D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:romepi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B936879F-731E-4991-ACBB-16643F629B41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "psirt@amd.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20523",
      "sourceIdentifier" : "psirt@amd.com",
      "published" : "2023-01-11T08:15:13.697",
      "lastModified" : "2025-04-07T16:15:20.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service.\n"
      }, {
        "lang" : "es",
        "value" : "TOCTOU(time-of-check to time-of-use) en el ASP puede permitir que un atacante físico escriba más allá de los límites del búfer, lo que podría provocar una pérdida de integridad o denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "856AF080-97A2-4C79-BA32-FCB35F0E2543"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FAAD8C-6DD1-408D-849B-0CE707321B13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "9FAAAE77-BAF6-48C6-827B-F2A6E2057420"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B3C659-C31A-4F82-9587-9F8A943F637D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "F15B3A78-7A86-40B5-B01E-C78445099A40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87543FB4-658A-4300-9DC9-836AC1D4BCFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "D2E45530-3D27-4129-A74F-76B7C01268A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25652AB-E243-4C40-BE12-AB53AF52CD61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C6386B61-191C-498B-8EB0-13E9E9813501"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F4A126-B4A6-480A-9DD7-7F68714DFB49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "2A8898F0-33DD-4864-8375-4563D4E0AB42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C86198-0BD4-42E1-974B-70A49F82C411"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E403604E-E759-46EC-ABE4-D02920CD986E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC99346-DBF1-4060-8E6B-35D315944ADA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C10AA8B6-775F-4EE3-A4AB-D960B9135638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6528-9100-41D2-88A2-FFEABAB8F86A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "98A9A98D-DE9A-4C09-87FC-0759800E2507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDF8A1E-B259-43D0-A56C-8C2BB688A32C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "A0BAB016-BD2C-4F4A-9404-6A4538BCF638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6C7497-1B63-490F-B8EA-D9F3CB790952"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "6ECE445A-CB24-4BBE-9C1E-38DC7F06C2E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC94B03B-A7FE-47AE-969D-FFEF278A7A9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "271078B9-338F-489F-BE07-F6C3CA73DC9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDABE45-F529-453C-92DC-BF7747CEEC0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "794A81DC-82E8-4653-8D7C-FE647E81B6F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563708A3-7C51-4693-B02D-9A25A639FE42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E1D539C9-9E68-4FED-B84A-6406E85F6257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49BBC687-5C3C-4843-A028-B8BE29D1E302"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "2C6AB603-1B5B-4D51-A6C4-C65400D381E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68ACF30E-62DD-4217-B7F0-4A0FFF47E8EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "3DC9627E-1EEA-466D-A0C9-D709883000FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430C9955-0090-4166-8E90-D81C2AA7DE0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "4F1BFFB5-F00D-46DC-A665-E3D7F54CD49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92EBDDBF-37C2-4D09-B744-F78169B2C1C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "0B289ACA-0609-490F-808E-C1D6E66775BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1540CCD-1ED8-4B4E-AD43-7DE2689D9A21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E22A4E0B-6E52-49EB-B81B-44E6331801DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2E0AC0-8BDE-49F8-B067-DB03037921DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "8BD7EAC7-D797-4A4C-ABE9-D2602C4936CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7CB05E-C4F4-481F-AFB0-9288EBE6DB62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "37F65D10-D891-4C0A-A942-82E2039538D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FC5683-F612-4586-8BA3-FB1F66D8868B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C1AD149D-317E-4D90-94EE-2C49B2C1E312"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F187412-26C2-4D8C-9199-D7CCF49D6520"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E842F041-A573-4B71-B686-871771C88EAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FBBFDD3-A85D-43A3-AD67-D69E91C633B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "1B32CB87-D10F-429F-84B2-F6084638450D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B816918-6CCF-4010-AA16-7BF8A93AD7D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "3AA00554-6BE7-4443-8BF2-F66D486E7DF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D55BEF-AFC8-45DC-9401-5DEF374E16C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "0C5851F9-4074-48C7-B6C4-16E994C5045D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A05BAA-D9ED-411D-AEC7-DBD8998C345E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "15A7FC33-9F8F-4862-8CF9-FC39D3493EAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C912AA31-FB2D-4BD9-B1BD-3C8D7EEE771C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "934DEED4-7118-435E-AF96-C34EC71D3AE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F98FF1A-3A2B-4CED-AEA2-9C4F2AC2D8C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9710AF52-5E45-44CE-88EB-821F538A1692"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02B61B7-7DD3-4164-8D32-EB961E981BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "55BF1B99-92BB-4BD7-84DC-BCBF4BFAF234"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9000686A-DC2B-4561-9C32-E90890EB2EBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "2807BF4F-10B8-470A-8646-A8224E04DCCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B9C24B-2C10-4826-A91B-E1C60665FBBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "48DB2F6F-AF8C-4B1D-A0C1-D6DBCD34D528"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180B3002-B3C5-48B5-8322-5B64B237C5B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "F793F124-BC16-48C7-9FB6-4932EE153E31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678C5F58-8AE9-46FF-8F01-4CF394C87A2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "D54F40EC-C433-4FB6-A07A-8C81FD3E04A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1766FF1-77A9-4293-B826-F6A8FBD7AFBF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9BEC5185-2AA7-4EF2-925E-B3A1E9229CE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C474537-3006-41BA-8C3D-5C370E3ACECD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C4DAD7E6-9D81-4DA7-831A-29ACFC3663F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B13CA-72F4-4CF6-9E12-62E6E9056A14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "44F9FCF1-CA75-4688-BD62-487029054E35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241E39FF-FE66-444C-A4C2-3D28C45341BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C092D5C7-369F-4EED-90FA-10091BB49861"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D08121-DC57-47D7-8214-23A209F0AF08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "EEE0F93E-E95E-4EBC-9B40-2DF1ABBCBFB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8264DF4-47B4-4716-AE89-44AFA870D385"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3375DF8B-D0D7-4888-8D24-0A1834E4FD2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52544912-FAA3-4025-A5FD-151B21CEC53B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "157CD272-1F01-4514-81A2-8B4E7E177C5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A0A47B-74A1-4731-92A8-BC10FFE58ECF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "45168C28-F506-4D42-92D1-FF1AE03044D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237FB33B-BF08-4E3E-8E83-EB0AD2F12A4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "258BFA6D-AFF2-4199-A59A-85643DB6A561"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF0AFED-588A-4EFB-8C90-9280BC3A6720"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "38DAF4CB-74A0-4404-83F2-00D78E7B5EAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E1D79D-0CB0-4FD9-8A82-27CDFBFE07B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "00C17F69-0E8C-4272-8412-CE33F594E740"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DFCB62-6CDF-4AD2-9265-1887E5780CA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "82C4F4E6-2BB3-4CD0-89B3-E234E1DE2222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D698D3E-BB05-4C65-90F4-8DAE275CD6A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3A775676-D398-43F5-AD5D-C4FD8ECD2AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2299ED50-B4D2-4BB3-AD87-56D552B84AE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "81334861-6BFD-4DF2-9EDD-45F14044FB6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7743:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C206A50-1225-4CC8-BC38-A7FEF4E2BA54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "0FB69E43-DCB4-432C-9ED3-D7364F75AA58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F900BDD-F094-41A6-9A23-31F53DBA95D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "4D11A474-6C0F-4B95-85F6-138C98D1F32B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02B1C69-BAA4-485B-BE22-46BE321F9E4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "psirt@amd.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20525",
      "sourceIdentifier" : "psirt@amd.com",
      "published" : "2023-01-11T08:15:13.747",
      "lastModified" : "2025-04-07T16:15:20.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially leading to a denial of service.\n"
      }, {
        "lang" : "es",
        "value" : "Una validación de entrada de llamada al sistema insuficiente en el cargador de arranque ASP puede permitir que un atacante privilegiado lea la memoria fuera de los límites de un registro asignado, lo que podría provocar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "6FCCDCB9-AE21-4FDB-AC4D-C71649E2C693"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FAAD8C-6DD1-408D-849B-0CE707321B13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "580924FD-F11A-44CF-8A85-F2DAD0605399"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B3C659-C31A-4F82-9587-9F8A943F637D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "46F46CE8-A898-4161-93D3-CABE7DEE4D14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87543FB4-658A-4300-9DC9-836AC1D4BCFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "24769C0B-F0B4-4808-B59A-CF96ED45851D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25652AB-E243-4C40-BE12-AB53AF52CD61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "46D6253C-3642-4B25-B59D-5B52000C3D7F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F4A126-B4A6-480A-9DD7-7F68714DFB49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "C394DC65-D1D7-44FF-8A0D-480E1E860163"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C86198-0BD4-42E1-974B-70A49F82C411"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "5B274AC3-92CD-4D9F-9E11-90C89108CF22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC99346-DBF1-4060-8E6B-35D315944ADA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "68C6B82B-B779-47E2-ABF5-624139288E95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6528-9100-41D2-88A2-FFEABAB8F86A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "B1BC49C5-FCCB-41DE-A456-FB5D3273E289"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDF8A1E-B259-43D0-A56C-8C2BB688A32C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "5F7D5787-FA9F-47CE-8D4E-40F860F382A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6C7497-1B63-490F-B8EA-D9F3CB790952"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "3F1DAB3E-1E71-4C3E-86D2-179F429461F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC94B03B-A7FE-47AE-969D-FFEF278A7A9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "FB9937A8-2DC6-44C6-89E4-1F612F40974A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDABE45-F529-453C-92DC-BF7747CEEC0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "FFF090D4-7D57-449A-98DC-474848752249"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563708A3-7C51-4693-B02D-9A25A639FE42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "130245C1-588E-48F8-B1D5-5CB64C9C7912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49BBC687-5C3C-4843-A028-B8BE29D1E302"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "6253A4BA-773B-4BD1-8F7E-46F1FCCB4F4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68ACF30E-62DD-4217-B7F0-4A0FFF47E8EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "3F77E77A-B90D-4D91-933A-ED85DF1F2FFB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430C9955-0090-4166-8E90-D81C2AA7DE0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "B298C10D-865D-447C-8D2C-5CA4CB7DACEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92EBDDBF-37C2-4D09-B744-F78169B2C1C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "00C1AD68-DF36-4DC7-9B63-470D4FB326B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1540CCD-1ED8-4B4E-AD43-7DE2689D9A21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "6B79DE42-0866-4103-BAE2-33263422B0B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2E0AC0-8BDE-49F8-B067-DB03037921DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "0BA66A57-698D-4DA4-8AF0-A3476876AB1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7CB05E-C4F4-481F-AFB0-9288EBE6DB62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "4854061C-DE18-41D5-904C-BBE9283CBEFB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FC5683-F612-4586-8BA3-FB1F66D8868B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "45772673-72DB-4F78-8868-3D8EC1B00F75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F187412-26C2-4D8C-9199-D7CCF49D6520"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "D2EDBF32-8EA5-4810-BCA9-973A9B7A9555"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FBBFDD3-A85D-43A3-AD67-D69E91C633B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "78B74CAE-5800-4584-ADA4-D4DC0F94FE62"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B816918-6CCF-4010-AA16-7BF8A93AD7D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "4360ECF3-F62E-4945-A9B5-C01B345F1A7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D55BEF-AFC8-45DC-9401-5DEF374E16C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_100d",
            "matchCriteriaId" : "7EF501D6-CEAE-41A5-A70E-652AE76BD34E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A05BAA-D9ED-411D-AEC7-DBD8998C345E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "15A7FC33-9F8F-4862-8CF9-FC39D3493EAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C912AA31-FB2D-4BD9-B1BD-3C8D7EEE771C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "934DEED4-7118-435E-AF96-C34EC71D3AE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F98FF1A-3A2B-4CED-AEA2-9C4F2AC2D8C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9710AF52-5E45-44CE-88EB-821F538A1692"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02B61B7-7DD3-4164-8D32-EB961E981BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "55BF1B99-92BB-4BD7-84DC-BCBF4BFAF234"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9000686A-DC2B-4561-9C32-E90890EB2EBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "2807BF4F-10B8-470A-8646-A8224E04DCCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B9C24B-2C10-4826-A91B-E1C60665FBBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "48DB2F6F-AF8C-4B1D-A0C1-D6DBCD34D528"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180B3002-B3C5-48B5-8322-5B64B237C5B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "F793F124-BC16-48C7-9FB6-4932EE153E31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678C5F58-8AE9-46FF-8F01-4CF394C87A2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "D54F40EC-C433-4FB6-A07A-8C81FD3E04A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1766FF1-77A9-4293-B826-F6A8FBD7AFBF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9BEC5185-2AA7-4EF2-925E-B3A1E9229CE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C474537-3006-41BA-8C3D-5C370E3ACECD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C4DAD7E6-9D81-4DA7-831A-29ACFC3663F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B13CA-72F4-4CF6-9E12-62E6E9056A14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "44F9FCF1-CA75-4688-BD62-487029054E35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241E39FF-FE66-444C-A4C2-3D28C45341BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C092D5C7-369F-4EED-90FA-10091BB49861"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D08121-DC57-47D7-8214-23A209F0AF08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "EEE0F93E-E95E-4EBC-9B40-2DF1ABBCBFB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8264DF4-47B4-4716-AE89-44AFA870D385"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3375DF8B-D0D7-4888-8D24-0A1834E4FD2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52544912-FAA3-4025-A5FD-151B21CEC53B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "157CD272-1F01-4514-81A2-8B4E7E177C5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A0A47B-74A1-4731-92A8-BC10FFE58ECF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "45168C28-F506-4D42-92D1-FF1AE03044D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237FB33B-BF08-4E3E-8E83-EB0AD2F12A4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "258BFA6D-AFF2-4199-A59A-85643DB6A561"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF0AFED-588A-4EFB-8C90-9280BC3A6720"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "38DAF4CB-74A0-4404-83F2-00D78E7B5EAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E1D79D-0CB0-4FD9-8A82-27CDFBFE07B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "00C17F69-0E8C-4272-8412-CE33F594E740"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DFCB62-6CDF-4AD2-9265-1887E5780CA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "82C4F4E6-2BB3-4CD0-89B3-E234E1DE2222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D698D3E-BB05-4C65-90F4-8DAE275CD6A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3A775676-D398-43F5-AD5D-C4FD8ECD2AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2299ED50-B4D2-4BB3-AD87-56D552B84AE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "81334861-6BFD-4DF2-9EDD-45F14044FB6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7743:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C206A50-1225-4CC8-BC38-A7FEF4E2BA54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "0FB69E43-DCB4-432C-9ED3-D7364F75AA58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F900BDD-F094-41A6-9A23-31F53DBA95D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "4D11A474-6C0F-4B95-85F6-138C98D1F32B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02B1C69-BAA4-485B-BE22-46BE321F9E4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "psirt@amd.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20527",
      "sourceIdentifier" : "psirt@amd.com",
      "published" : "2023-01-11T08:15:13.797",
      "lastModified" : "2025-04-07T16:15:20.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.\n"
      }, {
        "lang" : "es",
        "value" : "Una validación inadecuada de la entrada del sistema en el cargador de arranque ASP puede permitir que un atacante privilegiado lea la memoria fuera de los límites, lo que podría provocar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "856AF080-97A2-4C79-BA32-FCB35F0E2543"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FAAD8C-6DD1-408D-849B-0CE707321B13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "9FAAAE77-BAF6-48C6-827B-F2A6E2057420"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B3C659-C31A-4F82-9587-9F8A943F637D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "F15B3A78-7A86-40B5-B01E-C78445099A40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87543FB4-658A-4300-9DC9-836AC1D4BCFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "D2E45530-3D27-4129-A74F-76B7C01268A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25652AB-E243-4C40-BE12-AB53AF52CD61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C6386B61-191C-498B-8EB0-13E9E9813501"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F4A126-B4A6-480A-9DD7-7F68714DFB49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "2A8898F0-33DD-4864-8375-4563D4E0AB42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C86198-0BD4-42E1-974B-70A49F82C411"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E403604E-E759-46EC-ABE4-D02920CD986E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC99346-DBF1-4060-8E6B-35D315944ADA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C10AA8B6-775F-4EE3-A4AB-D960B9135638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6528-9100-41D2-88A2-FFEABAB8F86A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "98A9A98D-DE9A-4C09-87FC-0759800E2507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDF8A1E-B259-43D0-A56C-8C2BB688A32C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "A0BAB016-BD2C-4F4A-9404-6A4538BCF638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6C7497-1B63-490F-B8EA-D9F3CB790952"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "6ECE445A-CB24-4BBE-9C1E-38DC7F06C2E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC94B03B-A7FE-47AE-969D-FFEF278A7A9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "271078B9-338F-489F-BE07-F6C3CA73DC9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDABE45-F529-453C-92DC-BF7747CEEC0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "794A81DC-82E8-4653-8D7C-FE647E81B6F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563708A3-7C51-4693-B02D-9A25A639FE42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E1D539C9-9E68-4FED-B84A-6406E85F6257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49BBC687-5C3C-4843-A028-B8BE29D1E302"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "2C6AB603-1B5B-4D51-A6C4-C65400D381E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68ACF30E-62DD-4217-B7F0-4A0FFF47E8EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "3DC9627E-1EEA-466D-A0C9-D709883000FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430C9955-0090-4166-8E90-D81C2AA7DE0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "4F1BFFB5-F00D-46DC-A665-E3D7F54CD49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92EBDDBF-37C2-4D09-B744-F78169B2C1C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "0B289ACA-0609-490F-808E-C1D6E66775BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1540CCD-1ED8-4B4E-AD43-7DE2689D9A21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E22A4E0B-6E52-49EB-B81B-44E6331801DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2E0AC0-8BDE-49F8-B067-DB03037921DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "8BD7EAC7-D797-4A4C-ABE9-D2602C4936CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7CB05E-C4F4-481F-AFB0-9288EBE6DB62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "37F65D10-D891-4C0A-A942-82E2039538D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FC5683-F612-4586-8BA3-FB1F66D8868B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C1AD149D-317E-4D90-94EE-2C49B2C1E312"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F187412-26C2-4D8C-9199-D7CCF49D6520"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E842F041-A573-4B71-B686-871771C88EAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FBBFDD3-A85D-43A3-AD67-D69E91C633B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "1B32CB87-D10F-429F-84B2-F6084638450D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B816918-6CCF-4010-AA16-7BF8A93AD7D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "3AA00554-6BE7-4443-8BF2-F66D486E7DF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D55BEF-AFC8-45DC-9401-5DEF374E16C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "0C5851F9-4074-48C7-B6C4-16E994C5045D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A05BAA-D9ED-411D-AEC7-DBD8998C345E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "15A7FC33-9F8F-4862-8CF9-FC39D3493EAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C912AA31-FB2D-4BD9-B1BD-3C8D7EEE771C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "934DEED4-7118-435E-AF96-C34EC71D3AE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F98FF1A-3A2B-4CED-AEA2-9C4F2AC2D8C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9710AF52-5E45-44CE-88EB-821F538A1692"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02B61B7-7DD3-4164-8D32-EB961E981BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "55BF1B99-92BB-4BD7-84DC-BCBF4BFAF234"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9000686A-DC2B-4561-9C32-E90890EB2EBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "2807BF4F-10B8-470A-8646-A8224E04DCCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B9C24B-2C10-4826-A91B-E1C60665FBBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "48DB2F6F-AF8C-4B1D-A0C1-D6DBCD34D528"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180B3002-B3C5-48B5-8322-5B64B237C5B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "F793F124-BC16-48C7-9FB6-4932EE153E31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678C5F58-8AE9-46FF-8F01-4CF394C87A2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "D54F40EC-C433-4FB6-A07A-8C81FD3E04A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1766FF1-77A9-4293-B826-F6A8FBD7AFBF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9BEC5185-2AA7-4EF2-925E-B3A1E9229CE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C474537-3006-41BA-8C3D-5C370E3ACECD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C4DAD7E6-9D81-4DA7-831A-29ACFC3663F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B13CA-72F4-4CF6-9E12-62E6E9056A14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "44F9FCF1-CA75-4688-BD62-487029054E35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241E39FF-FE66-444C-A4C2-3D28C45341BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C092D5C7-369F-4EED-90FA-10091BB49861"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D08121-DC57-47D7-8214-23A209F0AF08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "EEE0F93E-E95E-4EBC-9B40-2DF1ABBCBFB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8264DF4-47B4-4716-AE89-44AFA870D385"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3375DF8B-D0D7-4888-8D24-0A1834E4FD2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52544912-FAA3-4025-A5FD-151B21CEC53B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "157CD272-1F01-4514-81A2-8B4E7E177C5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A0A47B-74A1-4731-92A8-BC10FFE58ECF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "45168C28-F506-4D42-92D1-FF1AE03044D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237FB33B-BF08-4E3E-8E83-EB0AD2F12A4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "258BFA6D-AFF2-4199-A59A-85643DB6A561"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF0AFED-588A-4EFB-8C90-9280BC3A6720"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "38DAF4CB-74A0-4404-83F2-00D78E7B5EAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E1D79D-0CB0-4FD9-8A82-27CDFBFE07B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "00C17F69-0E8C-4272-8412-CE33F594E740"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DFCB62-6CDF-4AD2-9265-1887E5780CA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "82C4F4E6-2BB3-4CD0-89B3-E234E1DE2222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D698D3E-BB05-4C65-90F4-8DAE275CD6A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3A775676-D398-43F5-AD5D-C4FD8ECD2AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2299ED50-B4D2-4BB3-AD87-56D552B84AE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "81334861-6BFD-4DF2-9EDD-45F14044FB6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7743:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C206A50-1225-4CC8-BC38-A7FEF4E2BA54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "0FB69E43-DCB4-432C-9ED3-D7364F75AA58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F900BDD-F094-41A6-9A23-31F53DBA95D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "4D11A474-6C0F-4B95-85F6-138C98D1F32B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02B1C69-BAA4-485B-BE22-46BE321F9E4E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "naplespi_1.0.0.g",
            "matchCriteriaId" : "91C9AE4E-0C28-474A-850D-7115C3F56AC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAD2BB6-29B1-4CCA-A8A5-0FA9AB168803"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "naplespi_1.0.0.g",
            "matchCriteriaId" : "3E6F948E-7F04-4BEB-B48D-33B9ED59EC0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7251:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "565383C4-F690-4E3B-8A6A-B7D4ACCFAA05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "naplespi_1.0.0.g",
            "matchCriteriaId" : "F152D9FD-7B70-46D2-8825-5FF4CB0F2627"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7261:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71ED05E6-8E69-41B9-9A36-CCE2D59A2603"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "naplespi_1.0.0.g",
            "matchCriteriaId" : "0910A249-8141-48FA-98B9-F1F5BDEA67C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7281:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "805B4FEA-CFB2-429C-818B-9277B6D546C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "naplespi_1.0.0.g",
            "matchCriteriaId" : "DFEC038D-2551-4051-9EDC-3E01E1F98AEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7301:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65FC5B9-0803-4D7F-8EF6-7B6681418596"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "naplespi_1.0.0.g",
            "matchCriteriaId" : "B2488831-BD92-472F-A0B6-FB8937CB20D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7351:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5FC951-9FAD-45B4-B7CF-D1A9482507F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7371_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "naplespi_1.0.0.g",
            "matchCriteriaId" : "2ED70EE9-4386-4C54-BB01-8E0CA096A1C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7371:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7576CB-A818-47A1-9A0D-6B8FD105FF08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7401_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "naplespi_1.0.0.g",
            "matchCriteriaId" : "73A454B5-01B1-4E7D-B7F9-3FED3EFEBBC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7401:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05F1EF0-3576-4D47-8704-36E9FAB1D432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "naplespi_1.0.0.g",
            "matchCriteriaId" : "D9BCA278-AE9F-4115-B7CA-A4B7F127CC47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7401p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E41A87-7A39-4BB2-88E4-16DF0D81BFD2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7451_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "naplespi_1.0.0.g",
            "matchCriteriaId" : "CAE1661F-E8EE-4AE4-BDAD-E345D7404320"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7451:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51C8CF00-8FC8-4206-9028-6F104699DE76"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7501_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "naplespi_1.0.0.g",
            "matchCriteriaId" : "5B60B6FB-713B-4F08-BAC6-3DF429AD77A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7501:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8BAB73-6F45-49AB-8F00-49A488006F3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7551_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "naplespi_1.0.0.g",
            "matchCriteriaId" : "9F2F7D10-DCF5-4039-81B5-877C88E77DF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7551:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AAB403A-5A36-4DC3-A187-99127CF77BA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "naplespi_1.0.0.g",
            "matchCriteriaId" : "EFD42CCE-961E-4687-89AD-12AA55632C90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7551p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BE5D42-1C62-4381-89E0-8F3264F696EC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "naplespi_1.0.0.g",
            "matchCriteriaId" : "3F22DD0A-67B2-4AA9-B063-3C4D08B343EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7601:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "168076CD-1E6D-4328-AB59-4C1A90735AC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "psirt@amd.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20528",
      "sourceIdentifier" : "psirt@amd.com",
      "published" : "2023-01-11T08:15:13.847",
      "lastModified" : "2025-04-07T19:15:47.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality.\n"
      }, {
        "lang" : "es",
        "value" : "Una validación de entrada insuficiente en la SMU puede permitir que un atacante físico extraiga el contenido de la memoria de la SMU a través del bus I2C, lo que podría provocar una pérdida de confidencialidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "856AF080-97A2-4C79-BA32-FCB35F0E2543"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FAAD8C-6DD1-408D-849B-0CE707321B13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "9FAAAE77-BAF6-48C6-827B-F2A6E2057420"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B3C659-C31A-4F82-9587-9F8A943F637D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "F15B3A78-7A86-40B5-B01E-C78445099A40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87543FB4-658A-4300-9DC9-836AC1D4BCFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "D2E45530-3D27-4129-A74F-76B7C01268A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25652AB-E243-4C40-BE12-AB53AF52CD61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C6386B61-191C-498B-8EB0-13E9E9813501"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F4A126-B4A6-480A-9DD7-7F68714DFB49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "2A8898F0-33DD-4864-8375-4563D4E0AB42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C86198-0BD4-42E1-974B-70A49F82C411"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E403604E-E759-46EC-ABE4-D02920CD986E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC99346-DBF1-4060-8E6B-35D315944ADA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C10AA8B6-775F-4EE3-A4AB-D960B9135638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6528-9100-41D2-88A2-FFEABAB8F86A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "98A9A98D-DE9A-4C09-87FC-0759800E2507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDF8A1E-B259-43D0-A56C-8C2BB688A32C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "A0BAB016-BD2C-4F4A-9404-6A4538BCF638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6C7497-1B63-490F-B8EA-D9F3CB790952"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "6ECE445A-CB24-4BBE-9C1E-38DC7F06C2E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC94B03B-A7FE-47AE-969D-FFEF278A7A9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "271078B9-338F-489F-BE07-F6C3CA73DC9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDABE45-F529-453C-92DC-BF7747CEEC0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "794A81DC-82E8-4653-8D7C-FE647E81B6F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563708A3-7C51-4693-B02D-9A25A639FE42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E1D539C9-9E68-4FED-B84A-6406E85F6257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49BBC687-5C3C-4843-A028-B8BE29D1E302"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "2C6AB603-1B5B-4D51-A6C4-C65400D381E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68ACF30E-62DD-4217-B7F0-4A0FFF47E8EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "3DC9627E-1EEA-466D-A0C9-D709883000FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430C9955-0090-4166-8E90-D81C2AA7DE0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "4F1BFFB5-F00D-46DC-A665-E3D7F54CD49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92EBDDBF-37C2-4D09-B744-F78169B2C1C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "0B289ACA-0609-490F-808E-C1D6E66775BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1540CCD-1ED8-4B4E-AD43-7DE2689D9A21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E22A4E0B-6E52-49EB-B81B-44E6331801DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2E0AC0-8BDE-49F8-B067-DB03037921DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "8BD7EAC7-D797-4A4C-ABE9-D2602C4936CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7CB05E-C4F4-481F-AFB0-9288EBE6DB62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "37F65D10-D891-4C0A-A942-82E2039538D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FC5683-F612-4586-8BA3-FB1F66D8868B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C1AD149D-317E-4D90-94EE-2C49B2C1E312"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F187412-26C2-4D8C-9199-D7CCF49D6520"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E842F041-A573-4B71-B686-871771C88EAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FBBFDD3-A85D-43A3-AD67-D69E91C633B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "1B32CB87-D10F-429F-84B2-F6084638450D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B816918-6CCF-4010-AA16-7BF8A93AD7D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "3AA00554-6BE7-4443-8BF2-F66D486E7DF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D55BEF-AFC8-45DC-9401-5DEF374E16C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "0C5851F9-4074-48C7-B6C4-16E994C5045D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A05BAA-D9ED-411D-AEC7-DBD8998C345E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "15A7FC33-9F8F-4862-8CF9-FC39D3493EAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C912AA31-FB2D-4BD9-B1BD-3C8D7EEE771C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "934DEED4-7118-435E-AF96-C34EC71D3AE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F98FF1A-3A2B-4CED-AEA2-9C4F2AC2D8C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9710AF52-5E45-44CE-88EB-821F538A1692"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02B61B7-7DD3-4164-8D32-EB961E981BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "55BF1B99-92BB-4BD7-84DC-BCBF4BFAF234"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9000686A-DC2B-4561-9C32-E90890EB2EBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "2807BF4F-10B8-470A-8646-A8224E04DCCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B9C24B-2C10-4826-A91B-E1C60665FBBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "48DB2F6F-AF8C-4B1D-A0C1-D6DBCD34D528"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180B3002-B3C5-48B5-8322-5B64B237C5B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "F793F124-BC16-48C7-9FB6-4932EE153E31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678C5F58-8AE9-46FF-8F01-4CF394C87A2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "D54F40EC-C433-4FB6-A07A-8C81FD3E04A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1766FF1-77A9-4293-B826-F6A8FBD7AFBF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9BEC5185-2AA7-4EF2-925E-B3A1E9229CE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C474537-3006-41BA-8C3D-5C370E3ACECD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C4DAD7E6-9D81-4DA7-831A-29ACFC3663F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B13CA-72F4-4CF6-9E12-62E6E9056A14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "44F9FCF1-CA75-4688-BD62-487029054E35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241E39FF-FE66-444C-A4C2-3D28C45341BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C092D5C7-369F-4EED-90FA-10091BB49861"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D08121-DC57-47D7-8214-23A209F0AF08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "EEE0F93E-E95E-4EBC-9B40-2DF1ABBCBFB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8264DF4-47B4-4716-AE89-44AFA870D385"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3375DF8B-D0D7-4888-8D24-0A1834E4FD2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52544912-FAA3-4025-A5FD-151B21CEC53B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "157CD272-1F01-4514-81A2-8B4E7E177C5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A0A47B-74A1-4731-92A8-BC10FFE58ECF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "45168C28-F506-4D42-92D1-FF1AE03044D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237FB33B-BF08-4E3E-8E83-EB0AD2F12A4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "258BFA6D-AFF2-4199-A59A-85643DB6A561"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF0AFED-588A-4EFB-8C90-9280BC3A6720"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "38DAF4CB-74A0-4404-83F2-00D78E7B5EAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E1D79D-0CB0-4FD9-8A82-27CDFBFE07B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "00C17F69-0E8C-4272-8412-CE33F594E740"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DFCB62-6CDF-4AD2-9265-1887E5780CA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "82C4F4E6-2BB3-4CD0-89B3-E234E1DE2222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D698D3E-BB05-4C65-90F4-8DAE275CD6A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3A775676-D398-43F5-AD5D-C4FD8ECD2AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2299ED50-B4D2-4BB3-AD87-56D552B84AE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "81334861-6BFD-4DF2-9EDD-45F14044FB6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7743:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C206A50-1225-4CC8-BC38-A7FEF4E2BA54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "0FB69E43-DCB4-432C-9ED3-D7364F75AA58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F900BDD-F094-41A6-9A23-31F53DBA95D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "4D11A474-6C0F-4B95-85F6-138C98D1F32B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02B1C69-BAA4-485B-BE22-46BE321F9E4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "psirt@amd.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20529",
      "sourceIdentifier" : "psirt@amd.com",
      "published" : "2023-01-11T08:15:13.897",
      "lastModified" : "2025-04-07T19:15:48.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in a denial of service.\n"
      }, {
        "lang" : "es",
        "value" : "Las comprobaciones limitadas insuficientes en la SMU pueden permitir que un atacante actualice el espacio de direcciones desde/hasta a un valor no válido, lo que podría provocar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "856AF080-97A2-4C79-BA32-FCB35F0E2543"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FAAD8C-6DD1-408D-849B-0CE707321B13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "9FAAAE77-BAF6-48C6-827B-F2A6E2057420"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B3C659-C31A-4F82-9587-9F8A943F637D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "F15B3A78-7A86-40B5-B01E-C78445099A40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87543FB4-658A-4300-9DC9-836AC1D4BCFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "D2E45530-3D27-4129-A74F-76B7C01268A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25652AB-E243-4C40-BE12-AB53AF52CD61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C6386B61-191C-498B-8EB0-13E9E9813501"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F4A126-B4A6-480A-9DD7-7F68714DFB49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "2A8898F0-33DD-4864-8375-4563D4E0AB42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C86198-0BD4-42E1-974B-70A49F82C411"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E403604E-E759-46EC-ABE4-D02920CD986E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC99346-DBF1-4060-8E6B-35D315944ADA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C10AA8B6-775F-4EE3-A4AB-D960B9135638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6528-9100-41D2-88A2-FFEABAB8F86A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "98A9A98D-DE9A-4C09-87FC-0759800E2507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDF8A1E-B259-43D0-A56C-8C2BB688A32C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "A0BAB016-BD2C-4F4A-9404-6A4538BCF638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6C7497-1B63-490F-B8EA-D9F3CB790952"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "6ECE445A-CB24-4BBE-9C1E-38DC7F06C2E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC94B03B-A7FE-47AE-969D-FFEF278A7A9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "271078B9-338F-489F-BE07-F6C3CA73DC9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDABE45-F529-453C-92DC-BF7747CEEC0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "794A81DC-82E8-4653-8D7C-FE647E81B6F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563708A3-7C51-4693-B02D-9A25A639FE42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E1D539C9-9E68-4FED-B84A-6406E85F6257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49BBC687-5C3C-4843-A028-B8BE29D1E302"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "2C6AB603-1B5B-4D51-A6C4-C65400D381E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68ACF30E-62DD-4217-B7F0-4A0FFF47E8EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "3DC9627E-1EEA-466D-A0C9-D709883000FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430C9955-0090-4166-8E90-D81C2AA7DE0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "4F1BFFB5-F00D-46DC-A665-E3D7F54CD49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92EBDDBF-37C2-4D09-B744-F78169B2C1C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "0B289ACA-0609-490F-808E-C1D6E66775BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1540CCD-1ED8-4B4E-AD43-7DE2689D9A21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E22A4E0B-6E52-49EB-B81B-44E6331801DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2E0AC0-8BDE-49F8-B067-DB03037921DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "8BD7EAC7-D797-4A4C-ABE9-D2602C4936CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7CB05E-C4F4-481F-AFB0-9288EBE6DB62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "37F65D10-D891-4C0A-A942-82E2039538D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FC5683-F612-4586-8BA3-FB1F66D8868B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C1AD149D-317E-4D90-94EE-2C49B2C1E312"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F187412-26C2-4D8C-9199-D7CCF49D6520"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E842F041-A573-4B71-B686-871771C88EAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FBBFDD3-A85D-43A3-AD67-D69E91C633B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "1B32CB87-D10F-429F-84B2-F6084638450D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B816918-6CCF-4010-AA16-7BF8A93AD7D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "3AA00554-6BE7-4443-8BF2-F66D486E7DF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D55BEF-AFC8-45DC-9401-5DEF374E16C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "0C5851F9-4074-48C7-B6C4-16E994C5045D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A05BAA-D9ED-411D-AEC7-DBD8998C345E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "15A7FC33-9F8F-4862-8CF9-FC39D3493EAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C912AA31-FB2D-4BD9-B1BD-3C8D7EEE771C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "934DEED4-7118-435E-AF96-C34EC71D3AE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F98FF1A-3A2B-4CED-AEA2-9C4F2AC2D8C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9710AF52-5E45-44CE-88EB-821F538A1692"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02B61B7-7DD3-4164-8D32-EB961E981BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "55BF1B99-92BB-4BD7-84DC-BCBF4BFAF234"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9000686A-DC2B-4561-9C32-E90890EB2EBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "2807BF4F-10B8-470A-8646-A8224E04DCCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B9C24B-2C10-4826-A91B-E1C60665FBBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "48DB2F6F-AF8C-4B1D-A0C1-D6DBCD34D528"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180B3002-B3C5-48B5-8322-5B64B237C5B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "F793F124-BC16-48C7-9FB6-4932EE153E31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678C5F58-8AE9-46FF-8F01-4CF394C87A2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "D54F40EC-C433-4FB6-A07A-8C81FD3E04A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1766FF1-77A9-4293-B826-F6A8FBD7AFBF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9BEC5185-2AA7-4EF2-925E-B3A1E9229CE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C474537-3006-41BA-8C3D-5C370E3ACECD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C4DAD7E6-9D81-4DA7-831A-29ACFC3663F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B13CA-72F4-4CF6-9E12-62E6E9056A14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "44F9FCF1-CA75-4688-BD62-487029054E35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241E39FF-FE66-444C-A4C2-3D28C45341BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C092D5C7-369F-4EED-90FA-10091BB49861"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D08121-DC57-47D7-8214-23A209F0AF08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "EEE0F93E-E95E-4EBC-9B40-2DF1ABBCBFB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8264DF4-47B4-4716-AE89-44AFA870D385"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3375DF8B-D0D7-4888-8D24-0A1834E4FD2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52544912-FAA3-4025-A5FD-151B21CEC53B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "157CD272-1F01-4514-81A2-8B4E7E177C5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A0A47B-74A1-4731-92A8-BC10FFE58ECF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "45168C28-F506-4D42-92D1-FF1AE03044D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237FB33B-BF08-4E3E-8E83-EB0AD2F12A4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "258BFA6D-AFF2-4199-A59A-85643DB6A561"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF0AFED-588A-4EFB-8C90-9280BC3A6720"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "38DAF4CB-74A0-4404-83F2-00D78E7B5EAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E1D79D-0CB0-4FD9-8A82-27CDFBFE07B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "00C17F69-0E8C-4272-8412-CE33F594E740"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DFCB62-6CDF-4AD2-9265-1887E5780CA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "82C4F4E6-2BB3-4CD0-89B3-E234E1DE2222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D698D3E-BB05-4C65-90F4-8DAE275CD6A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3A775676-D398-43F5-AD5D-C4FD8ECD2AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2299ED50-B4D2-4BB3-AD87-56D552B84AE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "81334861-6BFD-4DF2-9EDD-45F14044FB6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7743:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C206A50-1225-4CC8-BC38-A7FEF4E2BA54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "0FB69E43-DCB4-432C-9ED3-D7364F75AA58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F900BDD-F094-41A6-9A23-31F53DBA95D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "4D11A474-6C0F-4B95-85F6-138C98D1F32B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02B1C69-BAA4-485B-BE22-46BE321F9E4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "psirt@amd.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20530",
      "sourceIdentifier" : "psirt@amd.com",
      "published" : "2023-01-11T08:15:13.950",
      "lastModified" : "2025-04-07T19:15:48.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service.\n"
      }, {
        "lang" : "es",
        "value" : "Una validación de entrada insuficiente de los mensajes del buzón del BIOS en SMU puede provocar lecturas de memoria fuera de los límites, lo que podría provocar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "15A7FC33-9F8F-4862-8CF9-FC39D3493EAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C912AA31-FB2D-4BD9-B1BD-3C8D7EEE771C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "934DEED4-7118-435E-AF96-C34EC71D3AE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F98FF1A-3A2B-4CED-AEA2-9C4F2AC2D8C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9710AF52-5E45-44CE-88EB-821F538A1692"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02B61B7-7DD3-4164-8D32-EB961E981BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "55BF1B99-92BB-4BD7-84DC-BCBF4BFAF234"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9000686A-DC2B-4561-9C32-E90890EB2EBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "2807BF4F-10B8-470A-8646-A8224E04DCCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B9C24B-2C10-4826-A91B-E1C60665FBBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "48DB2F6F-AF8C-4B1D-A0C1-D6DBCD34D528"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180B3002-B3C5-48B5-8322-5B64B237C5B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "F793F124-BC16-48C7-9FB6-4932EE153E31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678C5F58-8AE9-46FF-8F01-4CF394C87A2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "D54F40EC-C433-4FB6-A07A-8C81FD3E04A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1766FF1-77A9-4293-B826-F6A8FBD7AFBF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9BEC5185-2AA7-4EF2-925E-B3A1E9229CE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C474537-3006-41BA-8C3D-5C370E3ACECD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C4DAD7E6-9D81-4DA7-831A-29ACFC3663F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B13CA-72F4-4CF6-9E12-62E6E9056A14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "44F9FCF1-CA75-4688-BD62-487029054E35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241E39FF-FE66-444C-A4C2-3D28C45341BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C092D5C7-369F-4EED-90FA-10091BB49861"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D08121-DC57-47D7-8214-23A209F0AF08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "EEE0F93E-E95E-4EBC-9B40-2DF1ABBCBFB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8264DF4-47B4-4716-AE89-44AFA870D385"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3375DF8B-D0D7-4888-8D24-0A1834E4FD2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52544912-FAA3-4025-A5FD-151B21CEC53B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "157CD272-1F01-4514-81A2-8B4E7E177C5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A0A47B-74A1-4731-92A8-BC10FFE58ECF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "45168C28-F506-4D42-92D1-FF1AE03044D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237FB33B-BF08-4E3E-8E83-EB0AD2F12A4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "258BFA6D-AFF2-4199-A59A-85643DB6A561"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF0AFED-588A-4EFB-8C90-9280BC3A6720"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "38DAF4CB-74A0-4404-83F2-00D78E7B5EAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E1D79D-0CB0-4FD9-8A82-27CDFBFE07B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "00C17F69-0E8C-4272-8412-CE33F594E740"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DFCB62-6CDF-4AD2-9265-1887E5780CA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "82C4F4E6-2BB3-4CD0-89B3-E234E1DE2222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D698D3E-BB05-4C65-90F4-8DAE275CD6A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3A775676-D398-43F5-AD5D-C4FD8ECD2AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2299ED50-B4D2-4BB3-AD87-56D552B84AE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "81334861-6BFD-4DF2-9EDD-45F14044FB6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7743:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C206A50-1225-4CC8-BC38-A7FEF4E2BA54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "0FB69E43-DCB4-432C-9ED3-D7364F75AA58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F900BDD-F094-41A6-9A23-31F53DBA95D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "4D11A474-6C0F-4B95-85F6-138C98D1F32B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02B1C69-BAA4-485B-BE22-46BE321F9E4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "psirt@amd.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20531",
      "sourceIdentifier" : "psirt@amd.com",
      "published" : "2023-01-11T08:15:14.027",
      "lastModified" : "2025-04-07T19:15:48.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resulting in a denial of service.\n"
      }, {
        "lang" : "es",
        "value" : "Las comprobaciones limitadas insuficientes en la SMU pueden permitir que un atacante actualice la SRAM desde/hacia el espacio de direcciones a un valor no válido, lo que podría provocar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "856AF080-97A2-4C79-BA32-FCB35F0E2543"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FAAD8C-6DD1-408D-849B-0CE707321B13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "9FAAAE77-BAF6-48C6-827B-F2A6E2057420"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B3C659-C31A-4F82-9587-9F8A943F637D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "F15B3A78-7A86-40B5-B01E-C78445099A40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87543FB4-658A-4300-9DC9-836AC1D4BCFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "D2E45530-3D27-4129-A74F-76B7C01268A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25652AB-E243-4C40-BE12-AB53AF52CD61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C6386B61-191C-498B-8EB0-13E9E9813501"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F4A126-B4A6-480A-9DD7-7F68714DFB49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "2A8898F0-33DD-4864-8375-4563D4E0AB42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C86198-0BD4-42E1-974B-70A49F82C411"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E403604E-E759-46EC-ABE4-D02920CD986E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC99346-DBF1-4060-8E6B-35D315944ADA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C10AA8B6-775F-4EE3-A4AB-D960B9135638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6528-9100-41D2-88A2-FFEABAB8F86A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "98A9A98D-DE9A-4C09-87FC-0759800E2507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDF8A1E-B259-43D0-A56C-8C2BB688A32C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "A0BAB016-BD2C-4F4A-9404-6A4538BCF638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6C7497-1B63-490F-B8EA-D9F3CB790952"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "6ECE445A-CB24-4BBE-9C1E-38DC7F06C2E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC94B03B-A7FE-47AE-969D-FFEF278A7A9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "271078B9-338F-489F-BE07-F6C3CA73DC9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDABE45-F529-453C-92DC-BF7747CEEC0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "794A81DC-82E8-4653-8D7C-FE647E81B6F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563708A3-7C51-4693-B02D-9A25A639FE42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E1D539C9-9E68-4FED-B84A-6406E85F6257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49BBC687-5C3C-4843-A028-B8BE29D1E302"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "2C6AB603-1B5B-4D51-A6C4-C65400D381E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68ACF30E-62DD-4217-B7F0-4A0FFF47E8EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "3DC9627E-1EEA-466D-A0C9-D709883000FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430C9955-0090-4166-8E90-D81C2AA7DE0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "4F1BFFB5-F00D-46DC-A665-E3D7F54CD49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92EBDDBF-37C2-4D09-B744-F78169B2C1C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "0B289ACA-0609-490F-808E-C1D6E66775BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1540CCD-1ED8-4B4E-AD43-7DE2689D9A21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E22A4E0B-6E52-49EB-B81B-44E6331801DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2E0AC0-8BDE-49F8-B067-DB03037921DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "8BD7EAC7-D797-4A4C-ABE9-D2602C4936CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7CB05E-C4F4-481F-AFB0-9288EBE6DB62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "37F65D10-D891-4C0A-A942-82E2039538D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FC5683-F612-4586-8BA3-FB1F66D8868B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C1AD149D-317E-4D90-94EE-2C49B2C1E312"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F187412-26C2-4D8C-9199-D7CCF49D6520"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E842F041-A573-4B71-B686-871771C88EAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FBBFDD3-A85D-43A3-AD67-D69E91C633B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "1B32CB87-D10F-429F-84B2-F6084638450D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B816918-6CCF-4010-AA16-7BF8A93AD7D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "3AA00554-6BE7-4443-8BF2-F66D486E7DF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D55BEF-AFC8-45DC-9401-5DEF374E16C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "0C5851F9-4074-48C7-B6C4-16E994C5045D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A05BAA-D9ED-411D-AEC7-DBD8998C345E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "15A7FC33-9F8F-4862-8CF9-FC39D3493EAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C912AA31-FB2D-4BD9-B1BD-3C8D7EEE771C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "934DEED4-7118-435E-AF96-C34EC71D3AE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F98FF1A-3A2B-4CED-AEA2-9C4F2AC2D8C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9710AF52-5E45-44CE-88EB-821F538A1692"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02B61B7-7DD3-4164-8D32-EB961E981BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "55BF1B99-92BB-4BD7-84DC-BCBF4BFAF234"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9000686A-DC2B-4561-9C32-E90890EB2EBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "2807BF4F-10B8-470A-8646-A8224E04DCCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B9C24B-2C10-4826-A91B-E1C60665FBBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "48DB2F6F-AF8C-4B1D-A0C1-D6DBCD34D528"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180B3002-B3C5-48B5-8322-5B64B237C5B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "F793F124-BC16-48C7-9FB6-4932EE153E31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678C5F58-8AE9-46FF-8F01-4CF394C87A2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "D54F40EC-C433-4FB6-A07A-8C81FD3E04A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1766FF1-77A9-4293-B826-F6A8FBD7AFBF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9BEC5185-2AA7-4EF2-925E-B3A1E9229CE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C474537-3006-41BA-8C3D-5C370E3ACECD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C4DAD7E6-9D81-4DA7-831A-29ACFC3663F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B13CA-72F4-4CF6-9E12-62E6E9056A14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "44F9FCF1-CA75-4688-BD62-487029054E35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241E39FF-FE66-444C-A4C2-3D28C45341BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C092D5C7-369F-4EED-90FA-10091BB49861"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D08121-DC57-47D7-8214-23A209F0AF08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "EEE0F93E-E95E-4EBC-9B40-2DF1ABBCBFB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8264DF4-47B4-4716-AE89-44AFA870D385"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3375DF8B-D0D7-4888-8D24-0A1834E4FD2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52544912-FAA3-4025-A5FD-151B21CEC53B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "157CD272-1F01-4514-81A2-8B4E7E177C5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A0A47B-74A1-4731-92A8-BC10FFE58ECF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "45168C28-F506-4D42-92D1-FF1AE03044D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237FB33B-BF08-4E3E-8E83-EB0AD2F12A4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "258BFA6D-AFF2-4199-A59A-85643DB6A561"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF0AFED-588A-4EFB-8C90-9280BC3A6720"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "38DAF4CB-74A0-4404-83F2-00D78E7B5EAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E1D79D-0CB0-4FD9-8A82-27CDFBFE07B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "00C17F69-0E8C-4272-8412-CE33F594E740"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DFCB62-6CDF-4AD2-9265-1887E5780CA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "82C4F4E6-2BB3-4CD0-89B3-E234E1DE2222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D698D3E-BB05-4C65-90F4-8DAE275CD6A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3A775676-D398-43F5-AD5D-C4FD8ECD2AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2299ED50-B4D2-4BB3-AD87-56D552B84AE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "81334861-6BFD-4DF2-9EDD-45F14044FB6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7743:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C206A50-1225-4CC8-BC38-A7FEF4E2BA54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "0FB69E43-DCB4-432C-9ED3-D7364F75AA58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F900BDD-F094-41A6-9A23-31F53DBA95D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "4D11A474-6C0F-4B95-85F6-138C98D1F32B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02B1C69-BAA4-485B-BE22-46BE321F9E4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "psirt@amd.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20532",
      "sourceIdentifier" : "psirt@amd.com",
      "published" : "2023-01-11T08:15:14.147",
      "lastModified" : "2025-04-07T19:15:48.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a denial of service.\n"
      }, {
        "lang" : "es",
        "value" : "Una validación de entrada insuficiente en la SMU puede permitir que un atacante bloquee recursos incorrectamente, lo que podría provocar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "856AF080-97A2-4C79-BA32-FCB35F0E2543"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89FAAD8C-6DD1-408D-849B-0CE707321B13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "9FAAAE77-BAF6-48C6-827B-F2A6E2057420"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B3C659-C31A-4F82-9587-9F8A943F637D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "F15B3A78-7A86-40B5-B01E-C78445099A40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87543FB4-658A-4300-9DC9-836AC1D4BCFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "D2E45530-3D27-4129-A74F-76B7C01268A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25652AB-E243-4C40-BE12-AB53AF52CD61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C6386B61-191C-498B-8EB0-13E9E9813501"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F4A126-B4A6-480A-9DD7-7F68714DFB49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "2A8898F0-33DD-4864-8375-4563D4E0AB42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72C86198-0BD4-42E1-974B-70A49F82C411"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E403604E-E759-46EC-ABE4-D02920CD986E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC99346-DBF1-4060-8E6B-35D315944ADA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C10AA8B6-775F-4EE3-A4AB-D960B9135638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8C6528-9100-41D2-88A2-FFEABAB8F86A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "98A9A98D-DE9A-4C09-87FC-0759800E2507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDF8A1E-B259-43D0-A56C-8C2BB688A32C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "A0BAB016-BD2C-4F4A-9404-6A4538BCF638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A6C7497-1B63-490F-B8EA-D9F3CB790952"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "6ECE445A-CB24-4BBE-9C1E-38DC7F06C2E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC94B03B-A7FE-47AE-969D-FFEF278A7A9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "271078B9-338F-489F-BE07-F6C3CA73DC9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EDABE45-F529-453C-92DC-BF7747CEEC0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "794A81DC-82E8-4653-8D7C-FE647E81B6F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563708A3-7C51-4693-B02D-9A25A639FE42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E1D539C9-9E68-4FED-B84A-6406E85F6257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49BBC687-5C3C-4843-A028-B8BE29D1E302"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "2C6AB603-1B5B-4D51-A6C4-C65400D381E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68ACF30E-62DD-4217-B7F0-4A0FFF47E8EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "3DC9627E-1EEA-466D-A0C9-D709883000FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430C9955-0090-4166-8E90-D81C2AA7DE0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "4F1BFFB5-F00D-46DC-A665-E3D7F54CD49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92EBDDBF-37C2-4D09-B744-F78169B2C1C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "0B289ACA-0609-490F-808E-C1D6E66775BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1540CCD-1ED8-4B4E-AD43-7DE2689D9A21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E22A4E0B-6E52-49EB-B81B-44E6331801DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2E0AC0-8BDE-49F8-B067-DB03037921DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "8BD7EAC7-D797-4A4C-ABE9-D2602C4936CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F7CB05E-C4F4-481F-AFB0-9288EBE6DB62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "37F65D10-D891-4C0A-A942-82E2039538D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FC5683-F612-4586-8BA3-FB1F66D8868B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "C1AD149D-317E-4D90-94EE-2C49B2C1E312"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F187412-26C2-4D8C-9199-D7CCF49D6520"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "E842F041-A573-4B71-B686-871771C88EAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FBBFDD3-A85D-43A3-AD67-D69E91C633B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "1B32CB87-D10F-429F-84B2-F6084638450D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B816918-6CCF-4010-AA16-7BF8A93AD7D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "3AA00554-6BE7-4443-8BF2-F66D486E7DF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D55BEF-AFC8-45DC-9401-5DEF374E16C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "romepi_1.0.0.c",
            "matchCriteriaId" : "0C5851F9-4074-48C7-B6C4-16E994C5045D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A05BAA-D9ED-411D-AEC7-DBD8998C345E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "15A7FC33-9F8F-4862-8CF9-FC39D3493EAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C912AA31-FB2D-4BD9-B1BD-3C8D7EEE771C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "934DEED4-7118-435E-AF96-C34EC71D3AE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F98FF1A-3A2B-4CED-AEA2-9C4F2AC2D8C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9710AF52-5E45-44CE-88EB-821F538A1692"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02B61B7-7DD3-4164-8D32-EB961E981BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "55BF1B99-92BB-4BD7-84DC-BCBF4BFAF234"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9000686A-DC2B-4561-9C32-E90890EB2EBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "2807BF4F-10B8-470A-8646-A8224E04DCCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B9C24B-2C10-4826-A91B-E1C60665FBBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "48DB2F6F-AF8C-4B1D-A0C1-D6DBCD34D528"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180B3002-B3C5-48B5-8322-5B64B237C5B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "F793F124-BC16-48C7-9FB6-4932EE153E31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678C5F58-8AE9-46FF-8F01-4CF394C87A2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "D54F40EC-C433-4FB6-A07A-8C81FD3E04A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1766FF1-77A9-4293-B826-F6A8FBD7AFBF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "9BEC5185-2AA7-4EF2-925E-B3A1E9229CE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C474537-3006-41BA-8C3D-5C370E3ACECD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C4DAD7E6-9D81-4DA7-831A-29ACFC3663F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E2B13CA-72F4-4CF6-9E12-62E6E9056A14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "44F9FCF1-CA75-4688-BD62-487029054E35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241E39FF-FE66-444C-A4C2-3D28C45341BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "C092D5C7-369F-4EED-90FA-10091BB49861"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D08121-DC57-47D7-8214-23A209F0AF08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "EEE0F93E-E95E-4EBC-9B40-2DF1ABBCBFB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8264DF4-47B4-4716-AE89-44AFA870D385"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3375DF8B-D0D7-4888-8D24-0A1834E4FD2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52544912-FAA3-4025-A5FD-151B21CEC53B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "157CD272-1F01-4514-81A2-8B4E7E177C5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77A0A47B-74A1-4731-92A8-BC10FFE58ECF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "45168C28-F506-4D42-92D1-FF1AE03044D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237FB33B-BF08-4E3E-8E83-EB0AD2F12A4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "258BFA6D-AFF2-4199-A59A-85643DB6A561"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF0AFED-588A-4EFB-8C90-9280BC3A6720"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "38DAF4CB-74A0-4404-83F2-00D78E7B5EAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E1D79D-0CB0-4FD9-8A82-27CDFBFE07B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "00C17F69-0E8C-4272-8412-CE33F594E740"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DFCB62-6CDF-4AD2-9265-1887E5780CA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "82C4F4E6-2BB3-4CD0-89B3-E234E1DE2222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D698D3E-BB05-4C65-90F4-8DAE275CD6A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "3A775676-D398-43F5-AD5D-C4FD8ECD2AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2299ED50-B4D2-4BB3-AD87-56D552B84AE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "81334861-6BFD-4DF2-9EDD-45F14044FB6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7743:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C206A50-1225-4CC8-BC38-A7FEF4E2BA54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "0FB69E43-DCB4-432C-9ED3-D7364F75AA58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F900BDD-F094-41A6-9A23-31F53DBA95D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "milanpi_1.0.0.5",
            "matchCriteriaId" : "4D11A474-6C0F-4B95-85F6-138C98D1F32B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D02B1C69-BAA4-485B-BE22-46BE321F9E4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "psirt@amd.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22885",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-01-11T08:15:14.203",
      "lastModified" : "2023-11-07T04:07:29.027",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-11T09:15:08.787",
      "lastModified" : "2025-11-03T18:50:19.817",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation."
      }, {
        "lang" : "es",
        "value" : "En SugarCRM antes de la 12.0. Hotfix 91155, una solicitud manipulada puede inyectar código PHP personalizado a través de EmailTemplates debido a que falta una validación de entrada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-02-02",
      "cisaActionDue" : "2023-02-23",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Multiple SugarCRM Products Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.5",
            "matchCriteriaId" : "B8F17D00-E9D1-4E15-BBD3-E31FE0447DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.0.2",
            "matchCriteriaId" : "A0BDB348-954D-4DE0-8453-86E8C596E5E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171320/SugarCRM-12.x-Remote-Code-Execution-Shell-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2023-001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171320/SugarCRM-12.x-Remote-Code-Execution-Shell-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2023-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-22952",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22487",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-11T20:15:08.833",
      "lastModified" : "2024-11-21T07:44:54.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flarum is a forum software for building communities. Using the mentions feature provided by the flarum/mentions extension, users can mention any post ID on the forum with the special `@\"<username>\"#p<id>` syntax. The following behavior never changes no matter if the actor should be able to read the mentioned post or not: A URL to the mentioned post is inserted into the actor post HTML, leaking its discussion ID and post number. The `mentionsPosts` relationship included in the `POST /api/posts` and `PATCH /api/posts/<id>` JSON responses leaks the full JSON:API payload of all mentioned posts without any access control. This includes the content, date, number and attributes added by other extensions. An attacker only needs the ability to create new posts on the forum to exploit the vulnerability. This works even if new posts require approval. If they have the ability to edit posts, the attack can be performed even more discreetly by using a single post to scan any size of database and hiding the attack post content afterward. The attack allows the leaking of all posts in the forum database, including posts awaiting approval, posts in tags the user has no access to, and private discussions created by other extensions like FriendsOfFlarum Byobu. This also includes non-comment posts like tag changes or renaming events. The discussion payload is not leaked but using the mention HTML payload it's possible to extract the discussion ID of all posts and combine all posts back together into their original discussions even if the discussion title remains unknown. All Flarum versions prior to 1.6.3 are affected. The vulnerability has been fixed and published as flarum/core v1.6.3. As a workaround, user can disable the mentions extension."
      }, {
        "lang" : "es",
        "value" : "Flarum es un software de foro para construir comunidades. Usando la función de menciones proporcionada por la extensión flarum/mentions, los usuarios pueden mencionar cualquier ID de publicación en el foro con la sintaxis especial `@\"\"#p`. El siguiente comportamiento nunca cambia, sin importar si el actor debería poder leer la publicación mencionada o no: se inserta una URL a la publicación mencionada en el HTML de la publicación del actor, filtrando su ID de discusión y número de publicación. La relación `mentionsPosts` incluida en las respuestas JSON `POST /api/posts` y `PATCH /api/posts/` filtra el payload JSON:API completa de todas las publicaciones mencionadas sin ningún control de acceso. Esto incluye el contenido, la fecha, el número y los atributos agregados por otras extensiones. Un atacante sólo necesita la capacidad de crear nuevas publicaciones en el foro para explotar la vulnerabilidad. Esto funciona incluso si las nuevas publicaciones requieren aprobación. Si tienen la capacidad de editar publicaciones, el ataque se puede realizar de manera aún más discreta usando una sola publicación para escanear cualquier tamaño de base de datos y ocultando el contenido de la publicación del ataque luego. El ataque permite la filtración de todas las publicaciones en la base de datos del foro, incluidas las publicaciones en espera de aprobación, las publicaciones en etiquetas a las que el usuario no tiene acceso y las discusiones privadas creadas por otras extensiones como FriendsOfFlarum Byobu. Esto también incluye publicaciones que no son comentarios, como cambios de etiquetas o cambios de nombre de eventos. El payload de la discusión no se filtra, pero utilizando el payload HTML de mención es posible extraer el ID de la discusión de todas las publicaciones y combinar todas las publicaciones nuevamente en sus discusiones originales, incluso si el título de la discusión sigue siendo desconocido. Todas las versiones de Flarum anteriores a la 1.6.3 se ven afectadas. La vulnerabilidad ha sido reparada y publicada como flarum/core v1.6.3. Como workaround, el usuario puede desactivar la extensión de menciones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flarum:flarum:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.3",
            "matchCriteriaId" : "1CCA0BF4-79A3-4528-821A-DF5DB8692C99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flarum/framework/commit/ab1c868b978e8b0d09a5d682c54665dae17d0985",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/framework/security/advisories/GHSA-22m9-m3ww-53h3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/framework/commit/ab1c868b978e8b0d09a5d682c54665dae17d0985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/framework/security/advisories/GHSA-22m9-m3ww-53h3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22492",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-11T20:15:08.970",
      "lastModified" : "2024-11-21T07:44:55.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZITADEL is a combination of Auth0 and Keycloak. RefreshTokens is an OAuth 2.0 feature that allows applications to retrieve new access tokens and refresh the user's session without the need for interacting with a UI. RefreshTokens were not invalidated when a user was locked or deactivated. The deactivated or locked user was able to obtain a valid access token only through a refresh token grant. When the locked or deactivated user’s session was already terminated (“logged out”) then it was not possible to create a new session. Renewal of access token through a refresh token grant is limited to the configured amount of time (RefreshTokenExpiration). As a workaround, ensure the RefreshTokenExpiration in the OIDC settings of your instance is set according to your security requirements. This issue has been patched in versions 2.17.3 and 2.16.4. "
      }, {
        "lang" : "es",
        "value" : "ZITADEL es una combinación de Auth0 y Keycloak. RefreshTokens es una característica de OAuth 2.0 que permite a las aplicaciones recuperar nuevos tokens de acceso y actualizar la sesión del usuario sin la necesidad de interactuar con una interfaz de usuario. Los RefreshTokens no se invalidaban cuando un usuario era bloqueado o desactivado. El usuario desactivado o bloqueado pudo obtener un token de acceso válido solo mediante una concesión de token de actualización. Cuando la sesión del usuario bloqueado o desactivado ya había finalizado (“logged out”) no era posible crear una nueva sesión. La renovación del token de acceso mediante una concesión de token de actualización está limitada a la cantidad de tiempo configurada (RefreshTokenExpiration). Como workaround, asegúrese de que RefreshTokenExpiration en la configuración OIDC de su instancia esté configurado de acuerdo con sus requisitos de seguridad. Este problema se solucionó en las versiones 2.17.3 y 2.16.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.16.4",
            "matchCriteriaId" : "0656FCDD-D804-476F-B8F8-4BB6845B622A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.17.0",
            "versionEndExcluding" : "2.17.3",
            "matchCriteriaId" : "52C4BACF-5AB3-4DBF-865D-E0FC740C379C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zitadel/zitadel/commit/301e22c4956ead6014a8179463c37263f7301a83",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zitadel/zitadel/commit/fc892c52a10cd4ffdac395747494f3a93a7494c2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zitadel/zitadel/security/advisories/GHSA-6rrr-78xp-5jp8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zitadel/zitadel/commit/301e22c4956ead6014a8179463c37263f7301a83",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zitadel/zitadel/commit/fc892c52a10cd4ffdac395747494f3a93a7494c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zitadel/zitadel/security/advisories/GHSA-6rrr-78xp-5jp8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0227",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-12T01:15:10.020",
      "lastModified" : "2024-11-21T07:36:46.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36."
      }, {
        "lang" : "es",
        "value" : "Caducidad de sesión insuficiente en pyload/pyload del repositorio de GitHub anterior a 0.5.0b3.dev36."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyload:pyload:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-01-12",
            "matchCriteriaId" : "270B9386-E69E-44A1-943F-8EE757354530"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pyload/pyload/commit/c035714c0596b704b11af0f8a669352f128ad2d9",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/af3101d7-fea6-463a-b7e4-a48be219e31b",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pyload/pyload/commit/c035714c0596b704b11af0f8a669352f128ad2d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/af3101d7-fea6-463a-b7e4-a48be219e31b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0042",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-01-12T04:15:10.817",
      "lastModified" : "2025-04-08T14:15:30.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2. GitLab Pages allows redirection to arbitrary protocols."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en GitLab CE/EE que afecta a todas las versiones desde 11.4 anterior a 15.5.7, 15.6 anterior a 15.6.4 y 15.7 anterior a 15.7.2. GitLab Pages permite la redirección a protocolos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "11.4.0",
            "versionEndExcluding" : "15.5.7",
            "matchCriteriaId" : "8E790DFB-A4FB-4562-AF86-DEBEE2045015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "11.4.0",
            "versionEndExcluding" : "15.5.7",
            "matchCriteriaId" : "9E51C640-5A23-4141-AC61-1E0327F5C010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.6.0",
            "versionEndExcluding" : "15.6.4",
            "matchCriteriaId" : "D184F043-F506-415D-BAC5-03E8A7334E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.6.0",
            "versionEndExcluding" : "15.6.4",
            "matchCriteriaId" : "D82CADBB-B082-4757-B16A-48AA5E3CC54E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.7.0",
            "versionEndExcluding" : "15.7.2",
            "matchCriteriaId" : "5482B6DC-FA6C-49AA-93FD-AA7EE9B3E39B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.7.0",
            "versionEndExcluding" : "15.7.2",
            "matchCriteriaId" : "B9242DBC-C1C9-4B96-970E-E1ECB2F3B2AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0042.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-pages/-/issues/728",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0042.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-pages/-/issues/728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-pages/-/issues/728",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-12T07:15:08.193",
      "lastModified" : "2025-03-20T21:15:18.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results)."
      }, {
        "lang" : "es",
        "value" : "cbq_classify en net/sched/sch_cbq.c en el kernel de Linux hasta 6.1.4 permite a los atacantes provocar una denegación de servicio (lectura fuera de los límites) debido a confusión de tipos (los números no negativos a veces pueden indicar una condición TC_ACT_SHOT en lugar de resultados de clasificación válidos)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.12",
            "versionEndIncluding" : "6.1.4",
            "matchCriteriaId" : "C3F26C69-271C-4BC5-A0BB-21993495663B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=caa4b35b4317d5147b3ab0fbdc9c075c7d2e9c12",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5324",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/10/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/10/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=caa4b35b4317d5147b3ab0fbdc9c075c7d2e9c12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/10/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-12T07:15:09.953",
      "lastModified" : "2025-03-20T21:15:18.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results)."
      }, {
        "lang" : "es",
        "value" : "atm_tc_enqueue en net/sched/sch_atm.c en el kernel de Linux hasta 6.1.4 permite a los atacantes provocar una denegación de servicio debido a confusión de tipos (los números no negativos a veces pueden indicar una condición TC_ACT_SHOT en lugar de resultados de clasificación válidos)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.12",
            "versionEndIncluding" : "6.1.4",
            "matchCriteriaId" : "C3F26C69-271C-4BC5-A0BB-21993495663B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a2965c7be0522eaa18808684b7b82b248515511b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5324",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/10/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/10/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a2965c7be0522eaa18808684b7b82b248515511b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/10/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0243",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-12T15:15:10.430",
      "lastModified" : "2024-11-21T07:36:49.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in TuziCMS 2.0.6. This affects the function index of the file App\\Manage\\Controller\\ArticleController.class.php of the component Article Module. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-218151."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad crítica en TuziCMS 2.0.6. Esto afecta el índice de función del archivo App\\Manage\\Controller\\ArticleController.class.php del componente Article Module. La manipulación del argumento id conduce a la inyección de SQL. Es posible iniciar el ataque de forma remota.La explotación ha sido divulgada al público y puede utilizarse. El identificador asociado de esta vulnerabilidad es VDB-218151."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tuzicms_project:tuzicms:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B9B8D-F29E-410A-8FB1-2E8812FE9233"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yeyinshi/tuzicms/issues/12",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218151",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218151",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yeyinshi/tuzicms/issues/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0244",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-12T15:15:10.517",
      "lastModified" : "2024-11-21T07:36:49.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in TuziCMS 2.0.6. This vulnerability affects the function delall of the file \\App\\Manage\\Controller\\KefuController.class.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-218152."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad crítica TuziCMS 2.0.6. Esta vulnerabilidad afecta la función delall del archivo \\App\\Manage\\Controller\\KefuController.class.php. La manipulación del argumento id conduce a la inyección de SQL. El ataque se puede iniciar de forma remota.La explotación ha sido divulgada al público y puede utilizarse. El identificador de esta vulnerabilidad es VDB-218152."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tuzicms_project:tuzicms:2.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097B9B8D-F29E-410A-8FB1-2E8812FE9233"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yeyinshi/tuzicms/issues/13",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218152",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218152",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yeyinshi/tuzicms/issues/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0245",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-12T15:15:10.597",
      "lastModified" : "2024-11-21T07:36:49.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Online Flight Booking Management System. This issue affects some unknown processing of the file add_contestant.php. The manipulation of the argument add_contestant leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-218153 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad crítica SourceCodester Online Flight Booking Management System. Este problema afecta un procesamiento desconocido del archivo add_contestant.php. La manipulación del argumento add_contestant conduce a la inyección de SQL. El ataque puede iniciarse de forma remota.La explotación ha sido divulgada al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-218153."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_flight_booking_management_system_project:online_flight_booking_management_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72EB5755-4453-4F19-BFA0-DED79166F94F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/f4cky0u/Security-vulnerabilities/blob/main/Online%20Flight%20Booking%20Management%20System%20add_contestant.php%20has%20SQLinject.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218153",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218153",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/f4cky0u/Security-vulnerabilities/blob/main/Online%20Flight%20Booking%20Management%20System%20add_contestant.php%20has%20SQLinject.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0246",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-12T15:15:10.680",
      "lastModified" : "2024-11-21T07:36:49.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in earclink ESPCMS P8.21120101. Affected is an unknown function of the component Content Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-218154 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como problemática en earclink ESPCMS P8.21120101. Una función desconocida del componente Content Handler es afectada por esta vulnerabilidad. La manipulación conduce a cross site scripting. Es posible lanzar el ataque de forma remota.La explotación ha sido divulgada al público y puede utilizarse. VDB-218154 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:espcms:espcms:p8.21120101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2B0E94-D9EB-4618-90E8-D77172B5D274"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/earclink/espcms/issues/I6812Q",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218154",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218154",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/earclink/espcms/issues/I6812Q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0247",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-12T17:15:09.603",
      "lastModified" : "2024-11-21T07:36:49.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1."
      }, {
        "lang" : "es",
        "value" : "Elemento de ruta de búsqueda no controlado en el repositorio de GitHub bits-and-blooms/bloom anterior a 3.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bloom_project:bloom:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "3.3.1",
            "matchCriteriaId" : "E79F29F7-18C2-427E-9238-77FCAA1F5371"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bits-and-blooms/bloom/commit/658f1393d4c52254a3d22f5f64f217405ec5fefb",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/cab50e44-0995-4ac1-a5d5-889293b9704f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bits-and-blooms/bloom/commit/658f1393d4c52254a3d22f5f64f217405ec5fefb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/cab50e44-0995-4ac1-a5d5-889293b9704f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0254",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-12T18:15:08.883",
      "lastModified" : "2026-04-08T18:17:41.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Membership WP user Import plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in versions up to, and including, 1.7 due to insufficient escaping on the user supplied parameter. This makes it possible for authenticated attackers with administrative privileges to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      }, {
        "lang" : "es",
        "value" : "El complemento Simple Membership WP user Import para WordPress es vulnerable a la inyección SQL a través del parámetro 'orderby' en versiones hasta la 1.7 incluida debido a un escape insuficiente en el parámetro proporcionado por el usuario. Esto hace posible que atacantes autenticados con privilegios administrativos agreguen consultas SQL adicionales a consultas ya existentes que pueden usarse para extraer información confidencial de la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple-membership-plugin:simple_membership_wp_user_import:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8",
            "matchCriteriaId" : "4022594B-C683-4022-96BC-AB9A65A32295"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2829005%40simple-membership-wp-user-import&new=2829005%40simple-membership-wp-user-import&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6f781533-b633-4452-95bd-c32ed0de2ea9?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2829005%40simple-membership-wp-user-import&new=2829005%40simple-membership-wp-user-import&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6f781533-b633-4452-95bd-c32ed0de2ea9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23456",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-01-12T19:15:24.693",
      "lastModified" : "2025-04-11T12:27:55.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt.cpp file. The flow allows an attacker to cause a denial of service (abort) via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema de desbordamiento de búfer de almacenamiento dinámico en UPX en PackTmt::pack() en el archivo p_tmt.cpp. El flujo permite a un atacante provocar una denegación de servicio (aborto) a través de un archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "patrick@puiterwijk.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:upx:upx:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022-11-24",
            "matchCriteriaId" : "F1EB09C2-5768-4F9B-81E2-7ED4F3DBC8A6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2160381",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/upx/upx/commit/510505a85cbe45e51fbd470f1aa8b02157c429d4",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/upx/upx/issues/632",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EL3BVKIGG3SH6I3KPOYQAWCBD4UMPOPI/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGEP3FBNRZXGLIA2B2ICMB32JVMPREFZ/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2160381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/upx/upx/commit/510505a85cbe45e51fbd470f1aa8b02157c429d4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/upx/upx/issues/632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/12/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EL3BVKIGG3SH6I3KPOYQAWCBD4UMPOPI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGEP3FBNRZXGLIA2B2ICMB32JVMPREFZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23457",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-01-12T19:15:24.810",
      "lastModified" : "2025-04-11T12:27:55.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla de segmentación en UPX en PackLinuxElf64::invert_pt_dynamic() en p_lx_elf.cpp. Un atacante con un archivo de entrada manipulado permite el acceso a una dirección de memoria no válida que podría provocar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "patrick@puiterwijk.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:upx:upx:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022-11-23",
            "matchCriteriaId" : "8FC60818-CF86-4167-9099-6E04DD315941"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2160382",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/upx/upx/commit/779b648c5f6aa9b33f4728f79dd4d0efec0bf860",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/upx/upx/issues/631",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EL3BVKIGG3SH6I3KPOYQAWCBD4UMPOPI/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGEP3FBNRZXGLIA2B2ICMB32JVMPREFZ/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2160382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/upx/upx/commit/779b648c5f6aa9b33f4728f79dd4d0efec0bf860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/upx/upx/issues/631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EL3BVKIGG3SH6I3KPOYQAWCBD4UMPOPI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGEP3FBNRZXGLIA2B2ICMB32JVMPREFZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22488",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-12T20:15:09.347",
      "lastModified" : "2024-11-21T07:44:54.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flarum is a forum software for building communities. Using the notifications feature, one can read restricted/private content and bypass access checks that would be in place for such content. The notification-sending component does not check that the subject of the notification can be seen by the receiver, and proceeds to send notifications through their different channels. The alerts do not leak data despite this as they are listed based on a visibility check, however, emails are still sent out. This means that, for extensions which restrict access to posts, any actor can bypass the restriction by subscribing to the discussion if the Subscriptions extension is enabled. The attack allows the leaking of some posts in the forum database, including posts awaiting approval, posts in tags the user has no access to if they could subscribe to a discussion before it becomes private, and posts restricted by third-party extensions. All Flarum versions prior to v1.6.3 are affected. The vulnerability has been fixed and published as flarum/core v1.6.3. All communities running Flarum should upgrade as soon as possible to v1.6.3. As a workaround, disable the Flarum Subscriptions extension or disable email notifications altogether. There are no other supported workarounds for this issue for Flarum versions below 1.6.3."
      }, {
        "lang" : "es",
        "value" : "Flarum es un software de foro para construir comunidades. Al utilizar la función de notificaciones, se puede leer contenido restringido/privado y evitar los controles de acceso que se implementarían para dicho contenido. El componente de envío de notificaciones no comprueba que el asunto de la notificación pueda ser visto por el receptor, y procede a enviar notificaciones a través de sus diferentes canales. A pesar de esto, las alertas no filtran datos, ya que se enumeran según una verificación de visibilidad; sin embargo, aún se envían correos electrónicos. Esto significa que, para las extensiones que restringen el acceso a las publicaciones, cualquier actor puede evitar la restricción suscribiéndose a la discusión si la extensión Suscripciones está habilitada. El ataque permite la filtración de algunas publicaciones en la base de datos del foro, incluidas publicaciones en espera de aprobación, publicaciones en etiquetas a las que el usuario no tiene acceso si pudiera suscribirse a una discusión antes de que se vuelva privada y publicaciones restringidas por extensiones de terceros. Todas las versiones de Flarum anteriores a la v1.6.3 se ven afectadas. La vulnerabilidad ha sido reparada y publicada como flarum/core v1.6.3. Todas las comunidades que ejecutan Flarum deben actualizar lo antes posible a la versión 1.6.3. Como workaround, desactive la extensión Flarum Subscriptions o desactive las notificaciones por correo electrónico por completo. No existen otros workarounds para este problema para las versiones de Flarum inferiores a 1.6.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flarum:flarum:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.3",
            "matchCriteriaId" : "1CCA0BF4-79A3-4528-821A-DF5DB8692C99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flarum/framework/commit/d0a2b95dca57d3dae9a0d77b610b1cb1d0b1766a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/framework/security/advisories/GHSA-8gcg-vwmw-rxj4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/framework/commit/d0a2b95dca57d3dae9a0d77b610b1cb1d0b1766a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/framework/security/advisories/GHSA-8gcg-vwmw-rxj4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0256",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-12T22:15:09.670",
      "lastModified" : "2026-03-30T18:15:59.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /fos/admin/ajax.php?action=login of the component Login Page. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-218184."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en SourceCodester Online Food Ordering System 2.0. Ha sido clasificada como crítica. Una función desconocida del archivo /fos/admin/ajax.php?action=login del componente Login Page es afectada por esta vulnerabilidad. La manipulación del argumento Username conduce a la inyección SQL. Es posible lanzar el ataque de forma remota. El identificador de esta vulnerabilidad es VDB-218184."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_food_ordering_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72B0380-7394-4DCF-BC93-3212CA3F4298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.218184",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218184",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0257",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-12T22:15:09.757",
      "lastModified" : "2026-03-30T18:15:59.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fos/admin/index.php?page=menu of the component Menu Form. The manipulation of the argument Image with the input <?php system($_GET['c']); ?> leads to unrestricted upload. The attack can be launched remotely. The identifier VDB-218185 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en SourceCodester Online Food Ordering System 2.0. Ha sido declarada crítica. Una función desconocida del archivo /fos/admin/index.php?page=menu del componente Menu Form es afectada por esta vulnerabilidad. La manipulación del argumento Imagen con la entrada  conduce a una subida sin restricciones. El ataque se puede lanzar de forma remota. A esta vulnerabilidad se le asignó el identificador VDB-218185."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_food_ordering_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72B0380-7394-4DCF-BC93-3212CA3F4298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.218185",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218185",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0258",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-12T22:15:09.837",
      "lastModified" : "2026-03-30T18:15:59.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Category List Handler. The manipulation of the argument Reason with the input \"><script>prompt(1)</script> leads to cross site scripting. The attack may be launched remotely. VDB-218186 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en SourceCodester Online Food Ordering System 2.0. Ha sido calificada como problemática. Una función desconocida del componente Category List Handler es afectada por esta vulnerabilidad. La manipulación del argumento Reason con la entrada \"&gt; conduce a cross-site scripting. El ataque puede iniciarse de forma remota. VDB-218186 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_food_ordering_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72B0380-7394-4DCF-BC93-3212CA3F4298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.218186",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218186",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22597",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-01-12T23:15:10.203",
      "lastModified" : "2024-11-21T07:45:01.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nInHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-319: Cleartext Transmission of Sensitive Information. They use an unsecured channel to communicate with the cloud platform by default. An unauthorized user could intercept this communication and steal sensitive information such as configuration information and MQTT credentials; this could allow MQTT command injection. \n\n"
      }, {
        "lang" : "es",
        "value" : "InHand Networks InRouter 302, anterior a la versión IR302 V3.5.56, e InRouter 615, anterior a la versión InRouter6XX-S-V2.3.0.r5542, contienen la vulnerabilidad CWE-319: transmisión de texto plano de información confidencial. Utilizan un canal no seguro para comunicarse con la plataforma en la nube de forma predeterminada. Un usuario no autorizado podría interceptar esta comunicación y robar información confidencial, como información de configuración y credenciales MQTT; esto podría permitir la inyección de comandos MQTT."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:inhandnetworks:inrouter302_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.56",
            "matchCriteriaId" : "61C63AA2-2DB5-4E01-9C62-7F78EC298C3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:inhandnetworks:inrouter302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B361EE15-6BF4-4D50-AD36-5AC31A101F2E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:inhandnetworks:inrouter615-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.r5542",
            "matchCriteriaId" : "2CC78CBF-AC9D-4581-95DE-CE869505C479"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:inhandnetworks:inrouter615-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C88156-94C3-4EFE-9AAB-A9E2BA114ABC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22598",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-01-12T23:15:10.283",
      "lastModified" : "2024-11-21T07:45:02.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nInHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-78:  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'). \n\nAn unauthorized user with privileged access to the local web interface or the cloud account managing the affected devices could push a specially crafted configuration update file to gain root access. This could lead to remote code execution with root privileges. \n\n \n\n \n\n"
      }, {
        "lang" : "es",
        "value" : "InHand Networks InRouter 302, anterior a la versión IR302 V3.5.56, e InRouter 615, anterior a la versión InRouter6XX-S-V2.3.0.r5542, contienen la vulnerabilidad CWE-78: Neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('OS Command Injection'). Un usuario no autorizado con acceso privilegiado a la interfaz web local o a la cuenta en la nube que administra los dispositivos afectados podría enviar un archivo de actualización de configuración especialmente diseñado para obtener acceso raíz. Esto podría conducir a la ejecución remota de código con privilegios de root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:inhandnetworks:inrouter302_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.56",
            "matchCriteriaId" : "61C63AA2-2DB5-4E01-9C62-7F78EC298C3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:inhandnetworks:inrouter302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B361EE15-6BF4-4D50-AD36-5AC31A101F2E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:inhandnetworks:inrouter615-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.r5542",
            "matchCriteriaId" : "2CC78CBF-AC9D-4581-95DE-CE869505C479"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:inhandnetworks:inrouter615-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C88156-94C3-4EFE-9AAB-A9E2BA114ABC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22599",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-01-12T23:15:10.360",
      "lastModified" : "2024-11-21T07:45:02.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nInHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: Use of a One-way Hash with a Predictable Salt. They \n\nsend MQTT credentials in response to HTTP/HTTPS requests from the cloud platform. These credentials are encoded using a hardcoded string into an MD5 hash. This string could be easily calculated by an unauthorized user who spoofed sending an HTTP/HTTPS request to the devices. This could result in the affected devices being temporarily disconnected from the cloud platform and allow the user to receive MQTT commands with potentially sensitive information. \n\n \n\n \n\n \n\n"
      }, {
        "lang" : "es",
        "value" : "InHand Networks InRouter 302, anterior a la versión IR302 V3.5.56, e InRouter 615, anterior a la versión InRouter6XX-S-V2.3.0.r5542, contienen la vulnerabilidad CWE-760: uso de un hash unidireccional con una sal predecible. Envían credenciales MQTT en respuesta a solicitudes HTTP/HTTPS desde la plataforma en la nube. Estas credenciales se codifican mediante una cadena codificada en un hash MD5. Esta cadena podría ser calculada fácilmente por un usuario no autorizado que falsificó el envío de una solicitud HTTP/HTTPS a los dispositivos. Esto podría provocar que los dispositivos afectados se desconecten temporalmente de la plataforma en la nube y permitir que el usuario reciba comandos MQTT con información potencialmente confidencial."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-760"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:inhandnetworks:inrouter302_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.56",
            "matchCriteriaId" : "61C63AA2-2DB5-4E01-9C62-7F78EC298C3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:inhandnetworks:inrouter302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B361EE15-6BF4-4D50-AD36-5AC31A101F2E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:inhandnetworks:inrouter615-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.r5542",
            "matchCriteriaId" : "2CC78CBF-AC9D-4581-95DE-CE869505C479"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:inhandnetworks:inrouter615-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C88156-94C3-4EFE-9AAB-A9E2BA114ABC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22600",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-01-12T23:15:10.443",
      "lastModified" : "2024-11-21T07:45:02.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nInHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-284: Improper Access Control. They allow unauthenticated devices to subscribe to MQTT topics on the same network as the device manager. An unauthorized user who knows of an existing topic name could send and receive messages to and from that topic. This includes the ability to send GET/SET configuration commands, reboot commands, and push firmware updates. \n\n \n\n \n\n \n\n \n\n"
      }, {
        "lang" : "es",
        "value" : "InHand Networks InRouter 302, anterior a la versión IR302 V3.5.56, e InRouter 615, anterior a la versión InRouter6XX-S-V2.3.0.r5542, contienen la vulnerabilidad CWE-284: control de acceso inadecuado. Permiten que dispositivos no autenticados se suscriban a temas MQTT en la misma red que el administrador de dispositivos. Un usuario no autorizado que conozca el nombre de un tema existente podría enviar y recibir mensajes hacia y desde ese tema. Esto incluye la capacidad de enviar comandos de configuración GET/SET, comandos de reinicio y actualizaciones de firmware."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:inhandnetworks:inrouter302_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.56",
            "matchCriteriaId" : "61C63AA2-2DB5-4E01-9C62-7F78EC298C3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:inhandnetworks:inrouter302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B361EE15-6BF4-4D50-AD36-5AC31A101F2E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:inhandnetworks:inrouter615-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.r5542",
            "matchCriteriaId" : "2CC78CBF-AC9D-4581-95DE-CE869505C479"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:inhandnetworks:inrouter615-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C88156-94C3-4EFE-9AAB-A9E2BA114ABC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22601",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-01-12T23:15:10.527",
      "lastModified" : "2024-11-21T07:45:02.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nInHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-330: Use of Insufficiently Random Values. They do not properly randomize MQTT ClientID parameters. An unauthorized user could calculate this parameter and use it to gather additional information about other InHand devices managed on the same cloud platform. \n\n \n\n \n\n \n\n \n\n \n\n"
      }, {
        "lang" : "es",
        "value" : "InHand Networks InRouter 302, anterior a la versión IR302 V3.5.56, e InRouter 615, anterior a la versión InRouter6XX-S-V2.3.0.r5542, contienen la vulnerabilidad CWE-330: uso de valores insuficientemente aleatorios. No aleatorizan adecuadamente los parámetros ClientID de MQTT. Un usuario no autorizado podría calcular este parámetro y utilizarlo para recopilar información adicional sobre otros dispositivos InHand administrados en la misma plataforma en la nube."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:inhandnetworks:inrouter302_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.56",
            "matchCriteriaId" : "61C63AA2-2DB5-4E01-9C62-7F78EC298C3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:inhandnetworks:inrouter302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B361EE15-6BF4-4D50-AD36-5AC31A101F2E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:inhandnetworks:inrouter615-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.r5542",
            "matchCriteriaId" : "2CC78CBF-AC9D-4581-95DE-CE869505C479"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:inhandnetworks:inrouter615-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88C88156-94C3-4EFE-9AAB-A9E2BA114ABC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22391",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:09.827",
      "lastModified" : "2024-11-21T07:44:43.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Specific packets are being incorrectly routed to a queue used for other high-priority traffic such as BGP, PIM, ICMP, ICMPV6 ND and ISAKMP. Due to this misclassification of traffic, receipt of a high rate of these specific packets will cause delays in the processing of other traffic, leading to a Denial of Service (DoS). Continued receipt of this amount of traffic will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS on ACX2K Series: All versions prior to 19.4R3-S9; All 20.2 versions; 20.3 versions prior to 20.3R3-S6 on ACX2K Series; 20.4 versions prior to 20.4R3-S4 on ACX2K Series; All 21.1 versions; 21.2 versions prior to 21.2R3-S3 on ACX2K Series. Note: This issues affects legacy ACX2K Series PPC-based devices. This platform reached Last Supported Version (LSV) as of the Junos OS 21.2 Release."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la gestión de colas Class-of-Service (CoS) en Juniper Networks Junos OS en los dispositivos de la serie ACX2K permite que un atacante basado en red no autenticado provoque una denegación de servicio (DoS). Paquetes específicos se enrutan incorrectamente a una cola utilizada para otro tráfico de alta prioridad, como BGP, PIM, ICMP, ICMPV6 ND e ISAKMP. Debido a esta clasificación errónea del tráfico, la recepción de una tasa elevada de estos paquetes específicos provocará retrasos en el procesamiento de otro tráfico, lo que provocará una denegación de servicio (DoS). La recepción continua de esta cantidad de tráfico creará una condición sostenida de Denegación de Servicio (DoS). Este problema afecta a Juniper Networks Junos OS en la serie ACX2K: todas las versiones anteriores a 19.4R3-S9; Todas las versiones 20.2; Versiones 20.3 anteriores a 20.3R3-S6 en la serie ACX2K; Versiones 20.4 anteriores a 20.4R3-S4 en la serie ACX2K; Todas las versiones 21.1; Versiones 21.2 anteriores a 21.2R3-S3 en la serie ACX2K. Nota: Este problema afecta a los dispositivos heredados basados en PPC de la serie ACX2K. Esta plataforma alcanzó la última versión admitida (LSV) a partir de la versión Junos OS 21.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.4",
            "matchCriteriaId" : "BEF1C9AB-1107-4A26-BB84-BDD72B4E6564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9C411A2E-A407-44E5-A2B2-3D049FB2DB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1C3B09-3800-493E-A319-57648305FE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70187",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22393",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:09.917",
      "lastModified" : "2024-11-21T07:44:43.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing Protocol Daemon (RPD) crash by sending a BGP route with invalid next-hop resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue only affects systems without import policy configured. This issue affects: Juniper Networks Junos OS 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3-S2; 21.4 versions prior to 21.4R2-S2, 21.4R3; 22.1 versions prior to 22.1R1-S2, 22.1R2; 22.2 versions prior to 22.2R1-S1, 22.2R2. Juniper Networks Junos OS Evolved 21.4-EVO versions prior to 21.4R2-S2-EVO, 21.4R3-EVO; 22.1-EVO versions prior to 22.1R1-S2-EVO, 22.1R2-EVO; 22.2-EVO versions prior to 22.2R1-S1-EVO, 22.2R2-EVO. This issue does not affect: Juniper Networks Junos OS versions prior to 21.1R1. Juniper Networks Junos OS Evolved versions prior to 21.3R1-EVO."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de comprobación inadecuada de condiciones inusuales o excepcionales en el procesamiento de rutas BGP de Juniper Networks Junos OS y Junos OS Evolved permite a un atacante provocar la caída del Routing PRotocol Daemon (RPD) al enviar una ruta BGP con un siguiente salto no válido, lo que genera una denegación de servicio. (DoS). La recepción y procesamiento continuo de este paquete creará una condición sostenida de Denegación de Servicio (DoS). Este problema solo afecta a los sistemas sin una política de importación configurada. Este problema afecta a: Juniper Networks Junos OS 21.1 versiones anteriores a 21.1R3-S4; Versiones 21.2 anteriores a 21.2R3-S3; Versiones 21.3 anteriores a 21.3R3-S2; Versiones 21.4 anteriores a 21.4R2-S2, 21.4R3; Versiones 22.1 anteriores a 22.1R1-S2, 22.1R2; Versiones 22.2 anteriores a 22.2R1-S1, 22.2R2. Juniper Networks Junos OS Evolved versiones 21.4-EVO anteriores a 21.4R2-S2-EVO, 21.4R3-EVO; Versiones 22.1-EVO anteriores a 22.1R1-S2-EVO, 22.1R2-EVO; Versiones 22.2-EVO anteriores a 22.2R1-S1-EVO, 22.2R2-EVO. Este problema no afecta a: Versiones de Juniper Networks Junos OS anteriores a 21.1R1. Versiones evolucionadas de Juniper Networks Junos OS anteriores a 21.3R1-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        }, {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E907193-075E-45BC-9257-9607DB790D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF46A8-FC3A-4779-B695-2CA11D045AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "39809219-9F87-4583-9DAD-9415DD320B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB299492-A919-4EBA-A62A-B3CF02FC0A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "74ED0939-D5F8-4334-9838-40F29DE3597F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "750FE748-82E7-4419-A061-2DEA26E35309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "236E23E5-8B04-4081-9D97-7300DF284000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D77A072D-350A-42F2-8324-7D3AC1711BF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70189",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22394",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:10.030",
      "lastModified" : "2024-11-21T07:44:43.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Handling of Unexpected Data Type vulnerability in the handling of SIP calls in Juniper Networks Junos OS on SRX Series and MX Series platforms allows an attacker to cause a memory leak leading to Denial of Services (DoS). This issue occurs on all MX Series platforms with MS-MPC or MS-MIC card and all SRX Series platforms where SIP ALG is enabled. Successful exploitation of this vulnerability prevents additional SIP calls and applications from succeeding. The SIP ALG needs to be enabled, either implicitly / by default or by way of configuration. To confirm whether SIP ALG is enabled on SRX use the following command: user@host> show security alg status | match sip SIP : Enabled This issue affects Juniper Networks Junos OS on SRX Series and on MX Series: All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R2-S8, 19.4R3-S10; 20.1 versions 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S6; 20.3 versions prior to 20.3R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S5; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2-S2, 21.4R3; 22.1 versions prior to 22.1R1-S2, 22.1R2, 22.1R3-S1. This issue does not affect Juniper Networks Junos OS on SRX Series and on MX Series: All versions prior to 18.2R1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de manejo inadecuado de tipos de datos inesperados en el manejo de llamadas SIP en Juniper Networks Junos OS en plataformas de las series SRX y MX permite a un atacante causar una pérdida de memoria que conduce a una denegación de servicios (DoS). Este problema ocurre en todas las plataformas de la serie MX con tarjeta MS-MPC o MS-MIC y en todas las plataformas de la serie SRX donde SIP ALG está habilitado. La explotación exitosa de esta vulnerabilidad evita que se realicen correctamente llamadas y aplicaciones SIP adicionales. El SIP ALG debe estar habilitado, ya sea de forma implícita/por defecto o mediante configuración. Para confirmar si SIP ALG está habilitado en SRX, utilice el siguiente comando: usuario@host&gt; mostrar el estado de las variables de seguridad | match sip SIP: habilitado Este problema afecta a Juniper Networks Junos OS en las series SRX y MX: todas las versiones anteriores a 19.3R3-S7; Versiones 19.4 anteriores a 19.4R2-S8, 19.4R3-S10; 20.1 versiones 20.1R1 y versiones posteriores; Versiones 20.2 anteriores a 20.2R3-S6; Versiones 20.3 anteriores a 20.3R3-S6; Versiones 20.4 anteriores a 20.4R3-S5; Versiones 21.1 anteriores a 21.1R3-S5; Versiones 21.2 anteriores a 21.2R3-S1; Versiones 21.3 anteriores a 21.3R3; Versiones 21.4 anteriores a 21.4R2-S2, 21.4R3; Versiones 22.1 anteriores a 22.1R1-S2, 22.1R2, 22.1R3-S1. Este problema no afecta a Juniper Networks Junos OS en las series SRX y MX: todas las versiones anteriores a 18.2R1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-911"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.3",
            "matchCriteriaId" : "ECFE39BF-15FB-4129-9D8C-4F28DABB5D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "122B09A3-299A-421C-9A6B-B3FEED8E19FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F09D3262-394A-43D1-A4ED-8887FCB20F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FEA876-302D-4F07-94E6-237C669538F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B011854A-932C-4D5C-B469-71F72608DFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "94A44054-B47B-453C-BF0F-9E071EFF6542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A4806-59AB-43D6-BFE3-A6DCE098335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "45DA4D89-1362-421F-8218-585CE5D60E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E7547-6649-436D-BC45-184417680C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9789FF8-D55C-4AF9-A250-E543A0EB826F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C238EB1-5A38-4877-8849-4A6D36918B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C21638A9-6AD8-4347-AA3F-64BC7BD71C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D621DB7F-BC6B-4A07-8803-596B3ED11CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A5620596-4DEE-41D7-A63F-224D814DAA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A8BBCEC0-5915-4F69-90FD-070A94145BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C93B13-DCEB-4861-87DC-3F1ECBAF7FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1C3B09-3800-493E-A319-57648305FE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3124DD0-9E42-4896-9060-CB7DD07FC342"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39DA74D-F5C7-4C11-857D-50631A110644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E020556B-693F-4963-BA43-3164AB50FA49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0D31FF-0812-42B8-B25E-03C35EC1B021"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06685D0E-A075-49A5-9EF4-34F0F795C8C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0B735-8C49-4B08-950A-296C9CDE43CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70190",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22395",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:10.117",
      "lastModified" : "2024-11-21T07:44:43.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). In an MPLS scenario specific packets destined to an Integrated Routing and Bridging (irb) interface of the device will cause a buffer (mbuf) to leak. Continued receipt of these specific packets will eventually cause a loss of connectivity to and from the device, and requires a reboot to recover. These mbufs can be monitored by using the CLI command 'show system buffers': user@host> show system buffers 783/1497/2280 mbufs in use (current/cache/total) user@host> show system buffers 793/1487/2280 mbufs in use (current/cache/total) <<<<<< mbuf usage increased This issue affects Juniper Networks Junos OS: All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R3-S9; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3-S1; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Missing Release of Memory after Effective Lifetime en el kernel de Juniper Networks Junos OS permite que un atacante adyacente no autenticado provoque una denegación de servicio (DoS). En un escenario MPLS, los paquetes específicos destinados a una interfaz de enrutamiento y puente integrados (irb) del dispositivo provocarán una fuga de un búfer (mbuf). La recepción continua de estos paquetes específicos eventualmente provocará una pérdida de conectividad hacia y desde el dispositivo, y requerirá un reinicio para recuperarse. Estos mbufs se pueden monitorear usando el comando CLI  'show system búfers': user@host&gt; muestra los búfers del sistema 783/1497/2280 mbufs en uso (actual/caché/total) usuario@host&gt; mostrar los búfers del sistema 793/1487/2280 mbufs en uso (actual/caché/total) &lt;&lt;&lt;&lt;&lt;&lt; aumento del uso de mbuf. Este problema afecta a Juniper Networks Junos OS: todas las versiones anteriores a 19.3R3-S7; Versiones 19.4 anteriores a 19.4R3-S9; 20.1 versión 20.1R1 y versiones posteriores; Versiones 20.2 anteriores a 20.2R3-S5; Versiones 20.3 anteriores a 20.3R3-S5; Versiones 20.4 anteriores a 20.4R3-S4; Versiones 21.1 anteriores a 21.1R3-S3; Versiones 21.2 anteriores a 21.2R3-S2; Versiones 21.3 anteriores a 21.3R3-S1; Versiones 21.4 anteriores a 21.4R3; Versiones 22.1 anteriores a 22.1R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.3",
            "matchCriteriaId" : "ECFE39BF-15FB-4129-9D8C-4F28DABB5D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "122B09A3-299A-421C-9A6B-B3FEED8E19FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F09D3262-394A-43D1-A4ED-8887FCB20F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FEA876-302D-4F07-94E6-237C669538F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B011854A-932C-4D5C-B469-71F72608DFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "94A44054-B47B-453C-BF0F-9E071EFF6542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A4806-59AB-43D6-BFE3-A6DCE098335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "45DA4D89-1362-421F-8218-585CE5D60E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF56BB-939A-4E38-BD9E-E3198E70F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E7547-6649-436D-BC45-184417680C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9789FF8-D55C-4AF9-A250-E543A0EB826F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C238EB1-5A38-4877-8849-4A6D36918B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C21638A9-6AD8-4347-AA3F-64BC7BD71C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D621DB7F-BC6B-4A07-8803-596B3ED11CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A5620596-4DEE-41D7-A63F-224D814DAA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A8BBCEC0-5915-4F69-90FD-070A94145BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C93B13-DCEB-4861-87DC-3F1ECBAF7FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70191",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22396",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:10.197",
      "lastModified" : "2024-11-21T07:44:43.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine (RE) of Juniper Networks Junos OS allows an unauthenticated network-based attacker to send crafted TCP packets destined to the device, resulting in an MBUF leak that ultimately leads to a Denial of Service (DoS). The system does not recover automatically and must be manually restarted to restore service. This issue occurs when crafted TCP packets are sent directly to a configured IPv4 or IPv6 interface on the device. Transit traffic will not trigger this issue. MBUF usage can be monitored through the use of the 'show system buffers' command. For example: user@junos> show system buffers | refresh 5 4054/566/4620 mbufs in use (current/cache/total) ... 4089/531/4620 mbufs in use (current/cache/total) ... 4151/589/4740 mbufs in use (current/cache/total) ... 4213/527/4740 mbufs in use (current/cache/total) This issue affects Juniper Networks Junos OS: 12.3 version 12.3R12-S19 and later versions; 15.1 version 15.1R7-S10 and later versions; 17.3 version 17.3R3-S12 and later versions; 18.4 version 18.4R3-S9 and later versions; 19.1 version 19.1R3-S7 and later versions; 19.2 version 19.2R3-S3 and later versions; 19.3 version 19.3R2-S7, 19.3R3-S3 and later versions prior to 19.3R3-S7; 19.4 version 19.4R2-S7, 19.4R3-S5 and later versions prior to 19.4R3-S10; 20.1 version 20.1R3-S1 and later versions; 20.2 version 20.2R3-S2 and later versions prior to 20.2R3-S6; 20.3 version 20.3R3-S1 and later versions prior to 20.3R3-S6; 20.4 version 20.4R2-S2, 20.4R3 and later versions prior to 20.4R3-S5; 21.1 version 21.1R2 and later versions prior to 21.1R3-S4; 21.2 version 21.2R1-S1, 21.2R2 and later versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3-S2; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R2-S1, 22.1R3; 22.2 versions prior to 22.2R1-S2, 22.2R2; 22.3 versions prior to 22.3R1-S1, 22.3R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de consumo de recursos no controlado en el procesamiento TCP en el motor de enrutamiento (RE) de Juniper Networks Junos OS permite que un atacante basado en red no autenticado envíe paquetes TCP manipulados destinados al dispositivo, lo que resulta en una fuga de MBUF que finalmente conduce a una denegación de servicio (DoS). El sistema no se recupera automáticamente y debe reiniciarse manualmente para restaurar el servicio. Este problema ocurre cuando los paquetes TCP manipulados se envían directamente a una interfaz IPv4 o IPv6 configurada en el dispositivo. El tráfico de tránsito no provocará este problema. El uso de MBUF se puede monitorear mediante el uso del comando 'show system búfers'. Por ejemplo: user@junos&gt; show system búfers | refresh5 4054/566/4620 mbufs en uso (actual/caché/total) ... 4089/531/4620 mbufs en uso (actual/caché/total) ... 4151/589/4740 mbufs en uso (actual/caché /total) ... 4213/527/4740 mbufs en uso (actual/caché/total) Este problema afecta a Juniper Networks Junos OS: 12.3 versión 12.3R12-S19 y versiones posteriores; 15.1 versión 15.1R7-S10 y versiones posteriores; 17.3 versión 17.3R3-S12 y versiones posteriores; 18.4 versión 18.4R3-S9 y versiones posteriores; 19.1 versión 19.1R3-S7 y versiones posteriores; 19.2 versión 19.2R3-S3 y versiones posteriores; 19.3 versión 19.3R2-S7, 19.3R3-S3 y versiones posteriores anteriores a 19.3R3-S7; 19.4 versión 19.4R2-S7, 19.4R3-S5 y versiones posteriores anteriores a 19.4R3-S10; 20.1 versión 20.1R3-S1 y versiones posteriores; 20.2 versión 20.2R3-S2 y versiones posteriores anteriores a 20.2R3-S6; 20.3 versión 20.3R3-S1 y versiones posteriores anteriores a 20.3R3-S6; 20.4 versión 20.4R2-S2, 20.4R3 y versiones posteriores anteriores a 20.4R3-S5; 21.1 versión 21.1R2 y versiones posteriores anteriores a 21.1R3-S4; 21.2 versión 21.2R1-S1, 21.2R2 y versiones posteriores anteriores a 21.2R3-S3; Versiones 21.3 anteriores a 21.3R3-S2; Versiones 21.4 anteriores a 21.4R3; Versiones 22.1 anteriores a 22.1R2-S1, 22.1R3; Versiones 22.2 anteriores a 22.2R1-S2, 22.2R2; Versiones 22.3 anteriores a 22.3R1-S1, 22.3R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s19:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEDA4E4-1B87-4AD0-BCF1-0A9333F0E729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s20:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B6A7A3-CD19-4B54-8A6F-85FF8A9084DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "17C66198-8D9A-454C-B645-A040A5C1E12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "E0309A32-5087-4918-B1EE-10EC28F50B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "28CB995B-97C5-4FC4-B054-94835CE2B363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B82ECB-3BF1-490E-A601-9358E6C4D308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "6DCA0ADF-CC93-4369-95E5-B41D7301C58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "9CCA5292-4722-4FE1-8070-2CBA666F160A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF1775A-1C37-462B-B9F8-F55E0CEB73B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9912E998-75FB-4EA0-8E36-0A1C38147AB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AE90D0-D502-4262-A83E-F40308A81380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E38CD1E2-41F5-42D1-B915-055A497C576A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "0C816B9A-F152-4E5F-8152-73635840A89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0EA9DA-2DAD-4FA4-8CCC-E2F3D7069305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "55F3E730-83F2-43C2-B6DC-77BAABB2F01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B011854A-932C-4D5C-B469-71F72608DFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "94A44054-B47B-453C-BF0F-9E071EFF6542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A4806-59AB-43D6-BFE3-A6DCE098335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "45DA4D89-1362-421F-8218-585CE5D60E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BCD5CFF-9C47-46D0-87B2-A87AA9413861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF56BB-939A-4E38-BD9E-E3198E70F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D621DB7F-BC6B-4A07-8803-596B3ED11CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A5620596-4DEE-41D7-A63F-224D814DAA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A8BBCEC0-5915-4F69-90FD-070A94145BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C93B13-DCEB-4861-87DC-3F1ECBAF7FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "283E41CB-9A90-4521-96DC-F31AA592CFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3124DD0-9E42-4896-9060-CB7DD07FC342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E37D4694-C80B-475E-AB5B-BB431F59C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "19519212-51DD-4448-B115-8A20A40192CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "59DDA54E-6845-47EB-AE3C-5EC6BD33DFA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70192",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22397",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:10.273",
      "lastModified" : "2024-11-21T07:44:43.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Allocation of Resources Without Limits or Throttling weakness in the memory management of the Packet Forwarding Engine (PFE) on Juniper Networks Junos OS Evolved PTX10003 Series devices allows an adjacently located attacker who has established certain preconditions and knowledge of the environment to send certain specific genuine packets to begin a Time-of-check Time-of-use (TOCTOU) Race Condition attack which will cause a memory leak to begin. Once this condition begins, and as long as the attacker is able to sustain the offending traffic, a Distributed Denial of Service (DDoS) event occurs. As a DDoS event, the offending packets sent by the attacker will continue to flow from one device to another as long as they are received and processed by any devices, ultimately causing a cascading outage to any vulnerable devices. Devices not vulnerable to the memory leak will process and forward the offending packet(s) to neighboring devices. Due to internal anti-flood security controls and mechanisms reaching their maximum limit of response in the worst-case scenario, all affected Junos OS Evolved devices will reboot in as little as 1.5 days. Reboots to restore services cannot be avoided once the memory leak begins. The device will self-recover after crashing and rebooting. Operator intervention isn't required to restart the device. This issue affects: Juniper Networks Junos OS Evolved on PTX10003: All versions prior to 20.4R3-S4-EVO; 21.3 versions prior to 21.3R3-S1-EVO; 21.4 versions prior to 21.4R2-S2-EVO, 21.4R3-EVO; 22.1 versions prior to 22.1R1-S2-EVO, 22.1R2-EVO; 22.2 versions prior to 22.2R2-EVO. To check memory, customers may VTY to the PFE first then execute the following show statement: show jexpr jtm ingress-main-memory chip 255 | no-more Alternatively one may execute from the RE CLI: request pfe execute target fpc0 command \"show jexpr jtm ingress-main-memory chip 255 | no-more\" Iteration 1: Example output: Mem type: NH, alloc type: JTM 136776 bytes used (max 138216 bytes used) 911568 bytes available (909312 bytes from free pages) Iteration 2: Example output: Mem type: NH, alloc type: JTM 137288 bytes used (max 138216 bytes used) 911056 bytes available (909312 bytes from free pages) The same can be seen in the CLI below, assuming the scale does not change: show npu memory info Example output: FPC0:NPU16 mem-util-jnh-nh-size 2097152 FPC0:NPU16 mem-util-jnh-nh-allocated 135272 FPC0:NPU16 mem-util-jnh-nh-utilization 6"
      }, {
        "lang" : "es",
        "value" : "Una asignación de recursos sin límites o debilidad de limitación en la gestión de memoria del motor de reenvío de paquetes (PFE) en los dispositivos Juniper Networks Junos OS Evolved PTX10003 Series permite que un atacante ubicado adyacentemente que haya establecido ciertas condiciones previas y conocimiento del entorno envíe ciertos datos genuinos específicos. paquetes para comenzar un ataque de condición de ejecución de tiempo de verificación y tiempo de uso (TOCTOU) que provocará que comience una pérdida de memoria. Una vez que comienza esta condición, y siempre que el atacante pueda mantener el tráfico infractor, se produce un evento de denegación de servicio distribuido (DDoS). Como evento DDoS, los paquetes infractores enviados por el atacante continuarán fluyendo de un dispositivo a otro siempre que sean recibidos y procesados por cualquier dispositivo, lo que en última instancia provocará una interrupción en cascada en cualquier dispositivo vulnerable. Los dispositivos que no sean vulnerables a la pérdida de memoria procesarán y reenviarán los paquetes infractores a los dispositivos vecinos. Debido a que los mecanismos y controles de seguridad internos anti-inundaciones alcanzan su límite máximo de respuesta en el peor de los casos, todos los dispositivos Junos OS Evolved afectados se reiniciarán en tan solo 1,5 días. No se pueden evitar los reinicios para restaurar los servicios una vez que comienza la pérdida de memoria. El dispositivo se recuperará automáticamente después de fallar y reiniciarse. No se requiere la intervención del operador para reiniciar el dispositivo. Este problema afecta a: Juniper Networks Junos OS Evolucionado en PTX10003: todas las versiones anteriores a 20.4R3-S4-EVO; Versiones 21.3 anteriores a 21.3R3-S1-EVO; Versiones 21.4 anteriores a 21.4R2-S2-EVO, 21.4R3-EVO; Versiones 22.1 anteriores a 22.1R1-S2-EVO, 22.1R2-EVO; Versiones 22.2 anteriores a 22.2R2-EVO. Para verificar la memoria, los clientes pueden VTY al PFE primero y luego ejecutar la siguiente declaración show: show jexpr jtm ingress-main-memory chip 255 | no-more Alternativamente, se puede ejecutar desde RE CLI: solicitar pfe ejecutar el comando fpc0 objetivo \"show jexpr jtm ingress-main-memory chip 255 | no-more\" Iteración 1: Ejemplo de salida: Tipo de memoria: NH, tipo de asignación: JTM 136776 bytes usados (máximo 138216 bytes usados) 911568 bytes disponibles (909312 bytes de páginas libres) Iteración 2: Salida de ejemplo: Tipo de memoria: NH, tipo de asignación: JTM 137288 bytes usados (máximo 138216 bytes usados) 911056 bytes disponibles (909312 bytes libres páginas) Lo mismo se puede ver en la CLI a continuación, asumiendo que la escala no cambia: mostrar información de memoria npu Ejemplo de salida: FPC0:NPU16 mem-util-jnh-nh-size 2097152 FPC0:NPU16 mem-util-jnh-nh- asignado 135272 FPC0:NPU16 mem-util-jnh-nh-utilización 6"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.4",
            "matchCriteriaId" : "0F41A7DF-2B27-4E2E-ABFC-E0510A028199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "247FB9DF-7EC0-4298-B27C-3235D141C1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8866D-162F-4C9B-8167-2FBA25410368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E5BC7-8607-4330-AA72-2273D32F8604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "878C81C9-A418-4A21-8FDB-2116A992679C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7451A671-A3CC-4904-8D45-947B1D3783C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0108AD20-EAE6-41D1-AE48-254C46B5388A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "44FBCA6F-EB05-4EE4-85FD-944BDAF7D81B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E554FD12-FE69-44D1-B2C9-4382F8CA4456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C1D53E-70BE-4246-89ED-1074C8C70747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B38A90A9-B739-49BE-8845-9ABF846CCC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE56A7C-BA26-405F-A640-C43AF78B0A3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC38173-44AB-43D5-8C27-CB43AD5E0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4DD04A-DE52-46BE-8C34-8DB47F7500F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE0E145-8E1C-446E-90ED-237E3B9CAF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F26369D-21B2-4C6A-98C1-492692A61283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "24003819-1A6B-4BDF-B3DF-34751C137788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D332E-9133-45B9-BB07-B33C790F737A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2A4377-D044-4E43-B6CC-B753D7F6ABD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E907193-075E-45BC-9257-9607DB790D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF46A8-FC3A-4779-B695-2CA11D045AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "39809219-9F87-4583-9DAD-9415DD320B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB299492-A919-4EBA-A62A-B3CF02FC0A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "74ED0939-D5F8-4334-9838-40F29DE3597F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "750FE748-82E7-4419-A061-2DEA26E35309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "236E23E5-8B04-4081-9D97-7300DF284000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D77A072D-350A-42F2-8324-7D3AC1711BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AE395C-A651-4568-88E3-3600544BF799"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD05415-9F94-4EB8-805A-C9C0FFA9D0DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70193",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22398",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:10.363",
      "lastModified" : "2024-11-21T07:44:44.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service (DoS). When an MPLS ping is performed on BGP LSPs, the RPD might crash. Repeated execution of this operation will lead to a sustained DoS. This issue affects: Juniper Networks Junos OS: 15.1 versions prior to 15.1R7-S12; 19.1 versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R1-S9, 19.2R3-S5; 19.3 versions prior to 19.3R3-S6; 19.4 versions prior to 19.4R2-S7, 19.4R3-S8; 20.1 versions prior to 20.1R3-S4; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R1-S1, 21.1R2; Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R2-EVO."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de acceso de puntero no inicializado en el demonio de protocolo de enrutamiento (rpd) de Juniper Networks Junos OS y Junos OS Evolved permite que un atacante autenticado localmente con privilegios bajos provoque una denegación de servicio (DoS). Cuando se realiza un ping MPLS en BGP LSP, el RPD puede fallar. La ejecución repetida de esta operación conducirá a un DoS sostenido. Este problema afecta a: Juniper Networks Junos OS: versiones 15.1 anteriores a 15.1R7-S12; Versiones 19.1 anteriores a 19.1R3-S9; Versiones 19.2 anteriores a 19.2R1-S9, 19.2R3-S5; Versiones 19.3 anteriores a 19.3R3-S6; Versiones 19.4 anteriores a 19.4R2-S7, 19.4R3-S8; Versiones 20.1 anteriores a 20.1R3-S4; Versiones 20.2 anteriores a 20.2R3-S5; Versiones 20.3 anteriores a 20.3R3-S5; Versiones 20.4 anteriores a 20.4R3-S4; Versiones 21.1 anteriores a 21.1R1-S1, 21.1R2; Juniper Networks Junos OS Evolved: todas las versiones anteriores a 20.4R3-S4; Versiones 21.1 anteriores a 21.1R2-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9134BF-7289-4503-A9C5-977C4CDCD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E43A39D8-3BD4-41CD-A8A3-2BFF8D340BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DECD665D-2CA4-4CB2-B77D-9230B102B339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "64F1FD18-AAD2-48DD-8F23-55D65D34FCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "B02FED8D-A554-4039-9F0A-C7EEFC640317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0501706-CB27-42B6-916B-B0009EC333C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9F2F31-B378-40FE-B012-000A225B76F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D014FF7B-BBEA-4F80-BE0E-4C70E4585A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "17C66198-8D9A-454C-B645-A040A5C1E12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "E0309A32-5087-4918-B1EE-10EC28F50B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D61247C5-C611-47CE-89BA-AB3958A975B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9DB8A3-2E5F-4969-9D42-25363489A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "04830AA8-7432-46F1-BD93-7339E2B756E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E62DDDE1-19A0-478A-94F6-1C6D889FAC3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "0B372356-D146-420B-95C3-381D0383B595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "92292C23-DC38-42F1-97C1-8416BBB60FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "59E2311C-075A-4C64-B614-728A21B17B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E2DF80-63D8-48DD-BC73-C406B7AA3C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "8120EAC3-DCCB-4429-A372-C0DAA3270A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DF81F459-915E-468C-8E82-85F1A601095B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9912E998-75FB-4EA0-8E36-0A1C38147AB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AE90D0-D502-4262-A83E-F40308A81380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCE4EA8-DDBA-4766-BB81-E4DA29723723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "2849078A-447A-4615-94E1-58AF450ED22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C625B6-25ED-4F6C-A778-6AB7FA7901CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "920FE638-BDE6-403D-9083-2BDBF6A3326F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E38CD1E2-41F5-42D1-B915-055A497C576A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "0C816B9A-F152-4E5F-8152-73635840A89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "122B09A3-299A-421C-9A6B-B3FEED8E19FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F09D3262-394A-43D1-A4ED-8887FCB20F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FEA876-302D-4F07-94E6-237C669538F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B011854A-932C-4D5C-B469-71F72608DFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "94A44054-B47B-453C-BF0F-9E071EFF6542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A4806-59AB-43D6-BFE3-A6DCE098335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "19EAC3C9-D800-436F-8FEA-8BDFB5A9BD24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E7547-6649-436D-BC45-184417680C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9789FF8-D55C-4AF9-A250-E543A0EB826F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C238EB1-5A38-4877-8849-4A6D36918B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C21638A9-6AD8-4347-AA3F-64BC7BD71C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D621DB7F-BC6B-4A07-8803-596B3ED11CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A5620596-4DEE-41D7-A63F-224D814DAA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A8BBCEC0-5915-4F69-90FD-070A94145BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "247FB9DF-7EC0-4298-B27C-3235D141C1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8866D-162F-4C9B-8167-2FBA25410368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E5BC7-8607-4330-AA72-2273D32F8604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "878C81C9-A418-4A21-8FDB-2116A992679C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7451A671-A3CC-4904-8D45-947B1D3783C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0108AD20-EAE6-41D1-AE48-254C46B5388A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "44FBCA6F-EB05-4EE4-85FD-944BDAF7D81B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E554FD12-FE69-44D1-B2C9-4382F8CA4456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C1D53E-70BE-4246-89ED-1074C8C70747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B38A90A9-B739-49BE-8845-9ABF846CCC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE56A7C-BA26-405F-A640-C43AF78B0A3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "52C3552E-798F-4719-B38D-F74E34EAAA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AE674DD3-3590-4434-B144-5AD7EB5F039D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0099BDA9-9D4B-4D6C-8234-EFD9E8C63476"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70181",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22399",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:10.447",
      "lastModified" : "2024-11-21T07:44:44.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When sFlow is enabled and it monitors a packet forwarded via ECMP, a buffer management vulnerability in the dcpfe process of Juniper Networks Junos OS on QFX10K Series systems allows an attacker to cause the Packet Forwarding Engine (PFE) to crash and restart by sending specific genuine packets to the device, resulting in a Denial of Service (DoS) condition. The dcpfe process tries to copy more data into a smaller buffer, which overflows and corrupts the buffer, causing a crash of the dcpfe process. Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS on QFX10K Series: All versions prior to 19.4R3-S9; 20.2 versions prior to 20.2R3-S6; 20.3 versions prior to 20.3R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3-S2; 21.4 versions prior to 21.4R2-S2, 21.4R3; 22.1 versions prior to 22.1R2; 22.2 versions prior to 22.2R1-S2, 22.2R2."
      }, {
        "lang" : "es",
        "value" : "Cuando sFlow está habilitado y monitorea un paquete reenviado a través de ECMP, una vulnerabilidad de administración de búfer en el proceso dcpfe de Juniper Networks Junos OS en sistemas de la serie QFX10K permite a un atacante provocar que el motor de reenvío de paquetes (PFE) se bloquee y se reinicie mediante el envío de paquetes genuinos específicos. paquetes al dispositivo, lo que resulta en una condición de denegación de servicio (DoS). El proceso dcpfe intenta copiar más datos en un búfer más pequeño, lo que se desborda y corrompe el búfer, provocando un bloqueo del proceso dcpfe. La recepción y el procesamiento continuo de estos paquetes crearán una condición sostenida de Denegación de Servicio (DoS). Este problema afecta a Juniper Networks Junos OS en la serie QFX10K: todas las versiones anteriores a 19.4R3-S9; Versiones 20.2 anteriores a 20.2R3-S6; Versiones 20.3 anteriores a 20.3R3-S6; Versiones 20.4 anteriores a 20.4R3-S5; Versiones 21.1 anteriores a 21.1R3-S4; Versiones 21.2 anteriores a 21.2R3-S3; Versiones 21.3 anteriores a 21.3R3-S2; Versiones 21.4 anteriores a 21.4R2-S2, 21.4R3; Versiones 22.1 anteriores a 22.1R2; Versiones 22.2 anteriores a 22.2R1-S2, 22.2R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70195",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/us/en/software/junos/network-mgmt/topics/topic-map/sflow-monitoring-technology.html",
        "source" : "sirt@juniper.net",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/us/en/software/junos/network-mgmt/topics/topic-map/sflow-monitoring-technology.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22400",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:10.540",
      "lastModified" : "2024-11-21T07:44:44.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Uncontrolled Resource Consumption vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause an FPC crash leading to a Denial of Service (DoS). When a specific SNMP GET operation or a specific CLI command is executed this will cause a GUID resource leak, eventually leading to exhaustion and result in an FPC crash and reboot. GUID exhaustion will trigger a syslog message like one of the following for example: evo-pfemand[<pid>]: get_next_guid: Ran out of Guid Space ... evo-aftmand-zx[<pid>]: get_next_guid: Ran out of Guid Space ... This leak can be monitored by running the following command and taking note of the value in the rightmost column labeled Guids: user@host> show platform application-info allocations app evo-pfemand | match \"IFDId|IFLId|Context\" Node Application Context Name Live Allocs Fails Guids re0 evo-pfemand net::juniper::interfaces::IFDId 0 3448 0 3448 re0 evo-pfemand net::juniper::interfaces::IFLId 0 561 0 561 user@host> show platform application-info allocations app evo-pfemand | match \"IFDId|IFLId|Context\" Node Application Context Name Live Allocs Fails Guids re0 evo-pfemand net::juniper::interfaces::IFDId 0 3784 0 3784 re0 evo-pfemand net::juniper::interfaces::IFLId 0 647 0 647 This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S3-EVO; 21.1-EVO version 21.1R1-EVO and later versions; 21.2-EVO versions prior to 21.2R3-S4-EVO; 21.3-EVO version 21.3R1-EVO and later versions; 21.4-EVO versions prior to 21.4R2-EVO."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de consumo de recursos no controlado en el demonio de administración de PFE (evo-pfemand) de Juniper Networks Junos OS Evolved permite que un atacante basado en red no autenticado provoque una falla de FPC que provoque una denegación de servicio (DoS). Cuando se ejecuta una operación SNMP GET específica o un comando CLI específico, esto provocará una fuga de recursos GUID, lo que eventualmente provocará el agotamiento y provocará un bloqueo y reinicio del FPC. El agotamiento del GUID activará un mensaje de syslog como uno de los siguientes, por ejemplo: evo-pfemand[]: get_next_guid: Se quedó sin espacio Guid... evo-aftmand-zx[]: get_next_guid: Se quedó sin espacio Guid... Esto La fuga se puede monitorear ejecutando el siguiente comando y tomando nota del valor en la columna de la derecha denominada Guids: usuario@host&gt; show platform application-info allocations app evo-pfemand | match \"IFDId|IFLId|Context\" Node Application Context Name Live Allocs Fails Guids re0 evo-pfemand net::juniper::interfaces::IFDId 0 3448 0 3448 re0 evo-pfemand net::juniper::interfaces::IFLId 0 561 0 561 user@host&gt; show platform application-info allocations app evo-pfemand | match \"IFDId|IFLId|Context\" Node Application Context Name Live Allocs Fails Guids re0 evo-pfemand net::juniper::interfaces::IFDId 0 3784 0 3784 re0 evo-pfemand net::juniper::interfaces::IFLId 0 647 0 647. Este problema afecta a Juniper Networks Junos OS Evolved: todas las versiones anteriores a 20.4R3-S3-EVO; 21.1-EVO versión 21.1R1-EVO y versiones posteriores; Versiones 21.2-EVO anteriores a 21.2R3-S4-EVO; 21.3-EVO versión 21.3R1-EVO y versiones posteriores; Versiones 21.4-EVO anteriores a 21.4R2-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "247FB9DF-7EC0-4298-B27C-3235D141C1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8866D-162F-4C9B-8167-2FBA25410368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E5BC7-8607-4330-AA72-2273D32F8604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "878C81C9-A418-4A21-8FDB-2116A992679C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7451A671-A3CC-4904-8D45-947B1D3783C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0108AD20-EAE6-41D1-AE48-254C46B5388A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "44FBCA6F-EB05-4EE4-85FD-944BDAF7D81B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E554FD12-FE69-44D1-B2C9-4382F8CA4456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C1D53E-70BE-4246-89ED-1074C8C70747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B38A90A9-B739-49BE-8845-9ABF846CCC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AE674DD3-3590-4434-B144-5AD7EB5F039D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0099BDA9-9D4B-4D6C-8234-EFD9E8C63476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D8729BC1-FB09-4E6D-A5D5-8BDC589555B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D72C3DF-4513-48AC-AAED-C1AADF0794E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8C583289-96C4-4451-A320-14CA1C390819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "620B0CDD-5566-472E-B96A-31D2C12E3120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA3DC63-B290-4D15-BEF9-21DEF36CA2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E57AF-979B-4022-8AD6-B3558E06B718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "144730FB-7622-4B3D-9C47-D1B7A7FB7EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA246F0-154E-4F44-A97B-690D22FA73DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "25D6C07C-F96E-4523-BB54-7FEABFE1D1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2B70C784-534B-4FAA-A5ED-3709656E2B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "60448FFB-568E-4280-9261-ADD65244F31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B770C52-7E3E-4B92-9138-85DEC56F3B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E88AC378-461C-4EFA-A04B-5786FF21FE03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0AFB30-81DC-465C-9F63-D1B15EA4809A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4DD04A-DE52-46BE-8C34-8DB47F7500F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE0E145-8E1C-446E-90ED-237E3B9CAF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F26369D-21B2-4C6A-98C1-492692A61283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "24003819-1A6B-4BDF-B3DF-34751C137788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D332E-9133-45B9-BB07-B33C790F737A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2A4377-D044-4E43-B6CC-B753D7F6ABD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E907193-075E-45BC-9257-9607DB790D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF46A8-FC3A-4779-B695-2CA11D045AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "39809219-9F87-4583-9DAD-9415DD320B36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70196",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22401",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:10.613",
      "lastModified" : "2024-11-21T07:44:44.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon (aftmand) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). On the PTX10008 and PTX10016 platforms running Junos OS or Junos OS Evolved, when a specific SNMP MIB is queried this will cause a PFE crash and the FPC will go offline and not automatically recover. A system restart is required to get the affected FPC in an operational state again. This issue affects: Juniper Networks Junos OS 22.1 version 22.1R2 and later versions; 22.1 versions prior to 22.1R3; 22.2 versions prior to 22.2R2. Juniper Networks Junos OS Evolved 21.3-EVO version 21.3R3-EVO and later versions; 21.4-EVO version 21.4R1-S2-EVO, 21.4R2-EVO and later versions prior to 21.4R2-S1-EVO; 22.1-EVO version 22.1R2-EVO and later versions prior to 22.1R3-EVO; 22.2-EVO versions prior to 22.2R1-S1-EVO, 22.2R2-EVO."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de validación inadecuada del índice de matriz en el demonio Advanced Forwarding Toolkit Manager (aftmand) de Juniper Networks Junos OS y Junos OS Evolved permite que un atacante no autenticado basado en red provoque una denegación de servicio (DoS). En las plataformas PTX10008 y PTX10016 que ejecutan Junos OS o Junos OS Evolved, cuando se consulta una MIB SNMP específica, se producirá un bloqueo de PFE y el FPC se desconectará y no se recuperará automáticamente. Es necesario reiniciar el sistema para que el FPC afectado vuelva a estar operativo. Este problema afecta a: Juniper Networks Junos OS 22.1 versión 22.1R2 y versiones posteriores; Versiones 22.1 anteriores a 22.1R3; Versiones 22.2 anteriores a 22.2R2. Juniper Networks Junos OS Evolved 21.3-EVO versión 21.3R3-EVO y versiones posteriores; 21.4-EVO versión 21.4R1-S2-EVO, 21.4R2-EVO y versiones posteriores anteriores a 21.4R2-S1-EVO; 22.1-EVO versión 22.1R2-EVO y versiones posteriores anteriores a 22.1R3-EVO; Versiones 22.2-EVO anteriores a 22.2R1-S1-EVO, 22.2R2-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1B615DBA-8C53-41D4-B264-D3EED8578471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2A4377-D044-4E43-B6CC-B753D7F6ABD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "39809219-9F87-4583-9DAD-9415DD320B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB299492-A919-4EBA-A62A-B3CF02FC0A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "97541867-C52F-40BB-9AAE-7E87ED23D789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D77A072D-350A-42F2-8324-7D3AC1711BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BE1FD4-DAD9-4357-A2E9-20E5826B0D5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70197",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22402",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:10.690",
      "lastModified" : "2024-11-21T07:44:44.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). In a Non Stop Routing (NSR) scenario, an unexpected kernel restart might be observed if \"bgp auto-discovery\" is enabled and if there is a BGP neighbor flap of auto-discovery sessions for any reason. This is a race condition which is outside of an attackers direct control and it depends on system internal timing whether this issue occurs. This issue affects Juniper Networks Junos OS Evolved: 21.3 versions prior to 21.3R3-EVO; 21.4 versions prior to 21.4R2-EVO; 22.1 versions prior to 22.1R2-EVO; 22.2 versions prior to 22.2R1-S1-EVO, 22.2R2-EVO."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad Use-After-Free en el núcleo de Juniper Networks Junos OS Evolved permite que un atacante no autenticado basado en la red provoque una denegación de servicio (DoS). En un escenario de Non Stop Routing (NSR), se podría observar un reinicio inesperado del kernel si el \"BGP auto-discovery\" está habilitado y si hay una interrupción de las sesiones de descubrimiento automático del vecino BGP por cualquier motivo. Esta es una condición de ejecución que está fuera del control directo del atacante y depende de la sincronización interna del sistema si se produce este problema. Este problema afecta a Juniper Networks Junos OS Evolved: versiones 21.3 anteriores a 21.3R3-EVO; Versiones 21.4 anteriores a 21.4R2-EVO; Versiones 22.1 anteriores a 22.1R2-EVO; Versiones 22.2 anteriores a 22.2R1-S1-EVO, 22.2R2-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC38173-44AB-43D5-8C27-CB43AD5E0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4DD04A-DE52-46BE-8C34-8DB47F7500F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE0E145-8E1C-446E-90ED-237E3B9CAF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F26369D-21B2-4C6A-98C1-492692A61283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "24003819-1A6B-4BDF-B3DF-34751C137788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D332E-9133-45B9-BB07-B33C790F737A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E907193-075E-45BC-9257-9607DB790D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF46A8-FC3A-4779-B695-2CA11D045AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "39809219-9F87-4583-9DAD-9415DD320B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "750FE748-82E7-4419-A061-2DEA26E35309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "236E23E5-8B04-4081-9D97-7300DF284000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC96EA7-90A7-4838-B95D-60DBC88C7BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D77A072D-350A-42F2-8324-7D3AC1711BF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70198",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22403",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:10.767",
      "lastModified" : "2024-11-21T07:44:44.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nAn Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS).\n\n\n\nOn QFX10K Series, Inter-Chassis Control Protocol (ICCP) is used in MC-LAG topologies to exchange control information between the devices in the topology. ICCP connection flaps and sync issues will be observed due to excessive specific traffic to the local device.\n\n\n\nThis issue affects Juniper Networks Junos OS on QFX10K Series:\n\n  *  All versions prior to 20.2R3-S7;\n  *  20.4 versions prior to 20.4R3-S4;\n  *  21.1 versions prior to 21.1R3-S3;\n  *  21.2 versions prior to 21.2R3-S1;\n  *  21.3 versions prior to 21.3R3;\n  *  21.4 versions prior to 21.4R3;\n  *  22.1 versions prior to 22.1R2.\n\n\n\n\n"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de asignación de recursos sin límites ni limitación en el Packet Forwarding Engine (PFE) de Juniper Networks Junos OS permite que un atacante no autenticado basado en la red provoque una denegación de servicio (DoS). En la serie QFX10K, el protocolo de control entre chasis (ICCP) se utiliza en topologías MC-LAG para intercambiar información de control entre los dispositivos de la topología. Se observarán fallas en la conexión ICCP y problemas de sincronización debido al tráfico específico excesivo al dispositivo local. Este problema afecta a Juniper Networks Junos OS en la serie QFX10K: * Todas las versiones anteriores a 20.2R3-S7; * Versiones 20.4 anteriores a 20.4R3-S4; * Versiones 21.1 anteriores a 21.1R3-S3; * Versiones 21.2 anteriores a 21.2R3-S1; * Versiones 21.3 anteriores a 21.3R3; * Versiones 21.4 anteriores a 21.4R3; * Versiones 22.1 anteriores a 22.1R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.2",
            "matchCriteriaId" : "9D5DC3ED-1843-467F-903D-2DB6CDFF06F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9C411A2E-A407-44E5-A2B2-3D049FB2DB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1401145-D8EC-4DB9-9CDE-9DE6C0D000C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1453E42A-77B3-4922-8EC3-1A5668C39550"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26408465-BD6A-4416-B98E-691A5F651080"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70199",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22404",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:10.840",
      "lastModified" : "2024-11-21T07:44:44.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Out-of-bounds Write vulnerability in the Internet Key Exchange Protocol daemon (iked) of Juniper Networks Junos OS on SRX series and MX with SPC3 allows an authenticated, network-based attacker to cause a Denial of Service (DoS). iked will crash and restart, and the tunnel will not come up when a peer sends a specifically formatted payload during the negotiation. This will impact other IKE negotiations happening at the same time. Continued receipt of this specifically formatted payload will lead to continuous crashing of iked and thereby the inability for any IKE negotiations to take place. Note that this payload is only processed after the authentication has successfully completed. So the issue can only be exploited by an attacker who can successfully authenticate. This issue affects Juniper Networks Junos OS on SRX Series, and MX Series with SPC3: All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R3-S9; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3-S1; 21.4 versions prior to 21.4R2-S1, 21.4R3; 22.1 versions prior to 22.1R1-S2, 22.1R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escritura fuera de los límites en el Internet Key Exchange Protocol Daemon (iked) de Juniper Networks Junos OS en la serie SRX y MX con SPC3 permite que un atacante autenticado basado en red provoque una denegación de servicio (DoS). iked fallará y se reiniciará, y el túnel no se activará cuando un par envíe una carga útil formateada específicamente durante la negociación. Esto afectará otras negociaciones IKE que se realicen al mismo tiempo. La recepción continua de esta carga útil formateada específicamente provocará un bloqueo continuo de iked y, por lo tanto, la imposibilidad de que se lleven a cabo negociaciones IKE. Tenga en cuenta que esta carga útil solo se procesa después de que la autenticación se haya completado con éxito. Por lo tanto, el problema sólo puede ser aprovechado por un atacante que pueda autenticarse exitosamente. Este problema afecta a Juniper Networks Junos OS en la serie SRX y la serie MX con SPC3: todas las versiones anteriores a 19.3R3-S7; Versiones 19.4 anteriores a 19.4R3-S9; Versiones 20.2 anteriores a 20.2R3-S5; Versiones 20.3 anteriores a 20.3R3-S5; Versiones 20.4 anteriores a 20.4R3-S4; Versiones 21.1 anteriores a 21.1R3-S3; Versiones 21.2 anteriores a 21.2R3-S2; Versiones 21.3 anteriores a 21.3R3-S1; Versiones 21.4 anteriores a 21.4R2-S1, 21.4R3; Versiones 22.1 anteriores a 22.1R1-S2, 22.1R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.3",
            "matchCriteriaId" : "ECFE39BF-15FB-4129-9D8C-4F28DABB5D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "122B09A3-299A-421C-9A6B-B3FEED8E19FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F09D3262-394A-43D1-A4ED-8887FCB20F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FEA876-302D-4F07-94E6-237C669538F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B011854A-932C-4D5C-B469-71F72608DFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "94A44054-B47B-453C-BF0F-9E071EFF6542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A4806-59AB-43D6-BFE3-A6DCE098335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "45DA4D89-1362-421F-8218-585CE5D60E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39DA74D-F5C7-4C11-857D-50631A110644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E020556B-693F-4963-BA43-3164AB50FA49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0D31FF-0812-42B8-B25E-03C35EC1B021"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06685D0E-A075-49A5-9EF4-34F0F795C8C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0B735-8C49-4B08-950A-296C9CDE43CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70200",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22405",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:10.913",
      "lastModified" : "2024-11-21T07:44:45.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Preservation of Consistency Between Independent Representations of Shared State vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS) to device due to out of resources. When a device is configured with \"service-provider/SP style\" switching, and mac-limiting is configured on an Aggregated Ethernet (ae) interface, and then a PFE is restarted or the device is rebooted, mac-limiting doesn't work anymore. Please note that the issue might not be apparent as traffic will continue to flow through the device although the mac table and respective logs will indicate that mac limit is reached. Functionality can be restored by removing and re-adding the MAC limit configuration. This issue affects Juniper Networks Junos OS on QFX5k Series, EX46xx Series: All versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3 on; 21.4 versions prior to 21.4R3 on; 22.1 versions prior to 22.1R2 on."
      }, {
        "lang" : "es",
        "value" : "Una preservación inadecuada de la coherencia entre representaciones independientes de una vulnerabilidad de estado compartido en el Packet Forwarding Engine (PFE) de Juniper Networks Junos OS permite que un atacante adyacente no autenticado provoque una denegación de servicio (DoS) en el dispositivo debido a la falta de recursos. Cuando un dispositivo está configurado con conmutación de \"estilo proveedor de servicios/SP\" y la limitación de mac está configurada en una interfaz Ethernet agregada (ae), y luego se reinicia un PFE o se reinicia el dispositivo, la limitación de mac no funciona ya no. Tenga en cuenta que es posible que el problema no sea evidente ya que el tráfico continuará fluyendo a través del dispositivo, aunque la tabla de mac y los registros respectivos indicarán que se alcanzó el límite de mac. La funcionalidad se puede restaurar eliminando y volviendo a agregar la configuración del límite MAC. Este problema afecta a Juniper Networks Junos OS en las series QFX5k y EX46xx: todas las versiones anteriores a 20.2R3-S5; Versiones 20.3 anteriores a 20.3R3-S5; Versiones 20.4 anteriores a 20.4R3-S4; Versiones 21.1 anteriores a 21.1R3-S3; Versiones 21.2 anteriores a 21.2R3-S1; Versiones 21.3 anteriores a 21.3R3 en adelante; Versiones 21.4 anteriores a 21.4R3 en adelante; Versiones 22.1 anteriores a 22.1R2 en adelante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1250"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.2",
            "matchCriteriaId" : "9D5DC3ED-1843-467F-903D-2DB6CDFF06F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3ECB975-D1A0-4318-9C5E-752A3C98F76F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B425BB1-3C78-42B1-A6C1-216E514191F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100-96s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD0F680-ED30-48F3-A5D9-988D510CFC0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200-32c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D790AD-D00F-4FED-96FE-3046C827356B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200-48y:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9AD5C-947D-41EF-9969-FCCEB144984F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210-64c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86047DE-A0A0-4698-9414-B66C0FA7B544"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193BEBD-9436-468D-B89E-D5720603451D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70201",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22406",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:10.990",
      "lastModified" : "2024-11-21T07:44:45.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS). In a segment-routing scenario with OSPF as IGP, when a peer interface continuously flaps, next-hop churn will happen and a continuous increase in Routing Protocol Daemon (rpd) memory consumption will be observed. This will eventually lead to an rpd crash and restart when the memory is full. The memory consumption can be monitored using the CLI command \"show task memory detail\" as shown in the following example: user@host> show task memory detail | match \"RT_NEXTHOPS_TEMPLATE|RT_TEMPLATE_BOOK_KEE\" RT_NEXTHOPS_TEMPLATE 1008 1024 T 50 51200 50 51200 RT_NEXTHOPS_TEMPLATE 688 768 T 50 38400 50 38400 RT_NEXTHOPS_TEMPLATE 368 384 T 412330 158334720 412330 158334720 RT_TEMPLATE_BOOK_KEE 2064 2560 T 33315 85286400 33315 85286400 user@host> show task memory detail | match \"RT_NEXTHOPS_TEMPLATE|RT_TEMPLATE_BOOK_KEE\" RT_NEXTHOPS_TEMPLATE 1008 1024 T 50 51200 50 51200 RT_NEXTHOPS_TEMPLATE 688 768 T 50 38400 50 38400 RT_NEXTHOPS_TEMPLATE 368 384 T 419005 160897920 419005 160897920 <=== RT_TEMPLATE_BOOK_KEE 2064 2560 T 39975 102336000 39975 10233600 <=== This issue affects: Juniper Networks Junos OS All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R2-S8, 19.4R3-S9; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3-S1; 21.4 versions prior to 21.4R2-S1, 21.4R3; 22.1 versions prior to 22.1R2. Juniper Networks Junos OS Evolved All versions prior to 20.4R3-S4-EVO; 21.4 versions prior to 21.4R2-S1-EVO, 21.4R3-EVO; 22.1 versions prior to 22.1R2-EVO."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Missing Release of Memory after Effective Lifetime en el kernel de Juniper Networks Junos OS y Junos OS Evolved permite que un atacante adyacente no autenticado provoque una denegación de servicio (DoS). En un escenario de enrutamiento de segmentos con OSPF como IGP, cuando una interfaz de pares oscila continuamente, se producirá una rotación del siguiente salto y se observará un aumento continuo en el consumo de memoria del demonio de protocolo de enrutamiento (rpd). Esto eventualmente provocará un bloqueo del rpd y se reiniciará cuando la memoria esté llena. El consumo de memoria se puede monitorear usando el comando CLI \"mostrar detalles de la memoria de la tarea\" como se muestra en el siguiente ejemplo: usuario@host&gt; mostrar detalle de la memoria de tareas | coincidencia \"RT_NEXTHOPS_TEMPLATE|RT_TEMPLATE_BOOK_KEE\" RT_NEXTHOPS_TEMPLATE 1008 1024 T 50 51200 50 51200 RT_NEXTHOPS_TEMPLATE 688 768 T 50 38400 50 38400 RT_NEXTHOPS_TEMPLATE 368 384 T 4123 30 158334720 412330 158334720 RT_TEMPLATE_BOOK_KEE 2064 2560 T 33315 85286400 33315 85286400 usuario@host&gt; mostrar detalle de la memoria de tareas | coincide con \"RT_NEXTHOPS_TEMPLATE|RT_TEMPLATE_BOOK_KEE\" RT_NEXTHOPS_TEMPLATE 1008 1024 T 50 51200 50 51200 RT_NEXTHOPS_TEMPLATE 688 768 T 50 38400 50 38400 RT_NEXTHOPS_TEMPLATE 368 384 T 4190 05 160897920 419005 160897920 &lt;=== RT_TEMPLATE_BOOK_KEE 2064 2560 T 39975 102336000 39975 10233600 &lt;=== Este número afecta a: Juniper Networks Junos OS Todas las versiones anteriores a 19.3R3-S7; Versiones 19.4 anteriores a 19.4R2-S8, 19.4R3-S9; Versiones 20.2 anteriores a 20.2R3-S5; Versiones 20.3 anteriores a 20.3R3-S5; Versiones 20.4 anteriores a 20.4R3-S4; Versiones 21.1 anteriores a 21.1R3-S3; Versiones 21.2 anteriores a 21.2R3-S2; Versiones 21.3 anteriores a 21.3R3-S1; Versiones 21.4 anteriores a 21.4R2-S1, 21.4R3; Versiones 22.1 anteriores a 22.1R2. Juniper Networks Junos OS evolucionó Todas las versiones anteriores a 20.4R3-S4-EVO; Versiones 21.4 anteriores a 21.4R2-S1-EVO, 21.4R3-EVO; Versiones 22.1 anteriores a 22.1R2-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.3",
            "matchCriteriaId" : "ECFE39BF-15FB-4129-9D8C-4F28DABB5D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "122B09A3-299A-421C-9A6B-B3FEED8E19FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F09D3262-394A-43D1-A4ED-8887FCB20F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FEA876-302D-4F07-94E6-237C669538F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B011854A-932C-4D5C-B469-71F72608DFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "94A44054-B47B-453C-BF0F-9E071EFF6542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A4806-59AB-43D6-BFE3-A6DCE098335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "45DA4D89-1362-421F-8218-585CE5D60E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.4",
            "matchCriteriaId" : "0F41A7DF-2B27-4E2E-ABFC-E0510A028199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "247FB9DF-7EC0-4298-B27C-3235D141C1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8866D-162F-4C9B-8167-2FBA25410368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E5BC7-8607-4330-AA72-2273D32F8604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "878C81C9-A418-4A21-8FDB-2116A992679C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7451A671-A3CC-4904-8D45-947B1D3783C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0108AD20-EAE6-41D1-AE48-254C46B5388A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "44FBCA6F-EB05-4EE4-85FD-944BDAF7D81B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E554FD12-FE69-44D1-B2C9-4382F8CA4456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C1D53E-70BE-4246-89ED-1074C8C70747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B38A90A9-B739-49BE-8845-9ABF846CCC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE56A7C-BA26-405F-A640-C43AF78B0A3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E907193-075E-45BC-9257-9607DB790D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF46A8-FC3A-4779-B695-2CA11D045AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "39809219-9F87-4583-9DAD-9415DD320B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB299492-A919-4EBA-A62A-B3CF02FC0A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "750FE748-82E7-4419-A061-2DEA26E35309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "236E23E5-8B04-4081-9D97-7300DF284000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC96EA7-90A7-4838-B95D-60DBC88C7BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70202",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22407",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:11.077",
      "lastModified" : "2024-11-21T07:44:45.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Incomplete Cleanup vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS). An rpd crash can occur when an MPLS TE tunnel configuration change occurs on a directly connected router. This issue affects: Juniper Networks Junos OS All versions prior to 18.4R2-S7; 19.1 versions prior to 19.1R3-S2; 19.2 versions prior to 19.2R3; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2. Juniper Networks Junos OS Evolved All versions prior to 19.2R3-EVO; 19.3 versions prior to 19.3R3-EVO; 19.4 versions prior to 19.4R3-EVO; 20.1 versions prior to 20.1R3-EVO; 20.2 versions prior to 20.2R2-EVO."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de limpieza incompleta en el Routing Protocol Daemon (rpd) de Juniper Networks Junos OS y Junos OS Evolved permite que un atacante adyacente no autenticado provoque una denegación de servicio (DoS). Puede ocurrir una falla de rpd cuando ocurre un cambio en la configuración del túnel MPLS TE en un router conectado directamente. Este problema afecta a: Juniper Networks Junos OS Todas las versiones anteriores a 18.4R2-S7; Versiones 19.1 anteriores a 19.1R3-S2; Versiones 19.2 anteriores a 19.2R3; Versiones 19.3 anteriores a 19.3R3; Versiones 19.4 anteriores a 19.4R3; Versiones 20.1 anteriores a 20.1R2; Versiones 20.2 anteriores a 20.2R2. Juniper Networks Junos OS evolucionó Todas las versiones anteriores a 19.2R3-EVO; Versiones 19.3 anteriores a 19.3R3-EVO; Versiones 19.4 anteriores a 19.4R3-EVO; Versiones 20.1 anteriores a 20.1R3-EVO; Versiones 20.2 anteriores a 20.2R2-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.4",
            "matchCriteriaId" : "55727384-955A-4882-8F20-673205FCE314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "F34512E2-7493-4EA2-8DA3-7A551514DF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "0B372356-D146-420B-95C3-381D0383B595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "92292C23-DC38-42F1-97C1-8416BBB60FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "59E2311C-075A-4C64-B614-728A21B17B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCE4EA8-DDBA-4766-BB81-E4DA29723723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "2849078A-447A-4615-94E1-58AF450ED22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C625B6-25ED-4F6C-A778-6AB7FA7901CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "84EC3EE0-F1D9-4CBB-B3FA-83C05C50EB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "122B09A3-299A-421C-9A6B-B3FEED8E19FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "19EAC3C9-D800-436F-8FEA-8BDFB5A9BD24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.2",
            "matchCriteriaId" : "1E6E8E88-9776-4050-B8E5-2192ED4FC4D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "914D6984-1820-483B-AEB9-2C5257B5E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "14C57D33-01BB-4190-B787-F5BDACE82AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6480A5C9-3280-40C5-BC08-509555F28363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3C2D74-AF22-4BED-A0C5-089B5507D275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "83447F3F-79A3-41DF-8FD1-31DCFCBE40A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "1699821F-FBC6-4EB9-94E5-96AF1E4E4FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2B14CED1-BEAF-4343-A05D-FB1E2B6AC955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB91C38-8C70-436A-83DB-42B8DF81D7D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "746CB668-8185-44D4-A690-B62F417BECB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AED25FB6-E3FA-4543-90B2-50068D683D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F64FBB4B-7CBF-499B-A523-804857DEFAFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBE159F-5D94-4C18-B922-331586BEA2CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "A38EBFC9-ECBD-4362-82B2-04C02009E85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF7C3A8-1279-4F38-9548-85AC7D6290FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "50D38F97-81B0-4952-A1E3-0A9AA4D34820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AB827018-2009-483D-8D53-5BFCE8409BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "945442C1-C9B2-48BE-A1A6-6A8A1D0ADA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "F81E7058-986E-4DE3-959F-5E4C62A30941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "487A82C9-7B7E-4ACA-BABF-65B8504079AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA8D4D2-D49D-4F91-95E2-2A0E8599338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF37C911-1904-475A-86F7-F92F34A1A88F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70203",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22408",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:11.157",
      "lastModified" : "2024-11-21T07:44:45.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Validation of Array Index vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX 5000 Series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). When an attacker sends an SIP packets with a malformed SDP field then the SIP ALG can not process it which will lead to an FPC crash and restart. Continued receipt of these specific packets will lead to a sustained Denial of Service. This issue can only occur when both below mentioned conditions are fulfilled: 1. Call distribution needs to be enabled: [security alg sip enable-call-distribution] 2. The SIP ALG needs to be enabled, either implicitly / by default or by way of configuration. To confirm whether SIP ALG is enabled on SRX, and MX with SPC3 use the following command: user@host> show security alg status | match sip SIP : Enabled This issue affects Juniper Networks Junos OS on SRX 5000 Series: 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S2; 22.1 versions prior to 22.1R2-S2, 22.1R3; 22.2 versions prior to 22.2R3; 22.3 versions prior to 22.3R1-S1, 22.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Improper Validation of Array Index en SIP ALG de Juniper Networks Junos OS en la serie SRX 5000 permite que un atacante no autenticado provoque una denegación de servicio (DoS). Cuando un atacante envía paquetes SIP con un campo SDP con formato incorrecto, SIP ALG no puede procesarlo, lo que provocará un bloqueo y reinicio del FPC. La recepción continua de estos paquetes específicos dará lugar a una Denegación de Servicio sostenida. Este problema solo puede ocurrir cuando se cumplen las dos condiciones mencionadas a continuación: 1. La distribución de llamadas debe estar habilitada: [alg de seguridad sip enable-call-distribution] 2. El SIP ALG debe estar habilitado, ya sea implícitamente/por defecto o de forma de configuración. Para confirmar si SIP ALG está habilitado en SRX y MX con SPC3, use el siguiente comando: usuario@host&gt; show security alg status | match sip SIP : Enabled. Este problema afecta a Juniper Networks Junos OS en la serie SRX 5000: versiones 20.4 anteriores a 20.4R3-S5; Versiones 21.1 anteriores a 21.1R3-S4; Versiones 21.2 anteriores a 21.2R3-S3; Versiones 21.3 anteriores a 21.3R3-S3; Versiones 21.4 anteriores a 21.4R3-S2; Versiones 22.1 anteriores a 22.1R2-S2, 22.1R3; Versiones 22.2 anteriores a 22.2R3; Versiones 22.3 anteriores a 22.3R1-S1, 22.3R2. Este problema no afecta a las versiones de Juniper Networks Junos OS anteriores a la 20.4R1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "90AE30DB-C448-4FE9-AC11-FF0F27CDA227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E37D4694-C80B-475E-AB5B-BB431F59C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC0D2D2-4922-4675-8A2C-57A08D7BE334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "19519212-51DD-4448-B115-8A20A40192CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70204",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22409",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:11.233",
      "lastModified" : "2024-11-21T07:44:45.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Unchecked Input for Loop Condition vulnerability in a NAT library of Juniper Networks Junos OS allows a local authenticated attacker with low privileges to cause a Denial of Service (DoS). When an inconsistent \"deterministic NAT\" configuration is present on an SRX, or MX with SPC3 and then a specific CLI command is issued the SPC will crash and restart. Repeated execution of this command will lead to a sustained DoS. Such a configuration is characterized by the total number of port blocks being greater than the total number of hosts. An example for such configuration is: [ services nat source pool TEST-POOL address x.x.x.0/32 to x.x.x.15/32 ] [ services nat source pool TEST-POOL port deterministic block-size 1008 ] [ services nat source pool TEST-POOL port deterministic host address y.y.y.0/24] [ services nat source pool TEST-POOL port deterministic include-boundary-addresses] where according to the following calculation: 65536-1024=64512 (number of usable ports per IP address, implicit) 64512/1008=64 (number of port blocks per Nat IP) x.x.x.0/32 to x.x.x.15/32 = 16 (NAT IP addresses available in NAT pool) total port blocks in NAT Pool = 64 blocks per IP * 16 IPs = 1024 Port blocks host address y.y.y.0/24 = 256 hosts (with include-boundary-addresses) If the port block size is configured to be 4032, then the total port blocks are (64512/4032) * 16 = 256 which is equivalent to the total host addresses of 256, and the issue will not be seen. This issue affects Juniper Networks Junos OS on SRX Series, and MX Series with SPC3: All versions prior to 19.4R3-S10; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S6; 20.3 versions prior to 20.3R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S1; 22.1 versions prior to 22.1R2-S2, 22.1R3; 22.2 versions prior to 22.2R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Unchecked Input for Loop Condition en una librería NAT de Juniper Networks Junos OS permite que un atacante autenticado local con privilegios bajos provoque una denegación de servicio (DoS). Cuando hay una configuración \"NAT determinista\" inconsistente en un SRX o MX con SPC3 y luego se emite un comando CLI específico, el SPC fallará y se reiniciará. La ejecución repetida de este comando provocará una DoS sostenida. Esta configuración se caracteriza por que el número total de bloques de puertos es mayor que el número total de hosts. Un ejemplo de dicha configuración es: [ services nat source pool TEST-POOL address x.x.x.0/32 to x.x.x.15/32 ] [ services nat source pool TEST-POOL port deterministic block-size 1008 ] [ services nat source pool TEST-POOL port deterministic host address y.y.y.0/24] [ services nat source pool TEST-POOL port deterministic include-boundary-addresses] donde de acuerdo con el siguiente cálculo: 65536-1024=64512 (número de puertos utilizables por dirección IP, implícito) 64512/1008=64 ( número de bloques de puertos por IP Nat) xxx0/32 a xxx15/32 = 16 (direcciones IP NAT disponibles en el grupo NAT) bloques de puertos totales en el grupo NAT = 64 bloques por IP * 16 IP = 1024 Dirección de host de bloques de puertos yyy0/24 = 256 hosts (con direcciones de límite incluidas) Si el tamaño del bloque de puerto está configurado para ser 4032, entonces el total de bloques de puerto es (64512/4032) * 16 = 256, lo que equivale al total de direcciones de host de 256, y el problema no será visto. Este problema afecta a Juniper Networks Junos OS en la serie SRX y la serie MX con SPC3: todas las versiones anteriores a 19.4R3-S10; 20.1 versión 20.1R1 y versiones posteriores; Versiones 20.2 anteriores a 20.2R3-S6; Versiones 20.3 anteriores a 20.3R3-S6; Versiones 20.4 anteriores a 20.4R3-S5; Versiones 21.1 anteriores a 21.1R3-S4; Versiones 21.2 anteriores a 21.2R3-S3; Versiones 21.3 anteriores a 21.3R3-S3; Versiones 21.4 anteriores a 21.4R3-S1; Versiones 22.1 anteriores a 22.1R2-S2, 22.1R3; Versiones 22.2 anteriores a 22.2R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.4",
            "matchCriteriaId" : "BEF1C9AB-1107-4A26-BB84-BDD72B4E6564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF56BB-939A-4E38-BD9E-E3198E70F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E7547-6649-436D-BC45-184417680C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9789FF8-D55C-4AF9-A250-E543A0EB826F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C238EB1-5A38-4877-8849-4A6D36918B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C21638A9-6AD8-4347-AA3F-64BC7BD71C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D621DB7F-BC6B-4A07-8803-596B3ED11CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A5620596-4DEE-41D7-A63F-224D814DAA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A8BBCEC0-5915-4F69-90FD-070A94145BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C93B13-DCEB-4861-87DC-3F1ECBAF7FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "90AE30DB-C448-4FE9-AC11-FF0F27CDA227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3683A8F5-EE0E-4936-A005-DF7F6B75DED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39DA74D-F5C7-4C11-857D-50631A110644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E020556B-693F-4963-BA43-3164AB50FA49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0D31FF-0812-42B8-B25E-03C35EC1B021"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06685D0E-A075-49A5-9EF4-34F0F795C8C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0B735-8C49-4B08-950A-296C9CDE43CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70205",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22410",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:11.303",
      "lastModified" : "2024-11-21T07:44:45.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Networks Junos OS on MX Series platforms with MPC10/MPC11 line cards, allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS). Devices are only vulnerable when the Suspicious Control Flow Detection (scfd) feature is enabled. Upon enabling this specific feature, an attacker sending specific traffic is causing memory to be allocated dynamically and it is not freed. Memory is not freed even after deactivating this feature. Sustained processing of such traffic will eventually lead to an out of memory condition that prevents all services from continuing to function, and requires a manual restart to recover. The FPC memory usage can be monitored using the CLI command \"show chassis fpc\". On running the above command, the memory of AftDdosScfdFlow can be observed to detect the memory leak. This issue affects Juniper Networks Junos OS on MX Series: All versions prior to 20.2R3-S5; 20.3 version 20.3R1 and later versions."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Missing Release of Memory after Effective Lifetime en Juniper Networks Junos OS en plataformas de la serie MX con tarjetas de línea MPC10/MPC11 permite que un atacante adyacente no autenticado provoque una denegación de servicio (DoS). Los dispositivos solo son vulnerables cuando la función Detección de flujo de control sospechoso (scfd) está habilitada. Al habilitar esta característica específica, un atacante que envía tráfico específico hace que la memoria se asigne dinámicamente y no se libere. La memoria no se libera incluso después de desactivar esta función. El procesamiento sostenido de dicho tráfico eventualmente conducirá a una condición de falta de memoria que impedirá que todos los servicios sigan funcionando y requerirá un reinicio manual para recuperarse. El uso de la memoria FPC se puede monitorear usando el comando CLI \"show chasis fpc\". Al ejecutar el comando anterior, se puede observar la memoria de AftDdosScfdFlow para detectar la pérdida de memoria. Este problema afecta a Juniper Networks Junos OS en la serie MX: todas las versiones anteriores a 20.2R3-S5; 20.3 versión 20.3R1 y versiones posteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.2",
            "matchCriteriaId" : "9D5DC3ED-1843-467F-903D-2DB6CDFF06F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D7DB4B-683B-408B-8055-2C992CA43FFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39DA74D-F5C7-4C11-857D-50631A110644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70206",
        "source" : "sirt@juniper.net",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22411",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:11.377",
      "lastModified" : "2024-11-21T07:44:45.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Out-of-Bounds Write vulnerability in Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On SRX Series devices using Unified Policies with IPv6, when a specific IPv6 packet goes through a dynamic-application filter which will generate an ICMP deny message, the flowd core is observed and the PFE is restarted. This issue affects: Juniper Networks Junos OS on SRX Series: 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S6; 19.4 versions prior to 19.4R3-S9; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S4; 20.4 versions prior to 20.4R3-S3; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R2; 21.4 versions prior to 21.4R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escritura fuera de los límites en el Flow Processing Daemon (flowd) de Juniper Networks Junos OS permite que un atacante no autenticado basado en la red provoque una denegación de servicio (DoS). En los dispositivos de la serie SRX que utilizan políticas unificadas con IPv6, cuando un paquete IPv6 específico pasa por un filtro de aplicación dinámica que generará un mensaje de denegación de ICMP, se observa el núcleo fluido y se reinicia el PFE. Este problema afecta a: Juniper Networks Junos OS en la serie SRX: versiones 19.2 anteriores a 19.2R3-S6; Versiones 19.3 anteriores a 19.3R3-S6; Versiones 19.4 anteriores a 19.4R3-S9; Versiones 20.2 anteriores a 20.2R3-S5; Versiones 20.3 anteriores a 20.3R3-S4; Versiones 20.4 anteriores a 20.4R3-S3; Versiones 21.1 anteriores a 21.1R3; Versiones 21.2 anteriores a 21.2R3; Versiones 21.3 anteriores a 21.3R2; Versiones 21.4 anteriores a 21.4R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCE4EA8-DDBA-4766-BB81-E4DA29723723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "2849078A-447A-4615-94E1-58AF450ED22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C625B6-25ED-4F6C-A778-6AB7FA7901CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "84EC3EE0-F1D9-4CBB-B3FA-83C05C50EB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "920FE638-BDE6-403D-9083-2BDBF6A3326F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E38CD1E2-41F5-42D1-B915-055A497C576A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "0C816B9A-F152-4E5F-8152-73635840A89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0EA9DA-2DAD-4FA4-8CCC-E2F3D7069305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "122B09A3-299A-421C-9A6B-B3FEED8E19FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "55F3E730-83F2-43C2-B6DC-77BAABB2F01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F09D3262-394A-43D1-A4ED-8887FCB20F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FEA876-302D-4F07-94E6-237C669538F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B011854A-932C-4D5C-B469-71F72608DFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "94A44054-B47B-453C-BF0F-9E071EFF6542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A4806-59AB-43D6-BFE3-A6DCE098335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "7F449CD5-9D3D-4D99-8A6F-8C7946A4F2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E020556B-693F-4963-BA43-3164AB50FA49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0D31FF-0812-42B8-B25E-03C35EC1B021"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06685D0E-A075-49A5-9EF4-34F0F795C8C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0B735-8C49-4B08-950A-296C9CDE43CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70207",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22412",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:11.450",
      "lastModified" : "2024-11-21T07:44:46.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC card and SRX Series allows an unauthenticated, network-based attacker to cause a flow processing daemon (flowd) crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue occurs when SIP ALG is enabled and specific SIP messages are processed simultaneously. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1 on MX Series, or SRX Series."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Improper Locking en SIP ALG de Juniper Networks Junos OS en la serie MX con tarjeta MS-MPC o MS-MIC y serie SRX permite que un atacante basado en red no autenticado provoque un bloqueo del Flow Processing Daemon (flowd) y, por lo tanto, una denegación de Servicio (DoS). La recepción continua de estos paquetes específicos provocará una condición sostenida de Denegación de Servicio. Este problema ocurre cuando SIP ALG está habilitado y mensajes SIP específicos se procesan simultáneamente. Este problema afecta a: Juniper Networks Junos OS en las versiones MX Series y SRX Series 20.4 anteriores a 20.4R3-S4; Versiones 21.1 anteriores a 21.1R3-S3; Versiones 21.2 anteriores a 21.2R3-S2; Versiones 21.3 anteriores a 21.3R3; Versiones 21.4 anteriores a 21.4R3; Versiones 22.1 anteriores a 22.1R2. Este problema no afecta a las versiones de Juniper Networks Junos OS anteriores a 20.4R1 en la serie MX o la serie SRX."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39DA74D-F5C7-4C11-857D-50631A110644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E020556B-693F-4963-BA43-3164AB50FA49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0D31FF-0812-42B8-B25E-03C35EC1B021"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06685D0E-A075-49A5-9EF4-34F0F795C8C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0B735-8C49-4B08-950A-296C9CDE43CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70208",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22413",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:11.527",
      "lastModified" : "2024-11-21T07:44:46.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause Denial of Service (DoS). On all MX platforms with MS-MPC or MS-MIC card, when specific IPv4 packets are processed by an IPsec6 tunnel, the Multiservices PIC Management Daemon (mspmand) process will core and restart. This will lead to FPC crash. Traffic flow is impacted while mspmand restarts. Continued receipt of these specific packets will cause a sustained Denial of Service (DoS) condition. This issue only occurs if an IPv4 address is not configured on the multiservice interface. This issue affects: Juniper Networks Junos OS on MX Series All versions prior to 19.4R3-S9; 20.1 version 20.1R3-S5 and later versions; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2-S1, 21.4R3; 22.1 versions prior to 22.1R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Improper Check or Handling of Exceptional Conditions en la librería IPsec de Juniper Networks Junos OS permite que un atacante no autenticado basado en la red provoque una denegación de servicio (DoS). En todas las plataformas MX con tarjeta MS-MPC o MS-MIC, cuando un túnel IPsec6 procesa paquetes IPv4 específicos, el proceso Multiservices PIC Management Daemon (mspmand) se centrará y reiniciará. Esto provocará un fallo del FPC. El flujo de tráfico se ve afectado mientras se reinicia mspmand. La recepción continua de estos paquetes específicos provocará una condición sostenida de Denegación de Servicio (DoS). Este problema solo ocurre si no se configura una dirección IPv4 en la interfaz multiservicio. Este problema afecta a: Juniper Networks Junos OS en la serie MX Todas las versiones anteriores a 19.4R3-S9; 20.1 versión 20.1R3-S5 y versiones posteriores; Versiones 20.2 anteriores a 20.2R3-S5; Versiones 20.3 anteriores a 20.3R3-S5; Versiones 20.4 anteriores a 20.4R3-S4; Versiones 21.1 anteriores a 21.1R3-S3; Versiones 21.2 anteriores a 21.2R3-S1; Versiones 21.3 anteriores a 21.3R3; Versiones 21.4 anteriores a 21.4R2-S1, 21.4R3; Versiones 22.1 anteriores a 22.1R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.4",
            "matchCriteriaId" : "BEF1C9AB-1107-4A26-BB84-BDD72B4E6564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5887B680-E5A4-4A30-9543-69B42F50E8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39DA74D-F5C7-4C11-857D-50631A110644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70209",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22414",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:11.603",
      "lastModified" : "2024-11-21T07:44:46.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator (FPC) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker from the same shared physical or logical network, to cause a heap memory leak and leading to FPC crash. On all Junos PTX Series and QFX10000 Series, when specific EVPN VXLAN Multicast packets are processed, an FPC heap memory leak is observed. The FPC memory usage can be monitored using the CLI command \"show heap extensive\". Following is an example output. ID Base Total(b) Free(b) Used(b) % Name Peak used % -- -------- --------- --------- --------- --- ----------- ----------- 0 37dcf000 3221225472 1694526368 1526699104 47 Kernel 47 1 17dcf000 1048576 1048576 0 0 TOE DMA 0 2 17ecf000 1048576 1048576 0 0 DMA 0 3 17fcf000 534773760 280968336 253805424 47 Packet DMA 47 This issue affects: Juniper Networks Junos OS PTX Series and QFX10000 Series 20.2 versions prior to 20.2R3-S6; 20.3 versions prior to 20.3R3-S6; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R2; 22.2 versions prior to 22.2R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.1R1 on PTX Series and QFX10000 Series."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de liberación de memoria faltante después de la vida útil efectiva en Flexible PIC Concentrator (FPC) de Juniper Networks Junos OS permite que un atacante adyacente, no autenticado de la misma red física o lógica compartida, provoque una pérdida de memoria del montón y provoque una falla de FPC. En todas las series Junos PTX y QFX10000, cuando se procesan paquetes de multidifusión EVPN VXLAN específicos, se observa una pérdida de memoria del montón FPC. El uso de la memoria FPC se puede monitorear usando el comando CLI \"mostrar montón extenso\". A continuación se muestra un resultado de ejemplo.ID Base Total(b) Free(b) Used(b) % Name Peak used % -- -------- --------- --------- --------- --- ----------- ----------- 0 37dcf000 3221225472 1694526368 1526699104 47 Kernel 47 1 17dcf000 1048576 1048576 0 0 TOE DMA 0 2 17ecf000 1048576 1048576 0 0 DMA 0 3 17fcf000 534773760 280968336 253805424 47 Packet DMA 47. Este problema afecta a: Juniper Networks Junos OS PTX Series y QFX10000 Series 20.2 versiones anteriores a 20.2R3-S6; Versiones 20.3 anteriores a 20.3R3-S6; Versiones 20.4 anteriores a 20.4R3-S4; Versiones 21.1 anteriores a 21.1R3-S3; Versiones 21.2 anteriores a 21.2R3-S1; Versiones 21.3 anteriores a 21.3R3; Versiones 21.4 anteriores a 21.4R3; Versiones 22.1 anteriores a 22.1R2; Versiones 22.2 anteriores a 22.2R2. Este problema no afecta a las versiones de Juniper Networks Junos OS anteriores a 20.1R1 en las series PTX y QFX10000."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2039C-E08C-472F-82E6-DAD3F94724B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1401145-D8EC-4DB9-9CDE-9DE6C0D000C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002-32q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E59530-3262-4BDC-915C-0B8D2EED7784"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002-60c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "626CA614-72D4-4A8B-9C38-275C7A7F8D85"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002-72q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FF30F4-3D10-4AD6-9643-5826A11C7629"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1453E42A-77B3-4922-8EC3-1A5668C39550"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26408465-BD6A-4416-B98E-691A5F651080"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70210",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22415",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:11.680",
      "lastModified" : "2024-11-21T07:44:46.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On all MX Series and SRX Series platform, when H.323 ALG is enabled and specific H.323 packets are received simultaneously, a flow processing daemon (flowd) crash will occur. Continued receipt of these specific packets will cause a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series All versions prior to 19.4R3-S10; 20.2 versions prior to 20.2R3-S6; 20.3 versions prior to 20.3R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R2-S1, 22.1R3; 22.2 versions prior to 22.2R1-S2, 22.2R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escritura fuera de los límites en el ALG H.323 de Juniper Networks Junos OS permite que un atacante basado en red no autenticado provoque una denegación de servicio (DoS). En todas las plataformas de las series MX y SRX, cuando H.323 ALG está habilitado y se reciben paquetes H.323 específicos simultáneamente, se producirá una falla del Flow Processing Daemon (flowd). La recepción continua de estos paquetes específicos provocará una condición sostenida de Denegación de Servicio (DoS). Este problema afecta a: Juniper Networks Junos OS en las series MX y SRX. Todas las versiones anteriores a 19.4R3-S10; Versiones 20.2 anteriores a 20.2R3-S6; Versiones 20.3 anteriores a 20.3R3-S6; Versiones 20.4 anteriores a 20.4R3-S5; Versiones 21.1 anteriores a 21.1R3-S4; Versiones 21.2 anteriores a 21.2R3-S3; Versiones 21.3 anteriores a 21.3R3-S3; Versiones 21.4 anteriores a 21.4R3; Versiones 22.1 anteriores a 22.1R2-S1, 22.1R3; Versiones 22.2 anteriores a 22.2R1-S2, 22.2R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.4",
            "matchCriteriaId" : "BEF1C9AB-1107-4A26-BB84-BDD72B4E6564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF56BB-939A-4E38-BD9E-E3198E70F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "90AE30DB-C448-4FE9-AC11-FF0F27CDA227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39DA74D-F5C7-4C11-857D-50631A110644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E020556B-693F-4963-BA43-3164AB50FA49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0D31FF-0812-42B8-B25E-03C35EC1B021"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06685D0E-A075-49A5-9EF4-34F0F795C8C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0B735-8C49-4B08-950A-296C9CDE43CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70211",
        "source" : "sirt@juniper.net",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22416",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:11.753",
      "lastModified" : "2024-11-21T07:44:46.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Buffer Overflow vulnerability in SIP ALG of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On all MX Series and SRX Series platform with SIP ALG enabled, when a malformed SIP packet is received, the flow processing daemon (flowd) will crash and restart. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3-S1; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R1-S2, 22.1R2; 22.2 versions prior to 22.2R1-S1, 22.2R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1 on SRX Series."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento de búfer en SIP ALG de Juniper Networks Junos OS permite que un atacante no autenticado basado en la red provoque una denegación de servicio (DoS). En todas las plataformas de las series MX y SRX con SIP ALG habilitado, cuando se recibe un paquete SIP con formato incorrecto, el demonio de procesamiento de flujo (flowd) fallará y se reiniciará. Este problema afecta a: Juniper Networks Junos OS en las versiones MX Series y SRX Series 20.4 anteriores a 20.4R3-S5; Versiones 21.1 anteriores a 21.1R3-S4; Versiones 21.2 anteriores a 21.2R3-S2; Versiones 21.3 anteriores a 21.3R3-S1; Versiones 21.4 anteriores a 21.4R3; Versiones 22.1 anteriores a 22.1R1-S2, 22.1R2; Versiones 22.2 anteriores a 22.2R1-S1, 22.2R2. Este problema no afecta a las versiones de Juniper Networks Junos OS anteriores a 20.4R1 en la serie SRX."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.4",
            "matchCriteriaId" : "E3A96966-5060-4139-A124-D4E2C879FD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39DA74D-F5C7-4C11-857D-50631A110644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E020556B-693F-4963-BA43-3164AB50FA49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0D31FF-0812-42B8-B25E-03C35EC1B021"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06685D0E-A075-49A5-9EF4-34F0F795C8C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0B735-8C49-4B08-950A-296C9CDE43CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70212",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22417",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-01-13T00:15:11.830",
      "lastModified" : "2024-11-21T07:44:46.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Missing Release of Memory after Effective Lifetime vulnerability in the Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). In an IPsec VPN environment, a memory leak will be seen if a DH or ECDH group is configured. Eventually the flowd process will crash and restart. This issue affects Juniper Networks Junos OS on SRX Series: All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R2-S8, 19.4R3-S10; 20.2 versions prior to 20.2R3-S6; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Missing Release of Memory after Effective Lifetime en el Flow Processing Daemon (flowd) de Juniper Networks Junos OS permite que un atacante no autenticado basado en la red provoque una denegación de servicio (DoS). En un entorno VPN IPsec, se observará una pérdida de memoria si se configura un grupo DH o ECDH. Finalmente, el proceso fluido fallará y se reiniciará. Este problema afecta a Juniper Networks Junos OS en la serie SRX: todas las versiones anteriores a 19.3R3-S7; Versiones 19.4 anteriores a 19.4R2-S8, 19.4R3-S10; Versiones 20.2 anteriores a 20.2R3-S6; Versiones 20.3 anteriores a 20.3R3-S5; Versiones 20.4 anteriores a 20.4R3-S5; Versiones 21.1 anteriores a 21.1R3-S4; Versiones 21.2 anteriores a 21.2R3; Versiones 21.3 anteriores a 21.3R3; Versiones 21.4 anteriores a 21.4R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "122B09A3-299A-421C-9A6B-B3FEED8E19FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F09D3262-394A-43D1-A4ED-8887FCB20F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FEA876-302D-4F07-94E6-237C669538F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B011854A-932C-4D5C-B469-71F72608DFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "94A44054-B47B-453C-BF0F-9E071EFF6542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A4806-59AB-43D6-BFE3-A6DCE098335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "45DA4D89-1362-421F-8218-585CE5D60E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF56BB-939A-4E38-BD9E-E3198E70F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E020556B-693F-4963-BA43-3164AB50FA49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0D31FF-0812-42B8-B25E-03C35EC1B021"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06685D0E-A075-49A5-9EF4-34F0F795C8C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0B735-8C49-4B08-950A-296C9CDE43CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA70213",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA70213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-13T01:15:10.300",
      "lastModified" : "2025-05-05T16:15:30.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition."
      }, {
        "lang" : "es",
        "value" : "En rndis_query_oid en drivers/net/wireless/rndis_wlan.c en el kernel de Linux hasta 6.1.5, hay un desbordamiento de enteros en una suma."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.35",
            "versionEndExcluding" : "4.14.305",
            "matchCriteriaId" : "61643C98-1E94-411D-9C33-E5B3EA3B2167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.272",
            "matchCriteriaId" : "83C4B95C-BD08-4683-A26E-2A65333F2D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.231",
            "matchCriteriaId" : "79CA608C-BC5E-4BB5-9250-771AEC44F412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.166",
            "matchCriteriaId" : "A44D9D24-661C-40D4-8735-4CEB1C7C02F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.91",
            "matchCriteriaId" : "91C2E92D-CC25-4FBD-8824-56A148119D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.9",
            "matchCriteriaId" : "ED5B6045-B1D2-4E03-B194-9005A351BCAE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27227B35-932A-4035-B39F-6A455753C0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489D20B9-166F-423D-8C48-A23D3026E33B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AD592C-222D-4C6F-B176-8145A1A5AFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8603654B-A8A9-4DEB-B0DD-C82E1C885749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C855C933-F271-45E6-8E85-8D7CF2EF1BE6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b870e73a56c4cccbec33224233eaf295839f228c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/project/linux-wireless/patch/20230110173007.57110-1-szymon.heidrich%40gmail.com/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230302-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b870e73a56c4cccbec33224233eaf295839f228c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.kernel.org/project/linux-wireless/patch/20230110173007.57110-1-szymon.heidrich%40gmail.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230302-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-13T04:15:09.377",
      "lastModified" : "2025-04-07T16:15:22.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by bypassing 2-Step Verification when they try to add an account to any third-party webmail service (or add an account to Outlook or Gmail, etc.) with IMAP or POP3 without any verification code."
      }, {
        "lang" : "es",
        "value" : "Un problema de verificación en dos pasos en Axigen 10.3.3.52 permite a un atacante acceder a un buzón omitiendo la verificación en dos pasos cuando intenta agregar una cuenta a cualquier servicio de correo web de terceros (o agregar una cuenta a Outlook o Gmail, etc. ) con IMAP o POP3 sin ningún código de verificación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axigen:axigen_mail_server:10.3.3.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2C9AB5-B487-4188-A774-35F644321081"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/umz-cert/vulnerabilities/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/umz-cert/vulnerabilitys/blob/patch-1/Axigen%20Mail%20Server%2010.3.3.52%202-Step%20verification",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.axigen.com/documentation/2-step-verification-two-factor-authentication-for-webmail-p69140479",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://www.axigen.com/mail-server/download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/umz-cert/vulnerabilities/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/umz-cert/vulnerabilitys/blob/patch-1/Axigen%20Mail%20Server%2010.3.3.52%202-Step%20verification",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.axigen.com/documentation/2-step-verification-two-factor-authentication-for-webmail-p69140479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://www.axigen.com/mail-server/download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0235",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2023-01-13T05:15:19.383",
      "lastModified" : "2023-11-07T03:59:54.373",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0237",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2023-01-13T05:15:19.580",
      "lastModified" : "2023-11-07T03:59:54.973",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0091",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-01-13T06:15:11.930",
      "lastModified" : "2025-04-09T15:15:56.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify potentially sensitive information."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en Keycloak, donde no verificó adecuadamente los tokens de los clientes para detectar una posible revocación en su flujo de credenciales de cliente. Esta falla permite a un atacante acceder o modificar información potencialmente confidencial."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:keycloak:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0DE4E1-5D8D-40F3-8AC8-C7F736966158"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EFEC7CA-8DDA-48A6-A7B6-1F1D14792890"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-0091",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-0091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0105",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-01-13T06:15:11.983",
      "lastModified" : "2025-04-09T14:15:27.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla en Keycloak. Esta falla permite la suplantación y el bloqueo debido a que la confianza del correo electrónico no se maneja correctamente en Keycloak. Un atacante puede seguir a otros usuarios con el mismo correo electrónico y bloquearlos o hacerse pasar por ellos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:keycloak:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0DE4E1-5D8D-40F3-8AC8-C7F736966158"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EFEC7CA-8DDA-48A6-A7B6-1F1D14792890"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-0105",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-0105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0281",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-13T10:15:09.133",
      "lastModified" : "2024-11-21T07:36:53.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Flight Booking Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file judge_panel.php. The manipulation of the argument subevent_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-218276."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en SourceCodester Online Flight Booking Management System. Ha sido calificada como crítica. Una función desconocida del archivo Judge_panel.php es afectada por esta vulnerabilidad. La manipulación del argumento subevent_id conduce a la inyección SQL. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse. El identificador de esta vulnerabilidad es VDB-218276."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_flight_booking_management_system_project:online_flight_booking_management_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72EB5755-4453-4F19-BFA0-DED79166F94F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/qyhmsys/cve-list/blob/master/Online%20Flight%20Booking%20Management%20System%20judge_panel.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218276",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218276",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qyhmsys/cve-list/blob/master/Online%20Flight%20Booking%20Management%20System%20judge_panel.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0283",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-13T10:15:09.707",
      "lastModified" : "2024-11-21T07:36:53.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Online Flight Booking Management System. This affects an unknown part of the file review_search.php of the component POST Parameter Handler. The manipulation of the argument txtsearch leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-218277 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Online Flight Booking Management System y se ha clasificado como crítica. Una parte desconocida del archivo review_search.php del componente POST Parameter Handler es afectada por esta vulnerabilidad. La manipulación del argumento txtsearch conduce a la inyección de SQL. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-218277."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_flight_booking_management_system_project:online_flight_booking_management_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72EB5755-4453-4F19-BFA0-DED79166F94F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/qyhmsys/cve-list/blob/master/Online%20Flight%20Booking%20Management%20System%20review_search.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218277",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218277",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qyhmsys/cve-list/blob/master/Online%20Flight%20Booking%20Management%20System%20review_search.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0287",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-13T13:15:08.680",
      "lastModified" : "2024-11-21T07:36:53.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in ityouknow favorites-web. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-218294 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en ityoukfriends-web. Ha sido calificada como problemática. Una función desconocida del componente Comment Handler es afectada por esta vulnerabilidad. La manipulación conduce a cross-site scripting. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse. VDB-218294 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:favorites-web_project:favorites-web:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F058248-FB35-4102-BB30-39C542EC9003"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/ityouknow/favorites-web/issues/I684L9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218294",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218294",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/ityouknow/favorites-web/issues/I684L9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22493",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-13T15:15:09.233",
      "lastModified" : "2024-11-21T07:44:55.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RSSHub is an open source RSS feed generator. RSSHub is vulnerable to Server-Side Request Forgery (SSRF) attacks. This vulnerability allows an attacker to send arbitrary HTTP requests from the server to other servers or resources on the network. An attacker can exploit this vulnerability by sending a request to the affected routes with a malicious URL. An attacker could also use this vulnerability to send requests to internal or any other servers or resources on the network, potentially gain access to sensitive information that would not normally be accessible and amplifying the impact of the attack. The patch for this issue can be found in commit a66cbcf. "
      }, {
        "lang" : "es",
        "value" : "RSSHub es un generador de fuentes RSS de código abierto. RSSHub es vulnerable a ataques de Server-Side Request Forgery (SSRF). Esta vulnerabilidad permite a un atacante enviar solicitudes HTTP arbitrarias desde el servidor a otros servidores o recursos de la red. Un atacante puede aprovechar esta vulnerabilidad enviando una solicitud a las rutas afectadas con una URL maliciosa. Un atacante también podría utilizar esta vulnerabilidad para enviar solicitudes a servidores o recursos internos o de otro tipo en la red, potencialmente obtener acceso a información confidencial a la que normalmente no sería accesible y amplificar el impacto del ataque. El parche para este problema se puede encontrar en el commit a66cbcf."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsshub:rsshub:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2023-01-10",
            "matchCriteriaId" : "18B342A9-E532-438B-AEE5-55A03BB5D7A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DIYgod/RSSHub/commit/a66cbcf6eebc700bf97ab097f404f16ab415506a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DIYgod/RSSHub/pull/11588",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DIYgod/RSSHub/security/advisories/GHSA-64wp-jh9p-5cg2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DIYgod/RSSHub/commit/a66cbcf6eebc700bf97ab097f404f16ab415506a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DIYgod/RSSHub/pull/11588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DIYgod/RSSHub/security/advisories/GHSA-64wp-jh9p-5cg2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0221",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2023-01-13T16:15:08.773",
      "lastModified" : "2024-11-21T07:36:46.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the utilman program.\n"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de seguridad del producto en ACC anterior a la versión 8.3.4 permite que un atacante conectado localmente con privilegios de administrador omita los controles de ejecución proporcionados por ACC utilizando el programa utilman."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:application_and_change_control:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3.4",
            "matchCriteriaId" : "4D10C34B-6B10-4DD6-9710-FF0121AA3F87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kcm.trellix.com/corporate/index?page=content&id=SB10370",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://kcm.trellix.com/corporate/index?page=content&id=SB10370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0288",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-13T16:15:08.900",
      "lastModified" : "2024-11-21T07:36:54.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer basado en almacenamiento dinámico en el repositorio de GitHub vim/vim anterior a 9.0.1189."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.1189",
            "matchCriteriaId" : "3B4D5E94-20F8-4C04-BECD-CA7C2F7B655A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/17",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/vim/vim/commit/232bdaaca98c34a99ffadf27bf6ee08be6cc8f6a",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/550a0852-9be0-4abe-906c-f803b34e41d3",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WYC22GGZ6QA66HLNLHCTAJU265TT3O33/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://support.apple.com/kb/HT213670",
        "source" : "security@huntr.dev"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/vim/vim/commit/232bdaaca98c34a99ffadf27bf6ee08be6cc8f6a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/550a0852-9be0-4abe-906c-f803b34e41d3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WYC22GGZ6QA66HLNLHCTAJU265TT3O33/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0289",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-13T16:15:09.007",
      "lastModified" : "2024-11-21T07:36:54.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository craigk5n/webcalendar prior to master."
      }, {
        "lang" : "es",
        "value" : "Cross-site scripting (XSS) - almacenado en el repositorio de GitHub craigk5n/webcalendar antes del master."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webcalendar_project:webcalendar:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E26A0C7-0003-4F99-9E78-94289A1525D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craigk5n/webcalendar/commit/7906b4924c2dc3727c3540682f432ebbb93f810d",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/b9584c87-60e8-4a03-9e79-5f1e2d595361",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/craigk5n/webcalendar/commit/7906b4924c2dc3727c3540682f432ebbb93f810d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/b9584c87-60e8-4a03-9e79-5f1e2d595361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22494",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-13T16:15:09.097",
      "lastModified" : "2023-11-07T04:07:01.537",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-20018. Reason: This candidate is a reservation duplicate of CVE-2016-20018. Notes: All CVE users should reference CVE-2016-20018 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22489",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-13T19:15:12.037",
      "lastModified" : "2024-11-21T07:44:54.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flarum is a discussion platform for websites. If the first post of a discussion is permanently deleted but the discussion stays visible, any actor who can view the discussion is able to create a new reply via the REST API, no matter the reply permission or lock status. This includes users that don't have a validated email. Guests cannot successfully create a reply because the API will fail with a 500 error when the user ID 0 is inserted into the database. This happens because when the first post of a discussion is permanently deleted, the `first_post_id` attribute of the discussion becomes `null` which causes access control to be skipped for all new replies. Flarum automatically makes discussions with zero comments invisible so an additional condition for this vulnerability is that the discussion must have at least one approved reply so that `discussions.comment_count` is still above zero after the post deletion. This can open the discussion to uncontrolled spam or just unintentional replies if users still had their tab open before the vulnerable discussion was locked and then post a reply when they shouldn't be able to. In combination with the email notification settings, this could also be used as a way to send unsolicited emails. Versions between `v1.3.0` and `v1.6.3` are impacted. The vulnerability has been fixed and published as flarum/core v1.6.3. All communities running Flarum should upgrade as soon as possible. There are no known workarounds.\n"
      }, {
        "lang" : "es",
        "value" : "Flarum es una plataforma de discusión para sitios web. Si la primera publicación de una discusión se elimina permanentemente pero la discusión permanece visible, cualquier actor que pueda ver la discusión podrá crear una nueva respuesta a través de la API REST, sin importar el permiso de respuesta o el estado de bloqueo. Esto incluye a los usuarios que no tienen un correo electrónico validado. Los invitados no pueden crear correctamente una respuesta porque la API fallará con un error 500 cuando se inserte el ID de usuario 0 en la base de datos. Esto sucede porque cuando la primera publicación de una discusión se elimina permanentemente, el atributo \"first_post_id\" de la discusión se vuelve \"nulo\", lo que hace que se omita el control de acceso para todas las respuestas nuevas. Flarum automáticamente hace invisibles las discusiones sin comentarios, por lo que una condición adicional para esta vulnerabilidad es que la discusión debe tener al menos una respuesta aprobada para que `discussions.comment_count` siga siendo superior a cero después de la eliminación de la publicación. Esto puede abrir la discusión a spam no controlado o simplemente a respuestas no intencionales si los usuarios todavía tenían su pestaña abierta antes de que se bloqueara la discusión vulnerable y luego publicar una respuesta cuando no deberían poder hacerlo. En combinación con la configuración de notificación por correo electrónico, esto también podría usarse como una forma de enviar correos electrónicos no solicitados. Las versiones entre `v1.3.0` y `v1.6.3` se ven afectadas. La vulnerabilidad ha sido reparada y publicada como flarum/core v1.6.3. Todas las comunidades que ejecutan Flarum deberían actualizar lo antes posible. No se conocen workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flarum:flarum:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndExcluding" : "1.6.2",
            "matchCriteriaId" : "0D9F27FD-AE4D-472E-8DF4-1EE22EBE7FCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flarum/framework/commit/12f14112a0ecd1484d97330b82beb2a145919015",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/framework/releases/tag/v1.6.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/framework/security/advisories/GHSA-hph3-hv3c-7725",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/framework/commit/12f14112a0ecd1484d97330b82beb2a145919015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/framework/releases/tag/v1.6.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/framework/security/advisories/GHSA-hph3-hv3c-7725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22491",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-13T19:15:12.407",
      "lastModified" : "2025-03-11T14:15:16.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the `gray-matter` npm package, which is vulnerable to JavaScript injection in its default configuration, unless input is sanitized.  The vulnerability is present in gatsby-transformer-remark when passing input in data mode (querying MarkdownRemark nodes via GraphQL).  Injected JavaScript executes in the context of the build server. To exploit this vulnerability untrusted/unsanitized input would need to be sourced by or added into a file processed by gatsby-transformer-remark. A patch has been introduced in `gatsby-transformer-remark@5.25.1` and `gatsby-transformer-remark@6.3.2` which mitigates the issue by disabling the `gray-matter` JavaScript Frontmatter engine. As a workaround, if an older version of `gatsby-transformer-remark` must be used, input passed into the plugin should be sanitized ahead of processing. It is encouraged for  projects to upgrade to the latest major release branch for all Gatsby plugins to ensure the latest security updates and bug fixes are received in a timely manner."
      }, {
        "lang" : "es",
        "value" : "Gatsby es un framework gratuito y de código abierto basado en React que ayuda a los desarrolladores a crear sitios web y aplicaciones. El complemento gatsby-transformer-remark anterior a las versiones 5.25.1 y 6.3.2 pasa la entrada al paquete npm `gray-matter`, que es vulnerable a la inyección de JavaScript en su configuración predeterminada, a menos que la entrada esté desinfectada. La vulnerabilidad está presente en gatsby-transformer-remark cuando se pasa entrada en modo de datos (consultando nodos MarkdownRemark a través de GraphQL). El JavaScript inyectado se ejecuta en el contexto del servidor de compilación. Para explotar esta vulnerabilidad, la entrada no confiable/no desinfectada tendría que obtenerse o agregarse a un archivo procesado por gatsby-transformer-remark. Se introdujo un parche en `gatsby-transformer-remark@5.25.1` y `gatsby-transformer-remark@6.3.2` que mitiga el problema al deshabilitar el motor JavaScript Frontmatter de `materia gris`. Como workaround, si se debe utilizar una versión anterior de `gatsby-transformer-remark`, la entrada pasada al complemento debe desinfectarse antes del procesamiento. Se recomienda que los proyectos actualicen a la última versión principal de todos los complementos de Gatsby para garantizar que las últimas actualizaciones de seguridad y correcciones de errores se reciban de manera oportuna."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gatsbyjs:gatsby:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.25.1",
            "matchCriteriaId" : "A4C7E5A6-DB6C-466C-B29B-77AE0F949F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gatsbyjs:gatsby:6.3.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "905C5A4D-1415-4854-A55E-0D31E85CB048"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gatsbyjs/gatsby/security/advisories/GHSA-7ch4-rr99-cqcw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gatsbyjs/gatsby/security/advisories/GHSA-7ch4-rr99-cqcw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gatsbyjs/gatsby/security/advisories/GHSA-7ch4-rr99-cqcw",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0293",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-13T20:15:12.127",
      "lastModified" : "2026-04-08T19:18:00.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mediamatic – Media Library Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.8.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to change image categories, which it uses to arrange them in folder views."
      }, {
        "lang" : "es",
        "value" : "El complemento Mediamatic – Media Library Folders para WordPress es vulnerable a la omisión de autorización debido a una falta de verificación de capacidad en sus acciones AJAX en versiones hasta la 2.8.1 incluida. Esto hace posible que atacantes autenticados, con permisos de nivel de suscriptor y superiores, cambien las categorías de imágenes, que utilizan para organizarlas en vistas de carpetas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frenify:mediamatic:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.8.1",
            "matchCriteriaId" : "1E444289-1288-492F-9957-A38D6807F8AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/mediamatic/trunk/inc/sidebar.php?rev=2652957#L343",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e5c87ae0-9a53-4292-a4d3-05b3bdb37b71?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mediamatic/trunk/inc/sidebar.php?rev=2652957#L343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e5c87ae0-9a53-4292-a4d3-05b3bdb37b71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0294",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-13T20:15:12.627",
      "lastModified" : "2026-04-08T19:18:00.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mediamatic – Media Library Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.1. This is due to missing or incorrect nonce validation on its AJAX actions function. This makes it possible for unauthenticated attackers to change image categories used by the plugin, via forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El complemento Mediamatic – Media Library Folders para WordPress es vulnerable a Cross-Site Request Forgery en versiones hasta la 2.8.1 incluida. Esto se debe a una validación nonce faltante o incorrecta en su función de acciones AJAX. Esto hace posible que atacantes no autenticados cambien las categorías de imágenes utilizadas por el complemento, mediante una solicitud falsificada, pudiendo engañar al administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frenify:mediamatic:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.8.1",
            "matchCriteriaId" : "1E444289-1288-492F-9957-A38D6807F8AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/mediamatic/trunk/inc/sidebar.php?rev=2652957#L343",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d81ed8d9-4a7a-4b75-aab4-8e4dbd554f32?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/mediamatic/trunk/inc/sidebar.php?rev=2652957#L343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d81ed8d9-4a7a-4b75-aab4-8e4dbd554f32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0295",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-13T20:15:13.023",
      "lastModified" : "2026-04-08T19:18:00.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Launchpad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of its settings parameters in versions up to, and including, 1.0.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El complemento Launchpad para WordPress es vulnerable a cross-site scripting almacenado a través de varios de sus parámetros de configuración en versiones hasta la 1.0.13 incluida debido a una desinfección de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada. Esto solo afecta a las instalaciones multisitio y a las instalaciones en las que se ha deshabilitado unfiltered_html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obox:launchpad_-_coming_soon_\\&_maintenance_mode_plugin:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.13",
            "matchCriteriaId" : "0361AFC3-C7CB-4344-A96C-A12D83614A2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/launchpad-by-obox/tags/1.0.13/functions/settings.php#L542",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b8721c4d-d89b-4e97-af01-20327013cfb6?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/launchpad-by-obox/tags/1.0.13/functions/settings.php#L542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b8721c4d-d89b-4e97-af01-20327013cfb6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21587",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-13T20:15:13.223",
      "lastModified" : "2024-11-21T07:43:08.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe InDesign versión 18.0 (y anteriores), 17.4 (y anteriores), están afectadas por una vulnerabilidad de desbordamiento del búfer en la región Heap de la memoria que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.4",
            "matchCriteriaId" : "7382C8B6-9F66-4A95-AEFF-42393958E1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077FC86F-2C24-4B39-856B-AD9FCACFD026"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb23-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb23-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21588",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-13T20:15:13.367",
      "lastModified" : "2024-11-21T07:43:08.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe InDesign versión 18.0 (y anteriores), 17.4 (y anteriores) se ven afectados por una vulnerabilidad de validación de entrada incorrecta que podría resultar en la ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.4",
            "matchCriteriaId" : "7382C8B6-9F66-4A95-AEFF-42393958E1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077FC86F-2C24-4B39-856B-AD9FCACFD026"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb23-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb23-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21589",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-13T20:15:13.473",
      "lastModified" : "2024-11-21T07:43:08.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe InDesign versiones 18.0  (y anteriores) y 17.4  (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.4",
            "matchCriteriaId" : "7382C8B6-9F66-4A95-AEFF-42393958E1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077FC86F-2C24-4B39-856B-AD9FCACFD026"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb23-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb23-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21590",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-13T20:15:13.587",
      "lastModified" : "2024-11-21T07:43:08.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe InDesign versiones 18.0  (y anteriores) y 17.4  (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.4",
            "matchCriteriaId" : "7382C8B6-9F66-4A95-AEFF-42393958E1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077FC86F-2C24-4B39-856B-AD9FCACFD026"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb23-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb23-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21591",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-13T20:15:13.673",
      "lastModified" : "2024-11-21T07:43:08.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe InDesign versión 18.0 (y anteriores), 17.4 (y anteriores) se ven afectados por una vulnerabilidad de lectura fuera de los límites que podría provocar la divulgación de memoria confidencial. Un atacante podría aprovechar esta vulnerabilidad para evitar mitigaciones como ASLR. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.4",
            "matchCriteriaId" : "7382C8B6-9F66-4A95-AEFF-42393958E1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077FC86F-2C24-4B39-856B-AD9FCACFD026"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb23-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb23-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21592",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-13T20:15:13.783",
      "lastModified" : "2024-11-21T07:43:08.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe InDesign versión 18.0 (y anteriores), 17.4 (y anteriores) se ven afectados por una vulnerabilidad de lectura fuera de los límites que podría provocar la divulgación de memoria confidencial. Un atacante podría aprovechar esta vulnerabilidad para evitar mitigaciones como ASLR. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.4",
            "matchCriteriaId" : "7382C8B6-9F66-4A95-AEFF-42393958E1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077FC86F-2C24-4B39-856B-AD9FCACFD026"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb23-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb23-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21594",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-13T21:15:15.667",
      "lastModified" : "2024-11-21T07:43:09.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe InCopy versión 18.0 (y anteriores), 17.4 (y anteriores), están afectadas por una vulnerabilidad de desbordamiento del búfer en la región Heap de la memoria que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.4",
            "matchCriteriaId" : "8E614271-7F45-4AEC-902A-AD07A59CDA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78382396-B4B1-48CF-8D6D-AF1DEE5A424E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb23-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb23-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21595",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-13T21:15:15.777",
      "lastModified" : "2024-11-21T07:43:09.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe InCopy versiones 18.0  (y anteriores) y 17.4  (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.4",
            "matchCriteriaId" : "8E614271-7F45-4AEC-902A-AD07A59CDA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78382396-B4B1-48CF-8D6D-AF1DEE5A424E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb23-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb23-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21596",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-13T21:15:15.867",
      "lastModified" : "2024-11-21T07:43:09.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 18.0 (y anteriores), 17.4 (y anteriores) de Adobe InCopy se ven afectadas por una vulnerabilidad de validación de entrada incorrecta que podría provocar la ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.4",
            "matchCriteriaId" : "8E614271-7F45-4AEC-902A-AD07A59CDA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78382396-B4B1-48CF-8D6D-AF1DEE5A424E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb23-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb23-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21597",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-13T21:15:15.970",
      "lastModified" : "2024-11-21T07:43:09.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe InCopy versiones 18.0  (y anteriores) y 17.4  (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.4",
            "matchCriteriaId" : "8E614271-7F45-4AEC-902A-AD07A59CDA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78382396-B4B1-48CF-8D6D-AF1DEE5A424E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb23-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb23-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21598",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-13T21:15:16.063",
      "lastModified" : "2024-11-21T07:43:09.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 18.0 (y anteriores), 17.4 (y anteriores) de Adobe InCopy se ven afectadas por una vulnerabilidad Use After Free que podría provocar la divulgación de memoria confidencial. Un atacante podría aprovechar esta vulnerabilidad para evitar mitigaciones como ASLR. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.4",
            "matchCriteriaId" : "8E614271-7F45-4AEC-902A-AD07A59CDA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78382396-B4B1-48CF-8D6D-AF1DEE5A424E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb23-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb23-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21599",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-13T21:15:16.167",
      "lastModified" : "2024-11-21T07:43:09.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 18.0 (y anteriores) y 17.4 (y anteriores) de Adobe InCopy se ven afectadas por una vulnerabilidad de lectura fuera de los límites que podría provocar la divulgación de memoria confidencial. Un atacante podría aprovechar esta vulnerabilidad para evitar mitigaciones como ASLR. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.4",
            "matchCriteriaId" : "8E614271-7F45-4AEC-902A-AD07A59CDA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78382396-B4B1-48CF-8D6D-AF1DEE5A424E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb23-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb23-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22470",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-14T01:15:13.590",
      "lastModified" : "2024-11-21T07:44:52.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A database error can be generated potentially causing a DoS when performed multiple times. There are currently no known workarounds. It is recommended that the Nextcloud Server is upgraded to 1.6.5 or 1.7.3 or 1.8.2."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Deck es una herramienta de organización estilo kanban destinada a la planificación personal y organización de proyectos para equipos integrada con Nextcloud. Se puede generar un error en la base de datos que podría causar un DoS cuando se realiza varias veces. Actualmente no se conocen workarounds. Se recomienda actualizar Nextcloud Server a 1.6.5, 1.7.3 o 1.8.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:deck:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.5",
            "matchCriteriaId" : "0E20825D-CD63-4662-A0B8-056B5D8C6E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:deck:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.7.3",
            "matchCriteriaId" : "E06C3936-9C41-4C68-9A69-460E88AFAC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:deck:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "1.8.2",
            "matchCriteriaId" : "80C43D55-F0AC-4D7F-963C-55D73D760D36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/deck/pull/4059",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-93j5-wx4c-6g88",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/deck/pull/4059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-93j5-wx4c-6g88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22471",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-14T01:15:14.163",
      "lastModified" : "2024-11-21T07:44:52.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Broken access control allows a user to delete attachments of other users. There are currently no known workarounds. It is recommended that the Nextcloud Deck app is upgraded to 1.6.5 or 1.7.3 or 1.8.2."
      }, {
        "lang" : "es",
        "value" : "Deck es una herramienta de organización estilo kanban destinada a la planificación personal y organización de proyectos para equipos integrada con Nextcloud. El control de acceso roto permite a un usuario eliminar archivos adjuntos de otros usuarios. Actualmente no se conocen workarounds. Se recomienda actualizar la aplicación Nextcloud Deck a 1.6.5, 1.7.3 o 1.8.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:deck:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.5",
            "matchCriteriaId" : "0E20825D-CD63-4662-A0B8-056B5D8C6E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:deck:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.7.3",
            "matchCriteriaId" : "E06C3936-9C41-4C68-9A69-460E88AFAC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:deck:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "1.8.2",
            "matchCriteriaId" : "80C43D55-F0AC-4D7F-963C-55D73D760D36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/deck/pull/4173",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2vw5-pfg6-3wm6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/deck/pull/4173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2vw5-pfg6-3wm6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22478",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-14T01:15:14.637",
      "lastModified" : "2024-11-21T07:44:53.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in version 1.6.4. There are currently no known workarounds."
      }, {
        "lang" : "es",
        "value" : "KubePi es un panel de Kubernetes moderno. La API interactúa con entidades no autorizadas y puede filtrar información confidencial. Este problema se solucionó en la versión 1.6.4. Actualmente no se conocen workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fit2cloud:kubepi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "A6B7CC4D-D5A0-4221-854C-2F37D2BB873C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/KubeOperator/KubePi/commit/0c6774bf5d9003ae4d60257a3f207c131ff4a6d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubePi/releases/tag/v1.6.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubePi/security/advisories/GHSA-gqx8-hxmv-c4v4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubePi/commit/0c6774bf5d9003ae4d60257a3f207c131ff4a6d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubePi/releases/tag/v1.6.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubePi/security/advisories/GHSA-gqx8-hxmv-c4v4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22480",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-14T01:15:15.207",
      "lastModified" : "2024-11-21T07:44:53.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KubeOperator is an open source Kubernetes distribution focused on helping enterprises plan, deploy and operate production-level K8s clusters. In KubeOperator versions 3.16.3 and below, API interfaces with unauthorized entities and can leak sensitive information. This vulnerability could be used to take over the cluster under certain conditions. This issue has been patched in version 3.16.4.\n"
      }, {
        "lang" : "es",
        "value" : "KubeOperator es una distribución de Kubernetes de código abierto centrada en ayudar a las empresas a planificar, implementar y operar clústeres K8 a nivel de producción. En las versiones 3.16.3 y anteriores de KubeOperator, la API interactúa con entidades no autorizadas y puede filtrar información confidencial. Esta vulnerabilidad podría usarse para hacerse cargo del clúster bajo ciertas condiciones. Este problema se solucionó en la versión 3.16.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fit2cloud:kubeoperator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.16.4",
            "matchCriteriaId" : "486336C5-5A30-4490-A12B-E79FE102419B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/KubeOperator/KubeOperator/commit/7ef42bf1c16900d13e6376f8be5ecdbfdfb44aaf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubeOperator/releases/tag/v3.16.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubeOperator/security/advisories/GHSA-jxgp-jgh3-8jc8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubeOperator/commit/7ef42bf1c16900d13e6376f8be5ecdbfdfb44aaf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubeOperator/releases/tag/v3.16.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KubeOperator/KubeOperator/security/advisories/GHSA-jxgp-jgh3-8jc8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22495",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-14T01:15:15.300",
      "lastModified" : "2024-11-21T07:44:55.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Izanami is a shared configuration service well-suited for micro-service architecture implementation. Attackers can bypass the authentication in this application when deployed using the official Docker image. Because a hard coded secret is used to sign the authentication token (JWT), an attacker could compromise another instance of Izanami. This issue has been patched in version 1.11.0.\n"
      }, {
        "lang" : "es",
        "value" : "Izanami es un servicio de configuración compartida adecuado para la implementación de arquitectura de microservicios. Los atacantes pueden eludir la autenticación en esta aplicación cuando se implementa utilizando la imagen oficial de Docker. Debido a que se utiliza un secreto codificado para firmar el token de autenticación (JWT), un atacante podría comprometer otra instancia de Izanami. Este problema se solucionó en la versión 1.11.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maif:izanami:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.0",
            "matchCriteriaId" : "7D6642A3-9CA0-49A7-BF8F-2397123FB234"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MAIF/izanami/releases/tag/v1.11.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MAIF/izanami/security/advisories/GHSA-9r7j-m337-792c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MAIF/izanami/releases/tag/v1.11.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MAIF/izanami/security/advisories/GHSA-9r7j-m337-792c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22496",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-14T01:15:15.393",
      "lastModified" : "2024-11-21T07:44:55.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function `health_alarm_execute` is called. This function performs different checks and then enqueues a command by calling `spawn_enq_cmd`. This command is populated with several arguments that are not sanitized. One of them is the `registry_hostname` of the node for which the alert is raised. By providing a specially crafted `registry_hostname` as part of the health data that is streamed to a Netdata (parent) agent, an attacker can execute arbitrary commands at the remote host as a side-effect of the raised alert. Note that the commands are executed as the user running the Netdata Agent. This user is usually named `netdata`. The ability to run arbitrary commands may allow an attacker to escalate privileges by escalating other vulnerabilities in the system, as that user. The problem has been fixed in: Netdata agent v1.37 (stable) and Netdata agent v1.36.0-409 (nightly). As a workaround, streaming is not enabled by default. If you have previously enabled this, it can be disabled. Limiting access to the port on the recipient Agent to trusted child connections may mitigate the impact of this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Netdata es una opción de código abierto para monitoreo y resolución de problemas de infraestructura en tiempo real. Un atacante con la capacidad de establecer una conexión de transmisión puede ejecutar comandos arbitrarios en el agente Netdata objetivo. Cuando se activa una alerta, se llama a la función `health_alarm_execute`. Esta función realiza diferentes comprobaciones y luego pone en cola un comando llamando a `spawn_enq_cmd`. Este comando se completa con varios argumentos que no están sanitizados. Uno de ellos es el `registry_hostname` del nodo para el cual se genera la alerta. Al proporcionar un `registry_hostname` especialmente manipulado como parte de los datos de estado que se transmiten a un agente Netdata (principal), un atacante puede ejecutar comandos arbitrarios en el host remoto como efecto secundario de la alerta generada. Tenga en cuenta que los comandos se ejecutan como el usuario que ejecuta Netdata Agent. Este usuario suele denominarse \"netdata\". La capacidad de ejecutar comandos arbitrarios puede permitir a un atacante escalar privilegios escalando otras vulnerabilidades en el sistema, como ese usuario. El problema se solucionó en: Netdata Agent v1.37 (estable) y Netdata Agent v1.36.0-409 (todas las noches). Como workaround, la transmisión en streaming no está habilitada de forma predeterminada. Si ha habilitado esto anteriormente, puede deshabilitarlo. Limitar el acceso al puerto del Agente destinatario a conexiones secundarias confiables puede mitigar el impacto de esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netdata:netdata:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.37.0",
            "matchCriteriaId" : "9B7BA18D-438F-4098-8D0E-9A25F07C5BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/netdata/netdata/security/advisories/GHSA-xg38-3vmw-2978",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netdata/netdata/security/advisories/GHSA-xg38-3vmw-2978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-14T01:15:15.490",
      "lastModified" : "2025-04-07T19:15:50.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tiki through 25.0 allows CSRF attacks that are related to tiki-importer.php and tiki-import_sheet.php."
      }, {
        "lang" : "es",
        "value" : "Tiki hasta la versión 25.0 permite ataques CSRF relacionados con tiki-importer.php y tiki-import_sheet.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0",
            "matchCriteriaId" : "1F6ED207-5CB8-4E6E-997E-282C257B2F1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://karmainsecurity.com/KIS-2023-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tiki.org/articles",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://karmainsecurity.com/KIS-2023-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tiki.org/articles",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22853",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-14T01:15:15.547",
      "lastModified" : "2025-04-07T19:15:50.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tiki before 24.1, when feature_create_webhelp is enabled, allows lib/structures/structlib.php PHP Object Injection because of an eval."
      }, {
        "lang" : "es",
        "value" : "Tiki anterior a 24.1, cuando feature_create_webhelp está habilitado, permite la inyección de objetos PHP lib/structures/structlib.php debido a una evaluación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "24.1",
            "matchCriteriaId" : "04D977D8-82A3-400E-9FEA-DB5E392A7786"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://karmainsecurity.com/KIS-2023-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tiki.org/articles",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://karmainsecurity.com/KIS-2023-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tiki.org/articles",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23589",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-14T01:15:15.627",
      "lastModified" : "2025-04-07T19:15:52.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not the safe SOCKS4a protocol, aka TROVE-2022-002."
      }, {
        "lang" : "es",
        "value" : "La opción SafeSocks en Tor anterior a 0.4.7.13 tiene un error lógico en el que se puede usar el protocolo SOCKS4 inseguro pero no el protocolo SOCKS4a seguro, también conocido como TROVE-2022-002."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.4.7.13",
            "matchCriteriaId" : "12B2A54B-3113-4BB0-82D6-27EC4D1F4043"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.torproject.org/tpo/core/tor/-/commit/a282145b3634547ab84ccd959d0537c021ff7ffc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.torproject.org/tpo/core/tor/-/issues/40730",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.7/ReleaseNotes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00026.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IYOLTP6HQO2HPXUYKOR7P5YYYN7CINQQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZMY4FWXYKP3MDXTZ3EJ7XJVGBCKBK2XL/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-11",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5320",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.torproject.org/tpo/core/tor/-/commit/a282145b3634547ab84ccd959d0537c021ff7ffc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.torproject.org/tpo/core/tor/-/issues/40730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.7/ReleaseNotes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IYOLTP6HQO2HPXUYKOR7P5YYYN7CINQQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZMY4FWXYKP3MDXTZ3EJ7XJVGBCKBK2XL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22497",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-14T02:15:10.483",
      "lastModified" : "2024-11-21T07:44:55.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has access to a Netdata Agent has access to its MACHINE_GUID. Streaming is a feature that allows a Netdata Agent to act as parent for other Netdata Agents (children), offloading children from various functions (increased data retention, ML, health monitoring, etc) that can now be handled by the parent Agent. Configuration is done via `stream.conf`. On the parent side, users configure in `stream.conf` an API key (any random UUID can do) to provide common configuration for all children using this API key and per MACHINE GUID configuration to customize the configuration for each child. The way this was implemented, allowed an attacker to use a valid MACHINE_GUID as an API key. This affects all users who expose their Netdata Agents (children) to non-trusted users and they also expose to the same users Netdata Agent parents that aggregate data from all these children. The problem has been fixed in: Netdata agent v1.37 (stable) and Netdata agent v1.36.0-409 (nightly). As a workaround, do not enable streaming by default. If you have previously enabled this, it can be disabled. Limiting access to the port on the recipient Agent to trusted child connections may mitigate the impact of this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Netdata es una opción de código abierto para monitoreo y resolución de problemas de infraestructura en tiempo real. Cada agente Netdata tiene un GUID DE MÁQUINA generado automáticamente. Se genera cuando el agente se inicia por primera vez y se guarda en el disco, de modo que persistirá durante los reinicios y los reinicios. Cualquiera que tenga acceso a un Agente de Netdata tiene acceso a su MACHINE_GUID. La transmisión es una característica que permite que un Agente de Netdata actúe como padre de otros Agentes de Netdata (hijos), descargando a los hijos de diversas funciones (mayor retención de datos, ML, monitoreo de salud, etc.) que ahora pueden ser manejadas por el Agente principal. La configuración se realiza a través de `stream.conf`. En el lado de los padres, los usuarios configuran en `stream.conf` una clave API (cualquier UUID aleatorio puede servir) para proporcionar una configuración común para todos los hijos que usan esta clave API y por configuración GUID DE MÁQUINA para personalizar la configuración para cada hijo. La forma en que se implementó esto permitió a un atacante usar un MACHINE_GUID válido como clave API. Esto afecta a todos los usuarios que exponen sus agentes Netdata (hijos) a usuarios que no son de confianza y también exponen a los mismos usuarios a los padres de los agentes Netdata que agregan datos de todos estos hijos. El problema se solucionó en: Netdata Agent v1.37 (estable) y Netdata Agent v1.36.0-409 (todas las noches). Como workaround, no habilite la transmisión por streaming de forma predeterminada. Si ha habilitado esto anteriormente, puede deshabilitarlo. Limitar el acceso al puerto del Agente destinatario a conexiones secundarias confiables puede mitigar el impacto de esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netdata:netdata:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.37.0",
            "matchCriteriaId" : "9B7BA18D-438F-4098-8D0E-9A25F07C5BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/netdata/netdata/releases/tag/v1.37.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netdata/netdata/security/advisories/GHSA-jx85-39cw-66f2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netdata/netdata/releases/tag/v1.37.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netdata/netdata/security/advisories/GHSA-jx85-39cw-66f2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-14T02:15:11.980",
      "lastModified" : "2025-04-07T19:15:50.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tiki before 24.1, when the Spreadsheets feature is enabled, allows lib/sheet/grid.php PHP Object Injection because of an unserialize call."
      }, {
        "lang" : "es",
        "value" : "Tiki anterior a 24.1, cuando la función Spreadsheets está habilitada, permite la inyección de objetos PHP lib/sheet/grid.php debido a una llamada de deserialización."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "24.1",
            "matchCriteriaId" : "04D977D8-82A3-400E-9FEA-DB5E392A7786"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://karmainsecurity.com/KIS-2023-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tiki.org/articles",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://karmainsecurity.com/KIS-2023-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tiki.org/articles",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22851",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-14T02:15:12.340",
      "lastModified" : "2025-04-04T15:15:44.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tiki before 24.2 allows lib/importer/tikiimporter_blog_wordpress.php PHP Object Injection by an admin because of an unserialize call."
      }, {
        "lang" : "es",
        "value" : "Tiki anterior a 24.2 permite la inyección de objetos PHP lib/importer/tikiimporter_blog_wordpress.php por parte de un administrador debido a una llamada de deseriaización."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tiki:tiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "24.2",
            "matchCriteriaId" : "F0186EB8-4AD2-4557-8A8E-77380D666395"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://karmainsecurity.com/KIS-2023-04",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tiki.org/articles",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://karmainsecurity.com/KIS-2023-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tiki.org/articles",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0297",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-14T03:15:18.800",
      "lastModified" : "2024-11-21T07:36:55.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31."
      }, {
        "lang" : "es",
        "value" : "Inyección de código en el repositorio de GitHub pyload/pyload anterior a 0.5.0b3.dev31."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyload:pyload:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.20",
            "matchCriteriaId" : "DACFA9B5-22AD-4BC6-87D5-8272FF49BD56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171096/pyLoad-js2py-Python-Execution.html",
        "source" : "security@huntr.dev"
      }, {
        "url" : "http://packetstormsecurity.com/files/172914/PyLoad-0.5.0-Remote-Code-Execution.html",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/pyload/pyload/commit/7d73ba7919e594d783b3411d7ddb87885aea782d",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/3fd606f7-83e1-4265-b083-2e1889a05e65",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171096/pyLoad-js2py-Python-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/172914/PyLoad-0.5.0-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/pyload/pyload/commit/7d73ba7919e594d783b3411d7ddb87885aea782d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/3fd606f7-83e1-4265-b083-2e1889a05e65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0298",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-14T08:15:13.110",
      "lastModified" : "2024-11-21T07:36:55.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0."
      }, {
        "lang" : "es",
        "value" : "Autorización incorrecta en el repositorio de GitHub firefly-iii/firefly-iii anterior a 5.8.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firefly-iii:firefly_iii:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.8.0",
            "matchCriteriaId" : "FC71D703-37D4-4FB8-BCA8-E6AB82116D63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/firefly-iii/firefly-iii/commit/db0500dcf0d4f1990fc7a377ef0d56c3884fcaa4",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/9689052c-c1d7-4aae-aa08-346c9b6e04ed",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/firefly-iii/firefly-iii/commit/db0500dcf0d4f1990fc7a377ef0d56c3884fcaa4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/9689052c-c1d7-4aae-aa08-346c9b6e04ed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22602",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-01-14T10:15:09.140",
      "lastModified" : "2024-11-21T07:45:02.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When using Apache Shiro before 1.11.0 together with Spring Boot 2.6+, a specially crafted HTTP request may cause an authentication bypass.\n\nThe authentication bypass occurs when Shiro and Spring Boot are using different pattern-matching techniques. Both Shiro and Spring Boot < 2.6 default to Ant style pattern matching.\nMitigation: Update to Apache Shiro 1.11.0, or set the following Spring Boot configuration value:  `spring.mvc.pathmatch.matching-strategy = ant_path_matcher`\n\n\n"
      }, {
        "lang" : "es",
        "value" : "Cuando se utiliza Apache Shiro anterior a 1.11.0 junto con Spring Boot 2.6+, una solicitud HTTP especialmente manipulada puede provocar una omisión de autenticación. La omisión de autenticación se produce cuando Shiro y Spring Boot utilizan diferentes técnicas de coincidencia de patrones. Tanto Shiro como Spring Boot &lt; 2.6 por defecto utiliza la coincidencia de patrones de estilo Ant. Mitigación: actualice a Apache Shiro 1.11.0 o establezca el siguiente valor de configuración de Spring Boot: `spring.mvc.pathmatch.matching-strategy = ant_path_matcher`"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:shiro:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.0",
            "matchCriteriaId" : "A43087B9-1941-4A90-AF30-331C19BF9A87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_boot:2.6.0:\\+:*:*:*:*:*:*",
            "matchCriteriaId" : "74809806-E086-4EFF-8268-3EFF39AB5EF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/dzj0k2smpzzgj6g666hrbrgsrlf9yhkl",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/dzj0k2smpzzgj6g666hrbrgsrlf9yhkl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230302-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0299",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-14T15:15:08.997",
      "lastModified" : "2024-11-21T07:36:55.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation in GitHub repository publify/publify prior to 9.2.10."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada incorrecta en el repositorio de GitHub publify/publify antes de 9.2.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:publify_project:publify:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.10",
            "matchCriteriaId" : "F96D7B8E-CB71-4E0F-807E-E1BE71D1C939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/publify/publify/commit/ca46da283572b4f8c0b5aa245008756c8a5fd1b1",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/0049774b-1857-46dc-a834-f1fb15138c53",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/publify/publify/commit/ca46da283572b4f8c0b5aa245008756c8a5fd1b1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/0049774b-1857-46dc-a834-f1fb15138c53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0300",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-14T18:15:09.887",
      "lastModified" : "2024-11-21T07:36:55.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository alfio-event/alf.io prior to 2.0-M4-2301."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting (XSS): reflejado en el repositorio de GitHub alfio-event/alf.io antes de 2.0-M4-2301."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencollective:alf.io:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0-m4-2301",
            "matchCriteriaId" : "B9FB5ECA-1427-4BF0-B085-59F23FC93247"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alfio-event/alf.io/commit/c1ae54ac84f1c7a5ec2831876f6445cb79be96fc",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/0a91fec7-a76e-4ca3-80ba-81de1f10d59d",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alfio-event/alf.io/commit/c1ae54ac84f1c7a5ec2831876f6445cb79be96fc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/0a91fec7-a76e-4ca3-80ba-81de1f10d59d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0301",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-14T18:15:09.987",
      "lastModified" : "2024-11-21T07:36:55.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository alfio-event/alf.io prior to Alf.io 2.0-M4-2301."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting (XSS): almacenado en el repositorio de GitHub alfio-event/alf.io anterior a Alf.io 2.0-M4-2301."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencollective:alf.io:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0-m4-2301",
            "matchCriteriaId" : "B9FB5ECA-1427-4BF0-B085-59F23FC93247"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alfio-event/alf.io/commit/21cb2866e5f58b4a2b4a2cb0066479bbb26f7b39",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/8a91e127-2903-4c6b-9a66-e4d2e30f8dec",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alfio-event/alf.io/commit/21cb2866e5f58b4a2b4a2cb0066479bbb26f7b39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/8a91e127-2903-4c6b-9a66-e4d2e30f8dec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0302",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-15T01:15:15.147",
      "lastModified" : "2024-11-21T07:36:55.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository radareorg/radare2 prior to 5.8.2."
      }, {
        "lang" : "es",
        "value" : "Fallo al sanitizar elementos especiales en un plano diferente (Special Element Injection) en el repositorio de GitHub radareorg/radare2 antes de 5.8.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-75"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.8.2",
            "matchCriteriaId" : "4F8B8730-8428-410F-8B88-0C1817C6166D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/radareorg/radare2/commit/961f0e723903011d4f54c2396e44efa91fcc74ce",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/583133af-7ae6-4a21-beef-a4b0182cf82e",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radareorg/radare2/commit/961f0e723903011d4f54c2396e44efa91fcc74ce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/583133af-7ae6-4a21-beef-a4b0182cf82e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23590",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-15T05:15:09.857",
      "lastModified" : "2025-04-07T16:15:22.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of service (device restart) via an unauthenticated API request. The attacker must be on the same network as the device."
      }, {
        "lang" : "es",
        "value" : "Mercedes-Benz XENTRY Retail Data Storage 7.8.1 permite a atacantes remotos provocar una denegación de servicio (reinicio del dispositivo) a través de una solicitud API no autenticada. El atacante debe estar en la misma red que el dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mercedes-benz:xentry_retail_data_storage_firmware:7.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B9F855-8E55-40CF-81CD-5AF406249D10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mercedes-benz:xentry_retail_data_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462128E1-FD15-4836-A9A1-19573788E5A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://b2bconnect.mercedes-benz.com/gb/workshop-solutions/diagnosis/retail-data-storage",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://medium.com/%40windsormoreira/xentry-retail-data-storage-v7-8-1-denial-of-service-cve-2023-23590-60b65f5fa358",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://b2bconnect.mercedes-benz.com/gb/workshop-solutions/diagnosis/retail-data-storage",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://medium.com/%40windsormoreira/xentry-retail-data-storage-v7-8-1-denial-of-service-cve-2023-23590-60b65f5fa358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-15T07:15:08.017",
      "lastModified" : "2025-04-08T21:15:45.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files. A single-line file might contain credentials, such as \"machine example.com login daniel password qwerty\" in the documentation example for the .netrc file format. NOTE: 2.x versions are no longer supported. There is no available information about whether any later version is affected."
      }, {
        "lang" : "es",
        "value" : "BlueCat Device Registration Portal 2.2 permite ataques XXE que filtran archivos de una sola línea. Un archivo de una sola línea puede contener credenciales, como \"machine example.com login daniel password qwerty\" en el ejemplo de documentación para el formato de archivo .netrc. NOTA: Las versiones 2.x ya no son compatibles. No hay información disponible sobre si alguna versión posterior se ve afectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bluecatnetworks:device_registration_portal:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF20D9B-FE3D-441B-8C5F-1A479F10399D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bluecatnetworks.com/integrations/adaptive-application/device-registration-portal-drp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://everything.curl.dev/usingcurl/netrc",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/colemanjp/XXE-Vulnerability-in-Bluecat-Device-Registration-Portal-DRP",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bluecatnetworks.com/integrations/adaptive-application/device-registration-portal-drp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://everything.curl.dev/usingcurl/netrc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/colemanjp/XXE-Vulnerability-in-Bluecat-Device-Registration-Portal-DRP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0303",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-15T12:15:09.270",
      "lastModified" : "2024-11-21T07:36:55.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Food Ordering System. It has been rated as critical. Affected by this issue is some unknown functionality of the file view_prod.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-218384."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en SourceCodester Online Food Ordering System. Ha sido declarada como crítica. Una función desconocida del archivo view_prod.php es afectada por esta vulnerabilidad. La manipulación del argumento id conduce a la inyección de SQL. El ataque puede lanzarse de forma remota. La explotación ha sido divulgada al público y puede utilizarse. El identificador de esta vulnerabilidad es VDB-218384."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_food_ordering_system_v2_project:online_food_ordering_system_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE3C814-4BBD-463B-B2A4-DD5795F2844A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Hanfu-l/cvetest/blob/main/1.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218384",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218384",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Hanfu-l/cvetest/blob/main/1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0304",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-15T12:15:09.357",
      "lastModified" : "2024-11-21T07:36:56.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Online Food Ordering System. This affects an unknown part of the file admin_class.php of the component Signup Module. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-218385 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en SourceCodester Online Food Ordering System y clasificada como crítica. Una parte desconocida del archivo admin_class.php del componente Signup Module afecta a una parte desconocida. La manipulación del argumento email conduce a la inyección de SQL. Es posible iniciar el ataque de forma remota.La explotación ha sido divulgada al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-218385."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_food_ordering_system_v2_project:online_food_ordering_system_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE3C814-4BBD-463B-B2A4-DD5795F2844A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Hanfu-l/cvetest/blob/main/2.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218385",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218385",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Hanfu-l/cvetest/blob/main/2.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0305",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-15T12:15:09.440",
      "lastModified" : "2024-11-21T07:36:56.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Online Food Ordering System. This vulnerability affects unknown code of the file admin_class.php of the component Login Module. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-218386 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en SourceCodester Online Food Ordering System y clasificada como crítica. Esta vulnerabilidad afecta a un código desconocido del archivo admin_class.php del componente Login Module. La manipulación del argumento nombre de usuario conduce a la inyección de SQL. El ataque se puede iniciar de forma remota. La explotación ha sido divulgada al público y puede utilizarse. VDB-218386 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_food_ordering_system_v2_project:online_food_ordering_system_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE3C814-4BBD-463B-B2A4-DD5795F2844A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Hanfu-l/cvetest/blob/main/3.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218386",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218386",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Hanfu-l/cvetest/blob/main/3.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0306",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-15T22:15:10.400",
      "lastModified" : "2024-11-21T07:36:56.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting (XSS): almacenado en el repositorio de GitHub thorsten/phpmyfaq antes de la versión 3.1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.10",
            "matchCriteriaId" : "184FE56D-4BA2-499C-9F30-C0B5A2EE2C36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/1815daef61c432bb73b9dca43f03d140c94ef0c5",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/cbba22f0-89ed-4d01-81ea-744979c8cbde",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/1815daef61c432bb73b9dca43f03d140c94ef0c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/cbba22f0-89ed-4d01-81ea-744979c8cbde",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0307",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-15T22:15:10.493",
      "lastModified" : "2024-11-21T07:36:56.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10."
      }, {
        "lang" : "es",
        "value" : "Requisitos de contraseña débiles en el repositorio de GitHub thorsten/phpmyfaq antes de 3.1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.10",
            "matchCriteriaId" : "184FE56D-4BA2-499C-9F30-C0B5A2EE2C36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/8beed2fca5b0b82c6ba866d0ffd286d0c1fbf596",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/fac01e9f-e3e5-4985-94ad-59a76485f215",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/8beed2fca5b0b82c6ba866d0ffd286d0c1fbf596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/fac01e9f-e3e5-4985-94ad-59a76485f215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0308",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-15T22:15:10.577",
      "lastModified" : "2024-11-21T07:36:56.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting (XSS): almacenado en el repositorio de GitHub thorsten/phpmyfaq antes de la versión 3.1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.10",
            "matchCriteriaId" : "184FE56D-4BA2-499C-9F30-C0B5A2EE2C36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/810ee26d25c3d97664532861863099952f0e9a1f",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/83cfed62-af8b-4aaa-94f2-5a33dc0c2d69",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/810ee26d25c3d97664532861863099952f0e9a1f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/83cfed62-af8b-4aaa-94f2-5a33dc0c2d69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0309",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-15T22:15:10.657",
      "lastModified" : "2024-11-21T07:36:56.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting (XSS): almacenado en el repositorio de GitHub thorsten/phpmyfaq antes de la versión 3.1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.10",
            "matchCriteriaId" : "184FE56D-4BA2-499C-9F30-C0B5A2EE2C36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/376d1d3e5a42edf07260e98461d2fddbee74419b",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/c03c5925-43ff-450d-9827-2b65a3307ed6",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/376d1d3e5a42edf07260e98461d2fddbee74419b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/c03c5925-43ff-450d-9827-2b65a3307ed6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0310",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-15T22:15:10.730",
      "lastModified" : "2024-11-21T07:36:56.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting (XSS): almacenado en el repositorio de GitHub thorsten/phpmyfaq antes de la versión 3.1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.10",
            "matchCriteriaId" : "184FE56D-4BA2-499C-9F30-C0B5A2EE2C36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/53099a9bcc928f5f6f7cce111c04b79a72a04142",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/051d5e20-7fab-4769-bd7d-d986b804bb5a",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/53099a9bcc928f5f6f7cce111c04b79a72a04142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/051d5e20-7fab-4769-bd7d-d986b804bb5a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0311",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-15T22:15:10.810",
      "lastModified" : "2024-11-21T07:36:56.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10."
      }, {
        "lang" : "es",
        "value" : "Autenticación incorrecta en el repositorio de GitHub thorsten/phpmyfaq anterior a 3.1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.10",
            "matchCriteriaId" : "184FE56D-4BA2-499C-9F30-C0B5A2EE2C36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/fe6e9f02ef1b26a03134b9becda12687ee5f3214",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/82b0b629-c56b-4651-af3f-17f749751857",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/fe6e9f02ef1b26a03134b9becda12687ee5f3214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/82b0b629-c56b-4651-af3f-17f749751857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0312",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-15T22:15:10.893",
      "lastModified" : "2024-11-21T07:36:57.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting (XSS): almacenado en el repositorio de GitHub thorsten/phpmyfaq antes de la versión 3.1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.10",
            "matchCriteriaId" : "184FE56D-4BA2-499C-9F30-C0B5A2EE2C36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/65d419ca04111ee2612ae81cdd59753654cfe18a",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/f50ec8d1-cd60-4c2d-9ab8-3711870d83b9",
        "source" : "security@huntr.dev",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/65d419ca04111ee2612ae81cdd59753654cfe18a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/f50ec8d1-cd60-4c2d-9ab8-3711870d83b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0313",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-15T22:15:10.970",
      "lastModified" : "2024-11-21T07:36:57.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10."
      }, {
        "lang" : "es",
        "value" : "cross site scripting (XSS): almacenado en el repositorio de GitHub thorsten/phpmyfaq antes de la versión 3.1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.10",
            "matchCriteriaId" : "184FE56D-4BA2-499C-9F30-C0B5A2EE2C36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/1123c0872314fa68d7d0d8136939f62270fb4b7b",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/bc27e84b-1f91-4e1b-a78c-944edeba8256",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/1123c0872314fa68d7d0d8136939f62270fb4b7b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/bc27e84b-1f91-4e1b-a78c-944edeba8256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0314",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-15T22:15:11.043",
      "lastModified" : "2024-11-21T07:36:57.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10."
      }, {
        "lang" : "es",
        "value" : "cross site scripting (XSS): reflejadas en el repositorio de GitHub thorsten/phpmyfaq antes de la versión 3.1.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.10",
            "matchCriteriaId" : "184FE56D-4BA2-499C-9F30-C0B5A2EE2C36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/3872e7eac2ddeac182fc1335cc312d1392d56f98",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/eac0a9d7-9721-4191-bef3-d43b0df59c67",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/3872e7eac2ddeac182fc1335cc312d1392d56f98",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/eac0a9d7-9721-4191-bef3-d43b0df59c67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0315",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-16T01:15:08.937",
      "lastModified" : "2024-11-21T07:36:57.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8."
      }, {
        "lang" : "es",
        "value" : "Inyección de comandos en el repositorio de GitHub froxlor/froxlor anterior a 2.0.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.8",
            "matchCriteriaId" : "B3FD93C1-22AA-485F-A722-1F50167398D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171108/Froxlor-2.0.6-Remote-Command-Execution.html",
        "source" : "security@huntr.dev"
      }, {
        "url" : "http://packetstormsecurity.com/files/171729/Froxlor-2.0.3-Stable-Remote-Code-Execution.html",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/froxlor/froxlor/commit/090cfc26f2722ac3036cc7fd1861955bc36f065a",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/ff4e177b-ba48-4913-bbfa-ab8ce0db5943",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171108/Froxlor-2.0.6-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/171729/Froxlor-2.0.3-Stable-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/froxlor/froxlor/commit/090cfc26f2722ac3036cc7fd1861955bc36f065a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/ff4e177b-ba48-4913-bbfa-ab8ce0db5943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0316",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-16T01:15:09.200",
      "lastModified" : "2024-11-21T07:36:57.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path Traversal: '\\..\\filename' in GitHub repository froxlor/froxlor prior to 2.0.0."
      }, {
        "lang" : "es",
        "value" : "path traversal: '\\..\\filename' en el repositorio de GitHub froxlor/froxlor anterior a 2.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-29"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "9A3D0E3C-79A7-4CC2-9CFD-0C2196523F25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/froxlor/froxlor/commit/983d9294603925018225d672795bd8b4a526f41e",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/c190e42a-4806-47aa-aa1e-ff5d6407e244",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/froxlor/froxlor/commit/983d9294603925018225d672795bd8b4a526f41e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/c190e42a-4806-47aa-aa1e-ff5d6407e244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0323",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-16T15:15:10.390",
      "lastModified" : "2024-11-21T07:36:58.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.14."
      }, {
        "lang" : "es",
        "value" : "cross site scripting (XSS): almacenado en el repositorio de GitHub pimcore/pimcore antes del 10.5.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.14",
            "matchCriteriaId" : "CF3F351E-9D60-4F89-A0BF-5BEC56B34DED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/746fac1a342841624f63ab13edcd340358e1bc04",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/129d6a4b-0504-4de1-a72c-3f12c4552343",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/746fac1a342841624f63ab13edcd340358e1bc04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/129d6a4b-0504-4de1-a72c-3f12c4552343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0324",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-16T15:15:10.473",
      "lastModified" : "2024-11-21T07:36:58.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/page-login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-218426 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en SourceCodester Online Tours &amp; Travels Management System 1.0 y clasificada como crítica. Una función desconocida del archivo admin/page-login.php es afectada por esta vulnerabilidad. La manipulación del argumento email conduce a la inyección de SQL. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse. VDB-218426 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/adminpage-login-email.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218426",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218426",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/adminpage-login-email.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0327",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-16T19:15:10.433",
      "lastModified" : "2024-11-21T07:36:58.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in saemorris TheRadSystem. It has been classified as problematic. Affected is an unknown function of the file users.php. The manipulation of the argument q leads to cross site scripting. It is possible to launch the attack remotely. VDB-218454 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en saemorris TheRadSystem. Ha sido clasificada como problemática. Una función desconocida del archivo usuarios.php es afectada por esta vulnerabilidad. La manipulación del argumento q conduce a cross-site scripting. Es posible lanzar el ataque de forma remota. VDB-218454 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theradsystem_project:theradsystem:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2015-04-03",
            "matchCriteriaId" : "670CD729-A733-4C42-A60C-3C21F185958C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/saemorris/TheRadSystem/commit/bfba26bd34af31648a11af35a0bb66f1948752a6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218454",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218454",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/saemorris/TheRadSystem/commit/bfba26bd34af31648a11af35a0bb66f1948752a6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.218454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0269",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-01-17T06:15:11.180",
      "lastModified" : "2023-11-07T04:00:01.967",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0332",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-17T08:15:10.513",
      "lastModified" : "2026-03-30T18:15:59.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-218472."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en SourceCodester Online Food Ordering System 2.0. Ha sido clasificada como crítica. Una función desconocida del archivo admin/manage_user.php es afectada por esta vulnerabilidad. La manipulación del argumento id conduce a la inyección de SQL. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede utilizarse. El identificador de esta vulnerabilidad es VDB-218472."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_food_ordering_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72B0380-7394-4DCF-BC93-3212CA3F4298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/qyhmsys/cve-list/blob/master/Online%20Food%20Ordering%20System%20manage_user.php%20has%20SQLinject.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218472",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.218472",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/qyhmsys/cve-list/blob/master/Online%20Food%20Ordering%20System%20manage_user.php%20has%20SQLinject.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.218472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.218472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22278",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-17T10:15:11.333",
      "lastModified" : "2025-04-04T19:15:45.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "m-FILTER prior to Ver.5.70R01 (Ver.5 Series) and m-FILTER prior to Ver.4.87R04 (Ver.4 Series) allows a remote unauthenticated attacker to bypass authentication and send users' unintended email when email is being sent under the certain conditions. The attacks exploiting this vulnerability have been observed."
      }, {
        "lang" : "es",
        "value" : "m-FILTER anterior a la versión 5.70R01 (serie Ver.5) y m-FILTER anterior a la versión 4.87R04 (serie Ver.4) permite a un atacante remoto no autenticado eludir la autenticación y enviar correos electrónicos no deseados a los usuarios cuando se envían correos electrónicos bajo ciertas condiciones. Se han observado ataques que aprovechan esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daj:m-filter:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.87r04",
            "matchCriteriaId" : "62BED9AC-FCB9-4A5F-9751-A6DA42A32F2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daj:m-filter:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "5.70r01",
            "matchCriteriaId" : "BC5965A1-EAE3-44FA-A2A2-DB76A534091C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN55675303/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN55675303/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22279",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-17T10:15:11.400",
      "lastModified" : "2025-04-04T19:15:45.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allow a remote unauthenticated attacker to execute an arbitrary OS command."
      }, {
        "lang" : "es",
        "value" : "MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud anterior a la versión 1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni anterior a la versión 1.11.00 y MAHO-PBX NetDevancer MobileGate Home/Office anterior a la versión 1.11. 00 permiten que un atacante remoto no autenticado ejecute un comando arbitrario del sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "C16C34FB-20D5-48FB-B6CF-64173C975763"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "2E47380F-B72A-4256-BECF-E99F3570B24E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_vsg_firmware:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "325690CA-1E8D-409A-89B6-B90306113712"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_vsg:-:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "5D67EBC7-70EC-41F5-B392-B15529B935C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_mobilegate_firmware:*:*:*:*:home:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "323F79DF-0710-43E9-AED0-75613B91BC8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_mobilegate:-:*:*:*:home:*:*:*",
            "matchCriteriaId" : "DA07C4D4-F9FC-4530-BB22-60EE766F03C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:uni:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "53D97BAD-E26E-42FA-900E-82C5B3CE1153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:uni:*:*:*",
            "matchCriteriaId" : "3AF826E8-00C3-416E-8400-6BD9033DB850"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:pro:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "0B194059-ADDA-4775-81DD-2F86C965C310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:pro:*:*:*",
            "matchCriteriaId" : "1EAF509F-1CA8-472F-84F2-07333612A77E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:cloud:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "B0D54391-5E4F-430B-8E00-93BE911F03A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:cloud:*:*:*",
            "matchCriteriaId" : "B8E80BE8-4C26-4878-A372-EEC8DC3EFA39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_vsg_firmware:*:*:*:*:uni:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "662B5A32-522C-4CF4-AF0C-A40165BEB0E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_vsg:-:*:*:*:uni:*:*:*",
            "matchCriteriaId" : "8052AFF9-A200-4654-9813-9A322BC22B3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_mobilegate_firmware:*:*:*:*:office:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "1CAF689A-0F8E-4549-BF2C-40FDC9B90717"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_mobilegate:-:*:*:*:office:*:*:*",
            "matchCriteriaId" : "AFC06754-5CA4-43E5-9B40-D9AD3B247CA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN99957889/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ate-mahoroba.jp/netdevancer/manual/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN99957889/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ate-mahoroba.jp/netdevancer/manual/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22280",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-17T10:15:11.477",
      "lastModified" : "2025-04-04T18:15:45.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allow a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command."
      }, {
        "lang" : "es",
        "value" : "MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud anterior a la versión 1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni anterior a la versión 1.11.00 y MAHO-PBX NetDevancer MobileGate Home/Office anterior a la versión 1.11. 00 permite a un atacante remoto autenticado con privilegios administrativos ejecutar un comando arbitrario del sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "C16C34FB-20D5-48FB-B6CF-64173C975763"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "2E47380F-B72A-4256-BECF-E99F3570B24E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_vsg_firmware:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "325690CA-1E8D-409A-89B6-B90306113712"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_vsg:-:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "5D67EBC7-70EC-41F5-B392-B15529B935C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_mobilegate_firmware:*:*:*:*:home:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "323F79DF-0710-43E9-AED0-75613B91BC8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_mobilegate:-:*:*:*:home:*:*:*",
            "matchCriteriaId" : "DA07C4D4-F9FC-4530-BB22-60EE766F03C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:uni:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "53D97BAD-E26E-42FA-900E-82C5B3CE1153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:uni:*:*:*",
            "matchCriteriaId" : "3AF826E8-00C3-416E-8400-6BD9033DB850"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:pro:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "0B194059-ADDA-4775-81DD-2F86C965C310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:pro:*:*:*",
            "matchCriteriaId" : "1EAF509F-1CA8-472F-84F2-07333612A77E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:cloud:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "B0D54391-5E4F-430B-8E00-93BE911F03A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:cloud:*:*:*",
            "matchCriteriaId" : "B8E80BE8-4C26-4878-A372-EEC8DC3EFA39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_vsg_firmware:*:*:*:*:uni:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "662B5A32-522C-4CF4-AF0C-A40165BEB0E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_vsg:-:*:*:*:uni:*:*:*",
            "matchCriteriaId" : "8052AFF9-A200-4654-9813-9A322BC22B3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_mobilegate_firmware:*:*:*:*:office:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "1CAF689A-0F8E-4549-BF2C-40FDC9B90717"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_mobilegate:-:*:*:*:office:*:*:*",
            "matchCriteriaId" : "AFC06754-5CA4-43E5-9B40-D9AD3B247CA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN99957889/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ate-mahoroba.jp/netdevancer/manual/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN99957889/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ate-mahoroba.jp/netdevancer/manual/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22286",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-17T10:15:11.537",
      "lastModified" : "2025-04-04T18:15:46.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allows a remote unauthenticated attacker to hijack the user authentication and conduct user's unintended operations by having a user to view a malicious page while logged in."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-site Request Forgery (CSRF) en MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud anterior a la versión 1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni anterior a la versión 1.11.00 y MAHO-PBX NetDevancer MobileGate Home/Office anterior a la versión 1.11.00 permite a un atacante remoto no autenticado secuestrar la autenticación del usuario y realizar operaciones no deseadas al hacer que el usuario vea una página maliciosa mientras está conectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "C16C34FB-20D5-48FB-B6CF-64173C975763"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "2E47380F-B72A-4256-BECF-E99F3570B24E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_vsg_firmware:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "325690CA-1E8D-409A-89B6-B90306113712"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_vsg:-:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "5D67EBC7-70EC-41F5-B392-B15529B935C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_mobilegate_firmware:*:*:*:*:home:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "323F79DF-0710-43E9-AED0-75613B91BC8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_mobilegate:-:*:*:*:home:*:*:*",
            "matchCriteriaId" : "DA07C4D4-F9FC-4530-BB22-60EE766F03C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:uni:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "53D97BAD-E26E-42FA-900E-82C5B3CE1153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:uni:*:*:*",
            "matchCriteriaId" : "3AF826E8-00C3-416E-8400-6BD9033DB850"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:pro:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "0B194059-ADDA-4775-81DD-2F86C965C310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:pro:*:*:*",
            "matchCriteriaId" : "1EAF509F-1CA8-472F-84F2-07333612A77E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:cloud:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "B0D54391-5E4F-430B-8E00-93BE911F03A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:cloud:*:*:*",
            "matchCriteriaId" : "B8E80BE8-4C26-4878-A372-EEC8DC3EFA39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_vsg_firmware:*:*:*:*:uni:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "662B5A32-522C-4CF4-AF0C-A40165BEB0E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_vsg:-:*:*:*:uni:*:*:*",
            "matchCriteriaId" : "8052AFF9-A200-4654-9813-9A322BC22B3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_mobilegate_firmware:*:*:*:*:office:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "1CAF689A-0F8E-4549-BF2C-40FDC9B90717"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_mobilegate:-:*:*:*:office:*:*:*",
            "matchCriteriaId" : "AFC06754-5CA4-43E5-9B40-D9AD3B247CA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN99957889/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ate-mahoroba.jp/netdevancer/manual/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN99957889/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ate-mahoroba.jp/netdevancer/manual/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22296",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-17T10:15:11.597",
      "lastModified" : "2025-04-04T18:15:46.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected cross-site scripting vulnerability in MAHO-PBX NetDevancer series MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allows a remote unauthenticated attacker to inject an arbitrary script."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting reflejada en la serie MAHO-PBX NetDevancer MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud anterior a la versión 1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni anterior a la versión 1.11.00 y MAHO- PBX NetDevancer MobileGate Home/Office anterior a la versión 1.11.00 permite a un atacante remoto no autenticado inyectar un script arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "C16C34FB-20D5-48FB-B6CF-64173C975763"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "2E47380F-B72A-4256-BECF-E99F3570B24E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_vsg_firmware:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "325690CA-1E8D-409A-89B6-B90306113712"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_vsg:-:*:*:*:lite:*:*:*",
            "matchCriteriaId" : "5D67EBC7-70EC-41F5-B392-B15529B935C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_mobilegate_firmware:*:*:*:*:home:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "323F79DF-0710-43E9-AED0-75613B91BC8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_mobilegate:-:*:*:*:home:*:*:*",
            "matchCriteriaId" : "DA07C4D4-F9FC-4530-BB22-60EE766F03C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:uni:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "53D97BAD-E26E-42FA-900E-82C5B3CE1153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:uni:*:*:*",
            "matchCriteriaId" : "3AF826E8-00C3-416E-8400-6BD9033DB850"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:pro:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "0B194059-ADDA-4775-81DD-2F86C965C310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:pro:*:*:*",
            "matchCriteriaId" : "1EAF509F-1CA8-472F-84F2-07333612A77E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_firmware:*:*:*:*:cloud:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "B0D54391-5E4F-430B-8E00-93BE911F03A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer:-:*:*:*:cloud:*:*:*",
            "matchCriteriaId" : "B8E80BE8-4C26-4878-A372-EEC8DC3EFA39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_vsg_firmware:*:*:*:*:uni:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "662B5A32-522C-4CF4-AF0C-A40165BEB0E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_vsg:-:*:*:*:uni:*:*:*",
            "matchCriteriaId" : "8052AFF9-A200-4654-9813-9A322BC22B3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ate-mahoroba:maho-pbx_netdevancer_mobilegate_firmware:*:*:*:*:office:*:*:*",
            "versionEndExcluding" : "1.11.00",
            "matchCriteriaId" : "1CAF689A-0F8E-4549-BF2C-40FDC9B90717"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ate-mahoroba:maho-pbx_netdevancer_mobilegate:-:*:*:*:office:*:*:*",
            "matchCriteriaId" : "AFC06754-5CA4-43E5-9B40-D9AD3B247CA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN99957889/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ate-mahoroba.jp/netdevancer/manual/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN99957889/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ate-mahoroba.jp/netdevancer/manual/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22298",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-17T10:15:11.657",
      "lastModified" : "2025-04-03T16:15:31.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open redirect vulnerability in pgAdmin 4 versions prior to v6.14 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de redireccionamiento abierto en las versiones de pgAdmin 4 anteriores a la v6.14 permite que un atacante remoto no autenticado redirija a un usuario a un sitio web arbitrario y realice un ataque de phishing haciendo que el usuario acceda a una URL especialmente manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:postgresql:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "6.14",
            "matchCriteriaId" : "18DDF945-9119-4283-AEA0-D3220A796C91"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pgadmin-org/pgadmin4",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pgadmin-org/pgadmin4/issues/5343",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN03832974/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHY2B25YHIIFQ3G44TR7NNEST7FJGJPH/",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.pgadmin.org/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pgadmin-org/pgadmin4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pgadmin-org/pgadmin4/issues/5343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN03832974/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHY2B25YHIIFQ3G44TR7NNEST7FJGJPH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.pgadmin.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22303",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-17T10:15:11.713",
      "lastModified" : "2025-04-04T18:15:46.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the product's settings may be altered with the privilege of the administrator."
      }, {
        "lang" : "es",
        "value" : "El firmware TP-Link SG105PE anterior a 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contiene una vulnerabilidad de omisión de autenticación. Bajo determinadas condiciones, un atacante puede hacerse pasar por un administrador del producto. Como resultado, se puede obtener información y/o modificar la configuración del producto con el privilegio del administrador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-sg105pe_firmware:1.0.0:build_20221208:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3FCD23-E1E0-4618-BF59-F5D4EDAD1BCE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-sg105pe:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868D3EB9-48E3-4C5D-A38C-40D055A4B88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN78481846/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tp-link.com/en/business-networking/easy-smart-switch/tl-sg105pe/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tp-link.com/jp/support/download/tl-sg105pe/v1/#Firmware",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN78481846/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tp-link.com/en/business-networking/easy-smart-switch/tl-sg105pe/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tp-link.com/jp/support/download/tl-sg105pe/v1/#Firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22304",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-17T10:15:11.767",
      "lastModified" : "2025-04-04T18:15:46.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OS command injection vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a network-adjacent attacker who can access product settings to execute an arbitrary OS command."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de OS Command Injection en las versiones PIX-RT100 RT100_TEQ_2.1.1_EQ101 y RT100_TEQ_2.1.2_EQ101 permite a un atacante adyacente a la red que puede acceder a la configuración del producto ejecutar un comando arbitrario del sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pixela:pix-rt100_firmware:2.1.1_eq101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E8088E2-6059-4EA8-B815-1B21F819E619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pixela:pix-rt100_firmware:2.1.2_eq101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB146C8-3CA0-4C34-B247-F57A8D5854F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pixela:pix-rt100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0DCE112-054D-46F3-A45E-B6AB73B554AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN57296685/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.pixela.co.jp/products/network/pix_rt100/update.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN57296685/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.pixela.co.jp/products/network/pix_rt100/update.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22316",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-17T10:15:11.823",
      "lastModified" : "2025-04-04T18:15:47.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hidden functionality vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a network-adjacent attacker to access the product via undocumented Telnet or SSH services."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de funcionalidad oculta en las versiones RT100_TEQ_2.1.1_EQ101 y RT100_TEQ_2.1.2_EQ101 de PIX-RT100 permite que un atacante adyacente a la red acceda al producto a través de servicios Telnet o SSH no documentados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-912"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pixela:pix-rt100_firmware:2.1.1_eq101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E8088E2-6059-4EA8-B815-1B21F819E619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pixela:pix-rt100_firmware:2.1.2_eq101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB146C8-3CA0-4C34-B247-F57A8D5854F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pixela:pix-rt100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0DCE112-054D-46F3-A45E-B6AB73B554AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN57296685/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.pixela.co.jp/products/network/pix_rt100/update.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN57296685/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.pixela.co.jp/products/network/pix_rt100/update.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22357",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-17T10:15:11.887",
      "lastModified" : "2025-04-04T18:15:47.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the firmware, causing a denial-of-service (DoS) condition, and/or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Existe un código de depuración activo en OMRON CP1L-EL20DR-D en todas las versiones, lo que puede provocar que un comando que no está especificado en el protocolo FINS se ejecute sin autenticación. Un atacante remoto no autenticado puede leer/escribir en un área arbitraria de la memoria del dispositivo, lo que puede provocar la sobrescritura del firmware, lo que provoca una condición de denegación de servicio (DoS) y/o la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-489"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:cp1l-el20dr-d_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE3720A-696F-4D71-89EA-2C4B84F1EEC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:cp1l-el20dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19CDC56E-7D29-49A4-B20B-6BDA7CF8A726"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU97575890/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU97575890/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22366",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-17T10:15:11.943",
      "lastModified" : "2025-04-03T20:15:21.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "CX-Motion-MCH v2.32 y anteriores contienen un acceso de vulnerabilidad de puntero no inicializado. Hacer que un usuario abra un archivo de proyecto especialmente manipulado puede provocar la divulgación de información y/o la ejecución de código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:cx-motion-mch_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.33",
            "matchCriteriaId" : "567A9765-E5AD-4B69-99F3-854B373FD896"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:cx-motion-mch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B92E3DE6-B0AF-4F30-B52E-FD94BEFC242C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU91744508/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU91744508/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0337",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-17T16:15:16.993",
      "lastModified" : "2024-11-21T07:36:59.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch."
      }, {
        "lang" : "es",
        "value" : "Cross-site scripting (XSS) reflejado en el repositorio de GitHub lirantal/daloradius antes de la rama maestra."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daloradius:daloradius:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-01-18",
            "matchCriteriaId" : "9832445C-1891-433C-8737-FEE966F5F844"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lirantal/daloradius/commit/e77a769c7503e63a2e3c05262cb5f8f81a4a7bbe",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/1c50a5a5-3f55-4b6f-b861-4d5cdb6eb81b",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lirantal/daloradius/commit/e77a769c7503e63a2e3c05262cb5f8f81a4a7bbe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/1c50a5a5-3f55-4b6f-b861-4d5cdb6eb81b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0338",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-17T16:15:17.090",
      "lastModified" : "2024-11-21T07:37:00.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch."
      }, {
        "lang" : "es",
        "value" : "Cross-site scripting (XSS) reflejado en el repositorio de GitHub lirantal/daloradius antes de la rama maestra."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daloradius:daloradius:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-01-18",
            "matchCriteriaId" : "9832445C-1891-433C-8737-FEE966F5F844"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lirantal/daloradius/commit/e77a769c7503e63a2e3c05262cb5f8f81a4a7bbe",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/fcae1b67-db37-4d24-9137-8dda95573e77",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lirantal/daloradius/commit/e77a769c7503e63a2e3c05262cb5f8f81a4a7bbe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/fcae1b67-db37-4d24-9137-8dda95573e77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0158",
      "sourceIdentifier" : "sep@nlnetlabs.nl",
      "published" : "2023-01-17T17:15:11.837",
      "lastModified" : "2025-04-04T19:15:44.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NLnet Labs Krill supports direct access to the RRDP repository content through its built-in web server at the \"/rrdp\" endpoint. Prior to 0.12.1 a direct query for any existing directory under \"/rrdp/\", rather than an RRDP file such as \"/rrdp/notification.xml\" as would be expected, causes Krill to crash. If the built-in \"/rrdp\" endpoint is exposed directly to the internet, then malicious remote parties can cause the publication server to crash. The repository content is not affected by this, but the availability of the server and repository can cause issues if this attack is persistent and is not mitigated."
      }, {
        "lang" : "es",
        "value" : "NLnet Labs Krill admite el acceso directo al contenido del repositorio RRDP a través de su servidor web integrado en el endpoint \"/rrdp\". Antes de 0.12.1, una consulta directa a cualquier directorio existente en \"/rrdp/\", en lugar de un archivo RRDP como \"/rrdp/notification.xml\" como se esperaría, provocaba que Krill fallara. Si el endpoint integrado \"/rrdp\" se expone directamente a Internet, partes remotas maliciosas pueden provocar que el servidor de publicación falle. El contenido del repositorio no se ve afectado por esto, pero la disponibilidad del servidor y el repositorio puede causar problemas si este ataque es persistente y no se mitiga."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sep@nlnetlabs.nl",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlnetlabs:krill:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.12.1",
            "matchCriteriaId" : "C29A18F4-74BB-4FDD-B080-1F63A74628CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nlnetlabs.nl/downloads/krill/CVE-2023-0158.txt",
        "source" : "sep@nlnetlabs.nl",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.nlnetlabs.nl/downloads/krill/CVE-2023-0158.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22875",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-01-17T19:15:11.673",
      "lastModified" : "2024-11-21T07:45:33.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nIBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not require that key. IBM X-Force ID: 244356.\n\n"
      }, {
        "lang" : "es",
        "value" : "IBM QRadar SIEM 7.4 y 7.5 copia los archivos de claves de certificado utilizados para SSL/TLS en la interfaz de usuario web de QRadar en hosts gestionados en el despliegue que no requieren esa clave. ID de IBM X-Force: 244356."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF60DED-F561-4FAC-88BE-CEDD4985B29F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DACA17CC-8B71-4E71-B075-BFFB65AD989C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244356",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6855643",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6855643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22624",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-17T20:15:11.927",
      "lastModified" : "2025-04-04T18:15:47.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine Exchange Reporter Plus anterior a 5708 permite a los atacantes realizar ataques XXE."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7",
            "matchCriteriaId" : "3DA0580F-8167-450E-A1E9-0F1F7FC7E2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5700:*:*:*:*:*:*",
            "matchCriteriaId" : "E913F3D6-9F94-4130-94FF-37F4D81BAEF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5701:*:*:*:*:*:*",
            "matchCriteriaId" : "34D23B58-2BB8-40EE-952C-1595988335CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5702:*:*:*:*:*:*",
            "matchCriteriaId" : "322920C4-4487-4E44-9C40-2959F478A4FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5703:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD735B9-2CE2-46BA-9A14-A22E3FE21C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5704:*:*:*:*:*:*",
            "matchCriteriaId" : "014DB85C-DB28-4EBB-971A-6F8F964CE6FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5705:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9B0013-ABF8-4616-BC92-15DF9F5CB359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5706:*:*:*:*:*:*",
            "matchCriteriaId" : "5B744F32-FD43-47B8-875C-6777177677CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5707:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BB6EEA-2BAA-4C48-8DA8-1E87B3DE611F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.manageengine.com/products/exchange-reports/advisory/CVE-2023-22624.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/exchange-reports/advisory/CVE-2023-22624.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23749",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2023-01-17T20:15:11.983",
      "lastModified" : "2025-04-03T20:15:23.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The 'LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login' extension is vulnerable to LDAP Injection since is not properly sanitizing the 'username' POST parameter. An attacker can manipulate this paramter to dump arbitrary contents form the LDAP Database."
      }, {
        "lang" : "es",
        "value" : "La extension 'LDAP Integration with Active Directory and OpenLDAP - NTLM &amp; Kerberos Login' es vulnerable a la inyección LDAP ya que no sanitiza adecuadamente el parámetro POST 'username'. Un atacante puede manipular este parámetro para volcar contenidos arbitrarios de la base de datos LDAP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniorange:ldap_integration_with_active_directory_and_openldap:5.0.2:*:*:*:*:joomla\\!:*:*",
            "matchCriteriaId" : "F84BCE7D-415C-4D0D-8EC7-E84A28883FD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://extensions.joomla.org/vulnerable-extensions/resolved/ldap-integration-with-active-directory-and-openldap-ntlm-kerberos-login-5-0-2-other/",
        "source" : "security@joomla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://extensions.joomla.org/vulnerable-extensions/resolved/ldap-integration-with-active-directory-and-openldap-ntlm-kerberos-login-5-0-2-other/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0122",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-01-17T21:15:14.853",
      "lastModified" : "2025-04-04T19:15:44.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desreferencia de puntero NULL en la funcionalidad NVMe del kernel de Linux, en nvmet_setup_auth(), permite a un atacante realizar un ataque de denegación de servicio (DoS) previa a la autenticación en una máquina remota. Versiones afectadas v6.0-rc1 a v6.0-rc3, corregido en v6.0-rc4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BD11A3-8643-49B6-BADE-5029A0117325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0AD220-F6A9-4012-8636-155F1B841FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "A46498B3-78E1-4623-AAE1-94D29A42BE4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/01/18/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=da0342a3aa0357795224e6283df86444e1117168",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230302-0002/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/01/18/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=da0342a3aa0357795224e6283df86444e1117168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230302-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0296",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-01-17T21:15:15.273",
      "lastModified" : "2025-04-04T19:15:44.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port (9979) on etcd grpc-proxy, hence this port might be considered as still vulnerable to the same type of vulnerability. The health checks on etcd grpc-proxy do not contain sensitive data (only metrics data), therefore the potential impact related to this vulnerability is minimal. The CVE-2023-0296 has been assigned to this issue to track the permanent fix in the etcd component."
      }, {
        "lang" : "es",
        "value" : "Se informó del ataque de cumpleaños contra la falla de cifrado de bloques de 64 bits (CVE-2016-2183) para el puerto de controles de estado (9979) en el componente etcd grpc-proxy. Aunque el CVE-2016-2183 se corrigió en los componentes de etcd, para permitir comprobaciones periódicas de estado de kubelet, fue necesario abrir un nuevo puerto (9979) en etcd grpc-proxy, por lo que este puerto podría considerarse todavía vulnerables al mismo tipo de vulnerabilidad. Las comprobaciones de estado en etcd grpc-proxy no contienen datos confidenciales (solo datos de métricas), por lo que el impacto potencial relacionado con esta vulnerabilidad es mínimo. Se asignó el CVE-2023-0296 a este problema para rastrear la solución permanente en el componente etcd."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275413B5-6C5D-4125-9396-0DAE614887E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2161287",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2161287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22499",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-17T21:15:15.883",
      "lastModified" : "2024-11-21T07:44:55.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by rewriting the prompt to suggest that program is waiting on user confirmation to unrelated action. A malicious program could clear the terminal screen after permission prompt was shown and write a generic message. This situation impacts users who use Web Worker API and relied on interactive permission prompt. The reproduction is very timing sensitive and can’t be reliably reproduced on every try. This problem can not be exploited on systems that do not attach an interactive prompt (for example headless servers). The problem has been fixed in Deno v1.29.3; it is recommended all users update to this version. Users are advised to upgrade. Users unable to upgrade may run with --no-prompt flag to disable interactive permission prompts."
      }, {
        "lang" : "es",
        "value" : "Deno es un tiempo de ejecución para JavaScript y TypeScript que usa V8 y está integrado en Rust. Los programas multiproceso pudieron falsificar el mensaje de permiso interactivo reescribiéndolo para sugerir que el programa está esperando la confirmación del usuario para una acción no relacionada. Un programa malicioso podría borrar la pantalla del terminal después de que se mostrara la solicitud de permiso y escribir un mensaje genérico. Esta situación afecta a los usuarios que utilizan Web Worker API y dependen de la solicitud de permiso interactiva. La reproducción es muy sensible al tiempo y no se puede reproducir de forma fiable en cada intento. Este problema no se puede explotar en sistemas que no adjuntan un mensaje interactivo (por ejemplo, servidores sin cabeza). El problema se solucionó en Deno v1.29.3; Se recomienda que todos los usuarios actualicen a esta versión. Se recomienda a los usuarios que actualicen. Los usuarios que no puedan actualizar pueden ejecutar el indicador --no-prompt para deshabilitar las solicitudes de permisos interactivos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndExcluding" : "1.29.3",
            "matchCriteriaId" : "6FB27083-25BE-4251-BDC1-F11AB37573EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/denoland/deno/pull/17392",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/denoland/deno/security/advisories/GHSA-mc52-jpm2-cqh6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/denoland/deno/pull/17392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/denoland/deno/security/advisories/GHSA-mc52-jpm2-cqh6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22727",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-17T21:15:16.550",
      "lastModified" : "2024-11-21T07:45:18.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CakePHP is a development framework for PHP web apps. In affected versions the `Cake\\Database\\Query::limit()` and `Cake\\Database\\Query::offset()` methods are vulnerable to SQL injection if passed un-sanitized user request data. This issue has been fixed in 4.2.12, 4.3.11, 4.4.10. Users are advised to upgrade. Users unable to upgrade may mitigate this issue by using CakePHP's Pagination library. Manually validating or casting parameters to these methods will also mitigate the issue."
      }, {
        "lang" : "es",
        "value" : "CakePHP es un framework de desarrollo para aplicaciones web PHP. En las versiones afectadas, los métodos `Cake\\Database\\Query::limit()` y `Cake\\Database\\Query::offset()` son vulnerables a la inyección SQL si se pasan datos de solicitud de usuario sin desinfectar. Este problema se solucionó en 4.2.12, 4.3.11, 4.4.10. Se recomienda a los usuarios que actualicen. Los usuarios que no puedan actualizar pueden mitigar este problema utilizando la librería de paginación de CakePHP. La validación manual o la conversión de parámetros a estos métodos también mitigará el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cakephp:cakephp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.12",
            "matchCriteriaId" : "54CC7CDF-D3A7-427B-B734-89E0E47778C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cakephp:cakephp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndExcluding" : "4.3.11",
            "matchCriteriaId" : "09F4E6E5-91F9-4496-88A1-2B9DCC6D9656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cakephp:cakephp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.10",
            "matchCriteriaId" : "45326B61-AA4E-4D7C-8B29-ACE4AA9951E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bakery.cakephp.org/2023/01/06/cakephp_4211_4311_4410_released.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/cakephp/cakephp/commit/3f463e7084b5a15e67205ced3a622577cca7a239",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cakephp/cakephp/security/advisories/GHSA-6g8q-qfpv-57wp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bakery.cakephp.org/2023/01/06/cakephp_4211_4311_4410_released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/cakephp/cakephp/commit/3f463e7084b5a15e67205ced3a622577cca7a239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cakephp/cakephp/security/advisories/GHSA-6g8q-qfpv-57wp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-17T21:15:17.080",
      "lastModified" : "2025-04-04T18:15:47.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IMPatienT before 1.5.2 allows stored XSS via onmouseover in certain text fields within a PATCH /modify_onto request to the ontology builder. This may allow attackers to steal Protected Health Information."
      }, {
        "lang" : "es",
        "value" : "IMPatienT anterior a 1.5.2 permite XSS almacenado mediante onmouseover en ciertos campos de texto dentro de una solicitud PATCH /modify_onto al generador de ontologías. Esto puede permitir a los atacantes robar información médica protegida."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unistra:impatient:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.2",
            "matchCriteriaId" : "79115836-AED1-4655-B3C4-A9E8081C6088"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lambda-science/IMPatienT/compare/v1.5.1...v1.5.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lambda-science/IMPatienT/issues/101",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lambda-science/IMPatienT/releases/tag/v1.5.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lambda-science/IMPatienT/compare/v1.5.1...v1.5.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lambda-science/IMPatienT/issues/101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lambda-science/IMPatienT/releases/tag/v1.5.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22730",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-17T22:15:10.867",
      "lastModified" : "2024-11-21T07:45:18.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions It was possible to put the same line item multiple times in the cart using the AP. The Cart Validators checked the line item's individuality and the user was able to bypass quantity limits in sales. This problem has been fixed with version 6.4.18.1. Users on major versions 6.1, 6.2, and 6.3 may also obtain this fix via a plugin. \n"
      }, {
        "lang" : "es",
        "value" : "Shopware es una plataforma de comercio de código abierto basada en Symfony Framework y Vue js. En las versiones afectadas, era posible colocar la misma línea de pedido varias veces en el carrito utilizando el AP. Los validadores de carrito verificaron la individualidad del artículo de línea y el usuario pudo evitar los límites de cantidad en las ventas. Este problema se ha solucionado con la versión 6.4.18.1. Los usuarios de las versiones principales 6.1, 6.2 y 6.3 también pueden obtener esta solución a través de un complemento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.18.1",
            "matchCriteriaId" : "1BE11635-1060-43A5-B8E6-6A9335AECCDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/commit/4fce12096e54b2033832d9104fa2e68888c2b4e9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/security/advisories/GHSA-8r6h-m72v-38fg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/commit/4fce12096e54b2033832d9104fa2e68888c2b4e9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/security/advisories/GHSA-8r6h-m72v-38fg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22731",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-17T22:15:10.977",
      "lastModified" : "2024-11-21T07:45:18.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shopware is an open source commerce platform based on Symfony Framework and Vue js. In a Twig environment **without the Sandbox extension**, it is possible to refer to PHP functions in twig filters like `map`, `filter`, `sort`. This allows a template to call any global PHP function and thus execute arbitrary code. The attacker must have access to a Twig environment in order to exploit this vulnerability. This problem has been fixed with 6.4.18.1 with an override of the specified filters until the integration of the Sandbox extension has been finished. Users are advised to upgrade. Users of major versions 6.1, 6.2, and 6.3 may also receive this fix via a plugin.\n"
      }, {
        "lang" : "es",
        "value" : "Shopware es una plataforma de comercio de código abierto basada en Symfony Framework y Vue js. En un entorno Twig **sin la extensión Sandbox**, es posible hacer referencia a funciones PHP en filtros twig como `mapa`, `filtro`, `ordenar`. Esto permite que una plantilla llame a cualquier función PHP global y así ejecute código arbitrario. El atacante debe tener acceso a un entorno Twig para poder explotar esta vulnerabilidad. Este problema se solucionó con 6.4.18.1 con una anulación de los filtros especificados hasta que finalice la integración de la extensión Sandbox. Se recomienda a los usuarios que actualicen. Los usuarios de las versiones principales 6.1, 6.2 y 6.3 también pueden recibir esta solución a través de un complemento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.18.1",
            "matchCriteriaId" : "1BE11635-1060-43A5-B8E6-6A9335AECCDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/commit/89d1ea154689cb6202e0d3a0ceeae0febb0c09e1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/security/advisories/GHSA-93cw-f5jj-x85w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/commit/89d1ea154689cb6202e0d3a0ceeae0febb0c09e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/security/advisories/GHSA-93cw-f5jj-x85w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22732",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-17T22:15:11.093",
      "lastModified" : "2024-11-21T07:45:18.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shopware is an open source commerce platform based on Symfony Framework and Vue js. The Administration session expiration was set to one week, when an attacker has stolen the session cookie they could use it for a long period of time. In version 6.4.18.1 an automatic logout into the Administration session has been added. As a result the user will be logged out when they are inactive. Users are advised to upgrade. There are no known workarounds for this issue.\n"
      }, {
        "lang" : "es",
        "value" : "Shopware es una plataforma de comercio de código abierto basada en Symfony Framework y Vue js. La caducidad de la sesión de administración se fijó en una semana, cuando un atacante robaba la cookie de sesión podía utilizarla durante un largo período de tiempo. En la versión 6.4.18.1 se agregó un cierre de sesión automático en la sesión de Administración. Como resultado, se cerrará la sesión del usuario cuando esté inactivo. Se recomienda a los usuarios que actualicen. No se conocen workarounds para este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.18.1",
            "matchCriteriaId" : "1BE11635-1060-43A5-B8E6-6A9335AECCDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/commit/cd7a89cbcd3a0428c6d1ef27b3aa15467a722ff6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/security/advisories/GHSA-59qg-93jg-236f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/commit/cd7a89cbcd3a0428c6d1ef27b3aa15467a722ff6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/security/advisories/GHSA-59qg-93jg-236f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22733",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-17T22:15:11.227",
      "lastModified" : "2024-11-21T07:45:19.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions the log module would write out all kind of sent mails. An attacker with access to either the local system logs or a centralized logging store may have access to other users accounts. This issue has been addressed in version 6.4.18.1. For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version. Users unable to upgrade may remove from all users the log module ACL rights or disable logging."
      }, {
        "lang" : "es",
        "value" : "Shopware es una plataforma de comercio de código abierto basada en Symfony Framework y Vue js. En las versiones afectadas, el módulo de registro escribiría todo tipo de correos enviados. Un atacante con acceso a los registros del sistema local o a un almacén de registros centralizado puede tener acceso a las cuentas de otros usuarios. Este problema se solucionó en la versión 6.4.18.1. Para las versiones anteriores 6.1, 6.2 y 6.3 también están disponibles las medidas de seguridad correspondientes a través de un complemento. Para obtener la gama completa de funciones, recomendamos actualizar a la última versión de Shopware. Los usuarios que no puedan actualizar pueden eliminar de todos los usuarios los derechos ACL del módulo de registro o desactivar el registro."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.18.1",
            "matchCriteriaId" : "1BE11635-1060-43A5-B8E6-6A9335AECCDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.shopware.com/docs/guides/hosting/performance/performance-tweaks#logging",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/commit/407a83063d7141c1a626441799c3ebef79498c07",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/security/advisories/GHSA-7cp7-jfp6-jh4f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://developer.shopware.com/docs/guides/hosting/performance/performance-tweaks#logging",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/commit/407a83063d7141c1a626441799c3ebef79498c07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/security/advisories/GHSA-7cp7-jfp6-jh4f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22734",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-17T22:15:11.340",
      "lastModified" : "2024-11-21T07:45:19.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shopware is an open source commerce platform based on Symfony Framework and Vue js. The newsletter double opt-in validation was not checked properly, and it was possible to skip the complete double opt in process. As a result operators may have inconsistencies in their newsletter systems. This problem has been fixed with version 6.4.18.1. Users are advised to upgrade. Users unable to upgrade may find security measures are available via a plugin for major versions 6.1, 6.2, and 6.3. Users may also disable newsletter registration completely.\n"
      }, {
        "lang" : "es",
        "value" : "Shopware es una plataforma de comercio de código abierto basada en Symfony Framework y Vue js. La validación de doble suscripción del boletín no se verificó correctamente y fue posible omitir todo el proceso de doble suscripción. Como resultado, los operadores pueden tener inconsistencias en sus sistemas de boletines. Este problema se ha solucionado con la versión 6.4.18.1. Se recomienda a los usuarios que actualicen. Los usuarios que no puedan actualizar pueden encontrar medidas de seguridad disponibles a través de un complemento para las versiones principales 6.1, 6.2 y 6.3. Los usuarios también pueden desactivar completamente el registro al boletín."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.18.1",
            "matchCriteriaId" : "1BE11635-1060-43A5-B8E6-6A9335AECCDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/commit/f5a95ee2bcf1e546878450963ef1d9886e59a620",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/security/advisories/GHSA-46h7-vj7x-fxg2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/commit/f5a95ee2bcf1e546878450963ef1d9886e59a620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/security/advisories/GHSA-46h7-vj7x-fxg2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21824",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:12.443",
      "lastModified" : "2024-11-21T07:43:43.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications Applications (component: Customer, Config, Pricing Manager).  Supported versions that are affected are 12.0.0.3.0-12.0.0.7.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Communications BRM - Elastic Charging Engine executes to compromise Oracle Communications BRM - Elastic Charging Engine.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Communications BRM - Elastic Charging Engine accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en Oracle Communications BRM - Producto Elastic Charging Engine de Oracle Communications Applications (componente: Cliente, Configuración, Pricing Manager). Las versiones compatibles que se ven afectadas son 12.0.0.3.0-12.0.0.7.0. Una vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios iniciar sesión en la infraestructura donde se ejecuta Oracle Communications BRM - Elastic Charging Engine para comprometer Oracle Communications BRM - Elastic Charging Engine. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Communications BRM - Elastic Charging Engine. CVSS 3.1 Puntaje base 4.4 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0.3.0",
            "versionEndIncluding" : "12.0.0.7.0",
            "matchCriteriaId" : "42B900E7-C5D2-48F7-BAA5-F13AC6978AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C91A8B-640D-4516-9E72-F571900B52DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82091D5D-B9C0-460E-952E-A4E3BFB4369C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21825",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:12.517",
      "lastModified" : "2024-11-21T07:43:43.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Supplier Management).  Supported versions that are affected are 12.2.6-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupplier Portal.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle iSupplier Portal accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle iSupplier Portal de Oracle E-Business Suite (componente: Gestión de proveedores). Las versiones compatibles que se ven afectadas son 12.2.6-12.2.8. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer Oracle iSupplier Portal. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle iSupplier Portal. CVSS 3.1 Puntaje base 5.3 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupplier_portal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.6",
            "versionEndIncluding" : "12.2.8",
            "matchCriteriaId" : "7B6D4280-C1CC-4361-9A7C-B9C55F8CFF8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21826",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:12.587",
      "lastModified" : "2024-11-21T07:43:43.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Reporting).   The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Hospitality Reporting and Analytics.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hospitality Reporting and Analytics accessible data as well as  unauthorized update, insert or delete access to some of Oracle Hospitality Reporting and Analytics accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Reporting and Analytics. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Hospitality Reporting and Analytics de Oracle Food and Beverage Applications (componente: Reporting). La versión compatible afectada es la 9.1.0. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red a través de HTTPS comprometer Oracle Hospitality Reporting and Analytics. Los ataques exitosos requieren la interacción humana de una persona distinta del atacante. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Hospitality Reporting and Analytics, así como acceso no autorizado a actualizaciones, inserción o eliminación de algunos de los datos accesibles de Oracle Hospitality Reporting and Analytics y la capacidad no autorizada de causar un bloqueo o falla frecuentemente repetible (DOS completo) de Oracle Hospitality Reporting and Analytics. CVSS 3.1 Puntuación base 7,6 (impactos en la confidencialidad, la integridad y la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCBF2756-B831-4E6E-A15B-2A11DD48DB7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21827",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:12.660",
      "lastModified" : "2024-11-21T07:43:43.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Database Data Redaction component of Oracle Database Server.  Supported versions that are affected are 19c and  21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle Database Data Redaction.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Database Data Redaction accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente de redacción de datos de la base de datos Oracle de Oracle Database Server. Las versiones compatibles que se ven afectadas son 19c y 21c. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios y privilegios de Crear sesión con acceso a la red a través de Oracle Net comprometa la redacción de datos de la base de datos Oracle. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Database Data Redaction. CVSS 3.1 Puntaje base 4.3 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C1E05472-8F3A-4E46-90E5-50EA6D555FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:21c:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "02E34416-E767-4F61-8D2C-0D0202351F91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21828",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:12.730",
      "lastModified" : "2024-11-21T07:43:43.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Reporting).   The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Hospitality Reporting and Analytics.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality Reporting and Analytics accessible data as well as  unauthorized access to critical data or complete access to all Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Hospitality Reporting and Analytics de Oracle Food and Beverage Applications (componente: Reporting). La versión compatible afectada es la 9.1.0. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red a través de HTTPS comprometer Oracle Hospitality Reporting and Analytics. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a la creación, eliminación o modificación de datos críticos o a todos los datos accesibles de Oracle Hospitality Reporting and Analytics, así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Hospitality Reporting and Analytics. CVSS 3.1 Puntaje base 8.1 (Impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCBF2756-B831-4E6E-A15B-2A11DD48DB7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21829",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:12.800",
      "lastModified" : "2024-11-21T07:43:44.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server.  Supported versions that are affected are 19c and  21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle Database RDBMS Security.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Database RDBMS Security accessible data as well as  unauthorized read access to a subset of Oracle Database RDBMS Security accessible data. CVSS 3.1 Base Score 6.3 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente de seguridad RDBMS de Oracle Database de Oracle Database Server. Las versiones compatibles que se ven afectadas son 19c y 21c. Una vulnerabilidad fácilmente explotable permite que un atacante con privilegios bajos y privilegios de Crear sesión con acceso a la red a través de Oracle Net comprometa la seguridad de Oracle Database RDBMS. Los ataques exitosos requieren la interacción humana de una persona distinta del atacante. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a la creación, eliminación o modificación de datos críticos o a todos los datos accesibles de Oracle Database RDBMS Security, así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Database RDBMS Security. CVSS 3.1 Puntaje base 6.3 (Impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C1E05472-8F3A-4E46-90E5-50EA6D555FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:21c:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "02E34416-E767-4F61-8D2C-0D0202351F91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21830",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:12.873",
      "lastModified" : "2024-11-21T07:43:44.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).  Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 and  21.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Java SE, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: Serialización). Las versiones compatibles que se ven afectadas son Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 y 21.3.4. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de múltiples protocolos comprometa Oracle Java SE, Oracle GraalVM Enterprise Edition. Los ataques exitosos a esta vulnerabilidad pueden dar como resultado una actualización, inserción o eliminación no autorizada del acceso a algunos de los datos accesibles de Oracle Java SE, Oracle GraalVM Enterprise Edition. Nota: Esta vulnerabilidad se aplica a implementaciones de Java, generalmente en clientes que ejecutan aplicaciones Java Web Start en espacio aislado o subprogramas de Java en espacio aislado, que cargan y ejecutan código que no es de confianza (por ejemplo, código que proviene de Internet) y dependen del entorno limitado de Java para su seguridad. Esta vulnerabilidad no se aplica a implementaciones de Java, normalmente en servidores, que cargan y ejecutan sólo código confiable (por ejemplo, código instalado por un administrador). CVSS 3.1 Puntaje base 5.3 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_assurance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndIncluding" : "5.5.17",
            "matchCriteriaId" : "1C7BE2A1-09FD-4563-AAC9-A2BFAA75BAFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_assurance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.2",
            "matchCriteriaId" : "E5A19344-4B2C-4F7F-8600-1D10DC9C46FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EAC60F95-C4B1-49E6-864A-DF5212E7A63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4791BBB5-C094-45B6-A3A8-E96D3BF97DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:22.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E4B331E5-74F5-411E-B997-7038A1DA445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update351:*:*:*:*:*:*",
            "matchCriteriaId" : "82D69EF4-FD0E-4A5C-ADEB-03AFED98879D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA7A70-D820-49AA-942A-5F32A3219B53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:17.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458526BC-62D5-4A0A-9313-ECC4B070B281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:19.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B07512-B002-4A41-BC6A-4D32EA9D52EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update351:*:*:*:*:*:*",
            "matchCriteriaId" : "08BB9726-C876-4B48-A0AC-72B1B6B09A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:11.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695E3ADB-39EB-4EAC-B37F-F9200EADE08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:17.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7CB68CC-9541-4236-9715-BC2DE256CC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:19.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A065785-60AF-4CDB-83C5-B35624706344"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:6.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C21354-003A-4BEC-8641-9BF2BD1D04F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:7.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F84DE8-7A9F-444A-A73F-9022C11EDCA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:8.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9894F71-FE59-42D8-BD29-7269034328C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202401-25",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202401-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21831",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:12.940",
      "lastModified" : "2024-11-21T07:43:44.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft (component: Advising Notes).   The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Academic Advisement.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of PeopleSoft Enterprise CS Academic Advisement accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto PeopleSoft Enterprise CS Academic Advisement de Oracle PeopleSoft (componente: Advising Notes). La versión compatible que se ve afectada es la 9.2. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer PeopleSoft Enterprise CS Academic Advisement. Los ataques exitosos a esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise CS Academic Advisement. CVSS 3.1 Puntaje base 5.3 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_cs_academic_advisement:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA80401-022E-4AFE-8D1E-6D340366DA47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21832",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.003",
      "lastModified" : "2024-11-21T07:43:44.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security).  Supported versions that are affected are 5.9.0.0.0, 6.4.0.0.0 and  12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle BI Publisher.  Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle BI Publisher de Oracle Fusion Middleware (componente: Seguridad). Las versiones compatibles que se ven afectadas son 5.9.0.0.0, 6.4.0.0.0 y 12.2.1.4.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios y acceso a la red a través de múltiples protocolos comprometa Oracle BI Publisher. Los ataques exitosos a esta vulnerabilidad pueden resultar en la adquisición de Oracle BI Publisher. CVSS 3.1 Puntuación base 8,8 (impactos en la confidencialidad, la integridad y la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:5.9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6994E747-7D03-4689-8FF7-DD44F4529213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:6.4.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6CEFA51-E2C5-4F07-952D-F8F46C928092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274A0CF5-41E8-42E0-9931-F7372A65B9C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21834",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.077",
      "lastModified" : "2024-11-21T07:43:44.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Workflow, Approval, Work Force Management).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Self-Service Human Resources.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Self-Service Human Resources accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Self-Service Human Resources de Oracle E-Business Suite (componente: Workflow, Approval, Work Force Management). Las versiones compatibles que se ven afectadas son 12.2.3-12.2.12. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios y acceso a la red a través de HTTP comprometa los recursos humanos de autoservicio de Oracle. Los ataques exitosos a esta vulnerabilidad pueden resultar en una actualización, inserción o eliminación no autorizada del acceso a algunos de los datos accesibles de Oracle Self-Service Human Resources. CVSS 3.1 Puntaje base 4.3 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:self-service_human_resources:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.12",
            "matchCriteriaId" : "870ACEB3-A62F-40ED-90F1-FCDE40C9D3D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21835",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.147",
      "lastModified" : "2024-11-21T07:43:44.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and  22.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DTLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Java SE, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: JSSE). Las versiones compatibles que se ven afectadas son Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 y 22.3.0. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de DTLS comprometa Oracle Java SE, Oracle GraalVM Enterprise Edition. Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para causar una denegación de servicio parcial (DOS parcial) de Oracle Java SE, Oracle GraalVM Enterprise Edition. Nota: Esta vulnerabilidad se aplica a implementaciones de Java, generalmente en clientes que ejecutan aplicaciones Java Web Start en espacio aislado o subprogramas de Java en espacio aislado, que cargan y ejecutan código que no es de confianza (por ejemplo, código que proviene de Internet) y dependen del entorno limitado de Java para su seguridad. Esta vulnerabilidad no se aplica a implementaciones de Java, normalmente en servidores, que cargan y ejecutan sólo código confiable (por ejemplo, código instalado por un administrador). CVSS 3.1 Puntuación base 5.3 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EAC60F95-C4B1-49E6-864A-DF5212E7A63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4791BBB5-C094-45B6-A3A8-E96D3BF97DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:22.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E4B331E5-74F5-411E-B997-7038A1DA445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA7A70-D820-49AA-942A-5F32A3219B53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:17.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458526BC-62D5-4A0A-9313-ECC4B070B281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:19.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B07512-B002-4A41-BC6A-4D32EA9D52EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:11.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695E3ADB-39EB-4EAC-B37F-F9200EADE08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:17.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7CB68CC-9541-4236-9715-BC2DE256CC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:19.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A065785-60AF-4CDB-83C5-B35624706344"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:11.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47BECB1-5502-490C-8BF1-E4F673802228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:13.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC1D121-AD8E-41F9-A4EA-26889ADDF0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:15.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDAAB21D-17E7-4FF5-B31C-BFD7EBF6505B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:17.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C2FA3F-7CAC-45E2-B2ED-FA6C98884C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:19.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD5B562-AB32-477D-B46D-F3E41A43A809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202401-25",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202401-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21836",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.217",
      "lastModified" : "2024-11-21T07:43:44.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: DML). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o una falla frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "A17A50C3-66AA-4168-8D7D-7F3295B231BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21837",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.287",
      "lastModified" : "2024-11-21T07:43:45.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Core). Las versiones compatibles que se ven afectadas son 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de IIOP comprometa Oracle WebLogic Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle WebLogic Server. CVSS 3.1 Puntaje base 7.5 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21838",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.367",
      "lastModified" : "2024-11-21T07:43:45.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Core). Las versiones compatibles que se ven afectadas son 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de T3, IIOP comprometa Oracle WebLogic Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar un bloqueo o una falla frecuente (DOS completo) de Oracle WebLogic Server. CVSS 3.1 Puntuación base 7.5 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21839",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.450",
      "lastModified" : "2025-10-27T17:08:13.293",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Core). Las versiones compatibles que se ven afectadas son 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de T3, IIOP comprometa Oracle WebLogic Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle WebLogic Server. CVSS 3.1 Puntaje base 7.5 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "cisaExploitAdd" : "2023-05-01",
      "cisaActionDue" : "2023-05-22",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Oracle WebLogic Server Unspecified Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172882/Oracle-Weblogic-PreAuth-Remote-Command-Execution.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172882/Oracle-Weblogic-PreAuth-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21839",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21840",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.517",
      "lastModified" : "2024-11-21T07:43:45.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).  Supported versions that are affected are 5.7.40 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: PS). Las versiones compatibles que se ven afectadas son la 5.7.40 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o una falla frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.40",
            "matchCriteriaId" : "D4F7FA8A-718F-4106-93C0-233ED71D697C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21841",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.583",
      "lastModified" : "2024-11-21T07:43:45.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Core). Las versiones compatibles que se ven afectadas son 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de T3, IIOP comprometa Oracle WebLogic Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle WebLogic Server. CVSS 3.1 Puntaje base 7.5 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21842",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.650",
      "lastModified" : "2024-11-21T07:43:45.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).  Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Web Container). Las versiones compatibles que se ven afectadas son 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de HTTP comprometa Oracle WebLogic Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle WebLogic Server. CVSS 3.1 Puntaje base 7.5 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21843",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.717",
      "lastModified" : "2024-11-21T07:43:45.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and  22.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Java SE, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: Sonido). Las versiones compatibles que se ven afectadas son Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 y 22.3.0. Una vulnerabilidad difícil de explotar permite que un atacante no autenticado con acceso a la red a través de múltiples protocolos comprometa Oracle Java SE, Oracle GraalVM Enterprise Edition. Los ataques exitosos a esta vulnerabilidad pueden dar como resultado una actualización, inserción o eliminación no autorizada del acceso a algunos de los datos accesibles de Oracle Java SE, Oracle GraalVM Enterprise Edition. Nota: Esta vulnerabilidad se aplica a implementaciones de Java, generalmente en clientes que ejecutan aplicaciones Java Web Start en espacio aislado o subprogramas de Java en espacio aislado, que cargan y ejecutan código que no es de confianza (por ejemplo, código que proviene de Internet) y dependen del entorno limitado de Java para su seguridad. Esta vulnerabilidad no se aplica a implementaciones de Java, normalmente en servidores, que cargan y ejecutan sólo código confiable (por ejemplo, código instalado por un administrador). CVSS 3.1 Puntaje base 3.7 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EAC60F95-C4B1-49E6-864A-DF5212E7A63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4791BBB5-C094-45B6-A3A8-E96D3BF97DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:22.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E4B331E5-74F5-411E-B997-7038A1DA445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update351:*:*:*:*:*:*",
            "matchCriteriaId" : "82D69EF4-FD0E-4A5C-ADEB-03AFED98879D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FA7A70-D820-49AA-942A-5F32A3219B53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:17.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458526BC-62D5-4A0A-9313-ECC4B070B281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:19.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B07512-B002-4A41-BC6A-4D32EA9D52EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update351:*:*:*:*:*:*",
            "matchCriteriaId" : "08BB9726-C876-4B48-A0AC-72B1B6B09A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:11.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695E3ADB-39EB-4EAC-B37F-F9200EADE08A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:17.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7CB68CC-9541-4236-9715-BC2DE256CC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:19.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A065785-60AF-4CDB-83C5-B35624706344"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:6.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C21354-003A-4BEC-8641-9BF2BD1D04F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:7.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F84DE8-7A9F-444A-A73F-9022C11EDCA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:8.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9894F71-FE59-42D8-BD29-7269034328C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:11.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47BECB1-5502-490C-8BF1-E4F673802228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:13.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BC1D121-AD8E-41F9-A4EA-26889ADDF0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:15.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDAAB21D-17E7-4FF5-B31C-BFD7EBF6505B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:17.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04C2FA3F-7CAC-45E2-B2ED-FA6C98884C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azul:zulu:19.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD5B562-AB32-477D-B46D-F3E41A43A809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202401-25",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202401-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21844",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.787",
      "lastModified" : "2024-11-21T07:43:45.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search).  Supported versions that are affected are 8.59 and  8.60. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as  unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft (componente: Elastic Search). Las versiones compatibles que se ven afectadas son 8.59 y 8.60. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red a través de HTTP comprometer PeopleSoft Enterprise PeopleTools. Los ataques exitosos requieren la interacción humana de una persona distinta del atacante y, si bien la vulnerabilidad está en PeopleSoft Enterprise PeopleTools, los ataques pueden afectar significativamente a productos adicionales (cambio de alcance). Los ataques exitosos a esta vulnerabilidad pueden resultar en acceso no autorizado a actualizaciones, inserción o eliminación de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.1 Puntaje base 5.4 (Impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AF00C6-B97F-414D-A8DF-057E6BFD8597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF191D4F-3D54-4525-AAF5-B70D3FD2F818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21845",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.857",
      "lastModified" : "2024-11-21T07:43:46.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor).   The supported version that is affected is 8.60. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as  unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft (componente: Panel Processor). La versión soportada afectada es la 8.60. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red a través de HTTP comprometer PeopleSoft Enterprise PeopleTools. Los ataques exitosos a esta vulnerabilidad pueden resultar en acceso no autorizado a actualizaciones, inserción o eliminación de algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools. CVSS 3.1 Puntaje base 5.4 (Impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF191D4F-3D54-4525-AAF5-B70D3FD2F818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21846",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.920",
      "lastModified" : "2024-11-21T07:43:46.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security).  Supported versions that are affected are 5.9.0.0.0, 6.4.0.0.0 and  12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle BI Publisher.  Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle BI Publisher de Oracle Fusion Middleware (componente: Seguridad). Las versiones compatibles que se ven afectadas son 5.9.0.0.0, 6.4.0.0.0 y 12.2.1.4.0. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios y acceso a la red a través de múltiples protocolos comprometa Oracle BI Publisher. Los ataques exitosos a esta vulnerabilidad pueden resultar en la adquisición de Oracle BI Publisher. CVSS 3.1 Puntuación base 8,8 (impactos en la confidencialidad, la integridad y la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:5.9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6994E747-7D03-4689-8FF7-DD44F4529213"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:6.4.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6CEFA51-E2C5-4F07-952D-F8F46C928092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274A0CF5-41E8-42E0-9931-F7372A65B9C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21847",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:13.983",
      "lastModified" : "2024-11-21T07:43:46.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Download).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Web Applications Desktop Integrator, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Web Applications Desktop Integrator accessible data as well as  unauthorized read access to a subset of Oracle Web Applications Desktop Integrator accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Web Applications Desktop Integrator de Oracle E-Business Suite (componente: Descarga). Las versiones compatibles que se ven afectadas son 12.2.3-12.2.12. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red a través de HTTP comprometer Oracle Web Applications Desktop Integrator. Los ataques exitosos requieren la interacción humana de una persona distinta del atacante y, si bien la vulnerabilidad está en Oracle Web Applications Desktop Integrator, los ataques pueden afectar significativamente a productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a actualizaciones, inserción o eliminación de algunos de los datos accesibles de Oracle Web Applications Desktop Integrator, así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Web Applications Desktop Integrator. CVSS 3.1 Puntaje base 5.4 (Impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.12",
            "matchCriteriaId" : "A83DB7D1-1B29-4FFB-B11B-4BC0915AAB6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21848",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.050",
      "lastModified" : "2024-11-21T07:43:46.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications (component: Admin Configuration).   The supported version that is affected is 3.0.3.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Convergence.  Successful attacks of this vulnerability can result in takeover of Oracle Communications Convergence. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Communications Convergence de Oracle Communications Applications (componente: Configuración de administrador). La versión compatible afectada es 3.0.3.1.0. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red a través de HTTP comprometer Oracle Communications Convergence. Los ataques exitosos a esta vulnerabilidad pueden resultar en la adquisición de Oracle Communications Convergence. CVSS 3.1 Puntuación base 8,8 (impactos en la confidencialidad, la integridad y la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_convergence:3.0.3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB671D0A-D3CF-48D6-A453-83CB76274BD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21849",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.123",
      "lastModified" : "2024-11-21T07:43:46.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications DBA.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Applications DBA accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Applications DBA de Oracle E-Business Suite (componente: Java utils). Las versiones compatibles que se ven afectadas son 12.2.3-12.2.12. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de HTTP comprometer el DBA de aplicaciones Oracle. Los ataques exitosos de esta vulnerabilidad pueden resultar en un acceso no autorizado a la creación, eliminación o modificación de datos críticos o de todos los datos accesibles de Oracle Applications DBA. CVSS 3.1 Puntaje base 7.5 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.12",
            "matchCriteriaId" : "A83DB7D1-1B29-4FFB-B11B-4BC0915AAB6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21850",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.190",
      "lastModified" : "2024-11-21T07:43:46.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: E-Business Collections).  Supported versions that are affected are 12.1 and  12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Demantra Demand Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Demantra Demand Management accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Demantra Demand Management de Oracle Supply Chain (componente: E-Business Collections). Las versiones compatibles que se ven afectadas son 12.1 y 12.2. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de HTTP comprometa Oracle Demantra Demand Management. Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Demantra Demand Management. CVSS 3.1 Puntaje base 7.5 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:demantra_demand_management:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B4C301B-F0B7-44D5-AE7D-FFCDA629B8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:demantra_demand_management:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13FBBB2-8D98-4818-B5A0-6B40469EF9EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21851",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.257",
      "lastModified" : "2024-11-21T07:43:46.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Marketing accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Marketing de Oracle E-Business Suite (componente: Administración de Marketing). Las versiones compatibles que se ven afectadas son 12.2.3-12.2.12. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de HTTP comprometa Oracle Marketing. Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Marketing. CVSS 3.1 Puntaje base 7.5 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.12",
            "matchCriteriaId" : "FF0A856C-36C3-4DB2-83A4-2438ED3825DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21852",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.320",
      "lastModified" : "2024-11-21T07:43:46.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Setup).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Learning Management.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Learning Management accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Learning Management de Oracle E-Business Suite (componente: Configuración). Las versiones compatibles que se ven afectadas son 12.2.3-12.2.12. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de HTTP comprometa Oracle Learning Management. Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Learning Management. CVSS 3.1 Puntaje base 7.5 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:learning_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.12",
            "matchCriteriaId" : "B388EA02-7B89-45F1-9D65-34BFCF1BD375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21853",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.387",
      "lastModified" : "2024-11-21T07:43:46.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Synchronization).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Field Service.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Mobile Field Service accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Mobile Field Service de Oracle E-Business Suite (componente: Sincronización). Las versiones compatibles que se ven afectadas son 12.2.3-12.2.12. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de HTTP comprometa Oracle Mobile Field Service. Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Mobile Field Service. CVSS 3.1 Puntaje base 7.5 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mobile_field_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.12",
            "matchCriteriaId" : "4AB519BA-28E6-471B-8B38-F7A2C6F32832"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21854",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.447",
      "lastModified" : "2024-11-21T07:43:47.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Core Components).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Sales Offline.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Sales Offline accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Sales Offline de Oracle E-Business Suite (componente: Core Components). Las versiones compatibles que se ven afectadas son 12.2.3-12.2.12. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de HTTP comprometa Oracle Sales Offline. Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Sales Offline. CVSS 3.1 Puntaje base 7.5 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sales_offline:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.12",
            "matchCriteriaId" : "5A5FFF2E-D1BC-4CD6-A1C2-F2933F6EDCAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21855",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.513",
      "lastModified" : "2024-11-21T07:43:47.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Pocket Outlook Sync(PocketPC)).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Sales for Handhelds.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Sales for Handhelds accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Sales for Handhelds de Oracle E-Business Suite (componente: Pocket Outlook Sync(PocketPC)). Las versiones compatibles que se ven afectadas son 12.2.3-12.2.12. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de HTTP comprometa Oracle Sales for Handhelds. Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Sales for Handhelds. CVSS 3.1 Puntaje base 7.5 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sales_for_handhelds:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.12",
            "matchCriteriaId" : "102ECE38-2688-4ABF-9ABC-A6763738EB46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21856",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.573",
      "lastModified" : "2024-11-21T07:43:47.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSetup.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle iSetup accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle iSetup de Oracle E-Business Suite (componente: General Ledger Update Transform, Reports). Las versiones compatibles que se ven afectadas son 12.2.3-12.2.12. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de HTTP comprometa Oracle iSetup. Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle iSetup. CVSS 3.1 Puntaje base 7.5 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isetup:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.12",
            "matchCriteriaId" : "61E79190-BC5A-44CA-B410-49AB8E80BFAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21857",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.637",
      "lastModified" : "2024-11-21T07:43:47.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Auomated Test Suite).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HCM Common Architecture.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle HCM Common Architecture accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle HCM Common Architecture de Oracle E-Business Suite (componente: Auomated Test Suite). Las versiones compatibles que se ven afectadas son 12.2.3-12.2.12. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de HTTP comprometa la arquitectura común de Oracle HCM. Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle HCM Common Architecture. CVSS 3.1 Puntaje base 7.5 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hcm_common_architecture:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.12",
            "matchCriteriaId" : "8037FE10-F4D2-4559-AB30-5AE76142897C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21858",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.703",
      "lastModified" : "2024-11-21T07:43:47.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Collaborative Planning product of Oracle E-Business Suite (component: Installation).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Collaborative Planning.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Collaborative Planning accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Collaborative Planning de Oracle E-Business Suite (componente: Instalación). Las versiones compatibles que se ven afectadas son 12.2.3-12.2.12. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de HTTP comprometa Oracle Collaborative Planning. Los ataques exitosos de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Collaborative Planning. CVSS 3.1 Puntaje base 7.5 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:collaborative_planning:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.12",
            "matchCriteriaId" : "FC375FBD-D44F-4808-969B-A96BA4782D1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21859",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.770",
      "lastModified" : "2024-11-21T07:43:47.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).   The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Access Manager executes to compromise Oracle Access Manager.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Access Manager de Oracle Fusion Middleware (componente: motor de autenticación). La versión compatible afectada es 12.2.1.4.0. Una vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios iniciar sesión en la infraestructura donde se ejecuta Oracle Access Manager para comprometer Oracle Access Manager. Los ataques exitosos a esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Access Manager. CVSS 3.1 Puntaje base 4.4 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:access_manager:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EB3430-0FF2-4668-BB20-A5611ACC73F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21861",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.833",
      "lastModified" : "2024-11-21T07:43:47.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer).  Supported versions that are affected are 5.9.0.0.0 and  6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Business Intelligence Enterprise Edition de Oracle Fusion Middleware (componente: Visual Analyzer). Las versiones compatibles que se ven afectadas son 5.9.0.0.0 y 6.4.0.0.0. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red a través de HTTP comprometer Oracle Business Intelligence Enterprise Edition. Los ataques exitosos requieren la interacción humana de una persona distinta del atacante y, si bien la vulnerabilidad está en Oracle Business Intelligence Enterprise Edition, los ataques pueden afectar significativamente a productos adicionales (cambio de alcance). Los ataques exitosos a esta vulnerabilidad pueden resultar en acceso no autorizado a actualizaciones, inserción o eliminación de algunos de los datos accesibles de Oracle Business Intelligence Enterprise Edition, así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Puntaje base 5.4 (Impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B602F9E8-1580-436C-A26D-6E6F8121A583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:6.4.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EDBC994D-3FE6-4DEF-AE5C-26D2E3AD45BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21862",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.897",
      "lastModified" : "2024-11-21T07:43:48.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: XML Security component).   The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Services Manager.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Web Services Manager accessible data as well as  unauthorized access to critical data or complete access to all Oracle Web Services Manager accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Web Services Manager de Oracle Fusion Middleware (componente: componente de seguridad XML). La versión compatible afectada es 12.2.1.4.0. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de HTTP comprometa Oracle Web Services Manager. Los ataques exitosos requieren la interacción humana de una persona distinta del atacante. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a la creación, eliminación o modificación de datos críticos o a todos los datos accesibles de Oracle Web Services Manager, así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Web Services Manager. CVSS 3.1 Puntaje base 8.1 (Impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:web_services_manager:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403EBE54-91A6-4C53-B448-79DB5FBF2071"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21863",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:14.967",
      "lastModified" : "2024-11-21T07:43:48.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "A17A50C3-66AA-4168-8D7D-7F3295B231BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21864",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.033",
      "lastModified" : "2024-11-21T07:43:48.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.30 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.30",
            "matchCriteriaId" : "BDC48919-7050-4D73-87AF-C467E93ECA61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21865",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.093",
      "lastModified" : "2024-11-21T07:43:48.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.30 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.30",
            "matchCriteriaId" : "BDC48919-7050-4D73-87AF-C467E93ECA61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21866",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.160",
      "lastModified" : "2024-11-21T07:43:48.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.28 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.28",
            "matchCriteriaId" : "3D713546-8144-491B-B3D9-FBE437E4A442"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21867",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.227",
      "lastModified" : "2024-11-21T07:43:48.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "A17A50C3-66AA-4168-8D7D-7F3295B231BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21868",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.290",
      "lastModified" : "2024-11-21T07:43:48.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con pocos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntaje base 6.5 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "A17A50C3-66AA-4168-8D7D-7F3295B231BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21869",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.357",
      "lastModified" : "2024-11-21T07:43:48.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as  unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: InnoDB). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar un bloqueo o un bloqueo frecuente (DOS completo) del servidor MySQL, así como una actualización, inserción o eliminación no autorizada del acceso a algunos de los datos accesibles del servidor MySQL. CVSS 3.1 Puntaje base 5.5 (impactos en integridad y disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "A17A50C3-66AA-4168-8D7D-7F3295B231BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21870",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.420",
      "lastModified" : "2024-11-21T07:43:48.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "A17A50C3-66AA-4168-8D7D-7F3295B231BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21871",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.487",
      "lastModified" : "2024-11-21T07:43:49.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: InnoDB). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "A17A50C3-66AA-4168-8D7D-7F3295B231BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21872",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.567",
      "lastModified" : "2024-11-21T07:43:49.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as  unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.29 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar un bloqueo o un bloqueo frecuente (DOS completo) del servidor MySQL, así como una actualización, inserción o eliminación no autorizada del acceso a algunos de los datos accesibles del servidor MySQL. CVSS 3.1 Puntaje base 5.5 (impactos en integridad y disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.29",
            "matchCriteriaId" : "40603932-7E9F-4D7F-8206-7D2819EE0586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21873",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.633",
      "lastModified" : "2024-11-21T07:43:49.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "A17A50C3-66AA-4168-8D7D-7F3295B231BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21874",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.697",
      "lastModified" : "2024-11-21T07:43:49.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling).  Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Thread Pooling). Las versiones compatibles que se ven afectadas son la 8.0.30 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para causar una denegación de servicio parcial (DOS parcial) de MySQL Server. CVSS 3.1 Puntuación base 2.7 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.30",
            "matchCriteriaId" : "BDC48919-7050-4D73-87AF-C467E93ECA61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21875",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.763",
      "lastModified" : "2024-11-21T07:43:49.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).  Supported versions that are affected are 8.0.31 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Seguridad: Cifrado). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad difícil de explotar permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a la creación, eliminación o modificación de datos críticos o a todos los datos accesibles del servidor MySQL y la capacidad no autorizada de causar un bloqueo o falla frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntaje base 5.9 (impactos en integridad y disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "3BC9BB67-519D-4F2D-8E50-BB58B08824A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21876",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.833",
      "lastModified" : "2024-11-21T07:43:49.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "3BC9BB67-519D-4F2D-8E50-BB58B08824A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21877",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.897",
      "lastModified" : "2024-11-21T07:43:49.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as  unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: InnoDB). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar un bloqueo o un bloqueo frecuente (DOS completo) del servidor MySQL, así como una actualización, inserción o eliminación no autorizada del acceso a algunos de los datos accesibles del servidor MySQL. CVSS 3.1 Puntaje base 5.5 (impactos en integridad y disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "3BC9BB67-519D-4F2D-8E50-BB58B08824A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21878",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:15.960",
      "lastModified" : "2024-11-21T07:43:49.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "3BC9BB67-519D-4F2D-8E50-BB58B08824A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21879",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:16.023",
      "lastModified" : "2024-11-21T07:43:50.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "3BC9BB67-519D-4F2D-8E50-BB58B08824A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21880",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:16.090",
      "lastModified" : "2024-11-21T07:43:50.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as  unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: InnoDB). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar un bloqueo o un bloqueo frecuente (DOS completo) del servidor MySQL, así como una actualización, inserción o eliminación no autorizada del acceso a algunos de los datos accesibles del servidor MySQL. CVSS 3.1 Puntaje base 5.5 (impactos en integridad y disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "59650471-4F84-46CD-981F-2918B3709E26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21881",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:16.153",
      "lastModified" : "2024-11-21T07:43:50.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "59650471-4F84-46CD-981F-2918B3709E26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21882",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:16.217",
      "lastModified" : "2024-11-21T07:43:50.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en actualizaciones no autorizadas, inserción o eliminación del acceso a algunos de los datos accesibles del servidor MySQL. CVSS 3.1 Puntaje base 2.7 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "59650471-4F84-46CD-981F-2918B3709E26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21883",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:16.287",
      "lastModified" : "2024-11-21T07:43:50.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "59650471-4F84-46CD-981F-2918B3709E26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21884",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:16.353",
      "lastModified" : "2024-11-21T07:43:50.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.42 and  prior to 7.0.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.4 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Las versiones compatibles que se ven afectadas son anteriores a 6.1.42 y anteriores a 7.0.6. Una vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios iniciar sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox para comprometer Oracle VM VirtualBox. Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) de Oracle VM VirtualBox. CVSS 3.1 Puntuación base 4.4 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.42",
            "matchCriteriaId" : "A7EB2822-F654-441B-831B-DD91E4DC4BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.6",
            "matchCriteriaId" : "360D9A65-4974-4CA9-AED7-A619D9EB871D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202310-07",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21885",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:16.417",
      "lastModified" : "2024-11-21T07:43:50.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.42 and  prior to 7.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle VM VirtualBox accessible data. Note: Applies to Windows only. CVSS 3.1 Base Score 3.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Las versiones compatibles que se ven afectadas son anteriores a 6.1.42 y anteriores a 7.0.6. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios iniciar sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox para comprometer Oracle VM VirtualBox. Si bien la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle VM VirtualBox. Nota: Se aplica únicamente a Windows. CVSS 3.1 Puntaje base 3.8 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.42",
            "matchCriteriaId" : "A7EB2822-F654-441B-831B-DD91E4DC4BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.6",
            "matchCriteriaId" : "360D9A65-4974-4CA9-AED7-A619D9EB871D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202310-07",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21886",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:16.487",
      "lastModified" : "2024-11-21T07:43:50.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.42 and  prior to 7.0.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle VM VirtualBox.  Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Las versiones compatibles que se ven afectadas son anteriores a 6.1.42 y anteriores a 7.0.6. Una vulnerabilidad difícil de explotar permite que un atacante no autenticado con acceso a la red a través de múltiples protocolos comprometa Oracle VM VirtualBox. Los ataques exitosos a esta vulnerabilidad pueden resultar en la adquisición de Oracle VM VirtualBox. CVSS 3.1 Puntuación base 8.1 (impactos en la confidencialidad, la integridad y la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.42",
            "matchCriteriaId" : "A7EB2822-F654-441B-831B-DD91E4DC4BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.6",
            "matchCriteriaId" : "360D9A65-4974-4CA9-AED7-A619D9EB871D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202310-07",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21887",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:16.557",
      "lastModified" : "2024-11-21T07:43:50.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: GIS). Las versiones compatibles que se ven afectadas son la 8.0.31 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "59650471-4F84-46CD-981F-2918B3709E26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21888",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:16.620",
      "lastModified" : "2024-11-21T07:43:51.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering (component: WebUI).  Supported versions that are affected are 18.8.0-18.8.15, 19.12.0-19.12.15, 20.12.0-20.12.10 and  21.12.0-21.12.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Gateway.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Gateway, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Primavera Gateway accessible data as well as  unauthorized read access to a subset of Primavera Gateway accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Primavera Gateway de Oracle Construction and Engineering (componente: WebUI). Las versiones compatibles que se ven afectadas son 18.8.0-18.8.15, 19.12.0-19.12.15, 20.12.0-20.12.10 y 21.12.0-21.12.8. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red a través de HTTP comprometer Primavera Gateway. Los ataques exitosos requieren la interacción humana de una persona distinta del atacante y, mientras la vulnerabilidad esté en Primavera Gateway, los ataques pueden afectar significativamente a productos adicionales (cambio de alcance). Los ataques exitosos a esta vulnerabilidad pueden resultar en acceso no autorizado a actualizaciones, inserción o eliminación de algunos de los datos accesibles de Primavera Gateway, así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Primavera Gateway. CVSS 3.1 Puntaje base 5.4 (Impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndIncluding" : "18.8.15",
            "matchCriteriaId" : "B64EF8FD-777A-4C8D-A6A6-A62DF37366D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.12.0",
            "versionEndIncluding" : "19.12.15",
            "matchCriteriaId" : "26262B39-3F8B-48B2-A2D0-82FD31B83C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.12.0",
            "versionEndIncluding" : "20.12.10",
            "matchCriteriaId" : "EC665F36-EE58-4065-8601-8F45E2C96967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.12.0",
            "versionEndIncluding" : "21.12.8",
            "matchCriteriaId" : "13B6E097-ADF3-4083-B1E1-EE628CD2D80B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21889",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:16.687",
      "lastModified" : "2024-11-21T07:43:51.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.42 and  prior to 7.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Las versiones compatibles que se ven afectadas son anteriores a 6.1.42 y anteriores a 7.0.6. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios iniciar sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox para comprometer Oracle VM VirtualBox. Si bien la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle VM VirtualBox. CVSS 3.1 Puntaje base 3.8 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.42",
            "matchCriteriaId" : "A7EB2822-F654-441B-831B-DD91E4DC4BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.6",
            "matchCriteriaId" : "360D9A65-4974-4CA9-AED7-A619D9EB871D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202310-07",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21890",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:16.750",
      "lastModified" : "2024-11-21T07:43:51.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core).  Supported versions that are affected are 7.1.0 and  8.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via UDP to compromise Oracle Communications Converged Application Server.  Successful attacks of this vulnerability can result in takeover of Oracle Communications Converged Application Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Communications Converged Application Server de Oracle Communications (componente: Core). Las versiones compatibles que se ven afectadas son 7.1.0 y 8.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de UDP comprometa el servidor de aplicaciones convergentes de Oracle Communications. Los ataques exitosos a esta vulnerabilidad pueden resultar en la adquisición de Oracle Communications Converged Application Server. CVSS 3.1 Puntuación base 9,8 (impactos en la confidencialidad, la integridad y la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_converged_application_server:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB199232-499B-43F9-820A-291A23BFD991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_converged_application_server:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CCDA4FD-70E3-4720-859A-900078431721"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21891",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:16.877",
      "lastModified" : "2024-11-21T07:43:51.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer).  Supported versions that are affected are 5.9.0.0.0 and  6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Business Intelligence Enterprise Edition de Oracle Fusion Middleware (componente: Visual Analyzer). Las versiones compatibles que se ven afectadas son 5.9.0.0.0 y 6.4.0.0.0. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red a través de HTTP comprometer Oracle Business Intelligence Enterprise Edition. Los ataques exitosos requieren la interacción humana de una persona distinta del atacante y, si bien la vulnerabilidad está en Oracle Business Intelligence Enterprise Edition, los ataques pueden afectar significativamente a productos adicionales (cambio de alcance). Los ataques exitosos a esta vulnerabilidad pueden resultar en acceso no autorizado a actualizaciones, inserción o eliminación de algunos de los datos accesibles de Oracle Business Intelligence Enterprise Edition, así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Puntaje base 5.4 (Impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B602F9E8-1580-436C-A26D-6E6F8121A583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:6.4.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EDBC994D-3FE6-4DEF-AE5C-26D2E3AD45BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21892",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:16.993",
      "lastModified" : "2024-11-21T07:43:51.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer).  Supported versions that are affected are 5.9.0.0.0 and  6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Business Intelligence Enterprise Edition de Oracle Fusion Middleware (componente: Visual Analyzer). Las versiones compatibles que se ven afectadas son 5.9.0.0.0 y 6.4.0.0.0. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red a través de HTTP comprometer Oracle Business Intelligence Enterprise Edition. Los ataques exitosos requieren la interacción humana de una persona distinta del atacante y, si bien la vulnerabilidad está en Oracle Business Intelligence Enterprise Edition, los ataques pueden afectar significativamente a productos adicionales (cambio de alcance). Los ataques exitosos a esta vulnerabilidad pueden resultar en acceso no autorizado a actualizaciones, inserción o eliminación de algunos de los datos accesibles de Oracle Business Intelligence Enterprise Edition, así como acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Puntaje base 5.4 (Impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B602F9E8-1580-436C-A26D-6E6F8121A583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:6.4.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EDBC994D-3FE6-4DEF-AE5C-26D2E3AD45BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21893",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:17.057",
      "lastModified" : "2024-11-21T07:43:51.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Data Provider for .NET component of Oracle Database Server.  Supported versions that are affected are 19c and  21c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCPS to compromise Oracle Data Provider for .NET.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Data Provider for .NET. Note: Applies also to Database client-only on Windows platform. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Data Provider para .NET de Oracle Database Server. Las versiones compatibles que se ven afectadas son 19c y 21c. Una vulnerabilidad difícil de explotar permite que un atacante no autenticado con acceso a la red a través de TCPS comprometa el proveedor de datos de Oracle para .NET. Los ataques exitosos requieren la interacción humana de una persona distinta del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en la adquisición de Oracle Data Provider para .NET. Nota: También se aplica al cliente de base de datos únicamente en la plataforma Windows. CVSS 3.1 Puntuación base 7,5 (impactos en la confidencialidad, la integridad y la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:19c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2204841-585F-40C7-A1D9-C34E612808CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:21c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB96A21-161F-42A9-9402-FABEC9C0C15A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21894",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:17.127",
      "lastModified" : "2024-11-21T07:43:51.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Installer issues).  Supported versions that are affected are Prior to 13.9.4.2.11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Global Lifecycle Management NextGen OUI Framework executes to compromise Oracle Global Lifecycle Management NextGen OUI Framework.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Global Lifecycle Management NextGen OUI Framework. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Global Lifecycle Management NextGen OUI Framework de Oracle Fusion Middleware (componente: problemas del instalador NextGen). Las versiones compatibles que se ven afectadas son anteriores a 13.9.4.2.11. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios iniciar sesión en la infraestructura donde se ejecuta Oracle Global Lifecycle Management NextGen OUI Framework para comprometer Oracle Global Lifecycle Management NextGen OUI Framework. Los ataques exitosos requieren la interacción humana de una persona distinta del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en la adquisición de Oracle Global Lifecycle Management NextGen OUI Framework. CVSS 3.1 Puntuación base 7.3 (impactos en la confidencialidad, la integridad y la disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:global_lifecycle_management_nextgen_oui_framework:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.9.4.2.11",
            "matchCriteriaId" : "9704ED03-C246-4F3C-89F3-8FC7876A1080"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21898",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:17.190",
      "lastModified" : "2024-11-21T07:43:51.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.42 and  prior to 7.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. Note: Applies to VirtualBox VMs running Windows 7 and later. CVSS 3.1 Base Score 5.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Las versiones compatibles que se ven afectadas son anteriores a 6.1.42 y anteriores a 7.0.6. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios iniciar sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox para comprometer Oracle VM VirtualBox. Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) de Oracle VM VirtualBox. Nota: Se aplica a máquinas virtuales VirtualBox que ejecutan Windows 7 y versiones posteriores. CVSS 3.1 Puntuación base 5.5 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.42",
            "matchCriteriaId" : "A7EB2822-F654-441B-831B-DD91E4DC4BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.6",
            "matchCriteriaId" : "360D9A65-4974-4CA9-AED7-A619D9EB871D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202310-07",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21899",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:17.253",
      "lastModified" : "2024-11-21T07:43:52.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.42 and  prior to 7.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. Note: Applies to VirtualBox VMs running Windows 7 and later. CVSS 3.1 Base Score 5.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Las versiones compatibles que se ven afectadas son anteriores a 6.1.42 y anteriores a 7.0.6. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios iniciar sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox para comprometer Oracle VM VirtualBox. Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar un bloqueo o un fallo frecuentemente repetible (DOS completo) de Oracle VM VirtualBox. Nota: Se aplica a máquinas virtuales VirtualBox que ejecutan Windows 7 y versiones posteriores. CVSS 3.1 Puntuación base 5.5 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.42",
            "matchCriteriaId" : "A7EB2822-F654-441B-831B-DD91E4DC4BFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.6",
            "matchCriteriaId" : "360D9A65-4974-4CA9-AED7-A619D9EB871D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202310-07",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21900",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T00:15:17.317",
      "lastModified" : "2024-11-21T07:43:52.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch).  Supported versions that are affected are 10 and  11. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle Solaris.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Solaris, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Solaris. CVSS 3.1 Base Score 4.0 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Solaris de Oracle Systems (componente: NSSwitch). Las versiones compatibles que se ven afectadas son 10 y 11. Una vulnerabilidad difícil de explotar permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa Oracle Solaris. Los ataques exitosos requieren la interacción humana de una persona distinta del atacante y, si bien la vulnerabilidad está en Oracle Solaris, los ataques pueden afectar significativamente a productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en actualizaciones no autorizadas, inserción o eliminación de acceso a algunos de los datos accesibles de Oracle Solaris y la capacidad no autorizada de causar una denegación parcial de servicio (DOS parcial) de Oracle Solaris. CVSS 3.1 Puntaje base 4.0 (impactos en integridad y disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22498",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-18T00:15:17.387",
      "lastModified" : "2023-11-07T04:07:02.000",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21860",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-01-18T01:15:13.263",
      "lastModified" : "2024-11-21T07:43:47.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: Internal Operations).  Supported versions that are affected are 7.4.38 and prior, 7.5.28 and prior, 7.6.24 and prior and  8.0.31 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Cluster de Oracle MySQL (componente: Cluster: Operaciones Internas). Las versiones compatibles que se ven afectadas son 7.4.38 y anteriores, 7.5.28 y anteriores, 7.6.24 y anteriores y 8.0.31 y anteriores. Una vulnerabilidad difícil de explotar permite que un atacante con altos privilegios tenga acceso al segmento de comunicación física conectado al hardware donde se ejecuta MySQL Cluster para comprometer MySQL Cluster. Los ataques exitosos requieren la interacción humana de una persona distinta del atacante. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de MySQL Cluster. CVSS 3.1 Puntuación base 6.3 (impactos en la confidencialidad, la integridad y la disponibilidad). Vector CVSS: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.4,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.4,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndIncluding" : "7.4.38",
            "matchCriteriaId" : "EAB50995-0099-47D2-A76D-29B64369FACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.5.0",
            "versionEndIncluding" : "7.5.28",
            "matchCriteriaId" : "42531C4C-FB22-45B8-8188-170AA15EB626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndIncluding" : "7.6.24",
            "matchCriteriaId" : "2BC02D0B-E37B-40FB-936D-F8071B4ABEE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "3B295719-BB7A-4A37-83C1-8F440E0D3E38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0358",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-18T02:15:52.680",
      "lastModified" : "2024-11-21T07:37:02.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV."
      }, {
        "lang" : "es",
        "value" : "Use After Free en el repositorio de GitHub gpac/gpac anterior a 2.3.0-DEV."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "46EDD964-D166-4879-8E48-CF3AC00AF840"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/9971fb125cf91cefd081a080c417b90bbe4a467b",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/93e128ed-253f-4c42-81ff-fbac7fd8f355",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/9971fb125cf91cefd081a080c417b90bbe4a467b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/93e128ed-253f-4c42-81ff-fbac7fd8f355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0214",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2023-01-18T11:15:10.450",
      "lastModified" : "2024-11-21T07:36:45.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior to 11.2.6, 10.x prior to 10.2.17, and controlled release 12.x prior to 12.0.1 allows a remote attacker to craft SWG-specific internal requests with URL paths to any third-party website, causing arbitrary content to be injected into the response when accessed through SWG.\n\n"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross site scripting en Skyhigh SWG en las versiones principales desde la 11.x a la 11.2.6, 10.x a la 10.2.17 y la versión controlada 12.x a la 12.0.1 permite a un atacante remoto crear solicitudes internas SWG con rutas URL a cualquier sitio web de terceros, lo que provoca que se inyecte contenido arbitrario en la respuesta cuando se accede a través de SWG."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trellix:skyhigh_secure_web_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.2.17",
            "matchCriteriaId" : "6FB99F4A-1462-4F6A-961B-03A95E467A3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trellix:skyhigh_secure_web_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.2.6",
            "matchCriteriaId" : "4488FDBC-6521-42BE-AC38-7B8030835525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trellix:skyhigh_secure_web_gateway:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52ABF6E4-6DF0-4C89-8E27-68E62F720594"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kcm.trellix.com/corporate/index?page=content&id=SB10393",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kcm.trellix.com/corporate/index?page=content&id=SB10393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0385",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-18T15:15:11.467",
      "lastModified" : "2026-04-08T18:17:42.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Custom 404 Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.7.1. This is due to missing or incorrect nonce validation on the custom_404_pro_admin_init function. This makes it possible for unauthenticated attackers to delete logs, via forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El complemento Custom 404 Pro para WordPress es vulnerable a Cross Site Request Forgery en versiones hasta la 3.7.1, inclusive. Esto se debe a una validación nonce faltante o incorrecta en la función custom_404_pro_admin_init. Esto hace posible que atacantes no autenticados eliminen registros; a través de una solicitud falsificada, pueden engañar al administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kunalnagar:custom_404_pro:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.7.2",
            "matchCriteriaId" : "D7D265AA-E0FB-4E9F-87B3-A3B5671CEEFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/custom-404-pro/tags/3.7.1/admin/AdminClass.php#L114",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/968920b9-febf-4d76-a16b-f27954cd72e5?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/custom-404-pro/tags/3.7.1/admin/AdminClass.php#L114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/968920b9-febf-4d76-a16b-f27954cd72e5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-18T17:15:10.353",
      "lastModified" : "2025-04-04T16:15:16.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \"--\" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value."
      }, {
        "lang" : "es",
        "value" : "En Sudo anterior a 1.9.12p2, la función sudoedit (también conocida como -e) maneja mal argumentos adicionales pasados en las variables de entorno proporcionadas por el usuario (SUDO_EDITOR, VISUAL y EDITOR), permitiendo a un atacante local agregar entradas arbitrarias a la lista de archivos para procesar. . Esto puede conducir a una escalada de privilegios. Las versiones afectadas son 1.8.0 a 1.9.12.p1. El problema existe porque un editor especificado por el usuario puede contener un argumento \"--\" que anula un mecanismo de protección, por ejemplo, un valor EDITOR='vim -- /path/to/extra/file'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "1.9.12",
            "matchCriteriaId" : "E76D2160-BE9D-4C9E-B2AB-B52B3C84DAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:1.9.12:-:*:*:*:*:*:*",
            "matchCriteriaId" : "30B5DA3F-091D-4627-A5C0-2D1487A378B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:1.9.12:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "F30DC131-EACB-47C6-B6B7-FCB78DDBD059"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.4",
            "matchCriteriaId" : "ADD1755A-5CD2-4EED-8C6C-4729FADFA3F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171644/sudo-1.9.12p1-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172509/Sudoedit-Extra-Arguments-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/174234/Cisco-ThousandEyes-Enterprise-Agent-Virtual-Appliance-Arbitrary-File-Modification.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Aug/21",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/01/19/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2QDGFCGAV5QRJCE6IXRXIS4XJHS57DDH/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4YNBTTKTRT2ME3NTSXAPTOKYUE47XHZ/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230127-0015/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT213758",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sudo.ws/security/advisories/sudoedit_any/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.synacktiv.com/sites/default/files/2023-01/sudo-CVE-2023-22809.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171644/sudo-1.9.12p1-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172509/Sudoedit-Extra-Arguments-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/174234/Cisco-ThousandEyes-Enterprise-Agent-Virtual-Appliance-Arbitrary-File-Modification.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Aug/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/01/19/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2QDGFCGAV5QRJCE6IXRXIS4XJHS57DDH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4YNBTTKTRT2ME3NTSXAPTOKYUE47XHZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230127-0015/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT213758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sudo.ws/security/advisories/sudoedit_any/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.synacktiv.com/sites/default/files/2023-01/sudo-CVE-2023-22809.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21601",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T18:15:10.647",
      "lastModified" : "2024-11-21T07:43:09.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.6 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Dimension versión 3.4.6 (y anteriores) se ve afectado por una vulnerabilidad Use After Free que podría provocar la divulgación de memoria confidencial. Un atacante podría aprovechar esta vulnerabilidad para evitar mitigaciones como ASLR. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.6",
            "matchCriteriaId" : "408CC583-8B2D-48EE-92FF-07D63107723E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21603",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T18:15:10.780",
      "lastModified" : "2024-11-21T07:43:09.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Dimension versión 3.4.6 (y anteriores) se ve afectado por una vulnerabilidad de lectura fuera de los límites que podría provocar la divulgación de memoria confidencial. Un atacante podría aprovechar esta vulnerabilidad para evitar mitigaciones como ASLR. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.6",
            "matchCriteriaId" : "408CC583-8B2D-48EE-92FF-07D63107723E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0040",
      "sourceIdentifier" : "cve@forums.swift.org",
      "published" : "2023-01-18T19:15:11.163",
      "lastModified" : "2025-04-03T20:15:19.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of Async HTTP Client prior to 1.13.2 are vulnerable to a form of targeted request manipulation called CRLF injection. This vulnerability was the result of insufficient validation of HTTP header field values before sending them to the network. Users are vulnerable if they pass untrusted data into HTTP header field values without prior sanitisation. Common use-cases here might be to place usernames from a database into HTTP header fields. This vulnerability allows attackers to inject new HTTP header fields, or entirely new requests, into the data stream. This can cause requests to be understood very differently by the remote server than was intended. In general, this is unlikely to result in data disclosure, but it can result in a number of logical errors and other misbehaviours."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Async HTTP Client anteriores a la 1.13.2 son vulnerables a una forma de manipulación de solicitudes dirigida llamada inyección CRLF. Esta vulnerabilidad fue el resultado de una validación insuficiente de los valores de los campos del encabezado HTTP antes de enviarlos a la red. Los usuarios son vulnerables si pasan datos que no son de confianza a valores de campos de encabezado HTTP sin una desinfección previa. Los casos de uso comunes aquí podrían ser colocar nombres de usuario de una base de datos en campos de encabezado HTTP. Esta vulnerabilidad permite a los atacantes inyectar nuevos campos de encabezado HTTP o solicitudes completamente nuevas en el flujo de datos. Esto puede hacer que el servidor remoto comprenda las solicitudes de forma muy diferente a la prevista. En general, es poco probable que esto dé lugar a la divulgación de datos, pero puede dar lugar a una serie de errores lógicos y otras malas conductas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@forums.swift.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asynchttpclient_project:async-http-client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "968BBD5B-F40A-4330-8A08-BA0369081C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asynchttpclient_project:async-http-client:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5.0",
            "versionEndExcluding" : "1.9.1",
            "matchCriteriaId" : "95624139-0F15-4284-BA07-EB80A3D71561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asynchttpclient_project:async-http-client:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.10.0",
            "versionEndExcluding" : "1.12.1",
            "matchCriteriaId" : "0ABE1F7C-D2C4-47B9-ABB5-46EA62D101C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asynchttpclient_project:async-http-client:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndExcluding" : "1.13.2",
            "matchCriteriaId" : "E91AB921-277B-47A5-999E-BD65CBAC0239"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/swift-server/async-http-client/security/advisories/GHSA-v3r5-pjpm-mwgq",
        "source" : "cve@forums.swift.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/swift-server/async-http-client/security/advisories/GHSA-v3r5-pjpm-mwgq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21579",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T19:15:11.240",
      "lastModified" : "2024-11-21T07:43:07.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 22.003.20282 (y anteriores), 22.003.20281 (y anteriores) y 20.005.30418 (y anteriores) se ven afectadas por una vulnerabilidad de desbordamiento de enteros o envolvente que podría provocar la ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "14754E74-395C-4EF7-B0F0-F377AFE9889E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "CB7101F6-21E8-4B8D-84AE-733503EDA65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "AF3A489A-5635-482A-A61F-5734417F8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "A5B5460B-C186-4A90-B28E-EEAC8A154E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "0EA7F4CB-565E-4CAA-BDB7-9B04141D5D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "392735BD-1019-4F4F-B477-64CF254A64AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21581",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T19:15:11.333",
      "lastModified" : "2024-11-21T07:43:07.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 22.003.20282 (y anteriores), 22.003.20281 (y anteriores) y 20.005.30418 (y anteriores) de Adobe Acrobat Reader se ven afectadas por una vulnerabilidad de lectura fuera de los límites que podría provocar la divulgación de memoria confidencial. Un atacante podría aprovechar esta vulnerabilidad para evitar mitigaciones como ASLR. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "14754E74-395C-4EF7-B0F0-F377AFE9889E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "CB7101F6-21E8-4B8D-84AE-733503EDA65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "AF3A489A-5635-482A-A61F-5734417F8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "A5B5460B-C186-4A90-B28E-EEAC8A154E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "0EA7F4CB-565E-4CAA-BDB7-9B04141D5D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "392735BD-1019-4F4F-B477-64CF254A64AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21585",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T19:15:11.423",
      "lastModified" : "2024-11-21T07:43:08.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 22.003.20282 (y anteriores), 22.003.20281 (y anteriores) y 20.005.30418 (y anteriores) de Adobe Acrobat Reader se ven afectadas por una vulnerabilidad de lectura fuera de los límites que podría provocar la divulgación de memoria confidencial. Un atacante podría aprovechar esta vulnerabilidad para evitar mitigaciones como ASLR. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "14754E74-395C-4EF7-B0F0-F377AFE9889E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "CB7101F6-21E8-4B8D-84AE-733503EDA65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "AF3A489A-5635-482A-A61F-5734417F8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "A5B5460B-C186-4A90-B28E-EEAC8A154E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "0EA7F4CB-565E-4CAA-BDB7-9B04141D5D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "392735BD-1019-4F4F-B477-64CF254A64AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21604",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T19:15:11.510",
      "lastModified" : "2024-11-21T07:43:09.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader versiones 22.003.20282  (y anteriores) 22.003.20281 (y anteriores) y 20.005.30418 ( y anteriores) están afectadas por una vulnerabilidad de desbordamiento del búfer en la región Stack de la memoria que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "14754E74-395C-4EF7-B0F0-F377AFE9889E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "CB7101F6-21E8-4B8D-84AE-733503EDA65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "AF3A489A-5635-482A-A61F-5734417F8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "A5B5460B-C186-4A90-B28E-EEAC8A154E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "0EA7F4CB-565E-4CAA-BDB7-9B04141D5D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "392735BD-1019-4F4F-B477-64CF254A64AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21605",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T19:15:11.597",
      "lastModified" : "2024-11-21T07:43:10.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader versión 22.003.20282 (y anteriores), 22.003.20281(y anteriores) y 20.005.30418 (y anteriores) , están afectadas por una vulnerabilidad de desbordamiento del búfer en la región Heap de la memoria que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "14754E74-395C-4EF7-B0F0-F377AFE9889E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "CB7101F6-21E8-4B8D-84AE-733503EDA65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "AF3A489A-5635-482A-A61F-5734417F8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "A5B5460B-C186-4A90-B28E-EEAC8A154E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "0EA7F4CB-565E-4CAA-BDB7-9B04141D5D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "392735BD-1019-4F4F-B477-64CF254A64AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21606",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T19:15:11.683",
      "lastModified" : "2024-11-21T07:43:10.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader  versiones 22.003.20282  (y anteriores) y 22.003.20281  (y anteriores) y 20.005.30418 (y anteriores) están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "14754E74-395C-4EF7-B0F0-F377AFE9889E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "CB7101F6-21E8-4B8D-84AE-733503EDA65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "AF3A489A-5635-482A-A61F-5734417F8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "A5B5460B-C186-4A90-B28E-EEAC8A154E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "0EA7F4CB-565E-4CAA-BDB7-9B04141D5D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "392735BD-1019-4F4F-B477-64CF254A64AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21607",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T19:15:11.770",
      "lastModified" : "2024-11-21T07:43:10.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 22.003.20282 (y anteriores), 22.003.20281 (y anteriores) y 20.005.30418 (y anteriores) se ven afectadas por una vulnerabilidad de validación de entrada incorrecta que podría provocar la ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "14754E74-395C-4EF7-B0F0-F377AFE9889E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "CB7101F6-21E8-4B8D-84AE-733503EDA65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "AF3A489A-5635-482A-A61F-5734417F8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "A5B5460B-C186-4A90-B28E-EEAC8A154E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "0EA7F4CB-565E-4CAA-BDB7-9B04141D5D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "392735BD-1019-4F4F-B477-64CF254A64AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21608",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T19:15:11.877",
      "lastModified" : "2025-10-23T14:51:17.920",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Acrobat Reader 22.003.20282 (y anteriores), 22.003.20281 (y anteriores) y 20.005.30418 (y anteriores) se ven afectadas por una vulnerabilidad Use After Free que podría provocar la ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-10-10",
      "cisaActionDue" : "2023-10-31",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Adobe Acrobat and Reader Use-After-Free Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "14754E74-395C-4EF7-B0F0-F377AFE9889E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "CB7101F6-21E8-4B8D-84AE-733503EDA65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "AF3A489A-5635-482A-A61F-5734417F8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "A5B5460B-C186-4A90-B28E-EEAC8A154E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "0EA7F4CB-565E-4CAA-BDB7-9B04141D5D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "392735BD-1019-4F4F-B477-64CF254A64AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21608",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21609",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T19:15:11.980",
      "lastModified" : "2024-11-21T07:43:10.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader versiones 22.003.20282  (y anteriores) y 22.003.20281  (y anteriores) y 20.005.30418 (y anteriores) están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "14754E74-395C-4EF7-B0F0-F377AFE9889E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "CB7101F6-21E8-4B8D-84AE-733503EDA65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "AF3A489A-5635-482A-A61F-5734417F8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "A5B5460B-C186-4A90-B28E-EEAC8A154E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "0EA7F4CB-565E-4CAA-BDB7-9B04141D5D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "392735BD-1019-4F4F-B477-64CF254A64AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21610",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T19:15:12.070",
      "lastModified" : "2024-11-21T07:43:10.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader versiones 22.003.20282  (y anteriores) 22.003.20281 (y anteriores) y 20.005.30418 ( y anteriores) están afectadas por una vulnerabilidad de desbordamiento del búfer en la región Stack de la memoria que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "14754E74-395C-4EF7-B0F0-F377AFE9889E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "CB7101F6-21E8-4B8D-84AE-733503EDA65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "AF3A489A-5635-482A-A61F-5734417F8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "A5B5460B-C186-4A90-B28E-EEAC8A154E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "0EA7F4CB-565E-4CAA-BDB7-9B04141D5D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "392735BD-1019-4F4F-B477-64CF254A64AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21611",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T19:15:12.157",
      "lastModified" : "2024-11-21T07:43:10.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 22.003.20282 (y anteriores), 22.003.20281 (y anteriores) y 20.005.30418 (y anteriores) de Adobe Acrobat Reader se ven afectadas por una vulnerabilidad de creación de un archivo temporal en un directorio con permisos incorrectos que podría provocar una escalada de privilegios en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-379"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "14754E74-395C-4EF7-B0F0-F377AFE9889E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "CB7101F6-21E8-4B8D-84AE-733503EDA65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "AF3A489A-5635-482A-A61F-5734417F8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "A5B5460B-C186-4A90-B28E-EEAC8A154E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "0EA7F4CB-565E-4CAA-BDB7-9B04141D5D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "392735BD-1019-4F4F-B477-64CF254A64AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21612",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T19:15:12.323",
      "lastModified" : "2024-11-21T07:43:10.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 22.003.20282 (y anteriores), 22.003.20281 (y anteriores) y 20.005.30418 (y anteriores) de Adobe Acrobat Reader se ven afectadas por una vulnerabilidad de creación de un archivo temporal en un directorio con permisos incorrectos que podría provocar una escalada de privilegios en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-379"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "14754E74-395C-4EF7-B0F0-F377AFE9889E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "CB7101F6-21E8-4B8D-84AE-733503EDA65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "AF3A489A-5635-482A-A61F-5734417F8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "A5B5460B-C186-4A90-B28E-EEAC8A154E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "0EA7F4CB-565E-4CAA-BDB7-9B04141D5D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "392735BD-1019-4F4F-B477-64CF254A64AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21613",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T19:15:12.403",
      "lastModified" : "2024-11-21T07:43:11.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 22.003.20282 (y anteriores), 22.003.20281 (y anteriores) y 20.005.30418 (y anteriores) de Adobe Acrobat Reader se ven afectadas por una vulnerabilidad de lectura fuera de los límites que podría provocar la divulgación de memoria confidencial. Un atacante podría aprovechar esta vulnerabilidad para evitar mitigaciones como ASLR. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "14754E74-395C-4EF7-B0F0-F377AFE9889E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "CB7101F6-21E8-4B8D-84AE-733503EDA65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "AF3A489A-5635-482A-A61F-5734417F8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "A5B5460B-C186-4A90-B28E-EEAC8A154E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "0EA7F4CB-565E-4CAA-BDB7-9B04141D5D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "392735BD-1019-4F4F-B477-64CF254A64AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21614",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-18T19:15:12.487",
      "lastModified" : "2024-11-21T07:43:11.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 22.003.20282 (y anteriores), 22.003.20281 (y anteriores) y 20.005.30418 (y anteriores) de Adobe Acrobat Reader se ven afectadas por una vulnerabilidad de lectura fuera de los límites que podría provocar la divulgación de memoria confidencial. Un atacante podría aprovechar esta vulnerabilidad para evitar mitigaciones como ASLR. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "14754E74-395C-4EF7-B0F0-F377AFE9889E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20282",
            "matchCriteriaId" : "CB7101F6-21E8-4B8D-84AE-733503EDA65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "AF3A489A-5635-482A-A61F-5734417F8518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "22.003.20281",
            "matchCriteriaId" : "A5B5460B-C186-4A90-B28E-EEAC8A154E7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "0EA7F4CB-565E-4CAA-BDB7-9B04141D5D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.005.30418",
            "matchCriteriaId" : "392735BD-1019-4F4F-B477-64CF254A64AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22592",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-01-18T19:15:12.573",
      "lastModified" : "2024-11-21T07:45:01.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nIBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.4 could allow a local user to perform unauthorized actions due to insufficient permission settings. IBM X-Force ID: 244073.\n\n"
      }, {
        "lang" : "es",
        "value" : "IBM Robotic Process Automation para Cloud Pak 21.0.1 a 21.0.4 podría permitir que un usuario local realice acciones no autorizadas debido a una configuración de permisos insuficiente. ID de IBM X-Force: 244073."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0.1",
            "versionEndExcluding" : "21.0.5",
            "matchCriteriaId" : "F474D877-57F4-496D-8E69-769DD42445D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:openshift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EB28CE-7C7F-4290-85FE-5E3EBF905CF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244073",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6855839",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6855839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22594",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-01-18T19:15:12.647",
      "lastModified" : "2024-11-21T07:45:01.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  244075."
      }, {
        "lang" : "es",
        "value" : "IBM Robotic Process Automation para Cloud Pak 20.12.0 a 21.0.4 es vulnerable a cross-site scripting. Esta vulnerabilidad permite a los usuarios incrustar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista, lo que podría conducir a la divulgación de credenciales dentro de una sesión confiable. ID de IBM X-Force: 244075."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.0.5",
            "matchCriteriaId" : "15415B7F-CCF3-4587-906E-F8C4DA4EC873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:robotic_process_automation_as_a_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.0.5",
            "matchCriteriaId" : "FD7C2384-44EA-43D6-858A-63B83F9C502B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.0.5",
            "matchCriteriaId" : "3B2CED36-4A9B-4B88-A31F-AF19C6E269F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:openshift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EB28CE-7C7F-4290-85FE-5E3EBF905CF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244075",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6855835",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6855835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22863",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-01-18T19:15:12.803",
      "lastModified" : "2024-11-21T07:45:32.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Robotic Process Automation 20.12.0 through 21.0.2 defaults to HTTP in some RPA commands when the prefix is not explicitly specified in the URL.  This could allow an attacker to obtain sensitive information using man in the middle techniques.  IBM X-Force ID:  244109."
      }, {
        "lang" : "es",
        "value" : "IBM Robotic Process Automation 20.12.0 a 21.0.2 utiliza de forma predeterminada HTTP en algunos comandos RPA cuando el prefijo no se especifica explícitamente en la URL. Esto podría permitir a un atacante obtener información confidencial utilizando técnicas de intermediario. ID de IBM X-Force: 244109."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.0.3",
            "matchCriteriaId" : "DD41B712-3818-4AFA-8A03-64E8B51809F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:robotic_process_automation_as_a_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.0.3",
            "matchCriteriaId" : "D9758FDC-C224-4EB3-8D42-409F4CBE6442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.0.3",
            "matchCriteriaId" : "034C5D78-A9CB-4A27-A2BF-1E7A1EB1318A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:openshift:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EB28CE-7C7F-4290-85FE-5E3EBF905CF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244109",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6855837",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6855837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0242",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-01-18T21:15:11.093",
      "lastModified" : "2025-04-03T20:15:20.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rapid7 Velociraptor allows users to be created with different privileges on the server. Administrators are generally allowed to run any command on the server including writing arbitrary files. However, lower privilege users are generally forbidden from writing or modifying files on the server.\n\nThe VQL copy() function applies permission checks for reading files but does not check for permission to write files. This allows a low privilege user (usually, users with the Velociraptor \"investigator\" role) to overwrite files on the server, including Velociraptor configuration files.\n\nTo exploit this vulnerability, the attacker must already have a Velociraptor user account at a low privilege level (at least \"analyst\") and be able to log into the GUI and create a notebook where they can run the VQL query invoking the copy() VQL function. Typically, most users deploy Velociraptor with limited access to a trusted group (most users will be administrators within the GUI).\nThis vulnerability is associated with program files  https://github.Com/Velocidex/velociraptor/blob/master/vql/filesystem/copy.go https://github.Com/Velocidex/velociraptor/blob/master/vql/filesystem/copy.go  and program routines copy().\n\nThis issue affects Velociraptor versions before 0.6.7-5. Version 0.6.7-5, released January 16, 2023, fixes the issue.\n\n"
      }, {
        "lang" : "es",
        "value" : "Rapid7 Velociraptor permite crear usuarios con diferentes privilegios en el servidor. Por lo general, los administradores pueden ejecutar cualquier comando en el servidor, incluida la escritura de archivos arbitrarios. Sin embargo, los usuarios con privilegios más bajos generalmente tienen prohibido escribir o modificar archivos en el servidor. La función VQL copy() aplica verificaciones de permisos para leer archivos pero no verifica permisos para escribir archivos. Esto permite que un usuario con privilegios bajos (normalmente usuarios con el rol de \"investigador\" de Velociraptor) sobrescriba archivos en el servidor, incluidos los archivos de configuración de Velociraptor. Para explotar esta vulnerabilidad, el atacante ya debe tener una cuenta de usuario de Velociraptor con un nivel de privilegio bajo (al menos \"analista\") y poder iniciar sesión en la GUI y crear un cuaderno donde pueda ejecutar la consulta VQL invocando la copia(). Función VQL. Normalmente, la mayoría de los usuarios implementan Velociraptor con acceso limitado a un grupo confiable (la mayoría de los usuarios serán administradores dentro de la GUI). Esta vulnerabilidad está asociada con archivos de programa https://github.Com/Velocidex/velociraptor/blob/master/vql/filesystem/copy.go https://github.Com/Velocidex/velociraptor/blob/master/vql/filesystem/ copy.go y rutinas de programa copy(). Este problema afecta a las versiones de Velociraptor anteriores a la 0.6.7-5. La versión 0.6.7-5, lanzada el 16 de enero de 2023, soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.7-5",
            "matchCriteriaId" : "2FC8DDF3-9A52-47C0-A21A-F6E026C0D442"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.velociraptor.app/announcements/2023-cves/#:~:text=to%20upgrade%20clients.-,CVE%2D2023%2D0242,-Insufficient%20Permission%20Check",
        "source" : "cve@rapid7.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.velociraptor.app/announcements/2023-cves/#:~:text=to%20upgrade%20clients.-,CVE%2D2023%2D0242,-Insufficient%20Permission%20Check",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0164",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-01-18T22:15:10.597",
      "lastModified" : "2025-04-03T20:15:19.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OrangeScrum version 2.0.11 allows an authenticated external attacker to execute arbitrary commands on the server. This is possible because the application injects an attacker-controlled parameter into a system function."
      }, {
        "lang" : "es",
        "value" : "OrangeScrum versión 2.0.11 permite que un atacante externo autenticado ejecute comandos arbitrarios en el servidor. Esto es posible porque la aplicación inyecta un parámetro controlado por el atacante en una función del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orangescrum:orangescrum:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563467F2-799D-404D-89D2-A6B5B6092614"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/queen/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Orangescrum/orangescrum",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/queen/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Orangescrum/orangescrum",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0290",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-01-18T22:15:10.647",
      "lastModified" : "2025-04-03T20:15:20.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rapid7 Velociraptor did not properly sanitize the client ID parameter to the CreateCollection API, allowing a directory traversal in where the collection task could be written. It was possible to provide a client id of \"../clients/server\" to schedule the collection for the server (as a server artifact), but only require privileges to schedule collections on the client.\n\nNormally, to schedule an artifact on the server, the COLLECT_SERVER permission is required. This permission is normally only granted to \"administrator\" role. Due to this issue, it is sufficient to have the COLLECT_CLIENT privilege, which is normally granted to the \"investigator\" role.\nTo exploit this vulnerability, the attacker must already have a Velociraptor user account at least \"investigator\" level, and be able to authenticate to the GUI and issue an API call to the backend. Typically, most users deploy Velociraptor with limited access to a trusted group, and most users will already be administrators within the GUI.\n\nThis issue affects Velociraptor versions before 0.6.7-5. Version 0.6.7-5, released January 16, 2023, fixes the issue.\n\n"
      }, {
        "lang" : "es",
        "value" : "Rapid7 Velociraptor no sanitizaba adecuadamente el parámetro de ID del cliente en la API CreateCollection, lo que permitía un directory traversal donde se podía escribir la tarea de recopilación. Era posible proporcionar una identificación de cliente de \"../clients/server\" para programar la recopilación para el servidor (como un artefacto del servidor), pero solo se requerían privilegios para programar recopilaciones en el cliente. Normalmente, para programar un artefacto en el servidor, se requiere el permiso COLLECT_SERVER. Normalmente, este permiso sólo se concede al rol de \"administrador\". Debido a este problema, basta con tener el privilegio COLLECT_CLIENT, que normalmente se otorga al rol de \"investigador\". Para aprovechar esta vulnerabilidad, el atacante ya debe tener una cuenta de usuario de Velociraptor al menos a nivel de \"investigador\" y poder autenticarse en la GUI y emitir una llamada API al backend. Normalmente, la mayoría de los usuarios implementan Velociraptor con acceso limitado a un grupo confiable y la mayoría de los usuarios ya serán administradores dentro de la GUI. Este problema afecta a las versiones de Velociraptor anteriores a la 0.6.7-5. La versión 0.6.7-5, lanzada el 16 de enero de 2023, soluciona el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.7-5",
            "matchCriteriaId" : "2FC8DDF3-9A52-47C0-A21A-F6E026C0D442"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Velocidex/velociraptor",
        "source" : "cve@rapid7.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Velocidex/velociraptor",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0397",
      "sourceIdentifier" : "vulnerabilities@zephyrproject.org",
      "published" : "2023-01-19T06:15:09.737",
      "lastModified" : "2024-11-21T07:37:06.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_complete."
      }, {
        "lang" : "es",
        "value" : "Un controlador bluetooth malicioso o defectuoso puede provocar una denegación de servicio debido a una entrada no marcada en le_read_buffer_size_complete."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "vulnerabilities@zephyrproject.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerabilities@zephyrproject.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.0",
            "matchCriteriaId" : "A09B3C2A-EED0-4916-A4AF-9007C498B058"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wc2h-h868-q7hj",
        "source" : "vulnerabilities@zephyrproject.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wc2h-h868-q7hj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0398",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-19T09:15:09.367",
      "lastModified" : "2024-11-21T07:37:06.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4."
      }, {
        "lang" : "es",
        "value" : "Cross-site Request Forgery (CSRF) en el repositorio de GitHub modoboa/modoboa anterior a 2.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modoboa:modoboa:*:*:*:*:*:modoboa:*:*",
            "versionEndExcluding" : "2.0.4",
            "matchCriteriaId" : "4781FBB6-EAE1-4AF9-A51F-5BEE3E8DFA16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modoboa/modoboa/commit/8e14ac93669df4f35fcdebd55dc9d2f0fed3ed48",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/0a852351-00ed-44d2-a650-9055b7beed58",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modoboa/modoboa/commit/8e14ac93669df4f35fcdebd55dc9d2f0fed3ed48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/0a852351-00ed-44d2-a650-9055b7beed58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23690",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-01-19T12:15:13.623",
      "lastModified" : "2024-11-21T07:46:40.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nCloud Mobility for Dell EMC Storage, versions 1.3.0.X and below contains an Improper Check for Certificate Revocation vulnerability. A threat actor does not need any specific privileges to potentially exploit this vulnerability. An attacker could perform a man-in-the-middle attack and eavesdrop on encrypted communications from Cloud Mobility to Cloud Storage devices. Exploitation could lead to the compromise of secret and sensitive information, cloud storage connection downtime, and the integrity of the connection to the Cloud devices.\n\n"
      }, {
        "lang" : "es",
        "value" : "Cloud Mobility for Dell EMC Storage, versiones 1.3.0.X e inferiores, contiene una vulnerabilidad de verificación incorrecta de revocación de certificados. Un actor de amenazas no necesita ningún privilegio específico para explotar potencialmente esta vulnerabilidad. Un atacante podría realizar un ataque man-in-the-middle y escuchar a escondidas las comunicaciones cifradas desde Cloud Mobility a los dispositivos de Cloud Storage. La explotación podría comprometer la información secreta y sensible, el tiempo de inactividad de la conexión de almacenamiento en la nube y la integridad de la conexión a los dispositivos en la nube."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-299"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:cloud_mobility_for_dell_emc_storage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.4.0",
            "matchCriteriaId" : "84315A17-180D-40FA-9789-3EF236F4DADE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207521/dsa-2023-019-dell-emc-cloud-mobility-security-update-for-certificate-revocation-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207521/dsa-2023-019-dell-emc-cloud-mobility-security-update-for-certificate-revocation-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0402",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-19T15:15:13.813",
      "lastModified" : "2026-04-08T18:17:42.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Social Warfare plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several AJAX actions in versions up to, and including, 4.3.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete post meta information and reset network access tokens."
      }, {
        "lang" : "es",
        "value" : "El complemento Social Warfare para WordPress es vulnerable a la omisión de autorización debido a una falta de verificación de capacidad en varias acciones AJAX en versiones hasta la 4.3.0 incluida. Esto hace posible que los atacantes autenticados, con permisos de nivel de suscriptor y superiores, eliminen la metainformación de la publicación y restablezcan los tokens de acceso a la red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:warfareplugins:social_warfare:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.3.0",
            "matchCriteriaId" : "EC3950F3-B8E1-472F-9441-5337956D6B9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/social-warfare/trunk/lib/options/SWP_Options_Page.php?rev=2364155#L923",
        "source" : "security@wordfence.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2844092%40social-warfare&new=2844092%40social-warfare&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4bc4ba2c-32eb-46c5-bb40-7c0150fc1ca4?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/social-warfare/trunk/lib/options/SWP_Options_Page.php?rev=2364155#L923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2844092%40social-warfare&new=2844092%40social-warfare&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4bc4ba2c-32eb-46c5-bb40-7c0150fc1ca4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0403",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-19T15:15:14.420",
      "lastModified" : "2026-04-08T19:18:00.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Social Warfare plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.1. This is due to missing or incorrect nonce validation on several AJAX actions. This makes it possible for unauthenticated attackers to delete post meta information and reset network access tokens, via forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El complemento Social Warfare para WordPress es vulnerable a Cross-Site Request Forgery en versiones hasta la 4.4.0 incluida. Esto se debe a una validación nonce faltante o incorrecta en varias acciones AJAX. Esto hace posible que atacantes no autenticados eliminen la metainformación de la publicación y restablezcan los tokens de acceso a la red; mediante una solicitud falsificada concedida, pueden engañar al administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:warfareplugins:social_warfare:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.4.0",
            "matchCriteriaId" : "7214687F-706C-4CA7-9486-284AFB5EA140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/social-warfare/trunk/lib/options/SWP_Options_Page.php?rev=2364155#L923",
        "source" : "security@wordfence.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a36d1bb1-9446-4042-a1ec-08a3ffdcb744?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/social-warfare/trunk/lib/options/SWP_Options_Page.php?rev=2364155#L923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a36d1bb1-9446-4042-a1ec-08a3ffdcb744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0404",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-19T15:15:14.840",
      "lastModified" : "2026-04-08T18:17:42.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Events Made Easy plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions related to AJAX actions in versions up to, and including, 2.3.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke those functions intended for administrator use. While the plugin is still pending review from the WordPress repository, site owners can download a copy of the patched version directly from the developer's Github at https://github.com/liedekef/events-made-easy"
      }, {
        "lang" : "es",
        "value" : "El complemento Events Made Easy de WordPress es vulnerable a la omisión de autorización debido a una falta de verificación de capacidad en varias funciones relacionadas con las acciones AJAX en versiones hasta la 2.3.16 incluida. Esto hace posible que los atacantes autenticados, con permisos de nivel de suscriptor y superiores, invoquen aquellas funciones destinadas al uso del administrador. Si bien el complemento aún está pendiente de revisión desde el repositorio de WordPress, los propietarios del sitio pueden descargar una copia de la versión parcheada directamente desde el Github del desarrollador en https://github.com/liedekef/events-made-easy"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-dynamics:events_made_easy:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.3.16",
            "matchCriteriaId" : "00FED94C-1B8E-4F9E-B36D-96FF505C1729"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2836308%40events-made-easy&new=2836308%40events-made-easy&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/5a9e62de-3e70-424f-b8e5-2a5f07ca182d?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2836308%40events-made-easy&new=2836308%40events-made-easy&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/5a9e62de-3e70-424f-b8e5-2a5f07ca182d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0406",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-19T18:15:15.437",
      "lastModified" : "2024-11-21T07:37:07.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Request Forgery (CSRF) en el repositorio de GitHub modoboa/modoboa anterior a 2.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modoboa:modoboa:*:*:*:*:*:modoboa:*:*",
            "versionEndExcluding" : "2.0.4",
            "matchCriteriaId" : "4781FBB6-EAE1-4AF9-A51F-5BEE3E8DFA16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modoboa/modoboa/commit/7f0573e917227686d2cc127be1364e2908740807",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/d7007f76-3dbc-48a7-a2fb-377040fe100c",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modoboa/modoboa/commit/7f0573e917227686d2cc127be1364e2908740807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/d7007f76-3dbc-48a7-a2fb-377040fe100c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0126",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2023-01-19T20:15:10.850",
      "lastModified" : "2025-04-03T20:15:19.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de path traversal de autenticación previa en la versión 12.4.2 del firmware SMA1000, que permite a un atacante no autenticado acceder a archivos y directorios arbitrarios almacenados fuera del directorio raíz web."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sma1000_firmware:12.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BFD82B-F859-4E05-978E-FB1ADBBBE65E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sma1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB78952C-B6BB-4A5A-A216-BA64AAC83D4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0001",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22741",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-19T22:15:11.273",
      "lastModified" : "2024-11-21T07:45:20.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. In affected versions Sofia-SIP **lacks both message length and attributes length checks** when it handles STUN packets, leading to controllable heap-over-flow. For example, in stun_parse_attribute(), after we get the attribute's type and length value, the length will be used directly to copy from the heap, regardless of the message's left size. Since network users control the overflowed length, and the data is written to heap chunks later, attackers may achieve remote code execution by heap grooming or other exploitation methods. The bug was introduced 16 years ago in sofia-sip 1.12.4 (plus some patches through 12/21/2006) to in tree libs with git-svn-id: http://svn.freeswitch.org/svn/freeswitch/trunk@3774 d0543943-73ff-0310-b7d9-9358b9ac24b2. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Sofia-SIP es una librería SIP User-Agent de código abierto que cumple con la especificación IETF RFC3261. En las versiones afectadas, Sofia-SIP **carece de comprobaciones de la longitud del mensaje y de la longitud de los atributos** cuando maneja paquetes STUN, lo que provoca un desbordamiento controlable del almacenamiento dinámico. Por ejemplo, en stun_parse_attribute(), después de obtener el tipo y el valor de longitud del atributo, la longitud se usará directamente para copiar desde el heap, independientemente del tamaño izquierdo del mensaje. Dado que los usuarios de la red controlan la longitud desbordada y los datos se escriben en fragmentos de heap más tarde, los atacantes pueden lograr la ejecución remota de código mediante la preparación del heap u otros métodos de explotación. El error se introdujo hace 16 años en sofia-sip 1.12.4 (más algunos parches hasta el 21/12/2006) en las librerías del árbol con git-svn-id: http://svn.freeswitch.org/svn/freeswitch/ tronco@3774 d0543943-73ff-0310-b7d9-9358b9ac24b2. Se recomienda a los usuarios que actualicen. No se conocen soluciones para esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:signalwire:sofia-sip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13.11",
            "matchCriteriaId" : "0DF9E38A-C29D-4A98-82E7-5CAF18A94054"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/freeswitch/sofia-sip/commit/da53e4fbcb138b080a75576dd49c1fff2ada2764",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8599-x7rq-fr54",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5410",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/freeswitch/sofia-sip/commit/da53e4fbcb138b080a75576dd49c1fff2ada2764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8599-x7rq-fr54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22745",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-19T23:15:26.907",
      "lastModified" : "2025-11-21T20:15:45.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2 Software Stack (TSS2). In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, `Tss2_RC_SetHandler` and `Tss2_RC_Decode` both index into `layer_handler` with an 8 bit layer number, but the array only has `TPM2_ERROR_TSS2_RC_LAYER_COUNT` entries, so trying to add a handler for higher-numbered layers or decode a response code with such a layer number reads/writes past the end of the buffer. This Buffer overrun, could result in arbitrary code execution. An example attack would be a MiTM bus attack that returns 0xFFFFFFFF for the RC. Given the common use case of TPM modules an attacker must have local access to the target machine with local system privileges which allows access to the TPM system. Usually TPM access requires administrative privilege. Versions 4.1.0-rc0, 4.0.1, and 3.2.2-rc1 fix the issue."
      }, {
        "lang" : "es",
        "value" : "tpm2-tss es una implementación de software de código abierto de la pila de software (TSS2) del módulo de plataforma segura (TPM) 2 de Trusted Computing Group (TCG). En las versiones afectadas, `Tss2_RC_SetHandler` y `Tss2_RC_Decode` indexan en `layer_handler` con un número de capa de 8 bits, pero la matriz solo tiene entradas `TPM2_ERROR_TSS2_RC_LAYER_COUNT`, por lo que intentar agregar un controlador para capas con números más altos o decodificar un código de respuesta con dicho número de capa lee/escribe más allá del final del búfer. Este desbordamiento del búfer podría provocar la ejecución de código arbitrario. Un ataque de ejemplo sería un ataque de bus MiTM que devuelve 0xFFFFFFFF para el RC. Dado el caso de uso común de los módulos TPM, un atacante debe tener acceso local a la máquina de destino con privilegios del sistema local que permitan el acceso al sistema TPM. Por lo general, el acceso a TPM requiere privilegios administrativos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tpm2_software_stack_project:tpm2_software_stack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "7CF6D315-97D0-47A8-981E-BEAA19E1B515"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tpm2_software_stack_project:tpm2_software_stack:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.1.0",
            "matchCriteriaId" : "D4E7F18B-4F50-4154-805B-88B0C8C21CFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tpm2-software/tpm2-tss/commit/306490c8d848c367faa2d9df81f5e69dab46ffb5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tpm2-software/tpm2-tss/commit/49107d65d5c7be430671398416bbd89dae4e34e7",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/tpm2-software/tpm2-tss/commit/7ab42953216adec046d000a5e3085f3ee5e9cabf",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/tpm2-software/tpm2-tss/security/advisories/GHSA-4j3v-fh23-vx67",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tpm2-software/tpm2-tss/commit/306490c8d848c367faa2d9df81f5e69dab46ffb5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tpm2-software/tpm2-tss/security/advisories/GHSA-4j3v-fh23-vx67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0410",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-20T01:15:10.863",
      "lastModified" : "2026-03-13T19:21:16.977",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5."
      }, {
        "lang" : "es",
        "value" : "Cross-site scripting (XSS) genérico en el repositorio de GitHub builderio/qwik anterior a 0.1.0-beta5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qwik:qwik:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.16.2",
            "matchCriteriaId" : "7F42D092-9955-4205-A089-FCC12A8A9DB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/builderio/qwik/commit/4b2f89dbbd2bc0a2c92eae1a49bdd186e589151a",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/2da583f0-7f66-4ba7-9bed-8e7229aa578e",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/builderio/qwik/commit/4b2f89dbbd2bc0a2c92eae1a49bdd186e589151a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/2da583f0-7f66-4ba7-9bed-8e7229aa578e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22331",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-20T03:15:09.813",
      "lastModified" : "2025-04-03T18:15:42.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alter user credentials information."
      }, {
        "lang" : "es",
        "value" : "El uso de la vulnerabilidad de credenciales predeterminadas en CONPROSYS HMI System (CHS) Ver.3.4.5 y versiones anteriores permite que un atacante remoto no autenticado altere la información de las credenciales del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contec:conprosys_hmi_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.5",
            "matchCriteriaId" : "925AAC92-DED4-41ED-A11E-91AAB582A8AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU96873821",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU96873821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22334",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-20T03:15:10.613",
      "lastModified" : "2025-04-03T16:15:31.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to obtain user credentials information via a man-in-the-middle attack."
      }, {
        "lang" : "es",
        "value" : "El uso de hash de contraseña en lugar de contraseña para la vulnerabilidad de autenticación en CONPROSYS HMI System (CHS) Ver.3.4.5 y anteriores permite a un atacante autenticado remoto obtener información de credenciales de usuario a través de un ataque de intermediario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contec:conprosys_hmi_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.5",
            "matchCriteriaId" : "925AAC92-DED4-41ED-A11E-91AAB582A8AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU96873821",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU96873821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22339",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-20T03:15:10.770",
      "lastModified" : "2025-04-03T20:15:21.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access restriction and obtain the server certificate including the private key of the product."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inadecuado en CONPROSYS HMI System (CHS) Ver.3.4.5 y anteriores permite que un atacante remoto no autenticado evite la restricción de acceso y obtenga el certificado del servidor, incluida la clave privada del producto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contec:conprosys_hmi_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.5",
            "matchCriteriaId" : "925AAC92-DED4-41ED-A11E-91AAB582A8AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU96873821",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU96873821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22373",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-20T03:15:10.937",
      "lastModified" : "2025-04-03T20:15:21.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to inject an arbitrary script and obtain the sensitive information."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting en CONPROSYS HMI System (CHS) Ver.3.4.5 y anteriores permite a un atacante remoto autenticado inyectar un script arbitrario y obtener información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contec:conprosys_hmi_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.5",
            "matchCriteriaId" : "925AAC92-DED4-41ED-A11E-91AAB582A8AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU96873821",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU96873821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20002",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:12.450",
      "lastModified" : "2024-11-21T07:40:19.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to bypass access controls and conduct an SSRF attack through an affected device.\r\n\r This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco TelePresence CE y el software RoomOS podría permitir que un atacante local autenticado evite los controles de acceso y realice un ataque SSRF a través de un dispositivo afectado. Esta vulnerabilidad se debe a una validación inadecuada de la entrada proporcionada por el usuario. Un atacante podría aprovechar esta vulnerabilidad enviando una solicitud manipulada a un usuario de la aplicación web. Un exploit exitoso podría permitir al atacante enviar solicitudes de red arbitrarias provenientes del sistema afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:10.3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D83C41B-DD92-4B31-B2B3-BD831B908E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:10.3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83093692-59FB-4C24-AF96-A76DFADD37C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:10.8.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3E919D-0686-4680-882C-7EB636EC1089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:10.8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA427278-651C-47AB-996E-3B0BD307E34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:10.11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "293FE8EE-2C4E-4EA2-BBC7-680C08F45E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:10.11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23A27105-A41F-4814-BCA9-2DE3D1505D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:10.15.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB29E8E8-74BD-430E-A12E-E91E27FF81A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9840947F-758C-4A97-B9D2-A9F1B414D6FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DDF553F-4945-43EB-9D87-2AD8464EE7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C672A9A-3AD3-44B3-B8BE-1EA3A5AE9D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22AE6C0-3FDE-435E-BA25-2664A2B9758C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2E8E40-3B18-49A6-B78C-472B5D55039D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67604778-41A3-4519-B526-4807EBD8E61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F781A5E-C38E-4BE3-9F47-8B0392E6DEF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479C49D0-5279-4054-8440-9683624AC057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42E4172-2723-426D-AE73-453C74961885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4770CB-A207-4D72-9EC0-2B6AEE9EC54E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F248A6D4-23C6-4D6D-B972-D6F9E711B61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0559D1BB-51A9-4285-A845-ECB6A6B7D678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1ED50F6-B01C-4003-A797-109DA9A631FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3C7127-EE08-4212-92DF-C8D568F2A453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F86038-E6D2-4F6F-B768-68525833FD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C931235-9560-4186-A339-167DAB5B7E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABCAF219-6E5E-42BB-9892-B17D99634518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA1A42D-D874-4DD4-BB08-AFFEE4EAD015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1785B2F-B319-403F-A106-9137B9D140BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73AE384-CF1A-4D57-8E95-4E2D5DFB1E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB34F64-D33A-4C32-9D18-5CAF45CB1933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C05E7CB-5ABF-4F61-B6B8-03F46B91FBF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "906C8212-DD6A-4485-8629-EBEFC727C70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758679DD-D282-4FDC-9D46-BF698660C789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F63CDD-D2B6-4FED-9C93-63AD60882EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A529A0C7-CCE3-4994-B412-0BEC7B4D2E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5CFE99-B3DB-429E-AEBA-3F863E29EDF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AEF4D9-06A3-4A15-B310-F3F2896B0992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659220C8-4391-40C9-8047-8F761ECC58C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A16E86-C21B-42B6-88A9-AF3CF0957C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DC02FB-1308-4505-BB12-BDBA971B48E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3A23C7-7BB6-4A18-AFCF-47F508FA3561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3800DAF9-E42F-474C-8C9C-F8A5934148D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "310C0A56-6523-42EB-8BF2-4C13969D057E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F349CFD5-D70F-426C-B670-156FD558E50F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-dkjGFgRK",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-dkjGFgRK",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20007",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:12.757",
      "lastModified" : "2024-11-21T07:40:19.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code or cause the web-based management process on the device to restart unexpectedly, resulting in a denial of service (DoS) condition. The attacker must have valid administrator credentials. \r\n\r This vulnerability is due to insufficient validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP input to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the web-based management process to restart, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de los routers Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN podría permitir que un atacante remoto autenticado ejecute código arbitrario o provocar que se reinicie el proceso de administración basado en web en el dispositivo. inesperadamente, lo que resulta en una condición de denegación de servicio (DoS). El atacante debe tener credenciales de administrador válidas. Esta vulnerabilidad se debe a una validación insuficiente de la entrada proporcionada por el usuario en la interfaz de administración basada en web. Un atacante podría aprovechar esta vulnerabilidad enviando una entrada HTTP manipulada a un dispositivo afectado. Un exploit exitoso podría permitir al atacante ejecutar código arbitrario como usuario raíz en el sistema operativo subyacente o provocar que el proceso de administración basado en web se reinicie, lo que resultaría en una condición DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.29",
            "matchCriteriaId" : "D5B94E37-90C8-4B92-9480-48CC1329848F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4411AC-2A74-4315-BA6B-D7E1AA538BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.29",
            "matchCriteriaId" : "D8DC4600-2398-4FD4-9C26-99F10FCD738C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E55019-F969-4ACD-A6C8-1D2EE05F8EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.29",
            "matchCriteriaId" : "4C0E7EA7-3DEF-4B51-8A4F-A8FB3702B877"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E91E68B-CBE9-462E-82D4-6F588B8E84E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.29",
            "matchCriteriaId" : "A5E83D6D-D75C-4D35-A998-519034382380"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5120BAB7-FB3A-481E-9ECD-48341846AFBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-rcedos-7HjP74jD",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-rcedos-7HjP74jD",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20008",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:13.057",
      "lastModified" : "2024-11-21T07:40:19.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to overwrite arbitrary files on the local system of an affected device.\r\n\r This vulnerability is due to improper access controls on files that are in the local file system. An attacker could exploit this vulnerability by placing a symbolic link in a specific location on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI de Cisco TelePresence CE y el software RoomOS podría permitir que un atacante local autenticado sobrescriba archivos arbitrarios en el sistema local de un dispositivo afectado. Esta vulnerabilidad se debe a controles de acceso inadecuados a archivos que se encuentran en el sistema de archivos local. Un atacante podría aprovechar esta vulnerabilidad colocando un enlace simbólico en una ubicación específica del sistema de archivos local de un dispositivo afectado. Un exploit exitoso podría permitir al atacante sobrescribir archivos arbitrarios en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:10.3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D83C41B-DD92-4B31-B2B3-BD831B908E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:10.3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83093692-59FB-4C24-AF96-A76DFADD37C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:10.8.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3E919D-0686-4680-882C-7EB636EC1089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:10.8.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA427278-651C-47AB-996E-3B0BD307E34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:10.11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "293FE8EE-2C4E-4EA2-BBC7-680C08F45E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:10.11.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23A27105-A41F-4814-BCA9-2DE3D1505D73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:10.15.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB29E8E8-74BD-430E-A12E-E91E27FF81A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B79B19D-B749-4353-B366-3C6B5171AA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7846817-340F-49CF-AA2E-ACBE2BCC854C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7BA8275-E3B9-4901-A4AF-F3CB713C6740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9840947F-758C-4A97-B9D2-A9F1B414D6FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF1A6F-9CDD-41E6-835A-41B06A9078EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A50221CF-D98B-44CC-B60F-7C095D29F844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0783DDF5-520C-470C-ACA1-A2E6871E2F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DDF553F-4945-43EB-9D87-2AD8464EE7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE000291-6A76-40D1-A4AA-DEC5DD995F92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3B11A1A-6EB5-4234-82D9-DCBD7E21EAD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB53A45A-2B87-4104-85D5-96EFD4EBAF25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C672A9A-3AD3-44B3-B8BE-1EA3A5AE9D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2B1C53-EAB4-44D7-80B1-EBF564DEF664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22AE6C0-3FDE-435E-BA25-2664A2B9758C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F2E8E40-3B18-49A6-B78C-472B5D55039D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67604778-41A3-4519-B526-4807EBD8E61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F781A5E-C38E-4BE3-9F47-8B0392E6DEF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479C49D0-5279-4054-8440-9683624AC057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42E4172-2723-426D-AE73-453C74961885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4770CB-A207-4D72-9EC0-2B6AEE9EC54E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F248A6D4-23C6-4D6D-B972-D6F9E711B61F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0559D1BB-51A9-4285-A845-ECB6A6B7D678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1ED50F6-B01C-4003-A797-109DA9A631FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3C7127-EE08-4212-92DF-C8D568F2A453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F86038-E6D2-4F6F-B768-68525833FD8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C931235-9560-4186-A339-167DAB5B7E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABCAF219-6E5E-42BB-9892-B17D99634518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA1A42D-D874-4DD4-BB08-AFFEE4EAD015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1785B2F-B319-403F-A106-9137B9D140BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C73AE384-CF1A-4D57-8E95-4E2D5DFB1E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB34F64-D33A-4C32-9D18-5CAF45CB1933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C05E7CB-5ABF-4F61-B6B8-03F46B91FBF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "906C8212-DD6A-4485-8629-EBEFC727C70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758679DD-D282-4FDC-9D46-BF698660C789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F63CDD-D2B6-4FED-9C93-63AD60882EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A529A0C7-CCE3-4994-B412-0BEC7B4D2E9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5CFE99-B3DB-429E-AEBA-3F863E29EDF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AEF4D9-06A3-4A15-B310-F3F2896B0992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659220C8-4391-40C9-8047-8F761ECC58C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A16E86-C21B-42B6-88A9-AF3CF0957C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DC02FB-1308-4505-BB12-BDBA971B48E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3A23C7-7BB6-4A18-AFCF-47F508FA3561"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3800DAF9-E42F-474C-8C9C-F8A5934148D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "310C0A56-6523-42EB-8BF2-4C13969D057E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.8.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E93335-92B5-4EEC-8D79-952463ECBB0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.10.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F349CFD5-D70F-426C-B670-156FD558E50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83FE1690-CA64-4D12-8538-5FC0727ED553"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05922155-725D-4695-B7BF-3BEA4A0D418B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:7.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8692F9C-D9C1-412A-8CA0-04DA37509819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:7.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E73BF2C9-F26F-471C-A566-8EE06FECBB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:7.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "604336DF-DDE2-4250-8CA4-3800EB9F935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:7.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "191F7E36-58D5-411F-8D45-C4F225A35B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_tc:7.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1436BE5E-2EC2-4FDF-BDAE-AF590D36C838"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-dkjGFgRK",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-dkjGFgRK",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20010",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:13.340",
      "lastModified" : "2024-11-21T07:40:20.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.\r\n\r This vulnerability exists because the web-based management interface inadequately validates user input. An attacker could exploit this vulnerability by authenticating to the application as a low-privileged user and sending crafted SQL queries to an affected system. A successful exploit could allow the attacker to read or modify any data on the underlying database or elevate their privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Cisco Unified Communications Manager (Unified CM) y Cisco Unified Communications Manager Session Management Edition (Unified CM SME) podría permitir que un atacante remoto autenticado realice ataques de inyección SQL en un sistema afectado. Esta vulnerabilidad existe porque la interfaz de administración basada en web no valida adecuadamente la entrada del usuario. Un atacante podría aprovechar esta vulnerabilidad autenticándose en la aplicación como un usuario con pocos privilegios y enviando consultas SQL manipuladas a un sistema afectado. Un exploit exitoso podría permitir al atacante leer o modificar cualquier dato en la base de datos subyacente o elevar sus privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionEndExcluding" : "12.5\\(1\\)su7",
            "matchCriteriaId" : "3A0640FA-00BF-4C19-B602-1680A60552DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "11.5\\(1\\)",
            "versionEndExcluding" : "12.5\\(1\\)su7",
            "matchCriteriaId" : "8F8A5463-F790-465E-8B52-9F816DEFC4B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14su2",
            "matchCriteriaId" : "1C95C9B5-A0AE-46C6-B378-995512984995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14su2",
            "matchCriteriaId" : "8856CD06-9CD4-43EF-8D64-A8D0FDE09696"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-sql-rpPczR8n",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-sql-rpPczR8n",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20018",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:13.633",
      "lastModified" : "2024-11-21T07:40:21.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device.\r\n\r This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to access certain parts of the web interface that would normally require authentication."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de los teléfonos Cisco IP Phone de las series 7800 y 8800 podría permitir que un atacante remoto no autenticado omita la autenticación en un dispositivo afectado. Esta vulnerabilidad se debe a una validación insuficiente de la entrada proporcionada por el usuario. Un atacante podría aprovechar esta vulnerabilidad enviando una solicitud manipulada a la interfaz de administración basada en web. Un exploit exitoso podría permitir al atacante acceder a ciertas partes de la interfaz web que normalmente requerirían autenticación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "3603E753-AD60-4AF0-8FA8-A371260CB0C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF03D5F2-0483-409B-90F0-A1430774A258"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7811_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "40DA5ABA-C866-4560-BE21-77B2643E8DB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7260C17-7067-47AD-995F-366A5E8B10E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7821_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "BABDE4DB-5BAA-448E-B009-D872FC515237"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7AFFF0-5B21-400B-B923-E9B7FCCE08FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7832_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "1CCABEA0-842F-449C-BE24-4B1BDD32F9BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7832:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D8B3FD-3157-49D3-A4BA-D4FAAB1B6D4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7841_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "D7667725-6B7B-4A04-890D-7487B58EC256"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CF8A50-11BD-4506-BF2A-CCA36BF59EFF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7861_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "702F4804-A675-4222-9AAE-2C5EF7D99001"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52C420C-FD54-4BE4-8720-E05307D53520"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "02291A1F-29F1-4972-9CD9-E09116DF80C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BBEA07-3154-4270-B865-D4AD26EB3B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8811_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "3F8D7A6A-1279-42A9-9FE9-1F6C8F765D17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CC3127-3152-4906-9FE0-BC6F21DCADAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8821_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "7A4D6EB2-404C-48CD-9F24-4845A95BA0AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36C99E0B-0383-4CB3-B325-EC0F3D57D39D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8821-ex_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "FAFDFD58-C58F-4967-9E85-6FAE66346E37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8821-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE56B858-B59D-4197-9B2A-33A03908B967"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8831_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "5334C11E-B07E-49A5-95CA-536630CEA788"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8831:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF13D70B-1F27-4B3F-83FD-EF9688F1D123"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8832_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "6AA83664-C710-4B45-B09F-3E29A2EB6638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8832:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5EA5C6B-243B-419A-9C60-1CDBD039C1D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8841_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "B1C26834-45D8-4B0D-A08C-BE0594EEAB4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7944CC9C-AE08-4F30-AF65-134DADBD0FA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8845_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "33C51A07-3C77-4DDC-9C4F-E5E3BE55268E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A313E64A-F43C-4FBA-A389-6171CBD709C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8851_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "2196ED9F-DA82-4D70-9BC2-97673A96B881"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF6DC5E-F582-445E-BF05-2D55A0954663"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8861_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "AFBDA235-4866-4058-82F5-27297E1923BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090EE553-01D5-45F0-87A4-E1167F46EB77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8865_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "9249A092-250D-4BB8-AEEA-3B2190246223"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB99B9AB-64B5-4989-9579-A1BB5D2D87EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phones_8832_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "24A5CEB2-54CA-46D0-872D-90AAB39C9023"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phones_8832:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B980D4B-63D0-4786-AD62-FFE49FED33FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:unified_ip_phone_8851nr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "18741BE2-B397-4F53-9845-4CB8AF7E65DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:unified_ip_phone_8851nr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B021B260-CD3C-4EA5-9A2C-FE80B4ACA787"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:unified_ip_phone_8865nr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1\\(1\\)sr2",
            "matchCriteriaId" : "2CEC15D2-210D-49B1-898D-591AA318CC82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:unified_ip_phone_8865nr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB7D543-296F-44AE-9335-BF3244F21E55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_ip_phone_8821_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0\\(6\\)sr4",
            "matchCriteriaId" : "503FE588-7543-45A1-A742-4657A5CC2DE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wireless_ip_phone_8821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97DF354-7690-417E-B223-72C8BDA36DA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wireless_ip_phone_8821-ex_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0\\(6\\)sr4",
            "matchCriteriaId" : "09F02957-0FED-4D40-B42D-529C0FCEF252"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wireless_ip_phone_8821-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CAE4C7-EADB-41A9-BE48-1A4F3D8D3D7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-auth-bypass-pSqxZRPR",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-auth-bypass-pSqxZRPR",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20019",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:13.910",
      "lastModified" : "2024-11-21T07:40:21.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform, Cisco BroadWorks Application Server, and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device.\r\n\r This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Cisco BroadWorks Application Delivery Platform, Cisco BroadWorks Application Server y Cisco BroadWorks Xtended Services Platform podría permitir que un atacante remoto no autenticado lleve a cabo un ataque de cross-site scripting (XSS) contra un usuario de la interfaz de un dispositivo afectado. Esta vulnerabilidad existe porque la interfaz de administración basada en web no valida adecuadamente la entrada proporcionada por el usuario. Un atacante podría aprovechar esta vulnerabilidad persuadiendo a un usuario de la interfaz para que haga clic en un enlace manipulado. Un exploit exitoso podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:broadworks_application_delivery_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "commpilot-24_2022.11",
            "matchCriteriaId" : "82CA469E-F1FA-4B69-AC66-0D109E470C7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:broadworks_application_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ap.as.24.0.944.ap384344",
            "matchCriteriaId" : "7D21F078-8EA0-4031-BF39-970D17B6BDA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:broadworks_xtended_services_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ap.xsp.23.0.1075.ap384344",
            "matchCriteriaId" : "E926EC57-0169-47BC-ADA6-0AF40DF8437D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-xss-EzqDXqG4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-xss-EzqDXqG4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20020",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:14.197",
      "lastModified" : "2024-11-21T07:40:21.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r This vulnerability is due to improper input validation when parsing HTTP requests. An attacker could exploit this vulnerability by sending a sustained stream of crafted requests to an affected device. A successful exploit could allow the attacker to cause all subsequent requests to be dropped, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la aplicación Device Management Servlet application of Cisco BroadWorks Application Delivery Platform y Cisco BroadWorks Xtended Services Platform podría permitir que un atacante remoto no autenticado cause una condición de denegación de servicio (DoS) en un dispositivo afectado. Esta vulnerabilidad se debe a una validación de entrada incorrecta al analizar solicitudes HTTP. Un atacante podría aprovechar esta vulnerabilidad enviando un flujo sostenido de solicitudes manipuladas a un dispositivo afectado. Un exploit exitoso podría permitir al atacante provocar que se eliminen todas las solicitudes posteriores, lo que resultaría en una condición DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:broadworks_application_delivery_platform_device_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0",
            "versionEndExcluding" : "2022.11_1.273",
            "matchCriteriaId" : "8CCD081A-1BDE-45A3-AC65-AC2A29BC27A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:broadworks_xtended_services_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0",
            "versionEndExcluding" : "23.0.1075.ap384245",
            "matchCriteriaId" : "2D80A6C4-1D8A-4EE9-B1F7-B6E37C59DA33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-dos-HpkeYzp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-dos-HpkeYzp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20025",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:14.490",
      "lastModified" : "2025-04-07T13:46:26.707",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers could allow an unauthenticated, remote attacker to bypass authentication on an affected device.\r\n\r This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to bypass authentication and gain root access on the underlying operating system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de los routers Cisco Small Business serie RV042 podría permitir que un atacante remoto no autenticado omita la autenticación en el dispositivo afectado. Esta vulnerabilidad se debe a una validación incorrecta de la entrada del usuario de los paquetes HTTP entrantes. Un atacante podría aprovechar esta vulnerabilidad enviando solicitudes manipuladas a la interfaz de administración basada en web. Un exploit exitoso podría permitir al atacante obtener privilegios de superusuario en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-293"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC05438-3064-4FB6-9177-9EA60C8E250C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A39236-B032-46BB-94D0-3E0E3E557BC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E699C11F-3C7C-420D-9243-5CD2A6B98EF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF65E38-D812-4F6E-903C-05E203F3E9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20026",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:14.813",
      "lastModified" : "2025-03-12T17:15:38.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320 and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device.\r\n\r This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de los routers Cisco Small Business serie RV042 podría permitir que un atacante remoto autenticado inyecte comandos arbitrarios en un dispositivo afectado. Esta vulnerabilidad se debe a una validación incorrecta de los campos de entrada del usuario dentro de los paquetes HTTP entrantes. Un atacante podría aprovechar esta vulnerabilidad enviando una solicitud manipulada a la interfaz de administración basada en web. Un exploit exitoso podría permitir al atacante ejecutar comandos arbitrarios en un dispositivo afectado con privilegios de nivel superusuario. Para aprovechar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC05438-3064-4FB6-9177-9EA60C8E250C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A39236-B032-46BB-94D0-3E0E3E557BC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E699C11F-3C7C-420D-9243-5CD2A6B98EF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF65E38-D812-4F6E-903C-05E203F3E9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20037",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:15.180",
      "lastModified" : "2024-11-21T07:40:24.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks.\r\n\r The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by sending requests containing malicious values to the affected system. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Industrial Network Director podría permitir que un atacante remoto autenticado realice ataques de cross-site scripting (XSS) almacenado. Esta vulnerabilidad se debe a una validación inadecuada del contenido enviado a la aplicación afectada. Un atacante podría aprovechar esta vulnerabilidad enviando solicitudes que contengan valores maliciosos al sistema afectado. Un exploit exitoso podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:industrial_network_director:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.0",
            "matchCriteriaId" : "E00F1036-0E40-43EA-AF1C-EB3A50AB55D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ind-fZyVjJtG",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ind-fZyVjJtG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20038",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:15.493",
      "lastModified" : "2024-11-21T07:40:24.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the monitoring application of Cisco Industrial Network Director could allow an authenticated, local attacker to access a static secret key used to store both local data and credentials for accessing remote systems.\r\n\r This vulnerability is due to a static key value stored in the application used to encrypt application data and remote credentials. An attacker could exploit this vulnerability by gaining local access to the server Cisco Industrial Network Director is installed on. A successful exploit could allow the attacker to decrypt data allowing the attacker to access remote systems monitored by Cisco Industrial Network Director."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la aplicación de monitoreo de Cisco Industrial Network Director podría permitir que un atacante local autenticado acceda a una clave secreta estática utilizada para almacenar datos locales y credenciales para acceder a sistemas remotos. Esta vulnerabilidad se debe a un valor de clave estática almacenado en la aplicación que se utiliza para cifrar los datos de la aplicación y las credenciales remotas. Un atacante podría aprovechar esta vulnerabilidad obteniendo acceso local al servidor en el que está instalado Cisco Industrial Network Director. Un exploit exitoso podría permitir al atacante descifrar datos, lo que le permitiría acceder a sistemas remotos monitoreados por Cisco Industrial Network Director."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:industrial_network_director:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.0",
            "matchCriteriaId" : "EA14F071-EA44-4A75-B5F0-2C82E68C972F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ind-fZyVjJtG",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ind-fZyVjJtG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20040",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:15.793",
      "lastModified" : "2024-11-21T07:40:24.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the NETCONF service of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to cause a denial of service (DoS) on an affected system that is running as the root user. To exploit this vulnerability, the attacker must be a member of the admin group.\r\n\r This vulnerability exists because user-supplied input is not properly validated when NETCONF is used to upload packages to an affected device. An attacker could exploit this vulnerability by uploading a specially crafted package file. A successful exploit could allow the attacker to write crafted files to arbitrary locations on the filesystem or delete arbitrary files from the filesystem of an affected device, resulting in a DoS condition. \r\n\r Note: By default, during install, Cisco NSO will be set up to run as the root user unless the --run-as-user option is used."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servicio NETCONF de Cisco Network Services Orchestrator (NSO) podría permitir que un atacante remoto autenticado provoque una denegación de servicio (DoS) en un sistema afectado que se ejecuta como usuario raíz. Para aprovechar esta vulnerabilidad, el atacante debe ser miembro del grupo de administración. Esta vulnerabilidad existe porque la entrada proporcionada por el usuario no se valida correctamente cuando se utiliza NETCONF para cargar paquetes en un dispositivo afectado. Un atacante podría aprovechar esta vulnerabilidad cargando un archivo de paquete especialmente manipulado. Un exploit exitoso podría permitir al atacante escribir archivos manipulados en ubicaciones arbitrarias del sistema de archivos o eliminar archivos arbitrarios del sistema de archivos de un dispositivo afectado, lo que resultaría en una condición DoS. Nota: De forma predeterminada, durante la instalación, Cisco NSO se configurará para ejecutarse como usuario raíz a menos que se utilice la opción --run-as-user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "5.4.7",
            "matchCriteriaId" : "C4BE422F-6650-403F-A560-EBA884C15FAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.5.6",
            "matchCriteriaId" : "DB986CDE-4BCD-4A2D-99DB-BE900BA7F58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6",
            "versionEndExcluding" : "5.6.7",
            "matchCriteriaId" : "C5ABFC42-5078-4C13-A912-A83C96E72D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_services_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7",
            "versionEndExcluding" : "5.7.4",
            "matchCriteriaId" : "93EC0F10-628A-42D7-BC3D-4110FB6F9D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:network_services_orchestrator:5.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF61782-327C-4318-A4D1-DCB18CD835B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-path-trvsl-zjBeMkZg",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-path-trvsl-zjBeMkZg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20043",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:16.040",
      "lastModified" : "2024-11-21T07:40:25.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges.\r\n\r This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit could allow the attacker to take complete control of the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco CX Cloud Agent podría permitir que un atacante local autenticado eleve sus privilegios. Esta vulnerabilidad se debe a permisos de archivos inseguros. Un atacante podría aprovechar esta vulnerabilidad llamando al script con sudo. Un exploit exitoso podría permitir al atacante tomar el control total del dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-708"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cx_cloud_agent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9",
            "matchCriteriaId" : "7E39A327-013E-460F-9EF0-9541DCE88610"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cx_cloud_agent:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "723C08F8-8A45-472F-8874-45B3BDE026A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cxagent-gOq9QjqZ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cxagent-gOq9QjqZ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20044",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:16.370",
      "lastModified" : "2024-11-21T07:40:25.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges.\r\n\r This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A successful exploit could allow the attacker to take complete control of the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco CX Cloud Agent podría permitir que un atacante local autenticado eleve sus privilegios. Esta vulnerabilidad se debe a permisos de archivos inseguros. Un atacante podría aprovechar esta vulnerabilidad convenciendo al soporte para que actualice la configuración que llama al script inseguro. Un exploit exitoso podría permitir al atacante tomar el control total del dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-708"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cx_cloud_agent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.1",
            "matchCriteriaId" : "F4ECE29E-98E0-4244-BBB0-797BD2D596B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cxagent-gOq9QjqZ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cxagent-gOq9QjqZ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20045",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:16.713",
      "lastModified" : "2024-11-21T07:40:25.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Small Business RV160 and RV260 Series VPN Routers could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device.\r\n\r This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands using root-level privileges on the affected device. To exploit this vulnerability, the attacker must have valid Administrator-level credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de los routers VPN Cisco Small Business RV160 y RV260 podría permitir que un atacante remoto autenticado ejecute comandos arbitrarios en el sistema operativo subyacente de un dispositivo afectado. Esta vulnerabilidad se debe a una validación insuficiente de la entrada del usuario. Un atacante podría aprovechar esta vulnerabilidad enviando una solicitud manipulada a la interfaz de administración basada en web de un dispositivo afectado. Un exploit exitoso podría permitir al atacante ejecutar comandos arbitrarios utilizando privilegios de nivel superusuario en el dispositivo afectado. Para aprovechar esta vulnerabilidad, el atacante debe tener credenciales válidas de nivel de administrador en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.04",
            "matchCriteriaId" : "4D8CFE35-D86F-4382-8740-BDE9CAA2AA4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD7FED8-F2E5-449F-98C8-E629B0174A8D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.04",
            "matchCriteriaId" : "6D883703-F9D5-4540-9911-C1BB80E96EF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FA810D-A396-4844-85E7-9293B0559269"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.04",
            "matchCriteriaId" : "8EDB4A79-2EFD-4AE5-81ED-DFF583B7438F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2374731-08B0-47A4-BD8F-DB6C67ECF785"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_vpn_router_with_poe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.04",
            "matchCriteriaId" : "4A9CD65C-56BE-46F8-8743-DB938217E863"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p_vpn_router_with_poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A695DCE-ACFE-4437-BA0E-FBF6E379FF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_vpn_router_with_poe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.04",
            "matchCriteriaId" : "4A9CD65C-56BE-46F8-8743-DB938217E863"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p_vpn_router_with_poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A695DCE-ACFE-4437-BA0E-FBF6E379FF91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-cmd-exe-n47kJQLE",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-cmd-exe-n47kJQLE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20047",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:17.063",
      "lastModified" : "2024-11-21T07:40:25.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco Webex Room Phone and Cisco Webex Share devices could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r This vulnerability is due to insufficient resource allocation. An attacker could exploit this vulnerability by sending crafted LLDP traffic to an affected device. A successful exploit could allow the attacker to exhaust the memory resources of the affected device, resulting in a crash of the LLDP process. If the affected device is configured to support LLDP only, this could cause an interruption to inbound and outbound calling. By default, these devices are configured to support both Cisco Discovery Protocol and LLDP. To recover operational state, the affected device needs a manual restart."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la función Link Layer Discovery Protocol (LLDP) de los dispositivos Cisco Webex Room Phone y Cisco Webex Share podría permitir que un atacante adyacente no autenticado provoque una condición de denegación de servicio (DoS) en un dispositivo afectado. Esta vulnerabilidad se debe a una asignación insuficiente de recursos. Un atacante podría aprovechar esta vulnerabilidad enviando tráfico LLDP manipulado a un dispositivo afectado. Un exploit exitoso podría permitir al atacante agotar los recursos de memoria del dispositivo afectado, lo que provocaría una falla del proceso LLDP. Si el dispositivo afectado está configurado para admitir únicamente LLDP, esto podría causar una interrupción en las llamadas entrantes y salientes. De forma predeterminada, estos dispositivos están configurados para admitir tanto Cisco Discovery Protocol como LLDP. Para recuperar el estado operativo, el dispositivo afectado necesita un reinicio manual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:webex_room_phone_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "4F444881-CA93-422D-BF5F-BD44C2E3250B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:webex_room_phone:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "060033D2-5332-4C89-813A-3780E1619DFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:webex_share_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "565DAB6E-1F2D-44D6-93EC-8207F6A4CCE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:webex_share:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F0BAD8-AF78-4817-ADD0-9BDC0027D1A3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sip_ip_phone_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "E37E42DB-266B-44AA-8210-638D63B9DD7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-lldp-memlk-McOecPT",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-lldp-memlk-McOecPT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20057",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:17.377",
      "lastModified" : "2024-11-21T07:40:27.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device.\r\n\r This vulnerability is due to improper processing of URLs. An attacker could exploit this vulnerability by crafting a URL in a particular way. A successful exploit could allow the attacker to bypass the URL reputation filters that are configured for an affected device, which could allow malicious URLs to pass through the device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el mecanismo de filtrado de URL del software Cisco AsyncOS para Cisco Email Security Appliance (ESA) podría permitir que un atacante remoto no autenticado evite los filtros de reputación de URL en un dispositivo afectado. Esta vulnerabilidad se debe a un procesamiento inadecuado de las URL. Un atacante podría aprovechar esta vulnerabilidad creando una URL de una manera particular. Un exploit exitoso podría permitir al atacante eludir los filtros de reputación de URL configurados para un dispositivo afectado, lo que podría permitir que URL maliciosas pasen a través del dispositivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N",
            "baseScore" : 0.0,
            "baseSeverity" : "NONE",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 0.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-792"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:asyncos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87AA6AB8-12B9-4810-9D06-01EEBF7B01C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:email_security_appliance_c160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50009089-506D-42B4-B34D-CFC719B0395B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:email_security_appliance_c170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FD72D-E9E6-451C-9483-EBFDD41C9336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:email_security_appliance_c190:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C890DD-36BE-416F-B0D3-FB8AAD5F03BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:email_security_appliance_c370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8ED62C8-2B7E-47CA-BE16-00E02CA72763"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:email_security_appliance_c370d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93AF10FC-7988-446F-86E6-8A4E90762DA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:email_security_appliance_c380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA19FA3-6CFE-4D6A-A987-CE49A650BE3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:email_security_appliance_c390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "675068B9-167C-42F9-87DD-FF0146B8ADDC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:email_security_appliance_c670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1149EA5-37D0-4E1F-803D-A7A0658653FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:email_security_appliance_c680:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2334C4-812A-4C28-B708-EA969C05D4C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:email_security_appliance_c690:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA67042-D6DD-436D-9E41-475CBD670940"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:email_security_appliance_c690x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AFD49E-F367-4776-85B8-6BD7F57D78C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:email_security_appliance_x1070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E312DF25-A961-4682-B374-4A394431F8E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-url-bypass-WbMQqNJh",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-url-bypass-WbMQqNJh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20058",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-01-20T07:15:17.633",
      "lastModified" : "2024-11-21T07:40:27.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface.\r\n\r This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Cisco Unified Intelligence Center podría permitir que un atacante remoto no autenticado lleve a cabo un ataque de cross-site scripting (XSS) reflejado contra un usuario de la interfaz. Esta vulnerabilidad existe porque la interfaz de administración basada en web no valida adecuadamente la entrada proporcionada por el usuario. Un atacante podría aprovechar esta vulnerabilidad persuadiendo a un usuario de la interfaz para que haga clic en un enlace manipulado. Un exploit exitoso podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:packaged_contact_center_enterprise:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0\\(1\\)",
            "versionEndExcluding" : "12.5\\(1\\)_su2_es05",
            "matchCriteriaId" : "B5AC23CF-847A-4946-9338-DAE9DCF4FD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:packaged_contact_center_enterprise:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5\\(1\\)_su2",
            "versionEndExcluding" : "12.5\\(1\\)_su2_es05",
            "matchCriteriaId" : "71026A7F-73E9-4A9B-9189-D10130B09D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_enterprise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.5\\(1\\)_es02",
            "matchCriteriaId" : "5515B7B0-0E16-4284-B6BF-1790E78699E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_enterprise:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5\\(2\\)",
            "versionEndExcluding" : "12.6\\(1\\)_es06",
            "matchCriteriaId" : "E1C3570C-01E5-43D6-B416-B10F3AB2C73D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_enterprise:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.6\\(1\\)",
            "versionEndExcluding" : "12.6\\(1\\)_es06",
            "matchCriteriaId" : "49442B0B-5847-444F-B19D-9CCE29CBDF6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_express:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.5\\(1\\)_su2_es05",
            "matchCriteriaId" : "03A8678A-D1C2-4C80-83C9-DD49873D09EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_express:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5\\(1\\)_su2",
            "versionEndExcluding" : "12.5\\(1\\)_su2_es05",
            "matchCriteriaId" : "5C6F0F5F-0628-4D64-83AB-9ECAEB993340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_intelligence_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.5\\(1\\)_es02",
            "matchCriteriaId" : "3A75793A-2FEB-4E2F-9BCF-3339D17DD551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_intelligence_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.6\\(1\\)",
            "versionEndExcluding" : "12.6\\(1\\)_es06",
            "matchCriteriaId" : "F0D850FC-1E64-4766-851E-7928B5F58FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_intelligence_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.6\\(1\\)_es2",
            "versionEndExcluding" : "12.6\\(1\\)_es06",
            "matchCriteriaId" : "3FF76CFD-E98A-4494-AEA0-D3917F0CF607"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuis-xss-Omm8jyBX",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuis-xss-Omm8jyBX",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T08:15:12.670",
      "lastModified" : "2025-04-03T15:15:46.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jc21 NGINX Proxy Manager through 2.9.19 allows OS command injection. When creating an access list, the backend builds an htpasswd file with crafted username and/or password input that is concatenated without any validation, and is directly passed to the exec command, potentially allowing an authenticated attacker to execute arbitrary commands on the system. NOTE: this is not part of any NGINX software shipped by F5."
      }, {
        "lang" : "es",
        "value" : "jc21 NGINX Proxy Manager hasta 2.9.19 permite la inyección de comandos de sistema operativo. Al crear una lista de acceso, el backend crea un archivo htpasswd con un nombre de usuario y/o contraseña manipulados que se concatena sin ninguna validación y se pasa directamente al comando exec, lo que potencialmente permite que un atacante autenticado ejecute comandos arbitrarios en el sistema. NOTA: esto no forma parte de ningún software NGINX enviado por F5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jc21:nginx_proxy_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.19",
            "matchCriteriaId" : "761A1BF8-D56E-4A62-A45F-73332678E8B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.dw1.io/57",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NginxProxyManager/nginx-proxy-manager/blob/4f10d129c20cc82494b95cc94b97f859dbd4b54d/backend/internal/access-list.js#L510",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://advisory.dw1.io/57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NginxProxyManager/nginx-proxy-manager/blob/4f10d129c20cc82494b95cc94b97f859dbd4b54d/backend/internal/access-list.js#L510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23691",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-01-20T08:15:17.193",
      "lastModified" : "2024-11-21T07:46:40.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell EMC PV ME5, versions ME5.1.0.0.0 and ME5.1.0.1.0, contains a Client-side desync Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability to force a victim's browser to desynchronize its connection with the website, typically leading to XSS and DoS.\n\n"
      }, {
        "lang" : "es",
        "value" : "Dell EMC PV ME5, versiones ME5.1.0.0.0 y ME5.1.0.1.0, contiene una vulnerabilidad de desincronización del lado del cliente. Un atacante no autenticado podría explotar esta vulnerabilidad para obligar al navegador de la víctima a desincronizar su conexión con el sitio web, lo que normalmente genera XSS y DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powervault_me5012_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "me5.1.1.0.5",
            "matchCriteriaId" : "A02045C1-AF78-47AF-8FD9-2505DA8B1D75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:powervault_me5012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5504865-CF03-4B7D-9448-F334044EF4CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powervault_me5024_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "me5.1.1.0.5",
            "matchCriteriaId" : "AE7B7D46-01AF-4B50-B7A3-828E135F4A47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:powervault_me5024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A402192-509E-4E57-839A-B95F92E22479"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powervault_me5084_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "me5.1.1.0.5",
            "matchCriteriaId" : "EF402AE5-B146-400D-9FBB-F9CE6E36B5BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:powervault_me5084:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B607B99-3C92-4DF1-A12F-03050485EF0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207533/dsa-2023-018-dell-emc-powervault-me5-security-update-for-a-client-desync-attack-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207533/dsa-2023-018-dell-emc-powervault-me5-security-update-for-a-client-desync-attack-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T17:15:11.003",
      "lastModified" : "2025-04-03T15:15:43.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when LDAP authentication is enabled."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine ServiceDesk Plus MSP anterior a 10611 y 13x anterior a 13004 es vulnerable a la omisión de autenticación cuando la autenticación LDAP está habilitada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.6:10600:*:*:*:*:*:*",
            "matchCriteriaId" : "877000C8-0405-481D-95CC-72B783457401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.6:10601:*:*:*:*:*:*",
            "matchCriteriaId" : "1DC5243C-C10E-46A1-A71E-7E736FC651E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.6:10602:*:*:*:*:*:*",
            "matchCriteriaId" : "C17D5800-8A5A-44BE-ACE3-6FB21631551C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.6:10603:*:*:*:*:*:*",
            "matchCriteriaId" : "D27B7FA3-95C7-469F-BAB8-3CAE35AE7CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.6:10604:*:*:*:*:*:*",
            "matchCriteriaId" : "C1671DFA-9DAA-41E5-9528-50F63D32FBF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.6:10605:*:*:*:*:*:*",
            "matchCriteriaId" : "9F539D31-62C3-4129-8B56-8CDCD8F8E0A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.6:10606:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BAC4E7-840F-461A-A0F9-6E29F5C43F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.6:10607:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB47A8C-7569-45C7-A7A9-4E8C898CE6D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.6:10608:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF8EED5-6575-41EC-9E5D-0BC0355AF0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.6:10609:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0F1C6C-878B-4E5E-BE82-1FC0B17CEF3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.6:10610:*:*:*:*:*:*",
            "matchCriteriaId" : "C40C9186-B510-401C-B934-3432C80A38A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13000:*:*:*:*:*:*",
            "matchCriteriaId" : "298E6401-A9A9-43B6-901F-327944E0AF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13001:*:*:*:*:*:*",
            "matchCriteriaId" : "0998F749-27E4-4C98-A027-939427640F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13002:*:*:*:*:*:*",
            "matchCriteriaId" : "05694BAB-3210-47A6-8FAD-5AC84FBAD240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13003:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0F5553-E56E-4DFC-BEE1-62872D078886"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk-msp/cve-2023-22964.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk-msp/cve-2023-22964.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T18:15:10.363",
      "lastModified" : "2025-04-03T16:15:31.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. There is XSS in Wikibase date formatting via wikibase-time-precision-* fields. This allows JavaScript execution by staff/admin users who do not intentionally have the editsitejs capability."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en MediaWiki antes de 1.35.9, 1.36.x hasta 1.38.x antes de 1.38.5 y 1.39.x antes de 1.39.1. Hay XSS en el formato de fecha de Wikibase a través de los campos wikibase-time-precision-*. Esto permite la ejecución de JavaScript por parte del personal/usuarios administradores que no tienen intencionalmente la capacidad editsitejs."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.35.9",
            "matchCriteriaId" : "357C67CA-8586-4F8D-951C-51220DD6AA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.36.0",
            "versionEndExcluding" : "1.38.5",
            "matchCriteriaId" : "13962AAD-4625-42E8-B960-53FAE7699070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.39.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "243E4420-7054-4190-8270-76E09207FC9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.39.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "90D9672A-851F-46B0-AA0D-35991D7802E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.39.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5141FCFC-D842-49B8-9385-5EE2DB6E7BFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://phabricator.wikimedia.org/T323592",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T323592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T18:15:10.417",
      "lastModified" : "2025-04-03T16:15:32.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. CheckUser TokenManager insecurely uses AES-CTR encryption with a repeated (aka re-used) nonce, allowing an adversary to decrypt."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en MediaWiki antes de 1.35.9, 1.36.x hasta 1.38.x antes de 1.38.5 y 1.39.x antes de 1.39.1. CheckUser TokenManager utiliza de forma insegura el cifrado AES-CTR con un nonce repetido (también conocido como reutilizado), lo que permite a un adversario descifrarlo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.35.9",
            "matchCriteriaId" : "357C67CA-8586-4F8D-951C-51220DD6AA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.36.0",
            "versionEndExcluding" : "1.38.5",
            "matchCriteriaId" : "13962AAD-4625-42E8-B960-53FAE7699070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.39.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "243E4420-7054-4190-8270-76E09207FC9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.39.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "90D9672A-851F-46B0-AA0D-35991D7802E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:1.39.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5141FCFC-D842-49B8-9385-5EE2DB6E7BFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://phabricator.wikimedia.org/T315123",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T315123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23488",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-01-20T18:15:10.470",
      "lastModified" : "2025-04-03T20:15:22.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route."
      }, {
        "lang" : "es",
        "value" : "El complemento Paid Memberships Pro de WordPress, versión &lt;2.9.8, se ve afectado por una vulnerabilidad de inyección SQL no autenticada en el parámetro 'código' de la ruta REST '/pmpro/v1/order'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strangerstudios:paid_memberships_pro:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.9.8",
            "matchCriteriaId" : "16E538EF-C181-426D-9B0B-72513C1B21A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171661/WordPress-Paid-Memberships-Pro-2.9.8-SQL-Injection.html",
        "source" : "vulnreport@tenable.com"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171661/WordPress-Paid-Memberships-Pro-2.9.8-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23489",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-01-20T18:15:10.530",
      "lastModified" : "2025-04-03T20:15:22.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edd_download_search' action."
      }, {
        "lang" : "es",
        "value" : "El complemento Easy Digital Downloads de WordPress, versiones 3.1.0.2 y 3.1.0.2. 3.1.0.3, se ve afectado por una vulnerabilidad de inyección SQL no autenticada en el parámetro 's' de su acción 'edd_download_search'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandhillsdev:easy_digital_downloads:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.0.4",
            "matchCriteriaId" : "13188289-CF98-4DC1-851F-9BD297018008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0101",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-01-20T19:15:17.847",
      "lastModified" : "2025-04-02T15:15:50.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM privileges on the Nessus host."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad de escalada de privilegios en las versiones de Nessus 8.10.1 a 8.15.8 y 10.0.0 a 10.4.1. Un atacante autenticado podría potencialmente ejecutar un archivo especialmente manipulado para obtener privilegios de root o NT AUTHORITY/SYSTEM en el host de Nessus."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.1",
            "versionEndExcluding" : "8.15.8",
            "matchCriteriaId" : "50D0D0D0-2434-4E3D-8FE4-B32351665DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.4.2",
            "matchCriteriaId" : "F0C6D1A6-679B-4D90-B041-FFC751015354"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/tns-2023-01",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2023-02",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2023-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2023-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22458",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-20T19:15:17.917",
      "lastModified" : "2024-11-21T07:44:50.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redis is an in-memory database that persists on disk. Authenticated users can issue a `HRANDFIELD` or `ZRANDMEMBER` command with specially crafted arguments to trigger a denial-of-service by crashing Redis with an assertion failure. This problem affects Redis versions 6.2 or newer up to but not including 6.2.9 as well as versions 7.0 up to but not including 7.0.8. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Redis es una base de datos en memoria que persiste en el disco. Los usuarios autenticados pueden emitir un comando \"HRANDFIELD\" o \"ZRANDMEMBER\" con argumentos especialmente manipulados para desencadenar una denegación de servicio al bloquear Redis con un error de aserción. Este problema afecta a las versiones de Redis 6.2 o posteriores hasta la 6.2.9 (sin incluir), así como a las versiones 7.0 hasta la 7.0.8 (sin incluir). Se recomienda a los usuarios que actualicen. No se workarounds para esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.2.9",
            "matchCriteriaId" : "0987D1A6-7DB8-468A-92E2-4C9F4BC41430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.8",
            "matchCriteriaId" : "4E8878EC-13C4-4C33-A80E-5F1D4E7A5A19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redis/redis/commit/16f408b1a0121cacd44cbf8aee275d69dc627f02",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/releases/tag/6.2.9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/releases/tag/7.0.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/security/advisories/GHSA-r8w2-2m53-gprj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/commit/16f408b1a0121cacd44cbf8aee275d69dc627f02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/releases/tag/6.2.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/releases/tag/7.0.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/security/advisories/GHSA-r8w2-2m53-gprj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T19:15:18.010",
      "lastModified" : "2025-04-03T15:15:43.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in Ecommerce-CodeIgniter-Bootstrap thru commit d5904379ca55014c5df34c67deda982c73dc7fe5 (on Dec 27, 2022), allows attackers to execute arbitrary code via the languages and trans_load parameters in file add_product.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross site scripting (XSS) en Ecommerce-CodeIgniter-Bootstrap a través del commit d5904379ca55014c5df34c67deda982c73dc7fe5 (el 27 de diciembre de 2022), permite a atacantes ejecutar código arbitrario a través de los idiomas y los parámetros trans_load en el archivo add_product.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecommerce-codeigniter-bootstrap_project:ecommerce-codeigniter-bootstrap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022-12-27",
            "matchCriteriaId" : "2C7A0851-121A-4464-817A-B7AB149D48A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/enferas/8a836008e9f635a2f80d09c9a8b5a533",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/d5904379ca55014c5df34c67deda982c73dc7fe5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/issues/242",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/enferas/8a836008e9f635a2f80d09c9a8b5a533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/d5904379ca55014c5df34c67deda982c73dc7fe5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/issues/242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T19:15:18.060",
      "lastModified" : "2025-04-03T15:15:45.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecified impacts via the input bgcol in file Weeks.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross Site Scripting (XSS) en craigrodway Classroombookings 2.6.4 permite a atacantes ejecutar código arbitrario u otros impactos no especificados a través de la entrada bgcol en el archivo Weeks.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:classroombookings:classroombookings:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAE0099-088C-4ECC-91CF-4248D3A157B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/enferas/bd8ec37999c216eceabd6b80d5a95f94",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/craigrodway/classroombookings/issues/52",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/enferas/bd8ec37999c216eceabd6b80d5a95f94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/craigrodway/classroombookings/issues/52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T19:15:18.117",
      "lastModified" : "2025-04-03T15:15:45.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in InventorySystem thru commit e08fbbe17902146313501ed0b5feba81d58f455c (on Apr 23, 2021) via edit_store_name and edit_active inputs in file InventorySystem.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross site scripting (XSS) en InventorySystem a través del commit e08fbbe17902146313501ed0b5feba81d58f455c (el 23 de abril de 2021) a través de las entradas edit_store_name y edit_active en el archivo InventorySystem.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inventory_system_project:inventory_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-04-23",
            "matchCriteriaId" : "413ACC49-84A1-429A-AFB9-AE5DDE54C3E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/enferas/649f39c955ce2816ba1abae620e749c7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ronknight/InventorySystem/issues/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/enferas/649f39c955ce2816ba1abae620e749c7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ronknight/InventorySystem/issues/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T19:15:18.170",
      "lastModified" : "2025-04-03T15:15:46.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in Kalkun 0.8.0 via username input in file User_model.php."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross Site Scripting (XSS) en Kalkun 0.8.0 mediante la entrada de nombre de usuario en el archivo User_model.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kalkun_project:kalkun:0.8.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD68199-954D-4418-9629-0E8E4AE47E1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/enferas/eaf599190451745f1b339f64cca4a36d",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kalkun-sms/Kalkun/issues/487",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/enferas/eaf599190451745f1b339f64cca4a36d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kalkun-sms/Kalkun/issues/487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T19:15:18.223",
      "lastModified" : "2025-04-03T15:15:46.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the writer parameter."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que Book Store Management System v1.0 contenía una vulnerabilidad de cross site scripting (XSS) en /bsms_ci/index.php/book. Esta vulnerabilidad permite a los atacantes ejecutar scripts web o HTML arbitrarios a través de un payload manipulado inyectado en el parámetro writer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:book_store_management_system_project:book_store_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1BB334-C4F4-456D-B55F-61A06A11757D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/enferas/6ae66b7daf4f86997cd5320975f209e2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/enferas/6ae66b7daf4f86997cd5320975f209e2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T19:15:18.277",
      "lastModified" : "2025-04-03T15:15:46.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow vulnerability in function avc_parse_slice in file media_tools/av_parsers.c. GPAC version 2.3-DEV-rev1-g4669ba229-master."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de búfer en la función avc_parse_slice en el archivo media_tools/av_parsers.c. GPAC versión 2.3-DEV-rev1-g4669ba229-master."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:2.3-dev-rev1-g4669ba229-master:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA6197A-71E9-42E6-AB8A-31E68F549B0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/af6a5e7a96ee01a139cce6c9e4edfc069aad17a6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/gpac/gpac/commit/af6a5e7a96ee01a139cce6c9e4edfc069aad17a6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T19:15:18.333",
      "lastModified" : "2025-04-03T15:15:46.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow vulnerability in function Q_DecCoordOnUnitSphere file bifs/unquantize.c in GPAC version 2.2-rev0-gab012bbfb-master."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de enteros en la función Q_DecCoordOnUnitSphere archivo bifs/unquantize.c en GPAC versión 2.2-rev0-gab012bbfb-master."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:2.2-rev0-gab012bbfb-master:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3076C60-CC3F-4803-A5C1-B5057607B315"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/3a2458a49b3e6399709d456d7b35e7a6f50cfb86",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/gpac/gpac/commit/3a2458a49b3e6399709d456d7b35e7a6f50cfb86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T19:15:18.387",
      "lastModified" : "2025-04-03T15:15:46.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr_read_rare_full function."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que la versión 2.2-rev0-gab012bbfb-master de GPAC contenía una pérdida de memoria en la función lsr_read_rare_full."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:2.2-rev0-gab012bbfb-master:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3076C60-CC3F-4803-A5C1-B5057607B315"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/4ade98128cbc41d5115b97a41ca2e59529c8dd5f",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/gpac/gpac/commit/4ade98128cbc41d5115b97a41ca2e59529c8dd5f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23490",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-01-20T19:15:18.440",
      "lastModified" : "2025-04-03T20:15:22.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Survey Maker WordPress Plugin, version < 3.1.2, is affected by an authenticated SQL injection vulnerability in the 'surveys_ids' parameter of its 'ays_surveys_export_json' action."
      }, {
        "lang" : "es",
        "value" : "El complemento Survey Maker de WordPress, versión &lt; 3.1.2, se ve afectado por una vulnerabilidad de inyección SQL autenticada en el parámetro 'surveys_ids' de su acción 'ays_surveys_export_json'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ays-pro:survey_maker:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.2",
            "matchCriteriaId" : "B9F82C68-9E42-4815-9FE3-28165DA1F6AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23491",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-01-20T19:15:18.493",
      "lastModified" : "2025-04-03T20:15:22.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Quick Event Manager WordPress Plugin, version < 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' parameter of its 'qem_ajax_calendar' action."
      }, {
        "lang" : "es",
        "value" : "El complemento Quick Event Manager de WordPress, versión &lt; 9.7.5, se ve afectado por una vulnerabilidad de cross site scripting reflejado en el parámetro 'category' de su acción 'qem_ajax_calendar'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fullworksplugins:quick_event_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "9.7.5",
            "matchCriteriaId" : "4B4745F0-6309-45C9-9A83-5F72674E6F4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-3",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23492",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-01-20T19:15:18.543",
      "lastModified" : "2025-04-03T20:15:22.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwp_forgot_password' action."
      }, {
        "lang" : "es",
        "value" : "El complemento Login with Phone Number de WordPress, versión &lt; 1.4.2, se ve afectado por una vulnerabilidad de inyección SQL autenticada en el parámetro 'ID' de su acción 'lwp_forgot_password'."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idehweb:login_with_phone_number:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.2",
            "matchCriteriaId" : "2C9F7359-A456-48B1-87AE-D81FBDA2BF96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-3",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T19:15:18.593",
      "lastModified" : "2025-04-02T17:15:34.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect handling of '\\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection."
      }, {
        "lang" : "es",
        "value" : "El manejo incorrecto de los bytes '\\0' en las cargas de archivos en ModSecurity anteriores a 2.9.7 puede permitir omisiones del Firewall de aplicaciones web y sobrelecturas del búfer en el Firewall de aplicaciones web al ejecutar reglas que leen la colección FILES_TMP_CONTENT."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-170"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustwave:modsecurity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.7",
            "matchCriteriaId" : "489F74FB-9089-4BC4-8A60-E55D301147A3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SpiderLabs/ModSecurity/pull/2857",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/SpiderLabs/ModSecurity/pull/2857/commits/4324f0ac59f8225aa44bc5034df60dbeccd1d334",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.7",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/52TGCZCOHYBDCVWJYNN2PS4QLOHCXWTQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYRTXTOQQI6SB2TLI5QXU76DURSLS4XI/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCH6JM4I4MD4YABYFHSBDDOUFDGIFJKL/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/SpiderLabs/ModSecurity/pull/2857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/SpiderLabs/ModSecurity/pull/2857/commits/4324f0ac59f8225aa44bc5034df60dbeccd1d334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/52TGCZCOHYBDCVWJYNN2PS4QLOHCXWTQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYRTXTOQQI6SB2TLI5QXU76DURSLS4XI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCH6JM4I4MD4YABYFHSBDDOUFDGIFJKL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23607",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-20T21:15:11.167",
      "lastModified" : "2024-11-21T07:46:31.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "erohtar/Dasherr is a dashboard for self-hosted services. In affected versions unrestricted file upload allows any unauthenticated user to execute arbitrary code on the server. The file /www/include/filesave.php allows for any file to uploaded to anywhere. If an attacker uploads a php file they can execute code on the server. This issue has been addressed in version 1.05.00. Users are advised to upgrade. There are no known workarounds for this issue.\n"
      }, {
        "lang" : "es",
        "value" : "erohtar/Dasherr es un panel para servicios autohospedados. En las versiones afectadas, la carga de archivos sin restricciones permite que cualquier usuario no autenticado ejecute código arbitrario en el servidor. El archivo /www/include/filesave.php permite cargar cualquier archivo en cualquier lugar. Si un atacante carga un archivo php, puede ejecutar código en el servidor. Este problema se solucionó en la versión 1.05.00. Se recomienda a los usuarios que actualicen. No se conocen workarounds para este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dasherr_project:dasherr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.05.00",
            "matchCriteriaId" : "8BD184F8-3C80-4A3B-A198-5CA082851B8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/erohtar/Dasherr/commit/445325c7cf1148a8cd38af3a90789c6cbf6c5112",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/erohtar/Dasherr/security/advisories/GHSA-6rgc-2x44-7phq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/erohtar/Dasherr/commit/445325c7cf1148a8cd38af3a90789c6cbf6c5112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/erohtar/Dasherr/security/advisories/GHSA-6rgc-2x44-7phq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/analyzing-arbitrary-file-upload-in-dasherr-cve-2023-23607-23608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T21:15:11.273",
      "lastModified" : "2025-04-02T17:15:35.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRYSTALS-DILITHIUM (in Post-Quantum Cryptography Selected Algorithms 2022) in PQClean d03da30 may allow universal forgeries of digital signatures via a template side-channel attack because of intermediate data leakage of one vector."
      }, {
        "lang" : "es",
        "value" : "CRYSTALS-DILITHIUM (en Algoritmos seleccionados de criptografía poscuántica 2022) en PQClean d03da30 puede permitir falsificaciones universales de firmas digitales a través de un ataque de canal lateral de plantilla debido a la fuga de datos intermedia de un vector."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pqclean_project:pqclean:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE58CA10-AA9D-457E-A69F-B332B538D833"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://csrc.nist.gov/Projects/post-quantum-cryptography/selected-algorithms-2022",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://eprint.iacr.org/2023/050",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PQClean/PQClean/tree/d03da3053491e767ef842deaef43fc5bdb6bc911",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://csrc.nist.gov/Projects/post-quantum-cryptography/selected-algorithms-2022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://eprint.iacr.org/2023/050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PQClean/PQClean/tree/d03da3053491e767ef842deaef43fc5bdb6bc911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0052",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-01-20T22:15:10.417",
      "lastModified" : "2024-11-21T07:36:27.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials. As Telnet and file transfer protocol (FTP) are the only protocols available for device management, an unauthorized user could access the system and modify the device configuration, which could result in the unauthorized user executing unrestricted malicious commands.\n\n"
      }, {
        "lang" : "es",
        "value" : "SAUTER Controls Nova Serie 200–220 con versión de firmware 3.3-006 y anteriores y BACnetstac versión 4.2.1 y anteriores permite la ejecución de comandos sin credenciales. Como Telnet y el protocolo de transferencia de archivos (FTP) son los únicos protocolos disponibles para la administración de dispositivos, un usuario no autorizado podría acceder al sistema y modificar la configuración del dispositivo, lo que podría provocar que el usuario no autorizado ejecute comandos maliciosos sin restricciones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:nova_220_eyk220f001_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3-006",
            "matchCriteriaId" : "5E514737-2011-43D1-8283-58D57BA13BE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:nova_220_eyk220f001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F35195-7225-426C-998F-9E68AE7823F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:nova_230_eyk230f001_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3-006",
            "matchCriteriaId" : "0CBBF6A0-9764-47E0-81DC-04AEEED9AC18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:nova_230_eyk230f001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11465A2B-145D-47A5-9275-C4853304488C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:nova_106_eyk300f001_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3-006",
            "matchCriteriaId" : "4D125C85-B22C-4A2F-A304-988C606259BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:nova_106_eyk300f001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "668A40CB-2C90-426B-B0B3-709C6601104D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:modunet300_ey-am300f001_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3-006",
            "matchCriteriaId" : "8668DBA6-866D-43DE-97F6-C7D91E1FD308"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:modunet300_ey-am300f001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7214F356-6035-4A3B-8519-F6D89FF00370"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:modunet300_ey-am300f002_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3-006",
            "matchCriteriaId" : "2A38DFF4-32E2-4B7C-A93D-8ADE3A862FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:modunet300_ey-am300f002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8B577B-9BEB-4DE3-A2A4-648EAF1C15CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22726",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-20T22:15:10.533",
      "lastModified" : "2024-11-21T07:45:18.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "act is a project which allows for local running of github actions. The artifact server that stores artifacts from Github Action runs does not sanitize path inputs. This allows an attacker to download and overwrite arbitrary files on the host from a Github Action. This issue may lead to privilege escalation. The /upload endpoint is vulnerable to path traversal as filepath is user controlled, and ultimately flows into os.Mkdir and os.Open. The /artifact endpoint is vulnerable to path traversal as the path is variable is user controlled, and the specified file is ultimately returned by the server. This has been addressed in version 0.2.40. Users are advised to upgrade. Users unable to upgrade may, during implementation of Open and OpenAtEnd for FS, ensure to use ValidPath() to check against path traversal or clean the user-provided paths manually."
      }, {
        "lang" : "es",
        "value" : "act es un proyecto que permite la ejecución local de acciones de github. El servidor de artefactos que almacena artefactos de las ejecuciones de Github Action no sanitiza  las entradas de ruta. Esto permite a un atacante descargar y sobrescribir archivos arbitrarios en el host desde una Github Action. Este problema puede provocar una escalada de privilegios. El endpoint /upload es vulnerable a path traversal, ya que la ruta del archivo está controlada por el usuario y, en última instancia, fluye hacia os.Mkdir y os.Open. El endpoint /artifact es vulnerable a path traversal, ya que la ruta es variable y está controlada por el usuario y, en última instancia, el servidor devuelve el archivo especificado. Esto se ha solucionado en la versión 0.2.40. Se recomienda a los usuarios que actualicen. Los usuarios que no puedan actualizar pueden, durante la implementación de Open y OpenAtEnd para FS, asegurarse de usar ValidPath() para verificar el path traversal o limpiar las rutas proporcionadas por el usuario manualmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:act_project:act:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "0.2.40",
            "matchCriteriaId" : "35CF3411-A8C4-4D5C-A1E2-33E19D14DFDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nektos/act/blob/master/pkg/artifacts/server.go#L65",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nektos/act/blob/v0.2.35/pkg/artifacts/server.go#L245",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nektos/act/blob/v0.2.35/pkg/artifacts/server.go#LL103C2-L103C2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nektos/act/commit/63ae215071f94569d910964bdee866d91d6e3a10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nektos/act/issues/1553",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nektos/act/security/advisories/GHSA-pc99-qmg4-rcff",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2023-004_act/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nektos/act/blob/master/pkg/artifacts/server.go#L65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nektos/act/blob/v0.2.35/pkg/artifacts/server.go#L245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nektos/act/blob/v0.2.35/pkg/artifacts/server.go#LL103C2-L103C2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nektos/act/commit/63ae215071f94569d910964bdee866d91d6e3a10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nektos/act/issues/1553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nektos/act/security/advisories/GHSA-pc99-qmg4-rcff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2023-004_act/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T22:15:10.643",
      "lastModified" : "2025-04-02T17:15:36.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload."
      }, {
        "lang" : "es",
        "value" : "En MISP 2.4.167, app/webroot/js/event-graph.js tiene una vulnerabilidad XSS a través de un payload de vista previa del gráfico de eventos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp-project:misp:2.4.167:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22483A68-8ADB-435E-9972-4A130C5FE8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/a46f794a136001101cbec84fccf3cc824e983493",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/a46f794a136001101cbec84fccf3cc824e983493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T22:15:10.707",
      "lastModified" : "2025-04-02T17:15:36.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MISP 2.4.167, app/webroot/js/action_table.js allows XSS via a network history name."
      }, {
        "lang" : "es",
        "value" : "En MISP 2.4.167, app/webroot/js/action_table.js permite XSS a través de un nombre de historial de red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp:misp:2.4.167:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1147A220-6AB4-4A78-9A97-75C367352A48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/72c5424034c378583d128fc1e769aae33fb1c8b9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/72c5424034c378583d128fc1e769aae33fb1c8b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-20T22:15:10.767",
      "lastModified" : "2025-04-03T15:15:47.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function."
      }, {
        "lang" : "es",
        "value" : "En MISP 2.4.167, app/Controller/Component/ACLComponent.php tiene un control de acceso incorrecto para la función de importación en decadencia."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp-project:misp:2.4.167:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22483A68-8ADB-435E-9972-4A130C5FE8C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/93bf15d3bd703a32ebfe86cb6c1c9b735cf23e30",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/93bf15d3bd703a32ebfe86cb6c1c9b735cf23e30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22742",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-20T23:15:10.307",
      "lastModified" : "2024-11-21T07:45:20.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Prior versions of libgit2 require the caller to set the `certificate_check` field of libgit2's `git_remote_callbacks` structure - if a certificate check callback is not set, libgit2 does not perform any certificate checking. This means that by default - without configuring a certificate check callback, clients will not perform validation on the server SSH keys and may be subject to a man-in-the-middle attack. Users are encouraged to upgrade to v1.4.5 or v1.5.1. Users unable to upgrade should ensure that all relevant certificates are manually checked."
      }, {
        "lang" : "es",
        "value" : "libgit2 es una implementación de librería vinculable y multiplataforma de Git. Cuando se utiliza un control remoto SSH con el backend libssh2 opcional, libgit2 no realiza la verificación de certificados de forma predeterminada. Las versiones anteriores de libgit2 requieren que la persona que llama establezca el campo `certificate_check` de la estructura `git_remote_callbacks` de libgit2; si no se establece una devolución de llamada de verificación de certificado, libgit2 no realiza ninguna verificación de certificado. Esto significa que, de forma predeterminada, sin configurar una devolución de llamada de verificación de certificado, los clientes no realizarán la validación de las claves SSH del servidor y pueden estar sujetos a un ataque de intermediario. Se anima a los usuarios a actualizar a v1.4.5 o v1.5.1. Los usuarios que no puedan actualizar deben asegurarse de que todos los certificados relevantes se verifiquen manualmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgit2:libgit2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.5",
            "matchCriteriaId" : "211986E1-A66C-4735-8B6B-668FC843933C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libgit2:libgit2:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2042615-3246-4D57-9182-2FAFE3397667"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/11/06/5",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/libgit2/libgit2/commit/42e5db98b963ae503229c63e44e06e439df50e56",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libgit2/libgit2/commit/cd6f679af401eda1f172402006ef8265f8bd58ea",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libgit2/libgit2/releases/tag/v1.4.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libgit2/libgit2/releases/tag/v1.5.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libgit2/libgit2/security/advisories/GHSA-8643-3wh5-rmjq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.libssh2.org",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/11/06/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/libgit2/libgit2/commit/42e5db98b963ae503229c63e44e06e439df50e56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libgit2/libgit2/commit/cd6f679af401eda1f172402006ef8265f8bd58ea",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libgit2/libgit2/releases/tag/v1.4.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libgit2/libgit2/releases/tag/v1.5.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libgit2/libgit2/security/advisories/GHSA-8643-3wh5-rmjq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.libssh2.org",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-21T01:15:15.183",
      "lastModified" : "2025-04-02T16:15:32.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic backtracking for HTML content with certain style attributes."
      }, {
        "lang" : "es",
        "value" : "El módulo HTML-StripScripts hasta la versión 1.06 para Perl permite _hss_attval_style ReDoS debido al retroceso catastrófico del contenido HTML con ciertos atributos de estilo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:html-stripscripts_project:html-stripscripts:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.06",
            "matchCriteriaId" : "3FC5B237-24AC-4967-9652-456CC07B1610"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/clintongormley/perl-html-stripscripts/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MYD5PFRUUB4VVY52I5KA3RQ7SQOD7YM/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ASDRHN2MLGL2HGBUNDZG4YLUWW6NSUKD/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5339",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/clintongormley/perl-html-stripscripts/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MYD5PFRUUB4VVY52I5KA3RQ7SQOD7YM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ASDRHN2MLGL2HGBUNDZG4YLUWW6NSUKD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-21T02:15:09.550",
      "lastModified" : "2025-04-02T16:15:33.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer overflow in ParseColors in libXm in Common Desktop Environment 1.6 can be exploited by local low-privileged users via the dtprintinfo setuid binary to escalate their privileges to root on Solaris 10 systems. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Los usuarios locales con pocos privilegios pueden aprovechar un desbordamiento de búfer en la región stack de la memoria en ParseColors en libXm en Common Desktop Environment 1.6 a través del binario dtprintinfo setuid para escalar sus privilegios a root en sistemas Solaris 10. NOTA: Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el fabricante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengroup:common_desktop_environment:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CC0760-2280-40F0-ADC9-2655EF18FC36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2023/Jan/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintlibXmas.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hnsecurity/vulns/blob/main/HNS-2022-01-dtprintinfo.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.humanativaspa.it/nothing-new-under-the-sun/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Jan/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintlibXmas.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hnsecurity/vulns/blob/main/HNS-2022-01-dtprintinfo.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.humanativaspa.it/nothing-new-under-the-sun/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-21T02:15:09.680",
      "lastModified" : "2024-11-21T07:47:18.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "dtprintinfo in Common Desktop Environment 1.6 has a bug in the parser of lpstat (an invoked external command) during listing of the names of available printers. This allows low-privileged local users to inject arbitrary printer names via the $HOME/.printers file. This injection allows those users to manipulate the control flow and disclose memory contents on Solaris 10 systems. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "dtprintinfo en Common Desktop Environment 1.6 tiene un error en el analizador de lpstat (un comando externo invocado) durante la lista de nombres de impresoras disponibles. Esto permite a los usuarios locales con pocos privilegios inyectar nombres de impresoras arbitrarios a través del archivo $HOME/.printers. Esta inyección permite a esos usuarios manipular el flujo de control y revelar el contenido de la memoria en los sistemas Solaris 10. NOTA: Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el fabricante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengroup:common_desktop_environment:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CC0760-2280-40F0-ADC9-2655EF18FC36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2023/Jan/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hnsecurity/vulns/blob/main/HNS-2022-01-dtprintinfo.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.humanativaspa.it/nothing-new-under-the-sun/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Jan/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hnsecurity/vulns/blob/main/HNS-2022-01-dtprintinfo.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.humanativaspa.it/nothing-new-under-the-sun/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-21T02:15:09.747",
      "lastModified" : "2025-12-08T14:59:09.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context->FileName."
      }, {
        "lang" : "es",
        "value" : "Una condición de ejecución en LightFTP hasta la versión 2.2 permite a un atacante lograr path traversal a través de una solicitud FTP con formato incorrecto. Un hilo de controlador puede utilizar un contexto sobrescrito&gt;FileName."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hfiref0x:lightftp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2",
            "matchCriteriaId" : "7686B587-E125-4868-9D1C-79745E9BAC94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hfiref0x/LightFTP/issues/25",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hfiref0x/LightFTP/issues/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22884",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-01-21T14:15:10.280",
      "lastModified" : "2025-03-31T15:15:39.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0.\n\n"
      }, {
        "lang" : "es",
        "value" : " Neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando (\"Inyección de comando\") en Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider. Este problema afecta a Apache Airflow: antes de 2.5.1; Apache Airflow MySQL Provider: anterior a 4.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.1",
            "matchCriteriaId" : "6EE25360-80C2-4C03-BCE7-2BB27E1CB42C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apache-airflow-providers-mysql:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.0",
            "matchCriteriaId" : "952569EF-9DEF-43CF-9329-EF0DB30FA5FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apache/airflow/pull/28811",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/0l0j3nt0t7fzrcjl2ch0jgj6c58kxs5h",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apache/airflow/pull/28811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/0l0j3nt0t7fzrcjl2ch0jgj6c58kxs5h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0433",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-21T15:15:10.153",
      "lastModified" : "2024-11-21T07:37:10.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer de almacenamiento dinámico en el repositorio de GitHub vim/vim anterior a 9.0.1225."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.1225",
            "matchCriteriaId" : "220F342C-2B9D-4371-BD43-BED77B7E99BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/17",
        "source" : "security@huntr.dev"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/18",
        "source" : "security@huntr.dev"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/21",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/vim/vim/commit/11977f917506d950b7e0cae558bd9189260b253b",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/ae933869-a1ec-402a-bbea-d51764c6618e",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EX6N2DB75A73MQGVW3CS4VTNPAYVM2M/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://support.apple.com/kb/HT213670",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://support.apple.com/kb/HT213675",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://support.apple.com/kb/HT213677",
        "source" : "security@huntr.dev"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/vim/vim/commit/11977f917506d950b7e0cae558bd9189260b253b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/ae933869-a1ec-402a-bbea-d51764c6618e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EX6N2DB75A73MQGVW3CS4VTNPAYVM2M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-21T19:15:11.077",
      "lastModified" : "2025-04-03T15:15:42.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode. This is fixed in 4.8.1."
      }, {
        "lang" : "es",
        "value" : "Un atacante remoto podría provocar una recursividad infinita en PowerDNS Recursor 4.8.0 a través de una consulta DNS que recupera registros DS para un dominio mal configurado, porque la minimización de QName se utiliza en el modo de reserva de QM. Esto se solucionó en 4.8.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "555D9C8B-4356-4078-8515-81F9C3B6CF74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/01/20/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.powerdns.com/recursor/changelog/4.8.html#change-4.8.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.powerdns.com/recursor/security-advisories/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/01/20/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.powerdns.com/recursor/changelog/4.8.html#change-4.8.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.powerdns.com/recursor/security-advisories/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0434",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-22T01:15:10.183",
      "lastModified" : "2024-11-21T07:37:10.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40."
      }, {
        "lang" : "es",
        "value" : "Validación de entrada incorrecta en pyload/pyload del repositorio de GitHub antes de 0.5.0b3.dev40."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyload:pyload:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.9",
            "matchCriteriaId" : "71C7D7BA-743B-4C43-B77C-E6C1A6ACFE7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyload:pyload:0.5.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "3040B5C9-171B-40D9-83CB-CD529DC046ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyload:pyload:0.5.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "78FA70FC-0CFE-4E89-9274-1670E1204B61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pyload/pyload/commit/a2b1eb1028f45ac58dea5f58593c1d3db2b4a104",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/7d9332d8-6997-483b-9fb9-bcf2ae01dad4",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pyload/pyload/commit/a2b1eb1028f45ac58dea5f58593c1d3db2b4a104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/7d9332d8-6997-483b-9fb9-bcf2ae01dad4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-22T03:15:09.967",
      "lastModified" : "2025-04-02T16:15:33.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites via a Host request header. NOTE: the vendor's position is \"the ability to use arbitrary domain names to access the panel is an intended feature.\""
      }, {
        "lang" : "es",
        "value" : "Un problema de inyección de encabezado de host en la página de inicio de sesión de Plesk Obsidian hasta 18.0.49 permite a los atacantes redirigir a los usuarios a sitios web maliciosos a través de un encabezado de solicitud de host. NOTA: la posición del proveedor es \"la capacidad de utilizar nombres de dominio arbitrarios para acceder al panel es una característica prevista\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plesk:obsidian:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "18.0.49",
            "matchCriteriaId" : "12ECBB22-2477-40FB-B55E-B684A081A6E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/TJetnipat/02b3854543b7ec95d54a8de811f2e8ae",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/%40jetnipat.tho/cve-2023-24044-10e48ab940d8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.plesk.com/hc/en-us/articles/10254625170322-Vulnerability-CVE-2023-24044",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gist.github.com/TJetnipat/02b3854543b7ec95d54a8de811f2e8ae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/%40jetnipat.tho/cve-2023-24044-10e48ab940d8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.plesk.com/hc/en-us/articles/10254625170322-Vulnerability-CVE-2023-24044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-22T04:15:11.560",
      "lastModified" : "2024-11-21T07:47:20.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC."
      }, {
        "lang" : "es",
        "value" : "KeePass en la versión 2.53 (en una instalación por defecto) permite a un atacante, que tiene acceso de escritura al archivo de configuración XML, obtener las contraseñas en texto claro mediante la adición de un disparador de exportación. NOTA: la posición del vendedor es que la base de datos de contraseñas no está pensada para ser segura contra un atacante que tenga ese nivel de acceso al PC local. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keepass:keepass:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.53",
            "matchCriteriaId" : "CFA47D34-7075-4B84-BB5D-1C6CAD117F72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securityboulevard.com/2023/01/keepass-password-manager-leak-cve-richixbw/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/keepass/feature-requests/2773/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://securityboulevard.com/2023/01/keepass-password-manager-leak-cve-richixbw/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/keepass/feature-requests/2773/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-22T04:15:11.617",
      "lastModified" : "2025-04-02T16:15:33.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes."
      }, {
        "lang" : "es",
        "value" : "En pkgconf hasta 1.9.3, la duplicación de variables puede causar una expansión ilimitada de cadenas debido a comprobaciones incorrectas en libpkgconf/tuple.c:pkgconf_tuple_parse. Por ejemplo, un archivo .pc que contiene unos pocos cientos de bytes puede expandirse hasta mil millones de bytes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pkgconf:pkgconf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.3",
            "matchCriteriaId" : "1C4610C3-CF01-473F-9ED6-BE94F0DC71D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitea.treehouse.systems/ariadne/pkgconf/commit/628b2b2bafa5d3a2017193ddf375093e70666059",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pkgconf/pkgconf/tags",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://nullprogram.com/blog/2023/01/18/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitea.treehouse.systems/ariadne/pkgconf/commit/628b2b2bafa5d3a2017193ddf375093e70666059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pkgconf/pkgconf/tags",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://nullprogram.com/blog/2023/01/18/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-22T06:15:10.293",
      "lastModified" : "2025-04-02T17:15:36.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservation_save.php. NOTE: 2.5.5 is a version from 2014; the latest version of Booked Scheduler is not affected. However, LabArchives Scheduler (Sep 6, 2022 Feature Release) is affected."
      }, {
        "lang" : "es",
        "value" : "Booked Scheduler 2.5.5 permite a los usuarios autenticados crear y programar eventos para cualquier otro usuario a través de un valor de ID de usuario modificado en reservation_save.php. NOTA: 2.5.5 es una versión de 2014; la última versión de Booked Scheduler no se ve afectada. Sin embargo, LabArchives Scheduler (versión de funciones del 6 de septiembre de 2022) se ve afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twinkletoessoftware:booked:2.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E59E068D-1F43-42B3-B808-C830668EA7F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LibreBooking/app/blob/0a6cb1a9eb84835553c8caf93db2791f8655140f/Pages/Ajax/ReservationSavePage.php#L234-L237",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibreBooking/app/blob/0a6cb1a9eb84835553c8caf93db2791f8655140f/Web/ajax/reservation_save.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibreBooking/app/tags?after=2.7.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://s1n1st3r.gitbook.io/theb10g/booked-scheduler-v2.5.5-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.bookedscheduler.com/the-future-of-booked/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.labarchives.com/labarchives-knowledge-base/2022-feature-releases-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.limswiki.org/index.php/Booked",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibreBooking/app/blob/0a6cb1a9eb84835553c8caf93db2791f8655140f/Pages/Ajax/ReservationSavePage.php#L234-L237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibreBooking/app/blob/0a6cb1a9eb84835553c8caf93db2791f8655140f/Web/ajax/reservation_save.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibreBooking/app/tags?after=2.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://s1n1st3r.gitbook.io/theb10g/booked-scheduler-v2.5.5-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.bookedscheduler.com/the-future-of-booked/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.labarchives.com/labarchives-knowledge-base/2022-feature-releases-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.limswiki.org/index.php/Booked",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-22T07:15:10.880",
      "lastModified" : "2025-04-02T16:15:34.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023."
      }, {
        "lang" : "es",
        "value" : "Grand Theft Auto V para PC permite a los atacantes lograr la ejecución remota parcial de código o modificar archivos en una PC, como se explotó en enero de 2023."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockstargames:grand_theft_auto_v:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "312C4799-F583-4E4A-A97D-6401D263324E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.rockstargames.com/community/200063373/13249062368147",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.rockstargames.com/community/200063373/13252523900819",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/TezFunz2/status/1616575783215964166",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.reddit.com/r/gtaonline/comments/10hsosu/mass_reporting_the_dangerous_pc_exploit/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://support.rockstargames.com/community/200063373/13249062368147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.rockstargames.com/community/200063373/13252523900819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/TezFunz2/status/1616575783215964166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.reddit.com/r/gtaonline/comments/10hsosu/mass_reporting_the_dangerous_pc_exploit/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0435",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-22T22:15:10.177",
      "lastModified" : "2024-11-21T07:37:10.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41."
      }, {
        "lang" : "es",
        "value" : "Superficie de ataque excesiva en pyload/pyload del repositorio de GitHub anterior a 0.5.0b3.dev41."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyload:pyload:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.20",
            "matchCriteriaId" : "DACFA9B5-22AD-4BC6-87D5-8272FF49BD56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pyload/pyload/commit/431ea6f0371d748df66b344a05ca1a8e0310cff3",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/a3e32ad5-caee-4f43-b10a-4a876d4e3f1d",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pyload/pyload/commit/431ea6f0371d748df66b344a05ca1a8e0310cff3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/a3e32ad5-caee-4f43-b10a-4a876d4e3f1d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-23T05:15:18.923",
      "lastModified" : "2025-04-02T16:15:32.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted .ssh file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de carga de archivos arbitrarios en el componente /api/upload de zdir v3.2.0 permite a los atacantes ejecutar código arbitrario a través de un archivo .ssh manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zdir_project:zdir:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2560B6-6BFF-4C1B-8393-3FD7650164C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/helloxz/zdir/issues/90",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/helloxz/zdir/issues/90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-23T05:15:18.997",
      "lastModified" : "2024-11-21T07:47:22.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "app/View/AuthKeys/authkey_display.ctp in MISP through 2.4.167 has an XSS in authkey add via a Referer field."
      }, {
        "lang" : "es",
        "value" : "app/View/AuthKeys/authkey_display.ctp en MISP hasta 2.4.167 tiene un XSS en authkey agregado a través de un campo Referer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp-project:malware_information_sharing_platform:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.167",
            "matchCriteriaId" : "D575BDC7-FF19-4808-910F-FAD15CDD75B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/f7238fe5e71ac065daa43c8607d02f8ac682f18f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://zigrin.com/advisories/misp-xss-in-add-action-of-the-authkeys-controller/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/f7238fe5e71ac065daa43c8607d02f8ac682f18f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://zigrin.com/advisories/misp-xss-in-add-action-of-the-authkeys-controller/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-23T07:15:10.967",
      "lastModified" : "2024-11-21T07:47:21.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to modify conversation attachments within the attachments.noindex directory. Client mechanisms fail to validate modifications of existing cached files, resulting in an attacker's ability to insert malicious code into pre-existing attachments or replace them completely. A threat actor can forward the existing attachment in the corresponding conversation to external groups, and the name and size of the file will not change, allowing the malware to masquerade as another file. NOTE: the vendor disputes the relevance of this finding because the product is not intended to protect against adversaries with this degree of local access."
      }, {
        "lang" : "es",
        "value" : "Signal Desktop anterior a 6.2.0 en Windows, Linux y macOS permite a un atacante modificar archivos adjuntos de conversaciones dentro del directorio attachments.noindex. Los mecanismos del cliente no logran validar las modificaciones de los archivos almacenados en caché existentes, lo que da como resultado la capacidad del atacante de insertar código malicioso en archivos adjuntos preexistentes o reemplazarlos por completo. Un actor de amenazas puede reenviar el archivo adjunto existente en la conversación correspondiente a grupos externos, y el nombre y el tamaño del archivo no cambiarán, lo que permitirá que el malware se haga pasar por otro archivo. NOTA: el proveedor cuestiona la relevancia de este hallazgo porque el producto no está destinado a proteger contra adversarios con este grado de acceso local."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:signal:signal-desktop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.0",
            "matchCriteriaId" : "C74B8BD8-C2D0-4E46-B228-97E539D033AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://signal.org/download/linux",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://signal.org/download/macos",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://signal.org/en/download/windows",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://signal.org/download/linux",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://signal.org/download/macos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://signal.org/en/download/windows",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-23T07:15:11.137",
      "lastModified" : "2024-11-21T07:47:22.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to obtain potentially sensitive attachments sent in messages from the attachments.noindex directory. Cached attachments are not effectively cleared. In some cases, even after a self-initiated file deletion, an attacker can still recover the file if it was previously replied to in a conversation. (Local filesystem access is needed by the attacker.) NOTE: the vendor disputes the relevance of this finding because the product is not intended to protect against adversaries with this degree of local access."
      }, {
        "lang" : "es",
        "value" : "Signal Desktop anterior a 6.2.0 en Windows, Linux y macOS permite a un atacante obtener archivos adjuntos potencialmente confidenciales enviados en mensajes desde el directorio attachments.noindex. Los archivos adjuntos almacenados en caché no se borran de manera efectiva. En algunos casos, incluso después de la eliminación de un archivo por iniciativa propia, un atacante aún puede recuperar el archivo si ya se le respondió en una conversación. (El atacante necesita acceso al sistema de archivos local). NOTA: el proveedor cuestiona la relevancia de este hallazgo porque el producto no está destinado a proteger contra adversarios con este grado de acceso local."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:signal:signal-desktop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.0",
            "matchCriteriaId" : "C74B8BD8-C2D0-4E46-B228-97E539D033AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://signal.org/download/linux",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://signal.org/download/macos",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://signal.org/en/download/windows",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://signal.org/download/linux",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://signal.org/download/macos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://signal.org/en/download/windows",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0438",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-23T14:15:11.627",
      "lastModified" : "2024-11-21T07:37:10.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4."
      }, {
        "lang" : "es",
        "value" : "Cross Site Request Forgery (CSRF) en el repositorio de GitHub modoboa/modoboa anterior a 2.0.4. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modoboa:modoboa:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.4",
            "matchCriteriaId" : "A58F3CCF-F999-4884-B796-9A0099D091C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modoboa/modoboa/commit/38d778cc71e370216e067d054ce0169ad83078c8",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/07a5b61b-306d-47c4-8ff0-06c540c7dfb3",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modoboa/modoboa/commit/38d778cc71e370216e067d054ce0169ad83078c8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/07a5b61b-306d-47c4-8ff0-06c540c7dfb3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0440",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-23T14:15:11.720",
      "lastModified" : "2024-11-21T07:37:11.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Observable Discrepancy in GitHub repository healthchecks/healthchecks prior to v2.6."
      }, {
        "lang" : "es",
        "value" : "Discrepancia observable en GitHub en el repositorio healthchecks/healthchecks anteriores a v2.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:healthchecks:healthchecks:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6",
            "matchCriteriaId" : "67ABA56D-6361-4668-A210-5DC5EDF49E0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/healthchecks/healthchecks/commit/359edbd2709e27b60687061a32e19322bc971c1f",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/208a096f-7986-4eed-8629-b7285348a686",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/healthchecks/healthchecks/commit/359edbd2709e27b60687061a32e19322bc971c1f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/208a096f-7986-4eed-8629-b7285348a686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-23T15:15:18.520",
      "lastModified" : "2024-11-21T07:47:23.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formSystemCheck. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, versión de firmware 1.01.B01, contenía un desbordamiento de pila a través del parámetro de envío de URL en /formSystemCheck. Esta vulnerabilidad permite a los atacantes ejecutar código arbitrario mediante un payload manipulado. NOTA: Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el fabricante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tew-820ap_firmware:1.01.b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA79833-8AB7-4927-AC9A-8F701C8FD6C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tew-820ap:1.0r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A6D66CD-37D1-4941-8E8E-78237F46332C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/05/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/05/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-23T15:15:18.683",
      "lastModified" : "2025-04-02T16:15:34.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the newpass parameter at /formPasswordSetup. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, versión de firmware 1.01.B01, contenía un desbordamiento de pila a través del parámetro newpass en /formPasswordSetup. Esta vulnerabilidad permite a los atacantes ejecutar código arbitrario mediante un payload manipulado inyectado. NOTA: Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el fabricante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tew-820ap_firmware:1.01.b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA79833-8AB7-4927-AC9A-8F701C8FD6C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tew-820ap:1.0r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A6D66CD-37D1-4941-8E8E-78237F46332C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/06/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/06/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-23T15:15:18.737",
      "lastModified" : "2025-04-02T16:15:34.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formPasswordAuth. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, versión de firmware 1.01.B01, contenía un desbordamiento de pila a través del parámetro de URL de envío en /formPasswordAuth. Esta vulnerabilidad permite a los atacantes ejecutar código arbitrario mediante un payload manipulado. NOTA: Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el fabricante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tew-820ap_firmware:1.01.b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA79833-8AB7-4927-AC9A-8F701C8FD6C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tew-820ap:1.0r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A6D66CD-37D1-4941-8E8E-78237F46332C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/03/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/03/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-23T15:15:18.790",
      "lastModified" : "2025-04-02T16:15:34.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formSysLog. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, versión de firmware 1.01.B01 contenía un desbordamiento de pila a través del parámetro de envío de URL en /formSysLog. Esta vulnerabilidad permite a los atacantes ejecutar código arbitrario mediante un payload manipulado. NOTA: Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el fabricante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tew-820ap_firmware:1.01.b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA79833-8AB7-4927-AC9A-8F701C8FD6C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tew-820ap:1.0r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A6D66CD-37D1-4941-8E8E-78237F46332C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/04/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/04/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-23T15:15:18.847",
      "lastModified" : "2024-11-21T07:47:24.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the username parameter at /formWizardPassword. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, versión de firmware 1.01.B01, contenía un desbordamiento de pila a través del parámetro de nombre de usuario en /formWizardPassword. Esta vulnerabilidad permite a los atacantes ejecutar código arbitrario mediante un payload manipulado inyectado. NOTA: Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el fabricante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tew-820ap_firmware:1.01.b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA79833-8AB7-4927-AC9A-8F701C8FD6C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tew-820ap:1.0r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A6D66CD-37D1-4941-8E8E-78237F46332C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/07/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/07/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0446",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-23T17:15:10.827",
      "lastModified" : "2026-04-08T19:18:00.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The My YouTube Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 3.0.12.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El complemento My youtube Channel para WordPress es vulnerable a cross-site scripting almacenado a través de sus parámetros de configuración en versiones hasta la 3.0.12.1 incluida debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:my_youtube_channel_project:my_youtube_channel:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.0.12.1",
            "matchCriteriaId" : "6B571951-5983-4DC5-814A-B34A655BF0FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2844200%40youtube-channel&new=2844200%40youtube-channel&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d979f899-8cdc-4230-b1b5-865c025dc86a?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2844200%40youtube-channel&new=2844200%40youtube-channel&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d979f899-8cdc-4230-b1b5-865c025dc86a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0447",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-23T17:15:10.913",
      "lastModified" : "2026-04-08T18:17:42.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The My YouTube Channel plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the clear_all_cache function in versions up to, and including, 3.0.12.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to clear the plugin's cache."
      }, {
        "lang" : "es",
        "value" : "El complemento My Youtube Channel para WordPress es vulnerable a la omisión de autorización debido a una falta de verificación de capacidad en la función clear_all_cache en versiones hasta la 3.0.12.1 incluida. Esto hace posible que atacantes autenticados, con permisos de nivel de suscriptor y superiores, borre el caché del complemento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:my_youtube_channel_project:my_youtube_channel:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.0.12.1",
            "matchCriteriaId" : "6B571951-5983-4DC5-814A-B34A655BF0FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/youtube-channel/trunk/youtube-channel.php?rev=2482795#L1502",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2844200%40youtube-channel&new=2844200%40youtube-channel&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/486b6a75-d101-4f3a-8436-6c23dd0ff200?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/youtube-channel/trunk/youtube-channel.php?rev=2482795#L1502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2844200%40youtube-channel&new=2844200%40youtube-channel&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/486b6a75-d101-4f3a-8436-6c23dd0ff200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22721",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-01-23T18:15:10.697",
      "lastModified" : "2024-11-21T07:45:17.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. Stored Cross-Site Scripting (XSS) in Oi Yandex.Maps for WordPress <= 3.2.7 versions."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Scripting (XSS) autenticada almacenada en el complemento Oi Yandex.Maps de  WordPress &lt;= versiones 3.2.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oi_yandex.maps_project:oi_yandex.maps:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.2.7",
            "matchCriteriaId" : "4A84A7DD-05C6-4C8C-B434-1EC522BA7B27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/oi-yamaps/wordpress-oi-yandex-maps-for-wordpress-plugin-3-2-7-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/oi-yamaps/wordpress-oi-yandex-maps-for-wordpress-plugin-3-2-7-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23687",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-01-23T18:15:10.777",
      "lastModified" : "2024-11-21T07:46:39.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. Stored Cross-Site Scripting (XSS) vulnerability in Youtube shortcode <= 1.8.5 versions."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting (XSS) autenticada almacenada en el complemento Youtube shortcode de WordPress &lt;= 1.8.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:youtube_shortcode_project:youtube_shortcode:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.8.5",
            "matchCriteriaId" : "B1A6A0E1-3958-4655-83DE-432528CA4A33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/youtube-shortcode/wordpress-youtube-shortcode-plugin-1-8-5-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/youtube-shortcode/wordpress-youtube-shortcode-plugin-1-8-5-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23824",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-01-23T19:15:11.837",
      "lastModified" : "2024-11-21T07:46:54.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. SQL Injection (SQLi) vulnerability in WP-TopBar <= 5.36 versions."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL (SQLi) autenticada en versiones WP-TopBar &lt;= 5.36."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp_topbar_project:wp_topbar:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "5.36",
            "matchCriteriaId" : "F515C1B5-409A-4CE3-8BE3-BC3F0DD78F82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-topbar/wordpress-wp-topbar-plugin-5-36-sql-injection?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-topbar/wordpress-wp-topbar-plugin-5-36-sql-injection?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22960",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-23T21:15:13.467",
      "lastModified" : "2025-04-02T16:15:31.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency."
      }, {
        "lang" : "es",
        "value" : "Los productos Lexmark hasta el 10 de enero de 2023 tienen un control inadecuado de la frecuencia de interacción."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b2236_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslsg.081.233",
            "matchCriteriaId" : "98A37307-B22F-4064-B6CF-5F71C6AD80E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2A7AC6-85E8-47F4-A6E1-E70105053899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b2338_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.233",
            "matchCriteriaId" : "31C65857-E881-432B-82A4-A57E8034109B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF936040-A3F2-42FA-997E-3DA8461E71B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b2442_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.233",
            "matchCriteriaId" : "7B7A0365-657D-4EA8-B4B1-D358FBA6948B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C7770D-E3F8-4754-95D0-6A231D46F158"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b2546_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.233",
            "matchCriteriaId" : "7A4EC9FD-B600-4E5C-B54B-37A9C14A6D17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DBB30-746A-4103-8303-6CAF563658A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b2650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.233",
            "matchCriteriaId" : "81654316-FA8D-4D2A-BA59-9C4BD5150053"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76B6022-D160-40E4-B533-6FAC3B43B190"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b2865_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.233",
            "matchCriteriaId" : "772D76B6-B09F-4348-9FA4-6DE362487C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95ACDD2C-B717-4283-9424-B5BC2BD25644"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b3340_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.233",
            "matchCriteriaId" : "B2B4777D-B3E3-4EE9-BE16-3A150FFECAED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A789D5F-A457-4FE8-88AD-4697EA0D38B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b3442_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.233",
            "matchCriteriaId" : "D90FC2EA-CF5C-4431-BFCC-792091208F59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDF3AF9-D84E-4491-AD76-CF03EAA10463"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c2240_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstzj.081.233",
            "matchCriteriaId" : "05A18D34-71A5-4B20-8EC4-67BB7E386227"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32FC324-86F1-46FF-8BC9-D07836FF4788"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c2325_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.233",
            "matchCriteriaId" : "B34AB71B-D530-4421-A2CC-3950543F0919"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c2326_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.233",
            "matchCriteriaId" : "2DEF5070-4B3A-4432-8FE3-F9E7F8C3E9EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2767C20-AEF6-4579-9FE9-3FA29D6EAF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c2425_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.233",
            "matchCriteriaId" : "60481C8D-20FC-467D-89B2-D71DE958689A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c2535_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.233",
            "matchCriteriaId" : "98F9A310-D84C-43DB-9F56-8E4188AEEAAC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c3224_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.233",
            "matchCriteriaId" : "AE84F2D1-A878-41CF-A665-00919402C55C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAD3B2F-27D5-4BEC-B077-DC4FBA003CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c3326_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.233",
            "matchCriteriaId" : "37468C43-AEDF-47B7-AC1C-7C9405A2BA90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A68A21-225E-423C-AAE0-14090219C821"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c3426_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.233",
            "matchCriteriaId" : "FC4CFC27-61F7-458B-859B-9AEFE9F559D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DAB6F85-C543-4D9C-B067-838C8F02AF13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c4150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstat.081.233",
            "matchCriteriaId" : "D67DA61F-D046-49E0-8805-C22999B9B1AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324EC762-1276-4121-916B-9981925F242D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c6160_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpp.081.233",
            "matchCriteriaId" : "95EAA073-2A1B-4C9F-9510-790FA94372CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c6160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48E10C08-E129-4482-92B1-67FD6C0D0407"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c9235_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstmh.081.233",
            "matchCriteriaId" : "0823ED2E-05EF-4257-9BF6-90493CF947C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c9235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B399B38F-67E1-4B8D-887F-09E45DA6528C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.233",
            "matchCriteriaId" : "D03AE164-8506-4109-9B91-368250B97618"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6035F21-30E3-4F1D-BFE4-FF85B448ACEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs421_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.233",
            "matchCriteriaId" : "CE8DA00F-CD79-428E-A367-0FDD91CEECF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs431_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.233",
            "matchCriteriaId" : "662A77C3-D4C9-4725-B3DD-0E6F9F1B2C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DE4CF6-250C-4006-B43E-A6882B75FB31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs439_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.233",
            "matchCriteriaId" : "22906979-7FC2-4FA6-94DE-F4B7169A918F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B04C61-3778-4E64-A4EC-981107894747"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.233",
            "matchCriteriaId" : "15CB31C8-0117-4588-AF17-70F2815B5E36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs622_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstzj.081.233",
            "matchCriteriaId" : "F8BC072A-F006-4233-9D51-7C136A101864"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99133BE3-FCD9-4E0C-A70A-9BFAA4FE4FFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstat.081.233",
            "matchCriteriaId" : "CB81BE08-785B-4D4B-A89D-7EF365E9A87E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04BB304-0623-4018-BCCC-7B648FC8DEC1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs725_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstat.081.233",
            "matchCriteriaId" : "7F5536EA-F604-4442-A601-44C7108F279B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6B2ACE-BEDB-49AD-B570-F7F43697D221"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs727_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstat.081.233",
            "matchCriteriaId" : "9C8AFF34-FD12-4D77-84C6-8CCCE32097AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs727:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4C7A81-DC8F-4495-AA75-FACE73D45CC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs728_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstat.081.233",
            "matchCriteriaId" : "DF2A1D79-DF20-410D-BBA0-4EAF3F4456C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs728:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430136AA-E687-4A32-8BDF-196E4C4246E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpp.081.233",
            "matchCriteriaId" : "16ED74B8-5FD1-4A1E-A660-072BBA1307D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F7DA0B-6E3C-42E6-95DA-6DD8936D0E4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs827_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpp.081.233",
            "matchCriteriaId" : "8681C04F-14B4-44A9-BC01-2FAEFF7743CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs827:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B3F51DA-5CA4-41E1-9373-34232F509FED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs921_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstmh.081.233",
            "matchCriteriaId" : "4D1CF3CE-7C13-4AAF-93B3-3EE040EE76D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8DAABA-2FF6-4C75-AD16-B1CDD788B3B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs923_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstmh.081.233",
            "matchCriteriaId" : "F9A7703B-4620-4A36-99A6-2156B606A084"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs923:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B4F96C-E2A2-4BFA-B99B-4CE7EC663925"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs927_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstmh.081.233",
            "matchCriteriaId" : "1EBE09CF-F270-404C-813C-6BEF927CF2F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs927:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0540292B-3C4E-4C29-8FEE-A8749BE23265"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbl.081.233",
            "matchCriteriaId" : "1DEB22B0-B8C0-4E0D-B581-88CCE7504F0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD8E744-63B8-4457-80A0-DE477181D81A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx421_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxnzj.081.233",
            "matchCriteriaId" : "E0E31629-7CBB-42FF-9D9D-45F0412D66ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9088F2C-DC67-446D-8C50-AB2FEB64DEAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx431_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbn.081.233",
            "matchCriteriaId" : "C6CECE9A-05F9-407B-939E-936048E8D3B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B4CB69-F0A5-481B-8299-E4F0C5A3CF35"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx522_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.233",
            "matchCriteriaId" : "88D44CE2-98B7-4B9A-BAE8-1C91B984F221"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF902A2-386C-476F-8072-6BEFC98CD714"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx622_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.233",
            "matchCriteriaId" : "69FDD188-DF0D-4837-AE2E-B46C38FD77CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F3FBD9-DAC0-4899-B86B-A79216654F12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx625_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.233",
            "matchCriteriaId" : "D3ABC570-7A2A-4A99-9897-593388D2A04C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAC5415-5C09-430C-A720-6844B29DB61E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx725_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.233",
            "matchCriteriaId" : "8CC01FD2-96B2-4840-BEE1-8B6D203ABBB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED5958-CE75-43F3-A7A0-2C5379EB8A13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx727_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.233",
            "matchCriteriaId" : "688303B6-E2FC-4CAE-9D31-862D0B67B610"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx727:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379FF636-A26B-4588-A0E2-AFDDEAAE6BBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.233",
            "matchCriteriaId" : "BAF5EABD-7858-4CEE-805D-101EC485E4C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBF8770-3E91-49BC-8AE9-E82E6399D802"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx825_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.233",
            "matchCriteriaId" : "A92BBCC2-3C2E-4A9A-B95B-9AAE26D09D5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7BCA73-8C60-49F5-A62C-126D62A8D701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.233",
            "matchCriteriaId" : "3270D81F-407D-4188-919B-98283BE16756"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86727DB5-FC4C-432C-BB8B-AFBD166A96A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx920_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.233",
            "matchCriteriaId" : "011F2E38-8BCF-401F-A6A0-2A888F70A38C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29844B5-0CCF-4C6F-A2EC-BF30C087CCFF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx921_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.233",
            "matchCriteriaId" : "93EAD413-4C9F-4354-B522-16C82C51067E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F864E81B-67D6-4E04-BD33-A32C92540324"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx922_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.233",
            "matchCriteriaId" : "CA6B5227-23B0-4A8B-AD3D-36877954FB47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEA4CDC-C020-42DA-8CD8-C3426F738403"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx923_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.233",
            "matchCriteriaId" : "CCE4594A-33D4-483E-8AE2-AC3278F7AD7D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx923:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB1C634D-C6F7-4CA2-852B-B7F26BA737F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx924_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.233",
            "matchCriteriaId" : "0F2783BE-F6EF-43FA-AC40-A60925DF64E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx924:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2143A2BE-0B08-49C7-A97F-F334556EF497"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx944_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.233",
            "matchCriteriaId" : "F8DC74F0-78B5-4B64-BE7F-FDBA5DD2B076"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx944:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E16872-A4E1-4546-918F-97239D8C88AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:m1242_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.233",
            "matchCriteriaId" : "1387F3DD-3568-459A-8682-2E39EDA81FE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87CFBE1-5158-44F3-B2E3-19CB30A241C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:m1246_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.233",
            "matchCriteriaId" : "83FD90AB-0678-4091-BA22-086F5E3669B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A77A401-9EAE-49BA-8B75-F9FF7EAB4398"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:m1342_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.233",
            "matchCriteriaId" : "38069F1D-4BF1-49B5-9044-4A62EF67849E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4B4172-AF47-4CA5-8404-2834AD1E3114"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:m3250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgm.081.233",
            "matchCriteriaId" : "29F8C80B-2B43-419E-84AE-1A6B905F49B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D10416B-76DC-4265-970E-38EB1E17C0B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:m5255_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.233",
            "matchCriteriaId" : "1F1202E8-9E7E-484B-AE4A-AB25400B3251"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7641B7-4665-4DD6-954C-E4F0E5BA64BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:m5270_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.233",
            "matchCriteriaId" : "AD74A894-9424-47BC-BF13-7C2F340C14A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C51550-986B-410D-BD55-083E6EC2B846"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mb2236_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlsg.081.233",
            "matchCriteriaId" : "FC1DC94C-7649-4928-8A15-862DF4A2323F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52775C7A-5ED3-412B-9765-C8A26D7DAEDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mb2338_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxngm.081.233",
            "matchCriteriaId" : "33E3A36B-0BFF-4065-958B-4CAC72392FEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB750119-27F6-4396-B57B-31433B7B530E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mb2442_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.233",
            "matchCriteriaId" : "D91D9E2D-8B34-4B06-AE8B-56D660659F99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634239D9-C252-4A62-9011-EC84C350B18E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mb2546_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.233",
            "matchCriteriaId" : "1B6302EB-B403-41E0-93D4-FC58651A0311"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8865944-83D8-4A28-9C7D-7B4B49F7A336"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mb2650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.233",
            "matchCriteriaId" : "740B46AA-D3C5-4C2B-BF2B-269F2D9DA10C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E680BC56-B202-4E9D-8198-E1B6A3601A99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mb2770_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.233",
            "matchCriteriaId" : "622CDB18-14C0-451A-AF95-8C8E1A54BF68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2770:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6AD09BB-1693-41BC-833C-8FA41506F257"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mb3442_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlbd.081.233",
            "matchCriteriaId" : "CDD50A00-F1FE-40B9-BF45-FD525B2929F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DFF38B-E948-4DFF-B4AF-5B0D2D72B8FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mc2325_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxnzj.081.233",
            "matchCriteriaId" : "C7E38527-1A51-49B6-A0FE-3F53A0B30B56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C901E4-6D93-4537-889E-96D25763AF5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mc2425_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxnzj.081.233",
            "matchCriteriaId" : "42CEC573-597B-4A96-AD51-9A911AC92426"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3E6AB1-3272-4D8E-ACB3-767DEBDCED6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mc2535_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.233",
            "matchCriteriaId" : "65987CE4-3E24-4970-90FF-7FD7E84E1300"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1EB502-E0F7-4919-B1E4-A74B0691DE1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mc2640_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.233",
            "matchCriteriaId" : "6E87DAB7-4714-4E59-A845-D785601DC776"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E7B4F1-ABF2-450B-80EA-170FB7274CDA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mc3224_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbl.081.233",
            "matchCriteriaId" : "303B11A1-9BDE-40DD-9EF0-B299FDABE2B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803DB805-F722-4805-8FAF-7BBFF64D61BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mc3326_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbl.081.233",
            "matchCriteriaId" : "A6488C35-3BF0-4089-8867-7C705AAF1E15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D63AA7F-B09F-4EF5-A852-BD24539E8EB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mc3426_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbn.081.233",
            "matchCriteriaId" : "1E24BFA8-D102-42E7-9521-31C3644B5D8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDE9642-279D-4D7E-B84E-99F5C018CF56"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.233",
            "matchCriteriaId" : "32DAD0B7-6BC1-4773-A0EA-18C9764B0CAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F466924-8C21-4361-B7AC-5DED39B5083D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.233",
            "matchCriteriaId" : "E8FCEDFA-6DAD-466A-90B3-43167AD0EA89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A517255B-A5DB-4724-AA30-F89CB6D0D982"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms421_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "msngm.081.233",
            "matchCriteriaId" : "2C852BDA-63D0-4714-AC00-6F4D00BC3F73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBD07B7-AAF5-428C-B03F-7C823240219D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms431_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.233",
            "matchCriteriaId" : "E281FA9C-A180-4B95-B743-86FA93E172D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFA9698-5E53-4C15-AD28-7B330CE688E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.233",
            "matchCriteriaId" : "F777414E-7984-4CFF-859C-0568CE93DA98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33285B7-DF76-4DDD-BE74-AFC12B8DFF0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms621_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.233",
            "matchCriteriaId" : "11497D0A-429F-4FAF-9966-A9D1332AA397"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms621:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455281E2-37FF-4E7C-93E8-F0DC3B0CE5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms622_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgm.081.233",
            "matchCriteriaId" : "BD087E9F-5F93-42B2-96D0-AA3B0E413E32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B551EFE-75DC-4D00-BF17-D7EF249CDF2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms725_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.233",
            "matchCriteriaId" : "61E3AAC8-B797-4E85-9560-9ED6FC2F7F9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CA5145-011E-4E76-998B-272ED0CAF2F4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms821_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.233",
            "matchCriteriaId" : "3EDFF67B-374B-4266-8CFC-AB3D9588D99C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299DED47-FE60-46FE-9097-11A3732DC436"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms822_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.233",
            "matchCriteriaId" : "0822AAA8-2D1F-43A1-9C6B-17E092D47C4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6976E38-574A-4C73-A204-2C4AC56C5487"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms823_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.233",
            "matchCriteriaId" : "E372B209-7C4E-41FF-BCAE-64610827B03D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms823:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8A8233-6CE3-4D36-B1D4-BC46ED299C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms825_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.233",
            "matchCriteriaId" : "87818D2E-7575-4D70-8810-649F6D1B8E50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9233CF87-7E79-4322-B389-3D9731F60DB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms826_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.233",
            "matchCriteriaId" : "5C6B4E45-0653-488B-9834-CD18A0B5EFB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4C2EF9-8328-40DF-AEB2-6AC17E541284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxngm.081.233",
            "matchCriteriaId" : "64B91AE1-3DA2-41DC-88B0-CA4FF0FE83EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FBE71-B5A5-465E-8FB1-BCD96975AD66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlbd.081.233",
            "matchCriteriaId" : "C6F75355-14FF-4A2B-A05D-03FB16EB2721"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F2F52D-9616-47F0-A0B8-EF1DC61D88AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx421_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.233",
            "matchCriteriaId" : "323D75DA-9B45-416B-8CC3-00C577164052"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62FB932-5BCE-4367-A364-D02842C0016E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx431_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlbd.081.233",
            "matchCriteriaId" : "E9E008B1-0119-4536-95CF-0F9E0BC49BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95DEE18-CDEA-4AB4-9B3D-C1712720C4CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx432_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtpm.081.233",
            "matchCriteriaId" : "37A25FED-9712-4FFC-ACC7-92589DCC8358"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx432:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3F5A3E-2903-4761-9543-0E0FDE12E9B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.233",
            "matchCriteriaId" : "7CFC597D-C21E-44F3-BB51-1238AE4EFAB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F495C0-11DE-4B21-8258-C1E4D45A2C0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx522_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.233",
            "matchCriteriaId" : "FFDD7F24-7630-423A-8C24-1C2CA815766E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD24F8-9ACF-4291-B1F4-3C06DC059E8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx622_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.233",
            "matchCriteriaId" : "8D1D08D1-1569-473E-8C7A-2DB297FD58C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70992A9D-5C32-49AB-8817-6B52C64E4E3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx721_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.233",
            "matchCriteriaId" : "02F03120-BCDF-433C-9802-424FC5D3CB99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF88693A-50D8-471B-A50A-E8BB1CCF11A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx722_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.233",
            "matchCriteriaId" : "FC3AF931-78F9-4F2D-BE0D-035BF823A76F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx722:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBAD67F-64B8-4451-AFE5-FF403D659664"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx822_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.233",
            "matchCriteriaId" : "C788D330-80F1-4547-953D-5F8FEDF60FEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9808F6E2-5D9A-4016-AE5B-FFAB814D90BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx826_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.233",
            "matchCriteriaId" : "B7702489-6BEA-4DBC-A708-0991DE217C2F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B609A2-FEFE-414E-B3C2-4961A4871FFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx931_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtpm.081.233",
            "matchCriteriaId" : "61E552E4-7D46-4CE6-8240-9F4BDDE01948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F8E629-1386-4BE2-BB77-9E8848447C49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc2235_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.233",
            "matchCriteriaId" : "5FB981BB-A006-4280-872D-0DE4FADBF64E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA90E36-F0CD-47E2-91E4-5FB7C3FFF49A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc2326_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbn.081.233",
            "matchCriteriaId" : "B0FE1503-2DEF-47B5-B54C-FF49D363B30A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3EA4D6-5864-42C8-B387-C7AAB57CBD5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc4140_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.233",
            "matchCriteriaId" : "3805E839-25FB-49F4-8EC1-5BE1508EFB41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB82D190-FB73-4C28-B0F2-24EEEF384BB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc4143_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.233",
            "matchCriteriaId" : "F4308C6D-6F85-4873-A26D-36E64579B307"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4143:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5D6B0C-88D7-4CF2-8725-B00FA1225E42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc4150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.233",
            "matchCriteriaId" : "9029ADEE-2DDD-4DC7-9FB6-4AAF65E5BE92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A27B92-5F83-4280-93EA-31F115408405"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc4153_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.233",
            "matchCriteriaId" : "92388CF8-190E-4A1A-844B-27F295BCF6D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4153:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722989FF-9005-48B7-9082-E9629518E651"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc4240_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.233",
            "matchCriteriaId" : "17D129B3-6AB1-4404-9653-D431E312F57D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3980C15B-F3B4-4F9B-8FBA-1DF7D61C77EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc4342_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmm.081.233",
            "matchCriteriaId" : "72D54A27-7720-4790-A27E-074E51930DAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4606439C-2F39-48CB-BDCC-19CE0FC3A203"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc4352_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmm.081.233",
            "matchCriteriaId" : "705632AE-1E6D-4324-B975-463B7777D6C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D8D43A-7A81-494E-AD5A-0DC5F54C0071"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc6152_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.233",
            "matchCriteriaId" : "9E9522D2-B99D-4771-8132-6753978F746B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc6152:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937C63CA-228C-4142-BB3A-F25A09908F92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc6153_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.233",
            "matchCriteriaId" : "A09FC07C-DB1E-4C2D-89A9-CA64098A1EB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc6153:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BDF3B6-F726-48E9-AF59-8F4CF653F233"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc8155_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.233",
            "matchCriteriaId" : "DDC11108-3F0E-4494-9985-95F388DDCE45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6BE517-427A-4335-8FCD-8A721A9E507C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc8160_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.233",
            "matchCriteriaId" : "F88F0781-73AC-4E02-A030-D25949141DB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E731776-CCAE-467E-9423-1155B280358B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc8163_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.233",
            "matchCriteriaId" : "45004D7C-8F84-44E5-8D07-DAE5500217DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4E2BF7-2D02-4D9C-BE01-F20FDA54DB12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9225_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.233",
            "matchCriteriaId" : "C62F8354-EE8E-4E32-8CBF-610E9819F4E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9225:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFAA4B58-2CD9-413F-91BF-766FEEA27DD8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9235_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.233",
            "matchCriteriaId" : "BDD84897-48EF-4322-9CAB-D0152F22CC5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAC3F55-01E7-4D34-81F4-2C2AB02C48A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9245_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.233",
            "matchCriteriaId" : "C9FB74FB-C7FD-48F6-8C39-D152197E75F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9245:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6974241-960F-4D72-973D-A7EAA75059A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9255_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.233",
            "matchCriteriaId" : "9104567D-096B-45ED-A02A-F93622EBC0AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7F492E-1E68-4A72-85FB-61C46F4AB2DF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9265_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.233",
            "matchCriteriaId" : "7550B1FB-EE44-473C-8D89-007145693E1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBDC7821-365A-4FA1-A47A-A0FB50A278F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9335_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.233",
            "matchCriteriaId" : "284D61DD-D68A-4821-813A-647A56CEE049"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C842AC2-2A47-4C50-A0D9-E96986DBA0F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9445_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.233",
            "matchCriteriaId" : "A8B49CB7-07AA-466F-9A4D-4847C7985E12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9445:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D39C09A6-FCDA-4E5B-8D8A-10A28E72A2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9455_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.233",
            "matchCriteriaId" : "32849ABC-5B53-47BE-875F-52872F436474"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "922062B4-D3B4-4F79-BF97-84A271B020B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9465_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.233",
            "matchCriteriaId" : "AED567C0-D3CC-42CC-BA2A-60669FD0F497"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9465:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948107F0-8F0D-461F-9438-AC6D8C7D6C84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm1242_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.233",
            "matchCriteriaId" : "6C4FDCF7-6900-4014-8C34-DC5593EDAC22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583FDFAC-3865-4F4C-AF65-96F38D368669"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm1246_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.233",
            "matchCriteriaId" : "D5F0C294-E6AF-428E-8DA2-FDFD971C4DD7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DCC657-E900-4A93-B9C5-4194C33ECDE6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm1342_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.233",
            "matchCriteriaId" : "D30D9103-327E-4AC0-9F46-742E05AC3E73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B2AB4-CB58-484B-AFD0-277EABF06985"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm3142_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtct.081.233",
            "matchCriteriaId" : "3E1FD81E-B3FF-4C79-AAF0-47B457F9E2FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3142:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EECF0-E7D5-43CC-9518-948EC1141BAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm3250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.233",
            "matchCriteriaId" : "FDAAF50A-3672-466E-94A1-F6B5283FBC65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CDCA43-88D9-4456-9A70-112618837BD0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm5365_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.233",
            "matchCriteriaId" : "DDCCE54E-6230-4A9E-85B9-4CF73189869F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0AA674-75B3-4D6A-B2BB-6CC7EC6A836D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm7355_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.233",
            "matchCriteriaId" : "E64E2D75-58F3-4A50-AC75-51AF2B00CFBF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7355:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BEEF7-A8FB-4951-8784-EDED0D766C9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm7370_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.233",
            "matchCriteriaId" : "DF81E1CC-C272-4E4D-A27E-AE4CD9E289C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC95D3-55D5-4BE2-94A3-148EB33D4707"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-22960.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-22960.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-23T21:15:13.593",
      "lastModified" : "2025-04-02T16:15:32.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation."
      }, {
        "lang" : "es",
        "value" : "En ciertos productos Lexmark hasta el 12 de enero de 2023, puede ocurrir SSRF debido a la falta de validación de entrada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b2236_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslsg.081.234",
            "matchCriteriaId" : "1001DA93-2957-4818-B60C-0DB37ABAE26A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2A7AC6-85E8-47F4-A6E1-E70105053899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b2338_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.234",
            "matchCriteriaId" : "04B075AA-2645-432A-BE8C-2544144BDB71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF936040-A3F2-42FA-997E-3DA8461E71B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b2442_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.234",
            "matchCriteriaId" : "0471D1A4-EA2F-4340-9166-CB3F42BDB744"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C7770D-E3F8-4754-95D0-6A231D46F158"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b2546_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.234",
            "matchCriteriaId" : "16F81945-CE2C-4419-9831-7D67B6E4EEA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DBB30-746A-4103-8303-6CAF563658A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b2650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.234",
            "matchCriteriaId" : "364C4595-553C-46FA-949C-DCA85761DBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76B6022-D160-40E4-B533-6FAC3B43B190"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b2865_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.234",
            "matchCriteriaId" : "A414A83E-63C2-4957-9848-F557777482C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95ACDD2C-B717-4283-9424-B5BC2BD25644"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b3340_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.234",
            "matchCriteriaId" : "8CAE929A-3C62-440A-8936-938C8AA0B9DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A789D5F-A457-4FE8-88AD-4697EA0D38B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:b3442_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.234",
            "matchCriteriaId" : "4EACD9E1-AAE7-414C-99E1-D886AC10B38C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDF3AF9-D84E-4491-AD76-CF03EAA10463"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c2240_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstzj.081.234",
            "matchCriteriaId" : "F43C1923-2914-413C-A4DE-9A8F23696533"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32FC324-86F1-46FF-8BC9-D07836FF4788"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c2325_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.234",
            "matchCriteriaId" : "429A18A5-1992-4D89-A765-5D1393EBF0D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c2326_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.234",
            "matchCriteriaId" : "11E77489-EDC0-47B6-822C-8A6DD84DC484"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2767C20-AEF6-4579-9FE9-3FA29D6EAF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c2425_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.234",
            "matchCriteriaId" : "4E230C54-AE8B-490A-A6B1-63DC32C518A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c2535_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.234",
            "matchCriteriaId" : "FE8D9280-EC81-4BD9-A233-10C0594CECB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c3224_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.234",
            "matchCriteriaId" : "C637CEF1-E0FE-4CE1-895E-A79A6164B7FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAD3B2F-27D5-4BEC-B077-DC4FBA003CFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c3326_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.234",
            "matchCriteriaId" : "C7E898C2-E216-4880-91EE-8E1A052706B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A68A21-225E-423C-AAE0-14090219C821"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c3426_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.234",
            "matchCriteriaId" : "8FA3D694-878E-4FE7-9CB6-D67AF938A2B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DAB6F85-C543-4D9C-B067-838C8F02AF13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c4150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstat.081.234",
            "matchCriteriaId" : "48EBE6C2-9D55-4E2D-A630-8114F88E833A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324EC762-1276-4121-916B-9981925F242D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c6160_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpp.081.234",
            "matchCriteriaId" : "98667236-2E1A-414B-AA3C-76AF5B505CF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c6160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48E10C08-E129-4482-92B1-67FD6C0D0407"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:c9235_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstmh.081.234",
            "matchCriteriaId" : "F15B0FB2-DC18-4137-AD02-B16CB075071E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c9235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B399B38F-67E1-4B8D-887F-09E45DA6528C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.234",
            "matchCriteriaId" : "31FBE3C1-91A1-44F6-A8F5-89CF0349F15F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6035F21-30E3-4F1D-BFE4-FF85B448ACEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs421_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.234",
            "matchCriteriaId" : "8106C2D1-3717-4E1F-9AB8-5B0658ECD040"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs431_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.234",
            "matchCriteriaId" : "FCCC50F1-7C80-45A5-A926-BC2442ECDE1D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DE4CF6-250C-4006-B43E-A6882B75FB31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs439_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.234",
            "matchCriteriaId" : "38574684-25EC-43D3-8ECE-B7DE9E56E08F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B04C61-3778-4E64-A4EC-981107894747"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.234",
            "matchCriteriaId" : "69A3FFC2-894C-4814-AA63-3BD326267E22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs622_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstzj.081.234",
            "matchCriteriaId" : "49BF6BE6-B255-4FFB-8166-331316385039"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99133BE3-FCD9-4E0C-A70A-9BFAA4FE4FFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstat.081.234",
            "matchCriteriaId" : "42A5B684-8E90-4176-8CBF-5F3774C0C8D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04BB304-0623-4018-BCCC-7B648FC8DEC1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs725_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstat.081.234",
            "matchCriteriaId" : "263D61C0-A226-4C2D-90FF-B51ABC6BB01F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6B2ACE-BEDB-49AD-B570-F7F43697D221"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs727_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstat.081.234",
            "matchCriteriaId" : "C1201791-7DE6-429D-9B54-1F2F716BB668"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs727:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4C7A81-DC8F-4495-AA75-FACE73D45CC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs728_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstat.081.234",
            "matchCriteriaId" : "C4013D69-3D87-43D7-A5B3-EF439C815055"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs728:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430136AA-E687-4A32-8BDF-196E4C4246E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpp.081.234",
            "matchCriteriaId" : "7804D7A6-1100-4CF7-AFF7-0D2FB24E7EC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F7DA0B-6E3C-42E6-95DA-6DD8936D0E4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs827_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpp.081.234",
            "matchCriteriaId" : "91AA426A-E6C5-40A4-801F-D9C3AD0BD538"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs827:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B3F51DA-5CA4-41E1-9373-34232F509FED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs921_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstmh.081.234",
            "matchCriteriaId" : "003965A6-61A5-4463-98FA-909B45C2ABF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8DAABA-2FF6-4C75-AD16-B1CDD788B3B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs923_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstmh.081.234",
            "matchCriteriaId" : "1D821C46-FE46-4F23-B2D0-E184BBB5C74D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs923:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B4F96C-E2A2-4BFA-B99B-4CE7EC663925"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cs927_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstmh.081.234",
            "matchCriteriaId" : "95DD570A-F375-4DD2-BA8A-F479D403E167"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs927:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0540292B-3C4E-4C29-8FEE-A8749BE23265"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbl.081.234",
            "matchCriteriaId" : "74CFBBF6-EE39-4AEE-8318-F06460E5693B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD8E744-63B8-4457-80A0-DE477181D81A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx421_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxnzj.081.234",
            "matchCriteriaId" : "3A9DC14B-64C0-42FE-9400-66BC942C3194"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9088F2C-DC67-446D-8C50-AB2FEB64DEAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx431_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbn.081.234",
            "matchCriteriaId" : "710BD741-1DCD-44F8-8A97-F088DECAE9FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B4CB69-F0A5-481B-8299-E4F0C5A3CF35"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx522_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.234",
            "matchCriteriaId" : "793EB163-3F9D-487F-A3CF-7F92EA5FBBE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF902A2-386C-476F-8072-6BEFC98CD714"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx622_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.234",
            "matchCriteriaId" : "74CC44F2-BE79-4E3F-B14E-575E345D8E41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F3FBD9-DAC0-4899-B86B-A79216654F12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx625_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.234",
            "matchCriteriaId" : "9B1F08A6-370D-4B66-A2B0-00A5507E08A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAC5415-5C09-430C-A720-6844B29DB61E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx725_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.234",
            "matchCriteriaId" : "2B73178E-23B2-4E53-9CD2-4E3E6BF1B5E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED5958-CE75-43F3-A7A0-2C5379EB8A13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx727_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.234",
            "matchCriteriaId" : "80FC5D8C-2272-4B89-B70A-9722F627B375"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx727:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379FF636-A26B-4588-A0E2-AFDDEAAE6BBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.234",
            "matchCriteriaId" : "1BC1B82D-CC4C-4022-AA82-6C61BB0B30BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBF8770-3E91-49BC-8AE9-E82E6399D802"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx825_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.234",
            "matchCriteriaId" : "341C993B-20EB-44C1-9B59-DC00137FDE70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7BCA73-8C60-49F5-A62C-126D62A8D701"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.234",
            "matchCriteriaId" : "BFD04D27-C822-433A-9E20-2DAC4B1FB900"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86727DB5-FC4C-432C-BB8B-AFBD166A96A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx920_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.234",
            "matchCriteriaId" : "A15F95EC-4BE4-4579-B7D0-6693DCEDBA9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29844B5-0CCF-4C6F-A2EC-BF30C087CCFF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx921_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.234",
            "matchCriteriaId" : "33413ED3-BD25-4921-93AF-E4D8FF7ACAB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F864E81B-67D6-4E04-BD33-A32C92540324"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx922_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.234",
            "matchCriteriaId" : "6E655AC8-A129-4A04-A285-375A41E07E46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEA4CDC-C020-42DA-8CD8-C3426F738403"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx923_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.234",
            "matchCriteriaId" : "00E93777-2054-4476-9FD6-F1B1E76903F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx923:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB1C634D-C6F7-4CA2-852B-B7F26BA737F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx924_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.234",
            "matchCriteriaId" : "FA0DE38D-D52E-4B8F-9849-FE716F2C5212"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx924:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2143A2BE-0B08-49C7-A97F-F334556EF497"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cx944_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.234",
            "matchCriteriaId" : "CACEE4AA-DD53-4CA6-B66E-B1E2B9803109"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx944:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E16872-A4E1-4546-918F-97239D8C88AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:m1242_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.234",
            "matchCriteriaId" : "00D55307-7F77-47AF-B1B1-44B416D7E5FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87CFBE1-5158-44F3-B2E3-19CB30A241C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:m1246_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.234",
            "matchCriteriaId" : "337FA493-72CC-4639-9F00-F9066BCE49A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A77A401-9EAE-49BA-8B75-F9FF7EAB4398"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:m1342_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.234",
            "matchCriteriaId" : "4DB1BD2B-CED4-460E-BE21-0C58C2E58344"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4B4172-AF47-4CA5-8404-2834AD1E3114"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:m3250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgm.081.234",
            "matchCriteriaId" : "B9E3DACA-6615-4F3A-BB63-7189E01E565C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D10416B-76DC-4265-970E-38EB1E17C0B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:m5255_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.234",
            "matchCriteriaId" : "BE3A83EE-FBFD-489D-A5EC-C8C428A09B63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7641B7-4665-4DD6-954C-E4F0E5BA64BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:m5270_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.234",
            "matchCriteriaId" : "14298ACA-43E2-473A-9CA4-3609C78C352D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C51550-986B-410D-BD55-083E6EC2B846"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mb2236_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlsg.081.234",
            "matchCriteriaId" : "E23F11FE-3F7A-4BAD-B4BA-0F0A767CB442"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52775C7A-5ED3-412B-9765-C8A26D7DAEDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mb2338_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxngm.081.234",
            "matchCriteriaId" : "501322C4-5007-4264-9196-FE238246EC93"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB750119-27F6-4396-B57B-31433B7B530E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mb2442_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.234",
            "matchCriteriaId" : "88CBA0B1-1A96-4630-9DAA-2BD2BBA507A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634239D9-C252-4A62-9011-EC84C350B18E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mb2546_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.234",
            "matchCriteriaId" : "FD4F502D-520A-4D36-8E42-65392C44B71C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8865944-83D8-4A28-9C7D-7B4B49F7A336"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mb2650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.234",
            "matchCriteriaId" : "4EC50797-D81A-4AB8-98E9-764B7D2FA52D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E680BC56-B202-4E9D-8198-E1B6A3601A99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mb2770_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.234",
            "matchCriteriaId" : "928B8A54-643A-4094-834F-B682078704FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2770:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6AD09BB-1693-41BC-833C-8FA41506F257"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mb3442_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlbd.081.234",
            "matchCriteriaId" : "DC07B042-AF1C-4AAD-9819-5769BDA52318"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DFF38B-E948-4DFF-B4AF-5B0D2D72B8FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mc2325_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxnzj.081.234",
            "matchCriteriaId" : "C4F257C7-B8AA-4179-8E30-5542AC5736F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C901E4-6D93-4537-889E-96D25763AF5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mc2425_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxnzj.081.234",
            "matchCriteriaId" : "BCE0DCD9-B997-4C98-8791-48D01D79F691"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3E6AB1-3272-4D8E-ACB3-767DEBDCED6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mc2535_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.234",
            "matchCriteriaId" : "2B7D2F81-8882-449F-9F65-0C592DB221C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1EB502-E0F7-4919-B1E4-A74B0691DE1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mc2640_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.234",
            "matchCriteriaId" : "CD7D8252-89E2-445B-BB5F-89A3A8CFE6D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E7B4F1-ABF2-450B-80EA-170FB7274CDA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mc3224_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbl.081.234",
            "matchCriteriaId" : "8A5161C5-D79E-48D4-9E05-4A13495CAFF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803DB805-F722-4805-8FAF-7BBFF64D61BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mc3326_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbl.081.234",
            "matchCriteriaId" : "AE2D046F-A534-4979-976A-E3CE37BC0A5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D63AA7F-B09F-4EF5-A852-BD24539E8EB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mc3426_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbn.081.234",
            "matchCriteriaId" : "0BDF05BF-496F-45A5-A097-FCD5D2C4342A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDE9642-279D-4D7E-B84E-99F5C018CF56"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.234",
            "matchCriteriaId" : "FCEC1FBC-ACEF-46E1-BD73-E4B3C7DE12D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F466924-8C21-4361-B7AC-5DED39B5083D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.234",
            "matchCriteriaId" : "714D3E29-67EE-47D9-AFD1-0101B9CEC602"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A517255B-A5DB-4724-AA30-F89CB6D0D982"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms421_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.234",
            "matchCriteriaId" : "4B8575B7-D40A-41EA-AF47-2A8BBF45FF6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBD07B7-AAF5-428C-B03F-7C823240219D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms431_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.234",
            "matchCriteriaId" : "E5DFBBAD-A948-4887-997C-F641B40F87A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFA9698-5E53-4C15-AD28-7B330CE688E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.234",
            "matchCriteriaId" : "F89D7643-F976-4406-ADE2-714AE77DE2E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33285B7-DF76-4DDD-BE74-AFC12B8DFF0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms621_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.234",
            "matchCriteriaId" : "FC3B8A6C-CE99-4B3B-BD18-FCB137C5DF2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms621:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455281E2-37FF-4E7C-93E8-F0DC3B0CE5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms622_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgm.081.234",
            "matchCriteriaId" : "2B0861D6-FBB9-417F-A9C5-A1E9F10127B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B551EFE-75DC-4D00-BF17-D7EF249CDF2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms725_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.234",
            "matchCriteriaId" : "FB2053AD-A828-48D7-BDF2-33C686DABF5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CA5145-011E-4E76-998B-272ED0CAF2F4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms821_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.234",
            "matchCriteriaId" : "6B1AF67C-5FAD-48A4-9C89-AC7016D8BB5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299DED47-FE60-46FE-9097-11A3732DC436"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms822_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.234",
            "matchCriteriaId" : "569A88B3-47B9-48B1-B322-5138858E8CF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6976E38-574A-4C73-A204-2C4AC56C5487"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms823_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.234",
            "matchCriteriaId" : "50A42BA6-FBDC-4D69-995E-6BEC23DDAB89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms823:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8A8233-6CE3-4D36-B1D4-BC46ED299C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms825_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.234",
            "matchCriteriaId" : "CAC4A49D-0A17-425E-B919-4A9771FDE3FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9233CF87-7E79-4322-B389-3D9731F60DB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:ms826_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.234",
            "matchCriteriaId" : "D501D011-96B5-4D3F-9E8B-3176E68AD56A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4C2EF9-8328-40DF-AEB2-6AC17E541284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxngm.081.234",
            "matchCriteriaId" : "ADED3F07-AA0D-4A73-966A-CEEB88CE7DB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FBE71-B5A5-465E-8FB1-BCD96975AD66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlbd.081.234",
            "matchCriteriaId" : "1C813334-3368-4620-91A8-A5177CAE6243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F2F52D-9616-47F0-A0B8-EF1DC61D88AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx421_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.234",
            "matchCriteriaId" : "AAB9E486-8233-4EB2-91AD-823E749563A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62FB932-5BCE-4367-A364-D02842C0016E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx431_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlbd.081.234",
            "matchCriteriaId" : "FD1283BE-4877-4631-8BF9-C826C9D370F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95DEE18-CDEA-4AB4-9B3D-C1712720C4CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx432_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtct.081.234",
            "matchCriteriaId" : "70B0BBC7-8A98-47AB-9C09-87439D3CE234"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx432:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3F5A3E-2903-4761-9543-0E0FDE12E9B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.234",
            "matchCriteriaId" : "2FE7E287-9199-4AD2-A2A7-4FB6EE9012AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F495C0-11DE-4B21-8258-C1E4D45A2C0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx522_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.234",
            "matchCriteriaId" : "7E6B209B-0AFD-4CDA-8CD3-FD9AE47D7BAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD24F8-9ACF-4291-B1F4-3C06DC059E8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx622_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.234",
            "matchCriteriaId" : "F1AC1E62-30C6-49A9-9FFE-2FDEA67580F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70992A9D-5C32-49AB-8817-6B52C64E4E3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx721_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.234",
            "matchCriteriaId" : "707013BA-0971-4809-9B80-B39035DD4C29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF88693A-50D8-471B-A50A-E8BB1CCF11A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx722_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.234",
            "matchCriteriaId" : "F9ACB6A7-0F46-42C7-883E-5CFB934FC8F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx722:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBAD67F-64B8-4451-AFE5-FF403D659664"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx822_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.234",
            "matchCriteriaId" : "AA08330D-8A5A-4FB5-85D2-AEA080D42C75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9808F6E2-5D9A-4016-AE5B-FFAB814D90BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx826_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.234",
            "matchCriteriaId" : "AAA95F83-D348-47DD-855C-0557DCF87D9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B609A2-FEFE-414E-B3C2-4961A4871FFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mx931_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtpm.081.234",
            "matchCriteriaId" : "F3E66901-E56B-4D6D-8453-AA39F95C1D04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F8E629-1386-4BE2-BB77-9E8848447C49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc2235_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.234",
            "matchCriteriaId" : "825D5CD9-3E27-4438-8315-B2AE0FD025D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA90E36-F0CD-47E2-91E4-5FB7C3FFF49A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc2326_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbn.081.234",
            "matchCriteriaId" : "808C6837-7127-40EE-BDD4-A739AA4FDFB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3EA4D6-5864-42C8-B387-C7AAB57CBD5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc4140_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.234",
            "matchCriteriaId" : "BD756BB0-6A7E-4129-9B39-12A1F04F5C06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB82D190-FB73-4C28-B0F2-24EEEF384BB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc4143_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.234",
            "matchCriteriaId" : "7EFCE987-E456-4ACB-8E2D-8A6C235B96C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4143:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5D6B0C-88D7-4CF2-8725-B00FA1225E42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc4150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.234",
            "matchCriteriaId" : "EF1A8DD4-1834-4D7F-AF36-CBFC730FB0EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A27B92-5F83-4280-93EA-31F115408405"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc4153_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.234",
            "matchCriteriaId" : "03AE1E0C-F5BD-4C68-821C-414CDF2B9502"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4153:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722989FF-9005-48B7-9082-E9629518E651"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc4240_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.234",
            "matchCriteriaId" : "43964896-8955-4FC6-994F-301BD82ED10A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3980C15B-F3B4-4F9B-8FBA-1DF7D61C77EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc4342_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmm.081.234",
            "matchCriteriaId" : "EACC88FA-EB75-40AC-84BE-C688BB60BF57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4606439C-2F39-48CB-BDCC-19CE0FC3A203"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc4352_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmm.081.234",
            "matchCriteriaId" : "9A0A6812-2938-4AE4-87A2-CBDF511A8386"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D8D43A-7A81-494E-AD5A-0DC5F54C0071"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc6152_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.234",
            "matchCriteriaId" : "0AFD4E61-85B4-460B-8F37-D4ABD44368D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc6152:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937C63CA-228C-4142-BB3A-F25A09908F92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc6153_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.234",
            "matchCriteriaId" : "CF569829-98F0-4E29-AC96-57C8D5D9E88C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc6153:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BDF3B6-F726-48E9-AF59-8F4CF653F233"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc8155_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.234",
            "matchCriteriaId" : "978576B8-CEF8-4878-BB86-2A69B9BE67BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6BE517-427A-4335-8FCD-8A721A9E507C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc8160_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.234",
            "matchCriteriaId" : "399FE06D-EF5E-49BC-B1F9-90FC14BFE155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E731776-CCAE-467E-9423-1155B280358B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc8163_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.234",
            "matchCriteriaId" : "110611D5-8974-43F6-AF34-E234F27F62D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4E2BF7-2D02-4D9C-BE01-F20FDA54DB12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9225_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.234",
            "matchCriteriaId" : "9310F0D4-4BCE-4CFC-A73A-D84980953055"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9225:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFAA4B58-2CD9-413F-91BF-766FEEA27DD8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9235_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.234",
            "matchCriteriaId" : "9D021F30-C931-4FD5-A7FC-12C2A053B572"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAC3F55-01E7-4D34-81F4-2C2AB02C48A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9245_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.234",
            "matchCriteriaId" : "3D24AB81-B309-442B-A09B-F3907E29F20F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9245:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6974241-960F-4D72-973D-A7EAA75059A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9255_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.234",
            "matchCriteriaId" : "8A66A1DE-CE27-4C3E-970E-072287245D26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7F492E-1E68-4A72-85FB-61C46F4AB2DF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9265_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmh.081.234",
            "matchCriteriaId" : "97EA3C1B-1016-4914-B4ED-AB3A1943500F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBDC7821-365A-4FA1-A47A-A0FB50A278F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9335_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.234",
            "matchCriteriaId" : "03F055D8-3437-4722-88FB-AF8F122B3DE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C842AC2-2A47-4C50-A0D9-E96986DBA0F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9445_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.234",
            "matchCriteriaId" : "85A5E1E1-0104-4ED6-96AC-1BBB157F28A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9445:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D39C09A6-FCDA-4E5B-8D8A-10A28E72A2C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9455_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.234",
            "matchCriteriaId" : "C9E2CF00-B156-41E2-A986-820606C2D7F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "922062B4-D3B4-4F79-BF97-84A271B020B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xc9465_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.234",
            "matchCriteriaId" : "9CCDE367-A600-496A-956F-4423FBA82C12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9465:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948107F0-8F0D-461F-9438-AC6D8C7D6C84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm1242_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.234",
            "matchCriteriaId" : "737C9DE0-13D6-4809-8B6F-82B235EAC4E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583FDFAC-3865-4F4C-AF65-96F38D368669"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm1246_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.234",
            "matchCriteriaId" : "9AB1886A-60FF-4E8E-AD58-4D7EBDF89A86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DCC657-E900-4A93-B9C5-4194C33ECDE6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm1342_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.234",
            "matchCriteriaId" : "0796869A-61F6-47C1-BB90-C5EA1C209F82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B2AB4-CB58-484B-AFD0-277EABF06985"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm3142_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtct.081.234",
            "matchCriteriaId" : "20D85CD3-8F55-499A-87A5-22F239F2340A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3142:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EECF0-E7D5-43CC-9518-948EC1141BAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm3250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.234",
            "matchCriteriaId" : "8A4D3F14-10E4-4556-95D4-0FF8355BC360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CDCA43-88D9-4456-9A70-112618837BD0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm5365_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.234",
            "matchCriteriaId" : "3EB8503B-C581-4BAA-A8FB-C2D7DA73A8B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0AA674-75B3-4D6A-B2BB-6CC7EC6A836D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm7355_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.234",
            "matchCriteriaId" : "EBB77E52-8C32-4A37-A8D8-FC9A4536C358"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7355:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BEEF7-A8FB-4951-8784-EDED0D766C9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:xm7370_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.234",
            "matchCriteriaId" : "552CDFF3-5E9E-45A2-85AF-9B72D2C9CDEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC95D3-55D5-4BE2-94A3-148EB33D4707"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-23560.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-23560.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-23T22:15:11.290",
      "lastModified" : "2025-04-02T16:15:31.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IzyBat Orange casiers before 20221102_1 allows SQL Injection via a getCasier.php?taille= URI."
      }, {
        "lang" : "es",
        "value" : "Los casiers IzyBat Orange anteriores a 20221102_1 permiten la inyección de SQL a través de un URI getCasier.php?taille=."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:izybat:orange_casiers:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20221102_1",
            "matchCriteriaId" : "A34B5C92-510C-4162-9EC5-A1A749B473EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-j94f-5cg6-6j9j",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-j94f-5cg6-6j9j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22483",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-23T23:15:10.307",
      "lastModified" : "2024-11-21T07:44:53.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to several polynomial time complexity issues in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. Various commands, when piped to cmark-gfm with large values, cause the running time to increase quadratically. These vulnerabilities have been patched in version 0.29.0.gfm.7.\n"
      }, {
        "lang" : "es",
        "value" : "cmark-gfm es la bifurcación de GitHub de cmark, una librería y programa de análisis y representación de CommonMark en C. Las versiones anteriores a 0.29.0.gfm.7 están sujetas a varios problemas de complejidad de tiempo polinomial en cmark-gfm que pueden provocar un agotamiento ilimitado de los recursos y posterior denegación del servicio. Varios comandos, cuando se canalizan a cmak-gfm con valores grandes, hacen que el tiempo de ejecución aumente cuadráticamente. Estas vulnerabilidades se han solucionado en la versión 0.29.0.gfm.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-407"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:cmark-gfm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.29.0.gfm.7",
            "matchCriteriaId" : "BEFD0856-0CFF-4D0F-B9D5-02F4A537C5CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/github/cmark-gfm/security/advisories/GHSA-29g3-96g3-jg6c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/github/cmark-gfm/security/advisories/GHSA-29g3-96g3-jg6c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22484",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-23T23:15:10.423",
      "lastModified" : "2024-11-21T07:44:53.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to a polynomial time complexity issue in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7."
      }, {
        "lang" : "es",
        "value" : "cmark-gfm es la bifurcación de GitHub de cmark, una librería y programa de análisis y representación de CommonMark en C. Las versiones anteriores a 0.29.0.gfm.7 están sujetas a un problema de complejidad de tiempo polinómico en cmark-gfm que puede provocar un agotamiento ilimitado de los recursos y posterior denegación del servicio. Esta vulnerabilidad ha sido parcheada en 0.29.0.gfm.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-407"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-407"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:cmark-gfm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.29.0.gfm.7",
            "matchCriteriaId" : "BEFD0856-0CFF-4D0F-B9D5-02F4A537C5CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/github/cmark-gfm/security/advisories/GHSA-24f7-9frr-5h2r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/github/cmark-gfm/security/advisories/GHSA-24f7-9frr-5h2r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21719",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-24T00:15:10.497",
      "lastModified" : "2025-02-28T20:15:39.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de característica de seguridad de Microsoft Edge (basada en Chromium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.1518.70",
            "matchCriteriaId" : "E95E4988-3DAD-4E55-B87C-C637D7B17613"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21719",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21775",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-24T00:15:10.590",
      "lastModified" : "2025-01-01T01:15:26.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de Microsoft Edge (basado en Chromium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:extended_stable:*:*:*",
            "versionEndExcluding" : "108.0.1462.95",
            "matchCriteriaId" : "BD9E693A-288F-4868-8912-543521A72766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.1518.70",
            "matchCriteriaId" : "E95E4988-3DAD-4E55-B87C-C637D7B17613"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21775",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21795",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-24T00:15:10.673",
      "lastModified" : "2024-11-21T07:43:39.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en Microsoft Edge (basado en Chromium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.1518.70",
            "matchCriteriaId" : "E95E4988-3DAD-4E55-B87C-C637D7B17613"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21795",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21796",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-01-24T00:15:10.747",
      "lastModified" : "2025-01-01T01:15:28.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios en Microsoft Edge (basado en Chromium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:extended_stable:*:*:*",
            "versionEndExcluding" : "108.0.1462.95",
            "matchCriteriaId" : "BD9E693A-288F-4868-8912-543521A72766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21796",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22485",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-24T01:15:10.593",
      "lastModified" : "2024-11-21T07:44:54.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29.0.gfm.7, a crafted markdown document can trigger an out-of-bounds read in the `validate_protocol` function. We believe this bug is harmless in practice, because the out-of-bounds read accesses `malloc` metadata without causing any visible damage.This vulnerability has been patched in 0.29.0.gfm.7."
      }, {
        "lang" : "es",
        "value" : "cmmark-gfm es la bifurcación de GitHub de cmark, una librería y programa de análisis y representación de CommonMark en C. En versiones anteriores a la 0.29.0.gfm.7, un documento de rebajas manipulado puede desencadenar una lectura fuera de los límites en la función `validate_protocol` . Creemos que este error es inofensivo en la práctica, porque la lectura fuera de los límites accede a los metadatos \"malloc\" sin causar ningún daño visible. Esta vulnerabilidad ha sido parcheada en 0.29.0.gfm.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:cmark-gfm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.29.0.gfm.7",
            "matchCriteriaId" : "BEFD0856-0CFF-4D0F-B9D5-02F4A537C5CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/github/cmark-gfm/security/advisories/GHSA-c944-cv5f-hpvr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/github/cmark-gfm/security/advisories/GHSA-c944-cv5f-hpvr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-24T01:15:10.683",
      "lastModified" : "2025-03-27T21:15:42.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Amano Xoffice parking solutions 7.1.3879 is vulnerable to SQL Injection."
      }, {
        "lang" : "es",
        "value" : "Las soluciones de estacionamiento Amano Xoffice 7.1.3879 son vulnerables a la inyección SQL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amano:xoffice:7.1.3879:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C03A80E-2A2D-4AF2-9328-F51121DA3F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://0xhunter20.medium.com/how-i-found-my-first-blind-sql-injection-cve-2023-23331-aef103a7f73c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.amano.eu/en/parking/xparc/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://0xhunter20.medium.com/how-i-found-my-first-blind-sql-injection-cve-2023-23331-aef103a7f73c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.amano.eu/en/parking/xparc/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0396",
      "sourceIdentifier" : "vulnerabilities@zephyrproject.org",
      "published" : "2023-01-25T02:02:06.200",
      "lastModified" : "2025-04-03T20:15:20.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses."
      }, {
        "lang" : "es",
        "value" : "Un controlador Bluetooth malicioso o defectuoso puede provocar sobrelecturas del búfer en la mayoría de las funciones que procesan respuestas de comandos HCI."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerabilities@zephyrproject.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.0",
            "matchCriteriaId" : "A09B3C2A-EED0-4916-A4AF-9007C498B058"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8rpp-6vxq-pqg3",
        "source" : "vulnerabilities@zephyrproject.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8rpp-6vxq-pqg3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0229",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-01-26T21:18:06.900",
      "lastModified" : "2025-04-01T15:15:57.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to \"unconfined.\" By default, the seccomp profile used in the restricted-v2 Security Context Constraint (SCC) is \"runtime/default,\" allowing users to disable seccomp for pods they can create and modify."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en github.com/openshift/apiserver-library-go, utilizado en OpenShift 4.12 y 4.11. Dicho fallo puede permitir a los usuarios con pocos privilegios configurar el perfil seccomp para los pods que controlan en \"unconfined\". De forma predeterminada, el perfil seccomp utilizado en la restricción de contexto (restricted-v2 Security Context Constraint, SCC)  es \"runtime/default\", lo que permite a los usuarios deshabilitar seccomp para los pods que pueden crear y modificar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275413B5-6C5D-4125-9396-0DAE614887E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EE29F1-AE5C-4B2D-9C28-68D10F2DFCB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2160349",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2160349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0284",
      "sourceIdentifier" : "security@checkmk.com",
      "published" : "2023-01-26T21:18:07.030",
      "lastModified" : "2024-11-21T07:36:53.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation of LDAP user IDs in Tribe29 Checkmk allows attackers that can control LDAP user IDs to manipulate files on the server. Checkmk <= 2.1.0p19, Checkmk <= 2.0.0p32, and all versions of Checkmk 1.6.0 (EOL) are affected."
      }, {
        "lang" : "es",
        "value" : "La validación de entrada incorrecta de las ID de usuario LDAP en Tribe29 Checkmk permite a los atacantes que pueden controlar las ID de usuario LDAP manipular archivos en el servidor. Esta vulnerabilidad afecta a las versiones Checkmk &lt;= 2.1.0p19, Checkmk &lt;= 2.0.0p32 y todas las versiones de Checkmk 1.6.0 (EOL)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@checkmk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@checkmk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EDFDCA-0778-4540-B1D5-D3A986258028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "54031390-D7E7-4A14-AA2F-923768B3685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B7E35F-5A07-424E-AA09-AC54104D612B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4AC302-C8F5-4A2B-A73A-982D0AA2495A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "7A058C71-C39E-4109-B570-4A061013D033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*",
            "matchCriteriaId" : "22BCFA79-B3D6-4FFF-A3D3-8C4C97AF17C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1703D9-8EEB-432D-90E2-F847CDC4C204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4C72BA-6D78-4911-83E4-4DABB2CAC47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*",
            "matchCriteriaId" : "081FD127-1066-4019-B521-9FADB85DBD4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A4F005-4823-4B2B-B4EF-4EFDB04CFB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "357240B1-F0DA-4FA8-B782-D998951F4B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "2F828F54-04E2-4B98-91A7-B09ED833E88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B8B300-8264-40AB-A839-7EACB988163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "EB76A8DF-C870-482F-A488-DB2917ABD971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "04947B1B-CF67-4C11-8FE3-6C17FD35E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "591AEC3C-2F48-4E91-9881-42EEDD039C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CA04C8-2C80-4C7E-B329-3FFCBEDEE663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p16:*:*:*:*:*:*",
            "matchCriteriaId" : "47A1C5AC-C8B7-495A-A5F4-CD4790358A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "B87D8B46-5B04-460D-BBA1-BB19234DA19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "C59EA30A-0B7D-4E58-A503-8C2F16B45004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p19:*:*:*:*:*:*",
            "matchCriteriaId" : "F2849E4C-09D1-48A5-B28E-F7A4CD3E8967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E5549E-3272-478D-85D0-6F53EE731183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p20:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0EA35B-EBFF-4E6F-BD2E-4BE165E81A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p21:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2C76F2-D457-4C7C-BE76-515CA45CA161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p22:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5A374E-56C5-4EBA-967C-CDFE6A967DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p23:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4568F0-8CCD-4517-B4E9-7E2CA228D659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p24:*:*:*:*:*:*",
            "matchCriteriaId" : "96893FF5-B85E-45AF-9020-5D767E954D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p25:*:*:*:*:*:*",
            "matchCriteriaId" : "425ABB56-3A2E-40E3-9701-E638F16E6ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p26:*:*:*:*:*:*",
            "matchCriteriaId" : "9EEF6054-B3B5-4AAC-B24B-147A38564992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p27:*:*:*:*:*:*",
            "matchCriteriaId" : "462C2826-237E-4061-8F14-3DE09CE9952C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p28:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE8F008-1FC0-416C-B0D4-5A560CF985F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p29:*:*:*:*:*:*",
            "matchCriteriaId" : "53AA0AB2-E814-4378-9486-D9192293C1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "D884D3AF-7D57-4DF6-82E8-556C35319ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p30:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6A123B-D6D3-4C46-9595-4D8138FC31C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p31:*:*:*:*:*:*",
            "matchCriteriaId" : "4245029F-D95D-4364-BB29-8C60F5461070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p32:*:*:*:*:*:*",
            "matchCriteriaId" : "C67473D2-A96B-4ACD-B248-A0AF2E3C9738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "528BAFA3-ED39-45B5-8C81-A6FD76DDB49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "02DA7C50-7360-4679-93A5-92C8DC5E8E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "71B49D90-9522-46C6-8948-B9C21CEA473C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "98C29296-D1F3-45A2-BF0A-22333150F416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "339226E6-532F-4FE2-A543-6B166A9BA7F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "986FDFA6-BE12-4268-9B90-F7D469BBE517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6FCE7B-7ECE-42A4-82C5-12A647B0CCC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "923AA113-D5E7-4F78-88BA-B72EF250F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "B1984F57-A313-48AC-B8F9-F352D82824D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "A38DB527-72A6-40B8-B46F-B8E78BFFDB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b5:*:*:*:*:*:*",
            "matchCriteriaId" : "67643E11-91A1-4580-BC4C-574074C862CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b6:*:*:*:*:*:*",
            "matchCriteriaId" : "350B7E0F-D234-4D7C-91E4-F35E73579A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b7:*:*:*:*:*:*",
            "matchCriteriaId" : "DE58ACA9-8078-46A7-8487-C06E4E38F372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b8:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D8CF4D-E1F8-4D8D-A8A9-1783CAC869E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b9:*:*:*:*:*:*",
            "matchCriteriaId" : "58B0B051-7D3C-4EC7-96B0-38A1CC108D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A741-AAF2-43EE-8272-9239133A01E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F275A3-A99E-40E1-BD77-694FA568541F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "3A44BF1A-5BE0-4412-B51D-055445758B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "A31BAE94-9096-4320-AC19-AA204E8EC08D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0784EA-98E8-4490-B97B-894F188A223D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "A56A901F-1040-4DB9-9BE3-FE1999C514CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "58A904FC-C015-469D-8502-E678D5FDBD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p16:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5D109C-60AA-4FA4-9B10-2191AAF109F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "37297866-24BB-4044-8744-EC0A8C29F152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D4A171-CCB3-43B8-8B70-78610423E7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p19:*:*:*:*:*:*",
            "matchCriteriaId" : "5E1145FF-426D-407C-9F4B-EF773BD191EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA8F776-A724-48FC-B7EF-13788BC69753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "076463AA-195F-4CD6-861B-72FE1C8A407F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "63043834-98E5-47C2-91F1-41B98270ABCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF745D0-2EA6-4414-90BC-99D3ED08BB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "4823087F-D7FA-4594-8FD3-412DE5EA1F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "6429F9CE-D477-4CFF-B6E0-4BF11B61ED0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "A50C58F9-94ED-4D85-8331-2D81F8E0760A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6AC0BD-FB65-4FAA-B344-66F87F16F8B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribe29:checkmk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.0",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "2E68DD82-AF90-4D24-B507-833541B762AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://checkmk.com/werk/15181",
        "source" : "security@checkmk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://checkmk.com/werk/15181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0321",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2023-01-26T21:18:07.143",
      "lastModified" : "2024-11-21T07:36:58.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Campbell Scientific dataloggers CR6, CR300, CR800, CR1000 and CR3000 may allow an attacker to download configuration files, which may contain sensitive information about the internal network. From factory defaults, the mentioned datalogges have HTTP and PakBus enabled. The devices, with the default configuration, allow this situation via the PakBus port. The exploitation of this vulnerability may allow an attacker to download, modify, and upload new configuration files."
      }, {
        "lang" : "es",
        "value" : "Los registradores de datos Campbell Scientific CR6, CR300, CR800, CR1000 y CR3000 pueden permitir a un atacante descargar archivos de configuración, que pueden contener información confidencial sobre la red interna. Por defecto de fábrica, los registros de datos mencionados tienen HTTP y PakBus habilitados. Los dispositivos, con la configuración predeterminada, permiten esta situación a través del puerto PakBus. La explotación de esta vulnerabilidad puede permitir a un atacante descargar, modificar y cargar nuevos archivos de configuración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:campbellsci:cr6_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "839FB9B3-A45D-48B9-B5D1-9993CE72836C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:campbellsci:cr6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180EDEFC-E463-43FF-AF07-66523FE02287"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:campbellsci:cr300_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110C6716-4EE2-4D25-B191-9F9FD5BF01F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:campbellsci:cr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587D4B62-2909-439C-81AF-36817DC1D12F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:campbellsci:cr800_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A05CFD2E-51B7-4980-82B9-7B1F9E16591B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:campbellsci:cr800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E48618-8055-47A7-A002-AF2F2E6EDD97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:campbellsci:cr1000_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4802F9ED-80EB-454A-AC89-F30709D83C2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:campbellsci:cr1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13E535FC-E2B5-4B0E-AD5A-FB8EBE8658DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:campbellsci:cr3000_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE27FEEF-4AAD-4B4C-B533-BD6D93740E18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:campbellsci:cr3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B86603C-C6A7-4E66-A2C8-B2F168A23AD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.hackplayers.com/2023/01/cve-2023-0321-info-sensible-campbell.html",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.incibe-cert.es/en/early-warning/ics-advisories/disclosure-sensitive-information-campbell-scientific-products",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.hackplayers.com/2023/01/cve-2023-0321-info-sensible-campbell.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.incibe-cert.es/en/early-warning/ics-advisories/disclosure-sensitive-information-campbell-scientific-products",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0356",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-01-26T21:18:07.317",
      "lastModified" : "2024-11-21T07:37:02.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nSOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive information. \n\n\n\n\n "
      }, {
        "lang" : "es",
        "value" : "Las versiones 7.20 y anteriores de SOCOMEC MODULYS GP Netvision carecen de un cifrado sólido para las credenciales en las conexiones HTTP, lo que podría provocar que los actores de amenazas obtengan información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-261"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:socomec:net_vision:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.20",
            "matchCriteriaId" : "CCF7FE84-213C-437F-95D3-3F769510FFF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:socomec:modulys_gp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C795C90-1E56-4F38-B637-6C12DEAF6541"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-024-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-024-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0394",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-01-26T21:18:07.490",
      "lastModified" : "2025-03-31T15:15:38.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de desreferencia de puntero nulo en rawv6_push_pending_frames en net/ipv6/raw.c en el subcomponente de red del kernel de Linux. Esta falla hace que el sistema falle."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "108695B6-7133-4B6C-80AF-0F66880FE858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF501633-2F44-4913-A8EE-B021929F49F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDA597B-CAC1-4DF0-86F0-42E142C654E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "725C78C9-12CE-406F-ABE8-0813A01D66E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cb3e9864cdbe35ff6378966660edbcbac955fe17",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230302-0005/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cb3e9864cdbe35ff6378966660edbcbac955fe17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230302-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0411",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-01-26T21:18:07.613",
      "lastModified" : "2025-11-03T22:16:02.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file"
      }, {
        "lang" : "es",
        "value" : "Bucles excesivos en múltiples disectores en Wireshark 4.0.0 a 4.0.2 y 3.6.0 a 3.6.10 y permite la denegación de servicio mediante inyección de paquetes o archivo de captura manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndIncluding" : "3.6.10",
            "matchCriteriaId" : "211ACC10-0127-4F5F-A124-CC3563923D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "FD6DA49A-D5CB-4528-B23F-32E3F8F00A33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0411.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18711",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18720",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18737",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-06.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0411.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0412",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-01-26T21:18:07.727",
      "lastModified" : "2025-11-03T22:16:02.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file"
      }, {
        "lang" : "es",
        "value" : "El disector TIPC falla en Wireshark para las versiones de la 4.0.0 a la 4.0.2 y de la 3.6.0 a la 3.6.10 y permite la denegación de servicio mediante inyección de paquetes o archivo de captura manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndIncluding" : "3.6.10",
            "matchCriteriaId" : "211ACC10-0127-4F5F-A124-CC3563923D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "FD6DA49A-D5CB-4528-B23F-32E3F8F00A33"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0412.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18770",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-07.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0412.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0413",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-01-26T21:18:07.847",
      "lastModified" : "2025-11-03T22:16:02.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file"
      }, {
        "lang" : "es",
        "value" : "Error del motor de disección en Wireshark 4.0.0 a 4.0.2 y 3.6.0 a 3.6.10 y permite la denegación de servicio mediante inyección de paquetes o archivo de captura manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndIncluding" : "3.6.10",
            "matchCriteriaId" : "211ACC10-0127-4F5F-A124-CC3563923D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "FD6DA49A-D5CB-4528-B23F-32E3F8F00A33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0413.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18766",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-03.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0413.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0414",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-01-26T21:18:07.947",
      "lastModified" : "2025-04-02T16:15:30.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture file"
      }, {
        "lang" : "es",
        "value" : "La falla en el disector EAP en Wireshark 4.0.0 a 4.0.2 permite la denegación de servicio mediante inyección de paquetes o archivo de captura manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "FD6DA49A-D5CB-4528-B23F-32E3F8F00A33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0414.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18622",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-01.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0414.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0415",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-01-26T21:18:08.060",
      "lastModified" : "2025-11-03T22:16:02.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file"
      }, {
        "lang" : "es",
        "value" : "El disector iSCSI falla en Wireshark 4.0.0 a 4.0.2 y 3.6.0 a 3.6.10 y permite la denegación de servicio mediante inyección de paquetes o archivo de captura manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndIncluding" : "3.6.10",
            "matchCriteriaId" : "211ACC10-0127-4F5F-A124-CC3563923D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "FD6DA49A-D5CB-4528-B23F-32E3F8F00A33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0415.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18796",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-05.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0415.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0416",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-01-26T21:18:08.157",
      "lastModified" : "2025-11-03T22:16:02.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file"
      }, {
        "lang" : "es",
        "value" : "El disector GNW falla en las versiones de Wireshark de la 4.0.0 a la 4.0.2 y de la 3.6.0 a la 3.6.10 y permite la denegación de servicio mediante inyección de paquetes o archivo de captura diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndIncluding" : "3.6.10",
            "matchCriteriaId" : "211ACC10-0127-4F5F-A124-CC3563923D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "FD6DA49A-D5CB-4528-B23F-32E3F8F00A33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0416.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18779",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-04.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0416.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0417",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-01-26T21:18:08.260",
      "lastModified" : "2025-11-03T22:16:02.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file"
      }, {
        "lang" : "es",
        "value" : "Pérdida de memoria en el disector NFS en Wireshark 4.0.0 a 4.0.2 y 3.6.0 a 3.6.10 y permite la denegación de servicio mediante inyección de paquetes o archivo de captura diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndIncluding" : "3.6.10",
            "matchCriteriaId" : "211ACC10-0127-4F5F-A124-CC3563923D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "FD6DA49A-D5CB-4528-B23F-32E3F8F00A33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0417.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18628",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-02.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0417.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0444",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-01-26T21:18:08.363",
      "lastModified" : "2025-04-03T20:15:20.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'User', which is in the 'Read Only User' group, can view the password of another default user 'Administrator', which is in the 'Administrator' group. This allows any lower privileged user to log in as an administrator."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de escalada de privilegios en Delta Electronics InfraSuite Device Master 00.00.02a. Un usuario predeterminado 'Usuario', que está en el grupo 'Usuario de solo lectura', puede ver la contraseña de otro usuario predeterminado 'Administrador', que está en el grupo 'Administrador'. Esto permite que cualquier usuario con privilegios inferiores inicie sesión como administrador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:infrasuite_device_master:00.00.02a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695A42D4-2C18-40C9-9C5C-EFD8AE91A344"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-4",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0448",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-01-26T21:18:08.447",
      "lastModified" : "2025-04-02T14:15:36.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Helper Lite WordPress plugin, in versions < 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability."
      }, {
        "lang" : "es",
        "value" : "El complemento WP Helper Lite de WordPress, en versiones &lt;= 4.3, devuelve todos los parámetros GET no saneados en la respuesta, lo que genera una vulnerabilidad de cross-site scripting reflejado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matbao:wp_helper_premium:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.3",
            "matchCriteriaId" : "09142FAD-9802-4AEB-B48B-E499705876F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-3",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0449",
      "sourceIdentifier" : "responsible-disclosure@pingidentity.com",
      "published" : "2023-01-26T21:18:08.540",
      "lastModified" : "2025-04-14T17:15:26.173",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0451",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-01-26T21:18:08.673",
      "lastModified" : "2024-11-21T07:37:12.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Econolite EOS versions prior to 3.2.23 lack a password\nrequirement for gaining “READONLY” access to log files and certain database and\nconfiguration files. One such file contains tables with MD5 hashes and\nusernames for all defined users in the control software, including\nadministrators and technicians.\n\n\n\n\n\n\n\n"
      }, {
        "lang" : "es",
        "value" : "Las versiones de Econolite EOS anteriores a la 3.2.23 carecen de un requisito de contraseña para obtener acceso \"SÓLO LECTURA\" a los archivos de registro y a determinadas bases de datos y archivos de configuración. Uno de esos archivos contiene tablas con hash MD5 y nombres de usuario para todos los usuarios definidos en el software de control, incluidos administradores y técnicos.\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:econolite:eos:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A25AD1-88B9-4680-8F69-81308219D9F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0452",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-01-26T21:18:08.860",
      "lastModified" : "2024-11-21T07:37:12.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Econolite EOS versions prior to 3.2.23 use a weak hash\nalgorithm for encrypting privileged user credentials. A configuration file that\nis accessible without authentication uses MD5 hashes for encrypting\ncredentials, including those of administrators and technicians.\n\n\n\n\n\n\n\n"
      }, {
        "lang" : "es",
        "value" : "Las versiones de Econolite EOS anteriores a la 3.2.23 utilizan un algoritmo hash débil para cifrar las credenciales de usuarios privilegiados. Un archivo de configuración al que se puede acceder sin autenticación utiliza hashes MD5 para cifrar las credenciales, incluidas las de administradores y técnicos.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-328"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:econolite:eos:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A25AD1-88B9-4680-8F69-81308219D9F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0463",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-01-26T21:18:09.163",
      "lastModified" : "2025-04-02T14:15:37.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The force offline MFA prompt setting is not respected when switching to offline mode in Devolutions Remote Desktop Manager 2022.3.29 to 2022.3.30 allows a user to save sensitive data on disk.\n\n"
      }, {
        "lang" : "es",
        "value" : "La configuración de forzar el aviso MFA sin conexión no se respeta al cambiar al modo sin conexión en Devolutions Remote Desktop Manager 2022.3.29 a 2022.3.30 permite al usuario guardar datos confidenciales en el disco."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:remote_desktop_manager:2022.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B934EB4-CEC4-41A2-9818-BCF330179452"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:remote_desktop_manager:2022.3.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66FD61CA-5B6B-4060-AB5D-C0C6985C4219"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0001",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0468",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-01-26T21:18:09.347",
      "lastModified" : "2025-04-01T15:15:57.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race condition of poll_refs. This flaw may cause a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla de use-after-free en io_uring/poll.c en io_poll_check_events en el subcomponente io_uring en el kernel de Linux debido a una condición de ejecución de poll_refs. Este defecto puede provocar una desreferencia del puntero NULL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "9064B383-DD48-40A2-8947-F5BA6E6B6713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DE093B34-F4CD-4052-8122-730D6537A91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "17F0B248-42CF-4AE6-A469-BB1BAE7F4705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E2422816-0C14-4B5E-A1E6-A9D776E5C49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "35B26BE4-43A6-4A36-A7F6-5B3F572D9186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFFB0B3-930D-408A-91E2-BAE0C2715D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2164024",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2164024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0469",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-01-26T21:18:09.437",
      "lastModified" : "2025-04-01T15:15:57.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent in the Linux Kernel during call cleanup. This flaw may lead to a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla de use-after-free en io_uring/filetable.c en io_install_fixed_file en el subcomponente io_uring en el kernel de Linux durante la limpieza de llamadas. Este defecto puede dar lugar a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "9064B383-DD48-40A2-8947-F5BA6E6B6713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DE093B34-F4CD-4052-8122-730D6537A91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "17F0B248-42CF-4AE6-A469-BB1BAE7F4705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E2422816-0C14-4B5E-A1E6-A9D776E5C49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "35B26BE4-43A6-4A36-A7F6-5B3F572D9186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFFB0B3-930D-408A-91E2-BAE0C2715D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2163723",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2163723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0476",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-01-26T21:18:09.727",
      "lastModified" : "2025-04-01T15:15:58.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A LDAP injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could generate data in Active Directory using the application account through blind LDAP injection."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección LDAP en Tenable.sc debido a una validación incorrecta de la entrada proporcionada por el usuario antes de devolverla a los usuarios. Un atacante autenticado podría generar datos en Active Directory utilizando la cuenta de la aplicación mediante una inyección blind de LDAP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.23.1",
            "matchCriteriaId" : "88CB8AC6-3A92-4EEE-AE65-5A295ED6E421"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/tns-2023-03",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2023-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0513",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-26T21:18:10.560",
      "lastModified" : "2025-04-04T15:16:10.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in isoftforce Dreamer CMS up to 4.0.1 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.3 is able to address this issue. It is recommended to upgrade the affected component. VDB-219334 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad isoftforce Dreamer CMS hasta 4.0.1 y se ha clasificado como problemática. Esta vulnerabilidad afecta a código desconocido. La manipulación conduce a cross-site scripting. El ataque se puede iniciar de forma remota. El exploit ha sido divulgado al público y puede utilizarse. La actualización a la versión 4.1.3 puede solucionar este problema. Se recomienda actualizar el componente afectado. VDB-219334 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iteachyou:dreamer_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.1",
            "matchCriteriaId" : "409E01F4-8288-49DA-9517-3DB8DFB45A90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/isoftforce/dreamer_cms/issues/I68UYM",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/isoftforce/dreamer_cms/tree/Latest_Stable_Release_4.1.3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219334",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219334",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/isoftforce/dreamer_cms/issues/I68UYM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/isoftforce/dreamer_cms/tree/Latest_Stable_Release_4.1.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0515",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-26T21:18:10.727",
      "lastModified" : "2024-11-21T07:37:19.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/forget_password.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-219335."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Online Tours &amp; Travels Management System 1.0 y se ha clasificado como crítica. Este problema afecta un procesamiento desconocido del archivo admin/forget_password.php del componente Parameter Handler. La manipulación del argumento email conduce a una inyección de SQL. El exploit ha sido divulgado al público y puede utilizarse. El identificador asociado de esta vulnerabilidad es VDB-219335."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_forget_password_email.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219335",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.219335",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_forget_password_email.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.219335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0516",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-26T21:18:10.863",
      "lastModified" : "2024-11-21T07:37:19.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file user/forget_password.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219336."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en SourceCodester Online Tours &amp; Travels Management System 1.0. Ha sido clasificada como crítica. Una función desconocida del archivo user/forget_password.php del componente Parameter Handler es afectada por esta vulnerabilidad. La manipulación del argumento email conduce a una inyección de SQL. El exploit ha sido divulgado al público y puede utilizarse. El identificador de esta vulnerabilidad es VDB-219336."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/user_forget_password_email.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219336",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.219336",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/user_forget_password_email.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.219336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20904",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:10.987",
      "lastModified" : "2025-04-03T21:15:37.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mismatch in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12L Android-13Android ID: A-246300272"
      }, {
        "lang" : "es",
        "value" : "En getTrampolineIntent de SettingsActivity.java, existe un posible inicio de actividad arbitraria debido a una discrepancia de intención en el código. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. No se necesita la interacción del usuario para la explotación. Producto: Android; versiones: Android-12L, Android-13; ID de Android: A-246300272"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20905",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:11.047",
      "lastModified" : "2025-04-03T21:15:38.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-241387741"
      }, {
        "lang" : "es",
        "value" : "En Mfc_Transceive de phNxpExtns_MifareStd.cpp, existe una posible escritura fuera de los límites debido a una verificación de los límites faltante. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. No se necesita la interacción del usuario para la explotación. Producto: AndroidVersiones: Android-10ID de Android: A-241387741"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20908",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:11.117",
      "lastModified" : "2025-04-03T21:15:38.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In several functions of SettingsState.java, there is a possible system crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-239415861"
      }, {
        "lang" : "es",
        "value" : "En varias funciones de SettingsState.java, existe un posible bucle de bloqueo del sistema debido al agotamiento de los recursos. Esto podría provocar una denegación de servicio local sin necesidad de permisos de ejecución adicionales. No se necesita la interacción del usuario para la explotación.Producto: Android; Versiones: Android-10, Android-11, Android-12, Android-12L, Android-13; ID de Android: A-239415861"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20912",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:11.177",
      "lastModified" : "2025-04-02T15:15:51.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onActivityResult of AvatarPickerActivity.java, there is a possible way to access images belonging to other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246301995"
      }, {
        "lang" : "es",
        "value" : "En onActivityResult de AvatarPickerActivity.java, existe una forma posible de acceder a imágenes que pertenecen a otros usuarios debido a que falta una verificación de permiso. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. No se necesita la interacción del usuario para la explotación. Producto: AndroidVersiones: Android-13ID de Android: A-246301995"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20913",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:11.240",
      "lastModified" : "2025-04-02T15:15:51.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onCreate of PhoneAccountSettingsActivity.java and related files, there is a possible way to mislead the user into enabling a malicious phone account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-246933785"
      }, {
        "lang" : "es",
        "value" : "En onCreate of PhoneAccountSettingsActivity.java y archivos relacionados, existe una manera posible de engañar al usuario para que habilite una cuenta de teléfono maliciosa debido a un ataque de secuestro/superposición. Esto podría conducir a una escalada local de privilegios con permisos de ejecución del usuario necesarios. Se necesita la interacción del usuario para la explotación.Producto: Android; Versiones: Android-10, Android-11, Android-12, Android-12L, Android-13; ID de Android: A-246933785"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20915",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:11.307",
      "lastModified" : "2025-04-02T15:15:51.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In addOrReplacePhoneAccount of PhoneAccountRegistrar.java, there is a possible way to enable a phone account without user interaction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-246930197"
      }, {
        "lang" : "es",
        "value" : "En addOrReplacePhoneAccount de PhoneAccountRegistrar.java, existe una forma posible de habilitar una cuenta de teléfono sin interacción del usuario debido a un error lógico en el código. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. No se necesita la interacción del usuario para la explotación. Producto: AndroidVersiones: Android-10 Android-11 Android-12 Android-12L Android-13ID de Android: A-246930197"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20916",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:11.383",
      "lastModified" : "2025-04-02T15:15:51.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getMainActivityLaunchIntent of LauncherAppsService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-229256049"
      }, {
        "lang" : "es",
        "value" : "En getMainActivityLaunchIntent de LauncherAppsService.java, existe una forma posible de evitar las restricciones para iniciar actividades desde segundo plano debido a una falta de verificación de permisos. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. No se necesita la interacción del usuario para la explotación. Producto: AndroidVersiones: Android-12 Android-12LID de Android: A-229256049"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20919",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:11.447",
      "lastModified" : "2025-04-02T15:15:51.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getStringsForPrefix of Settings.java, there is a possible prevention of package uninstallation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-252663068"
      }, {
        "lang" : "es",
        "value" : "En getStringsForPrefix de Settings.java, existe una posible prevención de la desinstalación del paquete debido a un error lógico en el código. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. No se necesita la interacción del usuario para la explotación. Producto: Android Versiones: Android-13 ID de Android: A-252663068"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20920",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:11.520",
      "lastModified" : "2025-04-02T15:15:52.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In queue of UsbRequest.java, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-204584366"
      }, {
        "lang" : "es",
        "value" : "En la cola de UsbRequest.java, existe una posible forma de dañar la memoria debido a un use after free. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. La interacción del usuario no es necesaria para la explotación. Producto: Android; Versiones: Android-10, Android-11, Android-12, Android-12L, Android-13; ID de Android: A-204584366"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20921",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:11.590",
      "lastModified" : "2025-04-02T15:15:52.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility services due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-243378132"
      }, {
        "lang" : "es",
        "value" : "En onPackageRemoved de AccessibilityManagerService.java, existe la posibilidad de otorgar automáticamente servicios de accesibilidad debido a un error lógico en el código. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. Se necesita la interacción del usuario para la explotación. Producto: Android; Versiones: Android-10 Android-11 Android-12 Android-12L Android-13; ID de Android: A-243378132"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20922",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:11.667",
      "lastModified" : "2025-04-02T15:15:52.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In setMimeGroup of PackageManagerService.java, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-237291548"
      }, {
        "lang" : "es",
        "value" : "En setMimeGroup de PackageManagerService.java, existe un posible bucle de bloqueo debido al agotamiento de los recursos. Esto podría provocar una denegación de servicio local sin necesidad de permisos de ejecución adicionales. No se necesita la interacción del usuario para la explotación. Producto: AndroidVersiones: Android-11 Android-12 Android-12L Android-13ID de Android: A-237291548"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20923",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:11.737",
      "lastModified" : "2025-04-02T15:15:52.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In exported content providers of ShannonRcs, there is a possible way to get access to protected content providers due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-246933910References: N/A"
      }, {
        "lang" : "es",
        "value" : "En los proveedores de contenido exportado de ShannonRcs, existe una forma posible de obtener acceso a proveedores de contenido protegido debido a una omisión de permisos. Esto podría dar lugar a la divulgación de información local sin necesidad de permisos de ejecución adicionales. No se necesita la interacción del usuario para la explotación.Producto: AndroidVersiones: kernel de AndroidID de Android: A-246933910Referencias: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20924",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:11.833",
      "lastModified" : "2025-04-02T15:15:52.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In (TBD) of (TBD), there is a possible way to bypass the lockscreen due to Biometric Auth Failure. This could lead to local escalation of privilege with physical access to the device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-240428519References: N/A"
      }, {
        "lang" : "es",
        "value" : "En (TBD) de (TBD), existe una forma posible de omitir la pantalla de bloqueo debido a una falla de autenticación biométrica. Esto podría conducir a una escalada local de privilegios con acceso físico al dispositivo sin necesidad de permisos de ejecución adicionales. No se necesita la interacción del usuario para la explotación.Producto: AndroidVersiones: kernel de AndroidID de Android: A-240428519Referencias: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20925",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:11.907",
      "lastModified" : "2025-04-02T15:15:53.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In setUclampMinLocked of PowerSessionManager.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-236674672References: N/A"
      }, {
        "lang" : "es",
        "value" : "En setUclampMinLocked de PowerSessionManager.cpp, existe una posible forma de dañar la memoria debido a un uso posterior a la liberación. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. No se necesita la interacción del usuario para la explotación.Producto: AndroidVersiones: kernel de AndroidID de Android: A-236674672Referencias: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20928",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-01-26T21:18:11.977",
      "lastModified" : "2025-04-02T15:15:53.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254837884References: Upstream kernel"
      }, {
        "lang" : "es",
        "value" : "En binder_vma_close de binder.c, existe un posible use after free debido a un bloqueo inadecuado. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. La interacción del usuario no es necesaria para la explotación. Producto: AndroidVersiones: kernel de AndroidID de Android: A-254837884Referencias: kernel ascendente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        }, {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/170855/Android-Binder-VMA-Management-Security-Issues.html",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/170855/Android-Binder-VMA-Management-Security-Issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22468",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:12.060",
      "lastModified" : "2024-11-21T07:44:51.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source platform for community discussion. Versions prior to 2.8.13 (stable), 3.0.0.beta16 (beta) and 3.0.0beta16 (tests-passed), are vulnerable to cross-site Scripting. A maliciously crafted URL can be included in a post to carry out cross-site  scripting attacks on sites with disabled or overly permissive CSP (Content Security Policy). Discourse's default CSP prevents this vulnerability. This vulnerability is patched in versions 2.8.13 (stable), 3.0.0.beta16 (beta) and 3.0.0beta16 (tests-passed). As a workaround, enable and/or restore your site's CSP to the default one provided with Discourse."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de código abierto para el debate comunitario. Las versiones anteriores a 2.8.13 (estable), 3.0.0.beta16 (beta) y 3.0.0beta16 (pruebas aprobadas) son vulnerables a cross-site scripting. Se puede incluir una URL creada con fines malintencionados en una publicación para llevar a cabo cross-site scripting en sitios con CSP (Política de seguridad de contenido) deshabilitada o demasiado permisiva. El CSP predeterminado de Discourse evita esta vulnerabilidad. Esta vulnerabilidad está parcheada en las versiones 2.8.13 (estable), 3.0.0.beta16 (beta) y 3.0.0beta16 (pruebas aprobadas). Como workaround, habilite y/o restaure el CSP de su sitio al predeterminado proporcionado con Discourse."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.13",
            "matchCriteriaId" : "140D3326-21AC-459D-8196-E17C9046AE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "3DA17871-7ED7-4D68-A46D-D15DC5B3235F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "705FE965-0415-4382-8CA1-A19DF3B5EF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "BC6EDCE3-D564-434F-9A7F-D4A6D579F8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "FB05E54B-9CF6-45A7-8D47-C98DB6D19E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "03CD1C5E-18F5-4C6D-B92C-C511C8C12D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF4ABB9D-69DF-42D5-AD60-F9CEEC1B6730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7B4DCCF5-E290-4BDA-AAB9-DF362A2EB7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "3AE1F3A2-8340-4ED7-B943-ACDA9617DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E033AB7-9987-4C30-849F-2495376CA4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "D87E9338-C7F6-43BA-886F-C30987ADBA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E24EB90F-FE81-4746-8741-8DC9346F79C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "D237956F-FC90-467E-A493-24EFDA1A9F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "F7AA9AB8-AB6F-43E2-B3E5-685EE9BFE7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "5BC240A1-431E-4A50-88DC-7AC9BC674254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "3F85AFD4-D397-4FDB-B762-521BD5FF14C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-8mr2-xf8r-wr8m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-8mr2-xf8r-wr8m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22482",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:12.213",
      "lastModified" : "2024-11-21T07:44:53.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions of Argo CD starting with v1.8.2 and prior to 2.3.13, 2.4.19, 2.5.6, and 2.6.0-rc-3  are vulnerable to an improper authorization bug causing the API to accept certain invalid tokens. OIDC providers include an `aud` (audience) claim in signed tokens. The value of that claim specifies the intended audience(s) of the token (i.e. the service or services which are meant to accept the token). Argo CD _does_ validate that the token was signed by Argo CD's configured OIDC provider. But Argo CD _does not_ validate the audience claim, so it will accept tokens that are not intended for Argo CD. If Argo CD's configured OIDC provider also serves other audiences (for example, a file storage service), then Argo CD will accept a token intended for one of those other audiences. Argo CD will grant the user privileges based on the token's `groups` claim, even though those groups were not intended to be used by Argo CD. This bug also increases the impact of a stolen token. If an attacker steals a valid token for a different audience, they can use it to access Argo CD. A patch for this vulnerability has been released in versions 2.6.0-rc3, 2.5.6, 2.4.19, and 2.3.13. There are no workarounds."
      }, {
        "lang" : "es",
        "value" : "Argo CD es una herramienta declarativa de entrega continua de GitOps para Kubernetes. Las versiones de Argo CD que comienzan con v1.8.2 y anteriores a 2.3.13, 2.4.19, 2.5.6 y 2.6.0-rc-3 son vulnerables a un error de autorización incorrecta que hace que la API acepte ciertos tokens no válidos. Los proveedores de OIDC incluyen un reclamo \"aud\" (audiencia) en tokens firmados. El valor de esa afirmación especifica la(s) audiencia(s) prevista(s) del token (es decir, el servicio o servicios que deben aceptar el token). Argo CD _valida_ que el token fue firmado por el proveedor OIDC configurado de Argo CD. Pero Argo CD _no_ valida el reclamo de audiencia, por lo que aceptará tokens que no estén destinados a Argo CD. Si el proveedor OIDC configurado de Argo CD también atiende a otras audiencias (por ejemplo, un servicio de almacenamiento de archivos), entonces Argo CD aceptará un token destinado a una de esas otras audiencias. Argo CD otorgará privilegios de usuario según el reclamo de \"grupos\" del token, aunque esos grupos no estaban destinados a ser utilizados por Argo CD. Este error también aumenta el impacto de un token robado. Si un atacante roba un token válido para una audiencia diferente, puede usarlo para acceder a Argo CD. Se lanzó un parche para esta vulnerabilidad en las versiones 2.6.0-rc3, 2.5.6, 2.4.19 y 2.3.13. No hay workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.2",
            "versionEndExcluding" : "2.3.14",
            "matchCriteriaId" : "2BB2E66B-3691-4FD9-8984-6EF63E49B39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.20",
            "matchCriteriaId" : "5774C53F-D6CB-4F87-A192-35BC3CA11D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.8",
            "matchCriteriaId" : "7508D913-6A85-47EB-97D8-E31F35CC6188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9E8774-D703-4CE5-8B90-EE3CD7A45005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC71D67C-2326-401A-AB60-961A3C500FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F78053BA-9B03-4831-881A-8C71C8B583D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C06F6A-AB8A-4633-912E-B07046ECF5C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/argoproj/argo-cd/security/advisories/GHSA-q9hr-j4rf-8fjc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/security/advisories/GHSA-q9hr-j4rf-8fjc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22486",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:12.363",
      "lastModified" : "2024-11-21T07:44:54.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a  polynomial time complexity issue in handle_close_bracket that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7."
      }, {
        "lang" : "es",
        "value" : "cmark-gfm es la bifurcación de GitHub de cmark, una librería y programa de análisis y representación de CommonMark en C. Las versiones anteriores a 0.29.0.gfm.7 contienen un problema de complejidad de tiempo polinomial en handle_close_bracket que puede provocar un agotamiento ilimitado de los recursos y una posterior denegación de servicio. Esta vulnerabilidad ha sido parcheada en 0.29.0.gfm.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-407"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-407"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:cmark-gfm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.29.0.gfm.7",
            "matchCriteriaId" : "BEFD0856-0CFF-4D0F-B9D5-02F4A537C5CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/github/cmark-gfm/security/advisories/GHSA-r572-jvj2-3m8p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/github/cmark-gfm/security/advisories/GHSA-r572-jvj2-3m8p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22500",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:12.513",
      "lastModified" : "2024-11-21T07:44:56.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6 are vulnerable to Incorrect Authorization. This vulnerability allow unauthorized access to inventory files. Thus, if anonymous access to FAQ is allowed, inventory files are accessbile by unauthenticated users. This issue is patched in version 10.0.6. As a workaround, disable native inventory and delete inventory files from server (default location is `files/_inventory`)."
      }, {
        "lang" : "es",
        "value" : "GLPI es un paquete gratuito de software de gestión de TI y activos. Las versiones 10.0.0 y superiores, anteriores a la 10.0.6, son vulnerables a una autorización incorrecta. Esta vulnerabilidad permite el acceso no autorizado a archivos de inventario. Por lo tanto, si se permite el acceso anónimo a las preguntas frecuentes, los usuarios no autenticados podrán acceder a los archivos de inventario. Este problema se solucionó en la versión 10.0.6. Como workaround, deshabilite el inventario nativo y elimine los archivos de inventario del servidor (la ubicación predeterminada es `files/_inventory`)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.6",
            "matchCriteriaId" : "B025E2D5-B467-460F-A5B0-053D46B581E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-3ghv-p34r-5ghx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-3ghv-p34r-5ghx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22722",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:12.657",
      "lastModified" : "2024-11-21T07:45:17.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a Free Asset and IT Management Software package. Versions 9.4.0 and above, prior to 10.0.6 are subject to Cross-site Scripting. An attacker can persuade a victim into opening a URL containing a payload exploiting this vulnerability. After exploited, the attacker can make actions as the victim or exfiltrate session cookies. This issue is patched in version 10.0.6."
      }, {
        "lang" : "es",
        "value" : "GLPI es un paquete gratuito de software de gestión de TI y activos. Las versiones 9.4.0 y superiores, anteriores a la 10.0.6, se ven afectadas por cross-site scripting. Un atacante puede persuadir a una víctima para que abra una URL que contenga un payload que aproveche esta vulnerabilidad. Después de la explotación, el atacante puede actuar como víctima o extraer cookies de sesión. Este problema se solucionó en la versión 10.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "9.5.12",
            "matchCriteriaId" : "C6A60761-B8B3-4311-BBAE-A7CECE6F859D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.6",
            "matchCriteriaId" : "B025E2D5-B467-460F-A5B0-053D46B581E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-352j-wr38-493c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-352j-wr38-493c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22724",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:12.770",
      "lastModified" : "2024-11-21T07:45:17.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a Free Asset and IT Management Software package. Versions prior to 10.0.6 are subject to Cross-site Scripting via malicious RSS feeds. An Administrator can import a malicious RSS feed that contains Cross Site Scripting (XSS) payloads inside RSS links. Victims who wish to visit an RSS content and click on the link will execute the Javascript. This issue is patched in 10.0.6.\n"
      }, {
        "lang" : "es",
        "value" : "GLPI es un paquete gratuito de software de gestión de TI y activos. Las versiones anteriores a la 10.0.6 están sujetas a cross-site scripting a través de canales RSS maliciosos. Un administrador puede importar una fuente RSS maliciosa que contenga payloads de Cross Site Scripting (XSS) dentro de enlaces RSS. Las víctimas que deseen visitar un contenido RSS y hacer clic en el enlace ejecutarán el Javascript. Este problema se solucionó en 10.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.6",
            "matchCriteriaId" : "B025E2D5-B467-460F-A5B0-053D46B581E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-x9g4-j85w-cmff",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-x9g4-j85w-cmff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22725",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:12.960",
      "lastModified" : "2024-11-21T07:45:17.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a Free Asset and IT Management Software package. Versions 0.6.0 and above, prior to 10.0.6 are vulnerable to Cross-site Scripting. This vulnerability allow for an administrator to create a malicious external link. This issue is patched in 10.0.6."
      }, {
        "lang" : "es",
        "value" : "GLPI es un paquete gratuito de software de gestión de TI y activos. Las versiones 0.6.0 y superiores, anteriores a la 10.0.6, son vulnerables a cross-site scripting. Esta vulnerabilidad permite que un administrador cree un enlace externo malicioso. Este problema se solucionó en la versión 10.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.60",
            "versionEndExcluding" : "9.5.12",
            "matchCriteriaId" : "A10B645F-E726-4CCE-BCDE-2E16C81A1DB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.6",
            "matchCriteriaId" : "B025E2D5-B467-460F-A5B0-053D46B581E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-f5g6-fxrw-pfj7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-f5g6-fxrw-pfj7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22736",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:13.110",
      "lastModified" : "2024-11-21T07:45:19.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions starting with 2.5.0-rc1 and above, prior to 2.5.8, and version 2.6.0-rc4, are vulnerable to an authorization bypass bug which allows a malicious Argo CD user to deploy Applications outside the configured allowed namespaces. Reconciled Application namespaces are specified as a comma-delimited list of glob patterns. When sharding is enabled on the Application controller, it does not enforce that list of patterns when reconciling Applications. For example, if Application namespaces are configured to be argocd-*, the Application controller may reconcile an Application installed in a namespace called other, even though it does not start with argocd-. Reconciliation of the out-of-bounds Application is only triggered when the Application is updated, so the attacker must be able to cause an update operation on the Application resource. This bug only applies to users who have explicitly enabled the \"apps-in-any-namespace\" feature by setting `application.namespaces` in the argocd-cmd-params-cm ConfigMap or otherwise setting the `--application-namespaces` flags on the Application controller and API server components. The apps-in-any-namespace feature is in beta as of this Security Advisory's publish date. The bug is also limited to Argo CD instances where sharding is enabled by increasing the `replicas` count for the Application controller. Finally, the AppProjects' `sourceNamespaces` field acts as a secondary check against this exploit. To cause reconciliation of an Application in an out-of-bounds namespace, an AppProject must be available which permits Applications in the out-of-bounds namespace. A patch for this vulnerability has been released in versions 2.5.8 and 2.6.0-rc5. As a workaround, running only one replica of the Application controller will prevent exploitation of this bug. Making sure all AppProjects' sourceNamespaces are restricted within the confines of the configured Application namespaces will also prevent exploitation of this bug."
      }, {
        "lang" : "es",
        "value" : "Argo CD es una herramienta declarativa de entrega continua de GitOps para Kubernetes. Las versiones que comienzan con 2.5.0-rc1 y superiores, anteriores a 2.5.8 y la versión 2.6.0-rc4, son vulnerables a un error de omisión de autorización que permite a un usuario malintencionado de Argo CD implementar aplicaciones fuera de los espacios de nombres permitidos configurados. Los espacios de nombres de aplicaciones reconciliados se especifican como una lista de patrones globales delimitados por comas. Cuando la fragmentación está habilitada en el controlador de aplicaciones, no aplica esa lista de patrones al conciliar aplicaciones. Por ejemplo, si los espacios de nombres de las aplicaciones están configurados para ser argocd-*, el controlador de la aplicación puede conciliar una aplicación instalada en un espacio de nombres llamado other, aunque no comience con argocd-. La conciliación de la aplicación fuera de los límites solo se activa cuando la aplicación se actualiza, por lo que el atacante debe poder provocar una operación de actualización en el recurso de la aplicación. Este error solo se aplica a los usuarios que han habilitado explícitamente la función \"aplicaciones en cualquier espacio de nombres\" configurando `application.namespaces` en el ConfigMap argocd-cmd-params-cm o configurando de otro modo los indicadores `--application-namespaces` en los componentes del controlador de aplicaciones y del servidor API. La función de aplicaciones en cualquier espacio de nombres se encuentra en versión beta a partir de la fecha de publicación de este aviso de seguridad. El error también se limita a las instancias de Argo CD donde la fragmentación se habilita aumentando el recuento de \"réplicas\" para el controlador de la aplicación. Finalmente, el campo `sourceNamespaces` de AppProjects actúa como una verificación secundaria contra este exploit. Para provocar la conciliación de una aplicación en un espacio de nombres fuera de los límites, debe estar disponible un AppProject que permita aplicaciones en el espacio de nombres fuera de los límites. Se lanzó un parche para esta vulnerabilidad en las versiones 2.5.8 y 2.6.0-rc5. Como workaround, ejecutar solo una réplica del controlador de la aplicación evitará que se aproveche este error. Asegurarse de que todos los espacios de nombres de origen de AppProjects estén restringidos dentro de los límites de los espacios de nombres de aplicaciones configurados también evitará la explotación de este error."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.8",
            "matchCriteriaId" : "7508D913-6A85-47EB-97D8-E31F35CC6188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9E8774-D703-4CE5-8B90-EE3CD7A45005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC71D67C-2326-401A-AB60-961A3C500FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F78053BA-9B03-4831-881A-8C71C8B583D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C06F6A-AB8A-4633-912E-B07046ECF5C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/argoproj/argo-cd/security/advisories/GHSA-6p4m-hw2h-6gmw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/security/advisories/GHSA-6p4m-hw2h-6gmw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22739",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:13.257",
      "lastModified" : "2024-11-21T07:45:19.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source platform for community discussion. Versions prior to 3.0.1 (stable), 3.1.0.beta2 (beta), and 3.1.0.beta2 (tests-passed) are subject to Allocation of Resources Without Limits or Throttling. As there is no limit on data contained in a draft, a malicious user can create an arbitrarily large draft, forcing the instance to a crawl. This issue is patched in versions 3.0.1 (stable), 3.1.0.beta2 (beta), and 3.1.0.beta2 (tests-passed). There are no workarounds."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de código abierto para el debate comunitario. Las versiones anteriores a 3.0.1 (estable), 3.1.0.beta2 (beta) y 3.1.0.beta2 (pruebas aprobadas) están sujetas a la asignación de recursos sin límites ni limitaciones. Como no hay límite para los datos contenidos en un borrador, un usuario malintencionado puede crear un borrador arbitrariamente grande, lo que obliga a rastrear la instancia. Este problema se solucionó en las versiones 3.0.1 (estable), 3.1.0.beta2 (beta) y 3.1.0.beta2 (pruebas aprobadas). No hay soluciones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "906007C2-9CCA-4A7B-BD04-57DCC3675FC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-rqgr-g6v7-jcfc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-rqgr-g6v7-jcfc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-26T21:18:13.540",
      "lastModified" : "2025-03-28T17:15:25.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in Hughes Network Systems Router Terminal for HX200 v8.3.1.14, HX90 v6.11.0.5, HX50L v6.10.0.18, HN9460 v8.2.0.48, and HN7000S v6.9.0.37, allows unauthenticated attackers to misuse frames, include JS/HTML code and steal sensitive information from legitimate users of the application."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting (XSS) en la terminal de router de Hughes Network Systems para HX200 v8.3.1.14, HX90 v6.11.0.5, HX50L v6.10.0.18, HN9460 v8.2.0.48 y HN7000S v6.9.0.37, permite a atacantes no autenticados hacer un mal uso de los frames, incluir código JS/HTML y robar información confidencial de usuarios legítimos de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hughes:hx200_firmware:8.3.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37079B30-F603-4F83-8029-CBABA1EEB833"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hughes:hx200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2B7F70-2C3E-446B-AE22-C989CFBEDC35"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hughes:hx90_firmware:6.11.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57CF8972-7DA8-4C17-B7F4-1BAE7303BE8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hughes:hx90:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C996F23D-CD89-4D6F-9B50-F752482C4147"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hughes:hx50l_firmware:6.10.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D414B3-A331-4049-8B5D-459690698E27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hughes:hx50l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB89AEF-9F1C-43FA-8E4D-20D424F2ACE6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hughes:hn9460_firmware:8.2.0.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4511DC1-2420-4251-8124-EC65B94AFD40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hughes:hn9460:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78313913-3B7E-4CF7-8006-398B3934C87D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hughes:hn7000s_firmware:6.9.0.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50E0765C-2796-47F5-B465-1B5660A6CDB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hughes:hn7000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91470E55-2227-489A-BEB5-86C151F32344"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.hughes.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5743.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.hughes.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5743.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-26T21:18:13.607",
      "lastModified" : "2025-03-28T15:15:43.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inc_content_media.php."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que bloofoxCMS v0.5.2.1 contenía una vulnerabilidad de eliminación de archivos arbitraria a través del componente /include/inc_content_media.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bloofox:bloofoxcms:0.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C12BED64-DA1B-4FB8-A196-B414759D79C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alexlang24/bloofoxCMS/issues/17",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alexlang24/bloofoxCMS/issues/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23608",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:13.963",
      "lastModified" : "2024-11-21T07:46:31.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Spotipy is a light weight Python library for the Spotify Web API. In versions prior to 2.22.1, if a malicious URI is passed to the library, the library can be tricked into performing an operation on a different API endpoint than intended. The code Spotipy uses to parse URIs and URLs allows an attacker to insert arbitrary characters into the path that is used for API requests. Because it is possible to include \"..\", an attacker can redirect for example a track lookup via spotifyApi.track() to an arbitrary API endpoint like playlists, but this is possible for other endpoints as well. The impact of this vulnerability depends heavily on what operations a client application performs when it handles a URI from a user and how it uses the responses it receives from the API. This issue is patched in version 2.22.1."
      }, {
        "lang" : "es",
        "value" : "Spotipy es una librería Python liviana para la API web de Spotify. En versiones anteriores a la 2.22.1, si se pasa un URI malicioso a la librería, se puede engañar a la librería para que realice una operación en un endpoint de API diferente al previsto. El código que utiliza Spotipy para analizar URI y URL permite a un atacante insertar caracteres arbitrarios en la ruta que se utiliza para las solicitudes de API. Debido a que es posible incluir \"..\", un atacante puede redirigir, por ejemplo, una búsqueda de pistas a través de spotifyApi.track() a un endpoint API arbitrario como listas de reproducción, pero esto también es posible para otros endpoints. El impacto de esta vulnerabilidad depende en gran medida de las operaciones que realiza una aplicación cliente cuando maneja un URI de un usuario y cómo utiliza las respuestas que recibe de la API. Este problema se solucionó en la versión 2.22.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N",
            "baseScore" : 0.0,
            "baseSeverity" : "NONE",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 0.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spotipy_project:spotipy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.22.1",
            "matchCriteriaId" : "C17C21F5-9A7F-4AA9-BC95-746B70973C6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spotipy-dev/spotipy/security/advisories/GHSA-q764-g6fm-555v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spotipy-dev/spotipy/security/advisories/GHSA-q764-g6fm-555v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23609",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:14.100",
      "lastModified" : "2024-11-21T07:46:31.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and including 4.8 are vulnerable to an out-of-bounds write that can occur in the BLE-L2CAP module. The Bluetooth Low Energy - Logical Link Control and Adaptation Layer Protocol (BLE-L2CAP) module handles fragmentation of packets up the configured MTU size. When fragments are reassembled, they are stored in a packet buffer of a configurable size, but there is no check to verify that the packet buffer is large enough to hold the reassembled packet. In Contiki-NG's default configuration, it is possible that an out-of-bounds write of up to 1152 bytes occurs. The vulnerability has been patched in the \"develop\" branch of Contiki-NG, and will be included in release 4.9. The problem can be fixed by applying the patch in Contiki-NG pull request #2254 prior to the release of version 4.9."
      }, {
        "lang" : "es",
        "value" : "Contiki-NG es un sistema operativo multiplataforma de código abierto para dispositivos IoT de próxima generación. Las versiones anteriores a la 4.8 incluida son vulnerables a una escritura fuera de los límites que puede ocurrir en el módulo BLE-L2CAP. El módulo Bluetooth de baja energía: protocolo de capa de adaptación y control de enlace lógico (BLE-L2CAP) maneja la fragmentación de paquetes hasta el tamaño de MTU configurado. Cuando se vuelven a ensamblar los fragmentos, se almacenan en un búfer de paquetes de un tamaño configurable, pero no se verifica que el búfer de paquetes sea lo suficientemente grande para contener el paquete reensamblado. En la configuración predeterminada de Contiki-NG, es posible que se produzca una escritura fuera de los límites de hasta 1152 bytes. La vulnerabilidad ha sido parcheada en la rama \"desarrollo\" de Contiki-NG y se incluirá en la versión 4.9. El problema se puede solucionar aplicando el parche en la solicitud de extracción #2254 de Contiki-NG antes del lanzamiento de la versión 4.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contiki-ng:contiki-ng:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8",
            "matchCriteriaId" : "729B4607-C6BD-42DE-91BF-918A57D29A77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/contiki-ng/contiki-ng/pull/2254",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-qr4q-6h3m-h3g7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/contiki-ng/contiki-ng/pull/2254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-qr4q-6h3m-h3g7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23610",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:14.223",
      "lastModified" : "2024-11-21T07:46:31.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a Free Asset and IT Management Software package. Versions prior to 9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any user having access to the standard interface can export data of almost any GLPI item type, even those on which user is not allowed to access (including assets, tickets, users, ...). This issue is patched in 10.0.6."
      }, {
        "lang" : "es",
        "value" : "GLPI es un paquete gratuito de software de gestión de TI y activos. Las versiones anteriores a 9.5.12 y 10.0.6 son vulnerables a una gestión de privilegios inadecuada. Cualquier usuario que tenga acceso a la interfaz estándar puede exportar datos de casi cualquier tipo de elemento GLPI, incluso aquellos a los que el usuario no tiene acceso (incluidos activos, tickets, usuarios,...). Este problema se solucionó en 10.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.65",
            "versionEndExcluding" : "9.5.12",
            "matchCriteriaId" : "E4FD5B9D-8A8D-470C-9E6B-67DC8EAB2622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.6",
            "matchCriteriaId" : "B025E2D5-B467-460F-A5B0-053D46B581E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-6565-hm87-24hf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-6565-hm87-24hf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23611",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:14.497",
      "lastModified" : "2024-11-21T07:46:31.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LTI Consumer XBlock implements the consumer side of the LTI specification enabling integration of third-party LTI provider tools. Versions 7.0.0 and above, prior to 7.2.2, are vulnerable to Missing Authorization.  Any LTI tool that is integrated with on the Open edX platform can post a grade back for any LTI XBlock so long as it knows or can guess the block location for that XBlock. An LTI tool submits scores to the edX platform for line items. The code that uploads that score to the LMS grade tables determines which XBlock to upload the grades for by reading the resource_link_id field of the associated line item. The LTI tool may submit any value for the resource_link_id field, allowing a malicious LTI tool to submit scores for any LTI XBlock on the platform. The impact is a loss of integrity for LTI XBlock grades. This issue is patched in 7.2.2. No workarounds exist."
      }, {
        "lang" : "es",
        "value" : "LTI Consumer XBlock implementa el lado del consumidor de la especificación LTI, lo que permite la integración de herramientas de proveedores de LTI de terceros. Las versiones 7.0.0 y superiores, anteriores a la 7.2.2, son vulnerables a la falta de autorización. Cualquier herramienta LTI integrada en la plataforma Open edX puede publicar una calificación para cualquier LTI XBlock siempre que sepa o pueda adivinar la ubicación del bloque para ese XBlock. Una herramienta LTI envía puntuaciones a la plataforma edX para líneas de pedido. El código que carga esa puntuación en las tablas de calificaciones del LMS determina para qué XBlock cargar las calificaciones leyendo el campo Resource_link_id de la línea de pedido asociada. La herramienta LTI puede enviar cualquier valor para el campo Resource_link_id, lo que permite que una herramienta LTI maliciosa envíe puntuaciones para cualquier LTI XBlock en la plataforma. El impacto es una pérdida de integridad para los grados LTI XBlock. Este problema se solucionó en 7.2.2. No existen workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openedx:xblock-lti-consumer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.2.2",
            "matchCriteriaId" : "25C60DB7-AD9B-447E-86AA-BD0051F1C60B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openedx/xblock-lti-consumer/security/advisories/GHSA-7j9p-67mm-5g87",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openedx/xblock-lti-consumer/security/advisories/GHSA-7j9p-67mm-5g87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23612",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:14.743",
      "lastModified" : "2024-11-21T07:46:31.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSearch is an open source distributed and RESTful search engine. OpenSearch uses JWTs to store role claims obtained from the Identity Provider (IdP) when the authentication backend is SAML or OpenID Connect. There is an issue in how those claims are processed from the JWTs where the leading and trailing whitespace is trimmed, allowing users to potentially claim roles they are not assigned to if any role matches the whitespace-stripped version of the roles they are a member of. This issue is only present for authenticated users, and it requires either the existence of roles that match, not considering leading/trailing whitespace, or the ability for users to create said matching roles. In addition, the Identity Provider must allow leading and trailing spaces in role names. OpenSearch 1.0.0-1.3.7 and 2.0.0-2.4.1 are affected. Users are advised to upgrade to OpenSearch 1.3.8 or 2.5.0. There are no known workarounds for this issue."
      }, {
        "lang" : "es",
        "value" : "OpenSearch es un motor de búsqueda RESTful y distribuido de código abierto. OpenSearch utiliza JWT para almacenar reclamaciones de funciones obtenidas del proveedor de identidad (IdP) cuando el backend de autenticación es SAML u OpenID Connect. Existe un problema en la forma en que se procesan esas reclamaciones desde los JWT donde se recortan los espacios en blanco iniciales y finales, lo que permite a los usuarios reclamar roles a los que no están asignados si algún rol coincide con la versión sin espacios en blanco de los roles de los que son miembros. Este problema solo está presente para usuarios autenticados y requiere la existencia de roles que coincidan, sin considerar los espacios en blanco iniciales/finales, o la capacidad de los usuarios de crear dichos roles coincidentes. Además, el proveedor de identidad debe permitir espacios iniciales y finales en los nombres de funciones. OpenSearch 1.0.0-1.3.7 y 2.0.0-2.4.1 se ven afectados. Se recomienda a los usuarios que actualicen a OpenSearch 1.3.8 o 2.5.0. No se conocen workarounds para este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:opensearch:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.3.8",
            "matchCriteriaId" : "F78DAC9C-A051-4B4C-AC4F-08A65195A932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:opensearch:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.5.0",
            "matchCriteriaId" : "F032A171-FC92-43EF-9B04-E65EFDAC4F9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opensearch-project/OpenSearch/releases/tag/2.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opensearch-project/security/security/advisories/GHSA-864v-6qj7-62qj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opensearch-project/OpenSearch/releases/tag/2.5.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opensearch-project/security/security/advisories/GHSA-864v-6qj7-62qj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23613",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:14.900",
      "lastModified" : "2024-11-21T07:46:32.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSearch is an open source distributed and RESTful search engine. In affected versions there is an issue in the implementation of field-level security (FLS) and field masking where rules written to explicitly exclude fields are not correctly applied for certain queries that rely on their auto-generated .keyword fields. This issue is only present for authenticated users with read access to the indexes containing the restricted fields. This may expose data which may otherwise not be accessible to the user. OpenSearch 1.0.0-1.3.7 and 2.0.0-2.4.1 are affected. Users are advised to upgrade to OpenSearch 1.3.8 or 2.5.0. Users unable to upgrade may write explicit exclusion rules as a workaround. Policies authored in this way are not subject to this issue."
      }, {
        "lang" : "es",
        "value" : "OpenSearch es un motor de búsqueda RESTful y distribuido de código abierto. En las versiones afectadas hay un problema en la implementación de la seguridad a nivel de campo (FLS) y el enmascaramiento de campos donde las reglas escritas para excluir campos explícitamente no se aplican correctamente para ciertas consultas que dependen de sus campos .keyword generados automáticamente. Este problema solo está presente para usuarios autenticados con acceso de lectura a los índices que contienen los campos restringidos. Esto puede exponer datos a los que de otra manera el usuario no podría acceder. OpenSearch 1.0.0-1.3.7 y 2.0.0-2.4.1 se ven afectados. Se recomienda a los usuarios que actualicen a OpenSearch 1.3.8 o 2.5.0. Los usuarios que no puedan actualizar pueden escribir reglas de exclusión explícitas Como workaround. Las políticas creadas de esta manera no están sujetas a esta cuestión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:opensearch:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.3.8",
            "matchCriteriaId" : "F78DAC9C-A051-4B4C-AC4F-08A65195A932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:opensearch:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.5.0",
            "matchCriteriaId" : "F032A171-FC92-43EF-9B04-E65EFDAC4F9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opensearch-project/OpenSearch/releases/tag/2.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opensearch-project/security/security/advisories/GHSA-v3cg-7r9h-r2g6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opensearch-project/OpenSearch/releases/tag/2.5.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opensearch-project/security/security/advisories/GHSA-v3cg-7r9h-r2g6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23614",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:15.063",
      "lastModified" : "2024-11-21T07:46:32.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pi-hole®'s Web interface (based off of AdminLTE) provides a central location to manage your Pi-hole. Versions 4.0 and above, prior to 5.18.3 are vulnerable to Insufficient Session Expiration. Improper use of admin WEBPASSWORD hash as \"Remember me for 7 days\" cookie value makes it possible for an attacker to \"pass the hash\" to login or reuse a theoretically expired \"remember me\" cookie. It also exposes the hash over the network and stores it unnecessarily in the browser. The cookie itself is set to expire after 7 days but its value will remain valid as long as the admin password doesn't change. If a cookie is leaked or compromised it could be used forever as long as the admin password is not changed. An attacker that obtained the password hash via an other attack vector (for example a path traversal vulnerability) could use it to login as the admin by setting the hash as the cookie value without the need to crack it to obtain the admin password (pass the hash). The hash is exposed over the network and in the browser where the cookie is transmitted and stored. This issue is patched in version 5.18.3."
      }, {
        "lang" : "es",
        "value" : "La interfaz web de Pi-hole® (basada en AdminLTE) proporciona una ubicación central para administrar su Pi-hole. Las versiones 4.0 y superiores, anteriores a la 5.18.3, son vulnerables a Insufficient Session Expiration. El uso inadecuado del hash WEBPASSWORD del administrador como valor de cookie \"Recordarme durante 7 días\" hace posible que un atacante realice \"pass the hash\" para iniciar sesión o reutilizar una cookie \"recordarme\" teóricamente caducada. También expone el hash a través de la red y lo almacena innecesariamente en el navegador. La cookie en sí caducará después de 7 días, pero su valor seguirá siendo válido siempre que la contraseña de administrador no cambie. Si una cookie se filtra o se ve comprometida, podría usarse para siempre siempre y cuando no se cambie la contraseña de administrador. Un atacante que obtuvo el hash de la contraseña a través de otro vector de ataque (por ejemplo, una vulnerabilidad de recorrido de ruta) podría usarlo para iniciar sesión como administrador estableciendo el hash como valor de la cookie sin necesidad de descifrarlo para obtener la contraseña del administrador (pase el picadillo). El hash se expone en la red y en el navegador donde se transmite y almacena la cookie. Este problema se solucionó en la versión 5.18.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        }, {
          "lang" : "en",
          "value" : "CWE-836"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pi-hole:web_interface:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "5.18.3",
            "matchCriteriaId" : "B16577D5-DC89-473D-A0DF-5D30288083D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-33w4-xf7m-f82m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-33w4-xf7m-f82m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23619",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-26T21:18:15.217",
      "lastModified" : "2024-11-21T07:46:32.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Modelina is a library for generating data models based on inputs such as AsyncAPI, OpenAPI, or JSON Schema documents. Versions prior to 1.0.0 are vulnerable to Code injection. This issue affects anyone who is using the default presets and/or does not handle the functionality themself. This issue has been partially mitigated in version 1.0.0, with the maintainer's GitHub Security Advisory (GHSA) noting \"It is impossible to fully guard against this, because users have access to the original raw information. However, as of version 1, if you only access the constrained models, you will not encounter this issue. Further similar situations are NOT seen as a security issue, but intended behavior.\" The suggested workaround from the maintainers is \"Fully custom presets that change the entire rendering process which can then escape the user input.\""
      }, {
        "lang" : "es",
        "value" : "Modelina es una librería para generar modelos de datos basados en entradas como documentos AsyncAPI, OpenAPI o JSON Schema. Las versiones anteriores a la 1.0.0 son vulnerables a la inyección de código. Este problema afecta a cualquiera que utilice los ajustes preestablecidos predeterminados y/o no maneje la funcionalidad por sí mismo. Este problema se ha mitigado parcialmente en la versión 1.0.0, y el GitHub Security Advisory (GHSA) del fabricante señala: \"Es imposible protegerse completamente contra esto, porque los usuarios tienen acceso a la información sin procesar original. Sin embargo, a partir de la versión 1, si solo accede a los modelos restringidos, no encontrará este problema. Otras situaciones similares NO se consideran un problema de seguridad, sino un comportamiento previsto\". La solución sugerida por los fabricantees es \"Preajustes totalmente personalizados que cambian todo el proceso de renderizado y luego pueden escapar de la entrada del usuario\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:modelina:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.0.0",
            "matchCriteriaId" : "0A2550E7-A8E5-4013-ADA2-0903399206DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/asyncapi/modelina/security/advisories/GHSA-4jg2-84c2-pj95",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/asyncapi/modelina/security/advisories/GHSA-4jg2-84c2-pj95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23949",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2023-01-26T21:18:15.340",
      "lastModified" : "2025-04-02T15:15:53.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser."
      }, {
        "lang" : "es",
        "value" : "Un usuario autenticado puede proporcionar código HTML y JavaScript malicioso que se ejecutará en el navegador del cliente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-779"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_governance_and_administration:14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02FD4DC-D8DF-4665-A0FC-0B62FA66939E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_governance_and_administration:14.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23689A8F-BF69-411B-93C1-584E3251B55E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_governance_and_administration:14.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE61084-5A83-466E-96CA-46E84645AC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_manager:14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25ABF24A-6352-469C-928E-67A4BEDB579C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_manager:14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8B308A-3E78-4E0D-9148-91B39BAF8845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.broadcom.com/external/content/SecurityAdvisories/0/21174",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.broadcom.com/external/content/SecurityAdvisories/0/21174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23950",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2023-01-26T21:18:15.400",
      "lastModified" : "2025-04-02T15:15:53.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses."
      }, {
        "lang" : "es",
        "value" : "La entrada proporcionada por el usuario (normalmente una secuencia CRLF) se puede utilizar para dividir una respuesta devuelta en dos respuestas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_governance_and_administration:14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02FD4DC-D8DF-4665-A0FC-0B62FA66939E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_governance_and_administration:14.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23689A8F-BF69-411B-93C1-584E3251B55E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_governance_and_administration:14.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE61084-5A83-466E-96CA-46E84645AC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_manager:14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25ABF24A-6352-469C-928E-67A4BEDB579C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_manager:14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8B308A-3E78-4E0D-9148-91B39BAF8845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.broadcom.com/external/content/SecurityAdvisories/0/21174",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.broadcom.com/external/content/SecurityAdvisories/0/21174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23951",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2023-01-26T21:18:15.460",
      "lastModified" : "2025-04-02T15:15:54.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application"
      }, {
        "lang" : "es",
        "value" : "Capacidad de enumerar los atributos LDAP de Oracle para el usuario actual modificando la consulta utilizada por la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_governance_and_administration:14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F02FD4DC-D8DF-4665-A0FC-0B62FA66939E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_governance_and_administration:14.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23689A8F-BF69-411B-93C1-584E3251B55E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_governance_and_administration:14.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE61084-5A83-466E-96CA-46E84645AC2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_manager:14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25ABF24A-6352-469C-928E-67A4BEDB579C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:symantec_identity_manager:14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8B308A-3E78-4E0D-9148-91B39BAF8845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.broadcom.com/external/content/SecurityAdvisories/0/21174",
        "source" : "secure@symantec.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.broadcom.com/external/content/SecurityAdvisories/0/21174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24022",
      "sourceIdentifier" : "security@baicells.com",
      "published" : "2023-01-26T21:18:15.593",
      "lastModified" : "2024-11-21T07:47:16.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.7.11.3 have hardcoded credentials that are easily discovered and can be used by remote attackers to authenticate via ssh. (The credentials are stored in the firmware, encrypted by the crypt function.) \n"
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Baicells Nova 227, Nova 233 y Nova 243 LTE TDD eNodeB con firmware hasta RTS/RTD 3.7.11.3 tienen credenciales codificadas que se descubren fácilmente y pueden ser utilizadas por atacantes remotos para autenticarse a través de ssh. (Las credenciales se almacenan en el firmware, cifradas mediante la función de cripta)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@baicells.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@baicells.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:baicells:rtd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.11.6",
            "matchCriteriaId" : "148B43F9-03E6-43FC-9631-94EAFB4497FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:baicells:rts_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.11.6",
            "matchCriteriaId" : "FB305C49-EC84-4C16-B961-1DAA3BC6B108"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:baicells:nova227:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF244C0-5EC5-41ED-8474-23097129A903"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:baicells:nova233:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9943901-505F-495E-8B83-B6D50E2ECD26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:baicells:nova243:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A7D0D1-2ADE-4EB6-B2C4-060528D60598"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://baicells.zendesk.com/hc/en-us/articles/6188324645780-2023-1-17-Hard-Coded-Credential-Crypt-Vulnerability",
        "source" : "security@baicells.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6.IMG.IMG",
        "source" : "security@baicells.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6_Changelog.PDF.pdf",
        "source" : "security@baicells.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://baicells.zendesk.com/hc/en-us/articles/6188324645780-2023-1-17-Hard-Coded-Credential-Crypt-Vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6.IMG.IMG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6_Changelog.PDF.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24054",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-01-26T21:18:15.883",
      "lastModified" : "2023-11-07T04:08:18.513",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-26T21:18:15.960",
      "lastModified" : "2025-04-01T20:15:16.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HL7 (Health Level 7) FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal from a crafted ZIP or TGZ archive (for a prepackaged terminology cache, NPM package, or comparison archive)."
      }, {
        "lang" : "es",
        "value" : "Las librerías Core de HL7 (Health Level 7) FHIR anteriores a 5.6.92 permiten a los atacantes extraer archivos en directorios arbitrarios a través de un directory traversal desde un archivo ZIP o TGZ manipulado (para un caché de terminología preempaquetado, un paquete NPM o un archivo de comparación)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hapifhir:hl7_fhir_core:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.92",
            "matchCriteriaId" : "DE594EB5-3065-4F3E-AE1C-8FECC538AA3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hl7:fhir_ig_publisher:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.30",
            "matchCriteriaId" : "9A837E72-057A-466D-8D2E-285CFEF42FD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/HL7/fhir-ig-publisher/security/advisories/GHSA-xr8x-pxm6-prjg",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/HL7/fhir-ig-publisher/security/advisories/GHSA-xr8x-pxm6-prjg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-26T21:18:16.207",
      "lastModified" : "2025-03-28T17:15:25.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318."
      }, {
        "lang" : "es",
        "value" : "Tenda AC18 V15.03.05.19 es vulnerable al desbordamiento del búfer a través de /goform/FUN_000c2318."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac18_firmware:15.03.05.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3A313A-5085-4ABB-92D0-A26208EE44FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F8AF9-F921-4348-922B-EE5E6037E7AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC18/4/4.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC18/4/4.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-26T21:18:16.283",
      "lastModified" : "2025-03-28T17:15:25.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo."
      }, {
        "lang" : "es",
        "value" : "Tenda AC18 V15.03.05.19 es vulnerable al desbordamiento del búfer a través de /goform/initIpAddrInfo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac18_firmware:15.03.05.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3A313A-5085-4ABB-92D0-A26208EE44FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F8AF9-F921-4348-922B-EE5E6037E7AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC18/7/7.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC18/7/7.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-26T21:18:16.363",
      "lastModified" : "2025-03-28T17:15:25.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet."
      }, {
        "lang" : "es",
        "value" : "Tenda AC18 V15.03.05.19 es vulnerable al desbordamiento del búfer a través de /goform/formWifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac18_firmware:15.03.05.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3A313A-5085-4ABB-92D0-A26208EE44FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F8AF9-F921-4348-922B-EE5E6037E7AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC18/2/2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC18/2/2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-26T21:18:16.433",
      "lastModified" : "2025-03-28T17:15:26.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/add_white_node."
      }, {
        "lang" : "es",
        "value" : "Tenda AC18 V15.03.05.19 es vulnerable al desbordamiento del búfer a través de /goform/add_white_node."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac18_firmware:15.03.05.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3A313A-5085-4ABB-92D0-A26208EE44FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F8AF9-F921-4348-922B-EE5E6037E7AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC18/1/1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC18/1/1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-26T21:18:16.507",
      "lastModified" : "2025-03-28T17:15:26.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_0007343c."
      }, {
        "lang" : "es",
        "value" : "Tenda AC18 V15.03.05.19 es vulnerable al desbordamiento del búfer a través de /goform/FUN_0007343c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac18_firmware:15.03.05.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3A313A-5085-4ABB-92D0-A26208EE44FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F8AF9-F921-4348-922B-EE5E6037E7AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC18/6/6.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC18/6/6.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-26T21:18:16.567",
      "lastModified" : "2025-03-28T17:15:26.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/fromSetWirelessRepeat."
      }, {
        "lang" : "es",
        "value" : "Tenda AC18 V15.03.05.19 es vulnerable al desbordamiento del búfer a través de /goform/fromSetWirelessRepeat."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac18_firmware:15.03.05.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3A313A-5085-4ABB-92D0-A26208EE44FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF9F8AF9-F921-4348-922B-EE5E6037E7AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC18/3/3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC18/3/3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24422",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:16.633",
      "lastModified" : "2025-04-02T15:15:54.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A sandbox bypass vulnerability involving map constructors in Jenkins Script Security Plugin 1228.vd93135a_2fb_25 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de la sandbox que involucra constructores de mapas en Jenkins Script Security Plugin 1228.vd93135a_2fb_25 y versiones anteriores permite a atacantes con permiso para definir y ejecutar scripts de sandbox, incluidos Pipelines, eludir la protección de sandbox y ejecutar código arbitrario en el contexto de la JVM del controlador Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:script_security:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "1229.v4880b_b_e905a_6",
            "matchCriteriaId" : "A61DCA4B-075D-461A-8F15-619193EFB500"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3016",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24423",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:16.707",
      "lastModified" : "2025-04-02T15:15:54.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins Gerrit Trigger Plugin 2.38.0 and earlier allows attackers to rebuild previous builds triggered by Gerrit."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site request forgery (CSRF) en Jenkins Gerrit Trigger Plugin 2.38.0 y versiones anteriores permite a los atacantes reconstruir compilaciones anteriores activadas por Gerrit."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:gerrit_trigger:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "2.38.1",
            "matchCriteriaId" : "52E416C0-93AA-4E7B-8BC6-02F8607AB2A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2137",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24424",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:16.773",
      "lastModified" : "2025-04-02T15:15:54.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins OpenId Connect Authentication Plugin 2.4 and earlier does not invalidate the previous session on login."
      }, {
        "lang" : "es",
        "value" : "El complemento OpenId Connect Authentication 2.4 de Jenkins y versiones anteriores no invalida la sesión anterior al iniciar sesión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:openid_connect_authentication:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "2.5",
            "matchCriteriaId" : "9022D3DD-70BD-40B1-8D38-600FCDE2B22D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2978",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24425",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:16.843",
      "lastModified" : "2025-04-02T15:15:54.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Kubernetes Credentials Provider Plugin 1.208.v128ee9800c04 and earlier does not set the appropriate context for Kubernetes credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Kubernetes credentials they are not entitled to."
      }, {
        "lang" : "es",
        "value" : "El complemento Kubernetes Credentials Provider de Jenkins en su versión 1.208.v128ee9800c04 y anteriores no establece el contexto apropiado para la búsqueda de credenciales de Kubernetes, lo que permite a los atacantes con permiso Item/Configure acceder y potencialmente capturar las credenciales de Kubernetes a las que no tienen derecho."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:kubernetes_credentials_provider:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.208.v128ee9800c04",
            "matchCriteriaId" : "6D997185-4A89-42E5-A63D-470045D9BE88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3022",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24426",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:16.913",
      "lastModified" : "2025-04-02T14:15:37.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Azure AD Plugin 303.va_91ef20ee49f and earlier does not invalidate the previous session on login."
      }, {
        "lang" : "es",
        "value" : "El complemento Azure AD de Jenkins versión 303.va_91ef20ee49f y anteriores no invalida la sesión anterior al iniciar sesión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:azure_ad:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "303.va_91ef20ee49f",
            "matchCriteriaId" : "46371A20-1486-4F72-99A5-ABFAEF4AC884"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2980",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24427",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:16.987",
      "lastModified" : "2025-04-02T15:15:55.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login."
      }, {
        "lang" : "es",
        "value" : "El complemento Bitbucket OAuth de Jenkins en sus versiones 0.12 y anteriores no invalida la sesión anterior al iniciar sesión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:bitbucket_oauth:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "0.13",
            "matchCriteriaId" : "4E9B79A1-4B3E-492A-87E6-204EE2935D5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2982",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24428",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.047",
      "lastModified" : "2025-04-02T15:15:55.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into logging in to the attacker's account."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site request forgery (CSRF) en el complemento Bitbucket OAuth de Jenkins en su versión 0.12 y anteriores permite a los atacantes engañar a los usuarios para que inicien sesión en la cuenta del atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:bitbucket_oauth:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "0.13",
            "matchCriteriaId" : "FF2CA00B-4251-4B8A-B2E1-411AAA603D31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2981",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24429",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.110",
      "lastModified" : "2025-04-02T15:15:55.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery."
      }, {
        "lang" : "es",
        "value" : "El complemento Semantic Versioning de Jenkins en su versión 1.14 y versiones anteriores no restringe la ejecución de un mensaje de controlador/agente a los agentes y no implementa limitaciones sobre la ruta del archivo que se puede analizar, lo que permite a los atacantes capaces de controlar los procesos del agente hacer que Jenkins analice un archivo manipulado que utiliza entidades externas para la extracción de secretos del controlador Jenkins o server-side request forgery."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:semantic_versioning:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "1.15",
            "matchCriteriaId" : "34396D3E-9A86-4D45-A3BB-24147CED6EEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2973%20%281%29",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2973%20%281%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24430",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.170",
      "lastModified" : "2025-04-02T15:15:55.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks."
      }, {
        "lang" : "es",
        "value" : "El complemento Semantic Versioning de Jenkins en su versión 1.14 y anteriores no configura su analizador XML para evitar ataques de entidades externas XML (XXE)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:semantic_versioning:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "1.15",
            "matchCriteriaId" : "34396D3E-9A86-4D45-A3BB-24147CED6EEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2973%20%282%29",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2973%20%282%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24431",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.240",
      "lastModified" : "2025-04-02T15:15:55.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Una verificación de permiso faltante en el complemento Orka by MacStadium de Jenkins en su versión 1.31 y anteriores permite a atacantes con permiso general/lectura enumerar los ID de las credenciales almacenadas en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:orka_by_macstadium:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "1.32",
            "matchCriteriaId" : "F93CB90B-D14A-443C-8C9D-8F16450FCFEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2772%20%281%29",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2772%20%281%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24432",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.307",
      "lastModified" : "2025-04-02T15:15:55.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site request forgery (CSRF) en el complemento Orka by MacStadium Plugin de Jenkins en su versión 1.31 y anteriores permite a los atacantes conectarse a un servidor HTTP especificado por el atacante utilizando ID de credenciales especificadas por el atacante obtenidas a través de otro método, capturando las credenciales almacenadas en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:orka_by_macstadium:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "1.32",
            "matchCriteriaId" : "F93CB90B-D14A-443C-8C9D-8F16450FCFEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2772%20%282%29",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2772%20%282%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24433",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.387",
      "lastModified" : "2025-04-02T14:15:37.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing permission checks in Jenkins Orka by MacStadium Plugin 1.31 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Las comprobaciones de permisos faltantes en el complemento Orka by MacStadium de Jenkins en su versión 1.31 y anteriores permiten a los atacantes con permiso general/lectura conectarse a un servidor HTTP especificado por el atacante utilizando ID de credenciales especificadas por el atacante obtenidas a través de otro método, capturando las credenciales almacenadas en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:orka_by_macstadium:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "1.32",
            "matchCriteriaId" : "F93CB90B-D14A-443C-8C9D-8F16450FCFEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2772%20%282%29",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2772%20%282%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24434",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.457",
      "lastModified" : "2025-04-02T14:15:37.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Request Forgery (CSRF) en el complemento GitHub Pull Request Builder de Jenkins en su versión 1.42.2 y anteriores permite a los atacantes conectarse a una URL especificada por el atacante utilizando ID de credenciales especificadas por el atacante obtenidas a través de otro método, capturando las credenciales almacenadas en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_pull_request_builder:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.42.2",
            "matchCriteriaId" : "973ABDA3-D711-44D4-BAFE-85C0E60F5BA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2789%20%282%29",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2789%20%282%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24435",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.537",
      "lastModified" : "2025-04-02T14:15:38.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Una verificación de permiso faltante en el complemento GitHub Pull Request Builder de Jenkins en su versión 1.42.2 y anteriores permite a los atacantes con permiso general/lectura conectarse a una URL especificada por el atacante utilizando ID de credenciales especificadas por el atacante obtenidas a través de otro método, capturando las credenciales almacenadas en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_pull_request_builder:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.42.2",
            "matchCriteriaId" : "973ABDA3-D711-44D4-BAFE-85C0E60F5BA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2789%20%282%29",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2789%20%282%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24436",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.600",
      "lastModified" : "2025-04-02T14:15:38.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Una verificación de permiso faltante en el complemento GitHub Pull Request Builder de Jenkins en su versión 1.42.2 y anteriores permite a atacantes con permiso general/lectura enumerar los ID de las credenciales almacenadas en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_pull_request_builder:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.42.2",
            "matchCriteriaId" : "973ABDA3-D711-44D4-BAFE-85C0E60F5BA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2789%20%281%29",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2789%20%281%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24437",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.663",
      "lastModified" : "2025-04-02T14:15:38.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site request forgery (CSRF) en el complemento JIRA Pipeline Steps de Jenkins en su versión 2.0.165.v8846cf59f3db y anteriores permite a los atacantes conectarse a una URL especificada por el atacante utilizando ID de credenciales especificadas por el atacante obtenidas a través de otro método, capturando las credenciales almacenadas en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jira_pipeline_steps:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.0.165.v8846cf59f3db",
            "matchCriteriaId" : "DA2750F7-7098-4B8F-99BA-D60EACDB441F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2786",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24438",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.723",
      "lastModified" : "2025-04-02T14:15:38.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Una verificación de permiso faltante en el complemento JIRA Pipeline Steps de Jenkins en su versión 2.0.165.v8846cf59f3db y anteriores permite a atacantes con permiso general/lectura conectarse a una URL especificada por el atacante utilizando ID de credenciales especificadas por el atacante obtenidas a través de otro método, capturando las credenciales almacenadas en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jira_pipeline_steps:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.0.165.v8846cf59f3db",
            "matchCriteriaId" : "DA2750F7-7098-4B8F-99BA-D60EACDB441F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2786",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24439",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.783",
      "lastModified" : "2025-04-02T14:15:39.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier stores the private keys unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system."
      }, {
        "lang" : "es",
        "value" : "El complemento JIRA Pipeline Steps de Jenkins en su versión 2.0.165.v8846cf59f3db y anteriores almacena las claves privadas sin cifrar en su archivo de configuración global en el controlador Jenkins, donde los usuarios con acceso al sistema de archivos del controlador Jenkins pueden verlas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jira_pipeline_steps:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.0.165.v8846cf59f3db",
            "matchCriteriaId" : "DA2750F7-7098-4B8F-99BA-D60EACDB441F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2774",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24440",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.843",
      "lastModified" : "2025-04-02T14:15:39.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier transmits the private key in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure."
      }, {
        "lang" : "es",
        "value" : "El complemento JIRA Pipeline Steps de Jenkins en su versión 2.0.165.v8846cf59f3db y anteriores transmite la clave privada en texto sin formato como parte del formulario de configuración global de Jenkins, lo que potencialmente resulta en su exposición."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jira_pipeline_steps:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.0.165.v8846cf59f3db",
            "matchCriteriaId" : "DA2750F7-7098-4B8F-99BA-D60EACDB441F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2774",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24441",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.907",
      "lastModified" : "2025-04-02T14:15:39.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks."
      }, {
        "lang" : "es",
        "value" : "El complemento MSTest de Jenkins en su versión 1.0.0 y anteriores no configuran su analizador XML para evitar ataques de entidades externas XML (XXE)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:mstest:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "247E4885-EA4A-42B3-8765-656E544A5BB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2292",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24442",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:17.960",
      "lastModified" : "2025-04-02T14:15:39.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins GitHub Pull Request Coverage Status Plugin 2.2.0 and earlier stores the GitHub Personal Access Token, Sonar access token and Sonar password unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system."
      }, {
        "lang" : "es",
        "value" : "El complemento GitHub Pull Request Coverage Status de Jenkins en su versión 2.2.0 y anteriores almacena el token de acceso personal de GitHub, el token de acceso de Sonar y la contraseña de Sonar sin cifrar en su archivo de configuración global en el controlador de Jenkins, donde los usuarios con acceso al sistema de archivos del controlador de Jenkins pueden verlos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:github_pull_request_coverage_status:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "3BB32A67-AEE1-4FCC-A55C-C4E757072FB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2767",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24443",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:18.027",
      "lastModified" : "2025-04-02T14:15:39.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks."
      }, {
        "lang" : "es",
        "value" : "El complemento TestComplete de Jenkins en su versión 2.8.1 y anteriores no configura su analizador XML para evitar ataques de entidades externas XML (XXE)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:testcomplete_support:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.8.1",
            "matchCriteriaId" : "C6E44A57-6FB7-43E4-84EC-03A509D027EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2741",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24444",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:18.093",
      "lastModified" : "2025-04-02T14:15:40.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login."
      }, {
        "lang" : "es",
        "value" : "El complemento OpenID de Jenkins en su versión anterior 2.4 y anteriores no invalida la sesión anterior al iniciar sesión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:openid:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "6B85F32E-3D08-43FF-AA20-234FE8E3963E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2996",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24445",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:18.150",
      "lastModified" : "2025-04-02T14:15:40.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins."
      }, {
        "lang" : "es",
        "value" : "El complemento OpenID de Jenkins en su versión 2.4 y anteriores determinan incorrectamente que una URL de redireccionamiento después de iniciar sesión apunta legítimamente a Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:openid:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "6B85F32E-3D08-43FF-AA20-234FE8E3963E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2997",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24446",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:18.207",
      "lastModified" : "2025-04-02T14:15:40.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins OpenID Plugin 2.4 and earlier allows attackers to trick users into logging in to the attacker's account."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site request forgery (CSRF) en complemento de OpenID de Jenkins en su versión 2.4 y anteriores permite a los atacantes engañar a los usuarios para que inicien sesión en la cuenta del atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:openid:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "6B85F32E-3D08-43FF-AA20-234FE8E3963E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2995",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24447",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:18.277",
      "lastModified" : "2025-04-02T14:15:40.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins RabbitMQ Consumer Plugin 2.8 and earlier allows attackers to connect to an attacker-specified AMQP(S) URL using attacker-specified username and password."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site request forgery (CSRF) en el complemento RabbitMQ Consumer de Jenkins en su versión 2.8 y anteriores permite a los atacantes conectarse a una URL AMQP(S) especificada por el atacante utilizando el nombre de usuario y la contraseña especificados por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:rabbitmq_consumer:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.8",
            "matchCriteriaId" : "B93FCF87-A8A0-49CE-8F82-71901B3361F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2778",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24448",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:18.347",
      "lastModified" : "2025-04-02T14:15:40.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins RabbitMQ Consumer Plugin 2.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified AMQP(S) URL using attacker-specified username and password."
      }, {
        "lang" : "es",
        "value" : "Una verificación de permiso faltante en el complemento RabbitMQ Consumer de Jenkins en su versión 2.8 y anteriores permite a los atacantes con permiso general/lectura conectarse a una URL AMQP(S) especificada por el atacante utilizando el nombre de usuario y la contraseña especificados por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:rabbitmq_consumer:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.8",
            "matchCriteriaId" : "B93FCF87-A8A0-49CE-8F82-71901B3361F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2778",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24449",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:18.407",
      "lastModified" : "2025-04-02T14:15:41.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins PWauth Security Realm Plugin 0.4 and earlier does not restrict the names of files in methods implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system."
      }, {
        "lang" : "es",
        "value" : "El complemento PWauth Security Realm de Jenkins en su versión 0.4 y anteriores no restringen los nombres de los archivos en los métodos que implementan la validación de formularios, lo que permite a los atacantes con permiso Overall/Read verificar la existencia de una ruta de archivo especificada por el atacante en el sistema de archivos del controlador Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:pwauth_security_realm:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "0.4",
            "matchCriteriaId" : "D687DA02-7B73-40FA-9DA4-E121EF600CD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2985",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24450",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:18.487",
      "lastModified" : "2025-04-02T14:15:41.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins view-cloner Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system."
      }, {
        "lang" : "es",
        "value" : "El complemento view-cloner de Jenkins en su versión 1.1 y anteriores almacena contraseñas sin cifrar en archivos job config.xml en el controlador Jenkins, donde los usuarios con permiso de lectura extendida pueden verlas o acceder al sistema de archivos del controlador Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:view-cloner:1.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "672D351E-9D89-4891-9154-06449A73F135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:view-cloner:1.1:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "964664A9-C3A1-45B1-93A1-8A07C43BD484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2787",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24451",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:18.557",
      "lastModified" : "2024-11-21T07:47:53.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins Cisco Spark Notifier Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Una verificación de permiso faltante en el complemento Cisco Spark Notifier de Jenkins en su versión 1.1.1 y anteriores permite a atacantes con permiso general/lectura enumerar los ID de las credenciales almacenadas en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:cisco_spark:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "25DF5666-9499-4514-8FCC-A337B916FAD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2803",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24452",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:18.640",
      "lastModified" : "2025-04-02T14:15:41.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins TestQuality Updater Plugin 1.3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site request forgery (CSRF) en el complemento TestQuality Updater de Jenkins en su versión 1.3 y anteriores permite a los atacantes conectarse a una URL especificada por el atacante utilizando el nombre de usuario y la contraseña especificados por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:testquality_updater:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "09C35010-450D-4559-9718-FE5144E4B28E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2800",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24453",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:18.737",
      "lastModified" : "2025-04-02T14:15:41.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing check in Jenkins TestQuality Updater Plugin 1.3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password."
      }, {
        "lang" : "es",
        "value" : "Una verificación faltante en el complemento TestQuality Updater de Jenkins en su versión 1.3 y anteriores permite a los atacantes con permiso general/lectura conectarse a una URL especificada por el atacante utilizando el nombre de usuario y la contraseña especificados por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:testquality_updater:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "09C35010-450D-4559-9718-FE5144E4B28E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2800",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24454",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:18.807",
      "lastModified" : "2025-04-02T14:15:41.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins TestQuality Updater Plugin 1.3 and earlier stores the TestQuality Updater password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system."
      }, {
        "lang" : "es",
        "value" : "El complemento TestQuality Updater de Jenkins en su versión 1.3 y anteriores almacenan la contraseña de TestQuality Updater sin cifrar en su archivo de configuración global en el controlador Jenkins, donde los usuarios con acceso al sistema de archivos del controlador Jenkins pueden verla."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:testquality_updater:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "09C35010-450D-4559-9718-FE5144E4B28E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2091",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24455",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:18.883",
      "lastModified" : "2025-04-02T14:15:42.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins visualexpert Plugin 1.3 and earlier does not restrict the names of files in methods implementing form validation, allowing attackers with Item/Configure permission to check for the existence of an attacker-specified file path on the Jenkins controller file system."
      }, {
        "lang" : "es",
        "value" : "El complemento visualexpert de Jenkins en su versión 1.3 y anteriores no restringe los nombres de los archivos en los métodos que implementan la validación de formularios, lo que permite a los atacantes con permiso Elemento/Configurar verificar la existencia de una ruta de archivo especificada por el atacante en el sistema de archivos del controlador Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:visual_expert:1.0:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "4443CC0A-5817-49F7-B8B8-2BCE9368AEC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:visual_expert:1.3:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "AB37FC6F-1E49-4F45-ACC2-B60DB0A96CE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2709",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24456",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:18.957",
      "lastModified" : "2025-04-02T14:15:42.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login."
      }, {
        "lang" : "es",
        "value" : "El complemento Keycloak Authentication de Jenkins en su versión 2.3.0 y anteriores no invalida la sesión anterior al iniciar sesión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:keycloak_authentication:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.3.0",
            "matchCriteriaId" : "C373D998-0CB8-4AC8-9147-D60C815CEE29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2987",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24457",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:19.037",
      "lastModified" : "2025-04-02T14:15:42.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's account."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site request forgery (CSRF) en el complemento Keycloak Authentication de Jenkins en su versión 2.3.0 y anteriores permite a los atacantes engañar a los usuarios para que inicien sesión en la cuenta del atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:keycloak_authentication:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.3.0",
            "matchCriteriaId" : "C373D998-0CB8-4AC8-9147-D60C815CEE29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2986",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24458",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:19.137",
      "lastModified" : "2025-04-02T14:15:42.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cross-site request forgery (CSRF) en BearyChat de Jenkins en su versión 3.0.2 y anteriores permite a los atacantes conectarse a una URL especificada por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:bearychat:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "1DC10F0C-4D8C-4DC7-AE60-D3CB1A082F6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2745",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24459",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-01-26T21:18:19.230",
      "lastModified" : "2025-04-01T16:15:19.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL."
      }, {
        "lang" : "es",
        "value" : "Una verificación de permiso faltante en BearyChat de Jenkins en su versión 3.0.2 y anteriores permite a atacantes con permiso general/lectura conectarse a una URL especificada por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:bearychat:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "1DC10F0C-4D8C-4DC7-AE60-D3CB1A082F6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2745",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24493",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-01-26T21:18:19.403",
      "lastModified" : "2025-04-01T15:15:58.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could leverage the reporting system to export reports containing formulas, which would then require a victim to approve and execute on a host."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de fórmula en Tenable.sc debido a una validación incorrecta de la entrada proporcionada por el usuario antes de devolverla a los usuarios. Un atacante autenticado podría aprovechar el sistema de informes para exportar informes que contengan fórmulas, que luego requerirían que la víctima los aprobara y ejecutara en un host."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.23.1",
            "matchCriteriaId" : "88CB8AC6-3A92-4EEE-AE65-5A295ED6E421"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/tns-2023-03",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2023-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24494",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-01-26T21:18:19.500",
      "lastModified" : "2025-04-01T15:15:58.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this by convincing a user to click a specially crafted URL, to execute arbitrary script code in a user's browser session."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de cross-site scripting (XSS) almacenado en Tenable.sc debido a una validación incorrecta de la entrada proporcionada por el usuario antes de devolverla a los usuarios. Un atacante remoto autenticado puede aprovechar esto convenciendo a un usuario de que haga clic en una URL especialmente manipulada para ejecutar código de script arbitrario en la sesión del navegador de un usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.23.1",
            "matchCriteriaId" : "88CB8AC6-3A92-4EEE-AE65-5A295ED6E421"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/tns-2023-03",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2023-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24495",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-01-26T21:18:19.583",
      "lastModified" : "2025-03-27T20:15:19.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper validation of session & user-accessible input data. A privileged, authenticated remote attacker could interact with external and internal services covertly."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad Server Side Request Forgery (SSRF) en Tenable.sc debido a una validación incorrecta de la sesión y del proceso. datos de entrada accesibles para el usuario. Un atacante remoto autenticado y privilegiado podría interactuar con servicios internos y externos de forma encubierta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.23.1",
            "matchCriteriaId" : "88CB8AC6-3A92-4EEE-AE65-5A295ED6E421"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/tns-2023-03",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2023-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24508",
      "sourceIdentifier" : "security@baicells.com",
      "published" : "2023-01-26T21:18:19.737",
      "lastModified" : "2024-11-21T07:48:00.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB and Nova 246 devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce. \n\n\n"
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Baicells Nova 227, Nova 233, Nova 243 LTE TDD eNodeB y Nova 246 con firmware a través de RTS/RTD 3.6.6 son vulnerables a la explotación remota del código shell mediante inyecciones de comandos HTTP. Los comandos se ejecutan mediante ejecución previa al inicio de sesión y se ejecutan con permisos de root. Los siguientes métodos han sido probados y validados por un analista externo y se ha confirmado que son explotables. Un agradecimiento especial a Rustam Amin por proporcionar los pasos para reproducirlos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@baicells.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@baicells.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:baicells:rtd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.11.6",
            "matchCriteriaId" : "148B43F9-03E6-43FC-9631-94EAFB4497FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:baicells:rts_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.11.6",
            "matchCriteriaId" : "FB305C49-EC84-4C16-B961-1DAA3BC6B108"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:baicells:nova227:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF244C0-5EC5-41ED-8474-23097129A903"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:baicells:nova233:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9943901-505F-495E-8B83-B6D50E2ECD26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:baicells:nova243:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A7D0D1-2ADE-4EB6-B2C4-060528D60598"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:baicells:nova246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D28C47-73C1-465F-AE37-8281589DED94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6.IMG.IMG",
        "source" : "security@baicells.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6_Changelog.PDF.pdf",
        "source" : "security@baicells.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6.IMG.IMG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6_Changelog.PDF.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0455",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-26T22:15:26.083",
      "lastModified" : "2024-11-21T07:37:12.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta."
      }, {
        "lang" : "es",
        "value" : "Carga sin restricciones de archivos con tipo peligroso en el repositorio de GitHub unilogies/bumsys anteriores a v1.0.3-beta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bumsys_project:bumsys:1.0.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "85284323-E1F7-4DD3-ACE0-BEF645A98467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bumsys_project:bumsys:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7151AD95-D208-4251-B074-8920465566AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bumsys_project:bumsys:1.0.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C4B022-F7E0-4E37-8A5B-B4D72AEF52ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172674/Bumsys-Business-Management-System-1.0.3-beta-Shell-Upload.html",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/unilogies/bumsys/commit/a5beff7868ab63bf4ec752a1102f8da033c66b28",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/b5e9c578-1a33-4745-bf6b-e7cdb89793f7",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172674/Bumsys-Business-Management-System-1.0.3-beta-Shell-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/unilogies/bumsys/commit/a5beff7868ab63bf4ec752a1102f8da033c66b28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/b5e9c578-1a33-4745-bf6b-e7cdb89793f7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0470",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-26T22:15:26.433",
      "lastModified" : "2024-11-21T07:37:14.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting (XSS) - almacenado en el repositorio de GitHub modoboa/modoboa anterior a 2.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modoboa:modoboa:*:*:*:*:*:modoboa:*:*",
            "versionEndExcluding" : "2.0.4",
            "matchCriteriaId" : "4781FBB6-EAE1-4AF9-A51F-5BEE3E8DFA16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modoboa/modoboa/commit/354ab6884019009249097a7f3a1881d81ecd2fd2",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/baae3180-b63b-4880-b2af-1a3f30056c2b",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modoboa/modoboa/commit/354ab6884019009249097a7f3a1881d81ecd2fd2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/baae3180-b63b-4880-b2af-1a3f30056c2b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0488",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-26T22:15:26.727",
      "lastModified" : "2024-11-21T07:37:16.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting (XSS): almacenado en el repositorio de GitHub pyload/pyload anterior a 0.5.0b3.dev42."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyload:pyload:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-01-24",
            "matchCriteriaId" : "C26DFAFC-CA1D-43C9-9A95-AFD844125513"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyload-ng_project:pyload-ng:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.5.0b3.dev42",
            "matchCriteriaId" : "B3F0A14B-745C-440A-AC98-6DE3C517006F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pyload/pyload/commit/46d75a3087f3237d06530d55998938e2e2bda6bd",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/4311d8d7-682c-4f2a-b92c-3f9f1a36255a",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pyload/pyload/commit/46d75a3087f3237d06530d55998938e2e2bda6bd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/4311d8d7-682c-4f2a-b92c-3f9f1a36255a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0509",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-26T22:15:26.993",
      "lastModified" : "2024-11-21T07:37:18.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44."
      }, {
        "lang" : "es",
        "value" : "Validación de certificado incorrecta en pyload/pyload del repositorio de GitHub antes de 0.5.0b3.dev44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyload:pyload:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-01-25",
            "matchCriteriaId" : "98C08F13-A3B4-424F-AB95-9CAEDC37D57F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pyload-ng_project:pyload-ng:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.5.0b3.dev44",
            "matchCriteriaId" : "41241786-7E3F-4DAF-A391-913FAD3C3C45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pyload/pyload/commit/a9098bdf7406e6faf9df3da6ff2d584e90c13bbb",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/a370e0c2-a41c-4871-ad91-bc6f31a8e839",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pyload/pyload/commit/a9098bdf7406e6faf9df3da6ff2d584e90c13bbb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/a370e0c2-a41c-4871-ad91-bc6f31a8e839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0493",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-26T23:15:15.920",
      "lastModified" : "2024-11-21T07:37:17.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5.\n\n"
      }, {
        "lang" : "es",
        "value" : "Neutralización incorrecta de elementos especiales equivalentes en el repositorio de GitHub btcpayserver/btcpayserver antes de 1.7.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-76"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "10680F85-A173-4539-965D-2181DC3C4347"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171732/BTCPay-Server-1.7.4-HTML-Injection.html",
        "source" : "security@huntr.dev",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/pull/4545/commits/02070d65836cd24627929b3403efbae8de56039a",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3a73b45c-6f3e-4536-a327-cdfdbc59896f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171732/BTCPay-Server-1.7.4-HTML-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/pull/4545/commits/02070d65836cd24627929b3403efbae8de56039a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3a73b45c-6f3e-4536-a327-cdfdbc59896f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0519",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-26T23:15:16.347",
      "lastModified" : "2024-11-21T07:37:19.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4."
      }, {
        "lang" : "es",
        "value" : "Cross site scripting (XSS): almacenado en el repositorio de GitHub modoboa/modoboa anterior a 2.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modoboa:modoboa:*:*:*:*:*:modoboa:*:*",
            "versionEndExcluding" : "2.0.4",
            "matchCriteriaId" : "4781FBB6-EAE1-4AF9-A51F-5BEE3E8DFA16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modoboa/modoboa/commit/eef9ab72b5305578a3ad7a7463bd284aa645e98b",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/891ad0cb-d12f-4c5e-aac8-d7326caf2129",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modoboa/modoboa/commit/eef9ab72b5305578a3ad7a7463bd284aa645e98b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/891ad0cb-d12f-4c5e-aac8-d7326caf2129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22740",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-27T01:15:08.643",
      "lastModified" : "2024-11-21T07:45:19.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source platform for community discussion. Versions prior to 3.1.0.beta1 (beta) (tests-passed) are vulnerable to  Allocation of Resources Without Limits. Users can create chat drafts of an unlimited length, which can cause a denial of service by generating an excessive load on the server. Additionally, an unlimited number of drafts were loaded when loading the user. This issue has been patched in version 2.1.0.beta1 (beta) and (tests-passed). Users should upgrade to the latest version where a limit has been introduced. There are no workarounds available."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de código abierto para el debate comunitario. Las versiones anteriores a la 3.1.0.beta1 (beta) (pruebas aprobadas) son vulnerables a Asignación de Recursos Sin Límites. Los usuarios pueden crear borradores de chat de duración ilimitada, lo que puede provocar una denegación de servicio al generar una carga excesiva en el servidor. Además, se cargaba una cantidad ilimitada de borradores al cargar el usuario. Este problema se solucionó en la versión 2.1.0.beta1 (beta) y (pruebas aprobadas). Los usuarios deben actualizar a la última versión donde se haya introducido un límite. No hay soluciones disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0",
            "matchCriteriaId" : "EC7E4636-4A0D-4C79-BE83-63B7CFD890E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/5eaf0802398ff06604f03b27a28dd274f2ffa576",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-pwj4-rf62-p224",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/5eaf0802398ff06604f03b27a28dd274f2ffa576",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-pwj4-rf62-p224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-27T04:15:07.997",
      "lastModified" : "2025-03-27T19:15:46.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Haven 5d15944 allows Server-Side Request Forgery (SSRF) via the feed[url]= Feeds functionality. Authenticated users with the ability to create new RSS Feeds or add RSS Feeds can supply an arbitrary hostname (or even the hostname of the Haven server itself). NOTE: this product has significant usage but does not have numbered releases; ordinary end users may typically use the master branch."
      }, {
        "lang" : "es",
        "value" : "Haven 5d15944 permite Server-Side Request Forgery (SSRF) a través de la funcionalidad feed[url]= Feeds. Los usuarios autenticados con la capacidad de crear nuevos canales RSS o agregar canales RSS pueden proporcionar un nombre de host arbitrario (o incluso el nombre de host del propio servidor Haven). NOTA: este producto tiene un uso significativo pero no tiene versiones numeradas; Los usuarios finales normales normalmente pueden utilizar la rama master."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:havenweb:haven:5d15944:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2347F1C7-DA3F-4D7B-AB9D-B5905B0EE15A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/havenweb/haven/issues/51",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://havenweb.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/havenweb/haven/issues/51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://havenweb.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0527",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-27T11:15:12.240",
      "lastModified" : "2024-11-21T07:37:20.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file search-request.php. The manipulation of the argument searchdata with the input \"><script>alert(document.domain)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219596."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en PHPGurukul Online Security Guards Hiring System 1.0 y clasificada como problemática. Una función desconocida del archivo search-request.php es afectada por esta vulnerabilidad. La manipulación del argumento searchdata con la entrada \"&gt; conduce a cross site scripting. El ataque puede lanzarse de forma remota. La explotación se ha divulgado al público y puede usarse. El identificador de esta vulnerabilidad es VDB-219596."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_security_guards_hiring_system_project:online_security_guards_hiring_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2B06F6-4201-4A29-8956-1AF54C24159A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ctflearner/Vulnerability/blob/main/Online-Security-guard-POC.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219596",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.219596",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ctflearner/Vulnerability/blob/main/Online-Security-guard-POC.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.219596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0528",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-27T11:15:12.820",
      "lastModified" : "2024-11-21T07:37:20.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/abc.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219597 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en SourceCodester Online Tours &amp; Travels Management System 1.0. Ha sido clasificado como crítico. Esto afecta a una parte desconocida del archivo admin/abc.php. La manipulación del argumento id conduce a la inyección de SQL. Es posible iniciar el ataque de forma remota. La explotación ha sido divulgada al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-219597."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_abc_id.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219597",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219597",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_abc_id.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0529",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-27T11:15:13.170",
      "lastModified" : "2024-11-21T07:37:20.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/add_payment.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-219598 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en SourceCodester Online Tours &amp; Travels Management System 1.0. Ha sido declarada crítica. Esta vulnerabilidad afecta a un código desconocido del archivo admin/add_paid.php. La manipulación del argumento id conduce a la inyección de SQL. El ataque se puede iniciar de forma remota.La explotación ha sido divulgada al público y puede utilizarse. VDB-219598 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/_admin_add_payment_id.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219598",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219598",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/_admin_add_payment_id.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0530",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-27T11:15:13.390",
      "lastModified" : "2024-11-21T07:37:21.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/approve_user.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-219599."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en SourceCodester Online Tours &amp; Travels Management System 1.0. Ha sido declarada como crítica. La manipulación del argumento id conduce a la inyección de SQL. El ataque puede iniciarse de forma remota.La explotación ha sido divulgada al público y puede utilizarse. El identificador asociado de esta vulnerabilidad es VDB-219599."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_approve_user_id.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219599",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219599",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_approve_user_id.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0531",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-27T11:15:13.627",
      "lastModified" : "2024-11-21T07:37:21.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file admin/booking_report.php. The manipulation of the argument to_date leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219600."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad ha sido encontrada en SourceCodester Online Tours &amp; Travels Management System 1.0. Una función desconocida del archivo admin/booking_report.php es afectada por esta vulnerabilidad. La manipulación del argumento to_date conduce a la inyección de SQL. Es posible lanzar el ataque de forma remota.La explotación ha sido divulgada al público y puede utilizarse. El identificador de esta vulnerabilidad es VDB-219600."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/tototo_date.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219600",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219600",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/tototo_date.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0532",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-27T11:15:13.763",
      "lastModified" : "2024-11-21T07:37:21.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Online Tours & Travels Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/disapprove_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219601 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en SourceCodester Online Tours &amp; Travels Management System 1.0. Una función desconocida del archivo admin/disapprove_user.php es afectada por esta vulnerabilidad. La manipulación del argumento id conduce a la inyección de SQL. El ataque se puede lanzar de forma remota.La explotación ha sido divulgada al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-219601."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_disapprove_user_id.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219601",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219601",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_disapprove_user_id.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0533",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-27T11:15:13.890",
      "lastModified" : "2024-11-21T07:37:21.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management System 1.0. Affected by this issue is some unknown functionality of the file admin/expense_report.php. The manipulation of the argument from_date leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-219602 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en SourceCodester Online Tours &amp; Travels Management System 1.0. Una función desconocida del archivo admin/expense_report.php es afectada por esta vulnerabilidad. La manipulación del argumento from_date conduce a la inyección de SQL. El ataque puede lanzarse de forma remota.La explotación ha sido divulgada al público y puede utilizarse. VDB-219602 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_expense_report_from_date.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219602",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219602",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_expense_report_from_date.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0534",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-27T11:15:14.070",
      "lastModified" : "2024-11-21T07:37:21.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects an unknown part of the file admin/expense_report.php. The manipulation of the argument to_date leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-219603."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en SSourceCodester Online Tours &amp; Travels Management System 1.0. Esto afecta a una parte desconocida del archivo admin/expense_report.php. La manipulación del argumento to_date conduce a la inyección de SQL. Es posible iniciar el ataque de forma remota.La explotación ha sido divulgada al público y puede utilizarse. El identificador asociado de esta vulnerabilidad es VDB-219603."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_expense_report_to_date.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219603",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219603",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_expense_report_to_date.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22240",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-27T18:15:16.473",
      "lastModified" : "2024-11-21T07:44:23.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader versiones 22.003.20282 (y anteriores) y 22.003.20281 (y anteriores) y 20.005.30418 ( y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndExcluding" : "20.005.30436",
            "matchCriteriaId" : "56AABC41-7B13-4440-885F-9EFC292326A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndExcluding" : "22.003.20310",
            "matchCriteriaId" : "1B4519FE-456C-43CC-8BD5-BA5393408368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndExcluding" : "20.005.30436",
            "matchCriteriaId" : "B7B12DC2-E321-4DE1-8646-A09FE31DD570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndExcluding" : "22.003.20310",
            "matchCriteriaId" : "76738AB4-0EC1-4F64-A56E-90F6D628747A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22241",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-27T18:15:16.927",
      "lastModified" : "2024-11-21T07:44:23.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader versiones 22.003.20282 (y anteriores) y 22.003.20281 (y anteriores) y 20.005.30418 ( y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndExcluding" : "20.005.30436",
            "matchCriteriaId" : "56AABC41-7B13-4440-885F-9EFC292326A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndExcluding" : "22.003.20310",
            "matchCriteriaId" : "1B4519FE-456C-43CC-8BD5-BA5393408368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndExcluding" : "20.005.30436",
            "matchCriteriaId" : "B7B12DC2-E321-4DE1-8646-A09FE31DD570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndExcluding" : "22.003.20310",
            "matchCriteriaId" : "76738AB4-0EC1-4F64-A56E-90F6D628747A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22242",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-01-27T18:15:17.103",
      "lastModified" : "2024-11-21T07:44:23.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader versiones 22.003.20282 (y anteriores) y 22.003.20281 (y anteriores) y 20.005.30418 ( y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndExcluding" : "20.005.30436",
            "matchCriteriaId" : "56AABC41-7B13-4440-885F-9EFC292326A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndExcluding" : "22.003.20310",
            "matchCriteriaId" : "1B4519FE-456C-43CC-8BD5-BA5393408368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndExcluding" : "20.005.30436",
            "matchCriteriaId" : "B7B12DC2-E321-4DE1-8646-A09FE31DD570"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndExcluding" : "22.003.20310",
            "matchCriteriaId" : "76738AB4-0EC1-4F64-A56E-90F6D628747A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0549",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-27T19:15:10.457",
      "lastModified" : "2024-11-21T07:37:23.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in YAFNET up to 3.1.10. This issue affects some unknown processing of the file /forum/PostPrivateMessage of the component Private Message Handler. The manipulation of the argument subject/message leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.11 is able to address this issue. The identifier of the patch is 2237a9d552e258a43570bb478a92a5505e7c8797. It is recommended to upgrade the affected component. The identifier VDB-219665 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en YAFNET hasta 3.1.10 y se ha clasificado como problemática. Este problema afecta un procesamiento desconocido del archivo /forum/PostPrivateMessage del componente Private Message Handler. La manipulación del argumento asunto/mensaje conduce a cross-site scripting. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse. La actualización a la versión 3.1.11 puede solucionar este problema. El identificador del parche es 2237a9d552e258a43570bb478a92a5505e7c8797. Se recomienda actualizar el componente afectado. A esta vulnerabilidad se le asignó el identificador VDB-219665."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yetanotherforum:yaf.net:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndIncluding" : "3.1.10",
            "matchCriteriaId" : "9FB3B45F-7037-4A0A-AD2D-D7BD4D79B196"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/drive/folders/1ct6Tp_cnsYO8L_JSvlBCf_Ae7KW3JAcD?usp=sharing",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/YAFNET/YAFNET/commit/2237a9d552e258a43570bb478a92a5505e7c8797",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/YAFNET/YAFNET/releases/tag/v3.1.11",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/YAFNET/YAFNET/security/advisories/GHSA-4hwx-678w-9cp5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219665",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219665",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/drive/folders/1ct6Tp_cnsYO8L_JSvlBCf_Ae7KW3JAcD?usp=sharing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/YAFNET/YAFNET/commit/2237a9d552e258a43570bb478a92a5505e7c8797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/YAFNET/YAFNET/releases/tag/v3.1.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/YAFNET/YAFNET/security/advisories/GHSA-4hwx-678w-9cp5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0550",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-27T21:15:11.123",
      "lastModified" : "2026-04-08T19:18:00.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Quick Restaurant Menu plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the fact that during menu item deletion/modification, the plugin does not verify that the post ID provided to the AJAX action is indeed a menu item. This makes it possible for authenticated attackers, with subscriber-level access or higher, to modify or delete arbitrary posts."
      }, {
        "lang" : "es",
        "value" : "El complemento Quick Restaurant Menu para WordPress es vulnerable a Insecure Direct Object Reference en versiones hasta la 2.0.2 incluida. Esto se debe al hecho de que durante la eliminación/modificación de un elemento de menú, el complemento no verifica que el ID de publicación proporcionado a la acción AJAX sea de hecho un elemento de menú. Esto hace posible que atacantes autenticados, con acceso de nivel de suscriptor o superior, modifiquen o eliminen publicaciones arbitrarias."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thingsforrestaurants:quick_restaurant_menu:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "FB95643B-B143-4D0D-87F2-037F2BCC3BED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/quick-restaurant-menu/tags/2.0.2/includes/admin/ajax-functions.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2851871/quick-restaurant-menu/trunk?contextall=1&old=2788636&old_path=%2Fquick-restaurant-menu%2Ftrunk",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2023/02/multiple-vulnerabilities-patched-in-quick-restaurant-menu-plugin/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/faa4fba5-cd19-4b96-aa09-07ed6d52a107?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/quick-restaurant-menu/tags/2.0.2/includes/admin/ajax-functions.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2851871/quick-restaurant-menu/trunk?contextall=1&old=2788636&old_path=%2Fquick-restaurant-menu%2Ftrunk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/faa4fba5-cd19-4b96-aa09-07ed6d52a107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0553",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-27T21:15:11.627",
      "lastModified" : "2026-04-08T19:18:01.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Quick Restaurant Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      }, {
        "lang" : "es",
        "value" : "El complemento Quick Restaurant Menu para WordPress es vulnerable a cross-site scripting almacenado a través de sus parámetros de configuración en versiones hasta la 2.0.2 incluida debido a una sanitización de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados, con permisos de nivel de administrador y superiores, inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thingsforrestaurants:quick_restaurant_menu:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "FB95643B-B143-4D0D-87F2-037F2BCC3BED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/quick-restaurant-menu/tags/2.0.2/includes/admin/settings/settings.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2851871/quick-restaurant-menu/trunk?contextall=1&old=2788636&old_path=%2Fquick-restaurant-menu%2Ftrunk",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2023/02/multiple-vulnerabilities-patched-in-quick-restaurant-menu-plugin/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cfd8a6a4-9159-480f-abe2-71972585217b?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/quick-restaurant-menu/tags/2.0.2/includes/admin/settings/settings.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2851871/quick-restaurant-menu/trunk?contextall=1&old=2788636&old_path=%2Fquick-restaurant-menu%2Ftrunk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cfd8a6a4-9159-480f-abe2-71972585217b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0554",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-27T21:15:11.850",
      "lastModified" : "2026-04-08T19:18:01.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Quick Restaurant Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on its AJAX actions. This makes it possible for unauthenticated attackers to update menu items, via forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El complemento Quick Restaurant Menu para WordPress es vulnerable a Cross-Site Request Forgery en versiones hasta la 2.0.2 incluida. Esto se debe a una validación nonce faltante o incorrecta en sus acciones AJAX. Esto hace posible que atacantes no autenticados actualicen elementos del menú; a través de una solicitud falsificada, pueden engañar al administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thingsforrestaurants:quick_restaurant_menu:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "FB95643B-B143-4D0D-87F2-037F2BCC3BED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/quick-restaurant-menu/tags/2.0.2/includes/admin/ajax-functions.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2851871/quick-restaurant-menu/trunk?contextall=1&old=2788636&old_path=%2Fquick-restaurant-menu%2Ftrunk",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2023/02/multiple-vulnerabilities-patched-in-quick-restaurant-menu-plugin/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bfc7c214-8d76-453c-a05d-682aa425b06e?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/quick-restaurant-menu/tags/2.0.2/includes/admin/ajax-functions.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2851871/quick-restaurant-menu/trunk?contextall=1&old=2788636&old_path=%2Fquick-restaurant-menu%2Ftrunk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bfc7c214-8d76-453c-a05d-682aa425b06e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0555",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-27T21:15:12.230",
      "lastModified" : "2026-04-08T18:17:42.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Quick Restaurant Menu plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.0.2. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke those actions intended for administrator use. Actions include menu item creation, update and deletion and other menu management functions. Since the plugin does not verify that a post ID passed to one of its AJAX actions belongs to a menu item, this can lead to arbitrary post deletion/alteration."
      }, {
        "lang" : "es",
        "value" : "El complemento Quick Restaurant Menu para WordPress es vulnerable a la omisión de autorización debido a una falta de verificación de capacidad en sus acciones AJAX en versiones hasta la 2.0.2 incluida. Esto hace posible que los atacantes autenticados, con permisos de nivel de suscriptor y superiores, invoquen aquellas acciones destinadas al uso del administrador. Las acciones incluyen la creación, actualización y eliminación de elementos del menú y otras funciones de gestión del menú. Dado que el complemento no verifica que una ID de publicación pasada a una de sus acciones AJAX pertenezca a un elemento del menú, esto puede llevar a la eliminación/alteración arbitraria de una publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thingsforrestaurants:quick_restaurant_menu:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "FB95643B-B143-4D0D-87F2-037F2BCC3BED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/quick-restaurant-menu/tags/2.0.2/includes/admin/ajax-functions.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2851871/quick-restaurant-menu/trunk?contextall=1&old=2788636&old_path=%2Fquick-restaurant-menu%2Ftrunk",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2023/02/multiple-vulnerabilities-patched-in-quick-restaurant-menu-plugin/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/97984c7d-d6ff-480c-acfe-20ab0eb04141?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/quick-restaurant-menu/tags/2.0.2/includes/admin/ajax-functions.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2851871/quick-restaurant-menu/trunk?contextall=1&old=2788636&old_path=%2Fquick-restaurant-menu%2Ftrunk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/97984c7d-d6ff-480c-acfe-20ab0eb04141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0556",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-27T22:15:09.147",
      "lastModified" : "2026-04-08T18:17:42.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to obtain the blog metadata (via the function cstu_get_metadata) that includes the plugin's contentstudio_token. Knowing this token allows for other interactions with the plugin such as creating posts in versions prior to 1.2.5, which added other requirements to posting and updating."
      }, {
        "lang" : "es",
        "value" : "El complemento ContentStudio para WordPress es vulnerable a la omisión de autorización debido a una falta de verificación de capacidad en varias funciones en versiones hasta la 1.2.5 incluida. Esto hace posible que atacantes no autenticados obtengan los metadatos del blog (a través de la función cstu_get_metadata) que incluye el contentstudio_token del complemento. Conocer este token permite otras interacciones con el complemento, como crear publicaciones en versiones anteriores a la 1.2.5, lo que agregó otros requisitos para la publicación y actualización."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contentstudio:contentstudio:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.6",
            "matchCriteriaId" : "2258CF06-A5A1-408E-996F-F16D5D0B57E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/contentstudio/tags/1.2.1/contentstudio-plugin.php#L517",
        "source" : "security@wordfence.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2851006%40contentstudio%2Ftrunk&old=2844028%40contentstudio%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/52db8d41-859a-4d68-8b83-3d3af8f1bf64?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/contentstudio/tags/1.2.1/contentstudio-plugin.php#L517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2851006%40contentstudio%2Ftrunk&old=2844028%40contentstudio%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/52db8d41-859a-4d68-8b83-3d3af8f1bf64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0557",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-27T22:15:09.250",
      "lastModified" : "2026-04-08T18:17:43.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.5. This could allow unauthenticated attackers to obtain a nonce needed for the creation of posts."
      }, {
        "lang" : "es",
        "value" : "El complemento ContentStudio para WordPress es vulnerable a la exposición de información confidencial en versiones hasta la 1.2.5 incluida. Esto podría permitir a atacantes no autenticados obtener un nonce necesario para la creación de publicaciones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contentstudio:contentstudio:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.6",
            "matchCriteriaId" : "2258CF06-A5A1-408E-996F-F16D5D0B57E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/contentstudio/trunk/contentstudio-plugin.php#L709",
        "source" : "security@wordfence.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2851006%40contentstudio%2Ftrunk&old=2844028%40contentstudio%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/62eb136f-3cb0-40dc-a154-015a7fa1077b?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/contentstudio/trunk/contentstudio-plugin.php#L709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2851006%40contentstudio%2Ftrunk&old=2844028%40contentstudio%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/62eb136f-3cb0-40dc-a154-015a7fa1077b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0558",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-27T22:15:09.347",
      "lastModified" : "2026-04-08T19:18:01.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to execute functions intended for use by users with proper API keys."
      }, {
        "lang" : "es",
        "value" : "El complemento ContentStudio para WordPress es vulnerable a la omisión de autorización debido a una verificación de token no segura que es susceptible de realizar malabarismos de tipos en versiones hasta la 1.2.5 incluida. Esto hace posible que atacantes no autenticados ejecuten funciones destinadas a usuarios con claves API adecuadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contentstudio:contentstudio:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.6",
            "matchCriteriaId" : "2258CF06-A5A1-408E-996F-F16D5D0B57E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/contentstudio/trunk/contentstudio-plugin.php#L416",
        "source" : "security@wordfence.com",
        "tags" : [ "Exploit", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c31828dc-ef94-4895-8395-a5d52a0a82bd?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/contentstudio/trunk/contentstudio-plugin.php#L416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c31828dc-ef94-4895-8395-a5d52a0a82bd?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0047",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-01-27T23:15:08.823",
      "lastModified" : "2023-11-07T03:59:30.533",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22737",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-28T00:15:08.863",
      "lastModified" : "2024-11-21T07:45:19.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wire-server provides back end services for Wire, a team communication and collaboration platform. Prior to version 2022-12-09, every member of a Conversation can remove a Bot from a Conversation due to a missing permissions check. Only Conversation admins should be able to remove Bots. Regular Conversations are not allowed to do so. The issue is fixed in wire-server 2022-12-09 and is already deployed on all Wire managed services. On-premise instances of wire-server need to be updated to 2022-12-09/Chart 4.29.0, so that their backends are no longer affected. There are no known workarounds."
      }, {
        "lang" : "es",
        "value" : "wire-server proporciona servicios back-end para Wire, una plataforma de colaboración y comunicación en equipo. Antes de la versión 2022-12-09, cada miembro de una conversación podía eliminar un Bot de una conversación debido a una falta de verificación de permisos. Solo los administradores de Conversaciones deberían poder eliminar Bots. No se permiten conversaciones regulares para hacerlo. El problema se solucionó en Wire-server 2022-12-09 y ya está implementado en todos los servicios administrados por Wire. Las instancias locales del servidor de conexión deben actualizarse a 2022-12-09/Chart 4.29.0, para que sus backends ya no se vean afectados. No se conocen workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-280"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022-12-09",
            "matchCriteriaId" : "6B9F25B1-5AD0-4C54-B866-BABA35EA2586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wireapp/wire-server/commit/494a6881f5895d4ed9e5d011455242be0d5e6223",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-server/pull/2870",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-server/releases/tag/v2022-12-09",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-server/security/advisories/GHSA-xmjc-c6w3-pcp4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-server/commit/494a6881f5895d4ed9e5d011455242be0d5e6223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-server/pull/2870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-server/releases/tag/v2022-12-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-server/security/advisories/GHSA-xmjc-c6w3-pcp4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23616",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-28T00:15:09.070",
      "lastModified" : "2024-11-21T07:46:32.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `beta` and `tests-passed` branches, when submitting a membership request, there is no character limit for the reason provided with the request. This could potentially allow a user to flood the database with a large amount of data. However it is unlikely this could be used as part of a DoS attack, as the paths reading back the reasons are only available to administrators. Starting in version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `beta` and `tests-passed` branches, a limit of 280 characters has been introduced for membership requests."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de la versión 3.0.1 en la rama \"stable\" y 3.1.0.beta2 en las ramas \"beta\" y \"tests-passed\", al enviar una solicitud de membresía, no hay límite de caracteres por el motivo proporcionado con la solicitud. Potencialmente, esto podría permitir que un usuario inunde la base de datos con una gran cantidad de datos. Sin embargo, es poco probable que esto pueda usarse como parte de un ataque DoS, ya que las rutas que leen los motivos solo están disponibles para los administradores. A partir de la versión 3.0.1 en la rama \"stable\" y 3.1.0.beta2 en las ramas \"beta\" y \"tests-passed\", se introdujo un límite de 280 caracteres para las solicitudes de membresía."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "C19D7945-EB52-43C0-B9B7-8C250FEDC451"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BF272688-1B08-4ABC-8002-66B59690F9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "A29A2465-B21D-4147-8292-DCF864D385B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBC3511E-3D68-42E2-B521-966FB429B640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "EC8B99C2-E267-4EC2-AF09-C9AD1EEE76D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "F21A22EE-081A-4489-A7F8-22E2DBC5B00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E6C8FB3-4B19-4510-B9A8-BCF9ED8ED7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6b:*:*:beta:*:*:*",
            "matchCriteriaId" : "5B827291-6483-4BB7-AF76-530B669B3ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "551E70ED-34FF-4989-91C9-6312DE4AB4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "204FB99A-8F11-4F04-9ED9-D94551790116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "46A8705C-0DF6-45D7-A38C-D2AB69194C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F59B0D8E-CFFB-4EBA-9D6A-526F9541BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D801A898-27D0-4076-8AF9-2B574FA11723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E7CBBD4A-4FDB-49E0-A5B6-22701C12BDF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9E7328DF-1924-4D0D-AC6B-1BA2D9CF1D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9421CE10-F226-4F2C-9DA7-EBB44B73C304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "1E71FBB6-ECAD-4581-9982-4C330D55FEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B631CCC-D456-49FF-B626-59C40BD4E167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE83F98D-F7AA-434B-8438-5B1FB96681B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB93F19B-9087-44CE-B884-45F434B7906F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5A88A5A3-EF1A-4E86-B074-CE0AC4325484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "0650B4C7-BCFE-4180-8FEF-4170A67E8BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "388F376E-46C9-4163-992D-95E3E4548D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D661090A-DA61-4BBE-85C3-6F48C053C84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "4A458242-D6DD-46E3-AF09-66BC87C5D7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8FACCBA-0D3B-4E6F-85A0-1CBD2B367F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F1D83D80-A0BE-4794-91A1-599AF558FB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "BD15B6B2-BFB3-4271-A507-48E9B827FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "E0003042-9B14-4E1B-800F-3D154FFE8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "E449EA29-81C8-4477-977E-746EACDBED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6FC6D4DF-8686-4054-A0C1-784E194171E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "C574C37D-3D99-4430-A3D5-199883556B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "F344E950-EFF9-4405-99D7-0B615C32873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "0A50DE1B-29EB-4014-B5B6-46CF493485F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "638B3E17-9F0A-4A96-B8D3-DDFEA518DBE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6D3E3AEB-8CD4-4EE7-9C81-2F74512071DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "254FF9D9-E696-41C8-B15B-DA089D2C6597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A5001E1-E716-43AA-8093-E0EED9E07909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "7FD16B13-516A-4D03-B1EF-A11156471A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E886D9EF-7FBD-4A24-A8B6-54E4B15403C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "369A83D1-AB7E-488D-9D74-26A69DFC1AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "3189CAC1-8970-4A33-B1E4-EB9EC3C19A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8733438-7625-400E-8237-BAE3D9F147AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "E87F1ED0-FD0D-4767-8E7C-325D920B79BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "97811266-A13C-4441-A1B5-BFA4B0862DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "3D09D157-4B19-4561-AB20-952F2EA9BA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "789087AF-0011-4E8F-A5AB-432A5F91BBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13b:*:*:beta:*:*:*",
            "matchCriteriaId" : "8EC9DC8C-56DC-482B-8847-BD0CFACA6F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "F63B3D13-24F6-4EFA-9528-DBF59D973A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F3A2388-18DE-46B0-BC13-7714E25D1B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "940B11CB-053F-4D60-8BC4-81CA659D2F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "83684DCB-B201-43B8-8B6E-6D0B13B7E437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "DF92E1FD-9B41-4A41-8B13-9D789C5729D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "351D224A-E67C-454C-AF43-8AD6CD44C685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E058CA6D-A295-4CAD-8C85-E8C83BAFEBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF99C114-1BCA-4400-BC7E-EDA1F55559CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBA1EFBA-5A26-46A0-B2A6-53B9924253BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE5B90B0-B6CC-4189-9C98-CF29017A47B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1818628-5F4E-4E5D-974A-0BEBCE821209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "14785840-3BC0-4030-AE44-E3013DF19AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "90444209-684C-4BF8-9BCF-6B29EA0A0593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "668E15DE-8CF2-4AF3-B13A-9080046B1E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "1191861C-1B2C-4762-805D-FCDC20F84D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "3CB518E5-CCC0-46B8-848E-C492BCF7E9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA1F68FE-67EA-4408-8E0F-558B0FAFFF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "66E9F05C-799A-43D3-9367-FCA86166BD65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "85DB4097-6EFC-4017-ADFD-56EE49BB2F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD283EA2-9026-497F-A7DE-E16CE0764ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "ED19DDDF-A29E-4C3F-A818-23D7E37B6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "508D0052-B7D7-4A08-8BB0-7D7A1EDAB96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "3E50BFB0-67D3-4EDE-93FE-85EAF605461E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "D7EE0134-6AD7-4695-B536-1959FE3A9672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "25DFFB5C-277F-4436-9BCE-643E98721C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "B8B80EB2-0B48-4AFA-8A09-26006CCDB022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AC8705E0-23ED-4817-8B69-21A4963C27F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "BAA156A9-A9FB-4D03-B0EE-4AA303D7A9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F733E585-075C-402A-9B34-1FE79DE4137E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "05C43439-C694-47AA-90AF-0AC2277E3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "B391F8A1-F102-4C88-864C-1386452CDAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC33C93-9947-4983-96A3-7DE223929817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B46DE141-1224-499E-AAE0-6CC0D5249B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "D8D07501-A07E-4743-A188-2E5BBC3C8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "64FD2A30-EE33-4680-9DCF-29283DBA3C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "B517F7A2-6FD1-4A7B-80E7-1167EC296591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "E6CA6EA5-DDAD-4882-AD1B-634C0CD741BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F14DCB07-9464-4DDE-98A1-FAE85DD60FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6EDFD679-4710-4A62-B254-E658EED4295B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1B81072-08A5-4EC6-B737-E35C505C1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A0748A9E-5737-48F9-BB66-6576AFE16198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "453E51D9-89A1-4A91-B218-05C45CC4E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "51542BA7-8151-4FC9-9C86-36CEB476B912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "5F95391C-0B75-47D2-9770-561E05414CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "10384675-B949-4B50-AF42-B5A3EE27250B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "7C0DB1C0-5749-4508-A265-C2138F7852E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA9977CF-575C-4A19-84C8-EBB68EBE88C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "87C525C5-E282-4EC6-956F-0C94DC11FC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F02A2A8-6312-4F6D-ABBF-952CA4C5E02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "DE54D1A3-FC2A-40DE-9177-50332208B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "170AE3DA-92C1-4D1D-9CAC-543C01FFF479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "2130C3C5-E4A5-41C3-89F0-C6FB4E47D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "74248527-B884-4134-95C8-DEAF3D774A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta17:*:*:beta:*:*:*",
            "matchCriteriaId" : "01A8AF9C-8BF6-4ADC-A85A-A5C1F9FFB2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "B4038D09-467C-4815-A429-F0E1E3E545E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6F273237-7223-4047-83B7-16A49B7E554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF26EE13-554C-4180-98A2-238D84E40927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "12688C9C-291D-4BF2-93F9-09AA323C52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "A7F7A437-D538-4B44-AC41-C95641A11A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "9BB61DCF-52DB-498D-8779-D565E548C285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "EE56BB77-B7F7-4BE7-AD9C-33888C5D01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "9DB49E1D-BCC8-4984-A81D-5DAC5E3DF168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "F775EA72-CCE3-4230-A666-EFDAA61F71FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E65BDEE-850A-41C6-8CFB-BD8B3A105CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "AF196429-FDED-4C3F-9F7D-0A2BF7DCAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "64B84326-5397-4C60-8007-F7E7D81DC661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "9A0A526A-9662-4E39-8BF6-E464BE1A2B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "712DACC2-A21E-429F-8A7B-86D8F7CE3468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E93F9F6-5B03-4F77-B8B4-AEC9E4011692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "C5B2B98E-804F-4525-B726-3F1DF2693F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "582E339F-678A-4377-8EE0-8F4208E3EF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "1BF1D945-6EAA-4FA7-8252-2FED079587F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9325DFF5-EA7B-4B8D-A227-4B1A59449CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0ECB28DA-3CA1-4011-9170-BFBF2ED3E091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A6399B0-471B-4B26-859C-3836F2A6B7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "131E2AE4-E35D-495D-8907-3B899BB8AC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "83601528-0DD9-4835-B6C0-0F341871CC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4AEB5AAF-73EB-4356-8C53-10E22B2F910E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EB199D6-E253-4EC2-BF0B-059F7B6662ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "94A586EB-B0E0-4190-88DF-3BCC04E5EF84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BF27B44-9AA7-4B91-9B4B-0E84418F5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "461744BD-3974-4C33-8514-0A917DC90C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A86FB2B-6915-49C0-B993-0711AAECA5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EF3DD36-2776-4CD2-A3F1-88872024D223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "D91D71ED-F08F-4DB5-B7DD-062E7C11435F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "62B5812A-FB52-4F4B-9A15-3AA5CD6562E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "83231EC0-E3F7-4E35-B165-487C2725B4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "A53AFFA6-7B98-47F2-9BD7-71C83A69CE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A42D3FB9-9197-4101-A729-876C490BD572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A5DE0C47-0C66-4EFE-AF82-1B22F4F54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "E587D10F-BEF8-4923-AF76-6DC3172880EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "155568EF-6A7E-423A-B5EA-D20E407B271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "7E94B119-8C75-43DF-A2DF-A5B3E04F0778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5348F94F-F6AE-4400-8AC7-036111EF43D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "57948A73-C9C5-4C24-947D-0A4659C7002E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "3532EE37-2D0F-496C-B5A8-F9315FFB4552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "2CAE7CC9-B91D-494C-B91A-497D6FE6B14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "623BBBF8-4121-466A-82C8-D179B02B3E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "648D010A-8B8D-42AA-8888-09E4E0FAA954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "8ADC7613-25E3-4CB8-A962-2775C20E4D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B0099F0-A275-4C65-9B79-041374F183DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE69800E-5CB5-4916-879C-51DE5E94489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "8C64EAFE-2B60-4D95-869F-4A2FC98B99C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "AB2045F1-AC39-4738-B3F0-33F00D23C921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E32589F8-2E87-40D2-BAD3-E6C1C088CA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "4868BAFD-BFE5-4361-855A-644B040E7233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4B6C25BF-5B2A-43C4-8918-E32BA9DD8A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB9917D3-D848-4D2B-8A44-B3723BA377DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "7046D95B-73CE-406B-ACC3-FD71F7DEC7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "D3BA5033-2C06-42FF-962E-48EBA2EBB469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "630D29DE-0FD7-4306-BA80-20D0791D334B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "08F94E42-07A1-480D-B6DD-D96AE38F1EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "FA4B3DE5-21DA-4185-AF74-AAA6DD89FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E602BEF9-E89D-40F7-BC6F-5C6F9F25BA97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "C06A8627-683D-4328-BE7A-4A33A4B736F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E3EF8240-D3F5-422C-B70A-90C6CBA4E622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "93CC792D-AE0B-498E-8374-5D09EF4E28FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "093D4EA8-B002-4AB4-97C9-CEE4D70BF3C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "4C778180-E7BF-4EF2-8B19-0388E23E1424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "0C0B2BC1-35F1-4A1D-B9B2-54426B4ADF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6BCAB620-465A-41FF-A064-FB638DD3A557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "6AFCB802-A275-444C-8245-D0397322125F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9F9B70E2-AAAD-4E61-AEB2-E5F635F6AAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6182074E-C467-448C-9299-B92CFE4EEBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "09EA8F36-7647-42D0-8675-34C002E0754D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "9CE2276A-9680-4B14-9636-806F7E4C1669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD150166-4C8D-47E3-989A-1A71A46C36A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF5CA6AD-FA4D-47DF-A684-5DAD7662EA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "B94F75B8-7C84-4727-9D18-114A815E1906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "4D94E03A-32EE-408F-81FA-4B9C25AA7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD495875-007C-4A90-B940-B62E6FA492CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F1B84E-8AF8-46E8-9DE9-00D1DE348C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BCCEFDFB-61E6-4846-8093-B5CEB0D8450C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC63647-B692-4BB9-9A3D-6F8DF19C3494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F0ED55-C8C6-47C1-859A-60046838B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A2D59BC-2EE8-4F9C-AB5B-B9D01B44F7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "933DFEBC-5568-431B-809D-AFAEFD08E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE920E80-C02B-4EC8-982F-ADE89C936684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CDAE3441-12BA-41F4-8A5A-B2EE844C86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "1443EA1B-D210-4219-8452-CBFD5FACBC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "948A4B4A-A11F-477E-BEC5-0D60C7E3570C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "98B2A052-5427-4B72-9F59-82F430836CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "CB6D636E-B51F-4648-A637-62B2603BA18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "3DA17871-7ED7-4D68-A46D-D15DC5B3235F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "705FE965-0415-4382-8CA1-A19DF3B5EF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "BC6EDCE3-D564-434F-9A7F-D4A6D579F8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "FB05E54B-9CF6-45A7-8D47-C98DB6D19E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "03CD1C5E-18F5-4C6D-B92C-C511C8C12D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF4ABB9D-69DF-42D5-AD60-F9CEEC1B6730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7B4DCCF5-E290-4BDA-AAB9-DF362A2EB7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "3AE1F3A2-8340-4ED7-B943-ACDA9617DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E033AB7-9987-4C30-849F-2495376CA4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "D87E9338-C7F6-43BA-886F-C30987ADBA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E24EB90F-FE81-4746-8741-8DC9346F79C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "D237956F-FC90-467E-A493-24EFDA1A9F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "F7AA9AB8-AB6F-43E2-B3E5-685EE9BFE7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "5BC240A1-431E-4A50-88DC-7AC9BC674254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "3F85AFD4-D397-4FDB-B762-521BD5FF14C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "D40CDCE1-3462-4D6C-A3C7-487F175264CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/3e0cc4a5d9ef44ad902f6985d046ebb32f0a14ee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/d5745d34c20c31a221039d8913f33064433003ea",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/19993",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-6xff-p329-9pgf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/3e0cc4a5d9ef44ad902f6985d046ebb32f0a14ee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/d5745d34c20c31a221039d8913f33064433003ea",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/19993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-6xff-p329-9pgf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23617",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-28T00:15:09.173",
      "lastModified" : "2024-11-21T07:46:32.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code filter in certain conditions. Versions 19.4.22 and 20.0.19 have a fix for this issue. There are no known workarounds."
      }, {
        "lang" : "es",
        "value" : "OpenMage LTS es una plataforma de comercio electrónico. Las versiones anteriores a 19.4.22 y 20.0.19 contienen un bucle infinito en el filtro de código malicioso en determinadas condiciones. Las versiones 19.4.22 y 20.0.19 tienen una solución para este problema. No se conocen workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmage:magento:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "19.4.22",
            "matchCriteriaId" : "B87F8CA0-6C21-4615-A520-39F1E9E737D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmage:magento:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "20.0.0",
            "versionEndExcluding" : "20.0.19",
            "matchCriteriaId" : "15B9BC3F-BF81-4DF5-B57B-ECF7059A7991"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenMage/magento-lts/commit/494027785bdb7db53e60c11ef03c144b61cd3172",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenMage/magento-lts/security/advisories/GHSA-3p73-mm7v-4f6m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenMage/magento-lts/commit/494027785bdb7db53e60c11ef03c144b61cd3172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenMage/magento-lts/security/advisories/GHSA-3p73-mm7v-4f6m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23620",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-28T00:15:09.270",
      "lastModified" : "2024-11-21T07:46:32.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `beta` and `tests-passed` branches, the contents of latest/top routes for restricted tags can be accessed by unauthorized users. This issue is patched in version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `beta` and `tests-passed` branches. There are no known workarounds."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de la versión 3.0.1 en la rama \"stable\" y 3.1.0.beta2 en las ramas \"beta\" y \"tests-passed\", usuarios no autorizados podían acceder al contenido de las rutas más recientes/principales para etiquetas restringidas. Este problema se solucionó en la versión 3.0.1 en la rama \"stable\" y en la 3.1.0.beta2 en las ramas \"beta\" y \"tests-passed\". No se conocen workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "C19D7945-EB52-43C0-B9B7-8C250FEDC451"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BF272688-1B08-4ABC-8002-66B59690F9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "A29A2465-B21D-4147-8292-DCF864D385B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBC3511E-3D68-42E2-B521-966FB429B640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "EC8B99C2-E267-4EC2-AF09-C9AD1EEE76D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "F21A22EE-081A-4489-A7F8-22E2DBC5B00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E6C8FB3-4B19-4510-B9A8-BCF9ED8ED7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6b:*:*:beta:*:*:*",
            "matchCriteriaId" : "5B827291-6483-4BB7-AF76-530B669B3ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "551E70ED-34FF-4989-91C9-6312DE4AB4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "204FB99A-8F11-4F04-9ED9-D94551790116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "46A8705C-0DF6-45D7-A38C-D2AB69194C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F59B0D8E-CFFB-4EBA-9D6A-526F9541BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D801A898-27D0-4076-8AF9-2B574FA11723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E7CBBD4A-4FDB-49E0-A5B6-22701C12BDF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9E7328DF-1924-4D0D-AC6B-1BA2D9CF1D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9421CE10-F226-4F2C-9DA7-EBB44B73C304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "1E71FBB6-ECAD-4581-9982-4C330D55FEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B631CCC-D456-49FF-B626-59C40BD4E167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE83F98D-F7AA-434B-8438-5B1FB96681B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB93F19B-9087-44CE-B884-45F434B7906F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5A88A5A3-EF1A-4E86-B074-CE0AC4325484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "0650B4C7-BCFE-4180-8FEF-4170A67E8BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "388F376E-46C9-4163-992D-95E3E4548D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D661090A-DA61-4BBE-85C3-6F48C053C84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "4A458242-D6DD-46E3-AF09-66BC87C5D7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8FACCBA-0D3B-4E6F-85A0-1CBD2B367F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F1D83D80-A0BE-4794-91A1-599AF558FB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "BD15B6B2-BFB3-4271-A507-48E9B827FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "E0003042-9B14-4E1B-800F-3D154FFE8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "E449EA29-81C8-4477-977E-746EACDBED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6FC6D4DF-8686-4054-A0C1-784E194171E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "C574C37D-3D99-4430-A3D5-199883556B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "F344E950-EFF9-4405-99D7-0B615C32873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "0A50DE1B-29EB-4014-B5B6-46CF493485F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "638B3E17-9F0A-4A96-B8D3-DDFEA518DBE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6D3E3AEB-8CD4-4EE7-9C81-2F74512071DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "254FF9D9-E696-41C8-B15B-DA089D2C6597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A5001E1-E716-43AA-8093-E0EED9E07909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "7FD16B13-516A-4D03-B1EF-A11156471A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E886D9EF-7FBD-4A24-A8B6-54E4B15403C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "369A83D1-AB7E-488D-9D74-26A69DFC1AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "3189CAC1-8970-4A33-B1E4-EB9EC3C19A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8733438-7625-400E-8237-BAE3D9F147AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "E87F1ED0-FD0D-4767-8E7C-325D920B79BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "97811266-A13C-4441-A1B5-BFA4B0862DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "3D09D157-4B19-4561-AB20-952F2EA9BA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "789087AF-0011-4E8F-A5AB-432A5F91BBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13b:*:*:beta:*:*:*",
            "matchCriteriaId" : "8EC9DC8C-56DC-482B-8847-BD0CFACA6F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "F63B3D13-24F6-4EFA-9528-DBF59D973A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F3A2388-18DE-46B0-BC13-7714E25D1B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "940B11CB-053F-4D60-8BC4-81CA659D2F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "83684DCB-B201-43B8-8B6E-6D0B13B7E437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "DF92E1FD-9B41-4A41-8B13-9D789C5729D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "351D224A-E67C-454C-AF43-8AD6CD44C685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E058CA6D-A295-4CAD-8C85-E8C83BAFEBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF99C114-1BCA-4400-BC7E-EDA1F55559CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBA1EFBA-5A26-46A0-B2A6-53B9924253BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE5B90B0-B6CC-4189-9C98-CF29017A47B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1818628-5F4E-4E5D-974A-0BEBCE821209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "14785840-3BC0-4030-AE44-E3013DF19AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "90444209-684C-4BF8-9BCF-6B29EA0A0593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "668E15DE-8CF2-4AF3-B13A-9080046B1E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "1191861C-1B2C-4762-805D-FCDC20F84D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "3CB518E5-CCC0-46B8-848E-C492BCF7E9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA1F68FE-67EA-4408-8E0F-558B0FAFFF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "66E9F05C-799A-43D3-9367-FCA86166BD65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "85DB4097-6EFC-4017-ADFD-56EE49BB2F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD283EA2-9026-497F-A7DE-E16CE0764ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "ED19DDDF-A29E-4C3F-A818-23D7E37B6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "508D0052-B7D7-4A08-8BB0-7D7A1EDAB96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "3E50BFB0-67D3-4EDE-93FE-85EAF605461E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "D7EE0134-6AD7-4695-B536-1959FE3A9672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "25DFFB5C-277F-4436-9BCE-643E98721C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "B8B80EB2-0B48-4AFA-8A09-26006CCDB022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AC8705E0-23ED-4817-8B69-21A4963C27F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "BAA156A9-A9FB-4D03-B0EE-4AA303D7A9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F733E585-075C-402A-9B34-1FE79DE4137E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "05C43439-C694-47AA-90AF-0AC2277E3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "B391F8A1-F102-4C88-864C-1386452CDAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC33C93-9947-4983-96A3-7DE223929817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B46DE141-1224-499E-AAE0-6CC0D5249B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "D8D07501-A07E-4743-A188-2E5BBC3C8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "64FD2A30-EE33-4680-9DCF-29283DBA3C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "B517F7A2-6FD1-4A7B-80E7-1167EC296591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "E6CA6EA5-DDAD-4882-AD1B-634C0CD741BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F14DCB07-9464-4DDE-98A1-FAE85DD60FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6EDFD679-4710-4A62-B254-E658EED4295B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1B81072-08A5-4EC6-B737-E35C505C1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A0748A9E-5737-48F9-BB66-6576AFE16198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "453E51D9-89A1-4A91-B218-05C45CC4E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "51542BA7-8151-4FC9-9C86-36CEB476B912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "5F95391C-0B75-47D2-9770-561E05414CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "10384675-B949-4B50-AF42-B5A3EE27250B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "7C0DB1C0-5749-4508-A265-C2138F7852E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA9977CF-575C-4A19-84C8-EBB68EBE88C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "87C525C5-E282-4EC6-956F-0C94DC11FC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F02A2A8-6312-4F6D-ABBF-952CA4C5E02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "DE54D1A3-FC2A-40DE-9177-50332208B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "170AE3DA-92C1-4D1D-9CAC-543C01FFF479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "2130C3C5-E4A5-41C3-89F0-C6FB4E47D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "74248527-B884-4134-95C8-DEAF3D774A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta17:*:*:beta:*:*:*",
            "matchCriteriaId" : "01A8AF9C-8BF6-4ADC-A85A-A5C1F9FFB2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "B4038D09-467C-4815-A429-F0E1E3E545E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6F273237-7223-4047-83B7-16A49B7E554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF26EE13-554C-4180-98A2-238D84E40927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "12688C9C-291D-4BF2-93F9-09AA323C52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "A7F7A437-D538-4B44-AC41-C95641A11A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "9BB61DCF-52DB-498D-8779-D565E548C285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "EE56BB77-B7F7-4BE7-AD9C-33888C5D01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "9DB49E1D-BCC8-4984-A81D-5DAC5E3DF168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "F775EA72-CCE3-4230-A666-EFDAA61F71FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E65BDEE-850A-41C6-8CFB-BD8B3A105CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "AF196429-FDED-4C3F-9F7D-0A2BF7DCAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "64B84326-5397-4C60-8007-F7E7D81DC661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "9A0A526A-9662-4E39-8BF6-E464BE1A2B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "712DACC2-A21E-429F-8A7B-86D8F7CE3468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E93F9F6-5B03-4F77-B8B4-AEC9E4011692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "C5B2B98E-804F-4525-B726-3F1DF2693F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "582E339F-678A-4377-8EE0-8F4208E3EF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "1BF1D945-6EAA-4FA7-8252-2FED079587F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9325DFF5-EA7B-4B8D-A227-4B1A59449CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0ECB28DA-3CA1-4011-9170-BFBF2ED3E091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A6399B0-471B-4B26-859C-3836F2A6B7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "131E2AE4-E35D-495D-8907-3B899BB8AC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "83601528-0DD9-4835-B6C0-0F341871CC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4AEB5AAF-73EB-4356-8C53-10E22B2F910E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EB199D6-E253-4EC2-BF0B-059F7B6662ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "94A586EB-B0E0-4190-88DF-3BCC04E5EF84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BF27B44-9AA7-4B91-9B4B-0E84418F5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "461744BD-3974-4C33-8514-0A917DC90C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A86FB2B-6915-49C0-B993-0711AAECA5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EF3DD36-2776-4CD2-A3F1-88872024D223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "D91D71ED-F08F-4DB5-B7DD-062E7C11435F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "62B5812A-FB52-4F4B-9A15-3AA5CD6562E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "83231EC0-E3F7-4E35-B165-487C2725B4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "A53AFFA6-7B98-47F2-9BD7-71C83A69CE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A42D3FB9-9197-4101-A729-876C490BD572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A5DE0C47-0C66-4EFE-AF82-1B22F4F54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "E587D10F-BEF8-4923-AF76-6DC3172880EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "155568EF-6A7E-423A-B5EA-D20E407B271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "7E94B119-8C75-43DF-A2DF-A5B3E04F0778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5348F94F-F6AE-4400-8AC7-036111EF43D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "57948A73-C9C5-4C24-947D-0A4659C7002E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "3532EE37-2D0F-496C-B5A8-F9315FFB4552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "2CAE7CC9-B91D-494C-B91A-497D6FE6B14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "623BBBF8-4121-466A-82C8-D179B02B3E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "648D010A-8B8D-42AA-8888-09E4E0FAA954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "8ADC7613-25E3-4CB8-A962-2775C20E4D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B0099F0-A275-4C65-9B79-041374F183DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE69800E-5CB5-4916-879C-51DE5E94489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "8C64EAFE-2B60-4D95-869F-4A2FC98B99C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "AB2045F1-AC39-4738-B3F0-33F00D23C921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E32589F8-2E87-40D2-BAD3-E6C1C088CA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "4868BAFD-BFE5-4361-855A-644B040E7233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4B6C25BF-5B2A-43C4-8918-E32BA9DD8A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB9917D3-D848-4D2B-8A44-B3723BA377DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "7046D95B-73CE-406B-ACC3-FD71F7DEC7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "D3BA5033-2C06-42FF-962E-48EBA2EBB469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "630D29DE-0FD7-4306-BA80-20D0791D334B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "08F94E42-07A1-480D-B6DD-D96AE38F1EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "FA4B3DE5-21DA-4185-AF74-AAA6DD89FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E602BEF9-E89D-40F7-BC6F-5C6F9F25BA97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "C06A8627-683D-4328-BE7A-4A33A4B736F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E3EF8240-D3F5-422C-B70A-90C6CBA4E622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "93CC792D-AE0B-498E-8374-5D09EF4E28FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "093D4EA8-B002-4AB4-97C9-CEE4D70BF3C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "4C778180-E7BF-4EF2-8B19-0388E23E1424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "0C0B2BC1-35F1-4A1D-B9B2-54426B4ADF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6BCAB620-465A-41FF-A064-FB638DD3A557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "6AFCB802-A275-444C-8245-D0397322125F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9F9B70E2-AAAD-4E61-AEB2-E5F635F6AAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6182074E-C467-448C-9299-B92CFE4EEBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "09EA8F36-7647-42D0-8675-34C002E0754D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "9CE2276A-9680-4B14-9636-806F7E4C1669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD150166-4C8D-47E3-989A-1A71A46C36A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF5CA6AD-FA4D-47DF-A684-5DAD7662EA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "B94F75B8-7C84-4727-9D18-114A815E1906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "4D94E03A-32EE-408F-81FA-4B9C25AA7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD495875-007C-4A90-B940-B62E6FA492CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F1B84E-8AF8-46E8-9DE9-00D1DE348C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BCCEFDFB-61E6-4846-8093-B5CEB0D8450C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC63647-B692-4BB9-9A3D-6F8DF19C3494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F0ED55-C8C6-47C1-859A-60046838B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A2D59BC-2EE8-4F9C-AB5B-B9D01B44F7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "933DFEBC-5568-431B-809D-AFAEFD08E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE920E80-C02B-4EC8-982F-ADE89C936684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CDAE3441-12BA-41F4-8A5A-B2EE844C86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "1443EA1B-D210-4219-8452-CBFD5FACBC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "948A4B4A-A11F-477E-BEC5-0D60C7E3570C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "98B2A052-5427-4B72-9F59-82F430836CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "CB6D636E-B51F-4648-A637-62B2603BA18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "3DA17871-7ED7-4D68-A46D-D15DC5B3235F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "705FE965-0415-4382-8CA1-A19DF3B5EF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "BC6EDCE3-D564-434F-9A7F-D4A6D579F8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "FB05E54B-9CF6-45A7-8D47-C98DB6D19E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "03CD1C5E-18F5-4C6D-B92C-C511C8C12D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF4ABB9D-69DF-42D5-AD60-F9CEEC1B6730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7B4DCCF5-E290-4BDA-AAB9-DF362A2EB7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "3AE1F3A2-8340-4ED7-B943-ACDA9617DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E033AB7-9987-4C30-849F-2495376CA4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "D87E9338-C7F6-43BA-886F-C30987ADBA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E24EB90F-FE81-4746-8741-8DC9346F79C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "D237956F-FC90-467E-A493-24EFDA1A9F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "F7AA9AB8-AB6F-43E2-B3E5-685EE9BFE7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "5BC240A1-431E-4A50-88DC-7AC9BC674254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "3F85AFD4-D397-4FDB-B762-521BD5FF14C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "D40CDCE1-3462-4D6C-A3C7-487F175264CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/105fee978d73b0ec23ff814a09d1c0c9ace95164",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20004",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-hvj9-g84x-5prx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/105fee978d73b0ec23ff814a09d1c0c9ace95164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-hvj9-g84x-5prx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23621",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-28T00:15:09.373",
      "lastModified" : "2024-11-21T07:46:33.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and version 3.1.0.beta2 on the `beta` and `tests-passed` branches, a malicious user can cause a regular expression denial of service using a carefully crafted user agent. This issue is patched in version 3.0.1 on the `stable` branch and version 3.1.0.beta2 on the `beta` and `tests-passed` branches. There are no known workarounds."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de la versión 3.0.1 en la rama \"stable\" y la versión 3.1.0.beta2 en las ramas \"beta\" y \"tests-passed\", un usuario malintencionado podía provocar una denegación de servicio de expresión regular utilizando un agente de usuario cuidadosamente manipulado. Este problema se solucionó en la versión 3.0.1 en la rama \"stable\" y en la versión 3.1.0.beta2 en las ramas \"beta\" y \"tests-passed\". No se conocen workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "C19D7945-EB52-43C0-B9B7-8C250FEDC451"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BF272688-1B08-4ABC-8002-66B59690F9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "A29A2465-B21D-4147-8292-DCF864D385B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBC3511E-3D68-42E2-B521-966FB429B640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "EC8B99C2-E267-4EC2-AF09-C9AD1EEE76D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "F21A22EE-081A-4489-A7F8-22E2DBC5B00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E6C8FB3-4B19-4510-B9A8-BCF9ED8ED7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6b:*:*:beta:*:*:*",
            "matchCriteriaId" : "5B827291-6483-4BB7-AF76-530B669B3ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "551E70ED-34FF-4989-91C9-6312DE4AB4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "204FB99A-8F11-4F04-9ED9-D94551790116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "46A8705C-0DF6-45D7-A38C-D2AB69194C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F59B0D8E-CFFB-4EBA-9D6A-526F9541BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D801A898-27D0-4076-8AF9-2B574FA11723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E7CBBD4A-4FDB-49E0-A5B6-22701C12BDF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9E7328DF-1924-4D0D-AC6B-1BA2D9CF1D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9421CE10-F226-4F2C-9DA7-EBB44B73C304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "1E71FBB6-ECAD-4581-9982-4C330D55FEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B631CCC-D456-49FF-B626-59C40BD4E167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE83F98D-F7AA-434B-8438-5B1FB96681B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB93F19B-9087-44CE-B884-45F434B7906F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5A88A5A3-EF1A-4E86-B074-CE0AC4325484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "0650B4C7-BCFE-4180-8FEF-4170A67E8BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "388F376E-46C9-4163-992D-95E3E4548D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D661090A-DA61-4BBE-85C3-6F48C053C84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "4A458242-D6DD-46E3-AF09-66BC87C5D7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8FACCBA-0D3B-4E6F-85A0-1CBD2B367F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F1D83D80-A0BE-4794-91A1-599AF558FB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "BD15B6B2-BFB3-4271-A507-48E9B827FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "E0003042-9B14-4E1B-800F-3D154FFE8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "E449EA29-81C8-4477-977E-746EACDBED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6FC6D4DF-8686-4054-A0C1-784E194171E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "C574C37D-3D99-4430-A3D5-199883556B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "F344E950-EFF9-4405-99D7-0B615C32873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "0A50DE1B-29EB-4014-B5B6-46CF493485F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "638B3E17-9F0A-4A96-B8D3-DDFEA518DBE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6D3E3AEB-8CD4-4EE7-9C81-2F74512071DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "254FF9D9-E696-41C8-B15B-DA089D2C6597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A5001E1-E716-43AA-8093-E0EED9E07909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "7FD16B13-516A-4D03-B1EF-A11156471A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E886D9EF-7FBD-4A24-A8B6-54E4B15403C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "369A83D1-AB7E-488D-9D74-26A69DFC1AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "3189CAC1-8970-4A33-B1E4-EB9EC3C19A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8733438-7625-400E-8237-BAE3D9F147AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "E87F1ED0-FD0D-4767-8E7C-325D920B79BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "97811266-A13C-4441-A1B5-BFA4B0862DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "3D09D157-4B19-4561-AB20-952F2EA9BA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "789087AF-0011-4E8F-A5AB-432A5F91BBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13b:*:*:beta:*:*:*",
            "matchCriteriaId" : "8EC9DC8C-56DC-482B-8847-BD0CFACA6F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "F63B3D13-24F6-4EFA-9528-DBF59D973A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F3A2388-18DE-46B0-BC13-7714E25D1B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "940B11CB-053F-4D60-8BC4-81CA659D2F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "83684DCB-B201-43B8-8B6E-6D0B13B7E437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "DF92E1FD-9B41-4A41-8B13-9D789C5729D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "351D224A-E67C-454C-AF43-8AD6CD44C685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E058CA6D-A295-4CAD-8C85-E8C83BAFEBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF99C114-1BCA-4400-BC7E-EDA1F55559CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBA1EFBA-5A26-46A0-B2A6-53B9924253BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE5B90B0-B6CC-4189-9C98-CF29017A47B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1818628-5F4E-4E5D-974A-0BEBCE821209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "14785840-3BC0-4030-AE44-E3013DF19AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "90444209-684C-4BF8-9BCF-6B29EA0A0593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "668E15DE-8CF2-4AF3-B13A-9080046B1E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "1191861C-1B2C-4762-805D-FCDC20F84D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "3CB518E5-CCC0-46B8-848E-C492BCF7E9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA1F68FE-67EA-4408-8E0F-558B0FAFFF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "66E9F05C-799A-43D3-9367-FCA86166BD65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "85DB4097-6EFC-4017-ADFD-56EE49BB2F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD283EA2-9026-497F-A7DE-E16CE0764ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "ED19DDDF-A29E-4C3F-A818-23D7E37B6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "508D0052-B7D7-4A08-8BB0-7D7A1EDAB96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "3E50BFB0-67D3-4EDE-93FE-85EAF605461E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "D7EE0134-6AD7-4695-B536-1959FE3A9672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "25DFFB5C-277F-4436-9BCE-643E98721C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "B8B80EB2-0B48-4AFA-8A09-26006CCDB022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AC8705E0-23ED-4817-8B69-21A4963C27F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "BAA156A9-A9FB-4D03-B0EE-4AA303D7A9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F733E585-075C-402A-9B34-1FE79DE4137E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "05C43439-C694-47AA-90AF-0AC2277E3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "B391F8A1-F102-4C88-864C-1386452CDAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC33C93-9947-4983-96A3-7DE223929817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B46DE141-1224-499E-AAE0-6CC0D5249B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "D8D07501-A07E-4743-A188-2E5BBC3C8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "64FD2A30-EE33-4680-9DCF-29283DBA3C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "B517F7A2-6FD1-4A7B-80E7-1167EC296591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "E6CA6EA5-DDAD-4882-AD1B-634C0CD741BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F14DCB07-9464-4DDE-98A1-FAE85DD60FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6EDFD679-4710-4A62-B254-E658EED4295B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1B81072-08A5-4EC6-B737-E35C505C1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A0748A9E-5737-48F9-BB66-6576AFE16198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "453E51D9-89A1-4A91-B218-05C45CC4E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "51542BA7-8151-4FC9-9C86-36CEB476B912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "5F95391C-0B75-47D2-9770-561E05414CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "10384675-B949-4B50-AF42-B5A3EE27250B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "7C0DB1C0-5749-4508-A265-C2138F7852E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA9977CF-575C-4A19-84C8-EBB68EBE88C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "87C525C5-E282-4EC6-956F-0C94DC11FC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F02A2A8-6312-4F6D-ABBF-952CA4C5E02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "DE54D1A3-FC2A-40DE-9177-50332208B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "170AE3DA-92C1-4D1D-9CAC-543C01FFF479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "2130C3C5-E4A5-41C3-89F0-C6FB4E47D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "74248527-B884-4134-95C8-DEAF3D774A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta17:*:*:beta:*:*:*",
            "matchCriteriaId" : "01A8AF9C-8BF6-4ADC-A85A-A5C1F9FFB2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "B4038D09-467C-4815-A429-F0E1E3E545E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6F273237-7223-4047-83B7-16A49B7E554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF26EE13-554C-4180-98A2-238D84E40927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "12688C9C-291D-4BF2-93F9-09AA323C52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "A7F7A437-D538-4B44-AC41-C95641A11A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "9BB61DCF-52DB-498D-8779-D565E548C285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "EE56BB77-B7F7-4BE7-AD9C-33888C5D01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "9DB49E1D-BCC8-4984-A81D-5DAC5E3DF168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "F775EA72-CCE3-4230-A666-EFDAA61F71FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E65BDEE-850A-41C6-8CFB-BD8B3A105CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "AF196429-FDED-4C3F-9F7D-0A2BF7DCAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "64B84326-5397-4C60-8007-F7E7D81DC661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "9A0A526A-9662-4E39-8BF6-E464BE1A2B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "712DACC2-A21E-429F-8A7B-86D8F7CE3468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E93F9F6-5B03-4F77-B8B4-AEC9E4011692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "C5B2B98E-804F-4525-B726-3F1DF2693F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "582E339F-678A-4377-8EE0-8F4208E3EF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "1BF1D945-6EAA-4FA7-8252-2FED079587F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9325DFF5-EA7B-4B8D-A227-4B1A59449CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0ECB28DA-3CA1-4011-9170-BFBF2ED3E091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A6399B0-471B-4B26-859C-3836F2A6B7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "131E2AE4-E35D-495D-8907-3B899BB8AC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "83601528-0DD9-4835-B6C0-0F341871CC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4AEB5AAF-73EB-4356-8C53-10E22B2F910E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EB199D6-E253-4EC2-BF0B-059F7B6662ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "94A586EB-B0E0-4190-88DF-3BCC04E5EF84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BF27B44-9AA7-4B91-9B4B-0E84418F5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "461744BD-3974-4C33-8514-0A917DC90C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A86FB2B-6915-49C0-B993-0711AAECA5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EF3DD36-2776-4CD2-A3F1-88872024D223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "D91D71ED-F08F-4DB5-B7DD-062E7C11435F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "62B5812A-FB52-4F4B-9A15-3AA5CD6562E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "83231EC0-E3F7-4E35-B165-487C2725B4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "A53AFFA6-7B98-47F2-9BD7-71C83A69CE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A42D3FB9-9197-4101-A729-876C490BD572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A5DE0C47-0C66-4EFE-AF82-1B22F4F54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "E587D10F-BEF8-4923-AF76-6DC3172880EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "155568EF-6A7E-423A-B5EA-D20E407B271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "7E94B119-8C75-43DF-A2DF-A5B3E04F0778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5348F94F-F6AE-4400-8AC7-036111EF43D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "57948A73-C9C5-4C24-947D-0A4659C7002E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "3532EE37-2D0F-496C-B5A8-F9315FFB4552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "2CAE7CC9-B91D-494C-B91A-497D6FE6B14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "623BBBF8-4121-466A-82C8-D179B02B3E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "648D010A-8B8D-42AA-8888-09E4E0FAA954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "8ADC7613-25E3-4CB8-A962-2775C20E4D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B0099F0-A275-4C65-9B79-041374F183DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE69800E-5CB5-4916-879C-51DE5E94489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "8C64EAFE-2B60-4D95-869F-4A2FC98B99C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "AB2045F1-AC39-4738-B3F0-33F00D23C921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E32589F8-2E87-40D2-BAD3-E6C1C088CA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "4868BAFD-BFE5-4361-855A-644B040E7233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4B6C25BF-5B2A-43C4-8918-E32BA9DD8A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB9917D3-D848-4D2B-8A44-B3723BA377DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "7046D95B-73CE-406B-ACC3-FD71F7DEC7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "D3BA5033-2C06-42FF-962E-48EBA2EBB469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "630D29DE-0FD7-4306-BA80-20D0791D334B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "08F94E42-07A1-480D-B6DD-D96AE38F1EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "FA4B3DE5-21DA-4185-AF74-AAA6DD89FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E602BEF9-E89D-40F7-BC6F-5C6F9F25BA97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "C06A8627-683D-4328-BE7A-4A33A4B736F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E3EF8240-D3F5-422C-B70A-90C6CBA4E622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "93CC792D-AE0B-498E-8374-5D09EF4E28FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "093D4EA8-B002-4AB4-97C9-CEE4D70BF3C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "4C778180-E7BF-4EF2-8B19-0388E23E1424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "0C0B2BC1-35F1-4A1D-B9B2-54426B4ADF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6BCAB620-465A-41FF-A064-FB638DD3A557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "6AFCB802-A275-444C-8245-D0397322125F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9F9B70E2-AAAD-4E61-AEB2-E5F635F6AAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6182074E-C467-448C-9299-B92CFE4EEBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "09EA8F36-7647-42D0-8675-34C002E0754D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "9CE2276A-9680-4B14-9636-806F7E4C1669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD150166-4C8D-47E3-989A-1A71A46C36A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF5CA6AD-FA4D-47DF-A684-5DAD7662EA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "B94F75B8-7C84-4727-9D18-114A815E1906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "4D94E03A-32EE-408F-81FA-4B9C25AA7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD495875-007C-4A90-B940-B62E6FA492CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F1B84E-8AF8-46E8-9DE9-00D1DE348C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BCCEFDFB-61E6-4846-8093-B5CEB0D8450C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC63647-B692-4BB9-9A3D-6F8DF19C3494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F0ED55-C8C6-47C1-859A-60046838B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A2D59BC-2EE8-4F9C-AB5B-B9D01B44F7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "933DFEBC-5568-431B-809D-AFAEFD08E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE920E80-C02B-4EC8-982F-ADE89C936684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CDAE3441-12BA-41F4-8A5A-B2EE844C86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "1443EA1B-D210-4219-8452-CBFD5FACBC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "948A4B4A-A11F-477E-BEC5-0D60C7E3570C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "98B2A052-5427-4B72-9F59-82F430836CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "CB6D636E-B51F-4648-A637-62B2603BA18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "3DA17871-7ED7-4D68-A46D-D15DC5B3235F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "705FE965-0415-4382-8CA1-A19DF3B5EF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "BC6EDCE3-D564-434F-9A7F-D4A6D579F8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "FB05E54B-9CF6-45A7-8D47-C98DB6D19E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "03CD1C5E-18F5-4C6D-B92C-C511C8C12D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF4ABB9D-69DF-42D5-AD60-F9CEEC1B6730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7B4DCCF5-E290-4BDA-AAB9-DF362A2EB7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "3AE1F3A2-8340-4ED7-B943-ACDA9617DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E033AB7-9987-4C30-849F-2495376CA4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "D87E9338-C7F6-43BA-886F-C30987ADBA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E24EB90F-FE81-4746-8741-8DC9346F79C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "D237956F-FC90-467E-A493-24EFDA1A9F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "F7AA9AB8-AB6F-43E2-B3E5-685EE9BFE7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "5BC240A1-431E-4A50-88DC-7AC9BC674254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "3F85AFD4-D397-4FDB-B762-521BD5FF14C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "D40CDCE1-3462-4D6C-A3C7-487F175264CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/6d92c3cbdac431db99a450f360a3048bb3aaf458",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20002",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-mrfp-54hf-jrcv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/6d92c3cbdac431db99a450f360a3048bb3aaf458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-mrfp-54hf-jrcv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23624",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-28T00:15:09.470",
      "lastModified" : "2024-11-21T07:46:33.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and version 3.1.0.beta2 on the `beta` and `tests-passed` branches, someone can use the `exclude_tag param` to filter out topics and deduce which ones were using a specific hidden tag. This affects any Discourse site using hidden tags in public categories. This issue is patched in version 3.0.1 on the `stable` branch and version 3.1.0.beta2 on the `beta` and `tests-passed` branches. As a workaround, secure any categories that are using hidden tags, change any existing hidden tags to not include private data, or remove any hidden tags currently in use."
      }, {
        "lang" : "es",
        "value" : "Discourse es una plataforma de discusión de código abierto. Antes de la versión 3.0.1 en la rama \"stable\" y la versión 3.1.0.beta2 en las ramas \"beta\" y \"tests-passed\", alguien podía usar el parámetro \"exclude_tag\" para filtrar temas y deducir cuáles estaban usando una etiqueta oculta específica. Esto afecta a cualquier sitio de Discourse que utilice etiquetas ocultas en categorías públicas. Este problema se solucionó en la versión 3.0.1 en la rama \"stable\" y en la versión 3.1.0.beta2 en las ramas \"beta\" y \"tests-passed\". Como workaround, proteja las categorías que utilicen etiquetas ocultas, cambie las etiquetas ocultas existentes para que no incluyan datos privados o elimine las etiquetas ocultas que se estén utilizando actualmente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "C19D7945-EB52-43C0-B9B7-8C250FEDC451"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BF272688-1B08-4ABC-8002-66B59690F9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "A29A2465-B21D-4147-8292-DCF864D385B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBC3511E-3D68-42E2-B521-966FB429B640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "EC8B99C2-E267-4EC2-AF09-C9AD1EEE76D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "F21A22EE-081A-4489-A7F8-22E2DBC5B00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E6C8FB3-4B19-4510-B9A8-BCF9ED8ED7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6b:*:*:beta:*:*:*",
            "matchCriteriaId" : "5B827291-6483-4BB7-AF76-530B669B3ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "551E70ED-34FF-4989-91C9-6312DE4AB4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "204FB99A-8F11-4F04-9ED9-D94551790116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "46A8705C-0DF6-45D7-A38C-D2AB69194C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F59B0D8E-CFFB-4EBA-9D6A-526F9541BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D801A898-27D0-4076-8AF9-2B574FA11723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E7CBBD4A-4FDB-49E0-A5B6-22701C12BDF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9E7328DF-1924-4D0D-AC6B-1BA2D9CF1D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9421CE10-F226-4F2C-9DA7-EBB44B73C304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "1E71FBB6-ECAD-4581-9982-4C330D55FEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B631CCC-D456-49FF-B626-59C40BD4E167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE83F98D-F7AA-434B-8438-5B1FB96681B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB93F19B-9087-44CE-B884-45F434B7906F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5A88A5A3-EF1A-4E86-B074-CE0AC4325484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "0650B4C7-BCFE-4180-8FEF-4170A67E8BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "388F376E-46C9-4163-992D-95E3E4548D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D661090A-DA61-4BBE-85C3-6F48C053C84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "4A458242-D6DD-46E3-AF09-66BC87C5D7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8FACCBA-0D3B-4E6F-85A0-1CBD2B367F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F1D83D80-A0BE-4794-91A1-599AF558FB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "BD15B6B2-BFB3-4271-A507-48E9B827FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "E0003042-9B14-4E1B-800F-3D154FFE8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "E449EA29-81C8-4477-977E-746EACDBED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6FC6D4DF-8686-4054-A0C1-784E194171E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "C574C37D-3D99-4430-A3D5-199883556B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "F344E950-EFF9-4405-99D7-0B615C32873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "0A50DE1B-29EB-4014-B5B6-46CF493485F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "638B3E17-9F0A-4A96-B8D3-DDFEA518DBE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6D3E3AEB-8CD4-4EE7-9C81-2F74512071DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "254FF9D9-E696-41C8-B15B-DA089D2C6597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A5001E1-E716-43AA-8093-E0EED9E07909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "7FD16B13-516A-4D03-B1EF-A11156471A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E886D9EF-7FBD-4A24-A8B6-54E4B15403C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "369A83D1-AB7E-488D-9D74-26A69DFC1AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "3189CAC1-8970-4A33-B1E4-EB9EC3C19A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8733438-7625-400E-8237-BAE3D9F147AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "E87F1ED0-FD0D-4767-8E7C-325D920B79BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "97811266-A13C-4441-A1B5-BFA4B0862DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "3D09D157-4B19-4561-AB20-952F2EA9BA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "789087AF-0011-4E8F-A5AB-432A5F91BBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13b:*:*:beta:*:*:*",
            "matchCriteriaId" : "8EC9DC8C-56DC-482B-8847-BD0CFACA6F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "F63B3D13-24F6-4EFA-9528-DBF59D973A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F3A2388-18DE-46B0-BC13-7714E25D1B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "940B11CB-053F-4D60-8BC4-81CA659D2F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "83684DCB-B201-43B8-8B6E-6D0B13B7E437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "DF92E1FD-9B41-4A41-8B13-9D789C5729D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "351D224A-E67C-454C-AF43-8AD6CD44C685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E058CA6D-A295-4CAD-8C85-E8C83BAFEBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF99C114-1BCA-4400-BC7E-EDA1F55559CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBA1EFBA-5A26-46A0-B2A6-53B9924253BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE5B90B0-B6CC-4189-9C98-CF29017A47B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1818628-5F4E-4E5D-974A-0BEBCE821209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "14785840-3BC0-4030-AE44-E3013DF19AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "90444209-684C-4BF8-9BCF-6B29EA0A0593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "668E15DE-8CF2-4AF3-B13A-9080046B1E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "1191861C-1B2C-4762-805D-FCDC20F84D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "3CB518E5-CCC0-46B8-848E-C492BCF7E9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA1F68FE-67EA-4408-8E0F-558B0FAFFF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "66E9F05C-799A-43D3-9367-FCA86166BD65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "85DB4097-6EFC-4017-ADFD-56EE49BB2F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD283EA2-9026-497F-A7DE-E16CE0764ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "ED19DDDF-A29E-4C3F-A818-23D7E37B6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "508D0052-B7D7-4A08-8BB0-7D7A1EDAB96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "3E50BFB0-67D3-4EDE-93FE-85EAF605461E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "D7EE0134-6AD7-4695-B536-1959FE3A9672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "25DFFB5C-277F-4436-9BCE-643E98721C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "B8B80EB2-0B48-4AFA-8A09-26006CCDB022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AC8705E0-23ED-4817-8B69-21A4963C27F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "BAA156A9-A9FB-4D03-B0EE-4AA303D7A9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F733E585-075C-402A-9B34-1FE79DE4137E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "05C43439-C694-47AA-90AF-0AC2277E3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "B391F8A1-F102-4C88-864C-1386452CDAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC33C93-9947-4983-96A3-7DE223929817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B46DE141-1224-499E-AAE0-6CC0D5249B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "D8D07501-A07E-4743-A188-2E5BBC3C8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "64FD2A30-EE33-4680-9DCF-29283DBA3C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "B517F7A2-6FD1-4A7B-80E7-1167EC296591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "E6CA6EA5-DDAD-4882-AD1B-634C0CD741BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F14DCB07-9464-4DDE-98A1-FAE85DD60FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6EDFD679-4710-4A62-B254-E658EED4295B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1B81072-08A5-4EC6-B737-E35C505C1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A0748A9E-5737-48F9-BB66-6576AFE16198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "453E51D9-89A1-4A91-B218-05C45CC4E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "51542BA7-8151-4FC9-9C86-36CEB476B912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "5F95391C-0B75-47D2-9770-561E05414CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "10384675-B949-4B50-AF42-B5A3EE27250B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "7C0DB1C0-5749-4508-A265-C2138F7852E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA9977CF-575C-4A19-84C8-EBB68EBE88C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "87C525C5-E282-4EC6-956F-0C94DC11FC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F02A2A8-6312-4F6D-ABBF-952CA4C5E02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "DE54D1A3-FC2A-40DE-9177-50332208B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "170AE3DA-92C1-4D1D-9CAC-543C01FFF479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "2130C3C5-E4A5-41C3-89F0-C6FB4E47D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "74248527-B884-4134-95C8-DEAF3D774A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta17:*:*:beta:*:*:*",
            "matchCriteriaId" : "01A8AF9C-8BF6-4ADC-A85A-A5C1F9FFB2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "B4038D09-467C-4815-A429-F0E1E3E545E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6F273237-7223-4047-83B7-16A49B7E554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF26EE13-554C-4180-98A2-238D84E40927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "12688C9C-291D-4BF2-93F9-09AA323C52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "A7F7A437-D538-4B44-AC41-C95641A11A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "9BB61DCF-52DB-498D-8779-D565E548C285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "EE56BB77-B7F7-4BE7-AD9C-33888C5D01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "9DB49E1D-BCC8-4984-A81D-5DAC5E3DF168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "F775EA72-CCE3-4230-A666-EFDAA61F71FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E65BDEE-850A-41C6-8CFB-BD8B3A105CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "AF196429-FDED-4C3F-9F7D-0A2BF7DCAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "64B84326-5397-4C60-8007-F7E7D81DC661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "9A0A526A-9662-4E39-8BF6-E464BE1A2B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "712DACC2-A21E-429F-8A7B-86D8F7CE3468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E93F9F6-5B03-4F77-B8B4-AEC9E4011692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "C5B2B98E-804F-4525-B726-3F1DF2693F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "582E339F-678A-4377-8EE0-8F4208E3EF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "1BF1D945-6EAA-4FA7-8252-2FED079587F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9325DFF5-EA7B-4B8D-A227-4B1A59449CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0ECB28DA-3CA1-4011-9170-BFBF2ED3E091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A6399B0-471B-4B26-859C-3836F2A6B7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "131E2AE4-E35D-495D-8907-3B899BB8AC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "83601528-0DD9-4835-B6C0-0F341871CC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4AEB5AAF-73EB-4356-8C53-10E22B2F910E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EB199D6-E253-4EC2-BF0B-059F7B6662ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "94A586EB-B0E0-4190-88DF-3BCC04E5EF84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BF27B44-9AA7-4B91-9B4B-0E84418F5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "461744BD-3974-4C33-8514-0A917DC90C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A86FB2B-6915-49C0-B993-0711AAECA5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EF3DD36-2776-4CD2-A3F1-88872024D223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "D91D71ED-F08F-4DB5-B7DD-062E7C11435F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "62B5812A-FB52-4F4B-9A15-3AA5CD6562E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "83231EC0-E3F7-4E35-B165-487C2725B4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "A53AFFA6-7B98-47F2-9BD7-71C83A69CE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A42D3FB9-9197-4101-A729-876C490BD572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A5DE0C47-0C66-4EFE-AF82-1B22F4F54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "E587D10F-BEF8-4923-AF76-6DC3172880EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "155568EF-6A7E-423A-B5EA-D20E407B271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "7E94B119-8C75-43DF-A2DF-A5B3E04F0778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5348F94F-F6AE-4400-8AC7-036111EF43D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "57948A73-C9C5-4C24-947D-0A4659C7002E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "3532EE37-2D0F-496C-B5A8-F9315FFB4552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "2CAE7CC9-B91D-494C-B91A-497D6FE6B14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "623BBBF8-4121-466A-82C8-D179B02B3E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "648D010A-8B8D-42AA-8888-09E4E0FAA954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "8ADC7613-25E3-4CB8-A962-2775C20E4D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B0099F0-A275-4C65-9B79-041374F183DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE69800E-5CB5-4916-879C-51DE5E94489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "8C64EAFE-2B60-4D95-869F-4A2FC98B99C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "AB2045F1-AC39-4738-B3F0-33F00D23C921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E32589F8-2E87-40D2-BAD3-E6C1C088CA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "4868BAFD-BFE5-4361-855A-644B040E7233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4B6C25BF-5B2A-43C4-8918-E32BA9DD8A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB9917D3-D848-4D2B-8A44-B3723BA377DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "7046D95B-73CE-406B-ACC3-FD71F7DEC7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "D3BA5033-2C06-42FF-962E-48EBA2EBB469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "630D29DE-0FD7-4306-BA80-20D0791D334B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "08F94E42-07A1-480D-B6DD-D96AE38F1EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "FA4B3DE5-21DA-4185-AF74-AAA6DD89FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E602BEF9-E89D-40F7-BC6F-5C6F9F25BA97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "C06A8627-683D-4328-BE7A-4A33A4B736F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E3EF8240-D3F5-422C-B70A-90C6CBA4E622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "93CC792D-AE0B-498E-8374-5D09EF4E28FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "093D4EA8-B002-4AB4-97C9-CEE4D70BF3C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "4C778180-E7BF-4EF2-8B19-0388E23E1424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "0C0B2BC1-35F1-4A1D-B9B2-54426B4ADF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6BCAB620-465A-41FF-A064-FB638DD3A557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "6AFCB802-A275-444C-8245-D0397322125F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9F9B70E2-AAAD-4E61-AEB2-E5F635F6AAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6182074E-C467-448C-9299-B92CFE4EEBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "09EA8F36-7647-42D0-8675-34C002E0754D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "9CE2276A-9680-4B14-9636-806F7E4C1669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD150166-4C8D-47E3-989A-1A71A46C36A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF5CA6AD-FA4D-47DF-A684-5DAD7662EA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "B94F75B8-7C84-4727-9D18-114A815E1906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "4D94E03A-32EE-408F-81FA-4B9C25AA7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD495875-007C-4A90-B940-B62E6FA492CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F1B84E-8AF8-46E8-9DE9-00D1DE348C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BCCEFDFB-61E6-4846-8093-B5CEB0D8450C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC63647-B692-4BB9-9A3D-6F8DF19C3494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F0ED55-C8C6-47C1-859A-60046838B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A2D59BC-2EE8-4F9C-AB5B-B9D01B44F7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "933DFEBC-5568-431B-809D-AFAEFD08E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE920E80-C02B-4EC8-982F-ADE89C936684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CDAE3441-12BA-41F4-8A5A-B2EE844C86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "1443EA1B-D210-4219-8452-CBFD5FACBC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "948A4B4A-A11F-477E-BEC5-0D60C7E3570C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "98B2A052-5427-4B72-9F59-82F430836CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "CB6D636E-B51F-4648-A637-62B2603BA18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "3DA17871-7ED7-4D68-A46D-D15DC5B3235F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "705FE965-0415-4382-8CA1-A19DF3B5EF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "BC6EDCE3-D564-434F-9A7F-D4A6D579F8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "FB05E54B-9CF6-45A7-8D47-C98DB6D19E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "03CD1C5E-18F5-4C6D-B92C-C511C8C12D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF4ABB9D-69DF-42D5-AD60-F9CEEC1B6730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7B4DCCF5-E290-4BDA-AAB9-DF362A2EB7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "3AE1F3A2-8340-4ED7-B943-ACDA9617DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E033AB7-9987-4C30-849F-2495376CA4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "D87E9338-C7F6-43BA-886F-C30987ADBA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E24EB90F-FE81-4746-8741-8DC9346F79C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "D237956F-FC90-467E-A493-24EFDA1A9F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "F7AA9AB8-AB6F-43E2-B3E5-685EE9BFE7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "5BC240A1-431E-4A50-88DC-7AC9BC674254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "3F85AFD4-D397-4FDB-B762-521BD5FF14C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "D40CDCE1-3462-4D6C-A3C7-487F175264CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/f55e0fe7910149c431861c18ce407d1be0d6091a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20006",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-qgj5-g5vf-fm7q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/f55e0fe7910149c431861c18ce407d1be0d6091a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-qgj5-g5vf-fm7q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23627",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-28T00:15:09.577",
      "lastModified" : "2024-11-21T07:46:33.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sanitize is an allowlist-based HTML and CSS sanitizer. Versions 5.0.0 and later, prior to 6.0.1, are vulnerable to Cross-site Scripting. When Sanitize is configured with a custom allowlist that allows `noscript` elements, attackers are able to include arbitrary HTML, resulting in XSS (cross-site scripting) or other undesired behavior when that HTML is rendered in a browser. The default configurations do not allow `noscript` elements and are not vulnerable. This issue only affects users who are using a custom config that adds `noscript` to the element allowlist. This issue has been patched in version 6.0.1. Users who are unable to upgrade can prevent this issue by using one of Sanitize's default configs or by ensuring that their custom config does not include `noscript` in the element allowlist."
      }, {
        "lang" : "es",
        "value" : "Sanitize es un desinfectante de HTML y CSS basado en listas de permitidos. Las versiones 5.0.0 y posteriores, anteriores a la 6.0.1, son vulnerables a cross-site scripting. Cuando Sanitize se configura con una lista de permitidos personalizada que permite elementos \"noscript\", los atacantes pueden incluir HTML arbitrario, lo que genera XSS (scripting entre sitios) u otro comportamiento no deseado cuando ese HTML se representa en un navegador. Las configuraciones predeterminadas no permiten elementos \"noscript\" y no son vulnerables. Este problema solo afecta a los usuarios que utilizan una configuración personalizada que agrega \"noscript\" a la lista de elementos permitidos. Este problema se solucionó en la versión 6.0.1. Los usuarios que no pueden actualizar pueden evitar este problema usando una de las configuraciones predeterminadas de Sanitize o asegurándose de que su configuración personalizada no incluya \"noscript\" en la lista de elementos permitidos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sanitize_project:sanitize:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "6.0.1",
            "matchCriteriaId" : "26E22D53-17FD-43AE-9997-3D67C7A8E4A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rgrove/sanitize/security/advisories/GHSA-fw3g-2h3j-qmm7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rgrove/sanitize/security/advisories/GHSA-fw3g-2h3j-qmm7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23628",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-28T02:15:07.797",
      "lastModified" : "2024-11-21T07:46:34.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Metabase is an open source data analytics platform. Affected versions are subject to Exposure of Sensitive Information to an Unauthorized Actor. Sandboxed users shouldn't be able to view data about other Metabase users anywhere in the Metabase application. However, when a sandbox user views the settings for a dashboard subscription, and another user has added users to that subscription, the sandboxed user is able to view the list of recipients for that subscription. This issue is patched in versions 0.43.7.1, 1.43.7.1, 0.44.6.1, 1.44.6.1, 0.45.2.1, and 1.45.2.1. There are no workarounds.\n"
      }, {
        "lang" : "es",
        "value" : "Metabase es una plataforma de análisis de datos de código abierto. Las versiones afectadas están sujetas a la exposición de información confidencial a un actor no autorizado. Los usuarios del espacio aislado no deberían poder ver datos sobre otros usuarios de Metabase en ninguna parte de la aplicación Metabase. Sin embargo, cuando un usuario del espacio aislado ve la configuración de una suscripción al panel y otro usuario ha agregado usuarios a esa suscripción, el usuario del espacio aislado puede ver la lista de destinatarios de esa suscripción. Este problema se solucionó en las versiones 0.43.7.1, 1.43.7.1, 0.44.6.1, 1.44.6.1, 0.45.2.1 y 1.45.2.1. No hay workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.43.7.1",
            "matchCriteriaId" : "B739CE77-5465-4018-9A7D-EFE7E2C6912C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.44.0",
            "versionEndExcluding" : "0.44.6.1",
            "matchCriteriaId" : "DF00E09E-C915-4D5E-BF06-D52E044752C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.45.0",
            "versionEndExcluding" : "0.45.2.1",
            "matchCriteriaId" : "D4A024C8-A76F-4D31-ACAF-E47E19BC5FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.43.7.1",
            "matchCriteriaId" : "79CF2F09-CA1A-4A02-A529-8E879C011505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.44.0",
            "versionEndExcluding" : "1.44.6.1",
            "matchCriteriaId" : "2A2796BF-3609-4633-9465-671B1A6BDF44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.45.0",
            "versionEndExcluding" : "1.45.2.1",
            "matchCriteriaId" : "79B81DBB-484A-466C-95B3-CD91F7390D31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/metabase/metabase/security/advisories/GHSA-492f-qxr3-9rrv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/metabase/metabase/security/advisories/GHSA-492f-qxr3-9rrv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23629",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-01-28T02:15:07.900",
      "lastModified" : "2024-11-21T07:46:34.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Metabase is an open source data analytics platform. Affected versions are subject to Improper Privilege Management. As intended, recipients of dashboards subscriptions can view the data as seen by the creator of that subscription. This allows someone with greater access to data to create a dashboard subscription, add people with fewer data privileges, and all recipients of that subscription receive the same data: the charts shown in the email would abide by the privileges of the user who created the subscription. The issue is users with fewer privileges who can view a dashboard are able to add themselves to a dashboard subscription created by someone with additional data privileges, and thus get access to more data via email. This issue is patched in versions 0.43.7.1, 1.43.7.1, 0.44.6.1, 1.44.6.1, 0.45.2.1, and 1.45.2.1. On Metabase instances running Enterprise Edition, admins can disable the \"Subscriptions and Alerts\" permission for groups that have restricted data permissions, as a workaround.\n"
      }, {
        "lang" : "es",
        "value" : "Metabase es una plataforma de análisis de datos de código abierto. Las versiones afectadas están sujetas a una gestión de privilegios inadecuada. Según lo previsto, los destinatarios de las suscripciones a paneles pueden ver los datos tal como los ve el creador de esa suscripción. Esto permite que alguien con mayor acceso a los datos cree una suscripción al panel, agregue personas con menos privilegios de datos y todos los destinatarios de esa suscripción reciban los mismos datos: los gráficos que se muestran en el correo electrónico cumplirán con los privilegios del usuario que creó la suscripción. . El problema es que los usuarios con menos privilegios que pueden ver un panel pueden agregarse a una suscripción al panel creada por alguien con privilegios de datos adicionales y, por lo tanto, obtener acceso a más datos por correo electrónico. Este problema se solucionó en las versiones 0.43.7.1, 1.43.7.1, 0.44.6.1, 1.44.6.1, 0.45.2.1 y 1.45.2.1. En instancias de Metabase que ejecutan Enterprise Edition, los administradores pueden desactivar el permiso \"Suscripciones y alertas\" para grupos que tienen permisos de datos restringidos, como workaround."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.43.7.1",
            "matchCriteriaId" : "B739CE77-5465-4018-9A7D-EFE7E2C6912C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.44.0",
            "versionEndExcluding" : "0.44.6.1",
            "matchCriteriaId" : "DF00E09E-C915-4D5E-BF06-D52E044752C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.45.0",
            "versionEndExcluding" : "0.45.2.1",
            "matchCriteriaId" : "D4A024C8-A76F-4D31-ACAF-E47E19BC5FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.43.7.1",
            "matchCriteriaId" : "79CF2F09-CA1A-4A02-A529-8E879C011505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.44.0",
            "versionEndExcluding" : "1.44.6.1",
            "matchCriteriaId" : "2A2796BF-3609-4633-9465-671B1A6BDF44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.45.0",
            "versionEndExcluding" : "1.45.2.1",
            "matchCriteriaId" : "79B81DBB-484A-466C-95B3-CD91F7390D31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/metabase/metabase/security/advisories/GHSA-ch8f-hhq9-7gv5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/metabase/metabase/security/advisories/GHSA-ch8f-hhq9-7gv5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0560",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-28T17:15:09.003",
      "lastModified" : "2024-11-21T07:37:24.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management System 1.0. This issue affects some unknown processing of the file admin/practice_pdf.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219701 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en SourceCodester Online Tours &amp; Travels Management System 1.0. Este problema afecta un procesamiento desconocido del archivo admin/practice_pdf.php. La manipulación del argumento id conduce a la inyección SQL. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-219701."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_practice_pdf_id.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219701",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219701",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_practice_pdf_id.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0561",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-28T17:15:09.147",
      "lastModified" : "2024-11-21T07:37:24.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file /user/s.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-219702 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en SourceCodester Online Tours &amp; Travels Management System 1.0. Una función desconocida del archivo /user/s.php es afectada por esta vulnerabilidad. La manipulación del argumento id conduce a la inyección de SQL. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede utilizarse. VDB-219702 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/_user_s_id.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219702",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219702",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/_user_s_id.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0562",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-28T23:15:08.810",
      "lastModified" : "2024-11-21T07:37:24.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219716."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en PHPGurukul Bank Locker Management System 1.0. Ha sido calificada como crítica. Una función desconocida del archivo index.php del componente Login es afectada por esta vulnerabilidad. La manipulación del argumento nombre de usuario conduce a la inyección de SQL. El ataque puede lanzarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse. El identificador de esta vulnerabilidad es VDB-219716."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:bank_locker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8782F27-C73C-497B-92B3-2F9DC551C233"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ctflearner/Vulnerability/blob/main/Bank_Locker_Management_System/Bank%20Locker%20Management%20System-SQL%20.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219716",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.219716",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ctflearner/Vulnerability/blob/main/Bank_Locker_Management_System/Bank%20Locker%20Management%20System-SQL%20.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.219716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0563",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-28T23:15:08.897",
      "lastModified" : "2024-11-21T07:37:24.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219717 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en PHPGurukul Bank Locker Management System 1.0 y se ha clasificado como problemática. Una parte desconocida del archivo add-locker-form.php del componente Assign Locker afecta a una parte desconocida. La manipulación del argumento ahname conduce a cross-site scripting. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-219717."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:bank_locker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8782F27-C73C-497B-92B3-2F9DC551C233"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ctflearner/Vulnerability/blob/main/Bank_Locker_Management_System/BLMS_XSS_IN_ADMIN_BROWSER.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219717",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.219717",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ctflearner/Vulnerability/blob/main/Bank_Locker_Management_System/BLMS_XSS_IN_ADMIN_BROWSER.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.219717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0564",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-29T01:15:08.773",
      "lastModified" : "2024-11-21T07:37:24.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10.\n\n"
      }, {
        "lang" : "es",
        "value" : "Requisitos de contraseña débiles en el repositorio de GitHub froxlor/froxlor anterior a 2.0.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.10",
            "matchCriteriaId" : "AF26BD0E-694F-48CD-96F2-7E9FE8C46966"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/froxlor/froxlor/commit/2a84e9c1207fd3d792b7fb198fd0c66fe1a66a7a",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/a4f86d6f-0d5d-428d-a4b3-551b20a21ce6",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/froxlor/froxlor/commit/2a84e9c1207fd3d792b7fb198fd0c66fe1a66a7a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/a4f86d6f-0d5d-428d-a4b3-551b20a21ce6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0569",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-29T17:15:08.633",
      "lastModified" : "2025-03-28T16:15:26.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10."
      }, {
        "lang" : "es",
        "value" : "Requisitos de contraseña débiles en el repositorio de GitHub publify/publify antes de 9.2.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:publify_project:publify:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.10",
            "matchCriteriaId" : "F96D7B8E-CB71-4E0F-807E-E1BE71D1C939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/publify/publify/commit/8905e4e639cf03b758da558568a86c9816253b2d",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/81b1e1da-10dd-435e-94ae-4bdd41df6df9",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/publify/publify/commit/8905e4e639cf03b758da558568a86c9816253b2d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/81b1e1da-10dd-435e-94ae-4bdd41df6df9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.com/bounties/81b1e1da-10dd-435e-94ae-4bdd41df6df9",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0570",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-29T18:15:09.000",
      "lastModified" : "2024-11-21T07:37:25.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects an unknown part of the file user\\operations\\payment_operation.php. The manipulation of the argument booking_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219729 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en SourceCodester Online Tours Travels Management System 1.0. Esto afecta a una parte desconocida del archivo usuario\\operaciones\\pago_operación.php. La manipulación del argumento booking_id conduce a la inyección SQL. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-219729."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/user_operations_payment_operation_booking_id.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219729",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219729",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/linmoren/online-tours-travels-management-system/blob/main/user_operations_payment_operation_booking_id.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0571",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-01-29T18:15:09.097",
      "lastModified" : "2024-11-21T07:37:25.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Canteen Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file createcustomer.php of the component Add Customer. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-219730 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad fue encontrada en SourceCodester Canteen Management System 1.0 y clasificada como problemática. Esta vulnerabilidad afecta a un código desconocido del archivo createcustomer.php del componente Add Customer. La manipulación del nombre del argumento conduce a cross-site scripting. El ataque se puede iniciar de forma remota. El exploit ha sido divulgado al público y puede utilizarse. VDB-219730 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canteen_management_system_project:canteen_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1475853-D5FD-4C3B-B1D0-67131503A745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ctflearner/Vulnerability/blob/main/Canteen%20Management%20System/Canteen_Management_System_XSS_IN_Add_Customer.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219730",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219730",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/ctflearner/Vulnerability/blob/main/Canteen%20Management%20System/Canteen_Management_System_XSS_IN_Add_Customer.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0565",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-29T22:15:08.857",
      "lastModified" : "2024-11-21T07:37:24.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.\n\n"
      }, {
        "lang" : "es",
        "value" : "Errores de lógica empresarial en el repositorio de GitHub froxlor/froxlor anterior a 2.0.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-840"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.10",
            "matchCriteriaId" : "AF26BD0E-694F-48CD-96F2-7E9FE8C46966"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/froxlor/froxlor/commit/2feb8020941a82bfb4ac68890f6ced0e5b3c4a15",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/12d78294-1723-4450-a239-023952666102",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/froxlor/froxlor/commit/2feb8020941a82bfb4ac68890f6ced0e5b3c4a15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/12d78294-1723-4450-a239-023952666102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0566",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-29T22:15:08.950",
      "lastModified" : "2024-11-21T07:37:24.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor prior to 2.0.10.\n\n"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de neutralización inadecuada de la entrada durante la generación de páginas web (\"cross-site scripting\") en froxlor/froxlor antes de la versión 2.0.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.10",
            "matchCriteriaId" : "AF26BD0E-694F-48CD-96F2-7E9FE8C46966"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/froxlor/froxlor/commit/bd5b99dc1c06f594b9563d459a50bf3b32504876",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/8339e4f1-d430-4845-81b5-36dd9fcdac49",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/froxlor/froxlor/commit/bd5b99dc1c06f594b9563d459a50bf3b32504876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/8339e4f1-d430-4845-81b5-36dd9fcdac49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-29T22:15:09.047",
      "lastModified" : "2025-03-28T16:15:26.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOSH 4a5cfdb allows stored XSS via the create user page. For example, a first name (of a physician, assistant, or billing user) can have a JavaScript payload that is executed upon visiting the /users/2/1 page. This may allow attackers to steal Protected Health Information because the product is for health charting."
      }, {
        "lang" : "es",
        "value" : "NOSH 4a5cfdb permite almacenar XSS a través de la página de creación de usuario. Por ejemplo, un nombre (de un médico, asistente o usuario de facturación) puede tener una carga útil de JavaScript que se ejecuta al visitar la página /users/2/1. Esto puede permitir a los atacantes robar información médica protegida porque el producto es para gráficos de salud."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nosh_chartingsystem_project:nosh_chartingsystem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180704D4-8A66-4502-9485-38392FE11B2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/abbisQQ/e0967d5b8355087c8e224bdd1ace3bf3",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shihjay2/docker-nosh",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shihjay2/nosh2/issues/202",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shihjay2/nosh2/tree/4a5cfdbd73f6a2ab5ee43a33d173c46fe0271533",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://noshemr.wordpress.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/abbisQQ/e0967d5b8355087c8e224bdd1ace3bf3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shihjay2/docker-nosh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shihjay2/nosh2/issues/202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shihjay2/nosh2/tree/4a5cfdbd73f6a2ab5ee43a33d173c46fe0271533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://noshemr.wordpress.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0572",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-29T23:15:08.790",
      "lastModified" : "2024-11-21T07:37:25.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.\n\n"
      }, {
        "lang" : "es",
        "value" : "Condición de error no marcada en el repositorio de GitHub froxlor/froxlor anterior a 2.0.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-391"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.10",
            "matchCriteriaId" : "AF26BD0E-694F-48CD-96F2-7E9FE8C46966"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/froxlor/froxlor/commit/7b08a71c59430d06c1efb012a6c6448262aacdb1",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/4ab24ee2-3ff6-4248-9555-0af3e5f754ec",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/froxlor/froxlor/commit/7b08a71c59430d06c1efb012a6c6448262aacdb1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/4ab24ee2-3ff6-4248-9555-0af3e5f754ec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-30T03:15:09.557",
      "lastModified" : "2025-03-28T16:15:26.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PdfBook extension through 2.0.5 before b07b6a64 for MediaWiki allows command injection via an option."
      }, {
        "lang" : "es",
        "value" : "La extensión PdfBook hasta 2.0.5 anterior a b07b6a64 para MediaWiki permite la inyección de comandos a través de una opción."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfbook_project:pdfbook:*:*:*:*:*:mediawiki:*:*",
            "versionEndIncluding" : "2.0.5",
            "matchCriteriaId" : "345E9C6F-4838-487F-99A2-DA98A79330ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/organicdesign/PdfBook/-/merge_requests/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/organicdesign/PdfBook/-/merge_requests/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-30T05:15:10.307",
      "lastModified" : "2025-03-28T15:15:43.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF."
      }, {
        "lang" : "es",
        "value" : "isInList en el paquete safeurl-python anterior a 1.2 para Python tiene una expresión regular insuficientemente restrictiva para dominios externos, lo que lleva a SSRF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:includesecurity:safeurl-python:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "702E64C2-193E-47C1-96C0-B7E2CBFDF5E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IncludeSecurity/safeurl-python/security/advisories/GHSA-jgh8-vchw-q3g7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IncludeSecurity/safeurl-python/security/advisories/GHSA-jgh8-vchw-q3g7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-30T05:15:10.373",
      "lastModified" : "2025-03-28T15:15:43.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Paranoidhttp before 0.3.0 allows SSRF because [::] is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses."
      }, {
        "lang" : "es",
        "value" : "Paranoidhttp anterior a 0.3.0 permite SSRF porque [::] es equivalente a la dirección 127.0.0.1, pero no coincide con el filtro para direcciones privadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paranoidhttp_project:paranoidhttp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.0",
            "matchCriteriaId" : "F349DBA3-D1CA-41D5-8065-B6519D42D094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hakobe/paranoidhttp/blob/master/CHANGELOG.md#v030-2023-01-19",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hakobe/paranoidhttp/commit/07f671da14ce63a80f4e52432b32e8d178d75fd3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hakobe/paranoidhttp/compare/v0.2.0...v0.3.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hakobe/paranoidhttp/blob/master/CHANGELOG.md#v030-2023-01-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hakobe/paranoidhttp/commit/07f671da14ce63a80f4e52432b32e8d178d75fd3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hakobe/paranoidhttp/compare/v0.2.0...v0.3.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22322",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-30T07:15:09.237",
      "lastModified" : "2025-03-27T21:15:41.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed."
      }, {
        "lang" : "es",
        "value" : "Existe una restricción inadecuada de la vulnerabilidad de referencia de entidad externa XML (XXE) en OMRON CX-Motion Pro 1.4.6.013 y versiones anteriores. Si un usuario abre un archivo de proyecto especialmente manipulado creado por un atacante, se puede revelar información confidencial en el sistema de archivos donde está instalado CX-Motion Pro."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omron:cx-motion_pro:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.6.014",
            "matchCriteriaId" : "37398382-4AB8-4A93-A243-D5E0DC74D302"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU94200979/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU94200979/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22324",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-30T07:15:09.767",
      "lastModified" : "2025-03-28T15:15:43.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de inyección SQL en CONPROSYS HMI System (CHS) Ver.3.5.0 y anteriores permite que un atacante remoto autenticado ejecute un comando SQL arbitrario. Como resultado, se puede obtener información almacenada en la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contec:conprosys_hmi_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.1",
            "matchCriteriaId" : "5CD57955-96C3-4807-8BA1-0DAC528D345C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU97195023/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230124_en.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU97195023/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230124_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22332",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-30T07:15:10.003",
      "lastModified" : "2025-11-03T22:16:04.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0 to 4.2.11 (4.2 series), 4.1.0 to 4.1.14 (4.1 series), 4.0.0 to 4.0.21 (4.0 series), All versions of 3.7 series, All versions of 3.6 series, All versions of 3.5 series, All versions of 3.4 series, and All versions of 3.3 series. A specific database user's authentication information may be obtained by another database user. As a result, the information stored in the database may be altered and/or database may be suspended by a remote attacker who successfully logged in the product with the obtained credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información existe en Pgpool-II 4.4.0 a 4.4.1 (serie 4.4), 4.3.0 a 4.3.4 (serie 4.3), 4.2.0 a 4.2.11 (serie 4.2), 4.1.0 a 4.1. 14 (serie 4.1), 4.0.0 a 4.0.21 (serie 4.0), Todas las versiones de la serie 3.7, Todas las versiones de la serie 3.6, Todas las versiones de la serie 3.5, Todas las versiones de la serie 3.4 y Todas las versiones de la serie 3.3. La información de autenticación de un usuario de base de datos específico puede ser obtenida por otro usuario de base de datos. Como resultado, la información almacenada en la base de datos puede verse alterada y/o la base de datos puede ser suspendida por un atacante remoto que haya iniciado sesión exitosamente en el producto con las credenciales obtenidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgpool:pgpool-ii:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndIncluding" : "3.7.12",
            "matchCriteriaId" : "AC6F9DF2-27FB-43BE-B4EB-5296C01BD28E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgpool:pgpool-ii:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.22",
            "matchCriteriaId" : "AEFBFF5E-DE69-4F94-B4BD-53C8C91CA850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgpool:pgpool-ii:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.15",
            "matchCriteriaId" : "1800AB14-AF70-4D4D-8E3D-FCFC7790F1FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgpool:pgpool-ii:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.12",
            "matchCriteriaId" : "3D3373F7-66DD-4A05-B7AF-8ABEAF99F4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgpool:pgpool-ii:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndExcluding" : "4.3.5",
            "matchCriteriaId" : "AA369670-DE4B-478A-87C8-57A60929B885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgpool:pgpool-ii:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.2",
            "matchCriteriaId" : "7A6FBCE3-2494-4B70-A094-289DE7AC6D64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN72418815/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.pgpool.net/mediawiki/index.php/Main_Page#News",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN72418815/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/12/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.pgpool.net/mediawiki/index.php/Main_Page#News",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22333",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-01-30T07:15:10.227",
      "lastModified" : "2025-03-28T16:15:26.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in EasyMail 2.00.130 and earlier allows a remote unauthenticated attacker to inject an arbitrary script."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting en EasyMail 2.00.130 y versiones anteriores permite que un atacante remoto no autenticado inyecte un script arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mubag:easymail:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.00.130",
            "matchCriteriaId" : "AEC0F2FA-C107-466F-AE20-670CBEFF6EBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN05288621/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mubag.com/download/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN05288621/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mubag.com/download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0471",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-30T09:15:08.790",
      "lastModified" : "2024-11-21T07:37:14.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "Use after free en WebTransport en Google Chrome anterior a 109.0.5414.119 permitía a un atacante remoto explotar potencialmente la corrupción del almacenamiento dinámico a través de una página HTML manipulada. (Severidad de seguridad de Chrome: alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.119",
            "matchCriteriaId" : "21EC6E08-40F6-4BFB-8B89-0D6B008C25EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1376354",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1376354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0472",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-30T09:15:08.850",
      "lastModified" : "2024-11-21T07:37:14.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      }, {
        "lang" : "es",
        "value" : "El uso gratuito en WebRTC en Google Chrome anterior a 109.0.5414.119 permitía a un atacante remoto explotar potencialmente la corrupción del heap a través de una página HTML manipulada. (Severidad de seguridad de Chrome: alta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.119",
            "matchCriteriaId" : "21EC6E08-40F6-4BFB-8B89-0D6B008C25EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1405256",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1405256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0473",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-30T09:15:08.903",
      "lastModified" : "2024-11-21T07:37:14.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "Type Confusion en la API ServiceWorker en Google Chrome anterior a 109.0.5414.119 permitía a un atacante remoto explotar potencialmente la corrupción del heap a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.119",
            "matchCriteriaId" : "21EC6E08-40F6-4BFB-8B89-0D6B008C25EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1404639",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1404639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0474",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-01-30T09:15:08.957",
      "lastModified" : "2024-11-21T07:37:15.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a Chrome web app. (Chromium security severity: Medium)"
      }, {
        "lang" : "es",
        "value" : "Use after free en GuestView en Google Chrome anterior a 109.0.5414.119 permitió a un atacante convencer a un usuario de instalar una extensión maliciosa para explotar potencialmente la corrupción del heap a través de una aplicación web de Chrome. (Severidad de seguridad de Chromium: media)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.5414.119",
            "matchCriteriaId" : "21EC6E08-40F6-4BFB-8B89-0D6B008C25EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1400841",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1400841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0240",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-01-30T14:15:10.403",
      "lastModified" : "2024-11-21T07:36:48.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a logic error in io_uring's implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalation.\n\nIn the io_prep_async_work function the assumption that the last io_grab_identity call cannot return false is not true, and in this case the function will use the init_cred or the previous linked requests identity to do operations instead of using the current identity. This can lead to reference counting issues causing use-after-free. We recommend upgrading past version 5.10.161."
      }, {
        "lang" : "es",
        "value" : "Hay un error lógico en la implementación de io_uring que puede usarse para desencadenar una vulnerabilidad use-after-free que conduce a una escalada de privilegios. En la función io_prep_async_work, la suposición de que la última llamada a io_grab_identity no puede devolver falso no es cierta y, en este caso, la función utilizará la identidad init_cred o las solicitudes vinculadas anteriores para realizar operaciones en lugar de utilizar la identidad actual. Esto puede provocar problemas de recuento de referencias que provoquen Use-After-Free. Recomendamos actualizar a la versión anterior 5.10.161."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10",
            "matchCriteriaId" : "D61CA62B-157A-4415-B8FD-7C3C1208315D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring?h=linux-5.10.y&id=788d0824269bef539fe31a785b1517882eafed93",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gregkh/linux/commit/1e6fa5216a0e59ef02e8b6b40d553238a3b81d49",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kernel.dance/#788d0824269bef539fe31a785b1517882eafed93",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring?h=linux-5.10.y&id=788d0824269bef539fe31a785b1517882eafed93",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gregkh/linux/commit/1e6fa5216a0e59ef02e8b6b40d553238a3b81d49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kernel.dance/#788d0824269bef539fe31a785b1517882eafed93",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0266",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-01-30T14:15:10.500",
      "lastModified" : "2025-10-24T13:54:46.493",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e"
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de Use-After-Free en el paquete ALSA PCM en el kernel de Linux. A SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 le faltan bloqueos que se pueden usar en un Use-After-Free que puede resultar en una escalada de privilegios para obtener acceso al anillo 0 por parte del usuario del sistema. Recomendamos actualizar al commit anterior 56b88b50565cd8b946a2d00b0c83927b7ebb055e"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-03-30",
      "cisaActionDue" : "2023-04-20",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Linux Kernel Use-After-Free Vulnerability",
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14",
            "versionEndExcluding" : "4.14.303",
            "matchCriteriaId" : "E245BC6C-44BD-47D1-A03D-9FE1F29BB25A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.270",
            "matchCriteriaId" : "AE8904A3-99BE-4E49-9682-1F90A6373F4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.229",
            "matchCriteriaId" : "A0C0D95E-414A-445E-941B-3EF6A4D3A093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.163",
            "matchCriteriaId" : "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.88",
            "matchCriteriaId" : "D71B7395-3263-46DE-9341-53C437B49ADF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.6",
            "matchCriteriaId" : "04212AC4-FF1E-4F38-8AE9-53E2A69A00DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-5.10/alsa-pcm-move-rwsem-lock-inside-snd_ctl_elem_read-to-prevent-uaf.patch?id=72783cf35e6c55bca84c4bb7b776c58152856fd4",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/56b88b50565cd8b946a2d00b0c83927b7ebb055e",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/becf9e5d553c2389d857a3c178ce80fdb34a02e1",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-5.10/alsa-pcm-move-rwsem-lock-inside-snd_ctl_elem_read-to-prevent-uaf.patch?id=72783cf35e6c55bca84c4bb7b776c58152856fd4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/56b88b50565cd8b946a2d00b0c83927b7ebb055e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/becf9e5d553c2389d857a3c178ce80fdb34a02e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-0266",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0581",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-01-30T15:15:09.823",
      "lastModified" : "2026-04-08T19:18:01.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it possible for unauthenticated attackers to bypass any login restrictions  that may prevent a brute force attack."
      }, {
        "lang" : "es",
        "value" : "El complemento PrivateContent para WordPress es vulnerable a la omisión del mecanismo de protección debido al uso de la validación del lado del cliente en versiones hasta la 8.4.3 incluida. Esto se debe a que el complemento verifica si una IP había sido incluida en la lista de bloqueo mediante scripts del lado del cliente en lugar de hacerlo desde el lado del servidor. Esto hace posible que atacantes no autenticados eludan cualquier restricción de inicio de sesión que pueda evitar un ataque de fuerza bruta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-602"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lcweb:privatecontent:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "8.4.4",
            "matchCriteriaId" : "BC3537EB-7101-4230-A577-9DAF22DE44D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lcweb.it/privatecontent/changelog",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/de73304e-7a28-4304-b1ed-2f6dd7738236?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://lcweb.it/privatecontent/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/de73304e-7a28-4304-b1ed-2f6dd7738236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0512",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-01-30T16:15:09.507",
      "lastModified" : "2024-11-21T07:37:19.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Divide By Zero in GitHub repository vim/vim prior to 9.0.1247."
      }, {
        "lang" : "es",
        "value" : "Divide By Zero en el repositorio de GitHub vim/vim anterior a 9.0.1247."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.1247",
            "matchCriteriaId" : "46D215DD-1FC8-4130-9A95-38A4580B408F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/17",
        "source" : "security@huntr.dev"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/18",
        "source" : "security@huntr.dev"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/21",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://support.apple.com/kb/HT213670",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://support.apple.com/kb/HT213675",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://support.apple.com/kb/HT213677",
        "source" : "security@huntr.dev"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24830",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-01-30T17:15:09.987",
      "lastModified" : "2025-03-28T15:15:44.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3.\n\n"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autenticación incorrecta en Apache Software Foundation Apache IoTDB. Este problema afecta al componente iotdb-web-workbench: desde 0.13.0 antes de 0.13.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:iotdb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.13.0",
            "versionEndExcluding" : "0.13.3",
            "matchCriteriaId" : "1EF55B28-5CD2-4FD1-ACDD-9D522D2C6842"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/l4fon37687jz5ohgsnz2ko9fv400915t",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/l4fon37687jz5ohgsnz2ko9fv400915t",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0033",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-01-30T21:15:13.057",
      "lastModified" : "2025-03-27T16:15:18.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PDF Viewer WordPress plugin before 1.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack."
      }, {
        "lang" : "es",
        "value" : "El complemento PDF Viewer de WordPress anterior a 1.0.0 no valida ni escapa uno de sus atributos de código corto, lo que podría permitir a los usuarios con un rol tan bajo como colaborador realizar un ataque de cross-site scripting almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdf_viewer_project:pdf_viewer:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.0",
            "matchCriteriaId" : "33E00268-3B17-4C49-8770-2C07C0B1979B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/2d9ae43b-75a7-4fcc-bce3-d9e9d7a97ec0",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/2d9ae43b-75a7-4fcc-bce3-d9e9d7a97ec0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0071",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-01-30T21:15:13.127",
      "lastModified" : "2025-03-27T20:15:19.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Tabs WordPress plugin before 2.1.17 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      }, {
        "lang" : "es",
        "value" : "El complemento WP Tabs de WordPress anterior a 2.1.17 no valida ni escapa algunos de sus atributos de código abreviado antes de devolverlos a una página/publicación donde está incrustado el código abreviado, lo que podría permitir a los usuarios con el rol de colaborador y superiores realizar ataques de cross-site scripting almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shapedplugin:wp_tabs:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.17",
            "matchCriteriaId" : "94FECB15-3A98-4838-B7A9-D14AAC9BF85D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/3834a162-2cdc-41e9-9c9d-2b576eed4db9",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/3834a162-2cdc-41e9-9c9d-2b576eed4db9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0074",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-01-30T21:15:13.197",
      "lastModified" : "2025-03-27T20:15:19.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Social Widget WordPress plugin before 2.2.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      }, {
        "lang" : "es",
        "value" : "El complemento WP Social Widget de WordPress anterior a 2.2.4 no valida ni escapa algunos de sus atributos de código corto antes de devolverlos a una página/publicación donde está incrustado el código corto, lo que podría permitir a los usuarios con el rol de colaborador y superior realizar cross-site scripting almacenado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:catchsquare:wp_social_widget:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.2.4",
            "matchCriteriaId" : "43A87715-74E2-4B40-93D1-D6BA2F6A532D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/82f543e3-9397-4364-9546-af5ea134fcd4",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/82f543e3-9397-4364-9546-af5ea134fcd4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0097",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-01-30T21:15:13.270",
      "lastModified" : "2025-04-21T14:17:01.470",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Post Grid, Post Carousel, & List Category Posts WordPress plugin before 2.4.19 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      }, {
        "lang" : "es",
        "value" : "El complemento Post Grid, Post Carousel y List Category Posts de WordPress anterior a la versión 2.4.19 no valida ni escapa algunas de sus opciones de bloque antes de mostrarlas nuevamente en una página/publicación donde está incrustado el bloque, lo que podría permitir a los usuarios con el rol de colaborador y superior realizar ataques de Cross-Site Scripting almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shapedplugin:smart_post_show:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.4.19",
            "matchCriteriaId" : "3A2FF29B-722E-4BF9-839F-80D85CBFF06E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/19379f08-d667-4b1e-a774-0f4a17ad7bff",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/19379f08-d667-4b1e-a774-0f4a17ad7bff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22315",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-01-30T22:15:12.517",
      "lastModified" : "2024-11-21T07:44:30.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nSnap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code. \n\n\n\n\n"
      }, {
        "lang" : "es",
        "value" : "Snap One Wattbox WB-300-IP-3 versiones WB10.9a17 y anteriores utilizan un protocolo de red de área local (LAN) propietario que no verifica las actualizaciones del dispositivo. Un atacante podría cargar un archivo de actualización con formato incorrecto en el dispositivo y ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snapav:wattbox_wb-300-ip-3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "wb10.9a17",
            "matchCriteriaId" : "E28B67B3-9913-4DBC-AB7D-C1B89951CE83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:snapav:wattbox_wb-300-ip-3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97D903E1-0BA7-4CE5-8955-63B7F98ACC9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24020",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-01-30T22:15:12.620",
      "lastModified" : "2024-11-21T07:47:16.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nSnap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a login. \n\n\n\n\n"
      }, {
        "lang" : "es",
        "value" : "Snap One Wattbox WB-300-IP-3 versiones WB10.9a17 y anteriores podrían evitar la protección de fuerza bruta, permitiendo múltiples intentos de forzar un inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snapav:wattbox_wb-300-ip-3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "wb10.9a17",
            "matchCriteriaId" : "E28B67B3-9913-4DBC-AB7D-C1B89951CE83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:snapav:wattbox_wb-300-ip-3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97D903E1-0BA7-4CE5-8955-63B7F98ACC9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22389",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-01-30T23:15:11.450",
      "lastModified" : "2024-11-21T07:44:42.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nSnap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via Save/Restore–>Backup Settings, which could be read by any user accessing the file.  \n\n\n\n\n"
      }, {
        "lang" : "es",
        "value" : "Snap One Wattbox WB-300-IP-3 versiones WB10.9a17 y anteriores almacenan contraseñas en un archivo de texto plano cuando la configuración del dispositivo se exporta a través de Save/Restore–&gt;Backup Settings, que cualquier usuario que acceda al archivo podría leer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-256"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snapav:wattbox_wb-300-ip-3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "wb10.9a17",
            "matchCriteriaId" : "E28B67B3-9913-4DBC-AB7D-C1B89951CE83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:snapav:wattbox_wb-300-ip-3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97D903E1-0BA7-4CE5-8955-63B7F98ACC9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23582",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-01-30T23:15:11.537",
      "lastModified" : "2024-11-21T07:46:28.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nSnap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code or crash the device remotely. \n\n\n\n\n"
      }, {
        "lang" : "es",
        "value" : "Snap One Wattbox WB-300-IP-3 versiones WB10.9a17 y anteriores son vulnerables a un desbordamiento de búfer de almacenamiento dinámico, lo que podría permitir a un atacante ejecutar código arbitrario o bloquear el dispositivo de forma remota."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:snapav:wattbox_wb-300-ip-3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "wb10.9a17",
            "matchCriteriaId" : "E28B67B3-9913-4DBC-AB7D-C1B89951CE83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:snapav:wattbox_wb-300-ip-3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97D903E1-0BA7-4CE5-8955-63B7F98ACC9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22900",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-01-31T08:15:08.323",
      "lastModified" : "2024-11-21T07:45:36.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database."
      }, {
        "lang" : "es",
        "value" : "La función de inicio de sesión de Efence tiene una validación insuficiente para la entrada del usuario. Un atacante remoto no autenticado puede aprovechar esta vulnerabilidad para inyectar comandos SQL arbitrarios para acceder, modificar o eliminar la base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thinkingsoftware:efence:1.2.58:db28:*:*:*:*:*:*",
            "matchCriteriaId" : "D45AE7E2-CD09-4CCF-A83A-3F228D1EF166"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6885-d679e-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6885-d679e-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0591",
      "sourceIdentifier" : "research@onekey.com",
      "published" : "2023-01-31T10:15:10.253",
      "lastModified" : "2024-11-21T07:37:27.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the process has write access to that file or directory).\n\nThis is due to the fact that a node name (dent_node.name) is considered trusted and joined to the extraction directory path during processing, then the node content is written to that joined path. By crafting a malicious UBIFS file with node names holding path traversal payloads (e.g. ../../tmp/outside.txt), it's possible to force ubi_reader to write outside of the extraction directory.\n\n\n\nThis issue affects ubi-reader before 0.8.5.\n\n"
      }, {
        "lang" : "es",
        "value" : "ubireader_extract_files es vulnerable a path traversal cuando se ejecuta contra archivos UBIFS específicamente manipulados, lo que permite al atacante sobrescribir archivos fuera del directorio de extracción (siempre que el proceso tenga acceso de escritura a ese archivo o directorio). Esto se debe al hecho de que un nombre de nodo (dent_node.name) se considera confiable y se une a la ruta del directorio de extracción durante el procesamiento; luego, el contenido del nodo se escribe en esa ruta unida. Al crear un archivo UBIFS malicioso con nombres de nodos que contienen payloads de path traversal (por ejemplo, ../../tmp/outside.txt), es posible forzar a ubi_reader a escribir fuera del directorio de extracción. Este problema afecta a ubi-reader antes de 0.8.5.x"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "research@onekey.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "research@onekey.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubi_reader_project:ubi_reader:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.5",
            "matchCriteriaId" : "44B81021-E665-42B2-A24A-74E646BCE470"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jrspruitt/ubi_reader/pull/57",
        "source" : "research@onekey.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/",
        "source" : "research@onekey.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jrspruitt/ubi_reader/pull/57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0592",
      "sourceIdentifier" : "research@onekey.com",
      "published" : "2023-01-31T10:15:10.373",
      "lastModified" : "2024-11-21T07:37:27.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.This issue affects jefferson: before 0.4.1.\n\n"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de path traversal afecta al extractor del sistema de archivos JFFS2 de Jefferson. Al crear archivos JFFS2 maliciosos, los atacantes podrían obligar a Jefferson a escribir fuera del directorio de extracción. Este problema afecta a Jefferson: versiones anteriores a 0.4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "research@onekey.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "research@onekey.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jefferson_project:jefferson:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.4.1",
            "matchCriteriaId" : "0F4F244F-8F65-4E92-8C70-21E27FB3D652"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sviehb/jefferson/commit/971aca1a8b3b9f4fcb4674fa9621d3349195cdc6",
        "source" : "research@onekey.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/",
        "source" : "research@onekey.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sviehb/jefferson/commit/971aca1a8b3b9f4fcb4674fa9621d3349195cdc6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0593",
      "sourceIdentifier" : "research@onekey.com",
      "published" : "2023-01-31T10:15:10.450",
      "lastModified" : "2024-11-21T07:37:27.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability affects yaffshiv YAFFS filesystem extractor. By crafting a malicious YAFFS file, an attacker could force yaffshiv to write outside of the extraction directory.\n\nThis issue affects yaffshiv up to version 0.1 included, which is the most recent at time of publication.\n\n"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de path traversal afecta al extractor del sistema de archivos yaffshiv YAFFS. Al crear un archivo YAFFS malicioso, un atacante podría obligar a yaffshiv a escribir fuera del directorio de extracción. Este problema afecta a yaffshiv hasta la versión 0.1 incluida, que es la más reciente en el momento de la publicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "research@onekey.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "research@onekey.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaffshiv_project:yaffshiv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1",
            "matchCriteriaId" : "A2021F4D-2F0D-4215-9645-AAE41EE63D76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/devttys0/yaffshiv/pull/3/files",
        "source" : "research@onekey.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/",
        "source" : "research@onekey.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/devttys0/yaffshiv/pull/3/files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24829",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-01-31T10:15:10.527",
      "lastModified" : "2025-03-27T18:17:25.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database.\n\nThis problem is fixed from version 0.13.3 of iotdb-web-workbench onwards.\n\n\n"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autorización incorrecta en Apache Software Foundation Apache IoTDB. Este problema afecta al componente iotdb-web-workbench desde la versión 0.13.0 anterior a la 0.13.3. iotdb-web-workbench es un componente opcional de IoTDB que proporciona una consola web de la base de datos. Este problema se solucionó a partir de la versión 0.13.3 de iotdb-web-workbench."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:iotdb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.13.0",
            "versionEndExcluding" : "0.13.3",
            "matchCriteriaId" : "1EF55B28-5CD2-4FD1-ACDD-9D522D2C6842"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/l0b59hh046tyn4gqot0bdrpg8gxlksmo",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/l0b59hh046tyn4gqot0bdrpg8gxlksmo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-31T16:15:09.220",
      "lastModified" : "2025-03-27T15:15:45.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de deserialización en Dromara Hutool v5.8.11 permite a un atacante ejecutar código arbitrario a través del parámetro XmlUtil.readObjectFromXml."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hutool:hutool:5.8.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A354824B-591F-4F37-8681-734B7CDE00AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/dromara/hutool/issues/I6AEX2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dromara/hutool/issues/2855",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/dromara/hutool/issues/I6AEX2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dromara/hutool/issues/2855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-01-31T16:15:09.270",
      "lastModified" : "2025-05-16T20:23:12.517",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de inyección SQL en Dromara hutool v5.8.11 permite a un atacante ejecutar código arbitrario a través del motor de plantilla aviator."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hutool:hutool:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.8.21",
            "matchCriteriaId" : "786FE505-3B01-48DF-8F35-27B22D0E0312"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/dromara/hutool/issues/I6AJWJ#note_15801868",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/dromara/hutool/issues/I6AJWJ#note_20057806_link",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/dromara/hutool/issues/3149",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/dromara/hutool/releases/tag/5.8.21",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/google/osv.dev/issues/2195",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://gitee.com/dromara/hutool/issues/I6AJWJ#note_15801868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/dromara/hutool/issues/I6AJWJ#note_20057806_link",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/dromara/hutool/issues/3149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/dromara/hutool/releases/tag/5.8.21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/google/osv.dev/issues/2195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22610",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-01-31T17:15:08.827",
      "lastModified" : "2024-11-21T07:45:03.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of\nService against the Geo SCADA server when specific messages are sent to the server over the\ndatabase server TCP port. \n\n\n\n"
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad CWE-863: autorización incorrecta que podría causar denegación de servicio contra el servidor Geo SCADA cuando se envían mensajes específicos al servidor a través del puerto TCP del servidor de base de datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32C7EA19-134A-4FF8-BB49-133020612947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7268.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337B3FD9-3C56-4914-B876-85928A4269DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7322.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599591CD-340D-4F5C-9442-3B77138DE5EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7429.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1CB9D8-07C9-492D-A4C5-87D5AAE73538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7457.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07CCE0CE-7ABC-4B32-8071-35C62F51184C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7488.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE0670A-636C-48DB-83CB-5CAB29EDB399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7522.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496D8DD9-00A0-4F06-B2BA-A51A0178C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7545.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66924EF0-0776-45A3-A61E-2EB1DEDEF391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7578.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB87BE8B-CA3E-4D64-BA78-DD0E86DFCA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7613.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42883228-4736-4148-B7AD-08FD829FC07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7641.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE6E43F-B4C1-47F5-994C-3154D47D728E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7690.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711E747D-7DF5-4576-AA01-E9B1B884F829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7714.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D619A4-0F05-4C67-848B-E862954AB767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7742.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3AE4FA-D915-4F2C-8958-54DCC5118CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7777.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA71158-C61D-4F94-AA44-5C881601F18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7808.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52F5ACB-5811-4BE2-988A-B922E8848801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7840.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C36FAD5-E91F-4F54-ABBF-907EF2561D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7875.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A16BFCC-22ED-4D6E-9737-29E33B9870BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7896.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858A14E9-9FFA-47F2-ACC3-5A0A1B5754A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7936.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F71EB4-CAE9-430B-929A-A5B4B1D0BDEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7980.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167317B6-BFC2-4DB8-AC22-F8C5E2BCEFA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8015.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B0EC77-A143-4919-BBF5-95127999FF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8108.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C717C22-CA76-4FC4-8565-F81C614A27F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8122.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337BA43E-CACF-4806-B641-35E1425A7C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8155.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71905992-FD0E-4FDA-A0A4-0C26BE5F8DE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8172.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9491C1-24B7-4AB2-8405-DE8B308537CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8197.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71862239-5155-4971-9E40-4444A7711148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8220.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E81E4F51-1258-4AB6-B95A-CC787EDF0BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8267.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD44BC64-F34B-4682-9EB1-0538D28D39FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5AA4D7F-76AA-45A7-86C9-4C57D5C23D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7551.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BA5080-1791-4406-AFC3-807C9931E8F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7578.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4B1884-110F-4D2B-A671-F9CDCCC0055A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7613.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEDA987-6E1F-4D3D-B65B-90B8EA59A4EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7641.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF6A930-242F-4479-A504-9E5BC0A4B0AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7692.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5D2147-D8E9-4A45-A1A3-C4376C18DEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7717.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F122BED3-BC5C-41A6-9785-E10E1E0DCA20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7742.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A9061F-D17A-45CC-BC8E-75A35E5919A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7787.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E703DE-39EC-4055-B0D0-729BFD4E4126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7809.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294CBA2E-6004-4546-8BE2-44197A6FDC84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7840.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0123B7C-3FB6-47CC-94D8-595BC6514419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7875.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAB0301-6040-4C8D-AF70-87FCDD423DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7913.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52B3825-334A-4C4B-9186-FDF7B46127A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7936.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F400AFD-2CDD-4DD7-8276-8CAC66924E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7980.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3C4797-9995-472B-9607-18ED9C76C73B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8017.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A923C3EE-44D0-4143-838E-608BC8B96E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8108.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6BEE89-D04B-46A4-BFF6-B34CC577E38D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8122.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504D36B5-2AAB-4B8C-ADA6-A2B23C25A7E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8155.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6C0472-CF2A-4C92-A75D-1FEFCD375E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8181.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10159C3-98C4-4A13-B513-6012C3AC9B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8197.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42B3C6B3-EB4C-4B81-8914-EA2CCB5E0D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8221.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E25CAE4-84AB-4161-9C91-9ACF541AB65B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8267.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EF8CD9-10F5-490A-A070-76DCA6757AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C26D6FD-4A8A-4C35-9AFD-1CF44345832A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8027.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D373AAB2-CBF0-4051-BCEF-CFF88E65FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8108.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDACB10C-9DC1-458A-A177-49D3CD86E3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8120.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FFE1B0-7C58-4E64-B429-E6354E00DD43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8158.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2FE473-2BDC-4FD2-A55D-B5D35E35653C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8182.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C447E85B-ADF3-4948-B622-03C2656A9E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8197.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBE34D7-C746-4C37-BD75-124D77588AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8218.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753F662D-A172-459B-B3C9-D419C6559858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8269.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB1525E-726C-4E78-8F74-378956B33F54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-02_Geo_SCADA_Security_Notification.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-02_Geo_SCADA_Security_Notification.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22611",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-01-31T17:15:08.927",
      "lastModified" : "2024-11-21T07:45:03.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. Affected Products: EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) (Versions prior to October 2022)"
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad CWE-200: Exposición de información confidencial a un actor no autorizado que podría provocar la divulgación de información cuando se envían mensajes específicos al servidor a través del puerto TCP del servidor de la base de datos. Productos afectados: EcoStruxure Geo SCADA Expert 2019 - 2021 (anteriormente conocido como ClearSCADA) (Versiones anteriores a octubre de 2022)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32C7EA19-134A-4FF8-BB49-133020612947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7268.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337B3FD9-3C56-4914-B876-85928A4269DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7322.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599591CD-340D-4F5C-9442-3B77138DE5EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7429.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1CB9D8-07C9-492D-A4C5-87D5AAE73538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7457.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07CCE0CE-7ABC-4B32-8071-35C62F51184C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7488.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE0670A-636C-48DB-83CB-5CAB29EDB399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7522.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496D8DD9-00A0-4F06-B2BA-A51A0178C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7545.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66924EF0-0776-45A3-A61E-2EB1DEDEF391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7578.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB87BE8B-CA3E-4D64-BA78-DD0E86DFCA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7613.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42883228-4736-4148-B7AD-08FD829FC07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7641.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE6E43F-B4C1-47F5-994C-3154D47D728E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7690.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711E747D-7DF5-4576-AA01-E9B1B884F829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7714.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D619A4-0F05-4C67-848B-E862954AB767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7742.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3AE4FA-D915-4F2C-8958-54DCC5118CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7777.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA71158-C61D-4F94-AA44-5C881601F18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7808.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52F5ACB-5811-4BE2-988A-B922E8848801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7840.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C36FAD5-E91F-4F54-ABBF-907EF2561D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7875.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A16BFCC-22ED-4D6E-9737-29E33B9870BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7896.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858A14E9-9FFA-47F2-ACC3-5A0A1B5754A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7936.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F71EB4-CAE9-430B-929A-A5B4B1D0BDEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7980.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167317B6-BFC2-4DB8-AC22-F8C5E2BCEFA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8015.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B0EC77-A143-4919-BBF5-95127999FF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8108.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C717C22-CA76-4FC4-8565-F81C614A27F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8122.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337BA43E-CACF-4806-B641-35E1425A7C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8155.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71905992-FD0E-4FDA-A0A4-0C26BE5F8DE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8172.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9491C1-24B7-4AB2-8405-DE8B308537CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8197.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71862239-5155-4971-9E40-4444A7711148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8220.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E81E4F51-1258-4AB6-B95A-CC787EDF0BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8267.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD44BC64-F34B-4682-9EB1-0538D28D39FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5AA4D7F-76AA-45A7-86C9-4C57D5C23D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7551.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BA5080-1791-4406-AFC3-807C9931E8F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7578.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4B1884-110F-4D2B-A671-F9CDCCC0055A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7613.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEDA987-6E1F-4D3D-B65B-90B8EA59A4EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7641.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF6A930-242F-4479-A504-9E5BC0A4B0AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7692.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5D2147-D8E9-4A45-A1A3-C4376C18DEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7717.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F122BED3-BC5C-41A6-9785-E10E1E0DCA20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7742.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A9061F-D17A-45CC-BC8E-75A35E5919A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7787.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E703DE-39EC-4055-B0D0-729BFD4E4126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7809.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294CBA2E-6004-4546-8BE2-44197A6FDC84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7840.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0123B7C-3FB6-47CC-94D8-595BC6514419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7875.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAB0301-6040-4C8D-AF70-87FCDD423DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7913.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52B3825-334A-4C4B-9186-FDF7B46127A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7936.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F400AFD-2CDD-4DD7-8276-8CAC66924E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7980.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3C4797-9995-472B-9607-18ED9C76C73B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8017.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A923C3EE-44D0-4143-838E-608BC8B96E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8108.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6BEE89-D04B-46A4-BFF6-B34CC577E38D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8122.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504D36B5-2AAB-4B8C-ADA6-A2B23C25A7E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8155.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6C0472-CF2A-4C92-A75D-1FEFCD375E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8181.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10159C3-98C4-4A13-B513-6012C3AC9B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8197.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42B3C6B3-EB4C-4B81-8914-EA2CCB5E0D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8221.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E25CAE4-84AB-4161-9C91-9ACF541AB65B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8267.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EF8CD9-10F5-490A-A070-76DCA6757AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C26D6FD-4A8A-4C35-9AFD-1CF44345832A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8027.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D373AAB2-CBF0-4051-BCEF-CFF88E65FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8108.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDACB10C-9DC1-458A-A177-49D3CD86E3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8120.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FFE1B0-7C58-4E64-B429-E6354E00DD43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8158.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2FE473-2BDC-4FD2-A55D-B5D35E35653C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8182.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C447E85B-ADF3-4948-B622-03C2656A9E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8197.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBE34D7-C746-4C37-BD75-124D77588AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8218.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753F662D-A172-459B-B3C9-D419C6559858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8269.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB1525E-726C-4E78-8F74-378956B33F54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-02_Geo_SCADA_Security_Notification.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-02_Geo_SCADA_Security_Notification.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0341",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2023-02-01T00:15:10.343",
      "lastModified" : "2025-11-03T22:16:02.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack buffer overflow exists in the ec_glob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution. editorconfig-core-c v0.12.6 resolved this vulnerability by bound checking all write operations over the p_pcre buffer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@ubuntu.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@ubuntu.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:editorconfig:editorconfig:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.12.6",
            "matchCriteriaId" : "063ADAC0-7C09-4775-87F0-A2FE98E99FC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/editorconfig/editorconfig-core-c/commit/41281ea82fbf24b060a9f69b9c5369350fb0529e",
        "source" : "security@ubuntu.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZCFE7DXWAAKDJPRKMXHCACKGKNV37IYZ/",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "https://litios.github.io/2023/01/14/CVE-2023-0341.html",
        "source" : "security@ubuntu.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://ubuntu.com/security/notices/USN-5842-1",
        "source" : "security@ubuntu.com"
      }, {
        "url" : "https://github.com/editorconfig/editorconfig-core-c/commit/41281ea82fbf24b060a9f69b9c5369350fb0529e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/11/msg00036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZCFE7DXWAAKDJPRKMXHCACKGKNV37IYZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://litios.github.io/2023/01/14/CVE-2023-0341.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://ubuntu.com/security/notices/USN-5842-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23924",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-01T00:15:10.693",
      "lastModified" : "2024-11-21T07:47:06.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing `<image>` tags with uppercase letters. This may lead to arbitrary object unserialize on PHP < 8, through the `phar` URL wrapper. An attacker can exploit the vulnerability to call arbitrary URL with arbitrary protocols, if they can provide a SVG file to dompdf. In PHP versions before 8.0.0, it leads to arbitrary unserialize, that will lead to the very least to an arbitrary file deletion and even remote code execution, depending on classes that are available.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-551"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dompdf_project:dompdf:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A20BA838-5E5B-4CCD-B1DE-4AA444704DE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dompdf/dompdf/commit/7558f07f693b2ac3266089f21051e6b78c6a0c85",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dompdf/dompdf/releases/tag/v2.0.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dompdf/dompdf/commit/7558f07f693b2ac3266089f21051e6b78c6a0c85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dompdf/dompdf/releases/tag/v2.0.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T00:15:10.840",
      "lastModified" : "2025-03-27T15:15:45.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/loginpost.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forget_heart_message_box_project:forget_heart_message_box:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "125E4674-FA95-4147-80B6-C70917E9DDDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Mortalwangxin/lives/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Mortalwangxin/lives/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T00:15:10.890",
      "lastModified" : "2025-03-27T15:15:46.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /cha.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forget_heart_message_box_project:forget_heart_message_box:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "125E4674-FA95-4147-80B6-C70917E9DDDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Mortalwangxin/lives/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Mortalwangxin/lives/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0606",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-01T01:15:08.847",
      "lastModified" : "2024-11-21T07:37:28.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ampache:ampache:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.7",
            "matchCriteriaId" : "AA237F19-986D-4470-86E7-CEA9F0BBE2C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ampache/ampache/commit/d3191503ca856dfe0b33d7cb17717ffd480046cb",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/0bfed46d-ac96-43c4-93fb-13f68b4e711b",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ampache/ampache/commit/d3191503ca856dfe0b33d7cb17717ffd480046cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/0bfed46d-ac96-43c4-93fb-13f68b4e711b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23630",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-01T01:15:08.937",
      "lastModified" : "2024-11-21T07:46:34.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has been resolved. Users should upgrade to version 2.0.0. As a workaround, don't pass user supplied things directly to `res.render`. \n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eta.js:eta:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "1E6958D1-1731-4523-BE7B-F4BBED80549B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eta-dev/eta/commit/5651392462ee0ff19d77c8481081a99e5b9138dd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eta-dev/eta/releases/tag/v2.0.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eta-dev/eta/security/advisories/GHSA-xrh7-m5pp-39r6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eta-dev/eta/commit/5651392462ee0ff19d77c8481081a99e5b9138dd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eta-dev/eta/releases/tag/v2.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eta-dev/eta/security/advisories/GHSA-xrh7-m5pp-39r6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23928",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-01T01:15:09.023",
      "lastModified" : "2024-11-21T07:47:07.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "reason-jose is a JOSE implementation in ReasonML and OCaml.`Jose.Jws.validate` does not check HS256 signatures. This allows tampering of JWS header and payload data if the service does not perform additional checks. Such tampering could expose applications using reason-jose to authorization bypass. Applications relying on JWS claims assertion to enforce security boundaries may be vulnerable to privilege escalation. This issue has been patched in version 0.8.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reason-jose_project:reason-jose:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.2",
            "matchCriteriaId" : "7B7FDB28-C0C1-4092-80FE-FA8E7470E608"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ulrikstrid/reason-jose/commit/36cd724db3cbec121757624da49072386bd869e5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ulrikstrid/reason-jose/releases/tag/v0.8.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ulrikstrid/reason-jose/security/advisories/GHSA-7jj9-6qwv-wpm7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ulrikstrid/reason-jose/commit/36cd724db3cbec121757624da49072386bd869e5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ulrikstrid/reason-jose/releases/tag/v0.8.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ulrikstrid/reason-jose/security/advisories/GHSA-7jj9-6qwv-wpm7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0454",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-02-01T03:15:08.367",
      "lastModified" : "2025-03-27T15:15:41.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OrangeScrum version 2.0.11 allows an authenticated external attacker to delete arbitrary local files from the server. This is possible because the application uses an unsanitized attacker-controlled parameter to construct an internal path."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orangescrum:orangescrum:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563467F2-799D-404D-89D2-A6B5B6092614"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/slushii/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Orangescrum/orangescrum/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/slushii/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Orangescrum/orangescrum/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0524",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-02-01T03:15:08.427",
      "lastModified" : "2025-03-27T15:15:42.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "As part of our Security Development Lifecycle, a potential privilege escalation issue was identified internally. This could allow a malicious actor with sufficient permissions to modify environment variables and abuse an impacted plugin in order to escalate privileges. We have resolved the issue and also made several defense-in-depth fixes alongside. While the probability of successful exploitation is low, Tenable is committed to securing our customers’ environments and our products. The updates have been distributed via the Tenable plugin feed in feed serial numbers equal to or greater than #202212212055."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EEA2071-B520-44B1-9320-198E3D264721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:tenable.io:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C740060-086C-4893-BAF2-6BB423252956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:tenable.sc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D239571B-6590-49F6-93AB-5740A4BB2AA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/tns-2023-04",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2023-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0587",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2023-02-01T03:15:08.480",
      "lastModified" : "2025-03-27T15:15:42.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent to URL /officescan/console/html/cgi/fcgiOfcDDA.exe, an unauthenticated remote attacker can upload arbitrary files to the SampleSubmission directory (i.e., \\PCCSRV\\TEMP\\SampleSubmission) on the server. The attacker can upload a large number of large files to fill up the file system on which the Apex One server is installed."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:-:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E31C9ADB-D6BB-4C69-A6D6-DFFD2D2140D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-5",
        "source" : "security@trendmicro.com"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-5",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20856",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-02-01T03:15:08.533",
      "lastModified" : "2025-03-27T15:15:42.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0",
            "versionEndIncluding" : "8.6.4",
            "matchCriteriaId" : "1E4C986E-ED1E-4479-BE0F-18EC441CF8B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0002.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23846",
      "sourceIdentifier" : "disclosure@synopsys.com",
      "published" : "2023-02-01T03:15:08.593",
      "lastModified" : "2025-03-27T14:15:20.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to insufficient length validation in the Open5GS GTP library versions prior to versions 2.4.13 and 2.5.7, when parsing extension headers in GPRS tunneling protocol (GPTv1-U) messages, a protocol payload with any extension header length set to zero causes an infinite loop. The affected process becomes immediately unresponsive, resulting in denial of service and excessive resource consumption. CVSS3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@synopsys.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.13",
            "matchCriteriaId" : "725F73D9-6A8C-4D28-8FB2-3BC7E8BE580D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:2.5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "897E0F56-CD8E-4E4A-B2E0-9C13D949FC16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synopsys.com/blogs/software-security/cyrc-advisory-open5gs-gtp-library/",
        "source" : "disclosure@synopsys.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.synopsys.com/blogs/software-security/cyrc-advisory-open5gs-gtp-library/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0607",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-01T04:15:09.253",
      "lastModified" : "2024-11-21T07:37:28.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository projectsend/projectsend prior to r1606."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projectsend:projectsend:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "r1606",
            "matchCriteriaId" : "829FE2A0-DD2C-4933-A79D-4561855A1DC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/projectsend/projectsend/commit/698be4ade1db6ae0eaf27c843a03ffc9683cca0a",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/9294743d-7818-4264-b973-59de027d549b",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/projectsend/projectsend/commit/698be4ade1db6ae0eaf27c843a03ffc9683cca0a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/9294743d-7818-4264-b973-59de027d549b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0608",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-01T06:15:09.360",
      "lastModified" : "2024-11-21T07:37:28.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - DOM in GitHub repository microweber/microweber prior to 1.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "7909A23C-454B-4641-904E-E38E669A5745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/microweber/microweber/commit/20df56615e61624f5fff149849753869e4b3b936",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/02a86e0d-dff7-4e27-89d5-2f7dcd4b580c",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/microweber/microweber/commit/20df56615e61624f5fff149849753869e4b3b936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/02a86e0d-dff7-4e27-89d5-2f7dcd4b580c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0115",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2023-02-01T07:15:10.890",
      "lastModified" : "2023-11-07T03:59:40.983",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24977",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-02-01T10:15:10.197",
      "lastModified" : "2025-03-27T14:15:20.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick  https://github.com/apache/inlong/pull/7214 https://github.com/apache/inlong/pull/7214  to solve it.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:inlong:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "6B76100A-B84F-42E0-98DD-8637E4B5C63A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/ggozxorctn3tdll7bgmpwwcbjnd0s6w7",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/ggozxorctn3tdll7bgmpwwcbjnd0s6w7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0609",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-01T12:15:09.150",
      "lastModified" : "2024-11-21T07:37:28.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wallabag:wallabag:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.3",
            "matchCriteriaId" : "D7AC40AC-B5ED-41CB-B044-3D6B8D807FEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wallabag/wallabag/commit/0f7460dbab9e29f4f7d2944aca20210f828b6abb",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/3adef66f-fc86-4e6d-a540-2ffa59342ff0",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wallabag/wallabag/commit/0f7460dbab9e29f4f7d2944aca20210f828b6abb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/3adef66f-fc86-4e6d-a540-2ffa59342ff0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0610",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-01T12:15:09.257",
      "lastModified" : "2024-11-21T07:37:28.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wallabag:wallabag:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.3",
            "matchCriteriaId" : "D7AC40AC-B5ED-41CB-B044-3D6B8D807FEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wallabag/wallabag/commit/5ac6b6bff9e2e3a87fd88c2904ff3c6aac40722e",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/8fdd9b31-d89b-4bbe-9557-20b960faf926",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wallabag/wallabag/commit/5ac6b6bff9e2e3a87fd88c2904ff3c6aac40722e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/8fdd9b31-d89b-4bbe-9557-20b960faf926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22572",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-01T13:15:09.537",
      "lastModified" : "2024-11-21T07:44:59.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in change password api. A low privilege local attacker could potentially exploit this vulnerability, leading to system takeover.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0.0",
            "versionEndExcluding" : "9.1.0.27",
            "matchCriteriaId" : "D9D60B42-263C-400D-AFD6-62EF2A6043F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.1.0",
            "versionEndExcluding" : "9.2.1.20",
            "matchCriteriaId" : "B800B3F7-925B-409C-ABFC-0AA9BA92835A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0.0",
            "versionEndExcluding" : "9.4.0.11",
            "matchCriteriaId" : "C78B8E43-AB76-48CD-A626-31D54F1ADFDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207863/dell-powerscale-onefs-security-updates-for-multiple-security",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207863/dell-powerscale-onefs-security-updates-for-multiple-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23692",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-01T13:15:09.640",
      "lastModified" : "2024-11-21T07:46:40.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell EMC prior to version DDOS 7.9 contain(s) an OS command injection Vulnerability. An authenticated non admin attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_data_domain_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.1.90",
            "matchCriteriaId" : "2CE47954-0C0D-43F2-AB58-C72D87E5CB96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_data_domain_os:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "7.0.0.0",
            "versionEndExcluding" : "7.9.0.0",
            "matchCriteriaId" : "4A9CCC71-0BE1-477F-A8DD-70318B2301C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_data_domain_os:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "7.7.1",
            "versionEndExcluding" : "7.7.3",
            "matchCriteriaId" : "396BB44C-76A2-465E-816D-EB6CC51D3641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000201296/dsa-2022-187-dell-technologies-powerprotect-data-domain-security-update-for-multiple-third-party-component-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000201296/dsa-2022-187-dell-technologies-powerprotect-data-domain-security-update-for-multiple-third-party-component-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0611",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-01T14:15:09.140",
      "lastModified" : "2024-11-21T07:37:29.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-219935."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tew-652brp_firmware:3.04b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40304FE0-59D4-412D-8924-D38AD22B3342"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tew-652brp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34240C4B-2DD3-495C-A55F-916914141DC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.219935",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219935",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0612",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-01T14:15:09.227",
      "lastModified" : "2024-11-21T07:37:29.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. Affected is an unknown function of the file /wireless/basic.asp of the component httpd. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219936."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tew-811dru_firmware:1.0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BB401A-411B-423C-A878-04C8D7A0AD17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tew-811dru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525C167E-32FA-44C2-B6E2-BFE01F28592E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.219936",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219936",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0613",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-01T14:15:09.303",
      "lastModified" : "2024-11-21T07:37:29.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /wireless/security.asp of the component httpd. The manipulation leads to memory corruption. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219937 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tew-811dru_firmware:1.0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BB401A-411B-423C-A878-04C8D7A0AD17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tew-811dru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525C167E-32FA-44C2-B6E2-BFE01F28592E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.219937",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219937",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22573",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-01T14:15:09.383",
      "lastModified" : "2024-11-21T07:44:59.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS 9.0.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in cloudpool. A low privileged local attacker could potentially exploit this vulnerability, leading to sensitive information disclosure.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0.0",
            "versionEndExcluding" : "9.1.0.27",
            "matchCriteriaId" : "D9D60B42-263C-400D-AFD6-62EF2A6043F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.1.0",
            "versionEndExcluding" : "9.2.1.20",
            "matchCriteriaId" : "B800B3F7-925B-409C-ABFC-0AA9BA92835A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0.0",
            "versionEndExcluding" : "9.4.0.11",
            "matchCriteriaId" : "C78B8E43-AB76-48CD-A626-31D54F1ADFDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207863/dell-powerscale-onefs-security-updates-for-multiple-security",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207863/dell-powerscale-onefs-security-updates-for-multiple-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22574",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-01T14:15:09.467",
      "lastModified" : "2024-11-21T07:44:59.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in platform API of IPMI module. A low-privileged user with permission to read logs on the cluster could potentially exploit this vulnerability, leading to Information disclosure and denial of service.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0.0",
            "versionEndExcluding" : "9.1.0.27",
            "matchCriteriaId" : "D9D60B42-263C-400D-AFD6-62EF2A6043F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.1.0",
            "versionEndExcluding" : "9.2.1.20",
            "matchCriteriaId" : "B800B3F7-925B-409C-ABFC-0AA9BA92835A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0.0",
            "versionEndExcluding" : "9.4.0.11",
            "matchCriteriaId" : "C78B8E43-AB76-48CD-A626-31D54F1ADFDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207863/dell-powerscale-onefs-security-updates-for-multiple-security",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207863/dell-powerscale-onefs-security-updates-for-multiple-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22575",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-01T14:15:09.540",
      "lastModified" : "2024-11-21T07:44:59.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in celog. A low privileges user could potentially exploit this vulnerability, leading to information disclosure and escalation of privileges.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0.0",
            "versionEndExcluding" : "9.1.0.27",
            "matchCriteriaId" : "D9D60B42-263C-400D-AFD6-62EF2A6043F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.1.0",
            "versionEndExcluding" : "9.2.1.20",
            "matchCriteriaId" : "B800B3F7-925B-409C-ABFC-0AA9BA92835A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0.0",
            "versionEndExcluding" : "9.4.0.11",
            "matchCriteriaId" : "C78B8E43-AB76-48CD-A626-31D54F1ADFDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207863/dell-powerscale-onefs-security-updates-for-multiple-security",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207863/dell-powerscale-onefs-security-updates-for-multiple-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T14:15:09.617",
      "lastModified" : "2024-11-21T07:45:52.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Connectwise Automate 2022.11 is vulnerable to Clickjacking. The login screen can be iframed and used to manipulate users to perform unintended actions. NOTE: the vendor's position is that a Content-Security-Policy HTTP response header is present to block this attack."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connectwise:automate:2022.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93619A6-A32A-46DC-B4BD-7BDFB2A778E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/l00neyhacker/CVE-2023-23126",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/l00neyhacker/CVE-2023-23126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T14:15:09.670",
      "lastModified" : "2024-11-21T07:45:52.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Connectwise Control 22.8.10013.8329, the login page does not implement HSTS headers therefore not enforcing HTTPS. NOTE: the vendor's position is that, by design, this is controlled by a configuration option in which a customer can choose to use HTTP (rather than HTTPS) during troubleshooting."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connectwise:connectwise:22.8.10013.8329:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F085AAD0-724D-4D30-9D9C-CE54217E973E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/l00neyhacker/CVE-2023-23127",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/l00neyhacker/CVE-2023-23127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T14:15:09.723",
      "lastModified" : "2025-03-27T15:15:44.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Connectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS). The vendor's position is that two endpoints have Access-Control-Allow-Origin wildcarding to support product functionality, and that there is no risk from this behavior. The vulnerability report is thus not valid."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-942"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connectwise:connectwise:22.8.10013.8329:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F085AAD0-724D-4D30-9D9C-CE54217E973E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/l00neyhacker/CVE-2023-23128",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/l00neyhacker/CVE-2023-23128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T14:15:09.777",
      "lastModified" : "2024-11-21T07:45:52.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Connectwise Automate 2022.11 is vulnerable to Cleartext authentication. Authentication is being done via HTTP (cleartext) with SSL disabled. OTE: the vendor's position is that, by design, this is controlled by a configuration option in which a customer can choose to use HTTP (rather than HTTPS) during troubleshooting."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connectwise:automate:2022.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93619A6-A32A-46DC-B4BD-7BDFB2A778E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/l00neyhacker/CVE-2023-23130",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/l00neyhacker/CVE-2023-23130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T14:15:09.833",
      "lastModified" : "2025-03-27T15:15:44.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Selfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security (ATS) Settings."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:selfwealth:selfwealth:3.3.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "2F39BDE5-2456-49F5-B551-509AACEDC651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/l00neyhacker/CVE-2023-23131",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/l00neyhacker/CVE-2023-23131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T14:15:09.887",
      "lastModified" : "2025-03-27T15:15:44.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Selfwealth iOS mobile App 3.3.1 is vulnerable to Sensitive key disclosure. The application reveals hardcoded API keys."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:selfwealth:selfwealth:3.3.1:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "2F39BDE5-2456-49F5-B551-509AACEDC651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/l00neyhacker/CVE-2023-23132",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/l00neyhacker/CVE-2023-23132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T14:15:09.933",
      "lastModified" : "2025-03-27T15:15:45.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the \"practice logo\" upload feature. The client-side checks can be bypassed. This may allow attackers to steal Protected Health Information because the product is for health charting."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nosh_chartingsystem_project:nosh_chartingsystem:2021-03-13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F012E9-F643-4064-95A8-9B12F5BAFEE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/abbisQQ/d8392acf7e02003e73af973cc9f5f54a",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shihjay2/docker-nosh",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shihjay2/nosh2/tree/4a5cfdbd73f6a2ab5ee43a33d173c46fe0271533",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://noshemr.wordpress.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/abbisQQ/d8392acf7e02003e73af973cc9f5f54a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shihjay2/docker-nosh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shihjay2/nosh2/tree/4a5cfdbd73f6a2ab5ee43a33d173c46fe0271533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://noshemr.wordpress.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24997",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-02-01T15:15:08.943",
      "lastModified" : "2025-03-26T15:15:47.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick  https://github.com/apache/inlong/pull/7223 https://github.com/apache/inlong/pull/7223  to solve it.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:inlong:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "6B76100A-B84F-42E0-98DD-8637E4B5C63A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/nxvtxq7oxhwyzo9ty2hqz8rvh5r7ngd8",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/nxvtxq7oxhwyzo9ty2hqz8rvh5r7ngd8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T16:15:09.620",
      "lastModified" : "2025-03-27T15:15:44.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ftdms_project:ftdms:3.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F34928-9760-4C3E-87C3-F6211B8074E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.yuque.com/litanhua-fost9/hu05qa/fdmgbrzlvq9qpg3a?singleDoc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.yuque.com/litanhua-fost9/hu05qa/fdmgbrzlvq9qpg3a?singleDoc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T16:15:09.677",
      "lastModified" : "2025-03-27T15:15:44.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lmxcms:lmxcms:1.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD77AA-E05B-4141-AF77-E5F1AAA215EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.yuque.com/litanhua-fost9/hu05qa/izexczwp01w5c68i?singleDoc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.yuque.com/litanhua-fost9/hu05qa/izexczwp01w5c68i?singleDoc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0617",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-01T17:15:09.993",
      "lastModified" : "2024-11-21T07:37:29.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in TRENDNet TEW-811DRU 1.0.10.0. It has been classified as critical. This affects an unknown part of the file /wireless/guestnetwork.asp of the component httpd. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219957 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tew-811dru_firmware:1.0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BB401A-411B-423C-A878-04C8D7A0AD17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tew-811dru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525C167E-32FA-44C2-B6E2-BFE01F28592E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.219957",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219957",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0618",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-01T17:15:10.087",
      "lastModified" : "2024-11-21T07:37:29.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in TRENDnet TEW-652BRP 3.04B01. It has been declared as critical. This vulnerability affects unknown code of the file cfg_op.ccp of the component Web Service. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-219958 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tew-652brp_firmware:3.04b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40304FE0-59D4-412D-8924-D38AD22B3342"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tew-652brp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34240C4B-2DD3-495C-A55F-916914141DC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.219958",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219958",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.219958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.219958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22281",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:10.633",
      "lastModified" : "2024-11-21T07:44:27.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP AFM NAT policy with a destination NAT rule is configured on a FastL4 virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "6603ED6A-3366-4572-AFCD-B3D4B1EC7606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "440EF852-B052-4996-BBA1-FBABA72E3371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "C8B99C34-C4CF-4C21-B0FC-6FD8BE0EEFDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2BE9E6C1-F19B-4379-96AA-A4C43FED6921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "4D73AB87-F4A4-47D5-A21E-BB1330454634"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K46048342",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K46048342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22283",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:10.727",
      "lastModified" : "2024-11-21T07:44:27.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit this vulnerability because the victim user needs to run the executable on the system and the attacker requires administrative privileges for modifying the files in the trusted search path.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:clients:*:*:*",
            "versionStartIncluding" : "7.2.2",
            "versionEndExcluding" : "7.2.3.1",
            "matchCriteriaId" : "8424FB08-840E-4EE1-9F4B-E60705A4F466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "D93F04AD-DF14-48AB-9F13-8B2E491CF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndIncluding" : "14.1.5",
            "matchCriteriaId" : "7522C760-7E07-406F-BF50-5656D5723C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndIncluding" : "15.1.8",
            "matchCriteriaId" : "9568C6BD-0244-4220-8C95-DBF6C13526F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.3",
            "matchCriteriaId" : "607663E0-4D10-4C6C-8184-29A3EC921A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "E84986CC-EF54-4404-B559-3FF946C67BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge:-:*:*:*:clients:windows:*:*",
            "matchCriteriaId" : "1AD7F83E-183B-48A5-AAEA-9252CE86BC2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K07143733",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K07143733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22302",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:10.820",
      "lastModified" : "2024-11-21T07:44:29.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BIG-IP versions 17.0.x before 17.0.0.2, and 16.1.x beginning in 16.1.2.2 to before 16.1.3.3, when an HTTP profile is configured on a virtual server and conditions beyond the attacker’s control exist on the target pool member, undisclosed requests sent to the BIG-IP system can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "3B18C60C-27E7-4258-83B9-6972562E788B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "E84986CC-EF54-4404-B559-3FF946C67BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "0C2BE12E-5276-4589-9233-8B34501650B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "4D73AB87-F4A4-47D5-A21E-BB1330454634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "51E21925-F4CE-4205-A217-18E5BE0C75AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "A2E0F084-A550-40EC-A106-D869DDA96546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "B76DADBB-44CE-4729-B2C6-092C339EC7F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "7E9D2DF2-F179-4F04-AB09-1BEAD56248A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "264B4CF6-E013-46E6-A6FA-58B7D8A4A26A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "FD5FB958-EDC9-4D39-AE1E-9E77FB5437B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "CE7B7358-8E75-4070-A426-8D883B25E384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "33C4B785-93AC-4316-BDA1-D173520306E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F09EA8D1-1230-44E0-8AD7-2EF57C335C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "93721140-2035-4431-BF5F-CA0C78BBFE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "63F2F61C-D9E2-4968-A854-FA802D96656F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "1FACDA44-7199-47C7-A0C6-1728B46CC6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "065979A9-63DB-4DEB-A0A7-454733EFC45F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "1ED20421-3E21-40B8-B1FB-68F910F543F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "0941C38C-2BF4-4532-A4E2-4549823026A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "5FAB540A-6082-4F6E-9CDE-0AB719B1001F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "8A23C109-279D-4015-9EBD-47D54DDEA0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "AE38066A-9FAF-46E6-B3F8-1473D64EE122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "B9E33213-C376-4CFF-9156-80FDBC945ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "68A413B5-6809-4FB3-BAEC-5EF1FDF201B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K58550078",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K58550078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22323",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:10.897",
      "lastModified" : "2024-11-21T07:44:31.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when OCSP authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "D93F04AD-DF14-48AB-9F13-8B2E491CF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "EA291DB9-9484-45BA-A5A5-CCC721779149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "F011D077-34D8-49B9-AE48-EBCE1CAF771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "E211EE8D-ED93-4B99-9DF3-C0A56E782749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "E84986CC-EF54-4404-B559-3FF946C67BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "6603ED6A-3366-4572-AFCD-B3D4B1EC7606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "440EF852-B052-4996-BBA1-FBABA72E3371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "46DE9662-452B-44E5-A351-E4CD03B6EEEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2BE9E6C1-F19B-4379-96AA-A4C43FED6921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "4D73AB87-F4A4-47D5-A21E-BB1330454634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "9167FEC1-2C37-4946-9657-B4E69301FB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "E0E28602-52E9-41C5-A7A9-51CD9F2F5873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "CAD02810-F4C6-4D9E-A421-EFC3340A2DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F47748D7-BEF6-44B0-A748-6F5EF154A09E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "A2E0F084-A550-40EC-A106-D869DDA96546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "7EC2324D-EC8B-41DF-88A7-819E53AAD0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "360DEF03-0115-461B-980D-EE5FF1E46AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "8665197E-25F4-4EAC-A036-6EC313C69A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "7E9D2DF2-F179-4F04-AB09-1BEAD56248A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "922AA845-530A-4B4B-9976-4CBC30C8A324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "01ED85BB-C6EB-4CFE-BCF0-736E0B415219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "60D8B751-A4B8-4383-9144-C5DD3F5D6F4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "28B27399-D55E-4321-9B25-4685AA643B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "FD5FB958-EDC9-4D39-AE1E-9E77FB5437B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "CAEF3EA4-7D5A-4B44-9CE3-258AEC745866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "463B7FD5-870C-45B8-BF96-9CF7FB912FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "6C179F7C-E614-41B2-9490-A6CE382C33B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "96DE97E1-4375-47BB-985C-4F9E8CCE829E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "7DBB52D1-4FB8-4A71-8F83-02D7DDB99F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "C1E4E28F-9692-4E9C-87CA-58DA69F9DA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "203B2B00-7DA5-443D-B4AA-DE0814D7E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "93721140-2035-4431-BF5F-CA0C78BBFE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "E3D2ABA3-D4A9-4267-B0DF-7C3BBEEAEB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "334C98E1-97E4-41BC-A697-D62C2A3C4743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "40526EBE-1BB9-4AF3-89E8-A76568DB6F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "1FACDA44-7199-47C7-A0C6-1728B46CC6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "D9EC2237-117F-43BD-ADEC-516CF72E04EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "FE6497F1-2D9E-474E-B85B-974EA8A005BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "4407B5A5-E777-49C2-8607-4DF5BD8774F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "C1AEDD0E-C859-4946-9BF1-F9B2D5332789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "1ED20421-3E21-40B8-B1FB-68F910F543F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "0360F76D-E75E-4B05-A294-B47012323ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "EE9B290B-21D9-40B0-8A6D-36F2C310C71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "97C4077B-2EF0-49ED-A0C3-3BD3633CC7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F11221E1-8354-4854-A75D-060721E9671F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "5FAB540A-6082-4F6E-9CDE-0AB719B1001F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "8257AA59-C14D-4EC1-B22C-DFBB92CBC297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "57E33EBA-932D-42C9-92B7-A8686507865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "18F410EF-512D-4CB5-8C8D-307D3F5C375E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2EF26563-5CFC-45E3-84DC-73575B22A16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "AE38066A-9FAF-46E6-B3F8-1473D64EE122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "8A6F9699-A485-4614-8F38-5A556D31617E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "B6944B40-9A0E-467D-B804-D79BDA2958D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "C729756D-3EE0-4C13-9F8B-650A1A1D0A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "635F85D5-C992-4C41-8B26-317DBCD2F2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "68A413B5-6809-4FB3-BAEC-5EF1FDF201B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K56412001",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K56412001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22326",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:10.977",
      "lastModified" : "2024-11-21T07:44:32.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, and all versions of BIG-IQ 8.x and 7.1.x, incorrect permission assignment vulnerabilities exist in the iControl REST and TMOS shell (tmsh) dig command which may allow an authenticated attacker with resource administrator or administrator role privileges to view sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "D93F04AD-DF14-48AB-9F13-8B2E491CF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "EA291DB9-9484-45BA-A5A5-CCC721779149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "F011D077-34D8-49B9-AE48-EBCE1CAF771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "E211EE8D-ED93-4B99-9DF3-C0A56E782749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "E84986CC-EF54-4404-B559-3FF946C67BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "6603ED6A-3366-4572-AFCD-B3D4B1EC7606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "440EF852-B052-4996-BBA1-FBABA72E3371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "46DE9662-452B-44E5-A351-E4CD03B6EEEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2BE9E6C1-F19B-4379-96AA-A4C43FED6921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "4D73AB87-F4A4-47D5-A21E-BB1330454634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "9167FEC1-2C37-4946-9657-B4E69301FB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "E0E28602-52E9-41C5-A7A9-51CD9F2F5873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "CAD02810-F4C6-4D9E-A421-EFC3340A2DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F47748D7-BEF6-44B0-A748-6F5EF154A09E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "A2E0F084-A550-40EC-A106-D869DDA96546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "7EC2324D-EC8B-41DF-88A7-819E53AAD0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "360DEF03-0115-461B-980D-EE5FF1E46AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "8665197E-25F4-4EAC-A036-6EC313C69A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "7E9D2DF2-F179-4F04-AB09-1BEAD56248A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "922AA845-530A-4B4B-9976-4CBC30C8A324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "01ED85BB-C6EB-4CFE-BCF0-736E0B415219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "60D8B751-A4B8-4383-9144-C5DD3F5D6F4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "28B27399-D55E-4321-9B25-4685AA643B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "FD5FB958-EDC9-4D39-AE1E-9E77FB5437B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "CAEF3EA4-7D5A-4B44-9CE3-258AEC745866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "463B7FD5-870C-45B8-BF96-9CF7FB912FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "6C179F7C-E614-41B2-9490-A6CE382C33B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "96DE97E1-4375-47BB-985C-4F9E8CCE829E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "7DBB52D1-4FB8-4A71-8F83-02D7DDB99F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "C1E4E28F-9692-4E9C-87CA-58DA69F9DA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "203B2B00-7DA5-443D-B4AA-DE0814D7E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "93721140-2035-4431-BF5F-CA0C78BBFE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "E3D2ABA3-D4A9-4267-B0DF-7C3BBEEAEB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "334C98E1-97E4-41BC-A697-D62C2A3C4743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "40526EBE-1BB9-4AF3-89E8-A76568DB6F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "1FACDA44-7199-47C7-A0C6-1728B46CC6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "D9EC2237-117F-43BD-ADEC-516CF72E04EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "FE6497F1-2D9E-474E-B85B-974EA8A005BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "4407B5A5-E777-49C2-8607-4DF5BD8774F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "C1AEDD0E-C859-4946-9BF1-F9B2D5332789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "1ED20421-3E21-40B8-B1FB-68F910F543F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "0360F76D-E75E-4B05-A294-B47012323ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "EE9B290B-21D9-40B0-8A6D-36F2C310C71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "97C4077B-2EF0-49ED-A0C3-3BD3633CC7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F11221E1-8354-4854-A75D-060721E9671F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "5FAB540A-6082-4F6E-9CDE-0AB719B1001F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "8257AA59-C14D-4EC1-B22C-DFBB92CBC297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "57E33EBA-932D-42C9-92B7-A8686507865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "18F410EF-512D-4CB5-8C8D-307D3F5C375E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2EF26563-5CFC-45E3-84DC-73575B22A16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "AE38066A-9FAF-46E6-B3F8-1473D64EE122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "8A6F9699-A485-4614-8F38-5A556D31617E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "B6944B40-9A0E-467D-B804-D79BDA2958D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "C729756D-3EE0-4C13-9F8B-650A1A1D0A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "635F85D5-C992-4C41-8B26-317DBCD2F2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "68A413B5-6809-4FB3-BAEC-5EF1FDF201B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K83284425",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K83284425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22340",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:11.057",
      "lastModified" : "2024-11-21T07:44:35.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "D93F04AD-DF14-48AB-9F13-8B2E491CF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "EA291DB9-9484-45BA-A5A5-CCC721779149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "48743FD4-1E72-4550-92D6-F06D6D0AF142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "E211EE8D-ED93-4B99-9DF3-C0A56E782749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "E84986CC-EF54-4404-B559-3FF946C67BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "6603ED6A-3366-4572-AFCD-B3D4B1EC7606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "440EF852-B052-4996-BBA1-FBABA72E3371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "C8B99C34-C4CF-4C21-B0FC-6FD8BE0EEFDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2BE9E6C1-F19B-4379-96AA-A4C43FED6921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "4D73AB87-F4A4-47D5-A21E-BB1330454634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "9167FEC1-2C37-4946-9657-B4E69301FB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "E0E28602-52E9-41C5-A7A9-51CD9F2F5873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "8B49E80B-DC4B-46E0-9CF6-1C5811002392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F47748D7-BEF6-44B0-A748-6F5EF154A09E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "A2E0F084-A550-40EC-A106-D869DDA96546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "7EC2324D-EC8B-41DF-88A7-819E53AAD0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "AA4D9B75-748C-4C7F-AE97-855B5F222636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "8665197E-25F4-4EAC-A036-6EC313C69A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "7E9D2DF2-F179-4F04-AB09-1BEAD56248A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "922AA845-530A-4B4B-9976-4CBC30C8A324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "01ED85BB-C6EB-4CFE-BCF0-736E0B415219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "426A5E99-92B8-4066-B15A-D2A72A66E3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "28B27399-D55E-4321-9B25-4685AA643B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "FD5FB958-EDC9-4D39-AE1E-9E77FB5437B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "CAEF3EA4-7D5A-4B44-9CE3-258AEC745866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "463B7FD5-870C-45B8-BF96-9CF7FB912FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "779C477A-FB55-430D-BC76-4E806AC3B080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "96DE97E1-4375-47BB-985C-4F9E8CCE829E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "7DBB52D1-4FB8-4A71-8F83-02D7DDB99F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "80F1CDC7-8C9D-4B93-A827-AAB4C6821F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "203B2B00-7DA5-443D-B4AA-DE0814D7E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "93721140-2035-4431-BF5F-CA0C78BBFE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "E3D2ABA3-D4A9-4267-B0DF-7C3BBEEAEB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "678D6298-D741-482B-B1BB-C9405129F092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "40526EBE-1BB9-4AF3-89E8-A76568DB6F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "1FACDA44-7199-47C7-A0C6-1728B46CC6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "D9EC2237-117F-43BD-ADEC-516CF72E04EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "FE6497F1-2D9E-474E-B85B-974EA8A005BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "D0FFF95F-EB3C-4358-B16F-C2133FBB7F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "C1AEDD0E-C859-4946-9BF1-F9B2D5332789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "1ED20421-3E21-40B8-B1FB-68F910F543F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "0360F76D-E75E-4B05-A294-B47012323ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "EE9B290B-21D9-40B0-8A6D-36F2C310C71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "71E828B7-811C-401A-B3C5-E32EEC965206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F11221E1-8354-4854-A75D-060721E9671F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "5FAB540A-6082-4F6E-9CDE-0AB719B1001F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "8257AA59-C14D-4EC1-B22C-DFBB92CBC297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "57E33EBA-932D-42C9-92B7-A8686507865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "86755A3C-F6C2-41C7-8DE7-F2E607FB135A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2EF26563-5CFC-45E3-84DC-73575B22A16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "AE38066A-9FAF-46E6-B3F8-1473D64EE122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "8A6F9699-A485-4614-8F38-5A556D31617E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "B6944B40-9A0E-467D-B804-D79BDA2958D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "06941667-C25E-4A2F-839D-12980E86F4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "635F85D5-C992-4C41-8B26-317DBCD2F2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "68A413B5-6809-4FB3-BAEC-5EF1FDF201B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K34525368",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K34525368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22341",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:11.137",
      "lastModified" : "2024-11-21T07:44:35.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the following elements, undisclosed requests may cause the Traffic Management Microkernel (TMM) to terminate:\n\n  *  An OAuth Server that references an OAuth Provider\n  *  An OAuth profile with the Authorization Endpoint set to '/'\n  *  An access profile that references the above OAuth profile and is associated with an HTTPS virtual server \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "D93F04AD-DF14-48AB-9F13-8B2E491CF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "EA291DB9-9484-45BA-A5A5-CCC721779149"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K20717585",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K20717585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22358",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:11.247",
      "lastModified" : "2024-11-21T07:44:37.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In versions beginning with 7.2.2 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:clients:*:*:*",
            "versionStartIncluding" : "7.2.2",
            "versionEndExcluding" : "7.2.3.1",
            "matchCriteriaId" : "8424FB08-840E-4EE1-9F4B-E60705A4F466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "D93F04AD-DF14-48AB-9F13-8B2E491CF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndIncluding" : "14.1.5",
            "matchCriteriaId" : "7522C760-7E07-406F-BF50-5656D5723C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndIncluding" : "15.1.8",
            "matchCriteriaId" : "9568C6BD-0244-4220-8C95-DBF6C13526F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.1.3",
            "matchCriteriaId" : "607663E0-4D10-4C6C-8184-29A3EC921A83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "E84986CC-EF54-4404-B559-3FF946C67BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge:-:*:*:*:clients:windows:*:*",
            "matchCriteriaId" : "1AD7F83E-183B-48A5-AAEA-9252CE86BC2C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K76964818",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K76964818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22374",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:11.363",
      "lastModified" : "2024-11-21T07:44:39.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary.\n Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n\n\n"
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de cadena de formato en iControl SOAP que permite a un atacante autenticado bloquear el proceso CGI de iControl SOAP o, potencialmente, ejecutar código arbitrario. En el modo de dispositivo BIG-IP, una explotación exitosa de esta vulnerabilidad puede permitir al atacante cruzar un límite de seguridad. Nota: Las versiones de software que han llegado al final del soporte técnico (EoTS) no se evalúan."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.4.6",
            "versionEndIncluding" : "14.1.5",
            "matchCriteriaId" : "BEFCEE4A-EFF7-4622-964D-29706B0D0788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.5.1",
            "versionEndIncluding" : "15.1.8",
            "matchCriteriaId" : "65BD1840-28C2-42B7-BE75-081DE24081A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndIncluding" : "16.1.3",
            "matchCriteriaId" : "3D511799-6CEE-4337-BF66-38D7AF4D68C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:13.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E688B1-28C4-4F9A-9474-381FD22E792D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:17.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD637AF5-F7D1-428F-955E-16756B7476E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.4.6",
            "versionEndIncluding" : "14.1.5",
            "matchCriteriaId" : "32BBAAC4-BCC4-4A84-A579-4356EF78AA22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.5.1",
            "versionEndIncluding" : "15.1.8",
            "matchCriteriaId" : "AA72ED00-F966-4762-9025-3DB63A1640A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndIncluding" : "16.1.3",
            "matchCriteriaId" : "0279F4AF-C297-47B3-A1DD-C99DF6AAD215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "200AC72D-719D-4663-BE05-C9C7826DEA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:17.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8332960-4AAE-4101-8FFF-2D07B6479BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.4.6",
            "versionEndIncluding" : "14.1.5",
            "matchCriteriaId" : "4B721D9E-AD2F-44C9-9163-3785AA1A8441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.5.1",
            "versionEndIncluding" : "15.1.8",
            "matchCriteriaId" : "2685F058-2BEF-4189-BFBC-2F223C776A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndIncluding" : "16.1.3",
            "matchCriteriaId" : "79DD896D-ABC7-485B-8810-39BB65DAF76C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:13.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129F1B0B-44E4-4F67-B0B6-43CD2734F30A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:17.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0A9081-15D2-44F7-B66E-5C594F7C8066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.5.1",
            "versionEndIncluding" : "15.1.8",
            "matchCriteriaId" : "DC06C851-23E7-4793-9BB0-A1172B78B15F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndIncluding" : "16.1.3",
            "matchCriteriaId" : "1AAE414B-CD2C-4FE1-9124-6F43040DDFB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF66FD8-CDA5-4E44-8A0D-9FF07E8C1E05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:17.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEBE106-40F1-439C-8154-187D89988C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.4.6",
            "versionEndIncluding" : "14.1.5",
            "matchCriteriaId" : "AEFB9B30-9A07-4D28-B3EA-267D257B7E89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.5.1",
            "versionEndIncluding" : "15.1.8",
            "matchCriteriaId" : "764E6777-2C42-46FE-A266-ABBEB05D0F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndIncluding" : "16.1.3",
            "matchCriteriaId" : "D90494BC-DEBB-47A2-9794-BAC0BF670A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:13.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5FDBD38-369B-4007-8D9A-B65B83B2AABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:17.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AB53DF-7335-462E-B8CD-44DF0DCE3826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.4.6",
            "versionEndIncluding" : "14.1.5",
            "matchCriteriaId" : "C278A7AA-1CA3-432D-9C22-772A288CC178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.5.1",
            "versionEndIncluding" : "15.1.8",
            "matchCriteriaId" : "785DD62D-CA21-40EC-8AF0-8CC36CCB8304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndIncluding" : "16.1.3",
            "matchCriteriaId" : "AA133203-B4FE-415D-B9C8-7CDE1A7895D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:13.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C73DC4-D85A-49A1-81BD-E9D145E42FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.4.6",
            "versionEndIncluding" : "14.1.5",
            "matchCriteriaId" : "019D49C1-4A4D-40EE-8242-A649BE03E38B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.5.1",
            "versionEndIncluding" : "15.1.8",
            "matchCriteriaId" : "E943A8AF-F993-4C1C-ADF1-06519694E4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndIncluding" : "16.1.3",
            "matchCriteriaId" : "C6A12A83-966B-4B6D-AE49-C1696819E548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:17.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4E36FE-C4C7-4C00-A65A-41F50FCE017D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.5.1",
            "versionEndIncluding" : "15.1.8",
            "matchCriteriaId" : "B46626AD-CF6B-4A1C-8103-0A616C053E5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndIncluding" : "16.1.3",
            "matchCriteriaId" : "4842CD17-44B8-456D-9AC7-A295B4D4DBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:13.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F933F2D2-1C1D-43F0-9BD2-4699716E4A94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:17.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0954BD-CC9C-448F-A9C1-3FB71AB27D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.4.6",
            "versionEndIncluding" : "14.1.5",
            "matchCriteriaId" : "FDC74428-66DF-4A88-A6F5-064160B4C72C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.5.1",
            "versionEndIncluding" : "15.1.8",
            "matchCriteriaId" : "44E0FC7E-30C1-49D7-9B89-4CB747B28CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndIncluding" : "16.1.3",
            "matchCriteriaId" : "1647DB93-A49C-4A04-B181-3465427D4B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:13.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26873D65-5406-45AF-A7F4-14AF2C55D368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:17.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B147BB-1B2E-4F40-9FA7-1165B8F0B60D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.4.6",
            "versionEndIncluding" : "14.1.5",
            "matchCriteriaId" : "8155903D-1A5F-482E-B356-526E9A973BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.5.1",
            "versionEndIncluding" : "15.1.8",
            "matchCriteriaId" : "F3938C6C-6855-4873-89EA-4C8B8EFD571C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndIncluding" : "16.1.3",
            "matchCriteriaId" : "0E52120D-FBF7-4687-87A8-BC4AE07DC734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E37750C-50F3-480A-AA40-23D59F50E4B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:17.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FB842B-33B1-4AD4-AC61-47192A87A785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.4.6",
            "versionEndIncluding" : "14.1.5",
            "matchCriteriaId" : "04FFF651-F115-4591-BA61-E099DE307168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.5.1",
            "versionEndIncluding" : "15.1.8",
            "matchCriteriaId" : "FC136CEA-2431-4D53-B898-E245826A9995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndIncluding" : "16.1.3",
            "matchCriteriaId" : "1CD177FA-262E-4874-9850-4E8525181ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F754F6FC-2A29-453F-9E9B-39C779830562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:17.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "509A4307-3EC4-4AE7-AF72-3C2B3CF9E754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.4.6",
            "versionEndIncluding" : "14.1.5",
            "matchCriteriaId" : "854D89CF-0E69-4BA9-A881-02673E3D91F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.5.1",
            "versionEndIncluding" : "15.1.8",
            "matchCriteriaId" : "D03D7294-C5CD-4EC1-8200-A998AED7F8E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.2.2",
            "versionEndIncluding" : "16.1.3",
            "matchCriteriaId" : "D2DACFE8-5E0B-49EC-894E-175591E9C775"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:13.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4686BF-A9FA-4770-BD06-74BA4CA49FCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:17.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88B13312-1958-4B5C-BD4B-2075F6BF8C98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K000130415",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K000130415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22418",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:11.450",
      "lastModified" : "2024-11-21T07:44:46.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.7, 14.1.x before 14.1.5.3, and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers enabled with a BIG-IP APM access policy.  This vulnerability allows an unauthenticated malicious attacker to build an open redirect URI.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "D93F04AD-DF14-48AB-9F13-8B2E491CF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "EA291DB9-9484-45BA-A5A5-CCC721779149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.7",
            "matchCriteriaId" : "1E336C29-785D-4363-BB00-3ECD1FFEB579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "E211EE8D-ED93-4B99-9DF3-C0A56E782749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "E84986CC-EF54-4404-B559-3FF946C67BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "6603ED6A-3366-4572-AFCD-B3D4B1EC7606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "440EF852-B052-4996-BBA1-FBABA72E3371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.7",
            "matchCriteriaId" : "1226D02E-50F2-4B75-B524-A11D045E4EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2BE9E6C1-F19B-4379-96AA-A4C43FED6921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "4D73AB87-F4A4-47D5-A21E-BB1330454634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "9167FEC1-2C37-4946-9657-B4E69301FB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "E0E28602-52E9-41C5-A7A9-51CD9F2F5873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.7",
            "matchCriteriaId" : "0F88BE16-F358-4DCD-AB1A-9F374EF03244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F47748D7-BEF6-44B0-A748-6F5EF154A09E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "A2E0F084-A550-40EC-A106-D869DDA96546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "7EC2324D-EC8B-41DF-88A7-819E53AAD0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.7",
            "matchCriteriaId" : "3E41ADFF-6B66-4251-A642-DDC13E33A643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "8665197E-25F4-4EAC-A036-6EC313C69A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "7E9D2DF2-F179-4F04-AB09-1BEAD56248A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "922AA845-530A-4B4B-9976-4CBC30C8A324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "01ED85BB-C6EB-4CFE-BCF0-736E0B415219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.7",
            "matchCriteriaId" : "DAE8E3A1-0E66-4A4C-BA58-E22AEA8705F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "28B27399-D55E-4321-9B25-4685AA643B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "FD5FB958-EDC9-4D39-AE1E-9E77FB5437B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "CAEF3EA4-7D5A-4B44-9CE3-258AEC745866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "463B7FD5-870C-45B8-BF96-9CF7FB912FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.7",
            "matchCriteriaId" : "4F8F118D-3C63-49F9-80EE-CE280F10747F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "96DE97E1-4375-47BB-985C-4F9E8CCE829E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "7DBB52D1-4FB8-4A71-8F83-02D7DDB99F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.7",
            "matchCriteriaId" : "313014B4-8033-4B57-B838-66EE163E86D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "203B2B00-7DA5-443D-B4AA-DE0814D7E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "93721140-2035-4431-BF5F-CA0C78BBFE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "E3D2ABA3-D4A9-4267-B0DF-7C3BBEEAEB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.7",
            "matchCriteriaId" : "63CACC49-9262-413B-9541-F062FB114957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "40526EBE-1BB9-4AF3-89E8-A76568DB6F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "1FACDA44-7199-47C7-A0C6-1728B46CC6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "D9EC2237-117F-43BD-ADEC-516CF72E04EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "FE6497F1-2D9E-474E-B85B-974EA8A005BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.7",
            "matchCriteriaId" : "45E9C4FB-F76E-4A1C-AD55-7BB7A4BD303A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "C1AEDD0E-C859-4946-9BF1-F9B2D5332789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "1ED20421-3E21-40B8-B1FB-68F910F543F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "0360F76D-E75E-4B05-A294-B47012323ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "EE9B290B-21D9-40B0-8A6D-36F2C310C71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.7",
            "matchCriteriaId" : "E25D2597-32D7-4676-9A0C-FCAD8D8900A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F11221E1-8354-4854-A75D-060721E9671F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "5FAB540A-6082-4F6E-9CDE-0AB719B1001F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "8257AA59-C14D-4EC1-B22C-DFBB92CBC297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "57E33EBA-932D-42C9-92B7-A8686507865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.7",
            "matchCriteriaId" : "7C108E49-CF06-493E-8BEE-2FA0F5999AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2EF26563-5CFC-45E3-84DC-73575B22A16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "AE38066A-9FAF-46E6-B3F8-1473D64EE122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "8A6F9699-A485-4614-8F38-5A556D31617E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "B6944B40-9A0E-467D-B804-D79BDA2958D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "C729756D-3EE0-4C13-9F8B-650A1A1D0A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "635F85D5-C992-4C41-8B26-317DBCD2F2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "68A413B5-6809-4FB3-BAEC-5EF1FDF201B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K95503300",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K95503300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22422",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:11.530",
      "lastModified" : "2024-11-21T07:44:47.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, when a HTTP profile with the non-default Enforcement options of Enforce HTTP Compliance and Unknown Methods: Reject are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "E211EE8D-ED93-4B99-9DF3-C0A56E782749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "E84986CC-EF54-4404-B559-3FF946C67BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2BE9E6C1-F19B-4379-96AA-A4C43FED6921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "4D73AB87-F4A4-47D5-A21E-BB1330454634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F47748D7-BEF6-44B0-A748-6F5EF154A09E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "A2E0F084-A550-40EC-A106-D869DDA96546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "8665197E-25F4-4EAC-A036-6EC313C69A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "7E9D2DF2-F179-4F04-AB09-1BEAD56248A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "28B27399-D55E-4321-9B25-4685AA643B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "FD5FB958-EDC9-4D39-AE1E-9E77FB5437B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "96DE97E1-4375-47BB-985C-4F9E8CCE829E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "33C4B785-93AC-4316-BDA1-D173520306E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "203B2B00-7DA5-443D-B4AA-DE0814D7E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "93721140-2035-4431-BF5F-CA0C78BBFE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "40526EBE-1BB9-4AF3-89E8-A76568DB6F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "1FACDA44-7199-47C7-A0C6-1728B46CC6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "C1AEDD0E-C859-4946-9BF1-F9B2D5332789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "1ED20421-3E21-40B8-B1FB-68F910F543F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F11221E1-8354-4854-A75D-060721E9671F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "5FAB540A-6082-4F6E-9CDE-0AB719B1001F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2EF26563-5CFC-45E3-84DC-73575B22A16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "AE38066A-9FAF-46E6-B3F8-1473D64EE122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "635F85D5-C992-4C41-8B26-317DBCD2F2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "68A413B5-6809-4FB3-BAEC-5EF1FDF201B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K43881487",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K43881487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22657",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:11.600",
      "lastModified" : "2024-11-21T07:45:08.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F5OS tenant file names may allow for command injection.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:f5os-a:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "AF2AFE26-7A39-45F8-9586-F3B0100ED14A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:f5os-c:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "CD1B62BE-E207-4600-BD6C-CAE977AB1B46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K06345931",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K06345931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22664",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:11.677",
      "lastModified" : "2024-11-21T07:45:09.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, and BIG-IP SPK starting in version 1.6.0, when a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, undisclosed requests can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "E211EE8D-ED93-4B99-9DF3-C0A56E782749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "E84986CC-EF54-4404-B559-3FF946C67BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2BE9E6C1-F19B-4379-96AA-A4C43FED6921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "4D73AB87-F4A4-47D5-A21E-BB1330454634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F47748D7-BEF6-44B0-A748-6F5EF154A09E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "A2E0F084-A550-40EC-A106-D869DDA96546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "8665197E-25F4-4EAC-A036-6EC313C69A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "7E9D2DF2-F179-4F04-AB09-1BEAD56248A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "28B27399-D55E-4321-9B25-4685AA643B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "FD5FB958-EDC9-4D39-AE1E-9E77FB5437B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "96DE97E1-4375-47BB-985C-4F9E8CCE829E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "33C4B785-93AC-4316-BDA1-D173520306E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "203B2B00-7DA5-443D-B4AA-DE0814D7E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "93721140-2035-4431-BF5F-CA0C78BBFE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "40526EBE-1BB9-4AF3-89E8-A76568DB6F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "1FACDA44-7199-47C7-A0C6-1728B46CC6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "C1AEDD0E-C859-4946-9BF1-F9B2D5332789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "1ED20421-3E21-40B8-B1FB-68F910F543F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F11221E1-8354-4854-A75D-060721E9671F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "5FAB540A-6082-4F6E-9CDE-0AB719B1001F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2EF26563-5CFC-45E3-84DC-73575B22A16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "AE38066A-9FAF-46E6-B3F8-1473D64EE122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "635F85D5-C992-4C41-8B26-317DBCD2F2FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "68A413B5-6809-4FB3-BAEC-5EF1FDF201B0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_service_proxy:1.6.0:*:*:*:*:kubernetes:*:*",
            "matchCriteriaId" : "BC5AC8C7-92BA-48D4-81A1-F5323DA952A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K56676554",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K56676554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22839",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:11.750",
      "lastModified" : "2024-11-21T07:45:29.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x, when a DNS profile with the Rapid Response Mode setting enabled is configured on a virtual server with hardware SYN cookies enabled, undisclosed requests cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "08B25AAB-A98C-4F89-9131-29E3A8C0ED23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "7DBB52D1-4FB8-4A71-8F83-02D7DDB99F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.7",
            "matchCriteriaId" : "313014B4-8033-4B57-B838-66EE163E86D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "203B2B00-7DA5-443D-B4AA-DE0814D7E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "93721140-2035-4431-BF5F-CA0C78BBFE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "0360F76D-E75E-4B05-A294-B47012323ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "EE9B290B-21D9-40B0-8A6D-36F2C310C71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.7",
            "matchCriteriaId" : "E25D2597-32D7-4676-9A0C-FCAD8D8900A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F11221E1-8354-4854-A75D-060721E9671F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "5FAB540A-6082-4F6E-9CDE-0AB719B1001F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_10000s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F510CA2D-E049-4884-AB80-EC03560556EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_10000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4718F6EA-3955-44A1-98E7-CBEFA4E9C2C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_10200v_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59AA4F5-B072-4866-9912-FCBB5F77F8EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_10200v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "755CF51B-61AD-4C1E-9954-C44EC30E4339"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_10200v-ssl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C37E575D-5674-4BD6-9C24-D318A905FD4E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_10200v-ssl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BE455B9-7497-42EE-A6D2-EFEB0E9B5589"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_12000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5E0FBD3-584B-4E20-A664-AFC8B224466C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_12000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BF87EE2-1A8A-4050-8168-C4C8A1E49AD7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_5000s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA594DF-0441-4761-80AD-C3C64BD1BA59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_5000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF35744-F9B6-43FD-804D-955EC5AC7360"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_5200v_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA95257-25F5-483A-BBE5-F906EAF2BCF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_5200v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E943FF-3EE2-4F87-B005-80432EB4FB67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_5200v-ssl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD50226B-5D1A-44A0-B530-BBDB50CDC30F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_5200v-ssl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF21909-A75A-42ED-AAF4-3BC3EE412BA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_7000s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B405FC13-0B14-4497-8BE8-E09CE5369DE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_7000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "046B8D26-64B8-46C4-921A-983E0AE82752"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_7200v_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B1685A2-60F2-4B06-A68E-FC2E18CF3BEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_7200v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5FE621-B69A-4E93-B5FB-AC7C47A73766"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_7200v-ssl_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC83C650-6120-4FD8-85FC-131B7E78F9FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_7200v-ssl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4928A6CA-6FD3-405F-878F-12A199C54C03"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_i10600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1196C9FB-33CF-493C-8FCB-9FDFBD7A4CEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F768A343-E31B-4A0B-A1CE-B884BCF8DE96"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_i10800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E48A49B-586A-4585-8952-EBF30E8C726C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i10800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25711D89-A9A6-41E8-8DAB-FBFA9CADB69B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_i11600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4214D3DE-B42C-43A9-81CE-AB14FEA1E9B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i11600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "906F880E-4C8D-49B7-8C61-2C22348373CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_i11800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F03D79-CEC3-4EB0-8105-78AD07DDC8C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i11800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67973F6-506B-43EC-94A5-9EBCBD5131FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_i15600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA9A1D2B-33AA-4691-9891-4360B9B026EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i15600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B37E2A71-1BDC-4556-8204-2A3140EA2923"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_i15800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63DD90F-58DA-4FCF-BDD8-48A29D41AE8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i15800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323F3F62-98B5-4FE4-8FFA-F20AF5F1745F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_i5600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BD097C-73F2-4EB7-9024-3DC63EC419D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D848D43B-F994-45CF-AA53-ED0D4ACEDE8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_i5800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A81F6A51-9AEF-4502-B19C-449CC9FA7154"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C46A4D-3773-4EB4-B397-D02694FC65BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_i7600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D524EE-B941-4D73-A83F-02C3253492D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "842E7F16-4CB8-450F-BF18-829BAEFAF6CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:big-ip_i7800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C53B31C-E56F-4FD4-9B51-A741DA8FE479"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:big-ip_i7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7569487-6D88-46CC-9B70-59D56DB0CE35"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:r10600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDC8F7B-D052-4DAB-B572-17241E02DC01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:r10600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B494DEE-B373-4B3F-95C1-2E0997F32B6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:r10800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D400BBB2-399D-41C9-B73B-BDC280B5A51E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:r10800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC625D5-C59F-4D20-BA92-0EC85DAB8AFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:r10900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B5D6038-EB49-47DE-BC4A-8E9888F217DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:r10900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4233544A-999C-42CD-9B61-E639AAA460B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:r5600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CDBB9F-B6BD-4103-82E8-D66E067704C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:r5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DA75BA-A4B7-46BD-887D-03CDFAF22791"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:r5800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "612904C3-0EA5-4F56-BDFE-1A2114C28EEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:r5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52B4EBB6-BEEB-42DA-A146-10E401226BED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:r5900_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF08F72-E905-48C4-9339-0F23EE462CC5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:r5900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55433400-8996-44B8-94D7-81690145EF94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:velos_bx110_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8AB5834-CB4C-46AD-A0C6-E3800DE89453"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:velos_bx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5918B702-39A4-48F5-B381-7FFF0ABE4920"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:viprion_b2100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F04564-25E9-4962-949D-6C810091464D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:viprion_b2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3FCE60-4F2F-48FA-A0AC-89DE82118411"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:viprion_b2150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBFBFFE7-EA68-46E0-A172-FABDD99D7D8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:viprion_b2150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9940F471-FA88-49FB-B1BD-752366F9A15C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:viprion_b2250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58A0DEB-F0C7-40BD-ACE3-49F0CD5663D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:viprion_b2250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD814768-9507-4C58-9398-6898C3F49272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:viprion_b4300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83532FB3-30DE-44B9-A1B7-551F91E61C9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:viprion_b4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C0B96E2-7E5D-4C82-B4C5-3F35CD650962"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:f5:viprion_b4450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DD6188-94B2-43BE-93C8-F2493E2C2C23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:f5:viprion_b4450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "776A5309-2A92-462B-9CAB-067F5E522386"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K37708118",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K37708118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22842",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:11.827",
      "lastModified" : "2024-11-21T07:45:30.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "D93F04AD-DF14-48AB-9F13-8B2E491CF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "EA291DB9-9484-45BA-A5A5-CCC721779149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "F011D077-34D8-49B9-AE48-EBCE1CAF771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "E211EE8D-ED93-4B99-9DF3-C0A56E782749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "6603ED6A-3366-4572-AFCD-B3D4B1EC7606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "440EF852-B052-4996-BBA1-FBABA72E3371"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "46DE9662-452B-44E5-A351-E4CD03B6EEEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2BE9E6C1-F19B-4379-96AA-A4C43FED6921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "9167FEC1-2C37-4946-9657-B4E69301FB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "E0E28602-52E9-41C5-A7A9-51CD9F2F5873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "CAD02810-F4C6-4D9E-A421-EFC3340A2DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F47748D7-BEF6-44B0-A748-6F5EF154A09E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "7EC2324D-EC8B-41DF-88A7-819E53AAD0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "4AA0849B-0C78-417B-BFF9-A8034F3814C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "360DEF03-0115-461B-980D-EE5FF1E46AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "8665197E-25F4-4EAC-A036-6EC313C69A48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "922AA845-530A-4B4B-9976-4CBC30C8A324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "01ED85BB-C6EB-4CFE-BCF0-736E0B415219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "60D8B751-A4B8-4383-9144-C5DD3F5D6F4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "28B27399-D55E-4321-9B25-4685AA643B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "CAEF3EA4-7D5A-4B44-9CE3-258AEC745866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "463B7FD5-870C-45B8-BF96-9CF7FB912FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "6C179F7C-E614-41B2-9490-A6CE382C33B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "96DE97E1-4375-47BB-985C-4F9E8CCE829E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "08B25AAB-A98C-4F89-9131-29E3A8C0ED23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "7DBB52D1-4FB8-4A71-8F83-02D7DDB99F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "C1E4E28F-9692-4E9C-87CA-58DA69F9DA48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "203B2B00-7DA5-443D-B4AA-DE0814D7E04D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "E3D2ABA3-D4A9-4267-B0DF-7C3BBEEAEB66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "89D21BC2-ACF1-44C0-94CF-A23CDDC90797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "334C98E1-97E4-41BC-A697-D62C2A3C4743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "40526EBE-1BB9-4AF3-89E8-A76568DB6F63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "D9EC2237-117F-43BD-ADEC-516CF72E04EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "FE6497F1-2D9E-474E-B85B-974EA8A005BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "4407B5A5-E777-49C2-8607-4DF5BD8774F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "C1AEDD0E-C859-4946-9BF1-F9B2D5332789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "0360F76D-E75E-4B05-A294-B47012323ED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "EE9B290B-21D9-40B0-8A6D-36F2C310C71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "97C4077B-2EF0-49ED-A0C3-3BD3633CC7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "F11221E1-8354-4854-A75D-060721E9671F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "8257AA59-C14D-4EC1-B22C-DFBB92CBC297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "57E33EBA-932D-42C9-92B7-A8686507865C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "18F410EF-512D-4CB5-8C8D-307D3F5C375E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "2EF26563-5CFC-45E3-84DC-73575B22A16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "8A6F9699-A485-4614-8F38-5A556D31617E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "B6944B40-9A0E-467D-B804-D79BDA2958D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8.1",
            "matchCriteriaId" : "C729756D-3EE0-4C13-9F8B-650A1A1D0A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "635F85D5-C992-4C41-8B26-317DBCD2F2FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K08182564",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K08182564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23552",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:11.900",
      "lastModified" : "2024-11-21T07:46:24.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.0 before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP Advanced WAF or BIG-IP ASM security policy is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "05E452AA-A520-4CBE-8767-147772B69194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "F752D9F2-F68D-4D06-8FB6-50DED0E70EC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "F23755D6-5909-4E1F-9791-2B9527BA33B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "7164F98A-B139-456A-9C12-BA6747E769FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "A41F489C-3BD3-4E7C-B63E-7159C8EF0103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndIncluding" : "13.1.5",
            "matchCriteriaId" : "922AA845-530A-4B4B-9976-4CBC30C8A324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "01ED85BB-C6EB-4CFE-BCF0-736E0B415219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "426A5E99-92B8-4066-B15A-D2A72A66E3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndExcluding" : "16.1.3.3",
            "matchCriteriaId" : "28B27399-D55E-4321-9B25-4685AA643B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.0.2",
            "matchCriteriaId" : "FD5FB958-EDC9-4D39-AE1E-9E77FB5437B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K17542533",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K17542533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23555",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T18:15:11.973",
      "lastModified" : "2024-11-21T07:46:24.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP Virtual Edition versions 15.1x beginning in 15.1.4 to before 15.1.8 and 14.1.x beginning in 14.1.5 to before 14.1.5.3, and BIG-IP SPK beginning in 1.5.0 to before 1.6.0, when FastL4 profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.5",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "39A7468F-D055-4BE9-A38E-345097F5F766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.4",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "F3FFD055-5630-4E5A-9794-98C3992F3A46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.5",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "32967914-8929-4C9B-BE94-02F7417C51D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "C8B99C34-C4CF-4C21-B0FC-6FD8BE0EEFDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.5",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "73403719-B052-43C5-BBDB-60E161D667A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.4",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "8A85708A-AA27-47F3-833C-68CFB607CCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.5",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "05600DF3-0597-431E-8493-B3AD24E277D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.4",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "E96651D4-25AA-477E-A1BB-10C3EB145100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.5",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "BBDDC238-2CE8-4403-85CF-57A6B6B10D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.4",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "FF4944D4-FBAC-4933-B88F-0E2D7D720BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.5",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "56574410-3F67-4395-BB07-A3F695C668AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.4",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "5D47624E-5356-4BB0-81D9-563AEADCC555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.5",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "33DFB1CD-CF27-4AA1-A987-D6ADA4302876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.4",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "91F7E6BE-5CCB-4C4B-AD2E-5104CD435E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.5",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "E2A5EC1B-A8D3-48FF-92C0-94DEB30FB926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.4",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "EFC7975E-FE61-4A03-8509-363D96A7F2F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.5",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "5056FEA7-7580-4695-A596-AE586B8109A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.4",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "2616EBC0-8799-455D-A15C-C6695ADE1FE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.5",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "B8381532-304A-4AB0-9238-A9576E0A02DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.4",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "4A72311A-5FFD-45EE-A695-05C194811200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.5",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "DD837287-803C-4DB2-99E5-3FA25A0EC0D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.4",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "D1667386-FCA0-4BB5-B9EE-681C47094686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.5",
            "versionEndExcluding" : "14.1.5.3",
            "matchCriteriaId" : "96D3993F-0F0F-4526-B239-4A969F72B49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.4",
            "versionEndExcluding" : "15.1.8",
            "matchCriteriaId" : "90EA2614-5E26-4137-B045-C3B941D8B1E4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_service_proxy:*:*:*:*:*:kubernetes:*:*",
            "versionStartIncluding" : "1.5.0",
            "versionEndExcluding" : "1.6.0",
            "matchCriteriaId" : "98A20252-4A37-4A47-B288-7C51D7C21989"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K24572686",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.f5.com/manage/s/article/K24572686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22501",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2023-02-01T19:15:08.603",
      "lastModified" : "2024-11-21T07:44:56.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate another user and gain access to a Jira Service Management instance under certain circumstances_._ With write access to a User Directory and outgoing email enabled on a Jira Service Management instance, an attacker could gain access to signup tokens sent to users with accounts that have never been logged into. Access to these tokens can be obtained in two cases:\n\n* If the attacker is included on Jira issues or requests with these users, or\n* If the attacker is forwarded or otherwise gains access to emails containing a “View Request” link from these users.\n\nBot accounts are particularly susceptible to this scenario. On instances with single sign-on, external customer accounts can be affected in projects where anyone can create their own account."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@atlassian.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.3",
            "matchCriteriaId" : "C33D4776-20C0-4F1E-8DE6-C066C799DDAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.3",
            "matchCriteriaId" : "49C98473-F909-44C8-9F7A-9C7039BBD8EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndExcluding" : "5.4.2",
            "matchCriteriaId" : "7EC9742C-09E6-48F4-AA58-580E27E00190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndExcluding" : "5.4.2",
            "matchCriteriaId" : "D4CFC91D-A2CA-4E9C-846D-7DC669C5D689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_service_management:5.5.0:*:*:*:data_center:*:*:*",
            "matchCriteriaId" : "F1208D4E-C3D2-4EA5-8F62-456E6AA1F1B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_service_management:5.5.0:*:*:*:server:*:*:*",
            "matchCriteriaId" : "EE7BAC58-273C-4FBE-842D-A2D0112B6E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/JSDSERVER-12312",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JSDSERVER-12312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23469",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-02-01T19:15:08.690",
      "lastModified" : "2025-03-26T15:15:46.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nIBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-525"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0.0",
            "versionEndIncluding" : "20.0.3",
            "matchCriteriaId" : "7452A304-5579-42B5-BE6E-3A8D52E5BC2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7E2601-47E6-4111-9DE0-C3C01705884A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_001:*:*:*:*:*:*",
            "matchCriteriaId" : "AECC2FB4-0D29-45DB-AB55-B6C6C6A8BB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_002:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F5E495-92A5-419D-884B-C82D6AA5B56B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_003:*:*:*:*:*:*",
            "matchCriteriaId" : "508939AF-58FC-4E12-B4E2-B11865B603F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_004:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B419DE-4597-4A33-861D-5530BDA9E679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_005:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE653A-0EAD-489B-9610-6BEE3295AAEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_006:*:*:*:*:*:*",
            "matchCriteriaId" : "06B644E7-7EB2-4AB6-9D30-EA0602373FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_007:*:*:*:*:*:*",
            "matchCriteriaId" : "838846CB-8436-40D1-9C3B-FBA2426351E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BA799229-3577-409F-BFCC-0ABA541EA710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_001:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB47B7D-C408-4ED1-9D98-8BF77FFEF8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_0012:*:*:*:*:*:*",
            "matchCriteriaId" : "02D22CC4-3541-4BAA-8B45-FEB41F2E1697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_002:*:*:*:*:*:*",
            "matchCriteriaId" : "E8859A71-36FD-4E83-B8C6-BEEF772AB084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_003:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEF9352-EDCB-4D16-B3F9-11962D3E9F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_004:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C8892F-A803-4E3F-8992-5011B2E73C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_005:*:*:*:*:*:*",
            "matchCriteriaId" : "4890680E-8D82-46DB-9346-3C26D8C9F7A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_006:*:*:*:*:*:*",
            "matchCriteriaId" : "4F11DDE3-29C4-4CC4-AF73-DF7CCC73D5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_007:*:*:*:*:*:*",
            "matchCriteriaId" : "358590C1-6CAF-4FA7-9975-C9DD41242B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_008:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2A88F1-55B3-43A9-8051-71C467A6712F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_009:*:*:*:*:*:*",
            "matchCriteriaId" : "E06C0789-2CC4-4D57-87D0-C0FAB9DB1B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D6EB68-3804-494D-B12A-2E96E31D1B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_001:*:*:*:*:*:*",
            "matchCriteriaId" : "21D8DE68-5651-4068-B978-79B28F2DC5D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_002:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEA972A-A41E-44C9-8D35-1A991D3384B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_003:*:*:*:*:*:*",
            "matchCriteriaId" : "D3009F4E-7157-43D3-B6A0-2531CDE619BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_004:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA97C23-9B80-4956-9873-317902A0D804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_005:*:*:*:*:*:*",
            "matchCriteriaId" : "1D0B6203-C775-4C5E-BAE9-C956E718F261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_006:*:*:*:*:*:*",
            "matchCriteriaId" : "257A7A17-7EDF-4E23-88A6-216BC29EC467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_007:*:*:*:*:*:*",
            "matchCriteriaId" : "26FF217B-1BD4-46E5-8023-2B2989FF7868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_008:*:*:*:*:*:*",
            "matchCriteriaId" : "C60E58EA-C4D5-4D4D-8C9B-3EC33A7027E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "517C5EDE-5104-4E22-B9C6-64DFBA7650C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244504",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6857999",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6857999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T19:15:08.763",
      "lastModified" : "2025-03-27T15:15:45.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndExcluding" : "3.2.17",
            "matchCriteriaId" : "FDA5D2BA-8195-4151-81BF-61B77617DB02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0.9",
            "matchCriteriaId" : "4722ED63-A5C3-483E-9C70-CDAF197486BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1.6",
            "matchCriteriaId" : "E71A1487-1E70-4162-8DDF-697CA23C5A05"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.djangoproject.com/en/4.1/releases/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21forum/django-announce",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LTZVAKU5ALQWOKFTPISE257VCVIYGFQI/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230302-0007/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.djangoproject.com/weblog/2023/feb/01/security-releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.djangoproject.com/en/4.1/releases/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21forum/django-announce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LTZVAKU5ALQWOKFTPISE257VCVIYGFQI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230302-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.djangoproject.com/weblog/2023/feb/01/security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0619",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-01T20:15:10.500",
      "lastModified" : "2026-04-08T19:18:01.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.6.8. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to reset image optimizations."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kraken:kraken.io_image_optimizer:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.6.8",
            "matchCriteriaId" : "69726B19-1A89-438D-9196-391494A46D5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/kraken-image-optimizer/tags/2.6.6/kraken.php#L705",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f94eabc5-6e3b-46df-9e36-d7d0fad833de?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/kraken-image-optimizer/tags/2.6.6/kraken.php#L705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f94eabc5-6e3b-46df-9e36-d7d0fad833de",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22284",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T20:15:10.847",
      "lastModified" : "2023-11-07T04:06:48.653",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22287",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-02-01T20:15:11.063",
      "lastModified" : "2023-11-07T04:06:48.953",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T20:15:11.280",
      "lastModified" : "2025-03-27T15:15:43.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO in the purchase component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F73B9C-DD25-4BF1-AC1A-5A7E71C47112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14000:*:*:*:*:*:*",
            "matchCriteriaId" : "23A6549A-A30E-4693-9BAB-2685DB8C40BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14001:*:*:*:*:*:*",
            "matchCriteriaId" : "71CED256-A0EF-4933-AE18-421E37D5DB16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14002:*:*:*:*:*:*",
            "matchCriteriaId" : "2EEAFF47-78C6-4F48-BD89-CD2B02D420DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14003:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E8FEC0-688A-4BA6-9B4A-C59AD7FDAF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14004:*:*:*:*:*:*",
            "matchCriteriaId" : "547B3D0E-A042-46D1-9836-0B16843FE97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14005:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDD4FE7-4C3C-499A-BED7-41F542AC15D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14006:*:*:*:*:*:*",
            "matchCriteriaId" : "882EDA59-A5CD-4B93-8F9B-1E9D50871BEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugbounty.zohocorp.com/bb/#/bug/101000006459171?tab=originator",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk/CVE-2023-23073.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugbounty.zohocorp.com/bb/#/bug/101000006459171?tab=originator",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk/CVE-2023-23073.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T20:15:11.493",
      "lastModified" : "2025-03-27T15:15:43.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F73B9C-DD25-4BF1-AC1A-5A7E71C47112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14000:*:*:*:*:*:*",
            "matchCriteriaId" : "23A6549A-A30E-4693-9BAB-2685DB8C40BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14001:*:*:*:*:*:*",
            "matchCriteriaId" : "71CED256-A0EF-4933-AE18-421E37D5DB16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14002:*:*:*:*:*:*",
            "matchCriteriaId" : "2EEAFF47-78C6-4F48-BD89-CD2B02D420DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14003:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E8FEC0-688A-4BA6-9B4A-C59AD7FDAF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14004:*:*:*:*:*:*",
            "matchCriteriaId" : "547B3D0E-A042-46D1-9836-0B16843FE97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14005:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDD4FE7-4C3C-499A-BED7-41F542AC15D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14006:*:*:*:*:*:*",
            "matchCriteriaId" : "882EDA59-A5CD-4B93-8F9B-1E9D50871BEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugbounty.zohocorp.com/bb/#/bug/101000006459195?tab=originator",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk/CVE-2023-23074.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugbounty.zohocorp.com/bb/#/bug/101000006459195?tab=originator",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk/CVE-2023-23074.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T20:15:11.707",
      "lastModified" : "2025-03-27T15:15:43.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "258BF334-DE00-472D-BD94-C0DF8CDAF53C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6900:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0754D0-5B28-4851-89A2-DC5B20CFF3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6901:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0CAA5B-16A1-4637-B90A-BFAF7381CCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6902:*:*:*:*:*:*",
            "matchCriteriaId" : "48A960D7-7AB2-43F4-99FC-5B1FE69BFDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6903:*:*:*:*:*:*",
            "matchCriteriaId" : "B293513C-9ECB-4512-B1B8-A470C6115458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6904:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9B89EB-C51F-4A70-A6DF-1BD326308DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6905:*:*:*:*:*:*",
            "matchCriteriaId" : "9B708143-01B3-45D0-A769-E1D8E99237B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6906:*:*:*:*:*:*",
            "matchCriteriaId" : "F1837C80-7D1F-4AF5-BF4B-932DF03D6A30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6907:*:*:*:*:*:*",
            "matchCriteriaId" : "4E528B83-1539-4516-9ACF-A05E853014DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6908:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFB65BC-5B94-4075-BBB1-4CD8B5B216C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6909:*:*:*:*:*:*",
            "matchCriteriaId" : "7FAF3DFA-78FB-417C-808A-507F66889913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6950:*:*:*:*:*:*",
            "matchCriteriaId" : "E9506197-CDDA-451B-9FE3-72B3C3BA19EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6951:*:*:*:*:*:*",
            "matchCriteriaId" : "691DF8EC-6A7A-4449-8A4C-79F76726D685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6952:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3E2B0A-EB1E-45C3-BC2C-9E32268A0867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6953:*:*:*:*:*:*",
            "matchCriteriaId" : "E1BD2753-52B8-4EB0-8332-C67935FB8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6954:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BD08BF-4E5D-4DE4-A499-B0296C126599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6955:*:*:*:*:*:*",
            "matchCriteriaId" : "F13CB227-496C-4777-BE76-27AFF5ED15C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6956:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB1DF8F-3385-40C6-92C5-10724F8A6911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6957:*:*:*:*:*:*",
            "matchCriteriaId" : "C1997DE8-8CFA-4882-9107-741B88339A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6970:*:*:*:*:*:*",
            "matchCriteriaId" : "148F6458-136D-4612-9619-F51AEEC11AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6971:*:*:*:*:*:*",
            "matchCriteriaId" : "8B189696-D6BC-475B-90CA-AF122224FEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6972:*:*:*:*:*:*",
            "matchCriteriaId" : "477C97EC-A497-4C7C-973B-2C057A9242AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6973:*:*:*:*:*:*",
            "matchCriteriaId" : "284F5D9D-F23F-4936-B461-10701CC3AB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6974:*:*:*:*:*:*",
            "matchCriteriaId" : "74CE0145-F165-4FB4-A819-01B30641196A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6975:*:*:*:*:*:*",
            "matchCriteriaId" : "CA291C44-616B-45D9-9709-61CD33E8B135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6976:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7492E-5D5B-419D-9749-7CC6EE5BC0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6977:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF1B243-DA58-42CD-9DF4-6D4A010796D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6978:*:*:*:*:*:*",
            "matchCriteriaId" : "2B73FD0F-6B48-406E-AB29-606CC07C81C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6979:*:*:*:*:*:*",
            "matchCriteriaId" : "CED2C49D-DB96-4495-BD6F-460871D94EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6980:*:*:*:*:*:*",
            "matchCriteriaId" : "C9AAC638-1379-4F87-9BA3-07CE16CAB98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6981:*:*:*:*:*:*",
            "matchCriteriaId" : "B3470B5B-B8BC-41B9-8CA5-5E7A0EB9934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6982:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2D9355-B1D5-4B14-8900-42E7C8DC5E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6983:*:*:*:*:*:*",
            "matchCriteriaId" : "03A34ED3-EC89-4BE3-8A99-A5727A154672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6984:*:*:*:*:*:*",
            "matchCriteriaId" : "4E84EF2B-37A5-4499-8C16-877E8AB8A731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6985:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDA22C3-8F1E-45C9-BC8D-C3A49EFA348C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6986:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA5504A-8BD9-4C0D-AD5A-4CB188A99563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6987:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4E1A50-A366-4D5E-9DDB-B33D1D1770E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6988:*:*:*:*:*:*",
            "matchCriteriaId" : "356CA7C7-993F-4D5D-9FAB-9E5475878D53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugbounty.zohocorp.com/bb/#/bug/101000006463045?tab=originator",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "https://bugbounty.zohocorp.com/bb/#/bug/101000006463045?tab=originator",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T20:15:11.893",
      "lastModified" : "2025-03-27T15:15:43.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3AE43EA7-9AA1-4EA7-8840-22BD543A093C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11001:*:*:*:*:*:*",
            "matchCriteriaId" : "846EA6AB-9588-4D9F-AEBD-83B018BE7362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11002:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD540F2-C964-40DE-91AB-DE726AAA82A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11003:*:*:*:*:*:*",
            "matchCriteriaId" : "AB196A6F-FBD8-4573-B1B2-BE2B06BD1AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11004:*:*:*:*:*:*",
            "matchCriteriaId" : "685783DB-DD06-4D9C-9E83-63449D5B60D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11005:*:*:*:*:*:*",
            "matchCriteriaId" : "C371F2CD-A1F8-4EC7-8096-D61DEA337D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11006:*:*:*:*:*:*",
            "matchCriteriaId" : "B980A72F-53E2-4FC1-AA25-743AE8650641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11007:*:*:*:*:*:*",
            "matchCriteriaId" : "68289AE6-F348-401A-BE49-08889492B23B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11008:*:*:*:*:*:*",
            "matchCriteriaId" : "A0667DC3-8315-4F2B-BAB7-D1F1CA476D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11009:*:*:*:*:*:*",
            "matchCriteriaId" : "34C768E0-FF5B-413D-87B2-9D09F28F95DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11010:*:*:*:*:*:*",
            "matchCriteriaId" : "5570C5A9-A79B-48CF-B95D-3513F7B9BAF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11011:*:*:*:*:*:*",
            "matchCriteriaId" : "B77031F5-E097-4549-BF5E-1D0718AB52B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11012:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9C0879-8AE5-4E6E-998C-E79FC418C68A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11013:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1F21D7-08E8-4637-903B-4277399C0BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11014:*:*:*:*:*:*",
            "matchCriteriaId" : "97920D1C-62BA-4B10-9912-C2ED1C1B0313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11015:*:*:*:*:*:*",
            "matchCriteriaId" : "023C6278-1FF9-4E79-8D95-32BE71701D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11016:*:*:*:*:*:*",
            "matchCriteriaId" : "34EFB9EF-269E-4A72-8357-2A54E8B78C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11017:*:*:*:*:*:*",
            "matchCriteriaId" : "35366F60-D6E2-4B29-B593-D24079CE6831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11018:*:*:*:*:*:*",
            "matchCriteriaId" : "CB60E016-82DD-41EC-85F9-D4F37AF1F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11019:*:*:*:*:*:*",
            "matchCriteriaId" : "9B83E37C-B1F6-4CEB-8A8E-39E24BE8B59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11020:*:*:*:*:*:*",
            "matchCriteriaId" : "80B62BA0-2CF1-4828-99A9-7DD13CFCB9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11021:*:*:*:*:*:*",
            "matchCriteriaId" : "7F529DB6-4D30-49F8-BFE2-C10C1A899917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11022:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA25296-8163-4C98-A8CD-35834240308E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11024:*:*:*:*:*:*",
            "matchCriteriaId" : "33D51403-A976-4EA3-AA23-C699E03239E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11025:*:*:*:*:*:*",
            "matchCriteriaId" : "D86A2E8A-1689-4E6E-B50B-E16CBCEB0C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11026:*:*:*:*:*:*",
            "matchCriteriaId" : "C83DD7D3-C3AF-4E56-B38E-B1C5F3EABCD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11027:*:*:*:*:*:*",
            "matchCriteriaId" : "A940CD15-8270-4935-9C46-9684E7735C99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugbounty.zohocorp.com/bb/#/bug/101000006459751?tab=originator",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.manageengine.com/products/support-center/CVE-2023-23076.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugbounty.zohocorp.com/bb/#/bug/101000006459751?tab=originator",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.manageengine.com/products/support-center/CVE-2023-23076.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T20:15:12.170",
      "lastModified" : "2025-03-27T15:15:43.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 13 via the comment field when adding a new status comment."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F47FA243-5596-4E18-B7FA-F3301F5ADF0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13000:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B75973-355C-447E-BBEA-18459A5736C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13001:*:*:*:*:*:*",
            "matchCriteriaId" : "7E45A9C9-EE09-493E-AE75-BACCD86B97EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13002:*:*:*:*:*:*",
            "matchCriteriaId" : "4509077B-AD20-49B3-B23D-A0BC9E7A07E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13003:*:*:*:*:*:*",
            "matchCriteriaId" : "2B5066A4-D8F9-452D-9686-49B5B33EE326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13004:*:*:*:*:*:*",
            "matchCriteriaId" : "A221A081-71CD-437F-9FE2-6A255A816BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13005:*:*:*:*:*:*",
            "matchCriteriaId" : "883692B3-A95D-46F5-9E52-7694AF30CBAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13006:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C36A1A-9E47-4343-936A-711C7234D125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13007:*:*:*:*:*:*",
            "matchCriteriaId" : "D7875DEA-DE8F-4AF1-BCE7-FDF2A59C1DED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13008:*:*:*:*:*:*",
            "matchCriteriaId" : "702DC6C6-7EC3-4897-96E5-4F7DAED23170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13009:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D2A501-3100-484B-A0B9-7BD10DB9D14A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13010:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E24BFE-8EA8-4CDF-991B-A005E299518D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13011:*:*:*:*:*:*",
            "matchCriteriaId" : "93E24D9D-333B-4EAB-AD78-E568FE2C07EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0:13012:*:*:*:*:*:*",
            "matchCriteriaId" : "CF090E94-1878-400A-8E4E-26F2E1161A2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugbounty.zohocorp.com/bb/#/bug/101000006387693?tab=originator",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk/CVE-2023-23077.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugbounty.zohocorp.com/bb/#/bug/101000006387693?tab=originator",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk/CVE-2023-23077.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-01T20:15:12.377",
      "lastModified" : "2025-03-27T15:15:44.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the comment field when changing the credentials in the Assets."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C2F73B9C-DD25-4BF1-AC1A-5A7E71C47112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14000:*:*:*:*:*:*",
            "matchCriteriaId" : "23A6549A-A30E-4693-9BAB-2685DB8C40BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14001:*:*:*:*:*:*",
            "matchCriteriaId" : "71CED256-A0EF-4933-AE18-421E37D5DB16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14002:*:*:*:*:*:*",
            "matchCriteriaId" : "2EEAFF47-78C6-4F48-BD89-CD2B02D420DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14003:*:*:*:*:*:*",
            "matchCriteriaId" : "E3E8FEC0-688A-4BA6-9B4A-C59AD7FDAF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14004:*:*:*:*:*:*",
            "matchCriteriaId" : "547B3D0E-A042-46D1-9836-0B16843FE97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14005:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDD4FE7-4C3C-499A-BED7-41F542AC15D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14006:*:*:*:*:*:*",
            "matchCriteriaId" : "882EDA59-A5CD-4B93-8F9B-1E9D50871BEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugbounty.zohocorp.com/bb/#/bug/101000006458675?tab=originator",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk/CVE-2023-23078.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugbounty.zohocorp.com/bb/#/bug/101000006458675?tab=originator",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk/CVE-2023-23078.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23750",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2023-02-01T22:15:09.000",
      "lastModified" : "2025-03-26T19:15:23.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 4.0.0 through 4.2.6. A missing token check causes a CSRF vulnerability in the handling of post-installation messages."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.2.6",
            "matchCriteriaId" : "A13AB35C-2103-4194-8322-9FBF19B3756D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/890-20230101-core-csrf-within-post-installation-messages.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/890-20230101-core-csrf-within-post-installation-messages.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23751",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2023-02-01T22:15:09.053",
      "lastModified" : "2025-03-26T19:15:23.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 4.0.0 through 4.2.4. A missing ACL check allows non super-admin users to access com_actionlogs."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.2.4",
            "matchCriteriaId" : "68E860B9-2F9C-4FBA-8AF9-E21052DF089F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/891-20230102-core-missing-acl-checks-for-com-actionlogs.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/891-20230102-core-missing-acl-checks-for-com-actionlogs.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0599",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-02-01T23:15:09.407",
      "lastModified" : "2024-11-21T07:37:27.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rapid7 Metasploit Pro versions 4.21.2 and lower suffer from a stored cross site scripting vulnerability, due to a lack of JavaScript request string sanitization.  Using this vulnerability, an authenticated attacker can execute arbitrary HTML and script code in the target browser against another Metasploit Pro user using a specially crafted request. Note that in most deployments, all Metasploit Pro users tend to enjoy privileges equivalent to local administrator."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@rapid7.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:metasploit:*:*:*:*:pro:*:*:*",
            "versionEndIncluding" : "4.21.2",
            "matchCriteriaId" : "F764FB35-3CC4-4303-96B6-C85B96B3E476"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.rapid7.com/release-notes/metasploit/20230130/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.rapid7.com/release-notes/metasploit/20230130/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-02T00:15:09.130",
      "lastModified" : "2025-05-05T16:15:30.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.9",
            "matchCriteriaId" : "3DBE5401-85EA-4BBE-821E-7C5DA94BE34C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/02/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/11/05/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1207560",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=27d2a2fd844ec7da70d19fabb482304fd1e0595b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=76ca8da989c7d97a7f76c75d475fe95a584439d7",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9fefb6201c4f8dd9f58c581b2a66e5cde2895ea2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lore.kernel.org/all/20230125-hid-unregister-leds-v1-1-9a5192dcef16%40diag.uniroma1.it/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://seclists.org/oss-sec/2023/q1/53",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/02/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/11/05/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1207560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=27d2a2fd844ec7da70d19fabb482304fd1e0595b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=76ca8da989c7d97a7f76c75d475fe95a584439d7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9fefb6201c4f8dd9f58c581b2a66e5cde2895ea2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lore.kernel.org/all/20230125-hid-unregister-leds-v1-1-9a5192dcef16%40diag.uniroma1.it/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://seclists.org/oss-sec/2023/q1/53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-02T01:15:08.600",
      "lastModified" : "2025-03-26T18:15:23.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to set the password of all frontend users."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:in2code:femanager:*:*:*:*:*:typo3:*:*",
            "versionEndExcluding" : "5.5.3",
            "matchCriteriaId" : "BB2CBCCA-46DF-4A53-A863-E32620C4799E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:in2code:femanager:*:*:*:*:*:typo3:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.3.4",
            "matchCriteriaId" : "2580AA87-29CC-4C22-9323-89433C175A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:in2code:femanager:*:*:*:*:*:typo3:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.1.0",
            "matchCriteriaId" : "7233E443-0FB0-40F1-A64A-50678568077B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://typo3.org/help/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2023-001",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/help/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2023-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-02T01:15:08.670",
      "lastModified" : "2025-03-26T18:15:23.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to delete all frontend users."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:in2code:femanager:*:*:*:*:*:typo3:*:*",
            "versionEndExcluding" : "5.5.3",
            "matchCriteriaId" : "BB2CBCCA-46DF-4A53-A863-E32620C4799E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:in2code:femanager:*:*:*:*:*:typo3:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.3.4",
            "matchCriteriaId" : "2580AA87-29CC-4C22-9323-89433C175A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:in2code:femanager:*:*:*:*:*:typo3:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.1.0",
            "matchCriteriaId" : "7233E443-0FB0-40F1-A64A-50678568077B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://typo3.org/help/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2023-001",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/help/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2023-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-02T04:15:08.107",
      "lastModified" : "2025-03-26T18:15:23.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clockwork Web before 0.1.2, when Rails before 5.2 is used, allows CSRF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-652"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clockwork_web_project:clockwork_web:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.2",
            "matchCriteriaId" : "2D66182B-0020-4436-8C14-B3EE1F9B82A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.0",
            "matchCriteriaId" : "8C9163AF-6EEA-4C22-BA5D-74CB55208C9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ankane/clockwork_web/commit/ec2896503ee231588547c2fad4cb93a94e78f857",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ankane/clockwork_web/compare/v0.1.1...v0.1.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ankane/clockwork_web/issues/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ankane/clockwork_web/commit/ec2896503ee231588547c2fad4cb93a94e78f857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ankane/clockwork_web/compare/v0.1.1...v0.1.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ankane/clockwork_web/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0400",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2023-02-02T09:15:08.503",
      "lastModified" : "2024-11-21T07:37:07.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nThe protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local user to bypass DLP controls when uploading sensitive data from a mapped drive into a web email client. Loading from a local driver was correctly prevented. Versions prior to 11.9 correctly detected and blocked the attempted upload of sensitive data.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trellix:data_loss_prevention:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.9.0",
            "versionEndExcluding" : "11.10.0",
            "matchCriteriaId" : "9DA8FA9A-5DAC-4117-8311-F5DDE0338677"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kcm.trellix.com/corporate/index?page=content&id=SB10394&locale=en_US",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://kcm.trellix.com/corporate/index?page=content&id=SB10394&locale=en_US",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ],
      "evaluatorComment" : "m"
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0637",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-02T09:15:08.593",
      "lastModified" : "2024-11-21T07:37:31.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. This affects an unknown part of the file wan.asp of the component Web Management Interface. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-220017 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tew-811dru_firmware:1.0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BB401A-411B-423C-A878-04C8D7A0AD17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tew-811dru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525C167E-32FA-44C2-B6E2-BFE01F28592E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220017",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220017",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0638",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-02T09:15:08.693",
      "lastModified" : "2024-11-21T07:37:31.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-220018 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tew-811dru_firmware:1.0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25BB401A-411B-423C-A878-04C8D7A0AD17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tew-811dru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "525C167E-32FA-44C2-B6E2-BFE01F28592E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220018",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220018",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0639",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-02T09:15:08.787",
      "lastModified" : "2024-11-21T07:37:32.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in TRENDnet TEW-652BRP 3.04b01 and classified as problematic. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation of the argument nextPage leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-220019."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tew-652brp_firmware:3.04b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40304FE0-59D4-412D-8924-D38AD22B3342"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tew-652brp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34240C4B-2DD3-495C-A55F-916914141DC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220019",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220019",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0640",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-02T09:15:08.877",
      "lastModified" : "2024-11-21T07:37:32.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It has been classified as critical. Affected is an unknown function of the file ping.ccp of the component Web Interface. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220020."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tew-652brp_firmware:3.04b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40304FE0-59D4-412D-8924-D38AD22B3342"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tew-652brp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34240C4B-2DD3-495C-A55F-916914141DC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220020",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220020",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0641",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-02T09:15:08.953",
      "lastModified" : "2024-11-21T07:37:32.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in PHPGurukul Employee Leaves Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file changepassword.php. The manipulation of the argument newpassword/confirmpassword leads to weak password requirements. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-220021 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:employee_leaves_management_system_project:employee_leaves_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8386A4FA-20FF-432A-B9C1-964BCDFCE591"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ctflearner/Vulnerability/blob/main/Employee%20Leaves%20Management%20System/ELMS.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220021",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220021",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ctflearner/Vulnerability/blob/main/Employee%20Leaves%20Management%20System/ELMS.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0642",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-02T12:15:09.243",
      "lastModified" : "2024-11-21T07:37:32.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squidex.io:squidex:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4.0",
            "matchCriteriaId" : "1B5AA83C-C544-40BA-AAC6-A2D0A9E64895"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/squidex/squidex/commit/2da3c41da82eb945832f22bb70dba567ac6ce969",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/3bbdafe6-e152-47bb-88a7-fd031725323d",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/squidex/squidex/commit/2da3c41da82eb945832f22bb70dba567ac6ce969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/3bbdafe6-e152-47bb-88a7-fd031725323d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0643",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-02T12:15:09.343",
      "lastModified" : "2024-11-21T07:37:32.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-167"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squidex.io:squidex:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4.0",
            "matchCriteriaId" : "1B5AA83C-C544-40BA-AAC6-A2D0A9E64895"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/squidex/squidex/commit/cf4efc52eab17098474d73ccff6c136fc2f737db",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/ea90f8b9-d8fe-4432-9a52-4d663400c52f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/squidex/squidex/commit/cf4efc52eab17098474d73ccff6c136fc2f737db",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/ea90f8b9-d8fe-4432-9a52-4d663400c52f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0646",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-02T15:17:39.647",
      "lastModified" : "2024-11-21T07:37:32.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in dst-admin 1.5.0. Affected by this vulnerability is an unknown functionality of the file /home/cavesConsole. The manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-220033 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dst-admin_project:dst-admin:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC570F6A-11DC-4A82-AB09-06E58AB46B63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0cavesConsole%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220033",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220033",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0cavesConsole%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0647",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-02T15:17:40.627",
      "lastModified" : "2024-11-21T07:37:33.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in dst-admin 1.5.0. Affected by this issue is some unknown functionality of the file /home/kickPlayer. The manipulation of the argument userId leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-220034 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dst-admin_project:dst-admin:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC570F6A-11DC-4A82-AB09-06E58AB46B63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ha0Liu/cveAdd/blob/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0kickPlayer%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C/Dst-admin%201.5.0%20background%20kickPlayer%20interface%20remote%20command%20execution.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220034",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220034",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Ha0Liu/cveAdd/blob/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0kickPlayer%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C/Dst-admin%201.5.0%20background%20kickPlayer%20interface%20remote%20command%20execution.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0648",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-02T15:17:41.260",
      "lastModified" : "2024-11-21T07:37:33.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in dst-admin 1.5.0. This affects an unknown part of the file /home/masterConsole. The manipulation of the argument command leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-220035."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dst-admin_project:dst-admin:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC570F6A-11DC-4A82-AB09-06E58AB46B63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0masterConsole%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220035",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220035",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0masterConsole%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0649",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-02T15:17:41.900",
      "lastModified" : "2024-11-21T07:37:33.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in dst-admin 1.5.0 and classified as critical. This vulnerability affects unknown code of the file /home/sendBroadcast. The manipulation of the argument message leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220036."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dst-admin_project:dst-admin:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC570F6A-11DC-4A82-AB09-06E58AB46B63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0sendBroadcast%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220036",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220036",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0sendBroadcast%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0650",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-02T15:17:42.503",
      "lastModified" : "2024-11-21T07:37:33.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in YAFNET up to 3.1.11 and classified as problematic. This issue affects some unknown processing of the component Signature Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.12 is able to address this issue. The identifier of the patch is a1442a2bacc3335461b44c250e81f8d99c60735f. It is recommended to upgrade the affected component. The identifier VDB-220037 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yetanotherforum:yaf.net:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.11",
            "matchCriteriaId" : "6E7A7E91-630D-48E9-8BD8-DFC6C4947F47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/drive/folders/1iJuhjLQy3QPIgKKgWUzEEfr_q0boaR00?usp=sharing",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/YAFNET/YAFNET/commit/a1442a2bacc3335461b44c250e81f8d99c60735f",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/YAFNET/YAFNET/releases/tag/v3.1.12",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/YAFNET/YAFNET/security/advisories/GHSA-mg6p-jjff-7g5m",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220037",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220037",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/drive/folders/1iJuhjLQy3QPIgKKgWUzEEfr_q0boaR00?usp=sharing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/YAFNET/YAFNET/commit/a1442a2bacc3335461b44c250e81f8d99c60735f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/YAFNET/YAFNET/releases/tag/v3.1.12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/YAFNET/YAFNET/security/advisories/GHSA-mg6p-jjff-7g5m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-02T15:17:43.473",
      "lastModified" : "2025-03-26T21:15:18.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the checksum verification. This affects WNR612v2 Wireless Routers 1.0.0.3 and earlier, DGN1000v3 Modem Router 1.0.0.22 and earlier, D6100 WiFi DSL Modem Routers 1.0.0.63 and earlier, WNR1000v2 Wireless Routers 1.1.2.60 and earlier, XAVN2001v2 Wireless-N Extenders 0.4.0.7 and earlier, WNR2200 Wireless Routers 1.0.1.102 and earlier, WNR2500 Wireless Routers 1.0.0.34 and earlier, R8900 Smart WiFi Routers 1.0.3.6 and earlier, and R9000 Smart WiFi Routers 1.0.3.6 and earlier."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr612v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.3",
            "matchCriteriaId" : "E27A63A3-D2AA-4B8B-AFC1-296EFA685D1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr612v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D830B1-3A0E-40EC-96CF-96B010DD9E8E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dgn1000v3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.22",
            "matchCriteriaId" : "6AF38043-F06D-4C0E-89E5-4F003B2D0C79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dgn1000v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "994DFC36-E7D6-4158-991E-662864BAEA68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.63",
            "matchCriteriaId" : "40960FA3-B182-48D9-8381-0FE12D90E6EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFD1E86-F100-4E46-935D-903EB6FEFE9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr1000v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2.60",
            "matchCriteriaId" : "1C3B2C7C-91F8-45B0-B177-A7E09004A86D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr1000v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A030BB-2FE4-4F97-95D0-4DFF9D8CC185"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xavn2001v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0.7",
            "matchCriteriaId" : "4BAA7177-CC2A-4F6E-A419-F47747EDE686"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xavn2001v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA4AFAA-8FBF-43FB-B2FB-8FF806FF2BBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1.102",
            "matchCriteriaId" : "53714D5F-C8A9-401C-B806-7D39D794E22A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94B74E4A-3E2F-4CB1-B33D-8618ED1C7E9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2500_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.34",
            "matchCriteriaId" : "6D4820A7-DC83-4CB9-ACBF-31E6BC9CF9A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA9EF618-6194-4127-BD60-FB0E645C8993"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3.6",
            "matchCriteriaId" : "C37719AF-04E4-4E07-9393-890FCF506EE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F859165-8D89-4CDD-9D48-9C7923D2261F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3.6",
            "matchCriteriaId" : "506988FB-BBEA-4826-B427-2D03A8A230D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGco",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbco",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9s",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1BNhbWqi",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1qWglM5o",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1t47Ebqj",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SJCGkb-9o",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/r1Z4BX-5i",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/ryjVZz-5s",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netgear.com/about/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGco",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbco",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9s",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1BNhbWqi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1qWglM5o",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1t47Ebqj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SJCGkb-9o",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/r1Z4BX-5i",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/ryjVZz-5s",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netgear.com/about/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0651",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-02T16:19:35.040",
      "lastModified" : "2024-11-21T07:37:33.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template Management. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastcms_project:fastcms:0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "163A3636-5C9F-4E1B-B584-CE81784F4AEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linmoren/fastcms_bug/blob/main/password.zip",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/linmoren/fastcms_bug/blob/main/template_files_upload.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220038",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220038",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?submit.82316",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/linmoren/fastcms_bug/blob/main/password.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/linmoren/fastcms_bug/blob/main/template_files_upload.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-02T17:17:55.517",
      "lastModified" : "2025-03-26T19:15:22.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle (MITM) attack to modify the new firmware image and bypass the checksum verification."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:af-2x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "233237C2-0D14-4ABB-A619-CD41CB765BF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:af-2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79F98CE7-9F97-4C5E-87C4-B6FA0720491B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ui.com/tags/security/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SkYce4f5o",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://community.ui.com/tags/security/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SkYce4f5o",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-02T17:17:55.583",
      "lastModified" : "2025-03-26T19:15:22.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes TRENDnet TV-IP651WI Network Camera firmware version v1.07.01 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle (MITM) attack to modify the new firmware image and bypass the checksum verification."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:trendnet:tv-ip651wi_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.07.01",
            "matchCriteriaId" : "EF425182-36A6-4D03-A07D-846864681BB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:trendnet:tv-ip651wi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3ED5F0-0B3A-4CFB-A614-6BECD9190002"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HJl1oFzci",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trendnet.com/support/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HJl1oFzci",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trendnet.com/support/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0253",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-02T21:22:47.117",
      "lastModified" : "2024-08-06T14:16:03.107",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: **REJECT** Accidental CVE Assignment. Please use CVE-2023-0285."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0576",
      "sourceIdentifier" : "security@yugabyte.com",
      "published" : "2023-02-02T21:22:48.637",
      "lastModified" : "2023-11-07T04:00:51.903",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24574",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-02T21:22:49.950",
      "lastModified" : "2024-11-21T07:48:09.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell Enterprise SONiC OS, 3.5.3, 4.0.0, 4.0.1, 4.0.2, contains an \"Uncontrolled Resource Consumption vulnerability\" in authentication component. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to uncontrolled resource consumption by creating permanent home directories for unauthenticated users.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:enterprise_sonic_distribution:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.3",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "54F259E7-3DDA-4FCE-9210-96F9C4C07A2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000208165/dsa-2023-039-dell-emc-enterprise-sonic-security-update-for-an-uncontrolled-resource-consumption-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000208165/dsa-2023-039-dell-emc-enterprise-sonic-security-update-for-an-uncontrolled-resource-consumption-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0634",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-02T23:15:09.543",
      "lastModified" : "2023-11-07T04:01:03.280",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0658",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-03T00:15:12.297",
      "lastModified" : "2024-11-21T07:37:34.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in Multilaser RE057 and RE170 2.1/2.2. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-220053 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:multilaser:re057_firmware:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A241EB21-9A0B-4722-A439-9EDAD1AB5D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:multilaser:re057_firmware:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5170E610-C9BD-4B2E-8C00-958AA7D9E2D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:multilaser:re057:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D71B4ED7-6D64-46A1-8981-7824078841F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:multilaser:re170_firmware:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDF5D61-8107-44E7-A9F3-BB9E6044DA7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:multilaser:re170_firmware:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB73FD2C-6BF1-4A5D-A768-A7739DEE217C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:multilaser:re170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4126733-9C90-494A-9E89-22741DBB84E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220053",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220053",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T01:15:14.620",
      "lastModified" : "2025-03-26T19:15:22.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Jellyfin 10.8.x through 10.8.3, the name of a collection is vulnerable to stored XSS. This allows an attacker to steal access tokens from the localStorage of the victim."
      }, {
        "lang" : "es",
        "value" : "En Jellyfin 10.8.x a 10.8.3, el nombre de una colección es vulnerable al XSS almacenado. Esto permite a un atacante robar tokens de acceso del almacenamiento local de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jellyfin:jellyfin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.8.0",
            "versionEndIncluding" : "10.8.3",
            "matchCriteriaId" : "6CF48FD8-1796-4329-BDFD-98A8CC445E62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jellyfin/jellyfin-web/issues/3788",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://herolab.usd.de/security-advisories/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://herolab.usd.de/security-advisories/usd-2022-0031/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin-web/issues/3788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://herolab.usd.de/security-advisories/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://herolab.usd.de/security-advisories/usd-2022-0031/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T01:15:14.837",
      "lastModified" : "2025-03-26T19:15:23.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Jellyfin 10.8.x through 10.8.3, the name of a playlist is vulnerable to stored XSS. This allows an attacker to steal access tokens from the localStorage of the victim."
      }, {
        "lang" : "es",
        "value" : "En Jellyfin 10.8.x a 10.8.3, el nombre de una lista de reproducción es vulnerable al XSS almacenado. Esto permite a un atacante robar tokens de acceso del almacenamiento local de la víctima."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jellyfin:jellyfin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.8.0",
            "versionEndIncluding" : "10.8.3",
            "matchCriteriaId" : "6CF48FD8-1796-4329-BDFD-98A8CC445E62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jellyfin/jellyfin-web/issues/3788",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://herolab.usd.de/security-advisories/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://herolab.usd.de/security-advisories/usd-2022-0030/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin-web/issues/3788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://herolab.usd.de/security-advisories/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://herolab.usd.de/security-advisories/usd-2022-0030/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T02:15:07.997",
      "lastModified" : "2025-03-26T15:15:47.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite the backend function call stack after accessing the system with administrator privileges. A successful exploit could leverage this vulnerability in the backend binary file that handles the user interface to a cause denial of service attack. This is fixed in AG 9.4.0.481."
      }, {
        "lang" : "es",
        "value" : "La interfaz de usuario de Array Networks AG Series y vxAG hasta la versión 9.4.0.470 podría permitir a un atacante remoto utilizar la herramienta gdb para sobrescribir la pila de llamadas de funciones backend después de acceder al sistema con privilegios de administrador. Un exploit exitoso podría aprovechar esta vulnerabilidad en el archivo binario backend que maneja la interfaz de usuario para provocar un ataque de denegación de servicio. Esto se soluciona en AG 9.4.0.481."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arraynetworks:arrayos_ag:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.4.0.470",
            "matchCriteriaId" : "074EC86B-4746-4E34-AB53-E6437C22ED25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE11A77-8C2F-46CA-87BA-47624380FFC1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1000t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ED51E1F-3155-40C6-B61C-73D6A9F64987"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1000v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0BC33CF-FA0B-4556-B11E-61FF9B14880A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1100v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9C8C9AE-AF59-4E5A-93CD-A394F1A31FA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E025A9D-6B7C-42B6-95EA-0A5726A919F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0771D54C-15DF-403C-8CFA-B1E7D0136F50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1200v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9F6B87-E3D2-419A-B086-B981EF912F80"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D385DBD0-C4A9-4168-82C2-832E0E40F42D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1500fips:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01569AB3-736D-47FE-86DD-F08ACDDCD11E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1500v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E45185-071F-414A-AF78-4739F15A1D93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F0988E-5E75-486A-9229-956D38A51C35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1600v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D09E2CC-C1B5-40DC-AD1A-7C6AB20525DC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:vxag:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E149796-E3D7-4FAF-AB64-8D273E701861"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_UI_Stack_Overflow_Vulnerability_ID-128285_V1.0.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_UI_Stack_Overflow_Vulnerability_ID-128285_V1.0.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0123",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-03T03:15:08.277",
      "lastModified" : "2024-11-21T07:36:35.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software.\n\n"
      }, {
        "lang" : "es",
        "value" : " Las versiones 4.00.16.22 y anteriores de Delta Electronics DOPSoft son vulnerables a un desbordamiento del búfer en la región stack de la memoria, lo que podría permitir a un atacante ejecutar de forma remota código arbitrario cuando se introduce un archivo con formato incorrecto en el software."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:dopsoft:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.00.16.22",
            "matchCriteriaId" : "38418ACF-1003-46FF-8785-FBBCE99E34A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-031-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-031-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0124",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-03T03:15:08.380",
      "lastModified" : "2024-11-21T07:36:36.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to an out-of-bounds write, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software.\n\n"
      }, {
        "lang" : "es",
        "value" : "Las versiones 4.00.16.22 y anteriores de Delta Electronics DOPSoft son vulnerables a una escritura fuera de los límites, lo que podría permitir a un atacante ejecutar de forma remota código arbitrario cuando se introduce un archivo con formato incorrecto en el software."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:dopsoft:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.00.16.22",
            "matchCriteriaId" : "38418ACF-1003-46FF-8785-FBBCE99E34A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-031-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-031-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T05:15:10.737",
      "lastModified" : "2025-03-26T15:15:47.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verify_serialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions are 5.6.7 PL1, 5.6.8 PL1, and 5.6.9 PL1."
      }, {
        "lang" : "es",
        "value" : "vBulletin anterior a 5.6.9 PL1 permite que un atacante remoto no autenticado ejecute código arbitrario a través de una solicitud HTTP manipulada que desencadena la deserialización. Esto ocurre porque verificar_serialized verifica que un valor esté serializado llamando a unserialize y luego verificando si hay errores. Las versiones fijas son 5.6.7 PL1, 5.6.8 PL1 y 5.6.9 PL1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbulletin:vbulletin:5.6.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E31FB07-6D5D-46D4-8FA1-2EDA44980728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbulletin:vbulletin:5.6.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDBA6BB-A0ED-493B-BD76-D8213BAA508C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vbulletin:vbulletin:5.6.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "51F81AF8-FCA8-43F3-B324-8C144D07896F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4473890-vbulletin-5-6-9-security-patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ambionics.io/blog/vbulletin-unserializable-but-unreachable",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4473890-vbulletin-5-6-9-security-patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ambionics.io/blog/vbulletin-unserializable-but-unreachable",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T06:15:09.350",
      "lastModified" : "2024-11-21T07:49:10.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states \"remote code execution is theoretically possible.\""
      }, {
        "lang" : "es",
        "value" : "OpenSSH server (sshd) v9.1 introdujo una vulnerabilidad de doble liberación durante el manejo de \"options.key_algorithms\". Esto se ha corregido en OpenSSH v9.2. La doble liberación puede ser aprovechada por un atacante remoto no autenticado en la configuración por defecto, para saltar a cualquier ubicación en el espacio de direcciones de sshd. Un informe de terceros afirma que \"la ejecución remota de código es teóricamente posible\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779485D0-83A2-404C-9477-82BDE8D63A40"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1236B66D-EB11-4324-929F-E2B86683C3C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281DFC67-46BB-4FC2-BE03-3C65C9311F65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:500f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF32BB1-9A58-4821-AE49-5D5C8200631F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:500f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21DE67F-CDFD-4D36-9967-633CD0240C6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:c250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1AB1EC2-2560-494A-A51B-6F20CE318FEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:c250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58DE2B52-4E49-4CD0-9310-00291B0352C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/13/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/22/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/22/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/23/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/03/06/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/03/09/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mindrot.org/show_bug.cgi?id=3522",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/017_sshd.patch.sig",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/openssh/openssh-portable/commit/486c4dc3b83b4b67d663fb0fa62bc24138ec3946",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jfrog.com/blog/openssh-pre-auth-double-free-cve-2023-25136-writeup-and-proof-of-concept/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JGAUIXJ3TEKCRKVWFQ6GDAGQFTIIGQQP/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7LKQDFZWKYHQ65TBSH2X2HJQ4V2THS3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://news.ycombinator.com/item?id=34711565",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202307-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230309-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/02/02/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/13/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/22/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/22/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/23/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/03/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/03/09/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mindrot.org/show_bug.cgi?id=3522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/017_sshd.patch.sig",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/openssh/openssh-portable/commit/486c4dc3b83b4b67d663fb0fa62bc24138ec3946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jfrog.com/blog/openssh-pre-auth-double-free-cve-2023-25136-writeup-and-proof-of-concept/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JGAUIXJ3TEKCRKVWFQ6GDAGQFTIIGQQP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7LKQDFZWKYHQ65TBSH2X2HJQ4V2THS3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://news.ycombinator.com/item?id=34711565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202307-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230309-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/02/02/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T06:15:09.523",
      "lastModified" : "2025-03-26T15:15:48.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer when attempting to write a padded, thousands-separated string representation of a number, if the buffer is allocated the exact size required to represent that number as a string. For example, 1,234,567 (with padding to 13) overflows by two bytes."
      }, {
        "lang" : "es",
        "value" : "sprintf en la librería GNU C (glibc) 2.37 tiene un desbordamiento del búfer (escritura fuera de los límites) en algunas situaciones con un tamaño de búfer correcto. Esto no tiene relación con CWE-676. Puede escribir más allá de los límites del búfer de destino cuando intenta escribir una representación de cadena rellenada y separada por miles de un número, si al búfer se le asigna el tamaño exacto requerido para representar ese número como una cadena. Por ejemplo, 1.234.567 (con relleno de 13) se desborda en dos bytes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:2.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1ACC29-6D0B-4599-9591-6DE176404D6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/10/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230302-0010/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=30068",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230302-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=30068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:11.103",
      "lastModified" : "2025-03-25T21:15:41.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host_time parameter in the NTPSyncWithHost function."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK CA300-PoE V6.2c.884 contiene una vulnerabilidad de inyección de comandos a través del parámetro host_time en la función NTPSyncWithHost."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/NTPSyncWithHost/NTPSyncWithHost.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/NTPSyncWithHost/NTPSyncWithHost.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:11.480",
      "lastModified" : "2025-03-26T19:15:23.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter in the setNetworkDiag function."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK CA300-PoE V6.2c.884 contiene una vulnerabilidad de inyección de comandos a través del parámetro NetDiagHost en la función setNetworkDiag."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagHost/setNetworkDiag_NetDiagHost.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagHost/setNetworkDiag_NetDiagHost.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:11.687",
      "lastModified" : "2025-03-26T19:15:24.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag function."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK CA300-PoE V6.2c.884 contiene una vulnerabilidad de inyección de comandos a través del parámetro NetDiagPingNum en la función setNetworkDiag."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagPingNum/setNetworkDiag_NetDiagPingNum.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagPingNum/setNetworkDiag_NetDiagPingNum.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:11.873",
      "lastModified" : "2025-03-26T19:15:24.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setNetworkDiag function."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK CA300-PoE V6.2c.884 contiene una vulnerabilidad de inyección de comandos a través del parámetro NetDiagPingTimeOut en la función setNetworkDiag."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagPingTimeOut/setNetworkDiag_NetDiagPingTimeOut.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagPingTimeOut/setNetworkDiag_NetDiagPingTimeOut.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:12.097",
      "lastModified" : "2025-03-26T19:15:24.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetworkDiag function."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK CA300-PoE V6.2c.884 contiene una vulnerabilidad de inyección de comandos a través del parámetro NetDiagPingSize en la función setNetworkDiag."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagPingSize/setNetworkDiag_NetDiagPingSize.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagPingSize/setNetworkDiag_NetDiagPingSize.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:12.340",
      "lastModified" : "2025-03-26T19:15:24.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop parameter in the setNetworkDiag function."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK CA300-PoE V6.2c.884 contiene una vulnerabilidad de inyección de comandos a través del parámetro NetDiagTracertHop en la función setNetworkDiag."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagTracertHop/setNetworkDiag_NetDiagTracertHop.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagTracertHop/setNetworkDiag_NetDiagTracertHop.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:12.567",
      "lastModified" : "2025-03-26T19:15:24.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hour parameter in the setRebootScheCfg function."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK CA300-PoE V6.2c.884 contiene una vulnerabilidad de inyección de comandos a través del parámetro hora en la función setRebootScheCfg."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setRebootScheCfg_hour/setRebootScheCfg_hour.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setRebootScheCfg_hour/setRebootScheCfg_hour.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:12.747",
      "lastModified" : "2025-03-26T19:15:24.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the plugin_version parameter in the setUnloadUserData function."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK CA300-PoE V6.2c.884 contiene una vulnerabilidad de inyección de comandos a través del parámetro plugin_version en la función setUnloadUserData."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setUnloadUserData/setUnloadUserData.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setUnloadUserData/setUnloadUserData.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:12.943",
      "lastModified" : "2025-03-26T19:15:25.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the minute parameter in the setRebootScheCfg function."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK CA300-PoE V6.2c.884 contiene una vulnerabilidad de inyección de comandos a través del parámetro de minutos en la función setRebootScheCfg."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setRebootScheCfg_minute/setRebootScheCfg_minute.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setRebootScheCfg_minute/setRebootScheCfg_minute.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:13.147",
      "lastModified" : "2025-03-26T19:15:25.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for the telnet service which is stored in the component /etc/config/product.ini."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK CA300-PoE V6.2c.884 contiene una contraseña de código fijo para el servicio telnet que se almacena en el componente /etc/config/product.ini."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/telnet_hard_code/telnet_hard_code.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/telnet_hard_code/telnet_hard_code.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:13.413",
      "lastModified" : "2025-03-26T15:15:46.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData function."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK CA300-PoE V6.2c.884 contiene una vulnerabilidad de inyección de comandos a través del parámetro FileName en la función setUploadUserData."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setUploadUserData/setUploadUserData.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setUploadUserData/setUploadUserData.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:13.650",
      "lastModified" : "2025-03-26T16:15:17.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is stored in the component /etc/shadow."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK CA300-PoE V6.2c.884 contiene una contraseña de código fijo para root que se almacena en el componente /etc/shadow."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/root_hard_code/root_hard_code.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/root_hard_code/root_hard_code.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:13.900",
      "lastModified" : "2025-03-26T16:15:17.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability in the serverIp parameter in the function meshSlaveDlfw of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comando en el parámetro serverIp en la función meshSlaveDlfw de TOTOLINK T8 V4.1.5cu permite a atacantes ejecutar comandos arbitrarios a través de un paquete MQTT manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:t8_firmware:v4.1.5cu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAD2638-AA2A-4B1E-9A9B-E42EC3C4A25E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:t8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16621725-1296-4792-BDF4-43E0ABF3B744"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/meshSlaveDlfw/meshSlaveDlfw.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/meshSlaveDlfw/meshSlaveDlfw.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:14.107",
      "lastModified" : "2025-03-26T16:15:18.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability in the ip parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comando en el parámetro ip en la función recvSlaveCloudCheckStatus de TOTOLINK T8 V4.1.5cu permite a atacantes ejecutar comandos arbitrarios a través de un paquete MQTT manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:t8_firmware:v4.1.5cu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAD2638-AA2A-4B1E-9A9B-E42EC3C4A25E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:t8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16621725-1296-4792-BDF4-43E0ABF3B744"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/recvSlaveCloudCheckStatus_ip/recvSlaveCloudCheckStatus_ip.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/recvSlaveCloudCheckStatus_ip/recvSlaveCloudCheckStatus_ip.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:14.277",
      "lastModified" : "2025-03-26T16:15:18.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability in the serverIp parameter in the function meshSlaveUpdate of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comando en el parámetro serverIp en la función meshSlaveUpdate de TOTOLINK T8 V4.1.5cu permite a atacantes ejecutar comandos arbitrarios a través de un paquete MQTT manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:t8_firmware:v4.1.5cu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAD2638-AA2A-4B1E-9A9B-E42EC3C4A25E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:t8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16621725-1296-4792-BDF4-43E0ABF3B744"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/meshSlaveUpdate/meshSlaveUpdate.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/meshSlaveUpdate/meshSlaveUpdate.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:14.483",
      "lastModified" : "2025-03-26T16:15:18.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability in the version parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comando en el parámetro de versión en la función recvSlaveCloudCheckStatus de TOTOLINK T8 V4.1.5cu permite a atacantes ejecutar comandos arbitrarios a través de un paquete MQTT manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:t8_firmware:v4.1.5cu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAD2638-AA2A-4B1E-9A9B-E42EC3C4A25E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:t8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16621725-1296-4792-BDF4-43E0ABF3B744"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/recvSlaveCloudCheckStatus_version/recvSlaveCloudCheckStatus.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/recvSlaveCloudCheckStatus_version/recvSlaveCloudCheckStatus.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:14.667",
      "lastModified" : "2025-03-26T16:15:18.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK T8 V4.1.5cu was discovered to contain a command injection vulnerability via the slaveIpList parameter in the function setUpgradeFW."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK T8 V4.1.5cu contiene una vulnerabilidad de inyección de comandos a través del parámetro SlaveIpList en la función setUpgradeFW."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:t8_firmware:v4.1.5cu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAD2638-AA2A-4B1E-9A9B-E42EC3C4A25E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:t8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16621725-1296-4792-BDF4-43E0ABF3B744"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/setUpgradeFW/setUpgradeFW.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/setUpgradeFW/setUpgradeFW.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:14.837",
      "lastModified" : "2025-03-26T16:15:19.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK T8 V4.1.5cu was discovered to contain a hard code password for the telnet service which is stored in the component /web_cste/cgi-bin/product.ini."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que TOTOLINK T8 V4.1.5cu contiene una contraseña de código fijo para el servicio telnet que está almacenado en el componente /web_cste/cgi-bin/product.ini."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:t8_firmware:v4.1.5cu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAD2638-AA2A-4B1E-9A9B-E42EC3C4A25E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:t8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16621725-1296-4792-BDF4-43E0ABF3B744"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/telnet_login/telnet_login.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/telnet_login/telnet_login.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:14.993",
      "lastModified" : "2025-03-26T15:15:47.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:t8_firmware:v4.1.5cu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAD2638-AA2A-4B1E-9A9B-E42EC3C4A25E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:t8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16621725-1296-4792-BDF4-43E0ABF3B744"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/recvSlaveUpgstatus/recvSlaveUpgstatus.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/recvSlaveUpgstatus/recvSlaveUpgstatus.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T16:15:15.157",
      "lastModified" : "2025-03-26T15:15:47.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability in the serverIp parameter in the function updateWifiInfo of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:t8_firmware:v4.1.5cu:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAD2638-AA2A-4B1E-9A9B-E42EC3C4A25E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:t8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16621725-1296-4792-BDF4-43E0ABF3B744"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/updateWifiInfo/updateWifiInfo.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/updateWifiInfo/updateWifiInfo.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22975",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T17:15:09.073",
      "lastModified" : "2024-11-21T07:45:45.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jflyfox:jfinal_cms:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B33E946-BD15-449C-B736-013773A64DF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jflyfox/jfinal_cms/issues/53",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jflyfox/jfinal_cms/issues/53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0659",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-03T18:15:16.060",
      "lastModified" : "2024-11-21T07:37:34.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in BDCOM 1704-WGL 2.0.6314. It has been classified as critical. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-220101 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bdcom:1704-wgl_firmware:2.0.6314:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC251DD-1386-4404-BB04-8F8DB29B67B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:bdcom:1704-wgl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08CC263-446C-4246-9BD7-9D6A195FA259"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220101",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220101",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T18:15:16.837",
      "lastModified" : "2025-03-26T19:15:21.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer OverFlow Vulnerability in MojoJson v1.2.3 allows an attacker to execute arbitrary code via the SkipString function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mojojson_project:mojojson:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E333017-5C96-4C80-8EC4-7EE492AA081B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/scottcgi/MojoJson/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scottcgi/MojoJson/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T18:15:17.007",
      "lastModified" : "2025-03-26T19:15:22.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mojojson_project:mojojson:1.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E333017-5C96-4C80-8EC4-7EE492AA081B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/scottcgi/MojoJson/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/scottcgi/MojoJson/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T18:15:17.177",
      "lastModified" : "2025-03-26T19:15:22.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the json_value_parse function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:json-parser_project:json-parser:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7E5576-EC1A-413A-9B54-ACC50FFA8BF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Barenboim/json-parser/issues/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Barenboim/json-parser/issues/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20854",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-02-03T19:15:13.733",
      "lastModified" : "2025-03-26T14:15:28.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A40CA2D-82CF-4753-9F09-E39A68E55D74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0003.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23477",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-02-03T19:15:13.927",
      "lastModified" : "2024-11-21T07:46:16.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects.  IBM X-Force ID:  245513."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30E8CE2-9137-4669-AE86-FB8ED0899736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F6F77C-2C0D-4A31-B2A0-DB1C4296FF5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F480AA32-841A-4E68-9343-B2E7548B0A0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492C463-D76E-49B7-A4D4-3B499E422D89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C684FC45-C9BA-4EF0-BD06-BB289450DD21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:z\\/os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E97A964-6F9E-4C87-9B90-21AE2C1DF52F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F372EA-3A78-4703-A457-751B2C98D796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/245513",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6891111",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/245513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6891111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24576",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-03T19:15:14.417",
      "lastModified" : "2024-11-21T07:48:09.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\nEMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the NetWorker Client execution service (nsrexecd) irrespective of any auth used.\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_networker:*:*:*:*:virtual:*:*:*",
            "versionEndIncluding" : "19.8",
            "matchCriteriaId" : "39CCEB1A-1013-4CA9-9084-3ED2BFE28608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_networker:19.7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8143A453-6B77-4C41-8A47-A3B6F929C885"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000208258/dsa-2023-041-dell-networker-security-update-for-nsrdump-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000208258/dsa-2023-041-dell-networker-security-update-for-nsrdump-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22474",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-03T20:15:10.197",
      "lastModified" : "2024-11-21T07:44:52.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Parse Server uses the request header `x-forwarded-for` to determine the client IP address. If Parse Server doesn't run behind a proxy server, then a client can set this header and Parse Server will trust the value of the header. The incorrect client IP address will be used by various features in Parse Server. This allows to circumvent the security mechanism of the Parse Server option `masterKeyIps` by setting an allowed IP address as the `x-forwarded-for` header value. This issue has been patched in version 5.4.1. The mechanism to determine the client IP address has been rewritten. The correct IP address determination now requires to set the Parse Server option `trustProxy`. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parseplatform:parse-server:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.4.1",
            "matchCriteriaId" : "89DA5320-8060-4E94-8876-0C1A83C100DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parse-community/parse-server/commit/e016d813e083ce6828f9abce245d15b681a224d8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/security/advisories/GHSA-vm5r-c87r-pf6x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/commit/e016d813e083ce6828f9abce245d15b681a224d8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/parse-community/parse-server/security/advisories/GHSA-vm5r-c87r-pf6x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230309-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23925",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-03T20:15:10.433",
      "lastModified" : "2024-11-21T07:47:06.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Switcher Client is a JavaScript SDK to work with Switcher API which is cloud-based Feature Flag. Unsanitized input flows into Strategy match operation (EXIST), where it is used to build a regular expression. This may result in a Regular expression Denial of Service attack (reDOS). This issue has been patched in version 3.1.4. As a workaround, avoid using Strategy settings that use REGEX in conjunction with EXIST and NOT_EXIST operations.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:switcherapi:switcher_client:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.1.4",
            "matchCriteriaId" : "0F11AE52-E4E6-457D-BABE-908B965DB606"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/switcherapi/switcher-client-master/releases/tag/v3.1.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/switcherapi/switcher-client-master/security/advisories/GHSA-wqxw-8h5g-hq56",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/switcherapi/switcher-client-master/releases/tag/v3.1.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/switcherapi/switcher-client-master/security/advisories/GHSA-wqxw-8h5g-hq56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23933",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-03T20:15:10.637",
      "lastModified" : "2024-11-21T07:47:07.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSearch Anomaly Detection identifies atypical data and receives automatic notifications. There is an issue with the application of document and field level restrictions in the Anomaly Detection plugin, where users with the Anomaly Detector role can read aggregated numerical data (e.g. averages, sums) of fields that are otherwise restricted to them. This issue only affects authenticated users who were previously granted read access to the indexes containing the restricted fields. This issue has been patched in versions 1.3.8 and 2.6.0. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:opensearch:*:*:*:*:*:docker:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.3.8",
            "matchCriteriaId" : "D67B6938-8D64-42D2-9C26-984CE8C06E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:opensearch:*:*:*:*:*:docker:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.6.0",
            "matchCriteriaId" : "3B071571-5E3B-4949-BF5C-A940332F6ED4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opensearch-project/anomaly-detection/security/advisories/GHSA-47qw-jwpx-pp4c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opensearch-project/anomaly-detection/security/advisories/GHSA-47qw-jwpx-pp4c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23937",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-03T20:15:10.807",
      "lastModified" : "2024-11-21T07:47:08.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce.\nThe upload functionality for updating user profile does not properly validate the file content-type, allowing any authenticated user to bypass this security check by adding a valid signature (p.e. GIF89) and sending any invalid content-type. This could allow an authenticated attacker to upload HTML files with JS content that will be executed in the context of the domain. This issue has been patched in version 10.5.16. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.16",
            "matchCriteriaId" : "DD89B0E3-DCEC-4AEF-BE67-D8525F28E3C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/75a448ef8ac74424cf4e723afeb6d05f9eed872f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-8xv4-jj4h-qww6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/75a448ef8ac74424cf4e723afeb6d05f9eed872f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-8xv4-jj4h-qww6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23940",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-03T20:15:11.037",
      "lastModified" : "2024-11-21T07:47:08.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenZeppelin Contracts for Cairo is a library for secure smart contract development written in Cairo for StarkNet, a decentralized ZK Rollup. `is_valid_eth_signature` is missing a call to `finalize_keccak` after calling `verify_eth_signature`. As a result, any contract using `is_valid_eth_signature` from the account library (such as the `EthAccount` preset) is vulnerable to a malicious sequencer. Specifically, the malicious sequencer would be able to bypass signature validation to impersonate an instance of these accounts. The issue has been patched in 0.6.1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        }, {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openzeppelin:contracts:*:*:*:*:*:cairo:*:*",
            "versionStartIncluding" : "0.2.0",
            "versionEndExcluding" : "0.6.1",
            "matchCriteriaId" : "02A723D2-9FAC-458F-8F27-3463442C0D3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenZeppelin/cairo-contracts/pull/542/commits/6d4cb750478fca2fd916f73297632f899aca9299",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/cairo-contracts/security/advisories/GHSA-626q-v9j4-mcp4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/cairo-contracts/pull/542/commits/6d4cb750478fca2fd916f73297632f899aca9299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/cairo-contracts/security/advisories/GHSA-626q-v9j4-mcp4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0663",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-03T21:15:10.993",
      "lastModified" : "2024-11-21T07:37:34.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Calendar Event Management System 2.3.0. It has been rated as critical. This issue affects some unknown processing of the component Login Page. The manipulation of the argument name/pwd leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-220175."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calendar_event_management_system_project:calendar_event_management_system:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073487E5-56BC-4247-B1EB-93854E981BB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220175",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220175",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=UsSZU6EWB1E",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=UsSZU6EWB1E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23932",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-03T21:15:11.267",
      "lastModified" : "2024-11-21T07:47:07.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenDDS applications that are exposed to untrusted RTPS network traffic may crash when parsing badly-formed input. This issue has been patched in version 3.23.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:objectcomputing:opendds:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.23.1",
            "matchCriteriaId" : "415CD58E-32CD-4390-AAA1-F4FFC9A47333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenDDS/OpenDDS/releases/tag/DDS-3.23.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenDDS/OpenDDS/security/advisories/GHSA-8wvq-25f5-f8h4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenDDS/OpenDDS/releases/tag/DDS-3.23.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenDDS/OpenDDS/security/advisories/GHSA-8wvq-25f5-f8h4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23941",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-03T21:15:11.467",
      "lastModified" : "2024-11-21T07:47:08.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SwagPayPal is a PayPal integration for shopware/platform. If JavaScript-based PayPal checkout methods are used (PayPal Plus, Smart Payment Buttons, SEPA, Pay Later, Venmo, Credit card), the amount and item list sent to PayPal may not be identical to the one in the created order. The problem has been fixed with version 5.4.4. As a workaround, disable the aforementioned payment methods or use the Security Plugin in version >= 1.0.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:swagpaypal:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.4.4",
            "matchCriteriaId" : "F8FFB97C-9110-46FD-9415-424C621D7873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shopware/SwagPayPal/commit/57db5f4a57ef0a1646b509b415de9f03bf441b08",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shopware/SwagPayPal/security/advisories/GHSA-vxpm-8hcp-qh27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shopware/SwagPayPal/commit/57db5f4a57ef0a1646b509b415de9f03bf441b08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shopware/SwagPayPal/security/advisories/GHSA-vxpm-8hcp-qh27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T21:15:11.757",
      "lastModified" : "2025-03-26T19:15:23.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Progress WS_FTP Server before 8.8, it is possible for a host administrator to elevate their privileges via the administrative interface due to insufficient authorization controls applied on user modification workflows."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:ws_ftp_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.8",
            "matchCriteriaId" : "3E834311-943B-4331-904D-4ED490EA2BE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.progress.com/s/article/WS-FTP-Server-Critical-Security-Product-Alert-Bulletin-January-2023?popup=true",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.progress.com/ws_ftp",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://community.progress.com/s/article/WS-FTP-Server-Critical-Security-Product-Alert-Bulletin-January-2023?popup=true",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.progress.com/ws_ftp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25125",
      "sourceIdentifier" : "disclosures@gallagher.com",
      "published" : "2023-02-03T21:15:11.910",
      "lastModified" : "2023-11-07T04:08:50.593",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25126",
      "sourceIdentifier" : "disclosures@gallagher.com",
      "published" : "2023-02-03T21:15:12.160",
      "lastModified" : "2023-11-07T04:08:50.917",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25127",
      "sourceIdentifier" : "disclosures@gallagher.com",
      "published" : "2023-02-03T21:15:12.333",
      "lastModified" : "2023-11-07T04:08:51.200",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25128",
      "sourceIdentifier" : "disclosures@gallagher.com",
      "published" : "2023-02-03T21:15:12.510",
      "lastModified" : "2023-11-07T04:08:51.563",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25129",
      "sourceIdentifier" : "disclosures@gallagher.com",
      "published" : "2023-02-03T21:15:12.637",
      "lastModified" : "2023-11-07T04:08:51.960",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25130",
      "sourceIdentifier" : "disclosures@gallagher.com",
      "published" : "2023-02-03T21:15:12.803",
      "lastModified" : "2023-11-07T04:08:52.267",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22746",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-03T22:15:11.733",
      "lastModified" : "2024-11-21T07:45:20.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CKAN is an open-source DMS (data management system) for powering data hubs and data portals. When creating a new container based on one of the Docker images listed below, the same secret key was being used by default. If the users didn't set a custom value via environment variables in the `.env` file, that key was shared across different CKAN instances, making it easy to forge authentication requests. Users overriding the default secret key in their own `.env` file are not affected by this issue. Note that the legacy images (ckan/ckan) located in the main CKAN repo are not affected by this issue. The affected images are ckan/ckan-docker, (ckan/ckan-base images), okfn/docker-ckan (openknowledge/ckan-base and openknowledge/ckan-dev images)\nkeitaroinc/docker-ckan (keitaro/ckan images).\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        }, {
          "lang" : "en",
          "value" : "CWE-344"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:okfn:ckan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.12",
            "matchCriteriaId" : "94E736ED-CD0F-4634-B739-AEF507A62808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:okfn:ckan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.9.0",
            "versionEndExcluding" : "2.9.7",
            "matchCriteriaId" : "3960F8B4-0768-4C32-855E-D62384B25511"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ckan/ckan/commit/44af0f0a148fcc0e0fbcf02fe69b7db13459a84b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ckan/ckan/commit/4c22c135fa486afa13855d1cdb9765eaf418d2aa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ckan/ckan/security/advisories/GHSA-pr8j-v4c8-h62x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ckan/ckan/commit/44af0f0a148fcc0e0fbcf02fe69b7db13459a84b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ckan/ckan/commit/4c22c135fa486afa13855d1cdb9765eaf418d2aa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ckan/ckan/security/advisories/GHSA-pr8j-v4c8-h62x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-03T22:15:12.277",
      "lastModified" : "2024-11-21T07:45:50.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improper length of the value passed to the offset argument."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kodi:kodi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "19.5",
            "matchCriteriaId" : "AEE0AAF6-FF9A-4120-8A0A-27505D73EDB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xbmc/xbmc/commit/8c2aafb6d4987833803e037c923aaf83f9ff41e1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xbmc/xbmc/issues/22377",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xbmc/xbmc/pull/22380",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xbmc/xbmc/pull/22380/commits/00fec1dbdd1df827872c7b55ad93059636dfc076",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/xbmc/xbmc/pull/22380/commits/7e5f9fbf9aaa3540aab35e7504036855b23dcf60",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/xbmc/xbmc/commit/8c2aafb6d4987833803e037c923aaf83f9ff41e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xbmc/xbmc/issues/22377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xbmc/xbmc/pull/22380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xbmc/xbmc/pull/22380/commits/00fec1dbdd1df827872c7b55ad93059636dfc076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/xbmc/xbmc/pull/22380/commits/7e5f9fbf9aaa3540aab35e7504036855b23dcf60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23615",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-03T22:15:12.643",
      "lastModified" : "2024-11-21T07:46:32.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. The embeddable comments can be exploited to create new topics as any user but without any clear title or content. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. As a workaround, disable embeddable comments by deleting all embeddable hosts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndIncluding" : "3.0.0",
            "matchCriteriaId" : "0FF9F652-49A3-4F91-9E64-4BBA58F28686"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BF272688-1B08-4ABC-8002-66B59690F9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "A29A2465-B21D-4147-8292-DCF864D385B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBC3511E-3D68-42E2-B521-966FB429B640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "EC8B99C2-E267-4EC2-AF09-C9AD1EEE76D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "F21A22EE-081A-4489-A7F8-22E2DBC5B00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E6C8FB3-4B19-4510-B9A8-BCF9ED8ED7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6b:*:*:beta:*:*:*",
            "matchCriteriaId" : "5B827291-6483-4BB7-AF76-530B669B3ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "551E70ED-34FF-4989-91C9-6312DE4AB4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "204FB99A-8F11-4F04-9ED9-D94551790116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "46A8705C-0DF6-45D7-A38C-D2AB69194C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F59B0D8E-CFFB-4EBA-9D6A-526F9541BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D801A898-27D0-4076-8AF9-2B574FA11723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E7CBBD4A-4FDB-49E0-A5B6-22701C12BDF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9E7328DF-1924-4D0D-AC6B-1BA2D9CF1D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9421CE10-F226-4F2C-9DA7-EBB44B73C304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "1E71FBB6-ECAD-4581-9982-4C330D55FEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B631CCC-D456-49FF-B626-59C40BD4E167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE83F98D-F7AA-434B-8438-5B1FB96681B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB93F19B-9087-44CE-B884-45F434B7906F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5A88A5A3-EF1A-4E86-B074-CE0AC4325484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "0650B4C7-BCFE-4180-8FEF-4170A67E8BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "388F376E-46C9-4163-992D-95E3E4548D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D661090A-DA61-4BBE-85C3-6F48C053C84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "4A458242-D6DD-46E3-AF09-66BC87C5D7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8FACCBA-0D3B-4E6F-85A0-1CBD2B367F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F1D83D80-A0BE-4794-91A1-599AF558FB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "BD15B6B2-BFB3-4271-A507-48E9B827FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "E0003042-9B14-4E1B-800F-3D154FFE8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "E449EA29-81C8-4477-977E-746EACDBED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6FC6D4DF-8686-4054-A0C1-784E194171E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "C574C37D-3D99-4430-A3D5-199883556B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "F344E950-EFF9-4405-99D7-0B615C32873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "0A50DE1B-29EB-4014-B5B6-46CF493485F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "638B3E17-9F0A-4A96-B8D3-DDFEA518DBE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6D3E3AEB-8CD4-4EE7-9C81-2F74512071DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "254FF9D9-E696-41C8-B15B-DA089D2C6597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A5001E1-E716-43AA-8093-E0EED9E07909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "7FD16B13-516A-4D03-B1EF-A11156471A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E886D9EF-7FBD-4A24-A8B6-54E4B15403C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "369A83D1-AB7E-488D-9D74-26A69DFC1AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "3189CAC1-8970-4A33-B1E4-EB9EC3C19A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8733438-7625-400E-8237-BAE3D9F147AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "E87F1ED0-FD0D-4767-8E7C-325D920B79BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "97811266-A13C-4441-A1B5-BFA4B0862DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "3D09D157-4B19-4561-AB20-952F2EA9BA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "789087AF-0011-4E8F-A5AB-432A5F91BBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13b:*:*:beta:*:*:*",
            "matchCriteriaId" : "8EC9DC8C-56DC-482B-8847-BD0CFACA6F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "F63B3D13-24F6-4EFA-9528-DBF59D973A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F3A2388-18DE-46B0-BC13-7714E25D1B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "940B11CB-053F-4D60-8BC4-81CA659D2F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "83684DCB-B201-43B8-8B6E-6D0B13B7E437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "DF92E1FD-9B41-4A41-8B13-9D789C5729D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "351D224A-E67C-454C-AF43-8AD6CD44C685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E058CA6D-A295-4CAD-8C85-E8C83BAFEBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF99C114-1BCA-4400-BC7E-EDA1F55559CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBA1EFBA-5A26-46A0-B2A6-53B9924253BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE5B90B0-B6CC-4189-9C98-CF29017A47B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1818628-5F4E-4E5D-974A-0BEBCE821209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "14785840-3BC0-4030-AE44-E3013DF19AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "90444209-684C-4BF8-9BCF-6B29EA0A0593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "668E15DE-8CF2-4AF3-B13A-9080046B1E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "1191861C-1B2C-4762-805D-FCDC20F84D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "3CB518E5-CCC0-46B8-848E-C492BCF7E9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA1F68FE-67EA-4408-8E0F-558B0FAFFF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "66E9F05C-799A-43D3-9367-FCA86166BD65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "85DB4097-6EFC-4017-ADFD-56EE49BB2F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD283EA2-9026-497F-A7DE-E16CE0764ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "ED19DDDF-A29E-4C3F-A818-23D7E37B6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "508D0052-B7D7-4A08-8BB0-7D7A1EDAB96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "3E50BFB0-67D3-4EDE-93FE-85EAF605461E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "D7EE0134-6AD7-4695-B536-1959FE3A9672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "25DFFB5C-277F-4436-9BCE-643E98721C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "B8B80EB2-0B48-4AFA-8A09-26006CCDB022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AC8705E0-23ED-4817-8B69-21A4963C27F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "BAA156A9-A9FB-4D03-B0EE-4AA303D7A9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F733E585-075C-402A-9B34-1FE79DE4137E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "05C43439-C694-47AA-90AF-0AC2277E3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "B391F8A1-F102-4C88-864C-1386452CDAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC33C93-9947-4983-96A3-7DE223929817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B46DE141-1224-499E-AAE0-6CC0D5249B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "D8D07501-A07E-4743-A188-2E5BBC3C8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "64FD2A30-EE33-4680-9DCF-29283DBA3C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "B517F7A2-6FD1-4A7B-80E7-1167EC296591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "E6CA6EA5-DDAD-4882-AD1B-634C0CD741BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F14DCB07-9464-4DDE-98A1-FAE85DD60FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6EDFD679-4710-4A62-B254-E658EED4295B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1B81072-08A5-4EC6-B737-E35C505C1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A0748A9E-5737-48F9-BB66-6576AFE16198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "453E51D9-89A1-4A91-B218-05C45CC4E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "51542BA7-8151-4FC9-9C86-36CEB476B912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "5F95391C-0B75-47D2-9770-561E05414CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "10384675-B949-4B50-AF42-B5A3EE27250B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "7C0DB1C0-5749-4508-A265-C2138F7852E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA9977CF-575C-4A19-84C8-EBB68EBE88C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "87C525C5-E282-4EC6-956F-0C94DC11FC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F02A2A8-6312-4F6D-ABBF-952CA4C5E02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "DE54D1A3-FC2A-40DE-9177-50332208B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "170AE3DA-92C1-4D1D-9CAC-543C01FFF479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "2130C3C5-E4A5-41C3-89F0-C6FB4E47D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "74248527-B884-4134-95C8-DEAF3D774A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta17:*:*:beta:*:*:*",
            "matchCriteriaId" : "01A8AF9C-8BF6-4ADC-A85A-A5C1F9FFB2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "B4038D09-467C-4815-A429-F0E1E3E545E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6F273237-7223-4047-83B7-16A49B7E554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF26EE13-554C-4180-98A2-238D84E40927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "12688C9C-291D-4BF2-93F9-09AA323C52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "A7F7A437-D538-4B44-AC41-C95641A11A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "9BB61DCF-52DB-498D-8779-D565E548C285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "EE56BB77-B7F7-4BE7-AD9C-33888C5D01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "9DB49E1D-BCC8-4984-A81D-5DAC5E3DF168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "F775EA72-CCE3-4230-A666-EFDAA61F71FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E65BDEE-850A-41C6-8CFB-BD8B3A105CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "AF196429-FDED-4C3F-9F7D-0A2BF7DCAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "64B84326-5397-4C60-8007-F7E7D81DC661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "9A0A526A-9662-4E39-8BF6-E464BE1A2B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "712DACC2-A21E-429F-8A7B-86D8F7CE3468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E93F9F6-5B03-4F77-B8B4-AEC9E4011692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "C5B2B98E-804F-4525-B726-3F1DF2693F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "582E339F-678A-4377-8EE0-8F4208E3EF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "1BF1D945-6EAA-4FA7-8252-2FED079587F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9325DFF5-EA7B-4B8D-A227-4B1A59449CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0ECB28DA-3CA1-4011-9170-BFBF2ED3E091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A6399B0-471B-4B26-859C-3836F2A6B7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "131E2AE4-E35D-495D-8907-3B899BB8AC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "83601528-0DD9-4835-B6C0-0F341871CC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4AEB5AAF-73EB-4356-8C53-10E22B2F910E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EB199D6-E253-4EC2-BF0B-059F7B6662ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "94A586EB-B0E0-4190-88DF-3BCC04E5EF84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BF27B44-9AA7-4B91-9B4B-0E84418F5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "461744BD-3974-4C33-8514-0A917DC90C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A86FB2B-6915-49C0-B993-0711AAECA5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EF3DD36-2776-4CD2-A3F1-88872024D223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "D91D71ED-F08F-4DB5-B7DD-062E7C11435F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "62B5812A-FB52-4F4B-9A15-3AA5CD6562E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "83231EC0-E3F7-4E35-B165-487C2725B4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "A53AFFA6-7B98-47F2-9BD7-71C83A69CE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A42D3FB9-9197-4101-A729-876C490BD572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A5DE0C47-0C66-4EFE-AF82-1B22F4F54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "E587D10F-BEF8-4923-AF76-6DC3172880EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "155568EF-6A7E-423A-B5EA-D20E407B271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "7E94B119-8C75-43DF-A2DF-A5B3E04F0778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5348F94F-F6AE-4400-8AC7-036111EF43D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "57948A73-C9C5-4C24-947D-0A4659C7002E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "3532EE37-2D0F-496C-B5A8-F9315FFB4552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "2CAE7CC9-B91D-494C-B91A-497D6FE6B14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "623BBBF8-4121-466A-82C8-D179B02B3E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "648D010A-8B8D-42AA-8888-09E4E0FAA954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "8ADC7613-25E3-4CB8-A962-2775C20E4D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B0099F0-A275-4C65-9B79-041374F183DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE69800E-5CB5-4916-879C-51DE5E94489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "8C64EAFE-2B60-4D95-869F-4A2FC98B99C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "AB2045F1-AC39-4738-B3F0-33F00D23C921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E32589F8-2E87-40D2-BAD3-E6C1C088CA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "4868BAFD-BFE5-4361-855A-644B040E7233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4B6C25BF-5B2A-43C4-8918-E32BA9DD8A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB9917D3-D848-4D2B-8A44-B3723BA377DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "7046D95B-73CE-406B-ACC3-FD71F7DEC7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "D3BA5033-2C06-42FF-962E-48EBA2EBB469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "630D29DE-0FD7-4306-BA80-20D0791D334B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "08F94E42-07A1-480D-B6DD-D96AE38F1EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "FA4B3DE5-21DA-4185-AF74-AAA6DD89FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E602BEF9-E89D-40F7-BC6F-5C6F9F25BA97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "C06A8627-683D-4328-BE7A-4A33A4B736F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E3EF8240-D3F5-422C-B70A-90C6CBA4E622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "93CC792D-AE0B-498E-8374-5D09EF4E28FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "093D4EA8-B002-4AB4-97C9-CEE4D70BF3C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "4C778180-E7BF-4EF2-8B19-0388E23E1424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "0C0B2BC1-35F1-4A1D-B9B2-54426B4ADF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6BCAB620-465A-41FF-A064-FB638DD3A557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "6AFCB802-A275-444C-8245-D0397322125F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9F9B70E2-AAAD-4E61-AEB2-E5F635F6AAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6182074E-C467-448C-9299-B92CFE4EEBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "09EA8F36-7647-42D0-8675-34C002E0754D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "9CE2276A-9680-4B14-9636-806F7E4C1669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD150166-4C8D-47E3-989A-1A71A46C36A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF5CA6AD-FA4D-47DF-A684-5DAD7662EA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "B94F75B8-7C84-4727-9D18-114A815E1906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "4D94E03A-32EE-408F-81FA-4B9C25AA7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD495875-007C-4A90-B940-B62E6FA492CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F1B84E-8AF8-46E8-9DE9-00D1DE348C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BCCEFDFB-61E6-4846-8093-B5CEB0D8450C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC63647-B692-4BB9-9A3D-6F8DF19C3494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F0ED55-C8C6-47C1-859A-60046838B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A2D59BC-2EE8-4F9C-AB5B-B9D01B44F7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "933DFEBC-5568-431B-809D-AFAEFD08E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE920E80-C02B-4EC8-982F-ADE89C936684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CDAE3441-12BA-41F4-8A5A-B2EE844C86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "1443EA1B-D210-4219-8452-CBFD5FACBC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "948A4B4A-A11F-477E-BEC5-0D60C7E3570C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "98B2A052-5427-4B72-9F59-82F430836CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "CB6D636E-B51F-4648-A637-62B2603BA18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "3DA17871-7ED7-4D68-A46D-D15DC5B3235F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "705FE965-0415-4382-8CA1-A19DF3B5EF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "BC6EDCE3-D564-434F-9A7F-D4A6D579F8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "FB05E54B-9CF6-45A7-8D47-C98DB6D19E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "03CD1C5E-18F5-4C6D-B92C-C511C8C12D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF4ABB9D-69DF-42D5-AD60-F9CEEC1B6730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7B4DCCF5-E290-4BDA-AAB9-DF362A2EB7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "3AE1F3A2-8340-4ED7-B943-ACDA9617DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E033AB7-9987-4C30-849F-2495376CA4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "D87E9338-C7F6-43BA-886F-C30987ADBA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E24EB90F-FE81-4746-8741-8DC9346F79C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "D237956F-FC90-467E-A493-24EFDA1A9F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "F7AA9AB8-AB6F-43E2-B3E5-685EE9BFE7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "5BC240A1-431E-4A50-88DC-7AC9BC674254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "3F85AFD4-D397-4FDB-B762-521BD5FF14C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "D40CDCE1-3462-4D6C-A3C7-487F175264CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-7mf3-5v84-wxq8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-7mf3-5v84-wxq8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24806",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-04T00:15:09.050",
      "lastModified" : "2023-11-07T04:08:42.577",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0671",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-04T01:15:09.830",
      "lastModified" : "2024-11-21T07:37:35.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.10",
            "matchCriteriaId" : "AF26BD0E-694F-48CD-96F2-7E9FE8C46966"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/froxlor/froxlor/commit/0034681412057fef2dfe9cce9f8a6e3321f52edc",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/c2a84917-7ac0-4169-81c1-b61e617023de",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/froxlor/froxlor/commit/0034681412057fef2dfe9cce9f8a6e3321f52edc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/c2a84917-7ac0-4169-81c1-b61e617023de",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0673",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-04T08:15:08.147",
      "lastModified" : "2024-11-21T07:37:36.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file oews/?p=products/view_product.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The associated identifier of this vulnerability is VDB-220195."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_eyewear_shop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464A3580-D632-43EB-93EF-E2A1A5736F14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220195",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220195",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0674",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-04T08:15:08.237",
      "lastModified" : "2024-11-21T07:37:36.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220196."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xuxueli:xxl-job:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9E9173-1AD8-4DFA-8AC2-7C91E73635D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/xxl-job-explain/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220196",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220196",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/xxl-job-explain/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0675",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-04T08:15:08.327",
      "lastModified" : "2024-11-21T07:37:36.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in Calendar Event Management System 2.3.0. This affects an unknown part. The manipulation of the argument start/end leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-220197 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calendar_event_management_system_project:calendar_event_management_system:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073487E5-56BC-4247-B1EB-93854E981BB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220197",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220197",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=eoPuINHWjHo",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=eoPuINHWjHo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0676",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-04T13:15:12.147",
      "lastModified" : "2026-02-13T17:16:09.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.1",
            "matchCriteriaId" : "6E6C6452-C85E-4BF3-B06C-1F81BB54FC5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/phpipam/phpipam/commit/94ec73ff1d33926b75b811ded6f0b4a46088a7ec",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/b72d4f0c-8a96-4b40-a031-7d469c6ab93b",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2023-0676.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/phpipam/phpipam/commit/94ec73ff1d33926b75b811ded6f0b4a46088a7ec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/b72d4f0c-8a96-4b40-a031-7d469c6ab93b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0677",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-04T13:15:12.633",
      "lastModified" : "2024-11-21T07:37:36.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to v1.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.1",
            "matchCriteriaId" : "6E6C6452-C85E-4BF3-B06C-1F81BB54FC5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/phpipam/phpipam/commit/8fbf87e19a6098972abc7521554db5757c3edd89",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/d280ae81-a1c9-4a50-9aa4-f98f1f9fd2c0",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phpipam/phpipam/commit/8fbf87e19a6098972abc7521554db5757c3edd89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/d280ae81-a1c9-4a50-9aa4-f98f1f9fd2c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0678",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-04T13:15:12.713",
      "lastModified" : "2024-11-21T07:37:36.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.1",
            "matchCriteriaId" : "6E6C6452-C85E-4BF3-B06C-1F81BB54FC5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/phpipam/phpipam/commit/1960bd24e8a55796da066237cf11272c44bb1cc4",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/8d299377-be00-46dc-bebe-3d439127982f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phpipam/phpipam/commit/1960bd24e8a55796da066237cf11272c44bb1cc4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/8d299377-be00-46dc-bebe-3d439127982f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-04T20:15:08.027",
      "lastModified" : "2025-03-25T21:15:41.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:harfbuzz_project:harfbuzz:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.0",
            "matchCriteriaId" : "85CABB33-5FC2-447E-BFD5-70AA07F97359"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromium.googlesource.com/chromium/src/+/e1f324aa681af54101c1f2d173d92adb80e37088/DEPS#361",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/harfbuzz/harfbuzz/blob/2822b589bc837fae6f66233e2cf2eef0f6ce8470/src/hb-ot-layout-gsubgpos.hh",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/harfbuzz/harfbuzz/commit/85be877925ddbf34f74a1229f3ca1716bb6170dc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWCHWSICWVZSAXP2YAXM65JC2GR53547/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZ5M2GSAIHFPLHYJXUPQ2QDJCLWXUGO3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230725-0006/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://chromium.googlesource.com/chromium/src/+/e1f324aa681af54101c1f2d173d92adb80e37088/DEPS#361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/harfbuzz/harfbuzz/blob/2822b589bc837fae6f66233e2cf2eef0f6ce8470/src/hb-ot-layout-gsubgpos.hh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/harfbuzz/harfbuzz/commit/85be877925ddbf34f74a1229f3ca1716bb6170dc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWCHWSICWVZSAXP2YAXM65JC2GR53547/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZ5M2GSAIHFPLHYJXUPQ2QDJCLWXUGO3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230725-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22849",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-02-04T21:15:09.113",
      "lastModified" : "2025-03-25T19:15:41.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.4 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in multiple features.\n\nUpgrade to Apache Sling App CMS >= 1.1.6\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:sling_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.6",
            "matchCriteriaId" : "B61927D3-A2AC-4363-93B2-E3BBE0BF1A47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sling.apache.org/news.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sling.apache.org/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0679",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-06T13:15:09.377",
      "lastModified" : "2024-11-21T07:37:36.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file removeUser.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220220."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canteen_management_system_project:canteen_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1475853-D5FD-4C3B-B1D0-67131503A745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/128904906",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220220",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220220",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/128904906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-06T15:15:10.353",
      "lastModified" : "2026-03-30T18:15:59.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in signup.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_food_ordering_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72B0380-7394-4DCF-BC93-3212CA3F4298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/xss%20in%20signup.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/xss%20in%20signup.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-06T15:15:10.480",
      "lastModified" : "2026-03-30T18:15:59.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in login.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_food_ordering_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72B0380-7394-4DCF-BC93-3212CA3F4298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/xss%20in%20login.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/xss%20in%20login.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-06T15:15:10.567",
      "lastModified" : "2026-03-30T18:15:59.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in navbar.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_food_ordering_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72B0380-7394-4DCF-BC93-3212CA3F4298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/xss%20in%20navbar.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/xss%20in%20navbar.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-06T15:15:10.663",
      "lastModified" : "2026-03-30T18:15:59.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in index.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_food_ordering_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72B0380-7394-4DCF-BC93-3212CA3F4298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/xss%20in%20index.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/xss%20in%20index.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-06T15:15:10.747",
      "lastModified" : "2026-03-30T18:15:59.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_order.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_food_ordering_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72B0380-7394-4DCF-BC93-3212CA3F4298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/sql%20in%20view_order.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/sql%20in%20view_order.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-06T15:15:10.827",
      "lastModified" : "2025-03-26T14:15:28.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the ticket_id and draw parameters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:raffle_draw_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F67511D-93BB-4CB7-8880-FE97D266A1B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/sql%20in%20save_winner.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/sql%20in%20save_winner.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-06T15:15:10.917",
      "lastModified" : "2025-03-26T14:15:29.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete_ticket.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:raffle_draw_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F67511D-93BB-4CB7-8880-FE97D266A1B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/sql%20in%20delete_ticket.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/sql%20in%20delete_ticket.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-06T15:15:11.007",
      "lastModified" : "2025-03-26T14:15:29.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:raffle_draw_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F67511D-93BB-4CB7-8880-FE97D266A1B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/sql%20in%20save_ticket.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/sql%20in%20save_ticket.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-06T15:15:11.097",
      "lastModified" : "2025-03-26T14:15:29.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:raffle_draw_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F67511D-93BB-4CB7-8880-FE97D266A1B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/sql%20in%20get_ticket.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/sql%20in%20get_ticket.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-06T15:15:11.183",
      "lastModified" : "2025-03-26T14:15:29.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:raffle_draw_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F67511D-93BB-4CB7-8880-FE97D266A1B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/lfi%20in%20index.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/lfi%20in%20index.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-06T15:15:11.267",
      "lastModified" : "2025-03-25T19:15:41.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7100ru_firmware:7.4cu.2313_b20191024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C47206-6608-4258-A2FE-D15C5637192D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7100ru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DD0831-0EB3-4F09-B4E4-6165E53AB6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/18",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0687",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-06T19:15:10.260",
      "lastModified" : "2024-11-21T07:37:37.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically addresses of the running application that is built with gmon enabled. It's basically trusted input or input that needs an actual security flaw to be compromised or controlled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.0,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 2.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.38",
            "matchCriteriaId" : "B48FF055-2F2F-4884-9E28-6EBBC7BE66C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchwork.sourceware.org/project/glibc/patch/20230204114138.5436-1-leo%40yuriev.ru/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=29444",
        "source" : "cna@vuldb.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220246",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220246",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://patchwork.sourceware.org/project/glibc/patch/20230204114138.5436-1-leo%40yuriev.ru/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=29444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0062",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:12.683",
      "lastModified" : "2025-03-25T18:15:29.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfactory:ean_for_woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "09EF8B26-E540-4CFB-8934-8B3B5A19EEA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/450f94a3-56b1-41c7-ac29-fbda1dc04794",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/450f94a3-56b1-41c7-ac29-fbda1dc04794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0070",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:12.747",
      "lastModified" : "2025-03-25T21:15:39.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ResponsiveVoice Text To Speech WordPress plugin before 1.7.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:responsivevoice:responsivevoice_text_to_speech:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.6",
            "matchCriteriaId" : "D2E60250-8037-4B35-8451-1FDC26122DD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/0d8fbd1a-9fac-42ac-94e0-f8921deb1696",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/0d8fbd1a-9fac-42ac-94e0-f8921deb1696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0072",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:12.807",
      "lastModified" : "2025-03-25T18:15:30.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WC Vendors Marketplace WordPress plugin before 2.4.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wcvendors:wc_vendors_marketplace:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.4.5",
            "matchCriteriaId" : "116EB67A-659A-4D3A-8903-B2251C7C08C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/bb2b876f-7216-4f31-9d1f-a45405c545ce",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/bb2b876f-7216-4f31-9d1f-a45405c545ce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0081",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:12.873",
      "lastModified" : "2025-03-25T18:15:30.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MonsterInsights WordPress plugin before 8.12.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monsterinsights:monsterinsights:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "8.12.1",
            "matchCriteriaId" : "BC5CFA52-2921-4F07-B011-C2EAA256E99D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/76d2963c-ebff-498f-9484-3c3008750c14",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/76d2963c-ebff-498f-9484-3c3008750c14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0082",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:12.933",
      "lastModified" : "2025-03-25T21:15:39.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ExactMetrics WordPress plugin before 7.12.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exactmetrics:exactmetrics:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "7.12.1",
            "matchCriteriaId" : "7166B842-5D6B-4F30-9969-05FCC43E6BF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e1ba5047-0c39-478f-89c7-b0bb638efdff",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e1ba5047-0c39-478f-89c7-b0bb638efdff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0095",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:12.997",
      "lastModified" : "2025-03-25T19:15:40.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Page View Count WordPress plugin before 2.6.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:a3rev:page_view_count:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.6.1",
            "matchCriteriaId" : "2CEE7BE3-EE16-4A1D-902C-6C6E7DED2BB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/009ca72e-e8fa-4fdc-ab2d-4210f8f4710f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/009ca72e-e8fa-4fdc-ab2d-4210f8f4710f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0096",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.060",
      "lastModified" : "2025-03-25T18:15:30.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Happyforms WordPress plugin before 1.22.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:happyforms:happyforms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.22.0",
            "matchCriteriaId" : "B5134B86-9897-4EC1-A5B5-9CE39D599B7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/b28150e7-214b-4bcd-85c0-e819c4223484",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/b28150e7-214b-4bcd-85c0-e819c4223484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0143",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.120",
      "lastModified" : "2025-03-25T21:15:40.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Send PDF for Contact Form 7 WordPress plugin before 0.9.9.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:send_pdf_for_contact_form_7_project:send_pdf_for_contact_form_7:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.9.9.2",
            "matchCriteriaId" : "E318B223-BDC0-4BAD-8678-E6FB38DA9F6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c4cd3d98-9678-49cb-9d1a-551ef8a810b9",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c4cd3d98-9678-49cb-9d1a-551ef8a810b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0144",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.183",
      "lastModified" : "2025-03-26T14:15:26.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Event Manager and Tickets Selling Plugin for WooCommerce WordPress plugin before 3.8.0 does not validate and escape some of its post meta before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mage-people:event_manager_and_tickets_selling_for_woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.8.0",
            "matchCriteriaId" : "A4230F69-7755-4C7D-942A-A844EB91D94C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d7b3917a-d11f-4216-9d2c-30771d83a7b4",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d7b3917a-d11f-4216-9d2c-30771d83a7b4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0146",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.247",
      "lastModified" : "2025-03-25T18:15:30.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Naver Map WordPress plugin through 1.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:naver_map_project:naver_map:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "4117AA24-3590-430D-B7A9-7741E20FCCDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d1218c69-4f6a-4b2d-a537-5cc16a46ba7b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d1218c69-4f6a-4b2d-a537-5cc16a46ba7b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0147",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.310",
      "lastModified" : "2025-03-25T20:15:16.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Flexible Captcha WordPress plugin through 4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flexible_captcha_project:flexible_captcha:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.1",
            "matchCriteriaId" : "0CB3BA46-C9CE-493E-94FB-24C831B451BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/af9cbb4a-42fc-43c5-88f3-349b417f1a6a",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/af9cbb4a-42fc-43c5-88f3-349b417f1a6a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0148",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.377",
      "lastModified" : "2025-03-25T19:15:40.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gallery Factory Lite WordPress plugin through 2.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vilyon:gallery_factory_lite:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "C9376065-4895-449D-9EA7-5A927E6F2A7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/f15f2f2c-2053-4b93-8064-15b5243a4021",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f15f2f2c-2053-4b93-8064-15b5243a4021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0149",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.440",
      "lastModified" : "2025-03-25T21:15:40.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WordPrezi WordPress plugin before 0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordprezi_project:wordprezi:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.8.2",
            "matchCriteriaId" : "031C7239-5B61-4CF5-A6E4-32BA6AAB660A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/6b6f9e42-7f7f-4daa-99c9-14a24a6d76b0",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/6b6f9e42-7f7f-4daa-99c9-14a24a6d76b0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0150",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.507",
      "lastModified" : "2025-03-25T18:15:30.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cloak Front End Email WordPress plugin before 1.9.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloak_front_end_email_project:cloak_front_end_email:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.9.1",
            "matchCriteriaId" : "D8355157-82BF-4DD7-AB08-41DAB0D0D625"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/517154dc-d6bd-462d-b955-061a7b7f8da5",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/517154dc-d6bd-462d-b955-061a7b7f8da5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0153",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.567",
      "lastModified" : "2025-03-25T20:15:17.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Vimeo Video Autoplay Automute WordPress plugin through 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vimeo_video_autoplay_automute_project:vimeo_video_autoplay_automute:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "733627BE-03AE-48D5-BE05-DDC2EF5D39E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/f3459868-28aa-4a5d-94d8-bbc17e3ce653",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f3459868-28aa-4a5d-94d8-bbc17e3ce653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0154",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.627",
      "lastModified" : "2025-03-25T21:15:40.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GamiPress WordPress plugin before 1.0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gamipress:gamipress:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.9",
            "matchCriteriaId" : "06FCE79A-A300-4D95-B62E-42E29BF74976"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5e66e173-776d-4423-b4a2-eb7316b2502f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5e66e173-776d-4423-b4a2-eb7316b2502f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0170",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.687",
      "lastModified" : "2025-03-25T18:15:30.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Html5 Audio Player WordPress plugin before 2.1.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bplugins:html5_audio_player:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.12",
            "matchCriteriaId" : "840C2C41-BA2C-4891-A9B4-6658F1F83F91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/19ee5e33-acc8-40c5-8f54-c9cb0fa491f0",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/19ee5e33-acc8-40c5-8f54-c9cb0fa491f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0171",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.750",
      "lastModified" : "2025-03-25T20:15:17.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The jQuery T(-) Countdown Widget WordPress plugin before 2.3.24 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twinpictures:jquery_t\\(-\\)_countdown_widget:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.3.34",
            "matchCriteriaId" : "ED502BF9-18CA-4706-BF14-2E5FC81B470F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/32324655-ff91-4a53-a2c5-ebe6678d4a9d",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/32324655-ff91-4a53-a2c5-ebe6678d4a9d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0173",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.813",
      "lastModified" : "2025-03-25T19:15:40.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Drag & Drop Sales Funnel Builder for WordPress plugin before 2.6.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getwpfunnels:drag_\\&_drop_sales_funnel_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.6.9",
            "matchCriteriaId" : "4C7DB814-FD5D-48D2-8B39-C2BD24E1C0D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c543b6e2-a7c0-4ba7-a308-e9951dd59fb9",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c543b6e2-a7c0-4ba7-a308-e9951dd59fb9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0174",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.873",
      "lastModified" : "2025-03-25T21:15:40.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP VR WordPress plugin before 8.2.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rextheme:wp_vr:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "8.2.7",
            "matchCriteriaId" : "CB349167-556C-4460-AAA6-35E0FEC33D8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/6b53d0e6-def9-4907-bd2b-884b2afa52b3",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/6b53d0e6-def9-4907-bd2b-884b2afa52b3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0176",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.930",
      "lastModified" : "2025-03-25T18:15:31.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Giveaways and Contests by RafflePress WordPress plugin before 1.11.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rafflepress:giveaways_and_contests_by_rafflepress:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.11.3",
            "matchCriteriaId" : "36747920-E365-46F3-869E-9D769D331D45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/a762c25b-5c47-400e-8964-407cf4c94e9f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/a762c25b-5c47-400e-8964-407cf4c94e9f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0178",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:13.990",
      "lastModified" : "2025-03-26T14:15:26.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Annual Archive WordPress plugin before 1.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twinpictures:annual_archive:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.6.0",
            "matchCriteriaId" : "3D509AED-255E-49D4-9FEE-1DEC88E50C55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/cc308e15-7937-4d41-809d-74f8c13bee23",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/cc308e15-7937-4d41-809d-74f8c13bee23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0234",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:14.053",
      "lastModified" : "2025-03-25T19:15:40.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteground:siteground_security:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.1",
            "matchCriteriaId" : "327E707C-75F2-4F3A-A148-7D8BC9E19A3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/namah-age/CVEs/blob/master/1.md",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/acf3e369-1290-4b3f-83bf-2209b9dd06e1",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.siteground.com/viewtos/responsible_disclosure_policy?scid=4&lang=en",
        "source" : "contact@wpscan.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/namah-age/CVEs/blob/master/1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/acf3e369-1290-4b3f-83bf-2209b9dd06e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.siteground.com/viewtos/responsible_disclosure_policy?scid=4&lang=en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0236",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:14.117",
      "lastModified" : "2025-03-25T19:15:40.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Tutor LMS WordPress plugin before 2.0.10 does not sanitise and escape the reset_key and user_id parameters before outputting then back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themeum:tutor_lms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.10",
            "matchCriteriaId" : "1577C58F-361F-4933-91FE-F14201D68C08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/503835db-426d-4b49-85f7-c9a20d6ff5b8",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/503835db-426d-4b49-85f7-c9a20d6ff5b8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0252",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:14.180",
      "lastModified" : "2025-03-25T18:15:31.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Contextual Related Posts WordPress plugin before 3.3.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webberzone:contextual_related_posts:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.3.1",
            "matchCriteriaId" : "12DF780D-97EB-4AF0-AEC3-C039FD35CE13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5754a4fd-1adf-47aa-976f-3b28750058c2",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5754a4fd-1adf-47aa-976f-3b28750058c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0282",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-06T20:15:14.240",
      "lastModified" : "2025-03-26T14:15:26.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YourChannel WordPress plugin before 1.2.2 does not sanitize and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plugin:yourchannel:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.2",
            "matchCriteriaId" : "B1C533B3-08DC-4EF3-B4CE-245DECA27A51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/93693d45-5217-4571-bae5-aab8878cfe62",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/93693d45-5217-4571-bae5-aab8878cfe62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0669",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-02-06T20:15:14.300",
      "lastModified" : "2025-11-03T15:06:12.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2."
      }, {
        "lang" : "es",
        "value" : "Fortra (anteriormente HelpSystems) GoAnywhere MFT presenta una vulnerabilidad de inyección de comandos de preautenticación en el servlet de respuesta a licencias debido a la deserialización de un objeto arbitrario controlado por un atacante. Este problema se solucionó en la versión 7.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-02-10",
      "cisaActionDue" : "2023-03-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Fortra GoAnywhere MFT Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortra:goanywhere_managed_file_transfer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.2",
            "matchCriteriaId" : "F2CDAD23-E5EA-4830-9D57-5E6BC0E85244"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171789/Goanywhere-Encryption-Helper-7.1.1-Remote-Code-Execution.html",
        "source" : "cve@rapid7.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://attackerkb.com/topics/mg883Nbeva/cve-2023-0669/rapid7-analysis",
        "source" : "cve@rapid7.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://duo.com/decipher/fortra-patches-actively-exploited-zero-day-in-goanywhere-mft",
        "source" : "cve@rapid7.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://frycos.github.io/vulns4free/2023/02/06/goanywhere-forgotten.html",
        "source" : "cve@rapid7.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/17607",
        "source" : "cve@rapid7.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://infosec.exchange/@briankrebs/109795710941843934",
        "source" : "cve@rapid7.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml#zerodayfeb1",
        "source" : "cve@rapid7.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/02/03/exploitation-of-goanywhere-mft-zero-day-vulnerability/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171789/Goanywhere-Encryption-Helper-7.1.1-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://attackerkb.com/topics/mg883Nbeva/cve-2023-0669/rapid7-analysis",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://duo.com/decipher/fortra-patches-actively-exploited-zero-day-in-goanywhere-mft",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://frycos.github.io/vulns4free/2023/02/06/goanywhere-forgotten.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/17607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://infosec.exchange/@briankrebs/109795710941843934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml#zerodayfeb1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/02/03/exploitation-of-goanywhere-mft-zero-day-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-0669",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0686",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-06T20:15:14.367",
      "lastModified" : "2024-11-21T07:37:37.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects the function update_cart of the file /oews/classes/Master.php?f=update_cart of the component HTTP POST Request Handler. The manipulation of the argument cart_id leads to sql injection. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The identifier VDB-220245 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en SourceCodester Online Eyewear Shop 1.0. Ha sido clasificada como crítica. Esto afecta a la función update_cart del archivo /oews/classes/Master.php?f=update_cart del componente HTTP POST Request Handler. La manipulación del argumento cart_id conduce a la inyección de SQL. Es posible iniciar el ataque de forma remota. La complejidad de un ataque es bastante alta. Se dice que la explotabilidad es difícil. A esta vulnerabilidad se le asignó el identificador VDB-220245."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_eyewear_shop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464A3580-D632-43EB-93EF-E2A1A5736F14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220245",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220245",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20602",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:14.440",
      "lastModified" : "2025-03-26T15:15:44.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494107; Issue ID: ALPS07494107."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C27948-65A7-4B1E-9F10-6744D176A5C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20604",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:14.487",
      "lastModified" : "2025-03-26T15:15:44.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494067; Issue ID: ALPS07494067."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C27948-65A7-4B1E-9F10-6744D176A5C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5FE245-6346-4078-A3D0-E5F79BB636B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20605",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:14.530",
      "lastModified" : "2025-03-26T15:15:44.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07550104; Issue ID: ALPS07550104."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6731:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF784DB-3560-4045-BB32-F12DCF4C43B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C27948-65A7-4B1E-9F10-6744D176A5C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D808EF4D-0A54-4324-8341-240F7AFABC40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757cd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EDB89E-8140-4202-97B3-9D7337E90FDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757ch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C5CC4F-DA66-4980-A4BB-693987431A38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20606",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:14.580",
      "lastModified" : "2025-03-26T15:15:45.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In apusys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07571104; Issue ID: ALPS07571104."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20607",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:14.627",
      "lastModified" : "2025-03-25T19:15:41.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ccu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07512839; Issue ID: ALPS07512839."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-662"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-662"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20608",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:14.673",
      "lastModified" : "2025-03-26T14:15:26.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display drm, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363599; Issue ID: ALPS07363599."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20609",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:14.720",
      "lastModified" : "2025-03-26T14:15:27.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ccu, there is a possible out of bounds read due to a logic error. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07570864; Issue ID: ALPS07570864."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20610",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:14.767",
      "lastModified" : "2025-03-26T14:15:27.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363469; Issue ID: ALPS07363469."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-662"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-662"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20611",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:14.817",
      "lastModified" : "2025-03-26T14:15:27.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In gpu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588678; Issue ID: ALPS07588678."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-662"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-662"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6731:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF784DB-3560-4045-BB32-F12DCF4C43B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C27948-65A7-4B1E-9F10-6744D176A5C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D808EF4D-0A54-4324-8341-240F7AFABC40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757cd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EDB89E-8140-4202-97B3-9D7337E90FDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757ch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C5CC4F-DA66-4980-A4BB-693987431A38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20612",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:14.863",
      "lastModified" : "2025-03-26T14:15:27.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629571; Issue ID: ALPS07629571."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20613",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:14.910",
      "lastModified" : "2025-03-26T14:15:27.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628614; Issue ID: ALPS07628614."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20614",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:14.957",
      "lastModified" : "2025-03-26T14:15:28.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628615; Issue ID: ALPS07628615."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20615",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:15.003",
      "lastModified" : "2025-03-26T20:15:17.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629572; Issue ID: ALPS07629572."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20616",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:15.050",
      "lastModified" : "2025-03-26T20:15:18.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560720; Issue ID: ALPS07560720."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C27948-65A7-4B1E-9F10-6744D176A5C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D808EF4D-0A54-4324-8341-240F7AFABC40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757cd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EDB89E-8140-4202-97B3-9D7337E90FDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757ch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C5CC4F-DA66-4980-A4BB-693987431A38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8183:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F65D7B-31A1-4D94-82E9-254A7A6D7BE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20618",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:15.097",
      "lastModified" : "2025-03-26T19:15:21.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519184; Issue ID: ALPS07519184."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20619",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-02-06T20:15:15.140",
      "lastModified" : "2025-03-26T19:15:21.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519159; Issue ID: ALPS07519159."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/February-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23944",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-06T20:15:15.187",
      "lastModified" : "2024-11-21T07:47:09.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud mail is an email app for the nextcloud home server platform. In versions prior to 2.2.2 user's passwords were stored in cleartext in the database during the duration of OAuth2 setup procedure. Any attacker or malicious user with access to the database would have access to these user passwords until the OAuth setup has been completed. It is recommended that the Nextcloud Mail app is upgraded to 2.2.2. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:mail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.2",
            "matchCriteriaId" : "CBF785C7-5DA0-4C31-85E1-A51B108CB73D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/mail/pull/7797",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-g86r-x755-93f4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1806275",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/mail/pull/7797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-g86r-x755-93f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1806275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23942",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-06T21:15:09.727",
      "lastModified" : "2024-11-21T07:47:09.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Versions prior to 3.6.3 are missing sanitisation on qml labels which are used for basic HTML elements such as `strong`, `em` and `head` lines in the UI of the desktop client. The lack of sanitisation may allow for javascript injection. It is recommended that the Nextcloud Desktop Client is upgraded to 3.6.3. There are no known workarounds for this issue."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Desktop Client es una herramienta para sincronizar archivos desde un servidor Nextcloud con su computadora. A las versiones anteriores a la 3.6.3 les falta desinfección en las etiquetas qml que se utilizan para elementos HTML básicos como las líneas `strong`, `em` y `head` en la interfaz de usuario del cliente de escritorio. La falta de desinfección puede permitir la inyección de JavaScript. Se recomienda actualizar Nextcloud Desktop Client a 3.6.3. No se conocen workarounds para este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:desktop:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.3",
            "matchCriteriaId" : "DEBE889F-3CDF-44E4-8718-FE2F91A0E453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/desktop/pull/5233",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-64qc-vf6v-8xgg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1788598",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/desktop/pull/5233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-64qc-vf6v-8xgg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1788598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23943",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-06T21:15:09.810",
      "lastModified" : "2024-11-21T07:47:09.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud mail is an email app for the nextcloud home server platform. In affected versions the SMTP, IMAP and Sieve host fields allowed to scan for internal services and servers reachable from within the local network of the Nextcloud Server. It is recommended that the Nextcloud Maill app is upgraded to 1.15.0 or 2.2.2. The only known workaround for this issue is to completely disable the nextcloud mail app."
      }, {
        "lang" : "es",
        "value" : "Nextcloud mail es una aplicación de correo electrónico para la plataforma de servidor doméstico nextcloud. En las versiones afectadas, los campos de host SMTP, IMAP y Sieve permitían escanear servicios internos y servidores accesibles desde la red local del servidor Nextcloud. Se recomienda actualizar la aplicación Nextcloud Mail a 1.15.0 o 2.2.2. El único workaround para este problema es desactivar completamente la aplicación de correo nextcloud."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:mail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.15.0",
            "matchCriteriaId" : "67598F70-8C1A-4636-920F-FDD4EBD290FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:mail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.2",
            "matchCriteriaId" : "45C0BF5F-F48B-466D-95C1-94785C25E788"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/mail/pull/7796",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gcx-r739-9pf6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1736390",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1741525",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1746582",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/mail/pull/7796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8gcx-r739-9pf6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1736390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1741525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1746582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-06T21:15:09.900",
      "lastModified" : "2025-03-25T19:15:41.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorized Actor."
      }, {
        "lang" : "es",
        "value" : "Couchbase Server anterior a 6.6.6, 7.x anterior a 7.0.5 y 7.1.x anterior a 7.1.2 exponen información confidencial a un actor no autorizado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "6.6.6",
            "matchCriteriaId" : "939CBEC4-4642-4DDB-9C77-C8DCA22852A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.5",
            "matchCriteriaId" : "8D4AA8BF-9C42-46FB-8160-D622C9F2903C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.2",
            "matchCriteriaId" : "15E7D08F-4022-4766-9C45-B45A0A7EAC15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.couchbase.com/server/current/release-notes/relnotes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://forums.couchbase.com/tags/security",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.couchbase.com/server/current/release-notes/relnotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://forums.couchbase.com/tags/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-06T22:15:09.630",
      "lastModified" : "2025-03-26T19:15:22.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php."
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección de comandos en SolarView Compact hasta la versión 6.00, los atacantes pueden ejecutar comandos eludiendo las restricciones internas a través de downloader.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:solarview_compact_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.00",
            "matchCriteriaId" : "96BF2AF2-67B4-46C9-9BA9-BDEBE805BAF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:solarview_compact:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B677303-DBF0-44EF-B33C-1C0EAEF82135"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/174537/SolarView-Compact-6.00-Remote-Command-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Timorlover/CVE-2023-23333",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/174537/SolarView-Compact-6.00-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Timorlover/CVE-2023-23333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0615",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-06T23:15:09.933",
      "lastModified" : "2025-03-25T20:15:17.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls, such as VIDIOC_S_DV_TIMINGS ioctl. This could allow a local user to crash the system if vivid test code enabled."
      }, {
        "lang" : "es",
        "value" : "Se encontró una falla de pérdida de memoria y una posible división por cero y desbordamiento de enteros en el kernel de Linux V4L2 y en la funcionalidad del código de prueba vívida. Este problema ocurre cuando un usuario activa ioctls, como VIDIOC_S_DV_TIMINGS ioctl. Esto podría permitir que un usuario local bloquee el sistema si el código de prueba vívido está habilitado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-369"
        }, {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "108695B6-7133-4B6C-80AF-0F66880FE858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF501633-2F44-4913-A8EE-B021929F49F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDA597B-CAC1-4DF0-86F0-42E142C654E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "725C78C9-12CE-406F-ABE8-0813A01D66E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A127C155-689C-4F67-B146-44A57F4BFD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D34127CC-68F5-4703-A5F6-5006F803E4AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2166287",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2166287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23849",
      "sourceIdentifier" : "disclosure@synopsys.com",
      "published" : "2023-02-06T23:15:10.067",
      "lastModified" : "2025-03-25T20:15:18.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site Scripting vulnerability. Any web service hosted on the same sub domain can set a cookie for the whole subdomain which can be used to bypass other mitigations in place for malicious purposes. CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C"
      }, {
        "lang" : "es",
        "value" : "Las versiones de Coverity Connect anteriores a 2022.12.0 se ven afectadas por una vulnerabilidad de cross-site scripting no autenticadas. Cualquier servicio web alojado en el mismo subdominio puede configurar una cookie para todo el subdominio que puede usarse para evitar otras mitigaciones implementadas con fines maliciosos. CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@synopsys.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synopsys:coverity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022.12.0",
            "matchCriteriaId" : "332F5E1D-49AD-4A7E-B5E5-F91E17E690D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-CVE-2023-23849-affecting-Coverity",
        "source" : "disclosure@synopsys.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-CVE-2023-23849-affecting-Coverity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24808",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-07T01:15:09.567",
      "lastModified" : "2024-11-21T07:48:26.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : " PDFio is a C library for reading and writing PDF files. In versions prior to 1.1.0 a denial of service (DOS) vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. The pdf which causes this crash found in testing is about 28kb in size and was discovered via fuzzing. Anyone who uses this library either as a standalone binary or as a library can be DOSed when attempting to parse this type of file. Web servers or other automated processes which rely on this code to turn pdf submissions into plaintext can be DOSed when an attacker uploads the pdf. Please see the linked GHSA for an example pdf. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      }, {
        "lang" : "es",
        "value" : "PDFio es una librería C para leer y escribir archivos PDF. En versiones anteriores a la 1.1.0 existe una vulnerabilidad de denegación de servicio (DOS) en el analizador pdfio. Los archivos pdf creados pueden hacer que el programa se ejecute al 100% de utilización y nunca finalice. El pdf que causa este bloqueo encontrado en las pruebas tiene un tamaño de aproximadamente 28 kb y se descubrió mediante fuzzing. Cualquiera que utilice esta librería, ya sea como binario independiente o como librería, puede recibir DOS al intentar analizar este tipo de archivo. Los servidores web u otros procesos automatizados que dependen de este código para convertir los envíos de PDF en texto plano pueden recibir DOS cuando un atacante carga el PDF. Consulte el GHSA vinculado para ver un pdf de ejemplo. Se recomienda a los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfio_project:pdfio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "FE34732E-6900-42B6-BC6E-0F5D047545E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/michaelrsweet/pdfio/commit/4f10021e7ee527c1aa24853e2947e38e154d9ccb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/michaelrsweet/pdfio/security/advisories/GHSA-cjc4-x96x-fvgf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/michaelrsweet/pdfio/commit/4f10021e7ee527c1aa24853e2947e38e154d9ccb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/michaelrsweet/pdfio/security/advisories/GHSA-cjc4-x96x-fvgf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24827",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-07T01:15:09.660",
      "lastModified" : "2024-11-21T07:48:28.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. A password disclosure flaw was found in Syft versions v0.69.0 and v0.69.1. This flaw leaks the password stored in the SYFT_ATTEST_PASSWORD environment variable. The `SYFT_ATTEST_PASSWORD` environment variable is for the `syft attest` command to generate attested SBOMs for the given container image. This environment variable is used to decrypt the private key (provided with `syft attest --key <path-to-key-file>`)  during the signing process while generating an SBOM attestation. This vulnerability affects users running syft that have the `SYFT_ATTEST_PASSWORD` environment variable set with credentials (regardless of if the attest command is being used or not). Users that do not have the environment variable `SYFT_ATTEST_PASSWORD` set are not affected by this issue. The credentials are leaked in two ways: in the syft logs when `-vv` or `-vvv` are used in the syft command (which is any log level >= `DEBUG`) and in the attestation or SBOM only when the `syft-json` format is used. Note that as of v0.69.0 any generated attestations by the `syft attest` command are uploaded to the OCI registry (if you have write access to that registry) in the same way `cosign attach` is done. This means that any attestations generated for the affected versions of syft when the `SYFT_ATTEST_PASSWORD` environment variable was set would leak credentials in the attestation payload uploaded to the OCI registry. This issue has been patched in commit `9995950c70` and has been released as v0.70.0. There are no workarounds for this vulnerability. Users are advised to upgrade."
      }, {
        "lang" : "es",
        "value" : "syft es una herramienta CLI y una librería Go para generar una lista de materiales de software (SBOM) a partir de imágenes de contenedores y sistemas de archivos. Se encontró una falla de divulgación de contraseña en las versiones v0.69.0 y v0.69.1 de Syft. Esta falla filtra la contraseña almacenada en la variable de entorno SYFT_ATTEST_PASSWORD. La variable de entorno `SYFT_ATTEST_PASSWORD` es para que el comando `syft attest` genere SBOM certificado para la imagen del contenedor dada. Esta variable de entorno se utiliza para descifrar la clave privada (proporcionada con `syft attest --key `) durante el proceso de firma mientras se genera una certificación SBOM. Esta vulnerabilidad afecta a los usuarios que ejecutan syft y tienen la variable de entorno `SYFT_ATTEST_PASSWORD` configurada con credenciales (independientemente de si se está utilizando el comando attest o no). Los usuarios que no tienen configurada la variable de entorno `SYFT_ATTEST_PASSWORD` no se ven afectados por este problema. Las credenciales se filtran de dos maneras: en los registros de syft cuando se usan `-vv` o `-vvv` en el comando syft (que es cualquier nivel de registro &gt;= `DEBUG`) y en la atestación o SBOM solo cuando Se utiliza el formato `syft-json`. Tenga en cuenta que a partir de la versión 0.69.0, cualquier certificación generada por el comando `syft attest` se carga en el registro OCI (si tiene acceso de escritura a ese registro) de la misma manera que se realiza `cosign adjunto`. Esto significa que cualquier certificación generada para las versiones afectadas de syft cuando se configuró la variable de entorno `SYFT_ATTEST_PASSWORD` filtraría credenciales en el payload de certificación cargada en el registro OCI. Este problema se solucionó en el commit `9995950c70` y se lanzó como v0.70.0. No existen workarounds para esta vulnerabilidad. Se recomienda a los usuarios que actualicen."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anchore:syft:0.69.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF5D298-D6A2-4D2A-B6B4-B544F7B0CAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anchore:syft:0.69.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1588A629-B860-4DDF-95C2-9CBE56E86FE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anchore/syft/commit/9995950c70e849f9921919faffbfcf46401f71f3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/anchore/syft/security/advisories/GHSA-jp7v-3587-2956",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/anchore/syft/commit/9995950c70e849f9921919faffbfcf46401f71f3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/anchore/syft/security/advisories/GHSA-jp7v-3587-2956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0706",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-07T10:15:52.610",
      "lastModified" : "2024-11-21T07:37:39.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Medical Certificate Generator App 1.0. Affected by this issue is some unknown functionality of the file manage_record.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-220340."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Medical Certificate Generator App 1.0 y se ha clasificado como crítica. Una función desconocida del archivo enable_record.php es afectada por esta vulnerabilidad. La manipulación del argumento id conduce a la inyección de SQL. El ataque puede lanzarse de forma remota. El identificador de esta vulnerabilidad es VDB-220340."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medical_certificate_generator_app_project:medical_certificate_generator_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99101B10-CEBF-4396-B794-8B4A8D91ED1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220340",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220340",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22643",
      "sourceIdentifier" : "meissner@suse.de",
      "published" : "2023-02-07T10:15:52.687",
      "lastModified" : "2024-11-21T07:45:07.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPO_ALIAS, REPO_TYPE or REPO_METADATA_PATH settings to execute code as root. This issue affects: SUSE Linux Enterprise Server for SAP 15-SP3 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426. openSUSE Leap 15.4 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426."
      }, {
        "lang" : "es",
        "value" : "Una neutralización incorrecta de elementos especiales utilizados en una vulnerabilidad de comando del sistema operativo ('inyección de comando del sistema operativo') en libzypp-plugin-appdata de SUSE Linux Enterprise Server para SAP 15-SP3; openSUSE Leap 15.4 permite a atacantes que pueden engañar a los usuarios utilizar configuraciones REPO_ALIAS, REPO_TYPE o REPO_METADATA_PATH especialmente manipuladas para ejecutar código como root. Este problema afecta a: SUSE Linux Enterprise Server para versiones SAP 15-SP3 libzypp-plugin-appdata anteriores a 1.0.1+git.20180426. Versiones de openSUSE Leap 15.4 libzypp-plugin-appdata anteriores a 1.0.1+git.20180426."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "meissner@suse.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "meissner@suse.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensuse:libzypp-plugin-appdata:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1\\+git.20180426",
            "matchCriteriaId" : "231CBDA6-33BA-44D6-81AF-B62C47F4A261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE80EB04-7F9D-4C0B-85DB-4A13DEACB5E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_server:15:sp3:*:*:*:sap:*:*",
            "matchCriteriaId" : "107443F7-75CB-478B-B79A-EDD6582530DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1206836",
        "source" : "meissner@suse.de",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1206836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23696",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-07T10:15:52.773",
      "lastModified" : "2024-11-21T07:46:40.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system.\n\n"
      }, {
        "lang" : "es",
        "value" : "Dell Command Intel vPro Out of Band, versiones anteriores a la 4.3.1, contienen una vulnerabilidad de autorización incorrecta. Un usuario malintencionado autenticado localmente podría explotar esta vulnerabilidad para escribir archivos arbitrarios en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:command_\\|_intel_vpro_out_of_band:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.0",
            "matchCriteriaId" : "28381B52-20D9-4C39-9780-5120DFECF282"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000208331/dsa-2023-029-dell-command-intel-vpro-out-of-band-security-update-for-an-improper-authorization-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000208331/dsa-2023-029-dell-command-intel-vpro-out-of-band-security-update-for-an-improper-authorization-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0707",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-07T13:15:10.053",
      "lastModified" : "2024-11-21T07:37:40.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been rated as critical. Affected by this issue is the function delete_record of the file function.php. The manipulation of the argument id leads to sql injection. VDB-220346 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medical_certificate_generator_app_project:medical_certificate_generator_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99101B10-CEBF-4396-B794-8B4A8D91ED1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220346",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220346",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22735",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-07T19:15:09.303",
      "lastModified" : "2024-11-21T07:45:19.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zulip is an open-source team collaboration tool. In versions of zulip prior to commit `2f6c5a8` but after commit `04cf68b` users could upload files with arbitrary `Content-Type` which would be served from the Zulip hostname with `Content-Disposition: inline` and no `Content-Security-Policy` header, allowing them to trick other users into executing arbitrary Javascript in the context of the Zulip application.  Among other things, this enables session theft. Only deployments which use the S3 storage (not the local-disk storage) are affected, and only deployments which deployed commit 04cf68b45ebb5c03247a0d6453e35ffc175d55da, which has only been in `main`, not any numbered release. Users affected should upgrade from main again to deploy this fix. Switching from S3 storage to the local-disk storage would nominally mitigate this, but is likely more involved than upgrading to the latest `main` which addresses the issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:2023-01-09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D6A69A-4A00-46FE-B1E4-43C140BF1C24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zulip/zulip/commit/04cf68b45ebb5c03247a0d6453e35ffc175d55da",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/zulip/zulip/commit/2f6c5a883e106aa82a570d3d1f243993284b70f3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zulip/zulip/security/advisories/GHSA-wm83-3764-5wqh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zulip.readthedocs.io/en/latest/production/upgrade-or-modify.html#upgrading-from-a-git-repository",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/zulip/zulip/commit/04cf68b45ebb5c03247a0d6453e35ffc175d55da",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/zulip/zulip/commit/2f6c5a883e106aa82a570d3d1f243993284b70f3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/zulip/zulip/security/advisories/GHSA-wm83-3764-5wqh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://zulip.readthedocs.io/en/latest/production/upgrade-or-modify.html#upgrading-from-a-git-repository",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24813",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-07T19:15:09.393",
      "lastModified" : "2024-11-21T07:48:26.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dompdf is an HTML to PDF converter written in php. Due to the difference in the attribute parser of Dompdf and php-svg-lib, an attacker can still call arbitrary URLs with arbitrary protocols. Dompdf parses the href attribute of `image` tags and respects `xlink:href` even if `href` is specified. However, php-svg-lib, which is later used to parse the svg file, parses the href attribute. Since `href` is respected if both `xlink:href` and `href` is specified, it's possible to bypass the protection on the Dompdf side by providing an empty `xlink:href` attribute. An attacker can exploit the vulnerability to call arbitrary URLs with arbitrary protocols if they provide an SVG file to the Dompdf. In PHP versions before 8.0.0, it leads to arbitrary unserialize, which will lead, at the very least, to arbitrary file deletion and might lead to remote code execution, depending on available classes. This vulnerability has been addressed in commit `95009ea98` which has been included in release version 2.0.3. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dompdf_project:dompdf:2.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8AD8A6-BF3D-4457-A3F1-31C8EBF74B03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dompdf/dompdf/commit/95009ea98230f9b084b040c34e3869ef3dccc9aa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dompdf/dompdf/security/advisories/GHSA-56gj-mvh6-rp75",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dompdf/dompdf/commit/95009ea98230f9b084b040c34e3869ef3dccc9aa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dompdf/dompdf/security/advisories/GHSA-56gj-mvh6-rp75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24814",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-07T19:15:09.473",
      "lastModified" : "2024-11-21T07:48:26.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TYPO3 is a free and open source Content Management Framework released under the GNU General Public License. In affected versions the TYPO3 core component `GeneralUtility::getIndpEnv()` uses the unfiltered server environment variable `PATH_INFO`, which allows attackers to inject malicious content. In combination with the TypoScript setting `config.absRefPrefix=auto`, attackers can inject malicious HTML code to pages that have not been rendered and cached, yet. As a result, injected values would be cached and delivered to other website visitors (persisted cross-site scripting). Individual code which relies on the resolved value of `GeneralUtility::getIndpEnv('SCRIPT_NAME')` and corresponding usages (as shown below) are vulnerable as well. Additional investigations confirmed that at least Apache web server deployments using CGI (FPM, FCGI/FastCGI, and similar) are affected. However, there still might be the risk that other scenarios like nginx, IIS, or Apache/mod_php are vulnerable. The usage of server environment variable `PATH_INFO` has been removed from corresponding processings in `GeneralUtility::getIndpEnv()`. Besides that, the public property `TypoScriptFrontendController::$absRefPrefix` is encoded for both being used as a URI component and for being used as a prefix in an HTML context. This mitigates the cross-site scripting vulnerability. Users are advised to update to TYPO3 versions 8.7.51 ELTS, 9.5.40 ELTS, 10.4.35 LTS, 11.5.23 LTS and 12.2.0 which fix this problem. For users who are unable to patch in a timely manner the TypoScript setting `config.absRefPrefix` should at least be set to a static path value, instead of using auto - e.g. `config.absRefPrefix=/`. This workaround **does not fix all aspects of the vulnerability**, and is just considered to be an intermediate mitigation to the most prominent manifestation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0",
            "versionEndExcluding" : "9.7.51",
            "matchCriteriaId" : "A0A441EE-3A04-499B-AEA3-E5869BC418DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.5.40",
            "matchCriteriaId" : "E7D02B4E-9050-4C4E-ABE5-00E8662145E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.4.36",
            "matchCriteriaId" : "6AF24F98-DCD1-442F-98DB-B0DE64AC2556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.5.23",
            "matchCriteriaId" : "2E225EC3-5236-450C-9655-AE920702AAA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.2.0",
            "matchCriteriaId" : "7E3B9E03-7D04-4A74-8FE0-200097544319"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Setup/Config/Index.html#absrefprefix",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/TYPO3/typo3/blob/v11.5.22/typo3/sysext/core/Classes/Utility/GeneralUtility.php#L2481-L2484",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/TYPO3/typo3/blob/v11.5.22/typo3/sysext/frontend/Classes/Controller/TypoScriptFrontendController.php#L2547-L2549",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/TYPO3/typo3/commit/0005a6fd86ab97eff8bf2e3a5828bf0e7cb6263a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TYPO3/typo3/security/advisories/GHSA-r4f8-f93x-5qh3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2023-001",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-psa-2023-001",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Setup/Config/Index.html#absrefprefix",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/TYPO3/typo3/blob/v11.5.22/typo3/sysext/core/Classes/Utility/GeneralUtility.php#L2481-L2484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/TYPO3/typo3/blob/v11.5.22/typo3/sysext/frontend/Classes/Controller/TypoScriptFrontendController.php#L2547-L2549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/TYPO3/typo3/commit/0005a6fd86ab97eff8bf2e3a5828bf0e7cb6263a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TYPO3/typo3/security/advisories/GHSA-r4f8-f93x-5qh3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2023-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-psa-2023-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0732",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-07T20:15:08.910",
      "lastModified" : "2024-11-21T07:37:43.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is the function registration of the file oews/classes/Users.php of the component POST Request Handler. The manipulation of the argument firstname/middlename/lastname/email/contact leads to cross site scripting. The attack can be launched remotely. The identifier VDB-220369 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_eyewear_shop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464A3580-D632-43EB-93EF-E2A1A5736F14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220369",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220369",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25194",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-02-07T20:15:09.017",
      "lastModified" : "2025-03-25T15:15:18.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A possible security vulnerability has been identified in Apache Kafka Connect API.\nThis requires access to a Kafka Connect worker, and the ability to create/modify connectors on it with an arbitrary Kafka client SASL JAAS config\nand a SASL-based security protocol, which has been possible on Kafka Connect clusters since Apache Kafka Connect 2.3.0.\nWhen configuring the connector via the Kafka Connect REST API, an authenticated operator can set the `sasl.jaas.config`\nproperty for any of the connector's Kafka clients to \"com.sun.security.auth.module.JndiLoginModule\", which can be done via the\n`producer.override.sasl.jaas.config`, `consumer.override.sasl.jaas.config`, or `admin.override.sasl.jaas.config` properties.\nThis will allow the server to connect to the attacker's LDAP server\nand deserialize the LDAP response, which the attacker can use to execute java deserialization gadget chains on the Kafka connect server.\nAttacker can cause unrestricted deserialization of untrusted data (or) RCE vulnerability when there are gadgets in the classpath.\n\nSince Apache Kafka 3.0.0, users are allowed to specify these properties in connector configurations for Kafka Connect clusters running with out-of-the-box\nconfigurations. Before Apache Kafka 3.0.0, users may not specify these properties unless the Kafka Connect cluster has been reconfigured with a connector\nclient override policy that permits them.\n\nSince Apache Kafka 3.4.0, we have added a system property (\"-Dorg.apache.kafka.disallowed.login.modules\") to disable the problematic login modules usage\nin SASL JAAS configuration. Also by default \"com.sun.security.auth.module.JndiLoginModule\" is disabled in Apache Kafka Connect 3.4.0. \n\nWe advise the Kafka Connect users to validate connector configurations and only allow trusted JNDI configurations. Also examine connector dependencies for \nvulnerable versions and either upgrade their connectors, upgrading that specific dependency, or removing the connectors as options for remediation. Finally,\nin addition to leveraging the \"org.apache.kafka.disallowed.login.modules\" system property, Kafka Connect users can also implement their own connector\nclient config override policy, which can be used to control which Kafka client properties can be overridden directly in a connector config and which cannot.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:kafka_connect:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndIncluding" : "3.3.2",
            "matchCriteriaId" : "D01E6EF4-36BF-49EF-B1DC-6DABE82EEBDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/173151/Apache-Druid-JNDI-Injection-Remote-Code-Execution.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kafka.apache.org/cve-list",
        "source" : "security@apache.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/vy1c7fqcdqvq5grcqp6q5jyyb302khyz",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Mitigation" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173151/Apache-Druid-JNDI-Injection-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kafka.apache.org/cve-list",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/vy1c7fqcdqvq5grcqp6q5jyyb302khyz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0696",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-07T21:15:09.300",
      "lastModified" : "2024-11-21T07:37:38.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.77",
            "matchCriteriaId" : "0C92633F-31CC-40D0-A051-07880F438F28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1402270",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1402270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0697",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-07T21:15:09.360",
      "lastModified" : "2024-11-21T07:37:38.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.77",
            "matchCriteriaId" : "0C92633F-31CC-40D0-A051-07880F438F28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1341541",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1341541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0698",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-07T21:15:09.417",
      "lastModified" : "2025-05-05T16:15:26.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.77",
            "matchCriteriaId" : "0C92633F-31CC-40D0-A051-07880F438F28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1403573",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1693",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1403573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0699",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-07T21:15:09.470",
      "lastModified" : "2025-05-05T16:15:27.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page and browser shutdown. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.77",
            "matchCriteriaId" : "0C92633F-31CC-40D0-A051-07880F438F28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1371859",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1371859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0700",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-07T21:15:09.523",
      "lastModified" : "2025-03-20T21:15:17.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-451"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.77",
            "matchCriteriaId" : "0C92633F-31CC-40D0-A051-07880F438F28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1393732",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1393732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0701",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-07T21:15:09.577",
      "lastModified" : "2024-11-21T07:37:39.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interaction . (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.77",
            "matchCriteriaId" : "0C92633F-31CC-40D0-A051-07880F438F28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1405123",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1405123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0702",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-07T21:15:09.630",
      "lastModified" : "2024-11-21T07:37:39.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.77",
            "matchCriteriaId" : "0C92633F-31CC-40D0-A051-07880F438F28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1316301",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1316301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0703",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-07T21:15:09.683",
      "lastModified" : "2024-11-21T07:37:39.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.77",
            "matchCriteriaId" : "0C92633F-31CC-40D0-A051-07880F438F28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1405574",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1405574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0704",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-07T21:15:09.733",
      "lastModified" : "2025-03-20T21:15:17.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy and proxy settings via a crafted HTML page. (Chromium security severity: Low)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-602"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.77",
            "matchCriteriaId" : "0C92633F-31CC-40D0-A051-07880F438F28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1385982",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1385982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0705",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-07T21:15:09.787",
      "lastModified" : "2025-05-05T16:15:27.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race condition to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.77",
            "matchCriteriaId" : "0C92633F-31CC-40D0-A051-07880F438F28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1238642",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1238642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23931",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-07T21:15:09.850",
      "lastModified" : "2025-11-03T22:16:05.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cryptography.io:cryptography:*:*:*:*:*:python:*:*",
            "versionStartIncluding" : "1.8",
            "versionEndExcluding" : "39.0.1",
            "matchCriteriaId" : "D620CB15-986D-4955-BCE9-5CC459F01289"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pyca/cryptography/pull/8230/commits/94a50a9731f35405f0357fa5f3b177d46a726ab3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pyca/cryptography/security/advisories/GHSA-w7pp-m8wf-vj6r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pyca/cryptography/pull/8230/commits/94a50a9731f35405f0357fa5f3b177d46a726ab3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pyca/cryptography/security/advisories/GHSA-w7pp-m8wf-vj6r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/10/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230324-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0713",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-07T22:15:11.067",
      "lastModified" : "2026-04-08T17:16:49.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_add_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2764b360-228d-48c1-8a29-d3764e532799?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2764b360-228d-48c1-8a29-d3764e532799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0728",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-07T22:15:11.147",
      "lastModified" : "2026-04-08T18:17:49.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/43b43802-f301-4748-98b9-eea78a249355?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/43b43802-f301-4748-98b9-eea78a249355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0712",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-07T23:15:08.900",
      "lastModified" : "2026-04-08T17:16:49.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_move_object function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/0be428ae-40ae-4cc0-82ad-d121b6d2d27e?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/0be428ae-40ae-4cc0-82ad-d121b6d2d27e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0719",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-07T23:15:08.983",
      "lastModified" : "2026-04-08T18:17:44.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_sort_order function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9b26604b-2423-4130-b0ef-8f63a392c760?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9b26604b-2423-4130-b0ef-8f63a392c760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0723",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-07T23:15:09.067",
      "lastModified" : "2026-04-08T19:18:03.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_move_object function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/dc01108f-e781-484b-997a-c1d4e218a3f4?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/dc01108f-e781-484b-997a-c1d4e218a3f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0727",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-07T23:15:09.153",
      "lastModified" : "2026-04-08T18:17:48.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_delete_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/62b56928-7125-4211-b233-07b5b51881c1?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/62b56928-7125-4211-b233-07b5b51881c1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0730",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-07T23:15:09.247",
      "lastModified" : "2026-04-08T18:17:49.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_folder_order function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4104f69f-b185-498a-aabf-2126ffb94ab3?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4104f69f-b185-498a-aabf-2126ffb94ab3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0731",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-07T23:15:09.327",
      "lastModified" : "2026-04-08T18:17:50.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Interactive Geo Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the action content parameter in versions up to, and including, 1.5.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with editor level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interactive_geo_maps_project:interactive_geo_maps:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.11",
            "matchCriteriaId" : "4E8EDC70-B9F3-4759-9E53-49DFD6DB6E50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2861473%40interactive-geo-maps%2Ftrunk&old=2857078%40interactive-geo-maps%2Ftrunk&sfp_email=&sfph_mail=#file4",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/95ce515a-377c-49b4-8d1b-7ac22769c759?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2861473%40interactive-geo-maps%2Ftrunk&old=2857078%40interactive-geo-maps%2Ftrunk&sfp_email=&sfph_mail=#file4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/95ce515a-377c-49b4-8d1b-7ac22769c759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0735",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-07T23:15:09.413",
      "lastModified" : "2024-11-21T07:37:43.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.5.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wallabag:wallabag:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.4",
            "matchCriteriaId" : "D5F56D3B-7045-4633-9208-6605904F3584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wallabag/wallabag/commit/268372dbbdd7ef87b84617fdebf95d0a86caf7dc",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/8bc78cb1-b10b-4152-842e-ceb999fc5508",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wallabag/wallabag/commit/268372dbbdd7ef87b84617fdebf95d0a86caf7dc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/8bc78cb1-b10b-4152-842e-ceb999fc5508",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0736",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-07T23:15:09.493",
      "lastModified" : "2024-11-21T07:37:43.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository wallabag/wallabag prior to 2.5.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wallabag:wallabag:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.4",
            "matchCriteriaId" : "D5F56D3B-7045-4633-9208-6605904F3584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wallabag/wallabag/commit/4e023bddc3622ba5e901cc14a261fcb98d955cd7",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7e6f9614-6a96-4295-83f0-06a240be844e",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wallabag/wallabag/commit/4e023bddc3622ba5e901cc14a261fcb98d955cd7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7e6f9614-6a96-4295-83f0-06a240be844e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-07T23:15:09.573",
      "lastModified" : "2025-03-25T15:15:18.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in InvoicePlane 1.6 via filter_product input to file modal_product_lookups.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:1.6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "23D1F2C1-E04F-4014-9204-1E88B51C7AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:1.6.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "084CE782-14B2-474E-A615-4DDC903840AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:1.6.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "2FFA55E8-AC49-4DF6-85DC-E1F3A7B74396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:1.6.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "5A05B540-A1AF-4904-8C45-7832C815E489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invoiceplane:invoiceplane:1.6.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B644FEF-783D-425C-AD9D-BCD5D0193438"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/enferas/e4ab1aedd9727c3b09c7d0154a052199",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/enferas/e8fff9261526fdf51808c39b3004e1b5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/enferas/e4ab1aedd9727c3b09c7d0154a052199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/enferas/e8fff9261526fdf51808c39b3004e1b5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-07T23:15:09.627",
      "lastModified" : "2025-03-25T15:15:18.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross site scripting (XSS) vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the product_name and product_price inputs in file print.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_sales_management_system_project:simple_sales_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96866BCB-3D61-41DD-B014-8F86363B6A69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/enferas/63b2bc406f50349403029c26683e84ce",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/enferas/63b2bc406f50349403029c26683e84ce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0718",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-08T00:15:08.903",
      "lastModified" : "2026-04-08T17:16:49.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2c26d6de-5653-4be8-9526-39b30cb61625?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2c26d6de-5653-4be8-9526-39b30cb61625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24828",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-08T00:15:08.990",
      "lastModified" : "2024-11-21T07:48:28.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Onedev is a self-hosted Git Server with CI/CD and Kanban. In versions prior to 7.9.12 the algorithm used to generate access token and password reset keys was not cryptographically secure. Existing normal users (or everyone if it allows self-registration) may exploit this to elevate privilege to obtain administrator permission. This issue is has been addressed in version 7.9.12. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onedev_project:onedev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.9.12",
            "matchCriteriaId" : "DCBE7CE4-DD80-47F3-8913-EDC115C9DF3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theonedev/onedev/commit/d67dd9686897fe5e4ab881d749464aa7c06a68e5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-jf5c-9r77-3j5j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/commit/d67dd9686897fe5e4ab881d749464aa7c06a68e5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-jf5c-9r77-3j5j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0684",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-08T02:15:07.680",
      "lastModified" : "2026-04-08T17:16:48.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_unassign_folders function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as changing the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/29358ea9-21b7-4294-8fc9-0d38e689cf53?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/29358ea9-21b7-4294-8fc9-0d38e689cf53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0685",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-08T02:15:07.767",
      "lastModified" : "2026-04-08T19:18:02.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_unassign_folders function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin.."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e52b27fa-10e8-43d0-be29-774c2f5487ae?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e52b27fa-10e8-43d0-be29-774c2f5487ae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0711",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-08T02:15:07.853",
      "lastModified" : "2026-04-08T19:18:02.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_state function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the view state of the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d1c43e93-69a3-407e-860e-ab25af5d7177?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d1c43e93-69a3-407e-860e-ab25af5d7177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0715",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-08T02:15:07.933",
      "lastModified" : "2026-04-08T19:18:02.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_clone_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c3728280-3487-4cb2-8e37-f33811bc0a22?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c3728280-3487-4cb2-8e37-f33811bc0a22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0716",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-08T02:15:08.017",
      "lastModified" : "2026-04-08T18:17:44.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_edit_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3ad60a11-e307-4ec9-9099-091a87ff1d3b?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3ad60a11-e307-4ec9-9099-091a87ff1d3b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0717",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-08T02:15:08.093",
      "lastModified" : "2026-04-08T18:17:44.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_delete_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/35fb658f-6ffa-4df7-bfcd-25307d89fc26?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/35fb658f-6ffa-4df7-bfcd-25307d89fc26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0720",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-08T02:15:08.177",
      "lastModified" : "2026-04-08T18:17:45.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_folder_order function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8d392d0b-f286-44da-aa32-a08d0279baed?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8d392d0b-f286-44da-aa32-a08d0279baed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0722",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-08T02:15:08.257",
      "lastModified" : "2026-04-08T17:16:50.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_state function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/261a1bf0-a147-48c8-878e-f9b725ac74d8?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/261a1bf0-a147-48c8-878e-f9b725ac74d8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0724",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-08T02:15:08.343",
      "lastModified" : "2026-04-08T17:16:50.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_add_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/08c0ea6c-7e2f-482f-b30c-0e3bcd992159?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/08c0ea6c-7e2f-482f-b30c-0e3bcd992159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0725",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-08T02:15:08.420",
      "lastModified" : "2026-04-08T18:17:45.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_clone_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/80797183-c69f-4dce-a2e0-52a395ceffaa?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/80797183-c69f-4dce-a2e0-52a395ceffaa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0726",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-08T02:15:08.503",
      "lastModified" : "2026-04-08T18:17:48.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_edit_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wickedplugins:wicked_folders:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.18.16",
            "matchCriteriaId" : "E2A772F1-2D99-4A55-9535-EBADFBF75641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/51b88442-3961-42e2-8ff4-7726819a7f0f?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wicked-folders/tags/2.18.16/lib/class-wicked-folders-ajax.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2860994%40wicked-folders%2Ftrunk&old=2805161%40wicked-folders%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/51b88442-3961-42e2-8ff4-7726819a7f0f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0739",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-08T05:15:11.973",
      "lastModified" : "2024-11-21T07:37:43.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitHub repository answerdev/answer prior to 1.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "6C25084E-B0C5-46D7-BDD3-E024EEB1E764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/1ee34b884b905d14d4db457563176b77a974b992",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/93d7fac9-50be-4624-9096-45b89fbfd4ae",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/1ee34b884b905d14d4db457563176b77a974b992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/93d7fac9-50be-4624-9096-45b89fbfd4ae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0740",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-08T08:15:08.167",
      "lastModified" : "2024-11-21T07:37:43.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "6C25084E-B0C5-46D7-BDD3-E024EEB1E764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/c3001de52af91f09c96e701facbce0b9fa0c98ad",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/802ee76d-fe01-482b-a9a4-34699a7c9110",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/c3001de52af91f09c96e701facbce0b9fa0c98ad",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/802ee76d-fe01-482b-a9a4-34699a7c9110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0741",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-08T08:15:08.297",
      "lastModified" : "2024-11-21T07:37:44.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - DOM in GitHub repository answerdev/answer prior to 1.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "6C25084E-B0C5-46D7-BDD3-E024EEB1E764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/c3001de52af91f09c96e701facbce0b9fa0c98ad",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/78233bfa-871d-45e1-815f-dee73e397809",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/c3001de52af91f09c96e701facbce0b9fa0c98ad",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/78233bfa-871d-45e1-815f-dee73e397809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0742",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-08T08:15:08.377",
      "lastModified" : "2024-11-21T07:37:44.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "6C25084E-B0C5-46D7-BDD3-E024EEB1E764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/c3001de52af91f09c96e701facbce0b9fa0c98ad",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d73a2c03-7035-453b-9c04-c733ace65544",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/c3001de52af91f09c96e701facbce0b9fa0c98ad",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d73a2c03-7035-453b-9c04-c733ace65544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0743",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-08T08:15:08.453",
      "lastModified" : "2024-11-21T07:37:44.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository answerdev/answer prior to 1.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "6C25084E-B0C5-46D7-BDD3-E024EEB1E764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/860b1a3bd8cfaa8827e6e6f50ab1d98fa4c2c816",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/366cf8bb-19f6-4388-b089-d0a260efd863",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/860b1a3bd8cfaa8827e6e6f50ab1d98fa4c2c816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/366cf8bb-19f6-4388-b089-d0a260efd863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0744",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-08T08:15:08.537",
      "lastModified" : "2024-11-21T07:37:44.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "6C25084E-B0C5-46D7-BDD3-E024EEB1E764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171733/Answerdev-1.0.3-Account-Takeover.html",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/answerdev/answer/commit/c1fa2b13f6b547b96da60b23350bbe2b29de542d",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/35a0e12f-1d54-4fc0-8779-6a4949b7c434",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171733/Answerdev-1.0.3-Account-Takeover.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/answerdev/answer/commit/c1fa2b13f6b547b96da60b23350bbe2b29de542d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/35a0e12f-1d54-4fc0-8779-6a4949b7c434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0747",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-08T14:15:09.697",
      "lastModified" : "2024-11-21T07:37:44.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btcpayserver:btcpayserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.6",
            "matchCriteriaId" : "94342CA6-A899-46CD-A11E-DCD2BE344BB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/btcpayserver/btcpayserver/pull/4567/commits/d4e464ad4ef0cbbf61751e70f77865de325dd6cf",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7830b9b4-af2e-44ef-8b00-ee2491d4e7ff",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/pull/4567/commits/d4e464ad4ef0cbbf61751e70f77865de325dd6cf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7830b9b4-af2e-44ef-8b00-ee2491d4e7ff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0748",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-08T15:15:13.467",
      "lastModified" : "2024-11-21T07:37:44.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open Redirect in GitHub repository btcpayserver/btcpayserver prior to 1.7.6.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btcpayserver:btcpayserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.6",
            "matchCriteriaId" : "94342CA6-A899-46CD-A11E-DCD2BE344BB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/btcpayserver/btcpayserver/pull/4575/commits/c2cfa17e9619046b43987627b8429541d2834109",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/1a0403b6-9ec9-4587-b559-b1afba798c86",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/pull/4575/commits/c2cfa17e9619046b43987627b8429541d2834109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/1a0403b6-9ec9-4587-b559-b1afba798c86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0001",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2023-02-08T18:15:11.523",
      "lastModified" : "2024-11-21T07:36:22.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then use to execute privileged cytool commands that disable or uninstall the agent."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:critical_environment:*:*:*",
            "versionStartIncluding" : "7.5",
            "versionEndExcluding" : "7.5.101",
            "matchCriteriaId" : "EC5B0E84-B9A5-4FE3-B2E5-A64AEF57BCF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2023-0001",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2023-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0002",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2023-02-08T18:15:11.683",
      "lastModified" : "2024-11-21T07:36:22.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "5.0.12.22203",
            "matchCriteriaId" : "213B017D-D17C-460A-BC5C-6B6A4BFFA8E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:critical_environment:*:*:*",
            "versionStartIncluding" : "7.5",
            "versionEndIncluding" : "7.5.101",
            "matchCriteriaId" : "C72CD204-E989-4990-A4AF-BFE65817CD31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2023-0002",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2023-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0003",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2023-02-08T18:15:11.777",
      "lastModified" : "2025-02-13T17:15:52.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.10.0",
            "versionEndExcluding" : "6.10.0.185964",
            "matchCriteriaId" : "C6892445-38A0-4217-A16F-C7AFC288130A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.6.0:2585049:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EB5D56-A088-4C98-A840-C434BDB4BDF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.6.0:2889656:*:*:*:*:*:*",
            "matchCriteriaId" : "38AE91D5-806F-47AD-84C6-96EA1E147691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.6.0:3049220:*:*:*:*:*:*",
            "matchCriteriaId" : "976AE69C-D4D6-4B5A-90F4-6627E9A10A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.6.0:3124193:*:*:*:*:*:*",
            "matchCriteriaId" : "F61D6A0A-D99D-47BD-AFC5-6CEDF578A77E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.8.0:176620:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4249C9-788E-4C74-9532-DEDA9F6FD68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.8.0:3261002:*:*:*:*:*:*",
            "matchCriteriaId" : "62A10DA6-5BDC-49EC-B485-404E9EB6CF89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.9.0:130766:*:*:*:*:*:*",
            "matchCriteriaId" : "9A70F572-F44E-420D-8518-20D3794A7C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.9.0:177754:*:*:*:*:*:*",
            "matchCriteriaId" : "99372C6B-2306-44E3-AA01-6B82630BB2A0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HMEELCREWMRT6NS7HWXLA6XFLLMO36HE/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UEJWL67XR67JAGEL2ZK22NA3BRKNMZNY/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VEEQIN5242K5NBE2CZ4DYTNA5B4YTYE5/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VKFMKD4MJZIKFQJAAJ4VZ2FHIJ764A76/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2023-0003",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HMEELCREWMRT6NS7HWXLA6XFLLMO36HE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UEJWL67XR67JAGEL2ZK22NA3BRKNMZNY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VEEQIN5242K5NBE2CZ4DYTNA5B4YTYE5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VKFMKD4MJZIKFQJAAJ4VZ2FHIJ764A76/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2023-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0690",
      "sourceIdentifier" : "security@hashicorp.com",
      "published" : "2023-02-08T19:15:11.770",
      "lastModified" : "2024-11-21T07:37:38.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service (KMS) defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the intended KMS. This would result in the credentials being stored in plaintext on the Boundary PKI worker’s disk.\n\nThis issue is fixed in version 0.12.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hashicorp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hashicorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:boundary:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.10.0",
            "versionEndExcluding" : "0.12.0",
            "matchCriteriaId" : "5E72C55F-0535-4412-A308-2F7A21F915E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-03-boundary-workers-store-rotated-credentials-in-plaintext-even-when-key-management-service-configured/49907",
        "source" : "security@hashicorp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-03-boundary-workers-store-rotated-credentials-in-plaintext-even-when-key-management-service-configured/49907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23475",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-02-08T19:15:11.860",
      "lastModified" : "2024-11-21T07:46:16.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  245423."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED2F00-89E3-4BA9-A8FB-D43B308A59A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492C463-D76E-49B7-A4D4-3B499E422D89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ibm.com/support/pages/node/6890711",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6890711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25152",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-08T19:15:11.953",
      "lastModified" : "2024-11-21T07:49:12.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to create new files and directory structures on the host system that previously did not exist, potentially allowing attackers to change their resource allocations, promote their containers to privileged mode, or potentially add ssh authorized keys to allow the attacker access to a remote shell on the target machine.   In order to use this exploit, an attacker must have an existing \"server\" allocated and controlled by the Wings Daemon. This vulnerability has been resolved in version `v1.11.3` of the Wings Daemon, and has been back-ported to the 1.7 release series in `v1.7.3`. Anyone running `v1.11.x` should upgrade to `v1.11.3` and anyone running `v1.7.x` should upgrade to `v1.7.3`. There are no known workarounds for this vulnerability.\n\n### Workarounds\n\nNone at this time.  \n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pterodactyl:wings:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.3",
            "matchCriteriaId" : "956C5C15-B6A3-4A41-BE11-526133781E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pterodactyl:wings:1.11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6F3CF4-2AFF-4966-8DD4-D7FE674530C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pterodactyl:wings:1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C72D6216-66D3-49D9-93BA-CCB5B4031569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pterodactyl:wings:1.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FBA78A-C90F-4800-9AD7-99F3C9CD3125"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pterodactyl/wings/commit/dac9685298c3c1c49b3109fa4241aa88272b9f14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pterodactyl/wings/security/advisories/GHSA-p8r3-83r8-jwj5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pterodactyl/wings/commit/dac9685298c3c1c49b3109fa4241aa88272b9f14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pterodactyl/wings/security/advisories/GHSA-p8r3-83r8-jwj5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-08T19:15:12.053",
      "lastModified" : "2024-11-21T07:49:28.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to access and manipulate system files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caphyon:advanced_installer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20.0",
            "matchCriteriaId" : "B8AFCB60-84CE-4B2D-97E6-1532BEABE003"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.advancedinstaller.com/release-20.1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.advancedinstaller.com/release-20.1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0215",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2023-02-08T20:15:24.107",
      "lastModified" : "2025-11-04T20:16:15.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.2",
            "versionEndExcluding" : "1.0.2zg",
            "matchCriteriaId" : "70985D55-A574-4151-B451-4D500CBFC29A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.1",
            "versionEndExcluding" : "1.1.1t",
            "matchCriteriaId" : "DE0061D6-8F81-45D3-B254-82A94915FD08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.8",
            "matchCriteriaId" : "A6DC5D88-4E99-48F2-8892-610ACA9B5B86"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.3",
            "matchCriteriaId" : "62A933C5-C56E-485C-AD49-3B6A2C329131"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0009/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230207.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230207.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0216",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2023-02-08T20:15:24.160",
      "lastModified" : "2025-11-04T20:16:16.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.0.7",
            "matchCriteriaId" : "26EF8A48-B8E5-4D4D-8054-445D65171EAC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.3",
            "matchCriteriaId" : "62A933C5-C56E-485C-AD49-3B6A2C329131"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230207.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230207.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0217",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2023-02-08T20:15:24.213",
      "lastModified" : "2025-11-04T20:16:16.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.0.7",
            "matchCriteriaId" : "26EF8A48-B8E5-4D4D-8054-445D65171EAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230207.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230207.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0286",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2023-02-08T20:15:24.267",
      "lastModified" : "2025-11-04T20:16:16.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.2",
            "versionEndExcluding" : "1.0.2zg",
            "matchCriteriaId" : "70985D55-A574-4151-B451-4D500CBFC29A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.1",
            "versionEndExcluding" : "1.1.1t",
            "matchCriteriaId" : "DE0061D6-8F81-45D3-B254-82A94915FD08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.8",
            "matchCriteriaId" : "A6DC5D88-4E99-48F2-8892-610ACA9B5B86"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.3",
            "matchCriteriaId" : "62A933C5-C56E-485C-AD49-3B6A2C329131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "2.7.11",
            "matchCriteriaId" : "27B77023-4983-4D33-9824-A120A5ED31BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.8.0",
            "versionEndExcluding" : "3.7.34",
            "matchCriteriaId" : "8BD398C8-BC0B-4ED5-B71A-B9C6D8F63659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.11.22",
            "matchCriteriaId" : "31B59634-B59C-4391-96D3-200A86A6CE3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.3.16",
            "matchCriteriaId" : "F7794B42-8235-4C75-866F-5D0A405F0989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.6.3",
            "matchCriteriaId" : "C8A23A5D-928A-4225-9C93-31E5DFE215A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230207.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230207.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0401",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2023-02-08T20:15:24.323",
      "lastModified" : "2025-11-04T20:16:16.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.0.7",
            "matchCriteriaId" : "26EF8A48-B8E5-4D4D-8054-445D65171EAC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.3",
            "matchCriteriaId" : "62A933C5-C56E-485C-AD49-3B6A2C329131"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230207.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230207.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0751",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2023-02-08T20:15:24.377",
      "lastModified" : "2025-03-25T14:15:20.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secteam@freebsd.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "224B7627-CDDE-429A-852F-8A6066B501B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.3:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B6DCD8A-331E-419F-9253-C4D35C1DF54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.3:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "4578E06C-16C6-435E-9E51-91CB02602355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.3:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "71FA1F6C-7E53-40F8-B9E1-5FD28D5DAADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.3:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC87BCE-17F0-479B-84DC-516C24FBD396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.3:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "620C23ED-400C-438C-8427-94437F12EDAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "24920B4D-96C0-401F-B679-BEB086760EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA821886-B26B-47A6-ABC9-B8F70CE0ACFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.4:rc2-p2:*:*:*:*:*:*",
            "matchCriteriaId" : "220629AD-32CC-4303-86AE-1DD27F0E4C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DEEE6D52-27E4-438D-AE8D-7141320B5973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.1:b1-p1:*:*:*:*:*:*",
            "matchCriteriaId" : "66364EA4-83B1-4597-8C18-D5633B361A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.1:b2-p2:*:*:*:*:*:*",
            "matchCriteriaId" : "EF9292DD-EFB1-4B50-A941-7485D901489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB18F55-4F5C-4166-9A7E-6F6617179A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "66E1C269-841F-489A-9A0A-5D145B417E0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.1:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF1B567-F764-45F5-A793-BEA93720F952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.1:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFE3F33-2C57-4B52-B658-82572607BD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.1:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "C925DF75-2785-44BD-91CA-66D29C296689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.1:rc1-p1:*:*:*:*:*:*",
            "matchCriteriaId" : "B536EE52-ED49-4A85-BC9D-A27828D5A961"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25150",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-08T20:15:24.447",
      "lastModified" : "2024-11-21T07:49:12.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tricked to provide access to any file without proper permission validation. As a result any user with access to Collabora can obtain the content of other users files. It is recommended that the Nextcloud Office App (Collabora Integration) is updated to 7.0.2 (Nextcloud 25), 6.3.2 (Nextcloud 24), 5.0.10 (Nextcloud 23), 4.2.9 (Nextcloud 21-22), or 3.8.7 (Nextcloud 15-20). There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:richdocuments:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.8.7",
            "matchCriteriaId" : "2475BAE2-CD26-4885-8F5D-E90A2B4230FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:richdocuments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.2.9",
            "matchCriteriaId" : "799CB7B5-A751-4D7B-B585-3EF25B301724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:richdocuments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.10",
            "matchCriteriaId" : "6098B7F8-2EC6-4D62-9CD7-96BD1237B197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:richdocuments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.3.2",
            "matchCriteriaId" : "EA0BC53B-B9D9-467A-A58D-D2B41CEF0327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:richdocuments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.2",
            "matchCriteriaId" : "7B7DAD1E-149D-4664-8B3A-492DA170CB69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/richdocuments/pull/2669",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-64xc-r58v-53gj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1788222",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/richdocuments/pull/2669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-64xc-r58v-53gj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1788222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25151",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-08T20:15:24.620",
      "lastModified" : "2024-11-21T07:49:12.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "opentelemetry-go-contrib is a collection of extensions for OpenTelemetry-Go. The v0.38.0 release of `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` uses the `httpconv.ServerRequest` function to annotate metric measurements for the `http.server.request_content_length`, `http.server.response_content_length`, and `http.server.duration` instruments. The `ServerRequest` function sets the `http.target` attribute value to be the whole request URI (including the query string)[^1]. The metric instruments do not \"forget\" previous measurement attributes when `cumulative` temporality is used, this means the cardinality of the measurements allocated is directly correlated with the unique URIs handled. If the query string is constantly random, this will result in a constant increase in memory allocation that can be used in a denial-of-service attack. This issue has been addressed in version 0.39.0. Users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:opentelemetry-go_contrib:0.38.0:*:*:*:*:opentelemetry-go:*:*",
            "matchCriteriaId" : "0EDA75D1-C34B-465B-A88B-5B1BEB2429BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-5r5m-65gx-7vrh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open-telemetry/opentelemetry-go/blob/v1.12.0/semconv/internal/v2/http.go#L159",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-5r5m-65gx-7vrh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open-telemetry/opentelemetry-go/blob/v1.12.0/semconv/internal/v2/http.go#L159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25164",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-08T20:15:24.847",
      "lastModified" : "2026-03-13T20:11:31.400",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tinacms/cli >= 1.0.0 && < 1.0.9 which store sensitive values in the process.env variable are impacted. These values will be added in plaintext to the index.js file. If you're on a version prior to 1.0.0 this vulnerability does not affect you. If you are affected and your Tina-enabled website has sensitive credentials stored as environment variables (eg. Algolia API keys) you should rotate those keys immediately. This issue has been patched in @tinacms/cli@1.0.9. Users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssw:tinacms\\/cli:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.0.9",
            "matchCriteriaId" : "45A7F6FF-F206-4CCA-9F29-97D49864E89D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tinacms/tinacms/pull/3584",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/tinacms/tinacms/security/advisories/GHSA-pc2q-jcxq-rjrr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tinacms/tinacms/pull/3584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/tinacms/tinacms/security/advisories/GHSA-pc2q-jcxq-rjrr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25165",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-08T20:15:24.937",
      "lastModified" : "2024-11-21T07:49:14.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the function performs a DNS lookup. The DNS lookup happens when used with `helm install|upgrade|template` or when the Helm SDK is used to render a chart. Information passed into the chart can be disclosed to the DNS servers used to lookup the IP address. For example, a malicious chart could inject `getHostByName` into a chart in order to disclose values to a malicious DNS server. The issue has been fixed in Helm 3.11.1. Prior to using a chart with Helm verify the `getHostByName` function is not being used in a template to disclose any information you do not want passed to DNS servers."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helm:helm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.11.1",
            "matchCriteriaId" : "52B3342E-F1D8-46B9-91C1-192092207FFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/helm/helm/commit/5abcf74227bfe8e5a3dbf105fe62e7b12deb58d2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/helm/helm/security/advisories/GHSA-pwcw-6f5g-gxf8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/helm/helm/commit/5abcf74227bfe8e5a3dbf105fe62e7b12deb58d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/helm/helm/security/advisories/GHSA-pwcw-6f5g-gxf8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25166",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-08T20:15:25.017",
      "lastModified" : "2024-11-21T07:49:14.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provided strings to formula's parser might lead to polynomial execution time and a denial of service. Users should upgrade to 3.0.1+. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hapi:formula:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "83D42148-F3E3-401C-BFBE-857374E9BF03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hapijs/formula/commit/9fbc20a02d75ae809c37a610a57802cd1b41b3fe",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hapijs/formula/security/advisories/GHSA-c2jc-4fpr-4vhg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hapijs/formula/commit/9fbc20a02d75ae809c37a610a57802cd1b41b3fe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hapijs/formula/security/advisories/GHSA-c2jc-4fpr-4vhg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25167",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-08T20:15:25.100",
      "lastModified" : "2024-11-21T07:49:14.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source discussion platform. In affected versions a malicious user can cause a regular expression denial of service using a carefully crafted git URL. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "906007C2-9CCA-4A7B-BD04-57DCC3675FC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/ec4c30270887366dc28788bc4ab8a22a098573cd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-4w55-w26q-r35w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/ec4c30270887366dc28788bc4ab8a22a098573cd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-4w55-w26q-r35w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25163",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-08T21:15:10.847",
      "lastModified" : "2024-11-21T07:49:13.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v2.6.0-rc1 have an output sanitization bug which leaks repository access credentials in error messages. These error messages are visible to the user, and they are logged. The error message is visible when a user attempts to create or update an Application via the Argo CD API (and therefor the UI or CLI). The user must have `applications, create` or `applications, update` RBAC access to reach the code which may produce the error. The user is not guaranteed to be able to trigger the error message. They may attempt to spam the API with requests to trigger a rate limit error from the upstream repository. If the user has `repositories, update` access, they may edit an existing repository to introduce a URL typo or otherwise force an error message. But if they have that level of access, they are probably intended to have access to the credentials anyway. A patch for this vulnerability has been released in version 2.6.1. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B006144B-912D-4010-8FD7-5747D1E7978F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9E8774-D703-4CE5-8B90-EE3CD7A45005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC71D67C-2326-401A-AB60-961A3C500FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F78053BA-9B03-4831-881A-8C71C8B583D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C06F6A-AB8A-4633-912E-B07046ECF5C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7D280E-A667-423A-ACE6-293D7AE8CC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "B4488059-5CCC-445F-B65C-A16055CD7DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:2.6.0:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A7FB64-3210-4D5B-B1C5-0CCBE334B6F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://argo-cd.readthedocs.io/en/stable/operator-manual/rbac/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/issues/12309",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/pull/12320",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/security/advisories/GHSA-mv6w-j4xc-qpfw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://argo-cd.readthedocs.io/en/stable/operator-manual/rbac/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/issues/12309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/pull/12320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/security/advisories/GHSA-mv6w-j4xc-qpfw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0249",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-08T23:15:11.157",
      "lastModified" : "2024-11-21T07:36:49.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:diascreen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1.23",
            "matchCriteriaId" : "D39B3D16-2E1F-4F58-B55D-51AB1753369D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-033-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-033-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0250",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-08T23:15:11.260",
      "lastModified" : "2024-11-21T07:36:50.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:diascreen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1.23",
            "matchCriteriaId" : "D39B3D16-2E1F-4F58-B55D-51AB1753369D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-033-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-033-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0251",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-08T23:15:11.353",
      "lastModified" : "2024-11-21T07:36:50.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflow through improper restrictions of operations within memory, which could allow an attacker to remotely execute arbitrary code.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:diascreen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1.23",
            "matchCriteriaId" : "D39B3D16-2E1F-4F58-B55D-51AB1753369D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-033-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-033-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25168",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-09T00:16:36.907",
      "lastModified" : "2024-11-21T07:49:14.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively on the host system.  This vulnerability can be combined with `GHSA-p8r3-83r8-jwj5` to overwrite files on the host system. In order to use this exploit, an attacker must have an existing \"server\" allocated and controlled by Wings. This vulnerability has been resolved in version `v1.11.4` of Wings, and has been back-ported to the 1.7 release series in `v1.7.4`. Anyone running `v1.11.x` should upgrade to `v1.11.4` and anyone running `v1.7.x` should upgrade to `v1.7.4`. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pterodactyl:wings:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.7.4",
            "matchCriteriaId" : "0EE2ACC4-DC54-4A78-AC93-F6CAAA120AB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pterodactyl:wings:1.11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6F3CF4-2AFF-4966-8DD4-D7FE674530C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pterodactyl:wings:1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C72D6216-66D3-49D9-93BA-CCB5B4031569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pterodactyl:wings:1.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FBA78A-C90F-4800-9AD7-99F3C9CD3125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pterodactyl:wings:1.11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2846920-6C69-42F5-A766-61ED4CC923C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pterodactyl/wings/commit/429ac62dba22997a278bc709df5ac00a5a25d83d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pterodactyl/wings/security/advisories/GHSA-66p8-j459-rq63",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pterodactyl/wings/security/advisories/GHSA-p8r3-83r8-jwj5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pterodactyl/wings/commit/429ac62dba22997a278bc709df5ac00a5a25d83d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pterodactyl/wings/security/advisories/GHSA-66p8-j459-rq63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pterodactyl/wings/security/advisories/GHSA-p8r3-83r8-jwj5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0758",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-09T11:15:10.217",
      "lastModified" : "2024-11-21T07:37:45.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in glorylion JFinalOA 1.0.2 and classified as critical. This issue affects some unknown processing of the file src/main/java/com/pointlion/mvc/common/model/SysOrg.java. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-220469 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jfinaloa_project:jfinaloa:1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E604DC3-94EB-421A-8396-7BF9027A8372"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/skisw/Vul/blob/main/vuloa",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220469",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220469",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/skisw/Vul/blob/main/vuloa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0759",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-09T14:15:24.510",
      "lastModified" : "2024-11-21T07:37:45.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-268"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agentejo:cockpit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.8",
            "matchCriteriaId" : "9DE9300E-C610-41F7-BF2C-C708C740F196"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cockpit-hq/cockpit/commit/78d6ed3bf093ee11356ba66320c628c727068714",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/49e2cccc-bb56-4633-ba6a-b3803e251347",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cockpit-hq/cockpit/commit/78d6ed3bf093ee11356ba66320c628c727068714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/49e2cccc-bb56-4633-ba6a-b3803e251347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0760",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-09T14:15:24.597",
      "lastModified" : "2024-11-21T07:37:46.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.0",
            "matchCriteriaId" : "B4D3D58A-C3C9-4441-A84A-FB91FD19985C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/ea7395f39f601a7750d48d606e9d10ea0b7beefe",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d06223df-a473-4c82-96d0-23726b844b21",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5452",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/gpac/gpac/commit/ea7395f39f601a7750d48d606e9d10ea0b7beefe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d06223df-a473-4c82-96d0-23726b844b21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0574",
      "sourceIdentifier" : "security@yugabyte.com",
      "published" : "2023-02-09T15:15:11.213",
      "lastModified" : "2024-11-21T07:37:25.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communication Channel Manipulation, Authentication Abuse.This issue affects Yugabyte Managed: from 2.0.0.0 through 2.13.0.0\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@yugabyte.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@yugabyte.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        }, {
          "lang" : "en",
          "value" : "CWE-915"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yugabyte:yugabytedb_managed:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndIncluding" : "2.13",
            "matchCriteriaId" : "6DEE1FF6-1847-4B84-ABB4-51DC13A43FAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.yugabyte.com/",
        "source" : "security@yugabyte.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.yugabyte.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-09T15:15:11.300",
      "lastModified" : "2024-11-21T07:45:42.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.6",
            "matchCriteriaId" : "3B03D48F-F3D2-43C7-8453-097B3DC222FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.expressionengine.com/latest/installation/changelog.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://gist.github.com/ahmedsherif/7b8f18a54a80ae0ac5ff6307c35b7d43",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackerone.com/reports/1820492",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://docs.expressionengine.com/latest/installation/changelog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://gist.github.com/ahmedsherif/7b8f18a54a80ae0ac5ff6307c35b7d43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://hackerone.com/reports/1820492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0624",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-02-09T16:15:11.693",
      "lastModified" : "2025-03-24T21:15:15.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is possible because the application returns malicious user input in the response with the content-type set to text/html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orangescrum:orangescrum:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563467F2-799D-404D-89D2-A6B5B6092614"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/oberhofer/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Orangescrum/orangescrum/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/oberhofer/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Orangescrum/orangescrum/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0575",
      "sourceIdentifier" : "security@yugabyte.com",
      "published" : "2023-02-09T17:15:15.730",
      "lastModified" : "2024-11-21T07:37:25.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS (DevopsBase.Java:execCommand, TableManager.Java:runCommand modules) allows API Manipulation, Privilege Abuse. This vulnerability is associated with program files backup.Py.\n\nThis issue affects Yugabyte DB: Lesser then 2.2.0.0\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@yugabyte.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@yugabyte.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-642"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yugabyte:yugabytedb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.0.0",
            "matchCriteriaId" : "496831DD-51F4-4846-AC1D-BAAF84B79328"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.yugabyte.com/",
        "source" : "security@yugabyte.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.yugabyte.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0745",
      "sourceIdentifier" : "security@yugabyte.com",
      "published" : "2023-02-09T17:15:16.553",
      "lastModified" : "2024-11-21T07:37:44.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\t\n\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tThe High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary\nfiles through the backup upload endpoint by using path traversal characters.\n\n\n\n\t\t\t\t\n\n\n\t\t\t\n\n\n\t\t\n\n\n\t\n This vulnerability is associated with program files PlatformReplicationManager.Java.\n\nThis issue affects YugabyteDB Anywhere: from 2.0.0.0 through 2.13.0.0\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@yugabyte.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@yugabyte.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yugabyte:yugabytedb_managed:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndIncluding" : "2.13",
            "matchCriteriaId" : "6DEE1FF6-1847-4B84-ABB4-51DC13A43FAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.yugabyte.com/",
        "source" : "security@yugabyte.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.yugabyte.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22603",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-09T17:15:16.880",
      "lastModified" : "2023-11-07T04:07:06.263",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22604",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-09T17:15:17.057",
      "lastModified" : "2023-11-07T04:07:06.687",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22605",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-09T17:15:17.227",
      "lastModified" : "2023-11-07T04:07:07.050",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22606",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-09T17:15:17.387",
      "lastModified" : "2023-11-07T04:07:07.440",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22607",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-09T17:15:17.557",
      "lastModified" : "2023-11-07T04:07:07.807",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22609",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-09T17:15:17.717",
      "lastModified" : "2023-11-07T04:07:08.633",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24815",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-09T18:15:10.463",
      "lastModified" : "2024-11-21T07:48:27.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vert.x-Web is a set of building blocks for building web applications in the java programming language. When running vertx web applications that serve files using `StaticHandler` on Windows Operating Systems and Windows File Systems, if the mount point is a wildcard (`*`) then an attacker can exfiltrate any class path resource. When computing the relative path to locate the resource, in case of wildcards, the code: `return \"/\" + rest;` from `Utils.java` returns the user input (without validation) as the segment to lookup. Even though checks are performed to avoid escaping the sandbox, given that the input was not sanitized `\\` are not properly handled and an attacker can build a path that is valid within the classpath. This issue only affects users deploying in windows environments and upgrading is the advised remediation path. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:vert.x-web:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.3.8",
            "matchCriteriaId" : "5E0ED137-0D8D-46F6-964E-D697DBFC82A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vert-x3/vertx-web/blob/62c0d66fa1c179ae6a4d57344631679a2b97e60f/vertx-web/src/main/java/io/vertx/ext/web/impl/Utils.java#L83",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/vert-x3/vertx-web/commit/9e3a783b1d1a731055e9049078b1b1494ece9c15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vert-x3/vertx-web/security/advisories/GHSA-53jx-vvf9-4x38",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vert-x3/vertx-web/blob/62c0d66fa1c179ae6a4d57344631679a2b97e60f/vertx-web/src/main/java/io/vertx/ext/web/impl/Utils.java#L83",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/vert-x3/vertx-web/commit/9e3a783b1d1a731055e9049078b1b1494ece9c15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vert-x3/vertx-web/security/advisories/GHSA-53jx-vvf9-4x38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21419",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:14.613",
      "lastModified" : "2024-11-21T07:42:49.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper implementation logic in Secure Folder prior to SMR Jan-2023 Release 1 allows the Secure Folder container remain unlocked under certain condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21420",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:14.810",
      "lastModified" : "2024-11-21T07:42:49.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC8A3E4-6D56-452C-A260-4A6327F70227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E21936D-9A60-4987-A6BF-C8F1885FB478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC9B229-8CFD-4BB3-9077-7FD19BEB4C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D30D13-D610-4125-A228-337E82E12B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2559EDCB-09F8-4AC0-AE53-9B0E934D2D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E950F48-1626-4CFF-8A6D-422E8BCA0A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12E571FB-A743-4CB1-8A2E-7BF2BE0C06F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "639E768A-2A5C-4A5C-B780-58B4CFD3BC38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCC1A74-1639-49C4-9AD2-DAE5EB85A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "42971C9A-B349-44EA-AF96-196C7FEB8BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "140E647A-8A96-486C-A467-EC36C4AA74DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4854D8A9-07C8-4604-A85D-0E6256CEE409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "91EA248A-4D4D-4A50-AC33-7098E17B7892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "878AAF2D-E54A-4145-A618-81341ED4B0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD5967F-53DE-45C2-B82D-D572C573805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A43712-94EF-4670-A2FD-4363CBE850DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84641402-4778-418B-90F3-2AFAF90B4798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3439439D-EEE8-47E0-A62F-5BFA760077CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B601A82-1207-4FF5-84B7-BF6A2BE9C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCC210B-4083-494C-A233-FE2CA672004B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C72C3A92-43ED-40F4-B340-FE57FED9E762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD3761-F08C-4839-B4FB-6CE5C5976FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9317BBC2-2AF4-4782-B4DE-0518259A0A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA38AA3-A747-424E-B07E-F7931FA353F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBA9C21-8EDA-48B2-B63C-D50B2F83C31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EA01517B-0142-46EE-9269-F2B081AA6EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A55CA552-9AE7-4595-AA0D-BF3DD135BA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B48628C-6780-46B4-B717-8589658B0DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC8A026-B21C-47E0-B889-BD62F379737E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E00F8EB5-C3C2-49E8-80D7-FAE136469F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03EB386C-BB31-4EB8-ABAD-C62186025DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "307FB417-1042-4932-A9CB-A4EE1D159916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A30F81-34D9-43AA-8A03-54EA7BCFEBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B97C87CA-4421-4FF1-8163-66450683740B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E4958-8149-42C5-8B71-05C8DF31FF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F7EA04-5888-4622-BEC9-6D3989316725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFC56FF-D2BA-4A3F-9D36-4608FE90FD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "47335942-37FB-4A1D-837A-5D0B2883ED10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1DCD3C-2418-4194-97FA-901550B2ED3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC76C153-92CE-4956-B36C-525C06DD8E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E307A-6C80-4182-BDA9-F88DDFAF934C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21421",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:14.897",
      "lastModified" : "2024-11-21T07:42:49.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-2023 Release 1 allows attacker to access device SIM PIN."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-280"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC8A3E4-6D56-452C-A260-4A6327F70227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E21936D-9A60-4987-A6BF-C8F1885FB478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC9B229-8CFD-4BB3-9077-7FD19BEB4C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D30D13-D610-4125-A228-337E82E12B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2559EDCB-09F8-4AC0-AE53-9B0E934D2D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E950F48-1626-4CFF-8A6D-422E8BCA0A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12E571FB-A743-4CB1-8A2E-7BF2BE0C06F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "639E768A-2A5C-4A5C-B780-58B4CFD3BC38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCC1A74-1639-49C4-9AD2-DAE5EB85A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "42971C9A-B349-44EA-AF96-196C7FEB8BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "140E647A-8A96-486C-A467-EC36C4AA74DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4854D8A9-07C8-4604-A85D-0E6256CEE409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "91EA248A-4D4D-4A50-AC33-7098E17B7892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "878AAF2D-E54A-4145-A618-81341ED4B0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD5967F-53DE-45C2-B82D-D572C573805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A43712-94EF-4670-A2FD-4363CBE850DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84641402-4778-418B-90F3-2AFAF90B4798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3439439D-EEE8-47E0-A62F-5BFA760077CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B601A82-1207-4FF5-84B7-BF6A2BE9C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCC210B-4083-494C-A233-FE2CA672004B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C72C3A92-43ED-40F4-B340-FE57FED9E762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD3761-F08C-4839-B4FB-6CE5C5976FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9317BBC2-2AF4-4782-B4DE-0518259A0A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA38AA3-A747-424E-B07E-F7931FA353F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBA9C21-8EDA-48B2-B63C-D50B2F83C31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EA01517B-0142-46EE-9269-F2B081AA6EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A55CA552-9AE7-4595-AA0D-BF3DD135BA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B48628C-6780-46B4-B717-8589658B0DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC8A026-B21C-47E0-B889-BD62F379737E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E00F8EB5-C3C2-49E8-80D7-FAE136469F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03EB386C-BB31-4EB8-ABAD-C62186025DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "307FB417-1042-4932-A9CB-A4EE1D159916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A30F81-34D9-43AA-8A03-54EA7BCFEBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B97C87CA-4421-4FF1-8163-66450683740B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E4958-8149-42C5-8B71-05C8DF31FF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F7EA04-5888-4622-BEC9-6D3989316725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFC56FF-D2BA-4A3F-9D36-4608FE90FD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "47335942-37FB-4A1D-837A-5D0B2883ED10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1DCD3C-2418-4194-97FA-901550B2ED3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC76C153-92CE-4956-B36C-525C06DD8E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E307A-6C80-4182-BDA9-F88DDFAF934C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21422",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:14.977",
      "lastModified" : "2024-11-21T07:42:50.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attackers to set custom DNS server without permission via binding WifiService."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21423",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:15.067",
      "lastModified" : "2024-11-21T07:42:50.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authorization vulnerability in ChnFileShareKit prior to SMR Jan-2023 Release 1 allows attacker to control BLE advertising without permission using unprotected action."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21424",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:15.137",
      "lastModified" : "2024-11-21T07:42:50.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Handling of Insufficient Permissions or Privileges vulnerability in SemChameleonHelper prior to SMR Jan-2023 Release 1 allows attacker to modify network related values, network code, carrier id and operator brand."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21425",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:15.213",
      "lastModified" : "2024-11-21T07:42:50.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in telecom application prior to SMR JAN-2023 Release 1 allows local attackers to get sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC8A3E4-6D56-452C-A260-4A6327F70227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E21936D-9A60-4987-A6BF-C8F1885FB478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC9B229-8CFD-4BB3-9077-7FD19BEB4C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D30D13-D610-4125-A228-337E82E12B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2559EDCB-09F8-4AC0-AE53-9B0E934D2D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E950F48-1626-4CFF-8A6D-422E8BCA0A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12E571FB-A743-4CB1-8A2E-7BF2BE0C06F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "639E768A-2A5C-4A5C-B780-58B4CFD3BC38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCC1A74-1639-49C4-9AD2-DAE5EB85A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "42971C9A-B349-44EA-AF96-196C7FEB8BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "140E647A-8A96-486C-A467-EC36C4AA74DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4854D8A9-07C8-4604-A85D-0E6256CEE409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "91EA248A-4D4D-4A50-AC33-7098E17B7892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "878AAF2D-E54A-4145-A618-81341ED4B0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD5967F-53DE-45C2-B82D-D572C573805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A43712-94EF-4670-A2FD-4363CBE850DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84641402-4778-418B-90F3-2AFAF90B4798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3439439D-EEE8-47E0-A62F-5BFA760077CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B601A82-1207-4FF5-84B7-BF6A2BE9C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCC210B-4083-494C-A233-FE2CA672004B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C72C3A92-43ED-40F4-B340-FE57FED9E762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD3761-F08C-4839-B4FB-6CE5C5976FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9317BBC2-2AF4-4782-B4DE-0518259A0A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA38AA3-A747-424E-B07E-F7931FA353F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBA9C21-8EDA-48B2-B63C-D50B2F83C31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EA01517B-0142-46EE-9269-F2B081AA6EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A55CA552-9AE7-4595-AA0D-BF3DD135BA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B48628C-6780-46B4-B717-8589658B0DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC8A026-B21C-47E0-B889-BD62F379737E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E00F8EB5-C3C2-49E8-80D7-FAE136469F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03EB386C-BB31-4EB8-ABAD-C62186025DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "307FB417-1042-4932-A9CB-A4EE1D159916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A30F81-34D9-43AA-8A03-54EA7BCFEBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B97C87CA-4421-4FF1-8163-66450683740B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E4958-8149-42C5-8B71-05C8DF31FF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F7EA04-5888-4622-BEC9-6D3989316725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFC56FF-D2BA-4A3F-9D36-4608FE90FD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "47335942-37FB-4A1D-837A-5D0B2883ED10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1DCD3C-2418-4194-97FA-901550B2ED3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC76C153-92CE-4956-B36C-525C06DD8E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E307A-6C80-4182-BDA9-F88DDFAF934C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21426",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:15.297",
      "lastModified" : "2024-11-21T07:42:50.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows attackers to access cardemulation PIN."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC8A3E4-6D56-452C-A260-4A6327F70227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E21936D-9A60-4987-A6BF-C8F1885FB478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC9B229-8CFD-4BB3-9077-7FD19BEB4C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D30D13-D610-4125-A228-337E82E12B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2559EDCB-09F8-4AC0-AE53-9B0E934D2D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E950F48-1626-4CFF-8A6D-422E8BCA0A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12E571FB-A743-4CB1-8A2E-7BF2BE0C06F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "639E768A-2A5C-4A5C-B780-58B4CFD3BC38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCC1A74-1639-49C4-9AD2-DAE5EB85A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "42971C9A-B349-44EA-AF96-196C7FEB8BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "140E647A-8A96-486C-A467-EC36C4AA74DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4854D8A9-07C8-4604-A85D-0E6256CEE409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "91EA248A-4D4D-4A50-AC33-7098E17B7892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "878AAF2D-E54A-4145-A618-81341ED4B0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD5967F-53DE-45C2-B82D-D572C573805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A43712-94EF-4670-A2FD-4363CBE850DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84641402-4778-418B-90F3-2AFAF90B4798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3439439D-EEE8-47E0-A62F-5BFA760077CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B601A82-1207-4FF5-84B7-BF6A2BE9C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCC210B-4083-494C-A233-FE2CA672004B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C72C3A92-43ED-40F4-B340-FE57FED9E762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD3761-F08C-4839-B4FB-6CE5C5976FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9317BBC2-2AF4-4782-B4DE-0518259A0A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA38AA3-A747-424E-B07E-F7931FA353F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBA9C21-8EDA-48B2-B63C-D50B2F83C31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EA01517B-0142-46EE-9269-F2B081AA6EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A55CA552-9AE7-4595-AA0D-BF3DD135BA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B48628C-6780-46B4-B717-8589658B0DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC8A026-B21C-47E0-B889-BD62F379737E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E00F8EB5-C3C2-49E8-80D7-FAE136469F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03EB386C-BB31-4EB8-ABAD-C62186025DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "307FB417-1042-4932-A9CB-A4EE1D159916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A30F81-34D9-43AA-8A03-54EA7BCFEBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B97C87CA-4421-4FF1-8163-66450683740B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E4958-8149-42C5-8B71-05C8DF31FF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F7EA04-5888-4622-BEC9-6D3989316725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFC56FF-D2BA-4A3F-9D36-4608FE90FD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "47335942-37FB-4A1D-837A-5D0B2883ED10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1DCD3C-2418-4194-97FA-901550B2ED3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC76C153-92CE-4956-B36C-525C06DD8E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E307A-6C80-4182-BDA9-F88DDFAF934C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21427",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:15.373",
      "lastModified" : "2024-11-21T07:42:50.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21428",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:15.450",
      "lastModified" : "2024-11-21T07:42:50.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation vulnerability in TelephonyUI prior to SMR Jan-2023 Release 1 allows attackers to configure Preferred Call. The patch removes unused code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21429",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:15.523",
      "lastModified" : "2024-11-21T07:42:50.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper usage of implict intent in ePDG prior to SMR JAN-2023 Release 1 allows attacker to access SSID."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC8A3E4-6D56-452C-A260-4A6327F70227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E21936D-9A60-4987-A6BF-C8F1885FB478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC9B229-8CFD-4BB3-9077-7FD19BEB4C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D30D13-D610-4125-A228-337E82E12B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2559EDCB-09F8-4AC0-AE53-9B0E934D2D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E950F48-1626-4CFF-8A6D-422E8BCA0A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12E571FB-A743-4CB1-8A2E-7BF2BE0C06F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "639E768A-2A5C-4A5C-B780-58B4CFD3BC38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCC1A74-1639-49C4-9AD2-DAE5EB85A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "42971C9A-B349-44EA-AF96-196C7FEB8BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "140E647A-8A96-486C-A467-EC36C4AA74DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4854D8A9-07C8-4604-A85D-0E6256CEE409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "91EA248A-4D4D-4A50-AC33-7098E17B7892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "878AAF2D-E54A-4145-A618-81341ED4B0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD5967F-53DE-45C2-B82D-D572C573805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A43712-94EF-4670-A2FD-4363CBE850DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84641402-4778-418B-90F3-2AFAF90B4798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3439439D-EEE8-47E0-A62F-5BFA760077CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B601A82-1207-4FF5-84B7-BF6A2BE9C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCC210B-4083-494C-A233-FE2CA672004B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C72C3A92-43ED-40F4-B340-FE57FED9E762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD3761-F08C-4839-B4FB-6CE5C5976FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9317BBC2-2AF4-4782-B4DE-0518259A0A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA38AA3-A747-424E-B07E-F7931FA353F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBA9C21-8EDA-48B2-B63C-D50B2F83C31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EA01517B-0142-46EE-9269-F2B081AA6EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A55CA552-9AE7-4595-AA0D-BF3DD135BA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B48628C-6780-46B4-B717-8589658B0DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC8A026-B21C-47E0-B889-BD62F379737E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E00F8EB5-C3C2-49E8-80D7-FAE136469F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03EB386C-BB31-4EB8-ABAD-C62186025DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "307FB417-1042-4932-A9CB-A4EE1D159916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A30F81-34D9-43AA-8A03-54EA7BCFEBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B97C87CA-4421-4FF1-8163-66450683740B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E4958-8149-42C5-8B71-05C8DF31FF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F7EA04-5888-4622-BEC9-6D3989316725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFC56FF-D2BA-4A3F-9D36-4608FE90FD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "47335942-37FB-4A1D-837A-5D0B2883ED10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1DCD3C-2418-4194-97FA-901550B2ED3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC76C153-92CE-4956-B36C-525C06DD8E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E307A-6C80-4182-BDA9-F88DDFAF934C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21430",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:15.597",
      "lastModified" : "2024-11-21T07:42:51.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows attacker to cause memory access fault."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC8A3E4-6D56-452C-A260-4A6327F70227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E21936D-9A60-4987-A6BF-C8F1885FB478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC9B229-8CFD-4BB3-9077-7FD19BEB4C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D30D13-D610-4125-A228-337E82E12B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2559EDCB-09F8-4AC0-AE53-9B0E934D2D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E950F48-1626-4CFF-8A6D-422E8BCA0A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12E571FB-A743-4CB1-8A2E-7BF2BE0C06F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "639E768A-2A5C-4A5C-B780-58B4CFD3BC38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCC1A74-1639-49C4-9AD2-DAE5EB85A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "42971C9A-B349-44EA-AF96-196C7FEB8BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "140E647A-8A96-486C-A467-EC36C4AA74DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4854D8A9-07C8-4604-A85D-0E6256CEE409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "91EA248A-4D4D-4A50-AC33-7098E17B7892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "878AAF2D-E54A-4145-A618-81341ED4B0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD5967F-53DE-45C2-B82D-D572C573805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A43712-94EF-4670-A2FD-4363CBE850DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84641402-4778-418B-90F3-2AFAF90B4798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3439439D-EEE8-47E0-A62F-5BFA760077CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B601A82-1207-4FF5-84B7-BF6A2BE9C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCC210B-4083-494C-A233-FE2CA672004B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C72C3A92-43ED-40F4-B340-FE57FED9E762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD3761-F08C-4839-B4FB-6CE5C5976FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9317BBC2-2AF4-4782-B4DE-0518259A0A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA38AA3-A747-424E-B07E-F7931FA353F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBA9C21-8EDA-48B2-B63C-D50B2F83C31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EA01517B-0142-46EE-9269-F2B081AA6EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A55CA552-9AE7-4595-AA0D-BF3DD135BA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B48628C-6780-46B4-B717-8589658B0DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC8A026-B21C-47E0-B889-BD62F379737E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E00F8EB5-C3C2-49E8-80D7-FAE136469F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03EB386C-BB31-4EB8-ABAD-C62186025DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "307FB417-1042-4932-A9CB-A4EE1D159916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A30F81-34D9-43AA-8A03-54EA7BCFEBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B97C87CA-4421-4FF1-8163-66450683740B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E4958-8149-42C5-8B71-05C8DF31FF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F7EA04-5888-4622-BEC9-6D3989316725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFC56FF-D2BA-4A3F-9D36-4608FE90FD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "47335942-37FB-4A1D-837A-5D0B2883ED10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1DCD3C-2418-4194-97FA-901550B2ED3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC76C153-92CE-4956-B36C-525C06DD8E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E307A-6C80-4182-BDA9-F88DDFAF934C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21431",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:15.673",
      "lastModified" : "2024-11-21T07:42:51.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in Bixby Vision prior to version 3.7.70.17 allows attacker to access data of Bixby Vision."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:bixby_vision:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.70.17",
            "matchCriteriaId" : "94536954-ABD2-40CD-9BC6-B3CF37C31586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21432",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:15.740",
      "lastModified" : "2024-11-21T07:42:51.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerabilities in Smart Things prior to 1.7.93 allows to attacker to invite others without authorization of the owner."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:smart_things:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.93",
            "matchCriteriaId" : "DBA15427-E3E2-4471-BDC4-6E93C02012B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21433",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:15.817",
      "lastModified" : "2024-11-21T07:42:51.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to install applications from Galaxy Store."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:galaxy_store:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.49.8",
            "matchCriteriaId" : "89518C6A-E895-484C-9BF3-82EB9FE189A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21434",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:15.890",
      "lastModified" : "2024-11-21T07:42:51.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to execute JavaScript by launching a web page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:galaxy_store:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.49.8",
            "matchCriteriaId" : "89518C6A-E895-484C-9BF3-82EB9FE189A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=01",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21435",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:15.963",
      "lastModified" : "2024-11-21T07:42:51.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to access the memory address information via log."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21436",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:16.040",
      "lastModified" : "2024-11-21T07:42:51.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper usage of implicit intent in Contacts prior to SMR Feb-2023 Release 1 allows attacker to get account ID."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC8A3E4-6D56-452C-A260-4A6327F70227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E21936D-9A60-4987-A6BF-C8F1885FB478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC9B229-8CFD-4BB3-9077-7FD19BEB4C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D30D13-D610-4125-A228-337E82E12B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2559EDCB-09F8-4AC0-AE53-9B0E934D2D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E950F48-1626-4CFF-8A6D-422E8BCA0A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12E571FB-A743-4CB1-8A2E-7BF2BE0C06F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "639E768A-2A5C-4A5C-B780-58B4CFD3BC38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCC1A74-1639-49C4-9AD2-DAE5EB85A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "42971C9A-B349-44EA-AF96-196C7FEB8BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "140E647A-8A96-486C-A467-EC36C4AA74DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4854D8A9-07C8-4604-A85D-0E6256CEE409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "91EA248A-4D4D-4A50-AC33-7098E17B7892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "878AAF2D-E54A-4145-A618-81341ED4B0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD5967F-53DE-45C2-B82D-D572C573805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A43712-94EF-4670-A2FD-4363CBE850DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84641402-4778-418B-90F3-2AFAF90B4798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3439439D-EEE8-47E0-A62F-5BFA760077CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B601A82-1207-4FF5-84B7-BF6A2BE9C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCC210B-4083-494C-A233-FE2CA672004B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C72C3A92-43ED-40F4-B340-FE57FED9E762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD3761-F08C-4839-B4FB-6CE5C5976FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9317BBC2-2AF4-4782-B4DE-0518259A0A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA38AA3-A747-424E-B07E-F7931FA353F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBA9C21-8EDA-48B2-B63C-D50B2F83C31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EA01517B-0142-46EE-9269-F2B081AA6EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A55CA552-9AE7-4595-AA0D-BF3DD135BA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B48628C-6780-46B4-B717-8589658B0DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC8A026-B21C-47E0-B889-BD62F379737E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E00F8EB5-C3C2-49E8-80D7-FAE136469F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03EB386C-BB31-4EB8-ABAD-C62186025DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "307FB417-1042-4932-A9CB-A4EE1D159916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A30F81-34D9-43AA-8A03-54EA7BCFEBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B97C87CA-4421-4FF1-8163-66450683740B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E4958-8149-42C5-8B71-05C8DF31FF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F7EA04-5888-4622-BEC9-6D3989316725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFC56FF-D2BA-4A3F-9D36-4608FE90FD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "47335942-37FB-4A1D-837A-5D0B2883ED10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1DCD3C-2418-4194-97FA-901550B2ED3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC76C153-92CE-4956-B36C-525C06DD8E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E307A-6C80-4182-BDA9-F88DDFAF934C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21437",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:16.137",
      "lastModified" : "2024-11-21T07:42:51.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to access sensitive information via implicit broadcast."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC8A3E4-6D56-452C-A260-4A6327F70227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E21936D-9A60-4987-A6BF-C8F1885FB478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC9B229-8CFD-4BB3-9077-7FD19BEB4C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D30D13-D610-4125-A228-337E82E12B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2559EDCB-09F8-4AC0-AE53-9B0E934D2D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E950F48-1626-4CFF-8A6D-422E8BCA0A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12E571FB-A743-4CB1-8A2E-7BF2BE0C06F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "639E768A-2A5C-4A5C-B780-58B4CFD3BC38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCC1A74-1639-49C4-9AD2-DAE5EB85A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "42971C9A-B349-44EA-AF96-196C7FEB8BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "140E647A-8A96-486C-A467-EC36C4AA74DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4854D8A9-07C8-4604-A85D-0E6256CEE409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "91EA248A-4D4D-4A50-AC33-7098E17B7892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "878AAF2D-E54A-4145-A618-81341ED4B0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD5967F-53DE-45C2-B82D-D572C573805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A43712-94EF-4670-A2FD-4363CBE850DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84641402-4778-418B-90F3-2AFAF90B4798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3439439D-EEE8-47E0-A62F-5BFA760077CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B601A82-1207-4FF5-84B7-BF6A2BE9C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCC210B-4083-494C-A233-FE2CA672004B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C72C3A92-43ED-40F4-B340-FE57FED9E762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD3761-F08C-4839-B4FB-6CE5C5976FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9317BBC2-2AF4-4782-B4DE-0518259A0A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA38AA3-A747-424E-B07E-F7931FA353F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBA9C21-8EDA-48B2-B63C-D50B2F83C31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EA01517B-0142-46EE-9269-F2B081AA6EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A55CA552-9AE7-4595-AA0D-BF3DD135BA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B48628C-6780-46B4-B717-8589658B0DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC8A026-B21C-47E0-B889-BD62F379737E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E00F8EB5-C3C2-49E8-80D7-FAE136469F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03EB386C-BB31-4EB8-ABAD-C62186025DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "307FB417-1042-4932-A9CB-A4EE1D159916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A30F81-34D9-43AA-8A03-54EA7BCFEBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B97C87CA-4421-4FF1-8163-66450683740B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E4958-8149-42C5-8B71-05C8DF31FF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F7EA04-5888-4622-BEC9-6D3989316725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFC56FF-D2BA-4A3F-9D36-4608FE90FD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "47335942-37FB-4A1D-837A-5D0B2883ED10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1DCD3C-2418-4194-97FA-901550B2ED3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC76C153-92CE-4956-B36C-525C06DD8E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E307A-6C80-4182-BDA9-F88DDFAF934C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21438",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:16.227",
      "lastModified" : "2024-11-21T07:42:52.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper logic in HomeScreen prior to SMR Feb-2023 Release 1 allows physical attacker to access App preview protected by Secure Folder."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21439",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:16.297",
      "lastModified" : "2024-11-21T07:42:52.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to launch certain activities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21440",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:16.373",
      "lastModified" : "2024-11-21T07:42:52.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take a screen capture."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21441",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:16.447",
      "lastModified" : "2024-11-21T07:42:52.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R(11) and 3.5.2.23 in Android S(12) allows local attacker to access protected files via unused code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC8A3E4-6D56-452C-A260-4A6327F70227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E21936D-9A60-4987-A6BF-C8F1885FB478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6DC9B229-8CFD-4BB3-9077-7FD19BEB4C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D30D13-D610-4125-A228-337E82E12B7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2559EDCB-09F8-4AC0-AE53-9B0E934D2D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6E950F48-1626-4CFF-8A6D-422E8BCA0A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "12E571FB-A743-4CB1-8A2E-7BF2BE0C06F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "639E768A-2A5C-4A5C-B780-58B4CFD3BC38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCC1A74-1639-49C4-9AD2-DAE5EB85A510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "42971C9A-B349-44EA-AF96-196C7FEB8BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "140E647A-8A96-486C-A467-EC36C4AA74DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4854D8A9-07C8-4604-A85D-0E6256CEE409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "91EA248A-4D4D-4A50-AC33-7098E17B7892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "878AAF2D-E54A-4145-A618-81341ED4B0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD5967F-53DE-45C2-B82D-D572C573805F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A43712-94EF-4670-A2FD-4363CBE850DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "84641402-4778-418B-90F3-2AFAF90B4798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3439439D-EEE8-47E0-A62F-5BFA760077CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B601A82-1207-4FF5-84B7-BF6A2BE9C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCC210B-4083-494C-A233-FE2CA672004B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C72C3A92-43ED-40F4-B340-FE57FED9E762"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "95DD3761-F08C-4839-B4FB-6CE5C5976FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9317BBC2-2AF4-4782-B4DE-0518259A0A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA38AA3-A747-424E-B07E-F7931FA353F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBA9C21-8EDA-48B2-B63C-D50B2F83C31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EA01517B-0142-46EE-9269-F2B081AA6EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A55CA552-9AE7-4595-AA0D-BF3DD135BA52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B48628C-6780-46B4-B717-8589658B0DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC8A026-B21C-47E0-B889-BD62F379737E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E00F8EB5-C3C2-49E8-80D7-FAE136469F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "03EB386C-BB31-4EB8-ABAD-C62186025DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "307FB417-1042-4932-A9CB-A4EE1D159916"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A30F81-34D9-43AA-8A03-54EA7BCFEBD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B97C87CA-4421-4FF1-8163-66450683740B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D28E4958-8149-42C5-8B71-05C8DF31FF16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F7EA04-5888-4622-BEC9-6D3989316725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFC56FF-D2BA-4A3F-9D36-4608FE90FD44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "47335942-37FB-4A1D-837A-5D0B2883ED10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B1DCD3C-2418-4194-97FA-901550B2ED3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC76C153-92CE-4956-B36C-525C06DD8E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E307A-6C80-4182-BDA9-F88DDFAF934C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21442",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:16.523",
      "lastModified" : "2024-11-21T07:42:52.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Runestone application prior to version 2.9.09.003 in Android R(11) and 3.2.01.007 in Android S(12) allows local attackers to get device location information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21443",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:16.593",
      "lastModified" : "2024-11-21T07:42:52.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper cryptographic implementation in Samsung Flow for Android prior to version 4.9.04 allows adjacent attackers to decrypt encrypted messages or inject commands."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:flow:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "4.9.04",
            "matchCriteriaId" : "E6B11A7D-2058-44CC-B211-D83E2A2CC3C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21444",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:16.677",
      "lastModified" : "2024-11-21T07:42:52.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper cryptographic implementation in Samsung Flow for PC 4.9.14.0 allows adjacent attackers to decrypt encrypted messages or inject commands."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:flow:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "4.9.14.0",
            "matchCriteriaId" : "98CDC061-7419-4A87-A3A4-B042E27DFCCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21445",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:16.747",
      "lastModified" : "2024-11-21T07:42:53.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21446",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:16.823",
      "lastModified" : "2024-11-21T07:42:53.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in MyFiles prior to version 12.2.09 in Android R(11), 13.1.03.501 in Android S( 12) and 14.1.00.422 in Android T(13) allows local attacker to access data of MyFiles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D7120696-2440-44EC-B3A4-6FCBB4A60A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "693D72EF-1531-4C15-B105-2DEBE02D30F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "62105EDB-0A60-4153-9F3F-7635CC8756FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60281652-A1DF-4EA4-8CD3-6DCA43F6162F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F46F8F7-0EBA-4D2F-AC53-4BB5956D7B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB0F9B9-C60D-40CC-AC7D-FDB288EB2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD6CFD3-5341-4069-B4FC-A5E07F13A63F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "16A17CC3-7BA2-497C-835B-907B629A1B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF31CC5-E850-4B7E-BA43-6B1ED560DD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "70825981-F895-4BFD-9B6E-92BFF0D67023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34114DDC-DCDA-4306-8D23-2E628873171F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F73D594-178F-4FC8-9F40-0E545E2647B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3EF3F1-4E54-46E3-A308-69656A29FBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C581B7EE-CD08-4D6E-8858-EA8FA631F84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21447",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:16.893",
      "lastModified" : "2024-11-21T07:42:53.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerabilities in Samsung Cloud prior to version 5.3.0.32 allows local attackers to access information with Samsung Cloud&#39;s privilege via implicit intent."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:cloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.3.0.32",
            "matchCriteriaId" : "7ECD675D-DD11-4B31-9089-5B0CDD05CDFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21448",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:16.967",
      "lastModified" : "2024-11-21T07:42:53.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path traversal vulnerability in Samsung Cloud prior to version 5.3.0.32 allows attacker to access specific png file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:cloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.3.0.32",
            "matchCriteriaId" : "7ECD675D-DD11-4B31-9089-5B0CDD05CDFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21450",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:17.043",
      "lastModified" : "2024-11-21T07:42:53.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in One Hand Operation + prior to version 6.1.21 allows multi-users to access owner&#39;s widget without authorization via gesture setting."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:one_hand_operation_\\+:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "6.1.21",
            "matchCriteriaId" : "C0CACF20-9A18-4884-A29D-F942806145C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21451",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-02-09T19:15:17.117",
      "lastModified" : "2024-11-21T07:42:53.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-based overflow vulnerability in IpcRxEmbmsSessionList in SECRIL prior to Android S(12) allows attacker to cause memory corruptions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40EB3FC1-D79A-40C7-9E2B-573E20780982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B738B6B-78CE-4618-B70D-6BC9ED453105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18940389-1FBD-48B2-BCF0-1D709C2C3045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC84021B-9846-40FB-834B-7C5BECEFFEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEABF42E-578E-4689-B80D-B305467AA72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C28D3CD-DD34-4334-B03F-794B31A4BF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EF09DB-023A-40CB-9C94-020172383EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1553CEA-FCF4-4A9C-85FE-F7DB7A500443"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=04",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22792",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-09T20:15:11.290",
      "lastModified" : "2025-03-24T21:15:16.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Specially crafted cookies, in combination with a specially crafted X_FORWARDED_HOST header can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "6.0.6.1",
            "matchCriteriaId" : "F666D93D-2847-4073-9F8D-6E1809B61BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.0",
            "versionEndExcluding" : "6.1.7.1",
            "matchCriteriaId" : "53ED168D-80DD-4200-87F4-343D11FAA14C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.4.1",
            "matchCriteriaId" : "CDA4E147-AAD7-4EA9-BB6B-8358610FEE9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.rubyonrails.org/t/cve-2023-22792-possible-redos-based-dos-vulnerability-in-action-dispatch/82115",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240202-0007/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5372",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://discuss.rubyonrails.org/t/cve-2023-22792-possible-redos-based-dos-vulnerability-in-action-dispatch/82115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240202-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22794",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-09T20:15:11.353",
      "lastModified" : "2024-11-21T07:45:26.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the `annotate` query method, the `optimizer_hints` query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database withinsufficient sanitization and be able to inject SQL outside of the comment."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activerecord_project:activerecord:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.6.1",
            "matchCriteriaId" : "3B0AF7DB-45EB-4310-8409-90350D1AFF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activerecord_project:activerecord:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "6.1.0",
            "versionEndExcluding" : "6.1.7.1",
            "matchCriteriaId" : "0D94371F-6A6F-4D40-97A1-3B08C75E3AFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activerecord_project:activerecord:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.4.1",
            "matchCriteriaId" : "EDE689E3-57CB-4121-9EE3-1857079325E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.rubyonrails.org/t/cve-2023-22794-sql-injection-vulnerability-via-activerecord-comments/82117",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240202-0008/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5372",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://discuss.rubyonrails.org/t/cve-2023-22794-sql-injection-vulnerability-via-activerecord-comments/82117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240202-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22795",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-09T20:15:11.420",
      "lastModified" : "2024-11-21T07:45:26.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match header. A specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a state of catastrophic backtracking, when on a version of Ruby below 3.2.0. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.7.1",
            "matchCriteriaId" : "3A4B1AF3-B872-4699-9EFF-BD9B9822B5D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.4.1",
            "matchCriteriaId" : "CDA4E147-AAD7-4EA9-BB6B-8358610FEE9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.0",
            "matchCriteriaId" : "F841AE5D-60DD-4E3A-854A-9B7B906BF7E7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.rubyonrails.org/t/cve-2023-22795-possible-redos-based-dos-vulnerability-in-action-dispatch/82118",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240202-0010/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5372",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://discuss.rubyonrails.org/t/cve-2023-22795-possible-redos-based-dos-vulnerability-in-action-dispatch/82118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240202-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22796",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-09T20:15:11.487",
      "lastModified" : "2024-11-21T07:45:26.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activesupport_project:activesupport:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "6.1.7.1",
            "matchCriteriaId" : "989A015C-DF4F-4BCF-8637-8CF3094447A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activesupport_project:activesupport:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.4.1",
            "matchCriteriaId" : "EB170255-D891-41DD-A250-C86AF089E5DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.rubyonrails.org/t/cve-2023-22796-possible-redos-based-dos-vulnerability-in-active-supports-underscore/82116",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240202-0009/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5372",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://discuss.rubyonrails.org/t/cve-2023-22796-possible-redos-based-dos-vulnerability-in-active-supports-underscore/82116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240202-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22797",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-09T20:15:11.550",
      "lastModified" : "2025-03-24T20:15:16.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:actionpack_project:actionpack:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.4.1",
            "matchCriteriaId" : "EAD7718C-B932-4863-B30E-E85F1ADCF933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.4.1",
            "matchCriteriaId" : "CDA4E147-AAD7-4EA9-BB6B-8358610FEE9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127",
        "source" : "support@hackerone.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22798",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-09T20:15:11.613",
      "lastModified" : "2025-03-25T14:15:20.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prior to commit 51867e0d15a6d7f80d5b714fd0e9976b9c160bb0, https://github.com/brave/adblock-lists removed redirect interceptors on some websites like Facebook in which the redirect interceptor may have been there for security purposes. This could potentially cause open redirects on these websites. Brave's redirect interceptor removal feature is known as \"debouncing\" and is intended to remove unnecessary redirects that track users across the web."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brave:adblock-lists:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022-05-25",
            "matchCriteriaId" : "00DE13C0-9769-4FAF-8E43-923F4AE6FB38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/1579374",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1579374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22799",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-09T20:15:11.677",
      "lastModified" : "2024-11-21T07:45:26.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to take an unexpected amount of time. All users running an affected release should either upgrade or use one of the workarounds immediately."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:globalid:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "0.2.1",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "FB6ED36C-0E32-4944-A289-7C6915E32932"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23912",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-09T20:15:11.740",
      "lastModified" : "2025-03-24T19:15:41.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-75"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:usg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.57",
            "matchCriteriaId" : "42EEFED0-A2A2-4331-A87A-A181742D0550"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:usg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59478336-F60A-4963-A3E3-89B04A119223"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:usg-pro-4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.57",
            "matchCriteriaId" : "7074B37B-FBD0-4484-96FA-15F51661CBD7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:usg-pro-4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D357AC52-6588-45F2-ACAC-165B4C97F464"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-10x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "0443C2FC-354E-47A1-A73B-912DD16EA216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-10x_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "91B1E29D-7EEA-42BE-BB73-2EDF0DF1D7B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-10x_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C20F448-B93A-49CA-BB13-FBCB08BB9D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-10x_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CC4F6A-660D-4EED-886D-63E8EA9723B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-10x_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "32E6424A-4E41-4DDA-A8FE-66C0DE007623"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-10x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257D043B-BBD0-45D5-AEA4-32DC720F3C2B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "0FAD0529-AA21-48D4-86CC-663381C8C211"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-12_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6E80E56E-A867-40F0-B5E7-B4B0CE4F912F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-12_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "12E1323D-1078-4501-A8FD-7DB263F2411E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-12_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6756AB-F23F-4060-B38F-DBAA0BC8733B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-12_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "B10F7FBC-3274-4CB7-AA87-72C2B43DA457"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A7DEE4B-D49C-4D11-9AA8-3F422DDF8964"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-12p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "80B96493-2E6D-4F9E-AD41-CD1AB46C0650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-12p_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D99F46FE-6FA5-4995-B9AB-6DA45AC6AC84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-12p_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "AB366C51-77CB-4DA9-957B-873A814EFAD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-12p_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "9015D609-89CF-4296-9E79-24E39F4C6AA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-12p_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "FA39BE0A-9BEA-4578-87E6-AD2402DBC101"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-12p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "510797FB-103E-43D3-843B-5330716A13F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "DA799FF3-1F2A-421D-AB8C-1078F82EA42C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-4_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E5186F-3777-4A48-B26C-B2E9ADDA5142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-4_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "98E75674-504E-4F23-A326-C3257C3B8A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-4_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "0D425830-846B-4DE1-A894-C5204B2FB38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-4_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "A40D50F4-2207-4A04-B9A1-62B0E8A93C88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DBDD16-1FDE-45FA-9A5C-44BCF44D70FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-6p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "F2A602FE-52D8-4532-B251-7B297D48DBC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-6p_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB4D4A9-F899-4F48-BE36-DF0EF01D54F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-6p_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "49C9FDF4-38A0-4F3F-A254-C23124E9C815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-6p_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "1DDE4F7A-0BB2-4160-845C-D98005B48616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-6p_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "3C15499E-CEE1-4E40-8288-243FAE540B99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-6p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EA558B-7CF3-4CD0-8D73-A6BC646948C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-8-xg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "136672C3-79AD-4CBE-B4D1-22D5CCA49358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-8-xg_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EE42C156-EAD4-4594-A45C-3445396D085F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-8-xg_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "B9DFC719-7376-482C-8406-8F8B4903F3B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-8-xg_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B6811C-71A1-4E80-B4E1-146D6712FF06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-8-xg_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "5D680162-9253-49E6-8907-EEE0EF59517B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-8-xg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB1CDE7-F121-4D6A-A729-C6A1F27100E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "5E5C7E0B-4335-44F0-A19F-6E68D9CFD5AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9DB3EE14-A555-4DCA-9C16-F3D72489F10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "2844D28C-FAD9-498A-93FF-7A4A217210A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0473F8F-8D1E-4CEB-A7FC-979F3F3AAF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D34B1D-9F1F-4A1F-A76C-FB4EE83D08F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9AD72-BF39-4731-85B9-26036F7C425B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "34DA36D8-F0BD-4E98-A74C-5D50AD0980C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "906F4A72-7C6D-45FD-875F-2D2791CE9F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "B919E33F-AC70-432C-A3F8-29FDFC710BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEE96EB-D8AE-4B23-B090-E86FBA4BEF73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "101616F2-CA1A-4BF0-9025-F20EDA26F235"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x-sfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F922D6E-7C6D-4984-A0DF-6EDC0C7A9900"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ui.com/releases/Security-Advisory-Bulletin-028-028/696e4e3b-718c-4da4-9a21-965a85633b5f",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://community.ui.com/releases/Security-Advisory-Bulletin-028-028/696e4e3b-718c-4da4-9a21-965a85633b5f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24322",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-09T20:15:11.807",
      "lastModified" : "2025-03-24T19:15:41.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected cross-site scripting (XSS) vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mojoportal:mojoportal:2.7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27465AD-B505-48F8-9473-2B07A7634FC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/i7MEDIA/mojoportal/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.mojoportal.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/i7MEDIA/mojoportal/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.mojoportal.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-09T20:15:11.860",
      "lastModified" : "2025-03-24T19:15:41.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mojoportal v2.7 was discovered to contain an authenticated XML external entity (XXE) injection vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mojoportal:mojoportal:2.7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27465AD-B505-48F8-9473-2B07A7634FC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/i7MEDIA/mojoportal",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.mojoportal.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/i7MEDIA/mojoportal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.mojoportal.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-09T20:15:11.917",
      "lastModified" : "2025-03-24T19:15:46.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mojoportal v2.7.0.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Company Info Settings component. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtCompanyName parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mojoportal:mojoportal:2.7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27465AD-B505-48F8-9473-2B07A7634FC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/i7MEDIA/mojoportal/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.mojoportal.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/i7MEDIA/mojoportal/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.mojoportal.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-09T20:15:11.973",
      "lastModified" : "2025-03-24T19:15:47.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in Mojoportal v2.7.0.0 allows an unauthenticated attacker to register a new user even if the Allow User Registrations feature is disabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mojoportal:mojoportal:2.7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27465AD-B505-48F8-9473-2B07A7634FC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mojoportal.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mojoportal.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-09T20:15:12.030",
      "lastModified" : "2025-03-24T19:15:47.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in Mojoportal v2.7.0.0 and below allows an authenticated attacker to list all css files inside the root path of the webserver via manipulation of the \"s\" parameter in /DesignTools/ManageSkin.aspx"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mojoportal:mojoportal:2.7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27465AD-B505-48F8-9473-2B07A7634FC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mojoportal.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mojoportal.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23625",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-09T21:15:11.327",
      "lastModified" : "2024-11-21T07:46:33.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "go-unixfs is an implementation of a unix-like filesystem on top of an ipld merkledag. Trying to read malformed HAMT sharded directories can cause panics and virtual memory leaks. If you are reading untrusted user input, an attacker can then trigger a panic. This is caused by bogus `fanout` parameter in the HAMT directory nodes. Users are advised to upgrade to version 0.4.3 to resolve this issue. Users unable to upgrade should not feed untrusted user data to the decoding functions.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:protocol:go-unixfs:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "0.4.3",
            "matchCriteriaId" : "E633DAAE-3CBA-4C87-BFF2-8CDBDFC2D211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ipfs/go-unixfs/commit/467d139a640ecee4f2e74643dafcc58bb3b54175",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ipfs/go-unixfs/security/advisories/GHSA-q264-w97q-q778",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ipfs/go-unixfs/commit/467d139a640ecee4f2e74643dafcc58bb3b54175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ipfs/go-unixfs/security/advisories/GHSA-q264-w97q-q778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23626",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-09T21:15:11.413",
      "lastModified" : "2024-11-21T07:46:33.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "go-bitfield is a simple bitfield package for the go language aiming to be more performant that the standard library. When feeding untrusted user input into the size parameter of `NewBitfield` and `FromBytes` functions, an attacker can trigger `panic`s. This happen when the `size` is a not a multiple of `8` or is negative. There were already a note in the `NewBitfield` documentation, however known users of this package are subject to this issue. Users are advised to upgrade. Users unable to upgrade should ensure that `size` is a multiple of 8 before calling `NewBitfield` or `FromBytes`.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:protocol:go-bitfield:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "983C941E-2C07-4D12-B0F7-2E0F04EBCBAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ipfs/go-bitfield/commit/5e1d256fe043fc4163343ccca83862c69c52e579",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ipfs/go-bitfield/security/advisories/GHSA-2h6c-j3gf-xp9r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ipfs/go-bitfield/commit/5e1d256fe043fc4163343ccca83862c69c52e579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ipfs/go-bitfield/security/advisories/GHSA-2h6c-j3gf-xp9r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23631",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-09T21:15:11.513",
      "lastModified" : "2024-11-21T07:46:34.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "github.com/ipfs/go-unixfsnode is an ADL IPLD prime node that wraps go-codec-dagpb's implementation of protobuf to enable pathing. In versions priot to 1.5.2 trying to read malformed HAMT sharded directories can cause panics and virtual memory leaks.\nIf you are reading untrusted user input, an attacker can then trigger a panic. This is caused by bogus fanout parameter in the HAMT directory nodes. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      }, {
        "lang" : "es",
        "value" : "github.com/ipfs/go-unixfsnode es un nodo principal de ADL IPLD que envuelve la implementación de protobuf de go-codec-dagpb para habilitar la ruta. En versiones anteriores a la 1.5.2, intentar leer directorios fragmentados con HAMT con formato incorrecto puede provocar pánico y pérdidas de memoria virtual. Si está leyendo entradas de usuarios que no son de confianza, un atacante puede provocar pánico. Esto se debe a un parámetro de distribución falso en los nodos del directorio HAMT. Se recomienda a los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:protocol:go-unixfsnode:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "1.5.2",
            "matchCriteriaId" : "85F78CD5-2FE1-411D-B9B4-6FBD3D7CC2F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ipfs/go-unixfsnode/commit/59050ea8bc458ae55246ae09243e6e165923e076",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ipfs/go-unixfsnode/commit/91b3d39d33ef0cd2aff2c95d50b2329350944b68",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ipfs/go-unixfsnode/commit/a4ed723727e0bdc2277158337c2fc0d82802d122",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ipfs/go-unixfsnode/security/advisories/GHSA-4gj3-6r43-3wfc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ipfs/go-unixfsnode/commit/59050ea8bc458ae55246ae09243e6e165923e076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ipfs/go-unixfsnode/commit/91b3d39d33ef0cd2aff2c95d50b2329350944b68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ipfs/go-unixfsnode/commit/a4ed723727e0bdc2277158337c2fc0d82802d122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ipfs/go-unixfsnode/security/advisories/GHSA-4gj3-6r43-3wfc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0770",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-09T22:15:11.170",
      "lastModified" : "2024-11-21T07:37:47.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2."
      }, {
        "lang" : "es",
        "value" : "Desbordamiento de búfer en la región stack de la memoria en el repositorio de GitHub gpac/gpac anterior a 2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.0",
            "matchCriteriaId" : "B4D3D58A-C3C9-4441-A84A-FB91FD19985C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/c31941822ee275a35bc148382bafef1c53ec1c26",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e0fdeee5-7909-446e-9bd0-db80fd80e8dd",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "security@huntr.dev",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/c31941822ee275a35bc148382bafef1c53ec1c26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e0fdeee5-7909-446e-9bd0-db80fd80e8dd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23592",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-09T22:15:11.253",
      "lastModified" : "2025-03-24T19:15:41.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WALLIX Access Manager 3.x through 4.0.x allows a remote attacker to access sensitive information."
      }, {
        "lang" : "es",
        "value" : "WALLIX Access Manager 3.x a 4.0.x permite que un atacante remoto acceda a información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wallix:bastion_access_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.16",
            "matchCriteriaId" : "B7A53421-D012-4C56-B21B-69C7D7492355"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wallix:bastion_access_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "701CC470-EDA0-463E-8F0A-27E3A7C867B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wallix.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wallix.com/support/alerts/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wallix.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wallix.com/support/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24684",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-09T22:15:11.310",
      "lastModified" : "2025-03-24T19:15:45.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the EID parameter at GetText.php."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que ChurchCRM v4.5.3 y versiones anteriores contenían una vulnerabilidad de inyección SQL a través del parámetro EID en GetText.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "581B1531-45F5-45D4-9B33-E00BE90DA834"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://churchcrm.io/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://churchcrm.io/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM/issues/6440",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-09T22:15:11.363",
      "lastModified" : "2025-03-24T19:15:45.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the Event parameter under the Event Attendance reports module."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que ChurchCRM v4.5.3 y versiones anteriores contenían una vulnerabilidad de inyección SQL a través del parámetro Event en el módulo Event Attendance."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "581B1531-45F5-45D4-9B33-E00BE90DA834"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://churchcrm.io/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172047/ChurchCRM-4.5.3-SQL-Injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ChurchCRM/CRM/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://churchcrm.io/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172047/ChurchCRM-4.5.3-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ChurchCRM/CRM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM/issues/6441",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-09T22:15:11.413",
      "lastModified" : "2025-03-24T19:15:46.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in the CSV Import function of ChurchCRM v4.5.3 and below allows attackers to execute arbitrary code via importing a crafted CSV file."
      }, {
        "lang" : "es",
        "value" : "Un problema en la función de importación CSV de ChurchCRM v4.5.3 y versiones anteriores permite a los atacantes ejecutar código arbitrario mediante la importación de un archivo CSV manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "581B1531-45F5-45D4-9B33-E00BE90DA834"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://churchcrm.io/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://churchcrm.io/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24690",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-09T22:15:11.467",
      "lastModified" : "2025-03-24T19:15:48.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting (XSS) vulnerability at /api/public/register/family."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que ChurchCRM 4.5.3 y versiones anteriores contenían una vulnerabilidad de cross-site scripting (XSS) almacenado en /api/public/register/family."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "581B1531-45F5-45D4-9B33-E00BE90DA834"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://churchcrm.io/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://churchcrm.io/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0771",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-10T01:15:10.453",
      "lastModified" : "2024-11-21T07:37:47.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop."
      }, {
        "lang" : "es",
        "value" : "Inyección SQL en el repositorio de GitHub ampache/ampache anterior a 5.5.7, desarrollo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ampache:ampache:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.7",
            "matchCriteriaId" : "AA237F19-986D-4470-86E7-CEA9F0BBE2C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ampache/ampache/commit/c456e66ef6fd8d11390181a40c66910ae01fbf4c",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2493f350-271b-4c38-9e1d-c8fa189c5ce1",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ampache/ampache/commit/c456e66ef6fd8d11390181a40c66910ae01fbf4c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2493f350-271b-4c38-9e1d-c8fa189c5ce1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T03:15:11.810",
      "lastModified" : "2025-03-24T17:15:14.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in Provide server 14.4 allows attackers to execute arbitrary code through the server-log via username field from the login form."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross Site Scripting (XSS) en Provide Server 14.4 permite a los atacantes ejecutar código arbitrario a través del registro del servidor a través del campo de nombre de usuario desde el formulario de inicio de sesión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:farsight:provide_server:14.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90A7DE99-6D17-4229-B213-6A02A9E75B0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171734/Provide-Server-14.4-XSS-Cross-Site-Request-Forgery-Code-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://f20.be/cves/provide-server-v-14-4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.provideserver.se/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171734/Provide-Server-14.4-XSS-Cross-Site-Request-Forgery-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://f20.be/cves/provide-server-v-14-4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.provideserver.se/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22369",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-10T07:15:11.540",
      "lastModified" : "2023-11-07T04:06:51.880",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-25011. Reason: This candidate is a duplicate of CVE-2023-25011. Notes: All CVE users should reference CVE-2023-25011 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22832",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-02-10T08:15:12.843",
      "lastModified" : "2025-03-24T17:15:14.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references.\n\nFlow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity references.\n\nThe resolution disables Document Type Declarations and disallows XML External Entity resolution in the ExtractCCDAAttributes Processor.\n\n"
      }, {
        "lang" : "es",
        "value" : "El procesador ExtractCCDAAttributes de Apache NiFi 1.2.0 a 1.19.1 no restringe las referencias a entidades externas XML. Las configuraciones de flujo que incluyen el procesador ExtractCCDAAttributes son vulnerables a documentos XML maliciosos que contienen declaraciones de tipo de documento con referencias a entidades externas XML. La resolución deshabilita las declaraciones de tipo de documento y no permite la resolución de entidades externas XML en el procesador ExtractCCDAAttributes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndIncluding" : "1.19.1",
            "matchCriteriaId" : "EC1FB0FD-0D86-47B7-931A-6640115B5052"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/b51qs6y7b7r58vovddkv6wc16g2xbl3w",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://nifi.apache.org/security.html#CVE-2023-22832",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/b51qs6y7b7r58vovddkv6wc16g2xbl3w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://nifi.apache.org/security.html#CVE-2023-22832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0774",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-10T12:15:11.630",
      "lastModified" : "2024-11-21T07:37:47.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Medical Certificate Generator App 1.0 and classified as critical. This vulnerability affects unknown code of the file action.php. The manipulation of the argument lastname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-220558 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Medical Certificate Generator App 1.0 y se ha clasificado como crítica. Esta vulnerabilidad afecta a un código desconocido del archivo action.php. La manipulación del argumento apellido conduce a la inyección SQL. El ataque se puede iniciar de forma remota. El exploit ha sido divulgado al público y puede utilizarse. VDB-220558 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medical_certificate_generator_app_project:medical_certificate_generator_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99101B10-CEBF-4396-B794-8B4A8D91ED1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220558",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220558",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=s3oK5jebx_I",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=s3oK5jebx_I",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23698",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-10T13:15:11.337",
      "lastModified" : "2024-11-21T07:46:41.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete.\n\n"
      }, {
        "lang" : "es",
        "value" : "Dell Command | Update, Dell Update, and Alienware Update anteriores a 4.6.0 y 4.7.1 contienen operación insegura en Windows Junction en el componente del instalador. Un usuario malintencionado local podría explotar esta vulnerabilidad y provocar la eliminación arbitraria de archivos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1386"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:alienware_update:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E69226-6D72-4E15-89C3-B95E00BF91A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:alienware_update:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4651608F-B893-4D9F-B3CB-AD3B9DC1EEE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:command_update:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9836FDEF-5971-45AE-AD0F-AEFB657F6AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:command_update:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350DEA8B-0DE7-4025-9124-ABA67D5CC8FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000208038/dsa-2023-031",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000208038/dsa-2023-031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24569",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-10T13:15:11.420",
      "lastModified" : "2024-11-21T07:48:08.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell Alienware Command Center versions 5.5.37.0 and prior contain an Improper Input validation vulnerability. A local authenticated malicious user could potentially send malicious input to a named pipe in order to elevate privileges on the system.\n\n"
      }, {
        "lang" : "es",
        "value" : "Dell Alienware Command Center en su versión 5.5.37.0 y anteriores contienen una vulnerabilidad de validación de entrada incorrecta. Un usuario malintencionado autenticado local podría potencialmente enviar entradas maliciosas a una canalización con nombre para elevar los privilegios en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:alienware_command_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.37.0",
            "matchCriteriaId" : "98BD009C-1382-4629-B462-68FA71F9A5DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000208327/dsa-2023-044",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000208327/dsa-2023-044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24573",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-10T13:15:11.493",
      "lastModified" : "2024-11-21T07:48:09.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell Command | Monitor versions prior to 10.9 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion.\n\n"
      }, {
        "lang" : "es",
        "value" : "Dell Command | Monitor en sus versiones anteriores a la 10.9 contienen una vulnerabilidad de eliminación de carpeta arbitraria durante la desinstalación. Un usuario malintencionado autenticado localmente puede explotar esta vulnerabilidad y provocar la eliminación arbitraria de una carpeta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:command_\\|_monitor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.9",
            "matchCriteriaId" : "B00E50BA-0D35-4702-95B3-8D82239260F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207973/dsa-2023-033",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207973/dsa-2023-033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T15:15:11.860",
      "lastModified" : "2025-03-24T19:15:42.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSchedule."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que el router WI-FI D-Link N300 DIR-605L v2.13B01 contenía un desbordamiento de pila a través del parámetro curTime en /goform/formSchedule."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A17995-9117-42E4-938E-D18F605DD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/curTime_Vuls/01",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/curTime_Vuls/01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T15:15:11.920",
      "lastModified" : "2025-03-24T19:15:42.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWlanGuestSetup."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que D-Link N300 WI-FI Router DIR-605L v2.13B01 contenía un desbordamiento de pila a través del parámetro de la página web en /goform/formWlanGuestSetup."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A17995-9117-42E4-938E-D18F605DD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/webpage_Vuls/01",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/webpage_Vuls/01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T15:15:11.980",
      "lastModified" : "2025-03-24T19:15:42.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetWanDhcpplus."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que D-Link N300 WI-FI Router DIR-605L v2.13B01 contenía un desbordamiento de pila a través del parámetro curTime en /goform/formSetWanDhcpplus."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A17995-9117-42E4-938E-D18F605DD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/curTime_Vuls/03",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/curTime_Vuls/03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T15:15:12.040",
      "lastModified" : "2025-03-24T19:15:42.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wan_connected parameter at /goform/formEasySetupWizard3."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que D-Link N300 WI-FI Router DIR-605L v2.13B01 contenía un desbordamiento de pila a través del parámetro wan_connected en /goform/formEasySetupWizard3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A17995-9117-42E4-938E-D18F605DD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/02",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T15:15:12.097",
      "lastModified" : "2025-03-24T19:15:43.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formSetWanDhcpplus."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que D-Link N300 WI-FI Router DIR-605L v2.13B01 contenía un desbordamiento de pila a través del parámetro de la página web en /goform/formSetWanDhcpplus."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A17995-9117-42E4-938E-D18F605DD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/webpage_Vuls/02",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/webpage_Vuls/02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T15:15:12.150",
      "lastModified" : "2025-03-24T19:15:44.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetACLFilter."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que D-Link N300 WI-FI Router DIR-605L v2.13B01 contenía un desbordamiento de pila a través del parámetro curTime en /goform/formSetACLFilter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A17995-9117-42E4-938E-D18F605DD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/curTime_Vuls/02",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/curTime_Vuls/02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T15:15:12.207",
      "lastModified" : "2025-03-24T17:15:14.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetRoute."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que D-Link N300 WI-FI Router DIR-605L v2.13B01 contenía un desbordamiento de pila a través del parámetro curTime en /goform/formSetRoute."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A17995-9117-42E4-938E-D18F605DD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/curTime_Vuls/04",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/curTime_Vuls/04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T15:15:12.260",
      "lastModified" : "2025-03-24T17:15:14.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the config.smtp_email_subject parameter at /goform/formSetEmail."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que D-Link N300 WI-FI Router DIR-605L v2.13B01 contenía un desbordamiento de pila a través del parámetro config.smtp_email_subject en /goform/formSetEmail."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A17995-9117-42E4-938E-D18F605DD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/03",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T15:15:12.313",
      "lastModified" : "2025-03-24T17:15:15.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the FILECODE parameter at /goform/formLogin."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que  D-Link N300 WI-FI Router DIR-605L v2.13B01 contenía un desbordamiento de pila a través del parámetro FILECODE en /goform/formLogin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A17995-9117-42E4-938E-D18F605DD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/01",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T15:15:12.367",
      "lastModified" : "2025-03-24T16:15:17.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWPS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A17995-9117-42E4-938E-D18F605DD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/webpage_Vuls/03",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/webpage_Vuls/03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T16:15:12.057",
      "lastModified" : "2025-03-24T18:15:17.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in the component /formwork/panel/dashboard of Formwork v1.12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page title parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:formwork_project:formwork:1.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70259217-B00F-4E80-924B-B3E1B6159E41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/getformwork/formwork/releases/tag/1.12.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://medium.com/%400x2bit/formwork-1-12-1-stored-xss-vulnerability-at-page-title-b6efba27891a",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/getformwork/formwork/releases/tag/1.12.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://medium.com/%400x2bit/formwork-1-12-1-stored-xss-vulnerability-at-page-title-b6efba27891a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T16:15:12.123",
      "lastModified" : "2025-03-24T18:15:17.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/categories.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Categories Name parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inventory_management_system_project:inventory_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3D9475-43F9-4544-973D-E5B41DDB2695"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/stemword/php-inventory-management-system",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/stemword/php-inventory-management-system",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T16:15:12.180",
      "lastModified" : "2025-03-24T18:15:17.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/product.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inventory_management_system_project:inventory_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3D9475-43F9-4544-973D-E5B41DDB2695"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/stemword/php-inventory-management-system",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/stemword/php-inventory-management-system",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T16:15:12.237",
      "lastModified" : "2025-03-24T18:15:17.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/orders.php?o=add of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Client Name parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inventory_management_system_project:inventory_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3D9475-43F9-4544-973D-E5B41DDB2695"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/stemword/php-inventory-management-system",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/stemword/php-inventory-management-system",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T16:15:12.293",
      "lastModified" : "2025-03-24T18:15:17.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in the component php-inventory-management-system/brand.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Brand Name parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inventory_management_system_project:inventory_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE3D9475-43F9-4544-973D-E5B41DDB2695"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/stemword/php-inventory-management-system",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/stemword/php-inventory-management-system",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0777",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-10T19:15:12.937",
      "lastModified" : "2024-11-21T07:37:48.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modoboa:modoboa:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.4",
            "matchCriteriaId" : "A58F3CCF-F999-4884-B796-9A0099D091C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171744/modoboa-2.0.4-Admin-Takeover.html",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/modoboa/modoboa/commit/47d17ac6643f870719691073956a26e4be0a4806",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a17e7a9f-0fee-4130-a522-5a0466fc17c7",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171744/modoboa-2.0.4-Admin-Takeover.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/modoboa/modoboa/commit/47d17ac6643f870719691073956a26e4be0a4806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a17e7a9f-0fee-4130-a522-5a0466fc17c7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T20:15:53.313",
      "lastModified" : "2024-11-21T07:45:54.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:art_gallery_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7F7EC5-D077-4052-9013-D37C2F794796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171642/Art-Gallery-Management-System-Project-1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-23161/CVE-2023-23161.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171642/Art-Gallery-Management-System-Project-1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-23161/CVE-2023-23161.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T20:15:53.703",
      "lastModified" : "2024-11-21T07:45:55.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:art_gallery_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7F7EC5-D077-4052-9013-D37C2F794796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171643/Art-Gallery-Management-System-Project-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-23162/CVE-2023-23162.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171643/Art-Gallery-Management-System-Project-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-23162/CVE-2023-23162.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-10T20:15:53.760",
      "lastModified" : "2024-11-21T07:45:55.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:art_gallery_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7F7EC5-D077-4052-9013-D37C2F794796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171643/Art-Gallery-Management-System-Project-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-23163/CVE-2023-23163.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171643/Art-Gallery-Management-System-Project-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-23163/CVE-2023-23163.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24816",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-10T20:15:53.817",
      "lastModified" : "2024-11-21T07:48:27.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This vulnerability requires that the function `IPython.utils.terminal.set_term_title` be called on Windows in a Python environment where ctypes is not available. The dependency on `ctypes` in `IPython.utils._process_win32` prevents the vulnerable code from ever being reached in the ipython binary. However, as a library that could be used by another tool `set_term_title` could be called and hence introduce a vulnerability. Should an attacker get untrusted input to an instance of this function they would be able to inject shell commands as current process and limited to the scope of the current process. Users of ipython as a library are advised to upgrade. Users unable to upgrade should ensure that any calls to the `IPython.utils.terminal.set_term_title` function are done with trusted or filtered input."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipython:ipython:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.10.0",
            "matchCriteriaId" : "2A34BED6-E21F-45D9-A529-D0B2B5BE621C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ipython/ipython/blob/3f0bf05f072a91b2a3042d23ce250e5e906183fd/IPython/utils/terminal.py#L103-L117",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/ipython/ipython/blob/56e6925dfa50e2c7f4a6471547b8176275db7c25/IPython/utils/_process_win32.py#L20",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/ipython/ipython/commit/385d69325319a5972ee9b5983638e3617f21cb1f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ipython/ipython/security/advisories/GHSA-29gw-9793-fvw7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ipython/ipython/blob/3f0bf05f072a91b2a3042d23ce250e5e906183fd/IPython/utils/terminal.py#L103-L117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/ipython/ipython/blob/56e6925dfa50e2c7f4a6471547b8176275db7c25/IPython/utils/_process_win32.py#L20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/ipython/ipython/commit/385d69325319a5972ee9b5983638e3617f21cb1f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ipython/ipython/security/advisories/GHSA-29gw-9793-fvw7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0776",
      "sourceIdentifier" : "security@baicells.com",
      "published" : "2023-02-11T01:23:26.113",
      "lastModified" : "2024-11-21T07:37:47.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce. \n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@baicells.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@baicells.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:baicells:neutrino_430_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "qrtb_2.12.7",
            "matchCriteriaId" : "9FB9F0E7-8C51-4D55-B962-62EC4792086F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:baicells:neutrino_430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F525B37-6593-4534-932D-89C7D28B3C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:baicells:nova430l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "qrtb_2.12.7",
            "matchCriteriaId" : "3D5BC6AC-0035-47A3-9ED2-653EE67A4EC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:baicells:nova430l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C34FDFD-CA68-495B-AC86-A8074E851B92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:baicells:nova430e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "qrtb_2.12.7",
            "matchCriteriaId" : "2B192208-0C0F-4225-A6D0-E8F01FFDD7D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:baicells:nova430e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF84A685-67A9-4039-B92B-0AC934B6E038"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:baicells:nova436q_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "qrtb_2.12.7",
            "matchCriteriaId" : "42EC47B2-A879-41BB-8347-9E40E7FAA123"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:baicells:nova436q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF872E4-C1A1-4C60-B0CC-3958A99A7E6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://baicells.com/Service/Firmware",
        "source" : "security@baicells.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://baicells.com/Service/Firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25557",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-11T01:23:26.353",
      "lastModified" : "2025-12-03T21:05:03.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DataHub is an open-source metadata platform. The DataHub frontend acts as a proxy able to forward any REST or GraphQL requests to the backend. The goal of this proxy is to perform authentication if needed and forward HTTP requests to the DataHub Metadata Store (GMS). It has been discovered that the proxy does not adequately construct the URL when forwarding data to GMS, allowing external users to reroute requests from the DataHub Frontend to any arbitrary hosts. As a result attackers may be able to reroute a request from originating from the frontend proxy to any other server and return the result. This vulnerability was discovered and reported by the GitHub Security lab and is tracked as GHSL-2022-076."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datahub:datahub:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.45",
            "matchCriteriaId" : "6E1AD51D-2FDE-4A9F-B2CB-EBAC66BBE6C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/datahub-project/datahub/security/advisories/GHSA-5w2h-q83m-65xg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/datahub-project/datahub/security/advisories/GHSA-5w2h-q83m-65xg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25558",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-11T01:23:26.437",
      "lastModified" : "2024-11-21T07:49:43.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DataHub is an open-source metadata platform. When the DataHub frontend is configured to authenticate via SSO, it will leverage the pac4j library. The processing of the `id_token` is done in an unsafe manner which is not properly accounted for by the DataHub frontend. Specifically, if any of the id_token claims value start with the {#sb64} prefix, pac4j considers the value to be a serialized Java object and will deserialize it. This issue may lead to Remote Code Execution (RCE) in the worst case. Although a `RestrictedObjectInputStream` is in place, that puts some restriction on what classes can be deserialized, it still allows a broad range of java packages and potentially exploitable with different gadget chains. Users are advised to upgrade. There are no known workarounds. This vulnerability was discovered and reported by the GitHub Security lab and is tracked as GHSL-2022-086."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datahub_project:datahub:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.5",
            "matchCriteriaId" : "2708E599-3544-42CD-9C8F-77505D536A47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/datahub-project/datahub/commit/2a182f484677d056730d6b4e9f0143e67368359f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/datahub-project/datahub/security/advisories/GHSA-hrwp-2q5c-86wv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/datahub-project/datahub/commit/2a182f484677d056730d6b4e9f0143e67368359f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/datahub-project/datahub/security/advisories/GHSA-hrwp-2q5c-86wv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25559",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-11T01:23:26.530",
      "lastModified" : "2025-12-03T21:05:03.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DataHub is an open-source metadata platform. When not using authentication for the metadata service, which is the default configuration, the Metadata service (GMS) will use the X-DataHub-Actor HTTP header to infer the user the frontend is sending the request on behalf of. When the backends retrieves the header, its name is retrieved in a case-insensitive way. This case differential can be abused by an attacker to smuggle an X-DataHub-Actor header with different casing  (eg: X-DATAHUB-ACTOR). This issue may lead to an authorization bypass by allowing any user to impersonate the system user account and perform any actions on its behalf. This vulnerability was discovered and reported by the GitHub Security lab and is tracked as GHSL-2022-079."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datahub:datahub:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.45",
            "matchCriteriaId" : "6E1AD51D-2FDE-4A9F-B2CB-EBAC66BBE6C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/datahub-project/datahub/security/advisories/GHSA-qgp2-qr66-j8r8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/datahub-project/datahub/security/advisories/GHSA-qgp2-qr66-j8r8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25560",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-11T01:23:26.610",
      "lastModified" : "2025-12-03T21:05:03.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DataHub is an open-source metadata platform. The AuthServiceClient which is responsible for creation of new accounts, verifying credentials, resetting them or requesting access tokens, crafts multiple JSON strings using format strings with user-controlled data. This means that an attacker may be able to augment these JSON strings to be sent to the backend and that can potentially be abused by including new or colliding values. This issue may lead to an authentication bypass and the creation of system accounts, which effectively can lead to full system compromise. Users are advised to upgrade. There are no known workarounds for this vulnerability. This vulnerability was discovered and reported by the GitHub Security lab and is tracked as GHSL-2022-080."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-913"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datahub:datahub:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.45",
            "matchCriteriaId" : "6E1AD51D-2FDE-4A9F-B2CB-EBAC66BBE6C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/datahub-project/datahub/security/advisories/GHSA-6rpf-5cfg-h8f3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/datahub-project/datahub/security/advisories/GHSA-6rpf-5cfg-h8f3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25561",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-11T01:23:26.690",
      "lastModified" : "2025-12-03T21:05:03.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DataHub is an open-source metadata platform. In the event a system is using Java Authentication and Authorization Service (JAAS) authentication and that system is given a configuration which contains an error, the authentication for the system will fail open and allow an attacker to login using any username and password. The reason for this is that while an error is thrown in the `authenticateJaasUser` method it is swallowed without propagating the error. As a result of this issue unauthenticated users may gain access to the system. Users are advised to upgrade. There are no known workarounds for this issue. This vulnerability was discovered and reported by the GitHub Security lab and is tracked as GHSL-2022-081."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datahub:datahub:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.45",
            "matchCriteriaId" : "6E1AD51D-2FDE-4A9F-B2CB-EBAC66BBE6C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/datahub-project/datahub/blob/fdf4e48495f083314f59c414bcc7c2601633a2b8/datahub-frontend/app/security/AuthenticationManager.java#L26",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/datahub-project/datahub/security/advisories/GHSA-7wc6-p6c4-522c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/datahub-project/datahub/blob/fdf4e48495f083314f59c414bcc7c2601633a2b8/datahub-frontend/app/security/AuthenticationManager.java#L26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/datahub-project/datahub/security/advisories/GHSA-7wc6-p6c4-522c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25562",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-11T01:23:26.770",
      "lastModified" : "2025-12-03T21:05:03.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DataHub is an open-source metadata platform. In versions of DataHub prior to 0.8.45 Session cookies are only cleared on new sign-in events and not on logout events. Any authentication checks using the `AuthUtils.hasValidSessionCookie()` method could be bypassed by using a cookie from a logged out session, as a result any logged out session cookie may be accepted as valid and therefore lead to an authentication bypass to the system. Users are advised to upgrade. There are no known workarounds for this issue. This vulnerability was discovered and reported by the GitHub Security lab and is tracked as GHSL-2022-083."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datahub:datahub:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.45",
            "matchCriteriaId" : "6E1AD51D-2FDE-4A9F-B2CB-EBAC66BBE6C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/datahub-project/datahub/blob/aa146db611e3a4ca3aa17bb740783f789d4444d3/datahub-frontend/app/auth/AuthUtils.java#L78",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/datahub-project/datahub/security/advisories/GHSA-3974-hxjh-m3jj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/datahub-project/datahub/blob/aa146db611e3a4ca3aa17bb740783f789d4444d3/datahub-frontend/app/auth/AuthUtils.java#L78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/datahub-project/datahub/security/advisories/GHSA-3974-hxjh-m3jj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0780",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-11T02:20:44.427",
      "lastModified" : "2024-11-21T07:37:48.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agentejo:cockpit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.9",
            "matchCriteriaId" : "F50AE82B-1781-464E-8FF8-5DF13D29901A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cockpit-hq/cockpit/commit/8450bdf7e1dc23e9d88adf30a2aa9101c0c41720",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/801efd0b-404b-4670-961a-12a986252fa4",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cockpit-hq/cockpit/commit/8450bdf7e1dc23e9d88adf30a2aa9101c0c41720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/801efd0b-404b-4670-961a-12a986252fa4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0781",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-11T13:15:19.230",
      "lastModified" : "2024-11-21T07:37:48.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects the function query of the file removeOrder.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220624."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canteen_management_system_project:canteen_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1475853-D5FD-4C3B-B1D0-67131503A745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/128986083",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220624",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220624",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/128986083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0127",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-02-11T18:15:11.327",
      "lastModified" : "2025-03-24T15:15:14.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability in the firmware_update command, in the device's restricted telnet interface, allows an authenticated attacker to execute arbitrary commands as root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dwl-2600ap_firmware:4.2.0.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63784219-A865-4D96-AE61-C70BA1EE9BB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dwl-2600ap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDA498E6-6804-4469-9FCD-A09CB7A8B178"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-1",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0782",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-11T18:15:11.393",
      "lastModified" : "2024-11-21T07:37:48.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS of the file /bin/httpd. The manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220640."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac23_firmware:16.03.07.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4412AD8E-3BDA-4344-A663-28F7F72A8119"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B730D9E-D9B0-480B-9941-7C48C56BBE94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jingping911/tendaAC23overflow/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220640",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220640",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jingping911/tendaAC23overflow/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0783",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-11T18:15:11.480",
      "lastModified" : "2024-11-21T07:37:48.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in EcShop 4.1.5. It has been classified as critical. This affects an unknown part of the file /ecshop/admin/template.php of the component PHP File Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-220641 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopex:ecshop:4.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD6705D1-6449-4965-94CB-FE08E169D848"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jingping911/exshopbug/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220641",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220641",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jingping911/exshopbug/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0661",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-02-12T04:15:19.233",
      "lastModified" : "2025-12-03T15:01:32.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2022.3.1.0",
            "versionEndExcluding" : "2022.3.10.0",
            "matchCriteriaId" : "201530E4-BF8B-475F-8585-BE96729B22D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0002",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20076",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-02-12T04:15:19.287",
      "lastModified" : "2024-11-21T07:40:29.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters that are passed in for activation of an application. An attacker could exploit this vulnerability by deploying and activating an application in the Cisco IOx application hosting environment with a crafted activation payload file. A successful exploit could allow the attacker to execute arbitrary commands as root on the underlying host operating system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-233"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:cisco:ic3000_industrial_compute_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.2",
            "matchCriteriaId" : "C0123C40-42E9-4DA1-A333-1249D52FE05F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:iox:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41E74F18-C63E-4A10-99C2-51907E199BC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.6.5",
            "matchCriteriaId" : "9F708D7F-6673-489E-9B2D-796AF552D7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.9.0",
            "versionEndExcluding" : "17.9.2",
            "matchCriteriaId" : "D9FC38B1-5F12-496F-8843-F119DB2D684C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC868609-83CD-4FBA-A842-18CD4F07D8D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cgr1240_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.0.1",
            "matchCriteriaId" : "F343CE69-D1C6-4CB3-97CF-AC480FA6802D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cgr1240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1FE609C-8021-48C8-AF15-F176D82A9B23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cgr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.0.1",
            "matchCriteriaId" : "F17050EB-5D47-4287-A2E7-518A811157A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cgr1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C73AA-7DBA-43BD-819B-1CA5228CFB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ir510_wpan_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.10.0.1",
            "matchCriteriaId" : "2CF8D8F3-C04A-4A32-B7DF-7649506B83D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ir510_wpan:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29EAD2C-C9A3-4129-8C4F-1C0963826FA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:829_industrial_integrated_services_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.9\\(3\\)",
            "matchCriteriaId" : "94A8B23B-89DC-4BD2-AC3B-E73169F42F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:829_industrial_integrated_services_router_firmware:15.9\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E5C422-7131-49C5-B05C-11CDC97373BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:829_industrial_integrated_services_router_firmware:15.9\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313940F2-909D-4BAB-BC1C-CA9419F4E9A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:829_industrial_integrated_services_router_firmware:15.9\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "887AA4F7-7A63-4FAF-89E9-B992FF8C0F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:829_industrial_integrated_services_router_firmware:15.9\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EEADC2-0938-48F8-8ED4-7A2643B6BAE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:829_industrial_integrated_services_router_firmware:15.9\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A79FD2A7-F49F-40CA-B721-AD222DD16CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:829_industrial_integrated_services_router_firmware:15.9\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE95BEF3-E236-4B08-A3C5-210A094AB41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:829_industrial_integrated_services_router_firmware:15.9\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D097582-7C84-4899-93C4-B16692A41302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:829_industrial_integrated_services_router_firmware:15.9\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86891B33-4B66-48C1-933B-75187404B129"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:829_industrial_integrated_services_router_firmware:15.9\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "372E3DB5-5296-4353-9A2B-0A8040F07BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:829_industrial_integrated_services_router_firmware:15.9\\(3\\)m6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FCE500-AD08-40CE-8956-2997C9200B41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:829_industrial_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "398D63B0-F15B-409B-AFBC-DE6C94FAF815"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:807_industrial_integrated_services_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.9\\(3\\)",
            "matchCriteriaId" : "8FB92E03-2956-4AC1-831F-152FCBA01092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:807_industrial_integrated_services_router_firmware:15.9\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA00C2A-CFC0-498B-8EA7-989FA2B78A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:807_industrial_integrated_services_router_firmware:15.9\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308D1626-255D-4266-B2E1-B6D34D7D8881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:807_industrial_integrated_services_router_firmware:15.9\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA3B170E-B248-4E9E-968B-A6320AAF3601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:807_industrial_integrated_services_router_firmware:15.9\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20439B8-530E-4C49-AFBE-5AFAC95BA994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:807_industrial_integrated_services_router_firmware:15.9\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA253BF-10DF-4819-A165-9E9049B14D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:807_industrial_integrated_services_router_firmware:15.9\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA057DC-F9D9-4A96-9AAF-86303A4D21A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:807_industrial_integrated_services_router_firmware:15.9\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF79F40-DA37-4A36-95BD-7FDD8D41783F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:807_industrial_integrated_services_router_firmware:15.9\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0DB4FDC-3152-4144-A85B-920577D65BC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:807_industrial_integrated_services_router_firmware:15.9\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "564BC14B-465D-4E3D-A37A-15ED0AE65AA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:807_industrial_integrated_services_router_firmware:15.9\\(3\\)m6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5612E330-FA91-4DA5-9D74-4E262769E388"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:807_industrial_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEA0369-B5B1-41FD-98EE-F7F4EAB9863D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:809_industrial_integrated_services_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.9\\(3\\)",
            "matchCriteriaId" : "FF306339-36B4-4549-8C8D-C7530C575D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:809_industrial_integrated_services_router_firmware:15.9\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA50E936-DFBC-4B6A-9AE3-763CBD2EA2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:809_industrial_integrated_services_router_firmware:15.9\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8088D28-AA6B-4CA8-B120-9993D0C8035F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:809_industrial_integrated_services_router_firmware:15.9\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73D568BB-6646-4366-8D8F-87B829AC018F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:809_industrial_integrated_services_router_firmware:15.9\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352566DD-EF2B-49A0-9CFF-3C67152DE403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:809_industrial_integrated_services_router_firmware:15.9\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E645F0-179C-43F4-9B12-2485B3C1924C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:809_industrial_integrated_services_router_firmware:15.9\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C1A3AB-E91B-4A59-8E49-C7E722A97F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:809_industrial_integrated_services_router_firmware:15.9\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D4FD9E-A505-4819-B57D-458A24C7E0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:809_industrial_integrated_services_router_firmware:15.9\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A299F13E-02DD-490E-96F7-02BF7B21A46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:809_industrial_integrated_services_router_firmware:15.9\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD17542-1D24-4D1B-A123-B773BA66326E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:809_industrial_integrated_services_router_firmware:15.9\\(3\\)m6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5F1604-4189-4585-8E94-0BD1F02A125C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:809_industrial_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4558F1-B87C-439F-AF8F-C19AACAB80E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-8whGn5dL",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-8whGn5dL",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0784",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-12T08:15:10.200",
      "lastModified" : "2025-03-07T14:49:58.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. Affected is an unknown function of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220644."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mayurik:best_online_news_portal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4003A826-E9DE-4786-B11B-3630A11CA41A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220644",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220644",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/V62MSWhLGL4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/V62MSWhLGL4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0785",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-12T08:15:10.310",
      "lastModified" : "2025-03-07T14:49:58.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file check_availability.php. The manipulation of the argument username leads to exposure of sensitive information through data queries. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-220645 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-202"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mayurik:best_online_news_portal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4003A826-E9DE-4786-B11B-3630A11CA41A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.220645",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220645",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/n_BfBlsUIN8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/n_BfBlsUIN8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0786",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-12T14:15:11.197",
      "lastModified" : "2024-11-21T07:37:49.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.11",
            "matchCriteriaId" : "0CADCF40-01A2-41DD-B454-4F5946570CA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/ce676eb9e9d8cb7864f36ee124e838b1ad15415f",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/8c74ccab-0d1d-4c6b-a0fa-803aa65de04f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/ce676eb9e9d8cb7864f36ee124e838b1ad15415f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/8c74ccab-0d1d-4c6b-a0fa-803aa65de04f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0787",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-12T14:15:11.293",
      "lastModified" : "2024-11-21T07:37:50.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.11",
            "matchCriteriaId" : "0CADCF40-01A2-41DD-B454-4F5946570CA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/b76d58321a7a595eeaf4f7a30403ca6cd8506612",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/87397c71-7b84-4617-a66e-fa6c73be9024",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/b76d58321a7a595eeaf4f7a30403ca6cd8506612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/87397c71-7b84-4617-a66e-fa6c73be9024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0788",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-12T14:15:11.380",
      "lastModified" : "2025-03-21T19:15:40.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.11",
            "matchCriteriaId" : "0CADCF40-01A2-41DD-B454-4F5946570CA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/77b42b9d0be3990ee7389207a71528b304b03039",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/808d5452-607c-4af1-812f-26c49faf3e61",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/77b42b9d0be3990ee7389207a71528b304b03039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/808d5452-607c-4af1-812f-26c49faf3e61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://huntr.com/bounties/808d5452-607c-4af1-812f-26c49faf3e61",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0789",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-12T14:15:11.467",
      "lastModified" : "2025-03-21T19:15:40.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.11",
            "matchCriteriaId" : "0CADCF40-01A2-41DD-B454-4F5946570CA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/40515c74815ace394ab23c6c19cbb33fd49059cb",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d9375178-2f23-4f5d-88bd-bba3d6ba7cc5",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/40515c74815ace394ab23c6c19cbb33fd49059cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d9375178-2f23-4f5d-88bd-bba3d6ba7cc5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://huntr.com/bounties/d9375178-2f23-4f5d-88bd-bba3d6ba7cc5",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0790",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-12T14:15:11.547",
      "lastModified" : "2024-11-21T07:37:50.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.11",
            "matchCriteriaId" : "0CADCF40-01A2-41DD-B454-4F5946570CA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/f34d84dfe551ecdd675916e45cc0606e04a0734e",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/06af150b-b481-4248-9a48-56ded2814156",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/f34d84dfe551ecdd675916e45cc0606e04a0734e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/06af150b-b481-4248-9a48-56ded2814156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0791",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-12T14:15:11.637",
      "lastModified" : "2025-03-21T19:15:40.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.11",
            "matchCriteriaId" : "0CADCF40-01A2-41DD-B454-4F5946570CA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/26663efcb0b67e421e4ecccad8f19e7106bb03ce",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7152b340-c6f3-4ac8-9f62-f764a267488d",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/26663efcb0b67e421e4ecccad8f19e7106bb03ce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7152b340-c6f3-4ac8-9f62-f764a267488d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://huntr.com/bounties/7152b340-c6f3-4ac8-9f62-f764a267488d",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0792",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-12T14:15:11.720",
      "lastModified" : "2024-11-21T07:37:50.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.11",
            "matchCriteriaId" : "0CADCF40-01A2-41DD-B454-4F5946570CA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/d8964568d69488de02f0a0a58acc822eeb5c3cb1",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/9e21156b-ab1d-4c60-88ef-8c9f3e2feb7f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/d8964568d69488de02f0a0a58acc822eeb5c3cb1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/9e21156b-ab1d-4c60-88ef-8c9f3e2feb7f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0793",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-12T14:15:11.803",
      "lastModified" : "2024-11-21T07:37:50.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.11",
            "matchCriteriaId" : "0CADCF40-01A2-41DD-B454-4F5946570CA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/00c04093c671607ee06cdfd670070809460f9547",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/b3881a1f-2f1e-45cb-86f3-735f66e660e9",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/00c04093c671607ee06cdfd670070809460f9547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/b3881a1f-2f1e-45cb-86f3-735f66e660e9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0794",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-12T14:15:11.890",
      "lastModified" : "2025-03-21T19:15:41.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.11",
            "matchCriteriaId" : "0CADCF40-01A2-41DD-B454-4F5946570CA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/edf0f6f90d4deaf46b4fd97ae92f16c1e10a2635",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/949975f1-271d-46aa-85e5-1a013cdb5efb",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/edf0f6f90d4deaf46b4fd97ae92f16c1e10a2635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/949975f1-271d-46aa-85e5-1a013cdb5efb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://huntr.com/bounties/949975f1-271d-46aa-85e5-1a013cdb5efb",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0680",
      "sourceIdentifier" : "security@yugabyte.com",
      "published" : "2023-02-12T21:15:10.820",
      "lastModified" : "2023-11-07T04:01:11.700",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22345",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-13T02:21:06.737",
      "lastModified" : "2025-03-21T19:15:43.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bound write vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process when out of specification errors are detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.1.4",
            "matchCriteriaId" : "90B9B99A-ABA6-40C6-8A4E-8422096F0057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:0.1.1.4:build01:*:*:*:*:*:*",
            "matchCriteriaId" : "8925669F-2A1C-440A-A685-1438A5C17BDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU98917488/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202302035233/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU98917488/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202302035233/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22346",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-13T02:21:06.827",
      "lastModified" : "2025-03-21T19:15:43.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing template information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.1.4",
            "matchCriteriaId" : "90B9B99A-ABA6-40C6-8A4E-8422096F0057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:0.1.1.4:build01:*:*:*:*:*:*",
            "matchCriteriaId" : "8925669F-2A1C-440A-A685-1438A5C17BDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU98917488/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202302035233/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU98917488/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202302035233/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22347",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-13T02:21:06.933",
      "lastModified" : "2025-03-21T19:15:43.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing file structure information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.1.4",
            "matchCriteriaId" : "90B9B99A-ABA6-40C6-8A4E-8422096F0057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:0.1.1.4:build01:*:*:*:*:*:*",
            "matchCriteriaId" : "8925669F-2A1C-440A-A685-1438A5C17BDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU98917488/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202302035233/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU98917488/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202302035233/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22349",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-13T02:21:07.030",
      "lastModified" : "2025-03-21T15:15:40.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing screen management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.1.4",
            "matchCriteriaId" : "90B9B99A-ABA6-40C6-8A4E-8422096F0057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:0.1.1.4:build01:*:*:*:*:*:*",
            "matchCriteriaId" : "8925669F-2A1C-440A-A685-1438A5C17BDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU98917488/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202302035233/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU98917488/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202302035233/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22350",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-13T02:21:07.137",
      "lastModified" : "2025-03-21T19:15:43.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing parts management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.1.4",
            "matchCriteriaId" : "90B9B99A-ABA6-40C6-8A4E-8422096F0057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:0.1.1.4:build01:*:*:*:*:*:*",
            "matchCriteriaId" : "8925669F-2A1C-440A-A685-1438A5C17BDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU98917488/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202302035233/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU98917488/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202302035233/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22353",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-13T02:21:07.217",
      "lastModified" : "2025-03-21T19:15:44.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing control management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.1.4",
            "matchCriteriaId" : "90B9B99A-ABA6-40C6-8A4E-8422096F0057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:0.1.1.4:build01:*:*:*:*:*:*",
            "matchCriteriaId" : "8925669F-2A1C-440A-A685-1438A5C17BDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU98917488/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202302035233/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU98917488/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202302035233/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22360",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-13T02:21:07.293",
      "lastModified" : "2025-03-21T19:15:44.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after free vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process even when an error was detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.1.1.4",
            "matchCriteriaId" : "90B9B99A-ABA6-40C6-8A4E-8422096F0057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:0.1.1.4:build01:*:*:*:*:*:*",
            "matchCriteriaId" : "8925669F-2A1C-440A-A685-1438A5C17BDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU98917488/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202302035233/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU98917488/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202302035233/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22362",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-13T02:21:07.360",
      "lastModified" : "2025-03-21T15:15:40.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information from the log file. Affected products/versions are as follows: SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver.1.0.0, Hong Kong SUSHIRO Ver.3.0.2, Singapore SUSHIRO Ver.2.0.0, and Taiwan SUSHIRO Ver.2.0.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akindo-sushiro:hong_kong_sushiro:3.0.3:*:*:*:*:android:*:*",
            "matchCriteriaId" : "D0406FED-C1A3-479D-9AA7-53B415F70B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akindo-sushiro:singapore_sushiro:2.0.3:*:*:*:*:android:*:*",
            "matchCriteriaId" : "A9ADD771-3484-4E19-A52E-AEE4F8943555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akindo-sushiro:sushiro:4.0.31:*:*:*:*:android:*:*",
            "matchCriteriaId" : "C912C42A-8D56-4197-B5EB-06BDD87EFF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akindo-sushiro:taiwan_sushiro:2.0.3:*:*:*:*:android:*:*",
            "matchCriteriaId" : "21C54BA1-A878-4A70-B16C-20EEF5F3D4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akindo-sushiro:thailand_sushiro:2.0.3:*:*:*:*:android:*:*",
            "matchCriteriaId" : "934D169B-2E13-47F4-BAB1-86BAB82E35B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN84642320/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=hk.co.akindo_sushiro.sushiroapp",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=jp.co.akindo_sushiro.sushiroapp",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=sg.co.akindo_sushiro.sushiroapp",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=th.co.akindo_sushiro.sushiroapp",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=tw.co.akindo_sushiro.sushiroapp",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN84642320/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=hk.co.akindo_sushiro.sushiroapp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=jp.co.akindo_sushiro.sushiroapp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=sg.co.akindo_sushiro.sushiroapp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=th.co.akindo_sushiro.sushiroapp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=tw.co.akindo_sushiro.sushiroapp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22367",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-13T02:21:07.440",
      "lastModified" : "2025-03-21T19:15:44.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify server certificates, which may allow a remote unauthenticated attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ichiranusa:ichiran:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "84839E97-5FE6-482E-BFCF-1D54373429D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ichiranusa:ichiran:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "0E57C5F2-A1BB-4907-B2BF-D7EDD90906EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://apps.apple.com/jp/app/%E4%B8%80%E8%98%AD%E5%85%AC%E5%BC%8F%E3%82%A2%E3%83%97%E3%83%AA/id1118806170",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN11257333/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=jp.co.ichiran.app&hl=ja",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://apps.apple.com/jp/app/%E4%B8%80%E8%98%AD%E5%85%AC%E5%BC%8F%E3%82%A2%E3%83%97%E3%83%AA/id1118806170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN11257333/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=jp.co.ichiran.app&hl=ja",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-13T06:15:11.083",
      "lastModified" : "2025-11-03T20:16:00.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.9.11",
            "matchCriteriaId" : "00C4BB99-DA85-4281-BB94-2AC20FF80DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.2.1",
            "matchCriteriaId" : "BCD4C26A-0823-4EAA-8052-6D6A269308E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2023-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/04/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.phpmyadmin.net/security/PMASA-2023-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23697",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-13T08:15:10.797",
      "lastModified" : "2024-11-21T07:46:40.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1386"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:command_\\|_intel_vpro_out_of_band:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.0",
            "matchCriteriaId" : "28381B52-20D9-4C39-9780-5120DFECF282"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207929/dsa-2023-030",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207929/dsa-2023-030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24572",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-13T08:15:12.337",
      "lastModified" : "2024-11-21T07:48:09.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1386"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:command_\\|_integration_suite_for_system_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.0",
            "matchCriteriaId" : "06BF71B7-2116-404F-AA15-905FA7CF7A4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207931/dsa-2023-032",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000207931/dsa-2023-032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0808",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-13T12:15:11.467",
      "lastModified" : "2024-11-21T07:37:52.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Deye/Revolt/Bosswerk Inverter MW3_15U_5406_1.47/MW3_15U_5406_1.471. It has been rated as problematic. This issue affects some unknown processing of the component Access Point Setting Handler. The manipulation with the input 12345678 leads to use of hard-coded password. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version MW3_16U_5406_1.53 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-220769 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 3.9,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 3.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-259"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:deyeinverter:inverter_firmware:mw3_15u_5406_1.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE9B754F-0502-43C0-A105-B586A59CFE07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:deyeinverter:inverter_firmware:mw3_15u_5406_1.471:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BC56BC-7AC1-4EEF-9C33-E3E5B004EDE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:deyeinverter:inverter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC029D39-994E-4A1C-8E20-B4B1E85472F4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:revolt-power:inverter_firmware:mw3_15u_5406_1.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60232246-8FE3-4CE3-9208-7E3E568C779E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:revolt-power:inverter_firmware:mw3_15u_5406_1.471:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9B91D9B-F89A-4F02-B12A-358A9D462174"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:revolt-power:inverter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975D2DD5-245A-4835-86BC-BED567097279"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bosswerk:inverter_firmware:mw3_15u_5406_1.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E3410F-E68C-46E0-AF50-3A7E95962E70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bosswerk:inverter_firmware:mw3_15u_5406_1.471:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCBF9CAD-FA2D-413E-986C-AC988AEC758A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:bosswerk:inverter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C1D833-293C-42B0-A3B9-479001F8E0F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://heise.de/-7483376",
        "source" : "cna@vuldb.com",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220769",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220769",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://heise.de/-7483376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.220769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0034",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:20.163",
      "lastModified" : "2025-01-14T22:15:25.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JetWidgets For Elementor WordPress plugin before 1.0.14 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crocoblock:jetwidgets_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.13",
            "matchCriteriaId" : "2715D5BD-EF91-46FC-9E73-CAD9BCD35C14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/ffbdb8a1-19c3-45e9-81b0-ad47a0791c4a",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ffbdb8a1-19c3-45e9-81b0-ad47a0791c4a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0060",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:20.240",
      "lastModified" : "2025-03-21T15:15:39.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Responsive Gallery Grid WordPress plugin before 2.3.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:responsive_gallery_grid_project:responsive_gallery_grid:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.3.9",
            "matchCriteriaId" : "8CAD485A-8D74-44B1-B17B-F9108A1633CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/be2fc859-3158-4f06-861d-382381a7551b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/be2fc859-3158-4f06-861d-382381a7551b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0061",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:20.317",
      "lastModified" : "2025-03-21T20:15:14.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Judge.me Product Reviews for WooCommerce WordPress plugin before 1.3.21 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:judge:product_reviews_for_woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.21",
            "matchCriteriaId" : "9C96C868-D853-4FD9-AFB6-961E9B8A8B44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/a1d0d131-c773-487e-88f8-e3d63936fbbb",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/a1d0d131-c773-487e-88f8-e3d63936fbbb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0075",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:20.400",
      "lastModified" : "2025-03-21T20:15:14.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Amazon JS WordPress plugin through 0.10 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazonjs_project:amazonjs:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.10",
            "matchCriteriaId" : "021EC054-14C8-48A4-9693-51BBF49CE50B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/097acd6f-3291-4cdc-a054-4432b6350411",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/097acd6f-3291-4cdc-a054-4432b6350411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0080",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:20.487",
      "lastModified" : "2025-03-21T16:15:15.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Customer Reviews for WooCommerce WordPress plugin before 5.16.0 does not validate one of its shortcode attribute, which could allow users with a contributor role and above to include arbitrary files via a traversal attack. This could also allow them to read non PHP files and retrieve their content. RCE could also be achieved if the attacker manage to upload a malicious image containing PHP code, and then include it via the affected attribute, on a default WP install, authors could easily achieve that given that they have the upload_file capability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cusrev:customer_reviews_for_woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.16.0",
            "matchCriteriaId" : "70E2EB2D-5533-4DE1-81B2-533D8C34A515"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/6b0d63ed-e244-4f20-8f10-a6e0c7ccadd4",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/6b0d63ed-e244-4f20-8f10-a6e0c7ccadd4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0098",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:20.577",
      "lastModified" : "2025-03-21T20:15:14.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple URLs WordPress plugin before 115 does not escape some parameters before using them in various SQL statements used by AJAX actions available by any authenticated users, leading to a SQL injection exploitable by low privilege users such as subscriber."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getlasso:simple_urls:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "115",
            "matchCriteriaId" : "AE1F57FE-9B1C-4B2A-B82D-86FCF6B3486B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/db0b3275-40df-404e-aa8d-53558f0122d8",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/db0b3275-40df-404e-aa8d-53558f0122d8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0099",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:20.660",
      "lastModified" : "2024-11-21T07:36:33.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getlasso:simple_urls:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "115",
            "matchCriteriaId" : "AE1F57FE-9B1C-4B2A-B82D-86FCF6B3486B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/176983/WordPress-Simple-URLs-Cross-Site-Scripting.html",
        "source" : "contact@wpscan.com"
      }, {
        "url" : "https://wpscan.com/vulnerability/fd50f2d6-e420-4220-b485-73f33227e8f8",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/176983/WordPress-Simple-URLs-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wpscan.com/vulnerability/fd50f2d6-e420-4220-b485-73f33227e8f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0151",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:20.743",
      "lastModified" : "2025-03-21T16:15:15.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The uTubeVideo Gallery WordPress plugin before 2.0.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:utubevideo_gallery_project:utubevideo_gallery:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.8",
            "matchCriteriaId" : "2C124F7E-AFB0-4770-92BA-8D80CF77C79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d9fc6f5f-efc1-4e23-899b-e9a49330ed13",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d9fc6f5f-efc1-4e23-899b-e9a49330ed13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0159",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:20.827",
      "lastModified" : "2024-11-21T07:36:39.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system. This may be escalated to RCE using PHP filter chains."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wprealize:extensive_vc_addons_for_wpbakery_page_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.9.1",
            "matchCriteriaId" : "7BDEDE24-2E19-4E7E-9BB7-1562F888FA27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/239ea870-66e5-4754-952e-74d4dd60b809",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/239ea870-66e5-4754-952e-74d4dd60b809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0166",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:20.910",
      "lastModified" : "2025-03-21T16:15:15.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Product Slider for WooCommerce by PickPlugins WordPress plugin before 1.13.42 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pickplugins:product_slider_for_woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.13.42",
            "matchCriteriaId" : "7A44467C-E6D7-4727-8B7E-B8E3D68F70FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/f5d43062-4ef3-4dd1-b916-0127f0016f5c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Technical Description" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f5d43062-4ef3-4dd1-b916-0127f0016f5c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0169",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:20.997",
      "lastModified" : "2025-03-21T18:15:28.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Zoho Forms WordPress plugin before 3.0.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:zoho_forms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "4120268A-5247-461B-B6B2-E87A964E92BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/178d71f2-4666-4f7e-ada5-cb72a50fd663",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/178d71f2-4666-4f7e-ada5-cb72a50fd663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0177",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:21.093",
      "lastModified" : "2025-03-20T20:15:27.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdevart:social_like_box_and_page:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.8.41",
            "matchCriteriaId" : "ACD527D2-C361-4119-8BFF-EEAFEAD934DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/712c2154-37f4-424c-ba3b-26ba6aa95bca",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/712c2154-37f4-424c-ba3b-26ba6aa95bca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0220",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:21.170",
      "lastModified" : "2025-03-21T17:15:37.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Pinpoint Booking System WordPress plugin before 2.9.9.2.9 does not validate and escape one of its shortcode attributes before using it in a SQL statement, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks."
      }, {
        "lang" : "es",
        "value" : "El complemento Pinpoint Booking System de WordPress anterior a 2.9.9.2.9 no valida ni escapa uno de sus atributos de código corto antes de usarlo en una declaración SQL, lo que podría permitir a cualquier usuario autenticado, como un suscriptor, realizar ataques de inyección SQL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pinpoint:pinpoint_booking_system:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.9.9.2.9",
            "matchCriteriaId" : "CC4096F6-FA1C-4A17-B0FB-44A0BA9F15F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d6d976be-31d1-419d-8729-4a36fbd2755c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d6d976be-31d1-419d-8729-4a36fbd2755c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0255",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:21.243",
      "lastModified" : "2025-03-21T16:15:15.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites."
      }, {
        "lang" : "es",
        "value" : "El complemento Enable Media Replace de WordPress anterior a 4.0.2 no impide que los autores carguen archivos arbitrarios al sitio, lo que puede permitirles cargar shells PHP en los sitios afectados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shortpixel:enable_media_replace:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.0.2",
            "matchCriteriaId" : "BF54F621-EBCF-427B-BE0C-EF3462D3A5F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/b0239208-1e23-4774-9b8c-9611704a07a0",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/b0239208-1e23-4774-9b8c-9611704a07a0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0259",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:21.327",
      "lastModified" : "2025-03-21T16:15:16.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber."
      }, {
        "lang" : "es",
        "value" : "El complemento WP Google Review Slider de WordPress anterior a 11.8 no desinfecta ni escapa adecuadamente un parámetro antes de usarlo en una declaración SQL, lo que lleva a una inyección de SQL explotable por usuarios con un rol tan bajo como el de suscriptor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ljapps:wp_google_review_slider:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "11.8",
            "matchCriteriaId" : "87E8593A-8D9B-4B46-8D9F-D2A377A72B05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d3bb0eac-1f4e-4191-8f3b-104a5bb54558",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d3bb0eac-1f4e-4191-8f3b-104a5bb54558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0260",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:21.400",
      "lastModified" : "2025-03-21T18:15:29.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Review Slider WordPress plugin before 12.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber."
      }, {
        "lang" : "es",
        "value" : "El complemento WP Review Slide de WordPress anterior a 12.2 no desinfecta ni escapa adecuadamente un parámetro antes de usarlo en una declaración SQL, lo que lleva a una inyección SQL explotable por usuarios con un rol tan bajo como el de suscriptor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ljapps:wp_review_slider:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "12.2",
            "matchCriteriaId" : "EE793512-1A57-45D7-B333-6C3C77417376"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/9165d46b-2a27-4e83-a096-73ffe9057c80",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/9165d46b-2a27-4e83-a096-73ffe9057c80",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0261",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:21.473",
      "lastModified" : "2025-03-21T16:15:16.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP TripAdvisor Review Slider WordPress plugin before 10.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber."
      }, {
        "lang" : "es",
        "value" : "El complemento WP TripAdvisor Review Slider de WordPress anterior a 10.8 no desinfecta ni escapa adecuadamente un parámetro antes de usarlo en una declaración SQL, lo que lleva a una inyección SQL explotable por usuarios con un rol tan bajo como el de suscriptor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ljapps:wp_tripadvisor_review_slider:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "10.8",
            "matchCriteriaId" : "2B1C29AD-65F0-4170-B559-6DEB45E32FE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/6a3b6752-8d72-4ab4-9d49-b722a947d2b0",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/6a3b6752-8d72-4ab4-9d49-b722a947d2b0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0262",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:21.550",
      "lastModified" : "2025-03-21T20:15:14.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Airbnb Review Slider WordPress plugin before 3.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber."
      }, {
        "lang" : "es",
        "value" : "El complemento WP Airbnb Review Slider de WordPress anterior a 3.3 no desinfecta ni escapa adecuadamente un parámetro antes de usarlo en una declaración SQL, lo que lleva a una inyección de SQL explotable por usuarios con un rol tan bajo como el de suscriptor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ljapps:wp_airbnb_review_slider:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.3",
            "matchCriteriaId" : "A776D5E7-BDF3-4B63-A8DC-1AA9EF437FE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5d8c28ac-a46c-45d3-acc9-2cd2e6356ba2",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5d8c28ac-a46c-45d3-acc9-2cd2e6356ba2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0263",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:21.630",
      "lastModified" : "2024-11-21T07:36:51.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Yelp Review Slider WordPress plugin before 7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber."
      }, {
        "lang" : "es",
        "value" : "El complemento WP Yelp Review Slider de WordPress anterior a 7.1 no desinfecta ni escapa adecuadamente un parámetro antes de usarlo en una declaración SQL, lo que lleva a una inyección SQL explotable por usuarios con un rol tan bajo como el de suscriptor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ljapps:wp_yelp_review_slider:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "84AD899A-F7D3-4EDE-B7EE-078D06719651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/2b4a6459-3e49-4048-8a9f-d7bb350aa2f6",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/2b4a6459-3e49-4048-8a9f-d7bb350aa2f6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0270",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:21.707",
      "lastModified" : "2025-03-21T15:15:39.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YaMaps for WordPress Plugin WordPress plugin before 0.6.26 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      }, {
        "lang" : "es",
        "value" : "El complemento YaMaps for WordPress de WordPress anterior a 0.6.26 no valida ni escapa algunos de sus atributos de shortcode antes de devolverlos a una página/publicación donde está incrustado el shortcode, lo que podría permitir a los usuarios con el rol de colaborador y superiores realizar ataques de cross-site scripting almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yamaps_project:yamaps:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.6.26",
            "matchCriteriaId" : "68B86502-AA63-4BEE-B4EB-59DB0E793B12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/ca3ca694-54ca-4e7e-82e6-33aa240754e1",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ca3ca694-54ca-4e7e-82e6-33aa240754e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0275",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:21.783",
      "lastModified" : "2025-03-21T16:15:16.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Easy Accept Payments for PayPal WordPress plugin before 4.9.10 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      }, {
        "lang" : "es",
        "value" : "El complemento Easy Accept Payments for PayPal de WordPress anterior a 4.9.10 no valida ni escapa algunos de sus atributos de shortcode antes de devolverlos a una página/publicación donde está incrustado el shortcode, lo que podría permitir a los usuarios con el rol de colaborador y superior realizar ataques de cross-site scripting almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tipsandtricks-hq:easy_accept_payments_for_paypal:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.9.10",
            "matchCriteriaId" : "7C59D2B6-6928-40DF-BF95-86BB004BA019"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/aab5d803-d621-4b12-a901-ff4447334d88",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/aab5d803-d621-4b12-a901-ff4447334d88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0333",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:21.863",
      "lastModified" : "2025-03-21T17:15:37.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      }, {
        "lang" : "es",
        "value" : "El complemento TemplatesNext ToolKit de WordPress anterior a 3.2.9 no valida algunos de sus atributos de código corto antes de usarlos para generar una etiqueta HTML, lo que podría permitir a los usuarios con el rol de colaborador y superior realizar ataques de cross-site scripting almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:templatesnext:templatesnext_toolkit:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.2.9",
            "matchCriteriaId" : "3C167DE3-4E20-48F9-B0AF-E280F07DE2D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e86ff4d5-d549-4c71-b80e-6a9b3bfddbfc",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e86ff4d5-d549-4c71-b80e-6a9b3bfddbfc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0360",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:21.943",
      "lastModified" : "2025-03-20T21:15:16.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Location Weather WordPress plugin before 1.3.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      }, {
        "lang" : "es",
        "value" : "El complemento Location Weather de WordPress anterior a 1.3.4 no valida ni escapa algunas de sus opciones de bloqueo antes de devolverlas a una página/publicación donde está incrustado el bloque, lo que podría permitir a los usuarios con el rol de colaborador y superior realizar un cross-site scripting almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shapedplugin:location_weather:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.4",
            "matchCriteriaId" : "27EE31DE-DC12-4990-AAE5-7135A86C6391"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/ba653457-415f-4ab3-a792-42640b59302b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ba653457-415f-4ab3-a792-42640b59302b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0362",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:22.017",
      "lastModified" : "2025-03-21T18:15:30.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Themify Portfolio Post WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      }, {
        "lang" : "es",
        "value" : "El complemento Themify Portfolio Post de WordPress anterior a 1.2.2 no valida ni escapa algunos de sus atributos de código corto antes de devolverlos a una página/publicación donde está incrustado el código corto, lo que podría permitir a los usuarios con el rol de colaborador y superior realizar un cross-site scripting almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themify:portfolio_post:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.2",
            "matchCriteriaId" : "64C63E75-2D31-4F9F-93C5-DB31CE6CEECD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/95ee3257-cfda-480d-b3f7-28235564cf6d",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/95ee3257-cfda-480d-b3f7-28235564cf6d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0373",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:22.133",
      "lastModified" : "2025-03-21T17:15:37.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Lightweight Accordion WordPress plugin before 1.5.15 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      }, {
        "lang" : "es",
        "value" : "El complemento Lightweight Accordion de WordPress anterior a la versión 1.5.15 no valida ni escapa algunas de sus opciones de bloqueo antes de devolverlas a una página/publicación donde está incrustado el bloque, lo que podría permitir a los usuarios con el rol de colaborador y superior realizar un cross-site scripting almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartwp:lightweight_accordion:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.15",
            "matchCriteriaId" : "708CC77F-284A-4309-99B0-23CD175811D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/fe60ea83-b584-465a-8128-b7358d8da3af",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/fe60ea83-b584-465a-8128-b7358d8da3af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0379",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:22.213",
      "lastModified" : "2025-03-21T15:15:39.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Spotlight Social Feeds WordPress plugin before 1.4.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      }, {
        "lang" : "es",
        "value" : "El complemento Spotlight Social Feeds de WordPress anterior a 1.4.3 no valida ni escapa algunas de sus opciones de bloqueo antes de devolverlas a una página/publicación donde está incrustado el bloque, lo que podría permitir a los usuarios con el rol de colaborador y superiores realizar cross-site scripting almacenado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rebelcode:spotlight_social_feeds:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "DCF34629-4B14-46BA-9A35-75BB8A99B8A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/14b4f0c5-c7b1-4ac4-8c9c-f8c35ca5de4a",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/14b4f0c5-c7b1-4ac4-8c9c-f8c35ca5de4a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0405",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-13T15:15:22.303",
      "lastModified" : "2025-03-21T20:15:14.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts."
      }, {
        "lang" : "es",
        "value" : "El complemento GPT AI Power: Content Writer &amp; ChatGPT &amp; Image Generator &amp; WooCommerce Product Writer &amp; AI Training de WordPress anterior a 1.4.38 no realiza ningún tipo de verificación de privilegios o nonce antes de permitir que los usuarios que han iniciado sesión modifiquen publicaciones arbitrarias."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gptaipower:gpt_ai_power:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.38",
            "matchCriteriaId" : "531C10A4-6F0D-465E-90C5-E65299FD671E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/3ca9ac21-2bce-4480-9079-b4045b261273",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/3ca9ac21-2bce-4480-9079-b4045b261273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0810",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-13T17:15:11.190",
      "lastModified" : "2024-11-21T07:37:52.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de cross-site scripting (XSS) almacenado en el repositorio de GitHub btcpayserver/btcpayserver antes de la versión 1.7.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btcpayserver:btcpayserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.11",
            "matchCriteriaId" : "2EED55F5-3E1E-4557-AD9F-DA03809B4474"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/btcpayserver/btcpayserver/commit/dffa6accb04df7b80bc584dedef22c9297292ce6",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a48414ea-63d9-453c-b3f3-2c927b71ec68",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/commit/dffa6accb04df7b80bc584dedef22c9297292ce6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a48414ea-63d9-453c-b3f3-2c927b71ec68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23948",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-13T17:15:11.347",
      "lastModified" : "2025-03-26T17:06:15.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is vulnerable to SQL injection in `FileContentProvider.kt`. This issue can lead to information disclosure. Two databases, `filelist` and `owncloud_database`, are affected. In version 3.0, the `filelist` database was deprecated. However, injections affecting `owncloud_database` remain relevant as of version 3.0. "
      }, {
        "lang" : "es",
        "value" : "La aplicación ownCloud para Android permite a los usuarios de ownCloud acceder, compartir y editar archivos y carpetas. La versión 2.21.1 de la aplicación ownCloud para Android es vulnerable a la inyección SQL en `FileContentProvider.kt`. Este problema puede dar lugar a la divulgación de información. Dos bases de datos, `filelist` y `owncloud_database`, se ven afectadas. En la versión 3.0, la base de datos `filelist` quedó obsoleta. Sin embargo, las inyecciones que afectan a `owncloud_database` siguen siendo relevantes a partir de la versión 3.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud_client:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "D72DF001-0DD7-4A81-94BE-5261630598A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securitylab.github.com/advisories/GHSL-2022-059_GHSL-2022-060_Owncloud_Android_app/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2022-059_GHSL-2022-060_Owncloud_Android_app/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24804",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-13T17:15:11.487",
      "lastModified" : "2025-03-26T17:34:24.590",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Prior to version 3.0, the app has an incomplete fix for a path traversal issue and is vulnerable to two bypass methods. The bypasses may lead to information disclosure when uploading the app’s internal files, and to arbitrary file write when uploading plain text files (although limited by the .txt extension). Version 3.0 fixes the reported bypasses."
      }, {
        "lang" : "es",
        "value" : "La aplicación ownCloud para Android permite a los usuarios de ownCloud acceder, compartir y editar archivos y carpetas. Antes de la versión 3.0, la aplicación tenía una solución incompleta para un problema de Path Traversal y era vulnerable a dos métodos de omisión. Las omisiones pueden dar lugar a la divulgación de información al cargar los archivos internos de la aplicación y a la escritura arbitraria de archivos al cargar archivos de texto plano (aunque limitado por la extensión .txt). La versión 3.0 corrige las omisiones reportadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owncloud:owncloud_client:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "CC2D17B0-55D5-4AEB-9FCA-C688B0E387E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/377107",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://owncloud.com/security-advisories/oc-sa-2023-001/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2022-059_GHSL-2022-060_Owncloud_Android_app/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/377107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://owncloud.com/security-advisories/oc-sa-2023-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2022-059_GHSL-2022-060_Owncloud_Android_app/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25159",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-13T17:15:11.620",
      "lastModified" : "2024-11-21T07:49:13.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Office is a document collaboration app for the same platform. Nextcloud Server 24.0.x prior to 24.0.8 and 25.0.x prior to 25.0.1, Nextcloud Enterprise Server 24.0.x prior to 24.0.8 and 25.0.x prior to 25.0.1, and Nextcloud Office (Richdocuments) App 6.x prior to 6.3.1 and 7.x prior to 7.0.1 have previews accessible without a watermark. The download should be hidden and the watermark should get applied. This issue is fixed in Nextcloud Server 25.0.1 and 24.0.8, Nextcloud Enterprise Server 25.0.1 and 24.0.8, and  Nextcloud Office (Richdocuments) App 7.0.1 (for 25) and 6.3.1 (for 24). No known workarounds are available."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server es el software de servidor de archivos para Nextcloud, una plataforma de productividad autohospedada, y Nextcloud Office es una aplicación de colaboración de documentos para la misma plataforma. Nextcloud Server 24.0.x anterior a 24.0.8 y 25.0.x anterior a 25.0.1, Nextcloud Enterprise Server 24.0.x anterior a 24.0.8 y 25.0.x anterior a 25.0.1, y aplicación Nextcloud Office (Richdocuments) 6. x anteriores a 6.3.1 y 7.x anteriores a 7.0.1 tienen vistas previas accesibles sin marca de agua. La descarga debe estar oculta y se debe aplicar la marca de agua. Este problema se solucionó en Nextcloud Server 25.0.1 y 24.0.8, Nextcloud Enterprise Server 25.0.1 y 24.0.8 y la aplicación Nextcloud Office (Richdocuments) 7.0.1 (para 25) y 6.3.1 (para 24). No hay workarounds disponibles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.4",
            "versionEndIncluding" : "24.0.8",
            "matchCriteriaId" : "0EC3BCB8-9233-44FA-BEE6-8A98EB08BF1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:24.0.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE1DAA2-DBA5-4473-B810-F84EEA2EC9F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:25.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFBE98C-443B-4B5A-BAA2-CC3050D91C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:richdocuments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.3.1",
            "matchCriteriaId" : "DA73B02C-ACEF-4967-93EA-752216FE2BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:richdocuments:7.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9DF380-F71A-48EB-A1F9-896DF8CCC54D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/richdocuments/pull/2579",
        "source" : "security-advisories@github.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-92g2-h5jv-jjmg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/34799",
        "source" : "security-advisories@github.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1745755",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/richdocuments/pull/2579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-92g2-h5jv-jjmg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/34799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1745755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-13T18:15:11.257",
      "lastModified" : "2025-03-21T19:15:44.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download arbitrary files, due to insufficient restriction of URL parameters. A successful exploit could allow access to sensitive information."
      }, {
        "lang" : "es",
        "value" : "El componente ccmweb del servidor Mitel MiContact Center Business 9.2.2.0 a 9.4.1.0 podría permitir a un atacante no autenticado descargar archivos arbitrarios, debido a una restricción insuficiente de los parámetros de URL. Un exploit exitoso podría permitir el acceso a información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-839"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitel:micontact_center_business:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.2.0",
            "versionEndExcluding" : "9.4.2.0",
            "matchCriteriaId" : "E9C0D195-A519-4087-95AA-271B01668022"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mitel.com/support/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mitel.com/support/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23551",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-13T18:15:11.400",
      "lastModified" : "2024-11-21T07:46:24.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\nControl By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to remotely execute arbitrary code. \n\n"
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Control By Web X-600M ejecutan scripts Lua y son vulnerables a la inyección de código, lo que podría permitir a un atacante ejecutar código arbitrario de forma remota."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:controlbyweb:x-600m_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.00",
            "matchCriteriaId" : "857AC101-F50D-4BEB-8A12-A9E3EB39C1FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:controlbyweb:x-600m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C59AD6-87A3-49EE-AA08-44366E9B4712"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23553",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-13T18:15:11.550",
      "lastModified" : "2024-11-21T07:46:24.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nControl By Web X-400 devices are vulnerable to a cross-site scripting attack, which could result in private and session information being transferred to the attacker. \n\n"
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Control By Web X-400 son vulnerables a un ataque de cross-site scripting, lo que podría resultar en la transferencia de información privada y de sesión al atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:controlbyweb:x-400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8",
            "matchCriteriaId" : "CB2FB389-E58D-41F4-B0AA-7BCC6EAE2E9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:controlbyweb:x-400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4B9444-638E-4F05-A5E5-A689522B7D0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24619",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-13T19:15:11.170",
      "lastModified" : "2025-03-21T18:15:31.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redpanda before 22.3.12 discloses cleartext AWS credentials. The import functionality in the rpk binary logs an AWS Access Key ID and Secret in cleartext to standard output, allowing a local user to view the key in the console, or in Kubernetes logs if stdout output is collected. The fixed versions are 22.3.12, 22.2.10, and 22.1.12."
      }, {
        "lang" : "es",
        "value" : "Redpanda antes del 22.3.12 divulga las credenciales de AWS en texto plano. La funcionalidad de importación en el binario rpk registra un ID de clave de acceso de AWS y un secreto en texto plano en la salida estándar, lo que permite a un usuario local ver la clave en la consola o en los registros de Kubernetes si se recopila la salida estándar. Las versiones fijas son 22.3.12, 22.2.10 y 22.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redpanda:redpanda:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.1.0",
            "versionEndExcluding" : "22.1.12",
            "matchCriteriaId" : "4A490345-C476-45B6-B5F8-9C655D972701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redpanda:redpanda:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.2.0",
            "versionEndExcluding" : "22.2.10",
            "matchCriteriaId" : "E28A2FDE-6433-4226-8C51-D691F15B4421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redpanda:redpanda:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.3.0",
            "versionEndExcluding" : "22.3.12",
            "matchCriteriaId" : "590B94B7-4DA5-48BE-A406-77A44C5106DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redpanda-data/redpanda/pull/8339",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/redpanda-data/redpanda/pull/8339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-13T20:15:10.897",
      "lastModified" : "2025-03-21T18:15:31.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que ureport v2.2.9 contiene una vulnerabilidad de Directory Traversal a través de la función de eliminación que permite eliminar archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ureport_project:ureport:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CADB94-5E0B-48FD-8430-516DAF5FD34C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ureport.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Venus-WQLab/bug_report/blob/main/ureport/ureport-cve-2023-24188.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/youseries/ureport",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://ureport.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Venus-WQLab/bug_report/blob/main/ureport/ureport-cve-2023-24188.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/youseries/ureport",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-13T20:15:10.973",
      "lastModified" : "2025-11-03T18:14:23.513",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring."
      }, {
        "lang" : "es",
        "value" : "Ruckus Wireless Admin hasta la versión 10.4 permite la ejecución remota de código a través de una solicitud HTTP GET no autenticada, como lo demuestra /forms/doLogin?login_username=admin&amp;password=password$(curl substring."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-05-12",
      "cisaActionDue" : "2023-06-02",
      "cisaRequiredAction" : "Apply updates per vendor instructions or disconnect product if it is end-of-life.",
      "cisaVulnerabilityName" : "Multiple Ruckus Wireless Products CSRF and RCE Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4",
            "matchCriteriaId" : "7580FF26-730D-4029-A33B-3A3105E5BC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.0.0.9240",
            "matchCriteriaId" : "ED4CD2B3-C3CE-437F-A01C-5A50B900FC4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:e510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF5C92C-C889-4732-BB00-E6D55613E410"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:h320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "282C3A1D-711C-4415-B9BE-A9B518204AEB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:h350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19E1647-DFDD-4AE9-8118-B6E27796F158"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:h510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1FAB48-786A-4FB3-AB6D-3118E94E68C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:h550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AECE922-479C-4C3E-9905-1C742DCE9769"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:m510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AE7200-4090-4B81-A22F-B8553A014D21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D3129E-4C02-484F-96B6-59D76F787D21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93CE3224-85D2-4039-8F24-BB503DFD42C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728B95F9-BD5B-4C0B-ADBD-0B30AAC868EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B2E8CC-EACE-4A80-9EB1-DADAB8034415"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "215024F9-C68E-4919-9FD5-215CF900A830"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4244947C-538E-4B83-B4F4-3DD4F3C22E83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951BDA12-0294-472A-9292-F60AC6D4292B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95884E9-C6AF-4106-A178-9274AD27EF65"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFDAF0A-9F5D-4E34-805E-6F27103AAA32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB28A5E0-6F42-4133-B1D3-1D0116079094"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA49CB45-1196-4AD7-8AB6-C5593BBF015F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r760:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C50256D2-E89C-4992-B296-7F686C4A0E66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A244DE5-A9B3-45BE-8AD1-154546F4F1F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:sz-144:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA45AAC-D228-4F8B-AAD8-A41395C79DD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:sz100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6E5537-CC32-46A3-BCA3-52B011E13564"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:sz300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7CB834-555F-4259-AD12-DB56F42CA907"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t310c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB69C4E-2B4F-4F61-8A65-9BA0354F33E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t310d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D3E8C6-4676-4B74-A252-132A26670C64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t310n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED4C9B4-7F70-4059-8592-FD3F034160C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t310s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72378D4B-ADB5-4DE5-BB92-1778BDFD61FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t350c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E561E73-06B4-49E3-A24C-CCDFA0D278EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t350d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271E8C2A-5AD8-47B7-B6C5-D996FD135412"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t350se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1151656-21F9-442F-93AF-3E12B497CEF1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "210D55AB-9305-4D0B-B9F0-47889D37373B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40B9489-D999-4355-953E-36A7F8DEF299"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t710s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CFF0772-D853-4781-B326-E3BDEAC78EE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C15AA25-82B2-4C02-8361-E8F6179B525A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t750se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1DE3AD-CA13-44CE-ACF1-3DE2D6C691BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t811-cm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0680FEA-592F-4610-85D3-D52335906B13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4",
            "matchCriteriaId" : "7580FF26-730D-4029-A33B-3A3105E5BC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.2.0.2064",
            "matchCriteriaId" : "E19ED3EC-4946-4CB1-9227-FC0B500488B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:e510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF5C92C-C889-4732-BB00-E6D55613E410"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:h320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "282C3A1D-711C-4415-B9BE-A9B518204AEB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:h510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1FAB48-786A-4FB3-AB6D-3118E94E68C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:m510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AE7200-4090-4B81-A22F-B8553A014D21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D3129E-4C02-484F-96B6-59D76F787D21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93CE3224-85D2-4039-8F24-BB503DFD42C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBDBE9C-BE4B-4ED6-AF62-8FE484C519E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B2E8CC-EACE-4A80-9EB1-DADAB8034415"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "215024F9-C68E-4919-9FD5-215CF900A830"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5421B1D7-E630-4BDA-BA34-7DD8D0738DF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4244947C-538E-4B83-B4F4-3DD4F3C22E83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "951BDA12-0294-472A-9292-F60AC6D4292B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95884E9-C6AF-4106-A178-9274AD27EF65"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFDAF0A-9F5D-4E34-805E-6F27103AAA32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB28A5E0-6F42-4133-B1D3-1D0116079094"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA49CB45-1196-4AD7-8AB6-C5593BBF015F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A244DE5-A9B3-45BE-8AD1-154546F4F1F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0511674E-59A6-427C-A265-B277D84DE301"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t301n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB7A43E-F5F1-465A-841F-05214EDA6833"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t301s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68C4D9AC-5B1C-4066-8216-3F7127C3CC64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t310c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB69C4E-2B4F-4F61-8A65-9BA0354F33E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t310d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D3E8C6-4676-4B74-A252-132A26670C64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t310n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED4C9B4-7F70-4059-8592-FD3F034160C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t310s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72378D4B-ADB5-4DE5-BB92-1778BDFD61FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t504:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB7F76C-637E-4194-B7CD-36C0EB5C84D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "210D55AB-9305-4D0B-B9F0-47889D37373B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A40B9489-D999-4355-953E-36A7F8DEF299"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t710s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CFF0772-D853-4781-B326-E3BDEAC78EE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C15AA25-82B2-4C02-8361-E8F6179B525A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t750se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E1DE3AD-CA13-44CE-ACF1-3DE2D6C691BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t811-cm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0680FEA-592F-4610-85D3-D52335906B13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4",
            "matchCriteriaId" : "7580FF26-730D-4029-A33B-3A3105E5BC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.2.0.795",
            "matchCriteriaId" : "D8EFC8C1-5D6B-44AB-919A-FD7365E666EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:h500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE5491D-89A5-4690-8374-0CD27852CCB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7FDEC42-0D72-4841-B0FE-B0B0B00B6557"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7549541B-0F1A-45F8-8E5A-8034B00C2D2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4",
            "matchCriteriaId" : "7580FF26-730D-4029-A33B-3A3105E5BC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.1.0.1274",
            "matchCriteriaId" : "B3679017-4730-49AF-8CE7-35B82F504EA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:r560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AADED848-CAF5-4EF6-BAC6-6BE35CCE7815"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4",
            "matchCriteriaId" : "7580FF26-730D-4029-A33B-3A3105E5BC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:ruckus_smartzone_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.1.3",
            "matchCriteriaId" : "3DC1AFF4-766D-4DFF-B7A0-39EFE686F33B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:sz-144:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA45AAC-D228-4F8B-AAD8-A41395C79DD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:sz300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7CB834-555F-4259-AD12-DB56F42CA907"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4",
            "matchCriteriaId" : "7580FF26-730D-4029-A33B-3A3105E5BC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:ruckus_smartzone_firmware:6.1.0.0.935:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98787AFD-705A-4ECA-A735-1412ED55B71C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:sz-144:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA45AAC-D228-4F8B-AAD8-A41395C79DD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:sz100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6E5537-CC32-46A3-BCA3-52B011E13564"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:sz300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7CB834-555F-4259-AD12-DB56F42CA907"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4",
            "matchCriteriaId" : "7580FF26-730D-4029-A33B-3A3105E5BC72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:m510-jp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007DE148-E501-4A35-8F10-ACD28FF2819B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:p300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12E3F2DA-3A4B-421A-ACE0-A764B9B57FF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:q410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB66E1A9-D6B5-455F-B6C0-FD2EF45CF509"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:q710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54D44A0E-66C0-4522-90AC-16F7D5738D8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:q910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C949D8-D53C-4B5B-A851-51FAFAB0011D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:t811-cm\\(non-spf\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE9892F-8F72-4D92-B7A2-4B4B41AB8729"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:zd1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86341154-62AA-43A3-9B65-3B95873317C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:zd1100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE17AF8-0965-4D9D-A1A3-40976BDF10C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:zd1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763E2D39-085A-4E8B-BBC1-B0567666FF5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:zd3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E149CEA6-5EF5-4CD6-969F-D5DD33D04744"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:zd5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "640C64BD-EBD1-43D7-AEB9-A51E2069BC4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.4",
            "matchCriteriaId" : "7580FF26-730D-4029-A33B-3A3105E5BC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:ruckus_smartzone_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.1.3.1695",
            "matchCriteriaId" : "E2D11729-5815-46AC-A2B6-E1570FDBED8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:sz-144-federal:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C68AA80-C987-4B00-AB39-4D14910EB961"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruckuswireless:sz300-federal:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEAC3DF-557E-4070-A23E-524A4A3B9226"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.ruckuswireless.com/security_bulletins/315",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.ruckuswireless.com/security_bulletins/315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-25717",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-13T20:15:11.040",
      "lastModified" : "2025-06-19T21:15:22.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ConnectWise Control through 22.9.10032 (formerly known as ScreenConnect), after an executable file is signed, additional instructions can be added without invalidating the signature, such as instructions that result in offering the end user a (different) attacker-controlled executable file. It is plausible that the end user may allow the download and execution of this file to proceed. There are ConnectWise Control configuration options that add mitigations."
      }, {
        "lang" : "es",
        "value" : "En ConnectWise Control hasta 22.9.10032 (anteriormente conocido como ScreenConnect), después de firmar un archivo ejecutable, se pueden agregar instrucciones adicionales sin invalidar la firma, como instrucciones que dan como resultado ofrecer al usuario final un archivo ejecutable (diferente) controlado por el atacante. Es posible que el usuario final permita que se realice la descarga y ejecución de este archivo. Hay opciones de configuración de ConnectWise Control que agregan mitigaciones. NOTA: esto puede superponerse a CVE-2023-25719. NOTA: la posición del proveedor es que esta supuesta vulnerabilidad representa una \"falta fundamental de comprensión del comportamiento de firma del código Authenticode\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connectwise:control:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "22.9.10032",
            "matchCriteriaId" : "E662D8E7-CE49-4030-91E7-8D132A25F9C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cybir.com/2022/cve/connectwise-control-dns-spoofing-poc/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://m.youtube.com/watch?v=fbNVUgmstSc&pp=0gcJCf0Ao7VqN5tD",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.connectwise.com/blog/cybersecurity/the-importance-of-responsible-security-disclosures",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cybir.com/2022/cve/connectwise-control-dns-spoofing-poc/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.connectwise.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.connectwise.com/blog/cybersecurity/the-importance-of-responsible-security-disclosures",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.huntress.com/blog/clearing-the-air-overblown-claims-of-vulnerabilities-exploits-severity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-13T20:15:11.110",
      "lastModified" : "2025-06-19T21:15:22.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ConnectWise Control before 22.9.10032 (formerly known as ScreenConnect) fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter. This results in reflected data and injection of malicious code into a downloaded executable. The executable can be used to execute malicious queries or as a denial-of-service vector. NOTE: this CVE Record is only about the parameters, such as the h parameter (this CVE Record is not about the separate issue of signed executable files that are supposed to have unique configurations across customers' installations)."
      }, {
        "lang" : "es",
        "value" : "ConnectWise Control anterior a 22.9.10032 (anteriormente conocido como ScreenConnect) no puede validar los parámetros proporcionados por el usuario, como el parámetro h de Bin/ConnectWiseControl.Client.exe. Esto da como resultado datos reflejados e inyección de código malicioso en un ejecutable descargado. El ejecutable se puede utilizar para ejecutar consultas maliciosas o como vector de denegación de servicio. NOTA: este registro CVE trata solo de los parámetros, como el parámetro h (este registro CVE no trata sobre la edición separada de archivos ejecutables firmados que se supone que tienen configuraciones únicas en las instalaciones de los clientes)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connectwise:control:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.9.10032",
            "matchCriteriaId" : "E73E1DBA-4FDE-4D67-990C-3001EAA801FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cybir.com/2022/cve/hijacking-connectwise-control-and-ddos/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://m.youtube.com/watch?v=fbNVUgmstSc&pp=0gcJCf0Ao7VqN5tD",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.connectwise.com/blog/cybersecurity/the-importance-of-responsible-security-disclosures",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cybir.com/2022/cve/hijacking-connectwise-control-and-ddos/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.connectwise.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.connectwise.com/blog/cybersecurity/the-importance-of-responsible-security-disclosures",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.huntress.com/blog/clearing-the-air-overblown-claims-of-vulnerabilities-exploits-severity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-13T21:15:14.107",
      "lastModified" : "2025-03-21T19:15:44.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChiKoi v1.0 was discovered to contain a SQL injection vulnerability via the load_file function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chikoi_project:chikoi:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724A9BA2-A7F6-4635-8278-0B043E770606"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/tanhongit/2023/ChiKoi",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/tanhongit/2023/ChiKoi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-13T21:15:14.253",
      "lastModified" : "2025-03-21T19:15:44.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SLIMS v9.5.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /customs/loan_by_class.php?reportView."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims_project:slims:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82750816-DA2D-4A7B-B3D9-2A493A6ADA0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/slims.web.id/SLIMS-9.5.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/slims.web.id/SLIMS-9.5.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-13T21:15:14.370",
      "lastModified" : "2026-03-30T18:15:59.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_food_ordering_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72B0380-7394-4DCF-BC93-3212CA3F4298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Food-Ordering-System-v2.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Food-Ordering-System-v2.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-13T21:15:14.453",
      "lastModified" : "2026-03-30T18:15:59.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_food_ordering_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72B0380-7394-4DCF-BC93-3212CA3F4298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Food-Ordering-System-v2.0/SQLi",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Food-Ordering-System-v2.0/SQLi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-13T21:15:14.563",
      "lastModified" : "2025-03-21T18:15:32.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zstore v6.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /index.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zippy:zstore:6.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36C86FE9-DE81-4F1C-898D-FD42BB90963D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/zippy/zstore-6.6.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/zippy/zstore-6.6.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25160",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-13T21:15:14.673",
      "lastModified" : "2024-11-21T07:49:13.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Mail is an email app for the Nextcloud home server platform. Prior to versions 2.2.1, 1.14.5, 1.12.9, and 1.11.8, an attacker can access the mail box by ID getting the subjects and the first characters of the emails. Users should upgrade to Mail 2.2.1 for Nextcloud 25, Mail 1.14.5 for Nextcloud 22-24, Mail 1.12.9 for Nextcloud 21, or Mail 1.11.8 for Nextcloud 20 to receive a patch. No known workarounds are available."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:mail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.8",
            "matchCriteriaId" : "98CC59D4-0A27-4A47-8CC5-7C97F35F44A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:mail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.9",
            "matchCriteriaId" : "67876199-B11C-4843-94F5-01B9A63D675B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:mail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndExcluding" : "1.14.5",
            "matchCriteriaId" : "624E8C69-26E9-4515-A4AC-83A9CB1CBABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:mail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.2.1",
            "matchCriteriaId" : "96B1291E-89EB-4F5E-ABDE-B0AB7DAB3E13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/mail/pull/7740",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-m45f-r5gh-h6cx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1784681",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/mail/pull/7740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-m45f-r5gh-h6cx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1784681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25161",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-13T21:15:14.957",
      "lastModified" : "2024-11-21T07:49:13.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 25.0.1 24.0.8, and 23.0.12 missing rate limiting on password reset functionality. This could result in service slowdown, storage overflow, or cost impact when using external email services. Users should upgrade to Nextcloud Server 25.0.1, 24.0.8, or 23.0.12 or Nextcloud Enterprise Server 25.0.1, 24.0.8, or 23.0.12 to receive a patch. No known workarounds are available."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.0.12",
            "matchCriteriaId" : "B50151BE-566E-4F7F-BFF5-CDBA5A0AE4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.8",
            "matchCriteriaId" : "7827F3FA-9D17-4915-90CB-B3652E310F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:25.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFBE98C-443B-4B5A-BAA2-CC3050D91C31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-492h-596q-xr2f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/34632",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1691195",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-492h-596q-xr2f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/34632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1691195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25162",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-13T21:15:15.140",
      "lastModified" : "2024-11-21T07:49:13.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to 24.0.8 and 23.0.12 and Nextcloud Enterprise server prior to 24.0.8 and 23.0.12 are vulnerable to server-side request forgery (SSRF). Attackers can leverage enclosed alphanumeric payloads to bypass IP filters and gain SSRF, which would allow an attacker to read crucial metadata if the server is hosted on the AWS platform. Nextcloud Server 24.0.8 and 23.0.2 and Nextcloud Enterprise Server 24.0.8 and 23.0.12 contain a patch for this issue. No known workarounds are available."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.0.12",
            "matchCriteriaId" : "B50151BE-566E-4F7F-BFF5-CDBA5A0AE4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.8",
            "matchCriteriaId" : "7827F3FA-9D17-4915-90CB-B3652E310F0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-mqrx-grp7-244m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/34160",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://hackerone.com/reports/1702864",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-mqrx-grp7-244m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/34160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://hackerone.com/reports/1702864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-13T21:15:15.300",
      "lastModified" : "2025-03-21T16:15:16.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1265"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:10.5.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34EE129E-6AC2-47C2-A994-094F54B03103"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/pimcore/pimCore-10.5.15",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/web-security/csrf/bypassing-samesite-restrictions",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/pimcore/pimCore-10.5.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/web-security/csrf/bypassing-samesite-restrictions",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-13T21:15:15.447",
      "lastModified" : "2025-03-21T15:15:40.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bgERP v22.31 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Search parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bgerp:bgerp:22.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1D60DF5-8EF3-42EE-AF7D-FFE336C7AA1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/bgERP/2023/bgERP-v22.31-Cookie-Session-vulnerability%2BXSS-Reflected",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/kb/issues/00500b01_cookie-manipulation-reflected-dom-based",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/bgERP/2023/bgERP-v22.31-Cookie-Session-vulnerability%2BXSS-Reflected",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/kb/issues/00500b01_cookie-manipulation-reflected-dom-based",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25572",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-13T21:15:15.550",
      "lastModified" : "2024-11-21T07:49:45.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "react-admin is a frontend framework for building browser applications on top of REST/GraphQL APIs. react-admin prior to versions 3.19.12 and 4.7.6, along with ra-ui-materialui prior to 3.19.12 and 4.7.6, are vulnerable to cross-site scripting. All React applications built with react-admin and using the `<RichTextField>` are affected. `<RichTextField>` outputs the field value using `dangerouslySetInnerHTML` without client-side sanitization. If the data isn't sanitized server-side, this opens a possible cross-site scripting (XSS) attack. Versions 3.19.12 and 4.7.6 now use `DOMPurify` to escape the HTML before outputting it with React and `dangerouslySetInnerHTML`. Users who already sanitize HTML data server-side do not need to upgrade. As a workaround, users may replace the `<RichTextField>` by a custom field doing sanitization by hand.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marmelab:ra-ui-materialui:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.9.12",
            "matchCriteriaId" : "6E468540-8158-43F2-A7FF-72D9CE7CDE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marmelab:ra-ui-materialui:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.7.6",
            "matchCriteriaId" : "8C52A15F-0B9F-4E15-AB29-16295BF42E0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marmelab:react-admin:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.9.12",
            "matchCriteriaId" : "FEC7A43C-5BEA-446D-AB0F-E56517457D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marmelab:react-admin:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.7.6",
            "matchCriteriaId" : "280466D9-681F-4DEB-B15E-EAB5B6AD4638"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/marmelab/react-admin/pull/8644",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/marmelab/react-admin/pull/8645",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/marmelab/react-admin/releases/tag/v3.19.12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/marmelab/react-admin/releases/tag/v4.7.6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/marmelab/react-admin/security/advisories/GHSA-5jcr-82fh-339v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/marmelab/react-admin/pull/8644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/marmelab/react-admin/pull/8645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/marmelab/react-admin/releases/tag/v3.19.12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/marmelab/react-admin/releases/tag/v4.7.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/marmelab/react-admin/security/advisories/GHSA-5jcr-82fh-339v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0817",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-13T22:15:13.397",
      "lastModified" : "2024-11-21T07:37:53.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0-dev",
            "matchCriteriaId" : "F3A1B96B-3E09-4DB5-B15E-249D5E6EDEDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/be9f8d395bbd196e3812e9cd80708f06bcc206f7",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/cb730bc5-d79c-4de6-9e57-10e8c3ce2cf3",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/be9f8d395bbd196e3812e9cd80708f06bcc206f7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/cb730bc5-d79c-4de6-9e57-10e8c3ce2cf3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0818",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-13T22:15:13.527",
      "lastModified" : "2024-11-21T07:37:53.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Off-by-one Error in GitHub repository gpac/gpac prior to v2.3.0-DEV."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0-dev",
            "matchCriteriaId" : "F3A1B96B-3E09-4DB5-B15E-249D5E6EDEDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/377ab25f3e502db2934a9cf4b54739e1c89a02ff",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/038e7472-f3e9-46c2-9aea-d6dafb62a18a",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/gpac/gpac/commit/377ab25f3e502db2934a9cf4b54739e1c89a02ff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/038e7472-f3e9-46c2-9aea-d6dafb62a18a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0819",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-13T22:15:13.653",
      "lastModified" : "2024-11-21T07:37:53.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0-dev",
            "matchCriteriaId" : "F3A1B96B-3E09-4DB5-B15E-249D5E6EDEDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/d067ab3ccdeaa340e8c045a0fd5bcfc22b809e8f",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/35793610-dccc-46c8-9f55-6a24c621e4ef",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/gpac/gpac/commit/d067ab3ccdeaa340e8c045a0fd5bcfc22b809e8f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/35793610-dccc-46c8-9f55-6a24c621e4ef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0518",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-02-13T23:15:11.617",
      "lastModified" : "2025-03-21T20:15:15.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "15.6.7",
            "matchCriteriaId" : "BCF07502-8EFF-4609-926F-33B90E584DC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "15.6.7",
            "matchCriteriaId" : "7E17CE19-D47F-4DD2-BB96-14586ABDA9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.7",
            "versionEndExcluding" : "15.7.6",
            "matchCriteriaId" : "8005976E-EF1B-4F9D-B0AE-C1723E781FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.7",
            "versionEndExcluding" : "15.7.6",
            "matchCriteriaId" : "6B9DD4F3-3BDE-4B25-A4C2-B5CFD00139A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.8",
            "versionEndExcluding" : "15.8.1",
            "matchCriteriaId" : "50EA48DD-AC48-40AE-97FE-BC88267418F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.8",
            "versionEndExcluding" : "15.8.1",
            "matchCriteriaId" : "2933E1A4-77CE-4B7D-A612-4A61FD82BFD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0518.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/383082",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1766973",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0518.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/383082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1766973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0795",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-02-13T23:15:11.727",
      "lastModified" : "2025-03-21T19:15:41.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "6E0B7DC1-7265-4D0F-9400-1559C3378D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0795.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/493",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0003/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0795.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0796",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-02-13T23:15:11.857",
      "lastModified" : "2025-03-21T19:15:41.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "6E0B7DC1-7265-4D0F-9400-1559C3378D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0796.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/499",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0003/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0796.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0797",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-02-13T23:15:11.970",
      "lastModified" : "2025-03-21T19:15:41.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "6E0B7DC1-7265-4D0F-9400-1559C3378D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0797.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/495",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0797.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/495",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0798",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-02-13T23:15:12.073",
      "lastModified" : "2025-03-21T19:15:41.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "6E0B7DC1-7265-4D0F-9400-1559C3378D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0798.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/492",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0003/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0798.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0799",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-02-13T23:15:12.170",
      "lastModified" : "2025-03-21T19:15:41.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "6E0B7DC1-7265-4D0F-9400-1559C3378D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0799.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/494",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0003/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0799.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0800",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-02-13T23:15:12.260",
      "lastModified" : "2025-03-21T19:15:41.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "6E0B7DC1-7265-4D0F-9400-1559C3378D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0800.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/496",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0002/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0800.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0801",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-02-13T23:15:12.370",
      "lastModified" : "2025-03-21T19:15:42.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "6E0B7DC1-7265-4D0F-9400-1559C3378D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0801.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/498",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0002/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0801.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0802",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-02-13T23:15:12.467",
      "lastModified" : "2025-03-21T19:15:42.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "6E0B7DC1-7265-4D0F-9400-1559C3378D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0802.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/500",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0002/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0802.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0803",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-02-13T23:15:12.567",
      "lastModified" : "2025-03-21T19:15:42.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "6E0B7DC1-7265-4D0F-9400-1559C3378D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0803.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/501",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0002/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0803.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0804",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-02-13T23:15:12.667",
      "lastModified" : "2025-03-21T15:15:39.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.0",
            "matchCriteriaId" : "6E0B7DC1-7265-4D0F-9400-1559C3378D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0804.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/497",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FBF3UUFSB6NB3NFTQSKOOIZGXJP3T34Z/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230324-0009/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0804.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FBF3UUFSB6NB3NFTQSKOOIZGXJP3T34Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230324-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0814",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-14T02:15:10.453",
      "lastModified" : "2026-04-08T19:18:03.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to sensitive information disclosure via the [user_meta] shortcode in versions up to, and including 3.9.0. This is due to insufficient restriction on sensitive user meta values that can be called via that shortcode. This makes it possible for authenticated attackers, with subscriber-level permissions, and above to retrieve sensitive user meta that can be used to gain access to a high privileged user account. This does require the Usermeta shortcode be enabled to be exploited."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cozmoslabs:profile_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.9.0",
            "matchCriteriaId" : "BCF57CEE-A671-4C7F-B940-591C40E34725"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lana.codes/lanavdb/512e7307-04a5-4d8b-8f79-f75f37784a9f/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2864329%40profile-builder&new=2864329%40profile-builder&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2023/03/vulnerability-patched-in-cozmolabs-profile-builder-plugin-information-disclosure-leads-to-account-takeover/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bbedad66-a5a6-4fb5-b03e-0ecf9fbef19a?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2864329%40profile-builder&new=2864329%40profile-builder&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bbedad66-a5a6-4fb5-b03e-0ecf9fbef19a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-14T02:15:10.907",
      "lastModified" : "2025-03-20T20:15:29.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to /ureport/designer/saveReportFile."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ureport_project:ureport:2.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CADB94-5E0B-48FD-8430-516DAF5FD34C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ureport.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Venus-WQLab/bug_report/blob/main/ureport/ureport-cve-2023-24187.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cgddgc/vulns/blob/main/ureport2-vuln-des.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/youseries/ureport",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://ureport.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Venus-WQLab/bug_report/blob/main/ureport/ureport-cve-2023-24187.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cgddgc/vulns/blob/main/ureport2-vuln-des.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/youseries/ureport",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0655",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2023-02-14T03:15:09.883",
      "lastModified" : "2025-03-20T21:15:16.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes sensitive information about users email addresses."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.0.19.7431",
            "matchCriteriaId" : "59F4EE0A-5F97-47BF-83B2-CEDCFAA6570B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0002",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22370",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-14T03:15:10.367",
      "lastModified" : "2024-11-21T07:44:38.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "vultures@jpcert.or.jp",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent authenticated attacker to inject an arbitrary script. NOTE: This vulnerability only affects products that are no longer supported by the developer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:planex:cs-wmv02g:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14A3ADE-BEA5-4B26-82B8-1491BF5FEAE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:planex:cs-wmv02g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F0DE5E-6B92-4448-B147-36F86815EF73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN98612206/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.planex.co.jp/support/support_end_list.shtml",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN98612206/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.planex.co.jp/support/support_end_list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22375",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-14T03:15:10.453",
      "lastModified" : "2025-03-20T21:15:17.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "vultures@jpcert.or.jp",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker to hijack the authentication and conduct arbitrary operations by having a logged-in user to view a malicious page. NOTE: This vulnerability only affects products that are no longer supported by the developer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:planex:cs-wmv02g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED7E9F1-5D58-4CA2-885F-163FD2DC49A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:planex:cs-wmv02g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F0DE5E-6B92-4448-B147-36F86815EF73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN98612206/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.planex.co.jp/support/support_end_list.shtml",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN98612206/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.planex.co.jp/support/support_end_list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22376",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-14T03:15:10.520",
      "lastModified" : "2025-03-20T21:15:17.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "vultures@jpcert.or.jp",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker to inject arbitrary script to inject an arbitrary script. NOTE: This vulnerability only affects products that are no longer supported by the developer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:planex:cs-wmv02g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED7E9F1-5D58-4CA2-885F-163FD2DC49A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:planex:cs-wmv02g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F0DE5E-6B92-4448-B147-36F86815EF73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN98612206/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.planex.co.jp/support/support_end_list.shtml",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN98612206/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.planex.co.jp/support/support_end_list.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0019",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:10.073",
      "lastModified" : "2024-11-21T07:36:24.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SAP GRC (Process Control) - versions GRCFND_A V1200, GRCFND_A V8100, GRCPINW V1100_700, GRCPINW V1100_731, GRCPINW V1200_750, remote-enabled function module in the proprietary SAP solution enables an authenticated attacker with minimal privileges to access all the confidential data stored in the database. Successful exploitation of this vulnerability can expose user credentials from client-specific tables of the database, leading to high impact on confidentiality.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:grc_process_control:v1100_700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3140DB5-7F34-41E9-AE57-5F190CFF03AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:grc_process_control:v1100_731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1EA640-E36C-4E7C-BB30-DE51ECE11B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:grc_process_control:v1200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322FCC46-6C68-4177-81F5-322365C46BDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:grc_process_control:v1200_750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A26A2F-8F3F-4606-96AE-2CFD3E74FCEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:grc_process_control:v8100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4F55B1-748F-411A-9128-274B43CCE379"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3281724",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3281724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0020",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:10.773",
      "lastModified" : "2024-11-21T07:36:24.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted. On successful exploitation, there could be a high impact on confidentiality and limited impact on integrity of the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2909B78-C7F9-4267-B9A0-B6A1F776EB73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3DF21A-C043-4F60-944D-7ADD6BDDDF51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3263135",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3263135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0024",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:10.917",
      "lastModified" : "2024-11-21T07:36:25.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information or craft a payload which may restrict access to the desired resources, resulting in Cross-Site Scripting vulnerability.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_manager:720:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90B8CED-4299-4FBA-B3A0-0688B855FB6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3265846",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3265846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0025",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:11.060",
      "lastModified" : "2024-11-21T07:36:25.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information or craft a payload which may restrict access to the desired resources.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_manager:720:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90B8CED-4299-4FBA-B3A0-0688B855FB6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3267442",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3267442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23851",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:11.180",
      "lastModified" : "2024-11-21T07:46:57.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files (including web pages) without the proper file format validation. If other users visit the uploaded malicious web page, the attacker may perform actions on behalf of the users without their consent impacting the confidentiality and integrity of the system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_planning_and_consolidation:200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "545A7B0D-B9E5-42AB-A81C-AC3C55E7ACDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_planning_and_consolidation:300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB8F139-1227-4D4B-BDCF-7386D5F39FF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3275841",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3275841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23852",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:11.353",
      "lastModified" : "2024-11-21T07:46:57.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Solution Manager (System Monitoring) - version 720, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_manager:720:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90B8CED-4299-4FBA-B3A0-0688B855FB6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3266751",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3266751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23853",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:11.490",
      "lastModified" : "2024-11-21T07:46:57.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, can craft a link which when clicked by an unsuspecting user can be used to redirect a user to a malicious site which could read or modify some sensitive information or expose the victim to a phishing attack.  Vulnerability has no direct impact on availability.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706FEB9E-3EE9-405E-A8C9-733DAF68AC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC29738-CF17-4E6B-9C9E-879B17F7E001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416C064-BB8A-4230-A761-84A93E017F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72491771-4492-4902-9F0C-CE6A60BAA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421A5354-F764-402B-A3A4-2D746EACEB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:789:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F57219A-C89A-4E49-B933-25ACE71BC884"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:790:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6787B03-7C79-4E13-B681-145AF37A99ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3271227",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3271227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23854",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:11.627",
      "lastModified" : "2024-11-21T07:46:57.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B2522A-B850-4EC2-B2F2-5EBF36801B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706FEB9E-3EE9-405E-A8C9-733DAF68AC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC29738-CF17-4E6B-9C9E-879B17F7E001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3287291",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3287291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23855",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:11.760",
      "lastModified" : "2024-11-21T07:46:58.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Solution Manager - version 720, allows an authenticated attacker to redirect users to a malicious site due to insufficient URL validation. A successful attack could lead an attacker to read or modify the information or expose the user to a phishing attack. As a result, it has a low impact to confidentiality, integrity and availability.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_manager:720:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90B8CED-4299-4FBA-B3A0-0688B855FB6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3270509",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3270509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23856",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:11.860",
      "lastModified" : "2024-11-21T07:46:58.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SAP BusinessObjects Business Intelligence (Web Intelligence user interface) - version 430, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On successful exploitation an attacker can cause a low impact on integrity of the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_objects_business_intelligence_platform:430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB0EFA3-8AD2-42F2-86E1-A62ECF8340E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3263863",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3263863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23858",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:11.980",
      "lastModified" : "2024-11-21T07:46:59.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to insufficient input validation, SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to send a crafted URL to a user, and by clicking the URL, the tricked user accesses SAP and might be directed with the response to somewhere out-side SAP and enter sensitive data. This could cause a limited impact on confidentiality and integrity of the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416C064-BB8A-4230-A761-84A93E017F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72491771-4492-4902-9F0C-CE6A60BAA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421A5354-F764-402B-A3A4-2D746EACEB46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3293786",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3293786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23859",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:12.093",
      "lastModified" : "2024-11-21T07:46:59.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416C064-BB8A-4230-A761-84A93E017F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72491771-4492-4902-9F0C-CE6A60BAA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421A5354-F764-402B-A3A4-2D746EACEB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:789:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F57219A-C89A-4E49-B933-25ACE71BC884"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:790:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6787B03-7C79-4E13-B681-145AF37A99ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3268959",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3268959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23860",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:12.213",
      "lastModified" : "2024-11-21T07:46:59.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to craft a link, which when clicked by an unsuspecting user can be used to redirect a user to a malicious site which could read or modify some sensitive information or expose the victim to a phishing attack.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416C064-BB8A-4230-A761-84A93E017F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72491771-4492-4902-9F0C-CE6A60BAA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421A5354-F764-402B-A3A4-2D746EACEB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:789:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F57219A-C89A-4E49-B933-25ACE71BC884"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:790:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6787B03-7C79-4E13-B681-145AF37A99ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3268959",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3268959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24521",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:12.317",
      "lastModified" : "2024-11-21T07:48:02.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an unauthenticated user to alter the current session of the user by injecting the malicious code over the network and gain access to the unintended data. This may lead to a limited impact on the confidentiality and the integrity of the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C730F7F7-B228-4D3E-BC02-33EE5D695D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE253C97-C802-476B-81FB-BA4FC15B433C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD414F-0C97-4657-BF48-11DA3A83850E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C167C76A-0F85-47F3-A90E-8DA4EA8C3B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF90E047-B917-4C52-8A5B-99BFA094E90D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE99B15-44F0-47A1-AD2F-D92BCCA940F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00F292E-E761-47AA-A82D-456CBA829BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4662F413-B285-4310-AA7C-D8AD60E024DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D5B33D-9FFE-4492-8879-5738CD963D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C50935-7C21-4248-A707-60E08FA860DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4032AD23-8EFE-4A7B-84C3-B658F8F639DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A880DFD9-F853-476C-8D1C-C0B4CEC421A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBA26E7-9DB8-4960-8528-7D382B2C4C9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3269151",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3269151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24522",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:12.423",
      "lastModified" : "2024-11-21T07:48:02.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to insufficient input sanitization, SAP NetWeaver AS ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, allows an unauthenticated user to alter the current session of the user by injecting the malicious code over the network and gain access to the unintended data. This may lead to a limited impact on the confidentiality and the integrity of the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B2522A-B850-4EC2-B2F2-5EBF36801B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706FEB9E-3EE9-405E-A8C9-733DAF68AC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC29738-CF17-4E6B-9C9E-879B17F7E001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3269118",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3269118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24523",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:12.527",
      "lastModified" : "2024-11-21T07:48:02.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker authenticated as a non-admin user with local access to a server port assigned to the SAP Host Agent (Start Service) - versions 7.21, 7.22, can submit a crafted ConfigureOutsideDiscovery request with an operating system command which will be executed with administrator privileges.  The OS command can read or modify any user or system data and can make the system unavailable.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:host_agent:7.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7ED1A15-9AC7-4CC8-9B8E-50D83066E4FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:host_agent:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E135017-1492-49F5-B3ED-F69D5476FB46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3285757",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3285757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24524",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:12.660",
      "lastModified" : "2024-11-21T07:48:03.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to delete the data with a high impact to availability.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana:104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A540DA-F234-4EEA-ADE8-4F6306A86C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s\\/4hana:105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088EF501-76F9-44EC-B8B9-AED6F6096C03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/2985905",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2985905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24525",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:12.770",
      "lastModified" : "2024-11-21T07:48:03.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an authenticated attacker can cause limited impact on confidentiality of the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:7.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE87D61B-2E55-4F32-8837-DD3D77FF7A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314EA6B5-D3E3-4559-A34A-51A6BB4F3E12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B9BEF2-5E40-465B-A728-484B6F9488E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470B27E7-C245-43B3-9ED0-545A06158114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4E90CCA-F2D8-4EB3-A4F5-4705F7F8DB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:7.48:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6CBB62D-FDA3-4A23-9175-B9171EA9CE7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF34241-C022-40FE-AB27-16D8EE537429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6514BD40-D078-46D6-811C-B26E9692EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:8.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1440F085-EB15-4910-8AB8-C72E67B8B39E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:8.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D60B19-8578-40AF-9A09-5D6EB8D2DB40"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4fnd:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A88FFDD-4967-4E81-8E44-3F4A7BCCE943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4fnd:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64D4BFFA-2E36-480B-83BB-199CB765659C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/2788178",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2788178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24528",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:12.870",
      "lastModified" : "2024-11-21T07:48:03.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600,  allows an authenticated attacker to exploit a certain misconfigured application endpoint to view sensitive data. This endpoint is normally exposed over the network and successful exploitation can lead to exposure of data like travel documents.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:fiori:600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E084A77-5779-43D4-ACDD-97AFF7499A46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3290901",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3290901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24529",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:12.977",
      "lastModified" : "2024-11-21T07:48:03.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to lack of proper input validation, BSP application (CRM_BSP_FRAME) - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75F, 75G, 75H, allow malicious inputs from untrusted sources, which can be leveraged by an attacker to execute a Reflected Cross-Site Scripting (XSS) attack. As a result, an attacker may be able to hijack a user session, read and modify some sensitive information.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:7.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E6E948A-59A4-460A-8369-68E9A94CA4EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2AC049-E6B5-4954-875A-7E66F2CEFEDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1097BE81-D7C7-4288-82A8-F5FA0EB492E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AA4EAF-ED70-4FEC-85B5-C8229EB5F600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F822C6B-3047-4EB1-9A85-EE10EA592DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "689471D5-2189-48AF-ACE9-41DA4B642B1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:7.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD618C71-34FF-414C-86DC-C43C5EEF5D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:7.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4BD107-F102-4859-9439-955F4DACE96F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63AE465A-45CC-4834-BEC0-589935EFCAD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAADF821-7088-4D5C-BB6D-2662880AC62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E464A9-F2FD-4A91-8562-A33EBABD24E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D396DE3-DCE7-4CB1-B6AB-85F2A850C180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC3734C6-B13F-4BDA-8586-47C18FD1B26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:75h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3975983-9499-49E2-8A1E-F1F9B2B5A792"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3282663",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3282663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24530",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:13.073",
      "lastModified" : "2024-11-21T07:48:04.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed by the application over the network. On successful exploitation, attacker can perform operations that may completely compromise the application causing high impact on confidentiality, integrity and availability of the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2909B78-C7F9-4267-B9A0-B6A1F776EB73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3DF21A-C043-4F60-944D-7ADD6BDDDF51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3256787",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3256787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25614",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-02-14T04:15:13.193",
      "lastModified" : "2024-11-21T07:49:49.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver AS ABAP (BSP Framework) application - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allow an unauthenticated attacker to inject the code that can be executed by the application over the network. On successful exploitation it can gain access to the sensitive information which leads to a limited impact on the confidentiality and the integrity of the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B2522A-B850-4EC2-B2F2-5EBF36801B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706FEB9E-3EE9-405E-A8C9-733DAF68AC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC29738-CF17-4E6B-9C9E-879B17F7E001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416C064-BB8A-4230-A761-84A93E017F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72491771-4492-4902-9F0C-CE6A60BAA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421A5354-F764-402B-A3A4-2D746EACEB46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3274585",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3274585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25066",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-02-14T06:15:09.873",
      "lastModified" : "2024-11-21T07:49:02.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in FolioVision FV Flowplayer Video Player plugin <= 7.5.30.7212 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foliovision:fv_flowplayer_video_player:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "7.5.30.7212",
            "matchCriteriaId" : "25D0199E-E1E7-4AF9-B7C3-F23F39B5FBEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-flowplayer-video-player-plugin-7-5-30-7212-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-flowplayer-video-player-plugin-7-5-30-7212-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-14T07:15:11.983",
      "lastModified" : "2025-03-20T19:15:20.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Onekey Touch devices through 4.0.0 and Onekey Mini devices through 2.10.0 allow man-in-the-middle attackers to obtain the seed phase. The man-in-the-middle access can only be obtained after disassembling a device (i.e., here, \"man-in-the-middle\" does not refer to the attacker's position on an IP network). NOTE: the vendor states that \"our hardware team has updated the security patch without anyone being affected.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:onekey:onekey_touch_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.0",
            "matchCriteriaId" : "77C734E7-88DC-4748-BFFD-89B3ABF4BC44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:onekey:onekey_touch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6673C385-D5A1-4716-802F-86F888A26671"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:onekey:onekey_mini_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.0",
            "matchCriteriaId" : "24235185-9002-43B9-9D58-CADA9F638C6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:onekey:onekey_mini:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11FA4596-E060-4C8B-B50D-DD7C6063C177"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.onekey.so/our-response-to-recent-security-fix-reports-13914fea8afd",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortune.com/crypto/2023/02/09/cyber-firm-cracks-onekey-crypto-wallets-in-video-raises-questions-hardware-security/amp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OneKeyHQ/firmware",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.onekey.so/our-response-to-recent-security-fix-reports-13914fea8afd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortune.com/crypto/2023/02/09/cyber-firm-cracks-onekey-crypto-wallets-in-video-raises-questions-hardware-security/amp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OneKeyHQ/firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23835",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:14.687",
      "lastModified" : "2024-11-21T07:46:55.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications using Mendix 8 (All versions < V8.18.23), Mendix Applications using Mendix 9 (All versions < V9.22.0), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.10), Mendix Applications using Mendix 9 (V9.18) (All versions < V9.18.4), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.15). Some of the Mendix runtime API’s allow attackers to bypass XPath constraints and retrieve information using XPath queries that trigger errors."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.2",
            "versionEndExcluding" : "7.23.34",
            "matchCriteriaId" : "43E9E16C-936B-47D4-B5C1-30EAF7F6B8AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.18.23",
            "matchCriteriaId" : "7A1ED592-BD7C-43FB-812E-15F579F8F40E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.6.15",
            "matchCriteriaId" : "B3CFFFE6-F0CD-4C06-B3D7-44F3FA84B346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.7.0",
            "versionEndExcluding" : "9.12.10",
            "matchCriteriaId" : "DFBB912C-5B70-436C-A615-717C6C90E25C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.18.0",
            "versionEndExcluding" : "9.18.4",
            "matchCriteriaId" : "7AC5D595-F345-4533-BF6D-451CAFF17E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.19.0",
            "versionEndExcluding" : "9.22.0",
            "matchCriteriaId" : "9B9D7FEC-9D09-4CFD-AD46-880655E27898"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-252808.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-252808.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24482",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:14.783",
      "lastModified" : "2024-11-21T07:47:56.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2",
            "versionEndExcluding" : "10.3.3.1.45",
            "matchCriteriaId" : "5EE12A9C-F1CC-4E67-A3FF-DBEEDBD4FF87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.3.2",
            "versionEndExcluding" : "10.3.3.2.33",
            "matchCriteriaId" : "0D6FCFC8-00D0-4A0E-B27A-F3A393A96838"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.3.3",
            "versionEndExcluding" : "10.3.3.3.9",
            "matchCriteriaId" : "7751C0FE-268F-4DAD-9B10-25FC7E97A3BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.3.4",
            "versionEndExcluding" : "10.3.3.4.6",
            "matchCriteriaId" : "7BD1A27A-5EE8-4AA1-B29D-0B534EC4E8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4.0.0",
            "versionEndExcluding" : "10.4.0.0.31",
            "matchCriteriaId" : "1CA2B391-8BB4-4224-8BDE-B00817F82E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4.1.0",
            "versionEndExcluding" : "10.4.1.0.32",
            "matchCriteriaId" : "516D326A-E1CF-40ED-8B47-995CE0E51741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4.2.0",
            "versionEndExcluding" : "10.4.2.0.25",
            "matchCriteriaId" : "895FAF07-0DA5-459E-8C72-F5566F9562B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-693110.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-693110.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24549",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:14.880",
      "lastModified" : "2024-11-21T07:48:06.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to stack-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24550",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:14.967",
      "lastModified" : "2024-11-21T07:48:06.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24551",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:15.053",
      "lastModified" : "2024-11-21T07:48:06.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer underflow while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24552",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:15.137",
      "lastModified" : "2024-11-21T07:48:06.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C0D3BE-0640-49C8-86F1-52966CABA2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE12CBDF-222E-4DE9-927A-3BDDBFFF1E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFAAAE5-52B1-48EA-98E1-98A854CBE65A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5AFCFBB-ED56-4DDB-89D8-B47A20821AB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "087A9E78-9E5C-4D94-A251-02F9AB160F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EE0588-FE7F-4581-9484-52404DB5B99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F72318F-0E9C-4AB1-9CA2-6527513AE0F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C93992-17F7-4499-BC57-BD67E8A6C508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7180CEA7-150A-4B1D-BDFD-61C320A33148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0244EE5-BF22-491A-A7DE-48F44E2A17FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A583AAD-5B13-4822-AA24-AA7D16305FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24553",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:15.223",
      "lastModified" : "2024-11-21T07:48:06.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24554",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:15.307",
      "lastModified" : "2024-11-21T07:48:06.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24555",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:15.393",
      "lastModified" : "2024-11-21T07:48:07.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Solid Edge SE2022 (Todas las versiones &lt; V222.0MP12), Solid Edge SE2023 (Todas las versiones &lt; V223.0Update2). Las aplicaciones afectadas contienen una lectura fuera de los límites más allá del final de una estructura asignada mientras analizan archivos PAR especialmente manipulados. Esto podría permitir a un atacante ejecutar código en el contexto del proceso actual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C0D3BE-0640-49C8-86F1-52966CABA2E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE12CBDF-222E-4DE9-927A-3BDDBFFF1E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFAAAE5-52B1-48EA-98E1-98A854CBE65A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5AFCFBB-ED56-4DDB-89D8-B47A20821AB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "087A9E78-9E5C-4D94-A251-02F9AB160F54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EE0588-FE7F-4581-9484-52404DB5B99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F72318F-0E9C-4AB1-9CA2-6527513AE0F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C93992-17F7-4499-BC57-BD67E8A6C508"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7180CEA7-150A-4B1D-BDFD-61C320A33148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0244EE5-BF22-491A-A7DE-48F44E2A17FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2022:maintenance_pack_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A583AAD-5B13-4822-AA24-AA7D16305FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24556",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:15.483",
      "lastModified" : "2024-11-21T07:48:07.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24557",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:15.563",
      "lastModified" : "2024-11-21T07:48:07.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24558",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:15.643",
      "lastModified" : "2024-11-21T07:48:07.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24559",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:15.723",
      "lastModified" : "2024-11-21T07:48:07.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24560",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:15.810",
      "lastModified" : "2024-11-21T07:48:07.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24561",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:15.893",
      "lastModified" : "2024-11-21T07:48:07.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24562",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:15.977",
      "lastModified" : "2024-11-21T07:48:07.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24563",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:16.057",
      "lastModified" : "2024-11-21T07:48:08.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24564",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:16.137",
      "lastModified" : "2024-11-21T07:48:08.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains a memory corruption vulnerability while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19069)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24565",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:16.223",
      "lastModified" : "2024-11-21T07:48:08.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted STL file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19428)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24566",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:16.307",
      "lastModified" : "2024-11-21T07:48:08.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to stack-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19472)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24581",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:16.387",
      "lastModified" : "2024-11-21T07:48:10.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted STP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19425)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2023:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2210.0002.004",
            "matchCriteriaId" : "0C855788-002F-41E5-BC01-8597E66EDE1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24978",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:16.467",
      "lastModified" : "2024-11-21T07:48:51.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19788)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24979",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:16.547",
      "lastModified" : "2024-11-21T07:48:52.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19789)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24980",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:16.623",
      "lastModified" : "2024-11-21T07:48:52.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19790)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24981",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:16.700",
      "lastModified" : "2024-11-21T07:48:52.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19791)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24982",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:16.783",
      "lastModified" : "2024-11-21T07:48:52.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19804)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24983",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:16.860",
      "lastModified" : "2024-11-21T07:48:52.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19805)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24984",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:16.943",
      "lastModified" : "2024-11-21T07:48:52.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19806)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24985",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:17.023",
      "lastModified" : "2024-11-21T07:48:52.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19807)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24986",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:17.103",
      "lastModified" : "2024-11-21T07:48:52.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19808)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24987",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:17.177",
      "lastModified" : "2024-11-21T07:48:52.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19809)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24988",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:17.253",
      "lastModified" : "2024-11-21T07:48:53.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19810)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24989",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:17.330",
      "lastModified" : "2024-11-21T07:48:53.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19811)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24990",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:17.407",
      "lastModified" : "2024-11-21T07:48:53.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19812)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24991",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:17.480",
      "lastModified" : "2024-11-21T07:48:53.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19813)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24992",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:17.560",
      "lastModified" : "2024-11-21T07:48:53.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19814)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24993",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:17.633",
      "lastModified" : "2024-11-21T07:48:53.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19815)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24994",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:17.707",
      "lastModified" : "2024-11-21T07:48:53.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19816)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24995",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:17.780",
      "lastModified" : "2024-11-21T07:48:53.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19817)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24996",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:17.850",
      "lastModified" : "2024-11-21T07:48:53.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19818)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25140",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-02-14T11:15:17.927",
      "lastModified" : "2024-11-21T07:49:11.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150), Solid Edge SE2022 (All versions < V222.0MP12). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "34.0",
            "versionEndExcluding" : "34.0.254",
            "matchCriteriaId" : "381AD2E7-0F3D-4510-9DDB-8A2551C7BB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "34.1",
            "versionEndExcluding" : "34.1.242",
            "matchCriteriaId" : "4C486991-A1C0-4815-AAD6-163464D711AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "35.0",
            "versionEndExcluding" : "35.0.170",
            "matchCriteriaId" : "EA2114FD-BB07-4C24-98B1-928A510565BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:parasolid:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "35.1",
            "versionEndExcluding" : "35.1.150",
            "matchCriteriaId" : "5C98612B-63DF-473C-AF6E-CF3740356D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2022:-:*:*:*:*:*:*",
            "matchCriteriaId" : "61866294-2060-457C-9CBE-8AEAF03973F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-836777.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-836777.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24377",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-02-14T12:15:15.390",
      "lastModified" : "2026-04-28T19:19:38.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart plugin <= 6.11.3 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lightspeedhq:ecwid_ecommerce_shopping_cart:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "6.11.4",
            "matchCriteriaId" : "FEEBF9C0-0DDD-47DC-AD9D-8A83E76191E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/ecwid-shopping-cart/wordpress-ecwid-ecommerce-shopping-cart-plugin-6-11-3-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/ecwid-shopping-cart/wordpress-ecwid-ecommerce-shopping-cart-plugin-6-11-3-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24382",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-02-14T12:15:15.477",
      "lastModified" : "2024-11-21T07:47:45.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Photon WP Material Design Icons for Page Builders plugin <= 1.4.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:material_design_icons_for_page_builders_project:material_design_icons_for_page_builders:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "2F410A52-6A1B-4FD2-821F-CD106A652F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/material-design-icons-for-elementor/wordpress-material-design-icons-for-page-builders-plugin-1-4-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/material-design-icons-for-elementor/wordpress-material-design-icons-for-page-builders-plugin-1-4-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25065",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-02-14T12:15:15.603",
      "lastModified" : "2024-11-21T07:49:02.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in ShapedPlugin WP Tabs – Responsive Tabs Plugin for WordPress plugin <= 2.1.14 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shapedplugin:wp_tabs:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.15",
            "matchCriteriaId" : "A31F45C8-C0C1-40FE-BCEB-796B736A4E3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-expand-tabs-free/wordpress-wp-tabs-responsive-tabs-plugin-for-wordpress-plugin-2-1-14-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-expand-tabs-free/wordpress-wp-tabs-responsive-tabs-plugin-for-wordpress-plugin-2-1-14-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0827",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-14T13:15:12.787",
      "lastModified" : "2024-11-21T07:37:54.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.17",
            "matchCriteriaId" : "A148D1FC-DA46-4169-BBA5-402B5DB5905E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/f4050586136cb4c44e3d6042111a1b87b340df95",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/75bc7d07-46a7-4ed9-a405-af4fc47fb422",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/f4050586136cb4c44e3d6042111a1b87b340df95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/75bc7d07-46a7-4ed9-a405-af4fc47fb422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25141",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-02-14T13:15:12.903",
      "lastModified" : "2025-03-20T19:15:19.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Sling JCR Base < 3.1.12 has a critical injection vulnerability when running on old JDK versions (JDK 1.8.191 or earlier) through utility functions in RepositoryAccessor. The functions getRepository and getRepositoryFromURL allow an application to access data stored in a remote location via JDNI and RMI.\n\n\n\n\nUsers of Apache Sling JCR Base are recommended to upgrade to Apache Sling JCR Base 3.1.12 or later, or to run on a more recent JDK.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:sling_jcr_base:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.6",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "B21F9AD9-C002-4882-9219-7F2E92C1AA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sling.apache.org/news.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sling.apache.org/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25149",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-14T14:15:09.693",
      "lastModified" : "2024-11-21T07:49:12.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TimescaleDB, an open-source time-series SQL database, has a privilege escalation vulnerability in versions 2.8.0 through 2.9.2. During installation, TimescaleDB creates a telemetry job that is runs as the installation user. The queries run as part of the telemetry data collection were not run with a locked down `search_path`, allowing malicious users to create functions that would be executed by the telemetry job, leading to privilege escalation. In order to be able to take advantage of this vulnerability, a user would need to be able to create objects in a database and then get a superuser to install TimescaleDB into their database. When TimescaleDB is installed as trusted extension, non-superusers can install the extension without help from a superuser.\n\nVersion 2.9.3 fixes this issue. As a mitigation, the `search_path` of the user running the telemetry job can be locked down to not include schemas writable by other users. The vulnerability is not exploitable on instances in Timescale Cloud and Managed Service for TimescaleDB due to additional security provisions in place on those platforms."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timescale:timescaledb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.8.0",
            "versionEndIncluding" : "2.9.2",
            "matchCriteriaId" : "C90184DC-7E90-4966-B3F4-01BEBB945DDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/timescale/timescaledb/pull/5259",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/timescale/timescaledb/releases/tag/2.9.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/timescale/timescaledb/security/advisories/GHSA-44jh-j22r-33wq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/timescale/timescaledb/pull/5259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/timescale/timescaledb/releases/tag/2.9.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/timescale/timescaledb/security/advisories/GHSA-44jh-j22r-33wq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-14T15:15:11.360",
      "lastModified" : "2025-03-20T18:15:16.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admpass parameter in the setPasswordCfg function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/iceyjchen/VulnerabilityProjectRecords/blob/main/setPasswordCfg_admpass/setPasswordCfg_admpass.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/iceyjchen/VulnerabilityProjectRecords/blob/main/setPasswordCfg_admpass/setPasswordCfg_admpass.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-14T15:15:11.417",
      "lastModified" : "2025-03-20T21:15:18.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/iceyjchen/VulnerabilityProjectRecords/blob/main/setPasswordCfg_admuser/setPasswordCfg_admuser.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/iceyjchen/VulnerabilityProjectRecords/blob/main/setPasswordCfg_admuser/setPasswordCfg_admuser.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-14T15:15:11.477",
      "lastModified" : "2025-03-20T21:15:18.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8729CF2-38C8-483B-9BDB-7C4ACA2C8D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:ca300-poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006251DF-FF38-4FC5-8BE2-96374D8F6B7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/iceyjchen/VulnerabilityProjectRecords/blob/main/setWebWlanIdx/setWebWlanIdx.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/iceyjchen/VulnerabilityProjectRecords/blob/main/setWebWlanIdx/setWebWlanIdx.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25576",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-14T16:15:11.277",
      "lastModified" : "2024-11-21T07:49:45.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "@fastify/multipart is a Fastify plugin to parse the multipart content-type. Prior to versions 7.4.1 and 6.0.1, @fastify/multipart may experience denial of service due to a number of situations in which an unlimited number of parts are accepted. This includes the multipart body parser accepting an unlimited number of file parts, the multipart body parser accepting an unlimited number of field parts, and the multipart body parser accepting an unlimited number of empty parts as field parts. This is fixed in v7.4.1 (for Fastify v4.x) and v6.0.1 (for Fastify v3.x). There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastify:fastify-multipart:*:*:*:*:*:fastify:*:*",
            "versionEndExcluding" : "6.0.1",
            "matchCriteriaId" : "E689CBF7-01C4-4ED8-96C5-AC2FB4604BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastify:fastify-multipart:*:*:*:*:*:fastify:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.4.1",
            "matchCriteriaId" : "8701FBAF-4608-4963-89A2-6B54AAD7DD30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fastify/fastify-multipart/commit/85be81bedf5b29cfd9fe3efc30fb5a17173c1297",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fastify/fastify-multipart/releases/tag/v6.0.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fastify/fastify-multipart/releases/tag/v7.4.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fastify/fastify-multipart/security/advisories/GHSA-hpp2-2cr5-pf6g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1816195",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fastify/fastify-multipart/commit/85be81bedf5b29cfd9fe3efc30fb5a17173c1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fastify/fastify-multipart/releases/tag/v6.0.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fastify/fastify-multipart/releases/tag/v7.4.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fastify/fastify-multipart/security/advisories/GHSA-hpp2-2cr5-pf6g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1816195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0830",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-14T17:15:11.133",
      "lastModified" : "2025-05-01T15:16:19.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in EasyNAS 1.1.0. Affected is the function system of the file /backup.pl. The manipulation leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easynas:easynas:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42B8C19-8F93-4871-B323-0F72A63A0504"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xbz0n/CVE-2023-0830",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.220950",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.220950",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.86683",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://www.exploit-db.com/exploits/51266",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://gist.github.com/xbz0n/674af0e802efaaafe90d2f67464c2690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.220950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.220950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22931",
      "sourceIdentifier" : "prodsec@splunk.com",
      "published" : "2023-02-14T18:15:12.063",
      "lastModified" : "2024-11-21T07:45:39.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without verifying permissions. This feature has been deprecated and disabled by default."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "prodsec@splunk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@splunk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.13",
            "matchCriteriaId" : "24C628AD-CF89-4FD5-B58F-38D150D2F535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.10",
            "matchCriteriaId" : "4B2A60A4-55C6-4C11-B86D-452CC43D85FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.2203",
            "matchCriteriaId" : "B97CD36E-7ABF-4A2C-B844-D6C5CBBE673E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0201",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd/",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22932",
      "sourceIdentifier" : "prodsec@splunk.com",
      "published" : "2023-02-14T18:15:12.143",
      "lastModified" : "2024-11-21T07:45:40.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise 9.0 versions before 9.0.4, a View allows for Cross-Site Scripting (XSS) through the error message in a Base64-encoded image. The vulnerability affects instances with Splunk Web enabled. It does not affect Splunk Enterprise versions below 9.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "prodsec@splunk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@splunk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.4",
            "matchCriteriaId" : "39FFDC8F-FC45-41E7-8353-D09AAE26F50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.2209.3",
            "matchCriteriaId" : "8AF379C7-8910-4C30-882A-4CE9F9C9992C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0202",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/ce6e1268-e01c-4df2-a617-0f034ed49a43/",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/ce6e1268-e01c-4df2-a617-0f034ed49a43/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22933",
      "sourceIdentifier" : "prodsec@splunk.com",
      "published" : "2023-02-14T18:15:12.220",
      "lastModified" : "2024-11-21T07:45:40.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a View allows for Cross-Site Scripting (XSS) in an extensible mark-up language (XML) View through the ‘layoutPanel’ attribute in the ‘module’ tag’."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "prodsec@splunk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@splunk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.13",
            "matchCriteriaId" : "24C628AD-CF89-4FD5-B58F-38D150D2F535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.10",
            "matchCriteriaId" : "4B2A60A4-55C6-4C11-B86D-452CC43D85FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.4",
            "matchCriteriaId" : "39FFDC8F-FC45-41E7-8353-D09AAE26F50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.2209",
            "matchCriteriaId" : "EC797D87-1EA7-4C9E-BA2E-910408592511"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0203",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/9ac2bfea-a234-4a18-9d37-6d747e85c2e4",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/9ac2bfea-a234-4a18-9d37-6d747e85c2e4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22934",
      "sourceIdentifier" : "prodsec@splunk.com",
      "published" : "2023-02-14T18:15:12.297",
      "lastModified" : "2024-11-21T07:45:40.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘pivot’ search processing language (SPL) command lets a search bypass SPL safeguards for risky commands using a saved search job. The vulnerability requires an authenticated user to craft the saved job and a higher privileged user to initiate a request within their browser."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "prodsec@splunk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@splunk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.13",
            "matchCriteriaId" : "24C628AD-CF89-4FD5-B58F-38D150D2F535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.10",
            "matchCriteriaId" : "4B2A60A4-55C6-4C11-B86D-452CC43D85FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.4",
            "matchCriteriaId" : "39FFDC8F-FC45-41E7-8353-D09AAE26F50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.2209.3",
            "matchCriteriaId" : "8AF379C7-8910-4C30-882A-4CE9F9C9992C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0204",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22935",
      "sourceIdentifier" : "prodsec@splunk.com",
      "published" : "2023-02-14T18:15:12.377",
      "lastModified" : "2024-11-21T07:45:40.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘display.page.search.patterns.sensitivity’ search parameter lets a search bypass SPL safeguards for risky commands. The vulnerability requires a higher privileged user to initiate a request within their browser and only affects instances with Splunk Web enabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "prodsec@splunk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@splunk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.13",
            "matchCriteriaId" : "24C628AD-CF89-4FD5-B58F-38D150D2F535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.10",
            "matchCriteriaId" : "4B2A60A4-55C6-4C11-B86D-452CC43D85FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.4",
            "matchCriteriaId" : "39FFDC8F-FC45-41E7-8353-D09AAE26F50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.2209.3",
            "matchCriteriaId" : "8AF379C7-8910-4C30-882A-4CE9F9C9992C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0205",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22936",
      "sourceIdentifier" : "prodsec@splunk.com",
      "published" : "2023-02-14T18:15:12.460",
      "lastModified" : "2024-11-21T07:45:40.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search allows for a blind server-side request forgery (SSRF) by an authenticated user. The initiator of the request cannot see the response without the presence of an additional vulnerability within the environment."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "prodsec@splunk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@splunk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.13",
            "matchCriteriaId" : "24C628AD-CF89-4FD5-B58F-38D150D2F535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.10",
            "matchCriteriaId" : "4B2A60A4-55C6-4C11-B86D-452CC43D85FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.4",
            "matchCriteriaId" : "39FFDC8F-FC45-41E7-8353-D09AAE26F50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.2209.3",
            "matchCriteriaId" : "8AF379C7-8910-4C30-882A-4CE9F9C9992C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0206",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22937",
      "sourceIdentifier" : "prodsec@splunk.com",
      "published" : "2023-02-14T18:15:12.540",
      "lastModified" : "2024-11-21T07:45:40.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename extensions. Lookup table file extensions may now be one of the following only: .csv, .csv.gz, .kmz, .kml, .mmdb, or .mmdb.gzl."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "prodsec@splunk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@splunk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.13",
            "matchCriteriaId" : "24C628AD-CF89-4FD5-B58F-38D150D2F535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.10",
            "matchCriteriaId" : "4B2A60A4-55C6-4C11-B86D-452CC43D85FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.4",
            "matchCriteriaId" : "39FFDC8F-FC45-41E7-8353-D09AAE26F50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.2209.3",
            "matchCriteriaId" : "8AF379C7-8910-4C30-882A-4CE9F9C9992C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0207",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/b7d1293f-e78f-415e-b5f6-443df3480082/",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/b7d1293f-e78f-415e-b5f6-443df3480082/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22938",
      "sourceIdentifier" : "prodsec@splunk.com",
      "published" : "2023-02-14T18:15:12.617",
      "lastModified" : "2024-11-21T07:45:40.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint lets any authenticated user send an email as the Splunk instance. The endpoint is now restricted to the ‘splunk-system-user’ account on the local instance."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "prodsec@splunk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@splunk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.13",
            "matchCriteriaId" : "24C628AD-CF89-4FD5-B58F-38D150D2F535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.10",
            "matchCriteriaId" : "4B2A60A4-55C6-4C11-B86D-452CC43D85FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.4",
            "matchCriteriaId" : "39FFDC8F-FC45-41E7-8353-D09AAE26F50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.2209.3",
            "matchCriteriaId" : "8AF379C7-8910-4C30-882A-4CE9F9C9992C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0208",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22939",
      "sourceIdentifier" : "prodsec@splunk.com",
      "published" : "2023-02-14T18:15:12.687",
      "lastModified" : "2024-11-21T07:45:40.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘map’ search processing language (SPL) command lets a search bypass SPL safeguards for risky commands. The vulnerability requires a higher privileged user to initiate a request within their browser and only affects instances with Splunk Web enabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "prodsec@splunk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@splunk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.13",
            "matchCriteriaId" : "24C628AD-CF89-4FD5-B58F-38D150D2F535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.10",
            "matchCriteriaId" : "4B2A60A4-55C6-4C11-B86D-452CC43D85FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.4",
            "matchCriteriaId" : "39FFDC8F-FC45-41E7-8353-D09AAE26F50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.2209.3",
            "matchCriteriaId" : "8AF379C7-8910-4C30-882A-4CE9F9C9992C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0209",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22940",
      "sourceIdentifier" : "prodsec@splunk.com",
      "published" : "2023-02-14T18:15:12.760",
      "lastModified" : "2024-11-21T07:45:41.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the ‘collect’ search processing language (SPL) command, including ‘summaryindex’, ‘sumindex’, ‘stash’,’ mcollect’, and ‘meventcollect’, were not designated as safeguarded commands. The commands could potentially allow for the exposing of data to a summary index that unprivileged users could access. The vulnerability requires a higher privileged user to initiate a request within their browser, and only affects instances with Splunk Web enabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "prodsec@splunk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@splunk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.13",
            "matchCriteriaId" : "24C628AD-CF89-4FD5-B58F-38D150D2F535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.10",
            "matchCriteriaId" : "4B2A60A4-55C6-4C11-B86D-452CC43D85FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.4",
            "matchCriteriaId" : "39FFDC8F-FC45-41E7-8353-D09AAE26F50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.2209.3",
            "matchCriteriaId" : "8AF379C7-8910-4C30-882A-4CE9F9C9992C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0210",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd/",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22941",
      "sourceIdentifier" : "prodsec@splunk.com",
      "published" : "2023-02-14T18:15:12.837",
      "lastModified" : "2024-11-21T07:45:41.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, an improperly-formatted ‘INGEST_EVAL’ parameter in a Field Transformation crashes the Splunk daemon (splunkd)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "prodsec@splunk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@splunk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.13",
            "matchCriteriaId" : "24C628AD-CF89-4FD5-B58F-38D150D2F535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.10",
            "matchCriteriaId" : "4B2A60A4-55C6-4C11-B86D-452CC43D85FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.4",
            "matchCriteriaId" : "39FFDC8F-FC45-41E7-8353-D09AAE26F50F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.2209.3",
            "matchCriteriaId" : "8AF379C7-8910-4C30-882A-4CE9F9C9992C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0211",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/08978eca-caff-44c1-84dc-53f17def4e14/",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/08978eca-caff-44c1-84dc-53f17def4e14/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22942",
      "sourceIdentifier" : "prodsec@splunk.com",
      "published" : "2023-02-14T18:15:12.907",
      "lastModified" : "2024-11-21T07:45:41.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a cross-site request forgery in the Splunk Secure Gateway (SSG) app in the ‘kvstore_client’ REST endpoint lets a potential attacker update SSG KV store collections using an HTTP GET request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "prodsec@splunk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@splunk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.13",
            "matchCriteriaId" : "24C628AD-CF89-4FD5-B58F-38D150D2F535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.10",
            "matchCriteriaId" : "4B2A60A4-55C6-4C11-B86D-452CC43D85FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.4",
            "matchCriteriaId" : "39FFDC8F-FC45-41E7-8353-D09AAE26F50F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0212",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/4742d5f7-ce00-45ce-9c79-5e98b43b4410/",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.splunk.com/application/4742d5f7-ce00-45ce-9c79-5e98b43b4410/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22943",
      "sourceIdentifier" : "prodsec@splunk.com",
      "published" : "2023-02-14T18:15:12.993",
      "lastModified" : "2024-11-21T07:45:41.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "prodsec@splunk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@splunk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-636"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:add-on_builder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "1FD8BD17-4846-4ADE-8308-394DF00D8800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:cloudconnect_software_development_kit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndExcluding" : "3.1.3",
            "matchCriteriaId" : "DB2A2609-6704-41F0-AB56-04F571559825"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0213",
        "source" : "prodsec@splunk.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.splunk.com/advisories/SVD-2023-0213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25563",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-14T18:15:13.077",
      "lastModified" : "2024-11-21T07:49:44.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM fields can trigger a denial of service. A 32-bit integer overflow condition can lead to incorrect checks of consistency of length of internal buffers. Although most applications will error out before accepting a singe input buffer of 4GB in length this could theoretically happen. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point if the application allows tokens greater than 4GB in length. This can lead to a large, up to 65KB, out-of-bounds read which could cause a denial-of-service if it reads from unmapped memory. Version 1.2.0 contains a patch for the out-of-bounds reads."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gss-ntlmssp_project:gss-ntlmssp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "13258161-610E-490D-B389-681F4803A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gssapi/gss-ntlmssp/commit/97c62c6167299028d80765080e74d91dfc99efbd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/releases/tag/v1.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/security/advisories/GHSA-jjjx-5qf7-9mgf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/commit/97c62c6167299028d80765080e74d91dfc99efbd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/releases/tag/v1.2.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/security/advisories/GHSA-jjjx-5qf7-9mgf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25564",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-14T18:15:13.173",
      "lastModified" : "2024-11-21T07:49:44.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, memory corruption can be triggered when decoding UTF16 strings. The variable `outlen` was not initialized and could cause writing a zero to an arbitrary place in memory if `ntlm_str_convert()` were to fail, which would leave `outlen` uninitialized. This can lead to a denial of service if the write hits unmapped memory or randomly corrupts a byte in the application memory space. This vulnerability can trigger an out-of-bounds write, leading to memory corruption. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point. This issue is fixed in version 1.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gss-ntlmssp_project:gss-ntlmssp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "13258161-610E-490D-B389-681F4803A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gssapi/gss-ntlmssp/commit/c753000eb31835c0664e528fbc99378ae0cbe950",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/releases/tag/v1.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/security/advisories/GHSA-r85x-q5px-9xfq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/commit/c753000eb31835c0664e528fbc99378ae0cbe950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/releases/tag/v1.2.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/security/advisories/GHSA-r85x-q5px-9xfq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25565",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-14T18:15:13.263",
      "lastModified" : "2024-11-21T07:49:44.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an incorrect free when decoding target information can trigger a denial of service. The error condition incorrectly assumes the `cb` and `sh` buffers contain a copy of the data that needs to be freed. However, that is not the case. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point. This will likely trigger an assertion failure in `free`, causing a denial-of-service. This issue is fixed in version 1.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-590"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-763"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gss-ntlmssp_project:gss-ntlmssp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "13258161-610E-490D-B389-681F4803A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gssapi/gss-ntlmssp/commit/c16100f60907a2de92bcb676f303b81facee0f64",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/releases/tag/v1.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/security/advisories/GHSA-7q7f-wqcg-mvfg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/commit/c16100f60907a2de92bcb676f303b81facee0f64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/releases/tag/v1.2.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/security/advisories/GHSA-7q7f-wqcg-mvfg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25566",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-14T18:15:13.380",
      "lastModified" : "2024-11-21T07:49:44.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, a memory leak can be triggered when parsing usernames which can trigger a denial-of-service. The domain portion of a username may be overridden causing an allocated memory area the size of the domain name to be leaked. An attacker can leak memory via the main `gss_accept_sec_context` entry point, potentially causing a denial-of-service. This issue is fixed in version 1.2.0.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gss-ntlmssp_project:gss-ntlmssp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "13258161-610E-490D-B389-681F4803A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gssapi/gss-ntlmssp/commit/8660fb16474054e692a596e9c79670cd4d3954f4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/releases/tag/v1.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/security/advisories/GHSA-mfm4-6g58-jw74",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/commit/8660fb16474054e692a596e9c79670cd4d3954f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/releases/tag/v1.2.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/security/advisories/GHSA-mfm4-6g58-jw74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25567",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-14T18:15:13.487",
      "lastModified" : "2024-11-21T07:49:44.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to version 1.2.0. The length of the `av_pair` is not checked properly for two of the elements which can trigger an out-of-bound read. The out-of-bounds read can be triggered via the main `gss_accept_sec_context` entry point and could cause a denial-of-service if the memory is unmapped. The issue is fixed in version 1.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gss-ntlmssp_project:gss-ntlmssp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "13258161-610E-490D-B389-681F4803A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gssapi/gss-ntlmssp/commit/025fbb756d44ffee8f847db4222ed6aa4bd1fbe4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/releases/tag/v1.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/security/advisories/GHSA-24pf-6prf-24ch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/commit/025fbb756d44ffee8f847db4222ed6aa4bd1fbe4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/releases/tag/v1.2.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gssapi/gss-ntlmssp/security/advisories/GHSA-24pf-6prf-24ch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25571",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-14T18:15:13.577",
      "lastModified" : "2024-11-21T07:49:45.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Backstage is an open platform for building developer portals. `@backstage/catalog-model` prior to version 1.2.0, `@backstage/core-components` prior to 0.12.4, and `@backstage/plugin-catalog-backend` prior to 1.7.2 are affected by a cross-site scripting vulnerability. This vulnerability allows a malicious actor with access to add or modify content in an instance of the Backstage software catalog to inject script URLs in the entities stored in the catalog. If users of the catalog then click on said URLs, that can lead to an XSS attack.\n\nThis vulnerability has been patched in both the frontend and backend implementations. The default `Link` component from `@backstage/core-components` version 1.2.0 and greater will now reject `javascript:` URLs, and there is a global override of `window.open` to do the same. In addition, the catalog model v0.12.4 and greater as well as the catalog backend v1.7.2 and greater now has additional validation built in that prevents `javascript:` URLs in known annotations. As a workaround, the general practice of limiting access to modifying catalog content and requiring code reviews greatly help mitigate this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-84"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:backstage_catalog-model:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "360EEB11-1000-4ADC-877E-759B71A6813A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:backstage_core-components:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.12.4",
            "matchCriteriaId" : "91ADF4C7-4A4B-4711-9E69-D829867DA62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:backstage_plugin-catalog-backend:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "D91657BE-318C-469F-9C52-B3CD3E558ACD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/backstage/backstage/commit/3d1371954512f7fa8bd0e2d357e00eada2c3e8a8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/backstage/backstage/security/advisories/GHSA-7hv8-3fr9-j2hv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/backstage/backstage/commit/3d1371954512f7fa8bd0e2d357e00eada2c3e8a8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/backstage/backstage/security/advisories/GHSA-7hv8-3fr9-j2hv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-14T19:15:11.530",
      "lastModified" : "2025-03-20T20:15:29.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka \"request smuggling.\" The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.31",
            "matchCriteriaId" : "5F291108-797E-4521-9309-9EB636C7D67E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1.0",
            "versionEndExcluding" : "2.2.29",
            "matchCriteriaId" : "7D2C9AFB-4C4F-4641-B5B2-588D486EE0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndExcluding" : "2.4.22",
            "matchCriteriaId" : "6D101B93-F6E0-450C-B72B-477170BE6976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.12",
            "matchCriteriaId" : "68F54E28-B550-4CBF-9856-70A8596F3C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndExcluding" : "2.6.9",
            "matchCriteriaId" : "89FA706D-9EC7-4484-A5A4-4CB97B5194AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "2.7.3",
            "matchCriteriaId" : "32B5DC1B-FD58-4050-8D84-31A381B89E90"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.haproxy.org/?p=haproxy-2.7.git%3Ba=commit%3Bh=a0e561ad7f29ed50c473f5a9da664267b60d1112",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPTJQHKUEU2PQ7RWFUYAFLAD4STEIKHU/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JM5NCIBTHYDTLPY2UNC4HO2VAHHE6CJG/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5348",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.haproxy.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://git.haproxy.org/?p=haproxy-2.7.git%3Ba=commit%3Bh=a0e561ad7f29ed50c473f5a9da664267b60d1112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPTJQHKUEU2PQ7RWFUYAFLAD4STEIKHU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JM5NCIBTHYDTLPY2UNC4HO2VAHHE6CJG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.haproxy.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21528",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:11.637",
      "lastModified" : "2024-11-21T07:43:01.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SQL Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2008:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "744B637F-AB15-417B-B8AC-10F463CAEF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2012:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BD8F6C-FD88-483F-95E8-16F7A6BCFCC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "03C65D96-44D0-4411-8B84-961973F1E4D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2016:sp3:*:*:*:*:x64:*",
            "matchCriteriaId" : "39A3D29F-0BE0-4F78-9970-58BB355775DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2017:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "2FF9FC32-3E6E-4256-B6BD-C4EF1932CA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "9144F644-A3D4-440C-8978-257E71204617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2022:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "6CB7AD22-F27B-4807-88F1-02ED420421D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21528",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21529",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:11.743",
      "lastModified" : "2026-04-14T14:44:35.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2026-04-13",
      "cisaActionDue" : "2026-04-27",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "DA166F2A-D83B-4D50-AD0B-668D813E0585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "FF76AEDA-E574-40ED-B64F-8FDEF8CAC802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "435343A4-BF10-461A-ABF2-D511A5FBDA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B23C8E3E-5243-4DA6-B9AA-F6053084B55E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21529",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21564",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:11.830",
      "lastModified" : "2024-11-21T07:43:05.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure DevOps Server Cross-Site Scripting Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2022:-:*:*:*:*:*:*",
            "matchCriteriaId" : "17B4B344-7600-4E89-B2ED-F97792D5746B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2022:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "F371F480-D317-40EC-8620-38CE2AFC3DB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21564",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21568",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:11.913",
      "lastModified" : "2024-11-21T07:43:06.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2019_integration_services:-:*:*:*:*:visual_studio:*:*",
            "matchCriteriaId" : "724D9A27-394B-4888-9FD0-657B9BEC5502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server_2022_integration_services:-:*:*:*:*:visual_studio:*:*",
            "matchCriteriaId" : "E198AAA5-AEC6-40B1-91FF-3C25A93725A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21568",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21570",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:11.987",
      "lastModified" : "2024-11-21T07:43:06.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.0.45.11",
            "matchCriteriaId" : "64675AEC-3E0C-4ED2-99C5-70221ACC372F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.16.20",
            "matchCriteriaId" : "49D80063-7C6B-466B-A0EA-BC24CE4F335A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21570",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21571",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:12.070",
      "lastModified" : "2024-11-21T07:43:06.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartExcluding" : "9.0",
            "versionEndExcluding" : "9.0.45.11",
            "matchCriteriaId" : "918F7950-7B74-4997-ADB9-71D74D711F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.16.20",
            "matchCriteriaId" : "49D80063-7C6B-466B-A0EA-BC24CE4F335A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21571",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21571",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21572",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:12.153",
      "lastModified" : "2024-11-21T07:43:06.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartExcluding" : "9.0",
            "versionEndExcluding" : "9.0.45.11",
            "matchCriteriaId" : "918F7950-7B74-4997-ADB9-71D74D711F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.16.20",
            "matchCriteriaId" : "49D80063-7C6B-466B-A0EA-BC24CE4F335A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21572",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21573",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:12.233",
      "lastModified" : "2024-11-21T07:43:06.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartExcluding" : "9.0",
            "versionEndExcluding" : "9.0.45.11",
            "matchCriteriaId" : "918F7950-7B74-4997-ADB9-71D74D711F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.16.20",
            "matchCriteriaId" : "49D80063-7C6B-466B-A0EA-BC24CE4F335A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21573",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21573",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21684",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:12.310",
      "lastModified" : "2024-11-21T07:43:25.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "C1BEE482-6A48-4238-B435-5F9EEC091ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "A4F0F6D2-7E7B-4E3E-B160-65038A850B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "8C826787-EBA0-4087-9F36-30B8192B2056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "E65DF61A-C497-4545-B95E-11E2FAFE1F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3658090D-8E87-4CE4-BAE5-A7ADED6DC296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "FC73806E-125C-470E-8123-945B9366BB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "9F74B22E-55BC-4646-95D5-049099ED1DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "0721D979-707D-4EE6-ABC7-5957D8F50391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "EB662E36-78A1-4004-AE03-F5693C1BED2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "8FD8C3D8-808A-4A01-921D-243F8317F694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "8E0C624C-A725-425E-BE3C-43CA28379263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "D39AA669-F9A5-4678-AE40-F6362BA95C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "9689E7AA-B2EA-428C-945F-54935922861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "C819525C-9D6E-4097-9D48-6E2131B3FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21684",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21685",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:12.387",
      "lastModified" : "2024-11-21T07:43:25.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "C1BEE482-6A48-4238-B435-5F9EEC091ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "A4F0F6D2-7E7B-4E3E-B160-65038A850B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "8C826787-EBA0-4087-9F36-30B8192B2056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "E65DF61A-C497-4545-B95E-11E2FAFE1F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3658090D-8E87-4CE4-BAE5-A7ADED6DC296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "FC73806E-125C-470E-8123-945B9366BB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "9F74B22E-55BC-4646-95D5-049099ED1DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "0721D979-707D-4EE6-ABC7-5957D8F50391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "EB662E36-78A1-4004-AE03-F5693C1BED2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "8FD8C3D8-808A-4A01-921D-243F8317F694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "8E0C624C-A725-425E-BE3C-43CA28379263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "D39AA669-F9A5-4678-AE40-F6362BA95C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "9689E7AA-B2EA-428C-945F-54935922861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "C819525C-9D6E-4097-9D48-6E2131B3FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21685",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21686",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:12.460",
      "lastModified" : "2024-11-21T07:43:26.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "C1BEE482-6A48-4238-B435-5F9EEC091ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "A4F0F6D2-7E7B-4E3E-B160-65038A850B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "8C826787-EBA0-4087-9F36-30B8192B2056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "E65DF61A-C497-4545-B95E-11E2FAFE1F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3658090D-8E87-4CE4-BAE5-A7ADED6DC296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "FC73806E-125C-470E-8123-945B9366BB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "9F74B22E-55BC-4646-95D5-049099ED1DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "0721D979-707D-4EE6-ABC7-5957D8F50391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "EB662E36-78A1-4004-AE03-F5693C1BED2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "8FD8C3D8-808A-4A01-921D-243F8317F694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "8E0C624C-A725-425E-BE3C-43CA28379263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "D39AA669-F9A5-4678-AE40-F6362BA95C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "9689E7AA-B2EA-428C-945F-54935922861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "C819525C-9D6E-4097-9D48-6E2131B3FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21686",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21687",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:12.537",
      "lastModified" : "2024-11-21T07:43:26.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP.sys Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "8E0C624C-A725-425E-BE3C-43CA28379263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "D39AA669-F9A5-4678-AE40-F6362BA95C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "9689E7AA-B2EA-428C-945F-54935922861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "C819525C-9D6E-4097-9D48-6E2131B3FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21687",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21688",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:12.617",
      "lastModified" : "2024-11-21T07:43:26.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NT OS Kernel Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "C1BEE482-6A48-4238-B435-5F9EEC091ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "A4F0F6D2-7E7B-4E3E-B160-65038A850B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "8C826787-EBA0-4087-9F36-30B8192B2056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "E65DF61A-C497-4545-B95E-11E2FAFE1F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3658090D-8E87-4CE4-BAE5-A7ADED6DC296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "FC73806E-125C-470E-8123-945B9366BB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "9F74B22E-55BC-4646-95D5-049099ED1DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "0721D979-707D-4EE6-ABC7-5957D8F50391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "EB662E36-78A1-4004-AE03-F5693C1BED2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "8FD8C3D8-808A-4A01-921D-243F8317F694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "8E0C624C-A725-425E-BE3C-43CA28379263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "D39AA669-F9A5-4678-AE40-F6362BA95C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "9689E7AA-B2EA-428C-945F-54935922861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "C819525C-9D6E-4097-9D48-6E2131B3FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21688",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21689",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:12.703",
      "lastModified" : "2024-11-21T07:43:26.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "C1BEE482-6A48-4238-B435-5F9EEC091ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "A4F0F6D2-7E7B-4E3E-B160-65038A850B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "8C826787-EBA0-4087-9F36-30B8192B2056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "E65DF61A-C497-4545-B95E-11E2FAFE1F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3658090D-8E87-4CE4-BAE5-A7ADED6DC296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "FC73806E-125C-470E-8123-945B9366BB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "9F74B22E-55BC-4646-95D5-049099ED1DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "0721D979-707D-4EE6-ABC7-5957D8F50391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "EB662E36-78A1-4004-AE03-F5693C1BED2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "8FD8C3D8-808A-4A01-921D-243F8317F694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "8E0C624C-A725-425E-BE3C-43CA28379263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "D39AA669-F9A5-4678-AE40-F6362BA95C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "9689E7AA-B2EA-428C-945F-54935922861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "C819525C-9D6E-4097-9D48-6E2131B3FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21689",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21690",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:12.780",
      "lastModified" : "2024-11-21T07:43:26.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "C1BEE482-6A48-4238-B435-5F9EEC091ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "A4F0F6D2-7E7B-4E3E-B160-65038A850B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "8C826787-EBA0-4087-9F36-30B8192B2056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "E65DF61A-C497-4545-B95E-11E2FAFE1F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3658090D-8E87-4CE4-BAE5-A7ADED6DC296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "FC73806E-125C-470E-8123-945B9366BB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "9F74B22E-55BC-4646-95D5-049099ED1DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "0721D979-707D-4EE6-ABC7-5957D8F50391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "EB662E36-78A1-4004-AE03-F5693C1BED2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "8FD8C3D8-808A-4A01-921D-243F8317F694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "8E0C624C-A725-425E-BE3C-43CA28379263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "D39AA669-F9A5-4678-AE40-F6362BA95C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "9689E7AA-B2EA-428C-945F-54935922861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "C819525C-9D6E-4097-9D48-6E2131B3FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21690",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21691",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:12.863",
      "lastModified" : "2024-11-21T07:43:26.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "C1BEE482-6A48-4238-B435-5F9EEC091ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "A4F0F6D2-7E7B-4E3E-B160-65038A850B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "8C826787-EBA0-4087-9F36-30B8192B2056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "E65DF61A-C497-4545-B95E-11E2FAFE1F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3658090D-8E87-4CE4-BAE5-A7ADED6DC296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "FC73806E-125C-470E-8123-945B9366BB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "9F74B22E-55BC-4646-95D5-049099ED1DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "0721D979-707D-4EE6-ABC7-5957D8F50391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "EB662E36-78A1-4004-AE03-F5693C1BED2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "8FD8C3D8-808A-4A01-921D-243F8317F694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "8E0C624C-A725-425E-BE3C-43CA28379263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "D39AA669-F9A5-4678-AE40-F6362BA95C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "9689E7AA-B2EA-428C-945F-54935922861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "C819525C-9D6E-4097-9D48-6E2131B3FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21691",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21692",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:12.947",
      "lastModified" : "2024-11-21T07:43:26.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "C1BEE482-6A48-4238-B435-5F9EEC091ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "A4F0F6D2-7E7B-4E3E-B160-65038A850B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "8C826787-EBA0-4087-9F36-30B8192B2056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "E65DF61A-C497-4545-B95E-11E2FAFE1F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3658090D-8E87-4CE4-BAE5-A7ADED6DC296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "FC73806E-125C-470E-8123-945B9366BB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "9F74B22E-55BC-4646-95D5-049099ED1DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "0721D979-707D-4EE6-ABC7-5957D8F50391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "EB662E36-78A1-4004-AE03-F5693C1BED2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "8FD8C3D8-808A-4A01-921D-243F8317F694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "8E0C624C-A725-425E-BE3C-43CA28379263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "D39AA669-F9A5-4678-AE40-F6362BA95C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "9689E7AA-B2EA-428C-945F-54935922861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "C819525C-9D6E-4097-9D48-6E2131B3FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21692",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21693",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:13.023",
      "lastModified" : "2024-11-21T07:43:27.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21693",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21694",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:13.103",
      "lastModified" : "2024-11-21T07:43:27.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Fax Service Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21694",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21695",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:13.190",
      "lastModified" : "2024-11-21T07:43:27.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21695",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21697",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:13.280",
      "lastModified" : "2024-11-21T07:43:27.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21697",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21699",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:13.360",
      "lastModified" : "2024-11-21T07:43:27.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21699",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21700",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:13.440",
      "lastModified" : "2024-11-21T07:43:27.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows iSCSI Discovery Service Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21700",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21701",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:13.517",
      "lastModified" : "2024-11-21T07:43:28.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21701",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21702",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:13.597",
      "lastModified" : "2024-11-21T07:43:28.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows iSCSI Service Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21702",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21703",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:13.677",
      "lastModified" : "2024-11-21T07:43:28.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure Data Box Gateway Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_data_box_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6905B1B-0ED7-4785-9C9C-7F6A925B1A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_stack_edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "569FC1EE-DB05-4ABF-9011-3E4D9C826D1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21703",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21704",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:13.753",
      "lastModified" : "2024-11-21T07:43:28.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución de código remota de Microsoft ODBC Driver para SQL Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "03C65D96-44D0-4411-8B84-961973F1E4D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2016:sp3:*:*:*:*:x64:*",
            "matchCriteriaId" : "39A3D29F-0BE0-4F78-9970-58BB355775DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2017:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "2FF9FC32-3E6E-4256-B6BD-C4EF1932CA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "9144F644-A3D4-440C-8978-257E71204617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2022:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "6CB7AD22-F27B-4807-88F1-02ED420421D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21704",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21705",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:13.823",
      "lastModified" : "2024-11-21T07:43:28.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SQL Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2012:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BD8F6C-FD88-483F-95E8-16F7A6BCFCC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "03C65D96-44D0-4411-8B84-961973F1E4D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2016:sp3:*:*:*:*:x64:*",
            "matchCriteriaId" : "39A3D29F-0BE0-4F78-9970-58BB355775DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2017:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "2FF9FC32-3E6E-4256-B6BD-C4EF1932CA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "9144F644-A3D4-440C-8978-257E71204617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2022:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "6CB7AD22-F27B-4807-88F1-02ED420421D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21705",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21706",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:13.900",
      "lastModified" : "2024-11-21T07:43:28.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "DA166F2A-D83B-4D50-AD0B-668D813E0585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "FF76AEDA-E574-40ED-B64F-8FDEF8CAC802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "435343A4-BF10-461A-ABF2-D511A5FBDA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B23C8E3E-5243-4DA6-B9AA-F6053084B55E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21706",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21707",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:13.977",
      "lastModified" : "2024-11-21T07:43:28.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "DA166F2A-D83B-4D50-AD0B-668D813E0585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "FF76AEDA-E574-40ED-B64F-8FDEF8CAC802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "435343A4-BF10-461A-ABF2-D511A5FBDA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B23C8E3E-5243-4DA6-B9AA-F6053084B55E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21707",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21710",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:14.050",
      "lastModified" : "2024-11-21T07:43:29.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "FF76AEDA-E574-40ED-B64F-8FDEF8CAC802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "435343A4-BF10-461A-ABF2-D511A5FBDA75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "B23C8E3E-5243-4DA6-B9AA-F6053084B55E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21710",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21713",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:14.127",
      "lastModified" : "2024-11-21T07:43:29.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SQL Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2012:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BD8F6C-FD88-483F-95E8-16F7A6BCFCC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "03C65D96-44D0-4411-8B84-961973F1E4D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2016:sp3:*:*:*:*:x64:*",
            "matchCriteriaId" : "39A3D29F-0BE0-4F78-9970-58BB355775DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2017:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "2FF9FC32-3E6E-4256-B6BD-C4EF1932CA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "9144F644-A3D4-440C-8978-257E71204617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2022:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "6CB7AD22-F27B-4807-88F1-02ED420421D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21713",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21714",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:14.207",
      "lastModified" : "2024-11-21T07:43:29.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3EF1E5-4757-4CFA-AE72-6BA876D3C9FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21714",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21715",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:14.280",
      "lastModified" : "2025-10-30T19:12:57.310",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Publisher Security Feature Bypass Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-02-14",
      "cisaActionDue" : "2023-03-07",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Office Publisher Security Feature Bypass Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21715",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21715",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21716",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:14.360",
      "lastModified" : "2024-11-21T07:43:29.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Word Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C0BD17-4324-4DFF-9804-1825C4C182A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C3FC9A-D8E5-493A-A575-C831A9A28815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D3A185-BE57-403E-914E-FDECEC3A477C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:-:*:*:*:subscription:*:*:*",
            "matchCriteriaId" : "AC8BB33F-44C4-41FE-8B17-68E3C4B38142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:-:language_pack:*:*:subscription:*:*:*",
            "matchCriteriaId" : "FA51E2C8-321F-454B-A9C1-060885C1F892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "32E1400A-836A-4E48-B2CD-2B0A9A8241BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "45E21528-4B0F-4A6F-82AD-DF7FDBF67C8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21716",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21717",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:14.433",
      "lastModified" : "2024-11-21T07:43:29.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D3A185-BE57-403E-914E-FDECEC3A477C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:-:*:*:*:subscription:*:*:*",
            "matchCriteriaId" : "AC8BB33F-44C4-41FE-8B17-68E3C4B38142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21717",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21718",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:14.510",
      "lastModified" : "2024-11-21T07:43:30.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2008:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "744B637F-AB15-417B-B8AC-10F463CAEF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2008_r2:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DB5EE3-0742-479E-B336-72EF8E92FA6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2012:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BD8F6C-FD88-483F-95E8-16F7A6BCFCC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "03C65D96-44D0-4411-8B84-961973F1E4D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2016:sp3:*:*:*:*:x64:*",
            "matchCriteriaId" : "39A3D29F-0BE0-4F78-9970-58BB355775DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2017:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "2FF9FC32-3E6E-4256-B6BD-C4EF1932CA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "9144F644-A3D4-440C-8978-257E71204617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2022:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "6CB7AD22-F27B-4807-88F1-02ED420421D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21718",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21720",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:14.590",
      "lastModified" : "2025-01-01T01:15:20.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Tampering Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "109.0.15.18.78",
            "matchCriteriaId" : "813094EA-BBE3-4627-B70D-0D9E40198DAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21720",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21721",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:14.680",
      "lastModified" : "2024-11-21T07:43:30.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft OneNote Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:onenote:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "16.0.16026.20158",
            "matchCriteriaId" : "4FB4760C-41F5-4D36-AB69-163AD6B9E158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21721",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21722",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:14.773",
      "lastModified" : "2024-11-21T07:43:30.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : ".NET Framework Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "345FCD64-D37B-425B-B64C-8B1640B7E850"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3F18AF-84ED-473B-A8DF-65EB23C475AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A637D6-78D0-400D-82A4-FDEFCED069B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "4C3391B0-C6A6-4F6F-AC1B-AD0927C2C986"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "112871CE-B37B-454E-AC10-A285D92CCE0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "E461193F-C65C-47D7-89B6-F1C68877E3CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "37833862-8FE6-4007-84F1-88ACF5242F12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "7B844383-85F5-41FA-AE73-C6C6F80734E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "3C3151EE-B690-4412-9520-5A0EDC0E91F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "758EC2EA-ED6B-490D-A4E5-FC26AC7A0753"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7487B8-BE4D-4707-9E20-39840A260831"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E3D0CEE5-45D9-4710-B170-A33A8D0D55CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "39F5DAC9-ED40-4870-AA86-941B0E675728"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934D4E46-12C1-41DC-A28C-A2C430E965E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99895822-BFAB-4CB1-8C70-41F0F714B31F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979081E3-FB60-43E0-BF86-ED301E7EF25C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7487B8-BE4D-4707-9E20-39840A260831"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E3D0CEE5-45D9-4710-B170-A33A8D0D55CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "39F5DAC9-ED40-4870-AA86-941B0E675728"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "216BE28A-ABCD-44B5-9689-770B9A62BD35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "76AB4B84-CF32-4F18-8AC7-D41EDD3792B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDC4407-7E92-4E60-82F0-0C87D1860D3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D400E856-2B2E-4CEA-8CA5-309FDF371CEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "42A6DF09-B8E1-414D-97E7-453566055279"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAB8E45-4E6E-4ABD-A5DD-3F72DB4A7AE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E43B1A3-8DAF-4FB5-9549-190E1F2AD9E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A637D6-78D0-400D-82A4-FDEFCED069B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1703:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A026A3-F59C-48F5-9834-5FB054642136"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1709:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180EBE38-18CF-4298-8F9B-9457A31E2FF3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102319F6-1C4B-4359-8FFD-D104FF5B1C51"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2A7014-8078-4C40-91E3-ACA60A98AC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1903:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5315F244-C80B-48E0-AEA3-53D82F70C892"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F506E8F-4792-49DA-9510-460D97C582ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_2004:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFB431A-F9B7-47C3-B26E-910127D3BBB7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99895822-BFAB-4CB1-8C70-41F0F714B31F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E37CC1E-4DA1-4A05-AF64-00381E6ECCE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979081E3-FB60-43E0-BF86-ED301E7EF25C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7487B8-BE4D-4707-9E20-39840A260831"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734112B3-1383-4BE3-8721-C0F84566B764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B0E40A-84EF-4099-A395-75D6B8CDA196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3F18AF-84ED-473B-A8DF-65EB23C475AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21777",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:14.860",
      "lastModified" : "2024-11-21T07:43:37.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_app_service_on_azure_stack:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B7EC62-C0CF-49E5-A271-A75A59B24BF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21777",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21794",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:14.950",
      "lastModified" : "2025-02-28T20:15:40.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Spoofing Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.1587.41",
            "matchCriteriaId" : "5696628A-5363-4E71-B860-D1596565FC96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21794",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21797",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:15.037",
      "lastModified" : "2024-11-21T07:43:40.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft ODBC Driver Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Ejecución de Código Remota de Microsoft ODBC Driver"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "C1BEE482-6A48-4238-B435-5F9EEC091ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "A4F0F6D2-7E7B-4E3E-B160-65038A850B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "8C826787-EBA0-4087-9F36-30B8192B2056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "E65DF61A-C497-4545-B95E-11E2FAFE1F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3658090D-8E87-4CE4-BAE5-A7ADED6DC296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "FC73806E-125C-470E-8123-945B9366BB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "9F74B22E-55BC-4646-95D5-049099ED1DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "0721D979-707D-4EE6-ABC7-5957D8F50391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "EB662E36-78A1-4004-AE03-F5693C1BED2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "8FD8C3D8-808A-4A01-921D-243F8317F694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "8E0C624C-A725-425E-BE3C-43CA28379263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "D39AA669-F9A5-4678-AE40-F6362BA95C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "9689E7AA-B2EA-428C-945F-54935922861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "C819525C-9D6E-4097-9D48-6E2131B3FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21797",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21798",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:15.113",
      "lastModified" : "2024-11-21T07:43:40.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft ODBC Driver Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Ejecución de Código Remota de Microsoft ODBC Driver"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "C1BEE482-6A48-4238-B435-5F9EEC091ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "A4F0F6D2-7E7B-4E3E-B160-65038A850B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "8C826787-EBA0-4087-9F36-30B8192B2056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "E65DF61A-C497-4545-B95E-11E2FAFE1F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3658090D-8E87-4CE4-BAE5-A7ADED6DC296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "FC73806E-125C-470E-8123-945B9366BB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "9F74B22E-55BC-4646-95D5-049099ED1DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "0721D979-707D-4EE6-ABC7-5957D8F50391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "EB662E36-78A1-4004-AE03-F5693C1BED2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "8FD8C3D8-808A-4A01-921D-243F8317F694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "8E0C624C-A725-425E-BE3C-43CA28379263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "D39AA669-F9A5-4678-AE40-F6362BA95C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "9689E7AA-B2EA-428C-945F-54935922861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "C819525C-9D6E-4097-9D48-6E2131B3FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21798",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21799",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:15.193",
      "lastModified" : "2024-11-21T07:43:40.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "C1BEE482-6A48-4238-B435-5F9EEC091ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "A4F0F6D2-7E7B-4E3E-B160-65038A850B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "8C826787-EBA0-4087-9F36-30B8192B2056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "E65DF61A-C497-4545-B95E-11E2FAFE1F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3658090D-8E87-4CE4-BAE5-A7ADED6DC296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "FC73806E-125C-470E-8123-945B9366BB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "9F74B22E-55BC-4646-95D5-049099ED1DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "0721D979-707D-4EE6-ABC7-5957D8F50391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "EB662E36-78A1-4004-AE03-F5693C1BED2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "8FD8C3D8-808A-4A01-921D-243F8317F694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "8E0C624C-A725-425E-BE3C-43CA28379263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "D39AA669-F9A5-4678-AE40-F6362BA95C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "9689E7AA-B2EA-428C-945F-54935922861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "C819525C-9D6E-4097-9D48-6E2131B3FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21799",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21800",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:15.273",
      "lastModified" : "2024-11-21T07:43:40.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Installer Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21800",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21801",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:15.353",
      "lastModified" : "2024-11-21T07:43:40.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21801",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21802",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:15.427",
      "lastModified" : "2024-11-21T07:43:40.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Media Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21802",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21803",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:15.503",
      "lastModified" : "2024-11-21T07:43:41.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows iSCSI Discovery Service Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "3A08FFE4-04F1-402C-9C51-510C2001BAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "8C826787-EBA0-4087-9F36-30B8192B2056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "EB662E36-78A1-4004-AE03-F5693C1BED2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21803",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21804",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:15.580",
      "lastModified" : "2024-11-21T07:43:41.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Graphics Component Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21804",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21805",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:15.663",
      "lastModified" : "2024-11-21T07:43:41.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows MSHTML Platform Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21805",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21806",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:15.737",
      "lastModified" : "2024-11-21T07:43:41.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Power BI Report Server Spoofing Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:power_bi_report_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.0.1111.115",
            "matchCriteriaId" : "0D63665F-E1C4-4D1A-97C7-DFEBBB190EA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21806",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21807",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:15.817",
      "lastModified" : "2024-11-21T07:43:41.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartExcluding" : "9.0",
            "versionEndExcluding" : "9.0.45.11",
            "matchCriteriaId" : "918F7950-7B74-4997-ADB9-71D74D711F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.16.20",
            "matchCriteriaId" : "49D80063-7C6B-466B-A0EA-BC24CE4F335A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21807",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21809",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:15.893",
      "lastModified" : "2024-11-21T07:43:41.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Defender for Endpoint Security Feature Bypass Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:defender_security_intelligence_updates:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.379.200.0",
            "matchCriteriaId" : "931529F0-1CFF-403B-9BE2-2C0AC6A8BE55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21809",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21811",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:15.977",
      "lastModified" : "2024-11-21T07:43:41.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows iSCSI Service Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21811",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21812",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:16.057",
      "lastModified" : "2024-11-21T07:43:42.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Common Log File System Driver Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21812",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21812",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21813",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:16.133",
      "lastModified" : "2024-11-21T07:43:42.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Secure Channel Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21813",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21816",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:16.207",
      "lastModified" : "2024-11-21T07:43:42.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Active Directory Domain Services API Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21816",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21817",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:16.300",
      "lastModified" : "2024-11-21T07:43:42.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kerberos Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21817",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21818",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:16.377",
      "lastModified" : "2024-11-21T07:43:42.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Secure Channel Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21818",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21819",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:16.457",
      "lastModified" : "2024-11-21T07:43:42.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Secure Channel Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21819",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21820",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:16.527",
      "lastModified" : "2024-11-21T07:43:43.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Distributed File System (DFS) Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21820",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21822",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:16.603",
      "lastModified" : "2024-11-21T07:43:43.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Graphics Component Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "9121307D-E38E-4D26-A140-B817DDEDDC5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21822",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22490",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-14T20:15:16.683",
      "lastModified" : "2024-11-21T07:44:54.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its local clone optimization even when using a non-local transport. Though Git will abort local clones whose source `$GIT_DIR/objects` directory contains symbolic links, the `objects` directory itself may still be a symbolic link. These two may be combined to include arbitrary files based on known paths on the victim's filesystem within the malicious repository's working copy, allowing for data exfiltration in a similar manner as CVE-2022-39253.\n\nA fix has been prepared and will appear in v2.39.2 v2.38.4 v2.37.6 v2.36.5 v2.35.7 v2.34.7 v2.33.7 v2.32.6, v2.31.7 and v2.30.8. If upgrading is impractical, two short-term workarounds are available. Avoid cloning repositories from untrusted sources with `--recurse-submodules`. Instead, consider cloning repositories without recursively cloning their submodules, and instead run `git submodule update` at each layer. Before doing so, inspect each new `.gitmodules` file to ensure that it does not contain suspicious module URLs."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.30.8",
            "matchCriteriaId" : "A79D6A15-AE40-4F6C-AA1F-87C902373343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.31.0",
            "versionEndExcluding" : "2.31.7",
            "matchCriteriaId" : "D60B37A3-4B8C-4BC2-95E9-5E63EDAEBA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.32.0",
            "versionEndExcluding" : "2.32.6",
            "matchCriteriaId" : "E699ED14-3B80-4C04-AAA0-549F48581D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.33.0",
            "versionEndExcluding" : "2.33.7",
            "matchCriteriaId" : "804BE43B-E2AF-4EC8-BF8B-C292EBC4D265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.34.0",
            "versionEndExcluding" : "2.34.7",
            "matchCriteriaId" : "098C9D07-94CD-4C87-9268-20ED94BBBE12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.35.0",
            "versionEndExcluding" : "2.35.7",
            "matchCriteriaId" : "1870DF30-7795-4594-8523-DC587B60FB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.36.0",
            "versionEndExcluding" : "2.36.5",
            "matchCriteriaId" : "0588D372-41D2-442E-976E-6B24DB1A1EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.37.0",
            "versionEndExcluding" : "2.37.6",
            "matchCriteriaId" : "DDF24A4B-BC6D-499D-A0B2-2F90C691F963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.38.0",
            "versionEndExcluding" : "2.38.4",
            "matchCriteriaId" : "E7E6A7FF-F1E2-4099-9102-65F68AA42E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.39.0",
            "versionEndExcluding" : "2.39.2",
            "matchCriteriaId" : "52B03913-E564-4AE0-9F2E-BEAEEA13C85A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/git/git/commit/c867e4fa180bec4750e9b54eb10f459030dbebfd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/git/git/security/advisories/GHSA-3wp6-j8xr-qw85",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-15",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/git/git/commit/c867e4fa180bec4750e9b54eb10f459030dbebfd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/git/git/security/advisories/GHSA-3wp6-j8xr-qw85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22629",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-14T20:15:16.767",
      "lastModified" : "2025-03-20T21:15:17.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerability in the newPath parameter. An authenticated attacker can upload any file and then move it anywhere on the server's filesystem."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:southrivertech:titan_ftp_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.94.1205",
            "matchCriteriaId" : "13DC6D97-D3C0-4DBC-9BB5-349375E50E7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171737/Titan-FTP-Path-Traversal.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://f20.be/cves/titan-ftp-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://titanftp.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171737/Titan-FTP-Path-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://f20.be/cves/titan-ftp-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://titanftp.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23374",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:16.827",
      "lastModified" : "2025-01-01T01:15:32.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.1587.41",
            "matchCriteriaId" : "5696628A-5363-4E71-B860-D1596565FC96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23374",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23376",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:16.907",
      "lastModified" : "2025-10-27T17:14:37.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Common Log File System Driver Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-02-14",
      "cisaActionDue" : "2023-03-07",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "A4172403-C3DE-4F91-8E9D-37785290064B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "092A553E-DA52-4E5A-A166-9C864BE93D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3722D98C-C6B5-4ABF-8CDF-0BDC53B77067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0D1FA28A-5C8A-4D01-9F32-5B60D3FCB460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "D50EAB5C-9A36-411D-8197-CE19808CB4C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "82A1E621-0421-4B4F-831E-620A7EB1F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "9AB5B24D-432F-43AC-8659-3517FEEF96DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "A070FDF1-7167-4320-9CC7-4B21EC9E3F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "87DDADC1-AC56-4E32-A2A5-8CF10ECD6C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "707CAC89-AB43-499A-A20A-FFFE51CA45DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.1540",
            "matchCriteriaId" : "81B940DB-34F5-4D52-AE8C-2830E4514840"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23376",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23376",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23377",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:16.983",
      "lastModified" : "2024-11-21T07:46:04.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.2.0",
            "matchCriteriaId" : "6E61163B-59BE-40EA-9055-CFD3A3526AB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23377",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23378",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:17.063",
      "lastModified" : "2024-11-21T07:46:04.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Print 3D Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:print_3d:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.791",
            "matchCriteriaId" : "180E85B4-EB62-4A46-831F-4913E9CA8E12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23378",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23379",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:17.143",
      "lastModified" : "2024-11-21T07:46:04.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Defender for IoT Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:defender_for_iot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.3.6",
            "matchCriteriaId" : "AC644ECC-A222-4A24-8324-37C4FDFFE0AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23379",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23382",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:17.217",
      "lastModified" : "2024-11-21T07:46:04.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure Machine Learning Compute Instance Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-257"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_machine_learning:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.02076.0001",
            "matchCriteriaId" : "ADB8C12F-1928-43FB-9C5C-2FC7C05C552F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23382",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23390",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T20:15:17.293",
      "lastModified" : "2024-11-21T07:46:05.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3D Builder Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:3d_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.2.0",
            "matchCriteriaId" : "6E61163B-59BE-40EA-9055-CFD3A3526AB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23390",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23934",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-14T20:15:17.370",
      "lastModified" : "2024-11-21T07:47:07.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Werkzeug is a comprehensive WSGI web application library. Browsers may allow \"nameless\" cookies that look like `=value` instead of `key=value`. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie like `=__Host-test=bad` for another subdomain. Werkzeug prior to 2.2.3 will parse the cookie `=__Host-test=bad` as __Host-test=bad`. If a Werkzeug application is running next to a vulnerable or malicious subdomain which sets such a cookie using a vulnerable browser, the Werkzeug application will see the bad cookie value but the valid cookie key. The issue is fixed in Werkzeug 2.2.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:palletsprojects:werkzeug:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.3",
            "matchCriteriaId" : "EE8F26B3-94E2-45A2-A114-56AF4D262414"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pallets/werkzeug/commit/cf275f42acad1b5950c50ffe8ef58fe62cdce028",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pallets/werkzeug/releases/tag/2.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pallets/werkzeug/security/advisories/GHSA-px8h-6qxv-m22q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230818-0003/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5470",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/pallets/werkzeug/commit/cf275f42acad1b5950c50ffe8ef58fe62cdce028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pallets/werkzeug/releases/tag/2.2.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pallets/werkzeug/security/advisories/GHSA-px8h-6qxv-m22q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230818-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23946",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-14T20:15:17.457",
      "lastModified" : "2024-11-21T07:47:09.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git apply`, a path outside the working tree can be overwritten as the user who is running `git apply`. A fix has been prepared and will appear in v2.39.2, v2.38.4, v2.37.6, v2.36.5, v2.35.7, v2.34.7, v2.33.7, v2.32.6, v2.31.7, and v2.30.8. As a workaround, use `git apply --stat` to inspect a patch before applying; avoid applying one that creates a symbolic link and then creates a file beyond the symbolic link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.30.8",
            "matchCriteriaId" : "A79D6A15-AE40-4F6C-AA1F-87C902373343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.31.0",
            "versionEndExcluding" : "2.31.7",
            "matchCriteriaId" : "D60B37A3-4B8C-4BC2-95E9-5E63EDAEBA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.32.0",
            "versionEndExcluding" : "2.32.6",
            "matchCriteriaId" : "E699ED14-3B80-4C04-AAA0-549F48581D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.33.0",
            "versionEndExcluding" : "2.33.7",
            "matchCriteriaId" : "804BE43B-E2AF-4EC8-BF8B-C292EBC4D265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.34.0",
            "versionEndExcluding" : "2.34.7",
            "matchCriteriaId" : "098C9D07-94CD-4C87-9268-20ED94BBBE12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.35.0",
            "versionEndExcluding" : "2.35.7",
            "matchCriteriaId" : "1870DF30-7795-4594-8523-DC587B60FB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.36.0",
            "versionEndExcluding" : "2.36.5",
            "matchCriteriaId" : "0588D372-41D2-442E-976E-6B24DB1A1EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.37.0",
            "versionEndExcluding" : "2.37.6",
            "matchCriteriaId" : "DDF24A4B-BC6D-499D-A0B2-2F90C691F963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.38.0",
            "versionEndExcluding" : "2.38.4",
            "matchCriteriaId" : "E7E6A7FF-F1E2-4099-9102-65F68AA42E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.39.0",
            "versionEndExcluding" : "2.39.2",
            "matchCriteriaId" : "52B03913-E564-4AE0-9F2E-BEAEEA13C85A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/git/git/commit/c867e4fa180bec4750e9b54eb10f459030dbebfd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-15",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/git/git/commit/c867e4fa180bec4750e9b54eb10f459030dbebfd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25577",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-14T20:15:17.543",
      "lastModified" : "2024-11-21T07:49:45.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeug's multipart form data parser will parse an unlimited number of parts, including file parts. Parts can be a small amount of bytes, but each requires CPU time to parse and may use more memory as Python data. If a request can be made to an endpoint that accesses `request.data`, `request.form`, `request.files`, or `request.get_data(parse_form_data=False)`, it can cause unexpectedly high resource usage. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. The amount of RAM required can trigger an out of memory kill of the process. Unlimited file parts can use up memory and file handles. If many concurrent requests are sent continuously, this can exhaust or kill all available workers. Version 2.2.3 contains a patch for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:palletsprojects:werkzeug:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.3",
            "matchCriteriaId" : "EE8F26B3-94E2-45A2-A114-56AF4D262414"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pallets/werkzeug/releases/tag/2.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230818-0003/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5470",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pallets/werkzeug/releases/tag/2.2.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230818-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21553",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T21:15:10.327",
      "lastModified" : "2024-11-21T07:43:04.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure DevOps Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2020.1.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F7E9F3-B3DC-4161-AA99-DF4E17599868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2020.1.2:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "AD8ACF10-EE0E-494D-B069-CE404CD23DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2020.1.2:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCF0DB4-C5B2-4D0D-AF17-CB404F2DD596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2020.1.2:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "FE32F7D5-32A5-40C6-A2E1-9BCEA4A6D8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2020.1.2:patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "11D14A82-237F-43E1-A273-314BE6255828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21553",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21566",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T21:15:10.847",
      "lastModified" : "2024-11-21T07:43:05.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.9.52",
            "matchCriteriaId" : "832BAB52-5118-4E00-955D-BF3716B288D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.11.24",
            "matchCriteriaId" : "821BE24D-9EEE-42FE-B4E7-5C682F6B34C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.0.19",
            "matchCriteriaId" : "5AA616AA-25E5-4943-A614-99FF6DFF260E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.2",
            "versionEndExcluding" : "17.2.13",
            "matchCriteriaId" : "191993E5-B343-45A6-B485-F45F5D8E924D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.4",
            "versionEndExcluding" : "17.4.5",
            "matchCriteriaId" : "F16E4665-E579-4211-92C0-D8058F73A359"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21566",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21567",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T21:15:11.157",
      "lastModified" : "2024-11-21T07:43:06.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.9.52",
            "matchCriteriaId" : "832BAB52-5118-4E00-955D-BF3716B288D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.11.24",
            "matchCriteriaId" : "821BE24D-9EEE-42FE-B4E7-5C682F6B34C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.0.19",
            "matchCriteriaId" : "5AA616AA-25E5-4943-A614-99FF6DFF260E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.2",
            "versionEndExcluding" : "17.2.13",
            "matchCriteriaId" : "191993E5-B343-45A6-B485-F45F5D8E924D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.4",
            "versionEndExcluding" : "17.4.5",
            "matchCriteriaId" : "F16E4665-E579-4211-92C0-D8058F73A359"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21567",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21567",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21778",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T21:15:11.460",
      "lastModified" : "2024-11-21T07:43:37.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:unified_service_desk:*:*:*",
            "versionEndExcluding" : "4.2.0.51",
            "matchCriteriaId" : "35E45F78-F9BF-4D0E-A19E-707E57F88978"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21778",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21808",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T21:15:11.730",
      "lastModified" : "2024-11-21T07:43:41.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : ".NET and Visual Studio Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6CE8612-0E01-406F-B5E7-8C7F5451E2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E2C6C0-FD91-40D9-B1A4-C1C348A156C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.9.51",
            "matchCriteriaId" : "604A3D22-3DC9-4AB2-9C23-FC41E19F5B57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.11.24",
            "matchCriteriaId" : "821BE24D-9EEE-42FE-B4E7-5C682F6B34C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3393F97F-05CD-4B04-A6E1-3D914652C4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB70FC91-06DB-4E92-9C0B-6FDE078F911B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:17.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5EA902-2AC2-4027-802E-4C5CB8F180B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3F18AF-84ED-473B-A8DF-65EB23C475AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D00F295B-6ECF-43C4-BD71-98F835CCDB0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1648C361-E25C-42FE-8543-03DE56100201"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "4C3391B0-C6A6-4F6F-AC1B-AD0927C2C986"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "112871CE-B37B-454E-AC10-A285D92CCE0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "E461193F-C65C-47D7-89B6-F1C68877E3CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "37833862-8FE6-4007-84F1-88ACF5242F12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "7B844383-85F5-41FA-AE73-C6C6F80734E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "3C3151EE-B690-4412-9520-5A0EDC0E91F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "758EC2EA-ED6B-490D-A4E5-FC26AC7A0753"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "0E1ED1CF-8CE9-4C98-9691-B249B1E6A8D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5F395D0A-8E6D-4365-BB41-75208225E83F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "7BC0589A-222D-4D94-92D2-77432F8EFA61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E3D0CEE5-45D9-4710-B170-A33A8D0D55CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "39F5DAC9-ED40-4870-AA86-941B0E675728"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D00F295B-6ECF-43C4-BD71-98F835CCDB0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1648C361-E25C-42FE-8543-03DE56100201"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "251E413C-68F6-43C6-975C-C0B6AD4D36DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "4C3391B0-C6A6-4F6F-AC1B-AD0927C2C986"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "112871CE-B37B-454E-AC10-A285D92CCE0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934D4E46-12C1-41DC-A28C-A2C430E965E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5F395D0A-8E6D-4365-BB41-75208225E83F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3F18AF-84ED-473B-A8DF-65EB23C475AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "79AE85FA-1B04-4A31-B8EC-EFC0C40CE7A8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "E9DF76CF-2B8C-4548-98E4-7ED4DDBC5615"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "24780C21-148C-4441-AE89-4A7F08AA579A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1511:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "D6D9ED3A-90C6-4565-B2D4-6F8590B46708"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "D00F295B-6ECF-43C4-BD71-98F835CCDB0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1648C361-E25C-42FE-8543-03DE56100201"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1703:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5433DCD3-8F61-4733-8760-36A82FF0EEB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1703:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "C3E5003B-A395-4F99-8A22-D6C493CED98C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1709:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "BAE14E15-B7AB-475B-A62A-92F70ABA09EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1709:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "B19EA4C4-6A20-4E3F-B68C-ADCE2ECA98CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "07548CE8-7236-46B9-8D23-3FA31DABCC55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "4C25DAD2-F251-40A7-9750-31D9865269C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "4C3391B0-C6A6-4F6F-AC1B-AD0927C2C986"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "112871CE-B37B-454E-AC10-A285D92CCE0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "99BC1BAD-6690-4FA5-8543-BF22A6DB426A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "D52DA30B-90E6-40C0-B5D2-A6DBBA3CA536"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_2004:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "99546596-2062-40EF-9CA9-A89201FDFED0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_2004:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0A41C44A-61EF-493D-BF3B-810B606B5F07"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "E461193F-C65C-47D7-89B6-F1C68877E3CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "37833862-8FE6-4007-84F1-88ACF5242F12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "19A82750-CB79-4834-823B-422F7FC5044F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "1989CA28-A565-4083-9CCD-F0CADAB8D352"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "3C3151EE-B690-4412-9520-5A0EDC0E91F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "758EC2EA-ED6B-490D-A4E5-FC26AC7A0753"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "5F395D0A-8E6D-4365-BB41-75208225E83F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "7BC0589A-222D-4D94-92D2-77432F8EFA61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934D4E46-12C1-41DC-A28C-A2C430E965E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "F8C79F37-B042-4C09-80EB-2E62DBE2E241"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "E461193F-C65C-47D7-89B6-F1C68877E3CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "37833862-8FE6-4007-84F1-88ACF5242F12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "7B844383-85F5-41FA-AE73-C6C6F80734E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "3C3151EE-B690-4412-9520-5A0EDC0E91F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "758EC2EA-ED6B-490D-A4E5-FC26AC7A0753"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "0E1ED1CF-8CE9-4C98-9691-B249B1E6A8D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "7BC0589A-222D-4D94-92D2-77432F8EFA61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "E3D0CEE5-45D9-4710-B170-A33A8D0D55CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "39F5DAC9-ED40-4870-AA86-941B0E675728"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "216BE28A-ABCD-44B5-9689-770B9A62BD35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "76AB4B84-CF32-4F18-8AC7-D41EDD3792B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3F18AF-84ED-473B-A8DF-65EB23C475AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734112B3-1383-4BE3-8721-C0F84566B764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B0E40A-84EF-4099-A395-75D6B8CDA196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21808",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21815",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T21:15:11.990",
      "lastModified" : "2024-11-21T07:43:42.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de Visual Studio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.9.52",
            "matchCriteriaId" : "832BAB52-5118-4E00-955D-BF3716B288D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.11.24",
            "matchCriteriaId" : "821BE24D-9EEE-42FE-B4E7-5C682F6B34C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.0.19",
            "matchCriteriaId" : "5AA616AA-25E5-4943-A614-99FF6DFF260E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.2",
            "versionEndExcluding" : "17.2.13",
            "matchCriteriaId" : "191993E5-B343-45A6-B485-F45F5D8E924D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.4",
            "versionEndExcluding" : "17.4.5",
            "matchCriteriaId" : "F16E4665-E579-4211-92C0-D8058F73A359"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21815",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21823",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T21:15:12.297",
      "lastModified" : "2025-10-30T19:11:55.090",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Graphics Component Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código del componente de gráficos de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-02-14",
      "cisaActionDue" : "2023-03-07",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows Graphic Component Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "C1BEE482-6A48-4238-B435-5F9EEC091ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.10240.19747",
            "matchCriteriaId" : "30E6D6EE-A33D-4E8E-8C18-F161BEA396E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "A4F0F6D2-7E7B-4E3E-B160-65038A850B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5717",
            "matchCriteriaId" : "8C826787-EBA0-4087-9F36-30B8192B2056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "E65DF61A-C497-4545-B95E-11E2FAFE1F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "3658090D-8E87-4CE4-BAE5-A7ADED6DC296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4010",
            "matchCriteriaId" : "5ED13E1D-FE5F-4DC1-B08D-04BB875A8C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "FC73806E-125C-470E-8123-945B9366BB24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "7DFC40C1-A4B9-4363-8ED2-4C4D2684C8B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2604",
            "matchCriteriaId" : "0E2F1775-DB07-47B8-95B7-B3F5A1797DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "9F74B22E-55BC-4646-95D5-049099ED1DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "0721D979-707D-4EE6-ABC7-5957D8F50391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2604",
            "matchCriteriaId" : "EB662E36-78A1-4004-AE03-F5693C1BED2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "39A4A18D-2EA3-40D2-BBF7-4D560E4ED208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "8FD8C3D8-808A-4A01-921D-243F8317F694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2604",
            "matchCriteriaId" : "84EBF8C0-ACA5-47E2-A67D-B65A84E19A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "8E0C624C-A725-425E-BE3C-43CA28379263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1574",
            "matchCriteriaId" : "D39AA669-F9A5-4678-AE40-F6362BA95C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "9689E7AA-B2EA-428C-945F-54935922861D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1265",
            "matchCriteriaId" : "C819525C-9D6E-4097-9D48-6E2131B3FD90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21823",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21823",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22743",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-14T21:15:12.547",
      "lastModified" : "2024-11-21T07:45:20.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, by carefully crafting DLL and putting into a subdirectory of a specific name living next to the Git for Windows installer, Windows can be tricked into side-loading said DLL. This potentially allows users with local write access to place malicious payloads in a location where automated upgrades might run the Git for Windows installer with elevation. Version 2.39.2 contains a patch for this issue. Some workarounds are available. Never leave untrusted files in the Downloads folder or its sub-folders before executing the Git for Windows installer, or move the installer into a different directory before executing it."
      }, {
        "lang" : "es",
        "value" : "Git para Windows es el puerto de Windows del sistema de control de revisiones Git. Antes de Git para Windows versión 2.39.2, al crear cuidadosamente la DLL y colocarla en un subdirectorio con un nombre específico junto al instalador de Git para Windows, se podía engañar a Windows para que cargara dicha DLL. Potencialmente, esto permite a los usuarios con acceso de escritura local colocar payloads maliciosos en una ubicación donde las actualizaciones automáticas podrían ejecutar el instalador de Git para Windows con elevación. La versión 2.39.2 contiene un parche para este problema. Algunos workarounds están disponibles. Nunca deje archivos que no sean de confianza en la carpeta Descargas o sus subcarpetas antes de ejecutar el instalador de Git para Windows, ni mueva el instalador a un directorio diferente antes de ejecutarlo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git_for_windows_project:git_for_windows:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.39.2",
            "matchCriteriaId" : "613F976A-860B-4267-8364-74D7BC74030D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://attack.mitre.org/techniques/T1574/002/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/releases/tag/v2.39.2.windows.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/security/advisories/GHSA-gf48-x3vr-j5c3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/security/advisories/GHSA-p2x9-prp4-8gvq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://learn.microsoft.com/en-us/windows/win32/controls/cookbook-overview?redirectedfrom=MSDN#using-comctl32dll-version-6-in-an-application-that-uses-only-standard-extensions",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://learn.microsoft.com/en-us/windows/win32/sbscs/about-side-by-side-assemblies-",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://attack.mitre.org/techniques/T1574/002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/releases/tag/v2.39.2.windows.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/security/advisories/GHSA-gf48-x3vr-j5c3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/security/advisories/GHSA-p2x9-prp4-8gvq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://learn.microsoft.com/en-us/windows/win32/controls/cookbook-overview?redirectedfrom=MSDN#using-comctl32dll-version-6-in-an-application-that-uses-only-standard-extensions",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://learn.microsoft.com/en-us/windows/win32/sbscs/about-side-by-side-assemblies-",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Technical Description", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23381",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-02-14T21:15:12.920",
      "lastModified" : "2024-11-21T07:46:04.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de ejecución remota de código de Visual Studio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.9.52",
            "matchCriteriaId" : "832BAB52-5118-4E00-955D-BF3716B288D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.11.24",
            "matchCriteriaId" : "821BE24D-9EEE-42FE-B4E7-5C682F6B34C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.0.19",
            "matchCriteriaId" : "5AA616AA-25E5-4943-A614-99FF6DFF260E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.2",
            "versionEndExcluding" : "17.2.13",
            "matchCriteriaId" : "191993E5-B343-45A6-B485-F45F5D8E924D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.4",
            "versionEndExcluding" : "17.4.5",
            "matchCriteriaId" : "F16E4665-E579-4211-92C0-D8058F73A359"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23381",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23618",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-14T21:15:13.170",
      "lastModified" : "2024-11-21T07:46:32.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, when `gitk` is run on Windows, it potentially runs executables from the current directory inadvertently, which can be exploited with some social engineering to trick users into running untrusted code. A patch is available in version 2.39.2. As a workaround, avoid using `gitk` (or Git GUI's \"Visualize History\" functionality) in clones of untrusted repositories.\n"
      }, {
        "lang" : "es",
        "value" : "Git para Windows es el puerto de Windows del sistema de control de revisiones Git. Antes de Git para Windows versión 2.39.2, cuando `gitk` se ejecuta en Windows, potencialmente ejecuta archivos ejecutables del directorio actual sin darse cuenta, lo que puede explotarse con algo de ingeniería social para engañar a los usuarios para que ejecuten código que no es de confianza. Hay un parche disponible en la versión 2.39.2. Como workaround, evite usar `gitk` (o la funcionalidad \"Visualizar historial\" de Git GUI) en clones de repositorios que no sean de confianza."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git_for_windows_project:git_for_windows:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.39.2",
            "matchCriteriaId" : "613F976A-860B-4267-8364-74D7BC74030D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/git-for-windows/git/commit/49a8ec9dac3cec6602f05fed1b3f80a549c8c05c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/releases/tag/v2.39.2.windows.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/security/advisories/GHSA-wxwv-49qw-35pm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.tcl-lang.org/page/exec",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/commit/49a8ec9dac3cec6602f05fed1b3f80a549c8c05c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/releases/tag/v2.39.2.windows.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/security/advisories/GHSA-wxwv-49qw-35pm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.tcl-lang.org/page/exec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-14T22:15:10.783",
      "lastModified" : "2023-11-07T04:09:09.190",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-14T22:15:10.867",
      "lastModified" : "2023-11-07T04:09:09.223",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22368",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-15T01:15:10.473",
      "lastModified" : "2025-03-19T18:15:19.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in ELECOM Camera Assistant 1.00 and QuickFileDealer Ver.1.2.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Search Path no confiable en ELECOM Camera Assistant 1.00 y QuickFileDealer Ver.1.2.1 y anteriores permite a un atacante obtener privilegios a través de una DLL de caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elecom:camera_assistant:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0DFFC71-9293-48BC-9F55-95824952E920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elecom:quickfiledealer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "4CF1C85A-F890-417C-9DB2-E2F45F5EA569"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN60263237/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20230214-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN60263237/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20230214-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22377",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-15T01:15:10.623",
      "lastModified" : "2025-03-19T18:15:19.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper restriction of XML external entity reference (XXE) vulnerability exists in tsClinical Define.xml Generator all versions (v1.0.0 to v1.4.0) and tsClinical Metadata Desktop Tools Version 1.0.3 to Version 1.1.0. If this vulnerability is exploited, an attacker may obtain an arbitrary file which meets a certain condition by reading a specially crafted XML file."
      }, {
        "lang" : "es",
        "value" : "Existe una restricción inadecuada de la vulnerabilidad de referencia de entidad externa XML (XXE) en tsClinical Define.xml Generator todas las versiones (v1.0.0 a v1.4.0) y tsClinical Metadata Desktop Tools versión 1.0.3 a versión 1.1.0. Si se aprovecha esta vulnerabilidad, un atacante puede obtener un archivo arbitrario que cumpla una determinada condición leyendo un archivo XML especialmente manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:tsclinical_define.xml_generator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "7CD969AE-0F5A-47AA-AEC5-D09799E4CB84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujitsu:tsclinical_metadata_desktop_tools:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.3",
            "versionEndExcluding" : "1.1.1",
            "matchCriteriaId" : "86E0D282-DB0B-4D98-903F-D491E88CE0A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tsClinical/tsc-desktop/security/advisories",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN00712821/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tsClinical/tsc-desktop/security/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN00712821/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-15T01:15:10.687",
      "lastModified" : "2025-03-18T20:15:18.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en Multipart Request Parser de Django 3.2 anterior a 3.2.18, 4.0 anterior a 4.0.10 y 4.1 anterior a 4.1.7. Pasar ciertas entradas (por ejemplo, una cantidad excesiva de partes) a formularios de varias partes podría generar demasiados archivos abiertos o agotamiento de la memoria, y proporcionaba un vector potencial para un ataque de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndExcluding" : "3.2.18",
            "matchCriteriaId" : "73D9FA8C-F224-45CC-980F-F7ABD7AB9BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0.10",
            "matchCriteriaId" : "08D34DC1-EA58-44BB-BBC2-B6089E525D59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1.7",
            "matchCriteriaId" : "EDF86D1D-0552-4E21-95D2-85D2AE484F9F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/14/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.djangoproject.com/en/4.1/releases/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21forum/django-announce",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKYVMMR7RPM6AHJ2SBVM2LO6D3NGFY7B/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LTZVAKU5ALQWOKFTPISE257VCVIYGFQI/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZS4G6NSZWPTVXMMZHJOJVQEPL3QTO77/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YJB6FUBBLVKKG655UMTLQNN6UQ6EDLSP/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0006/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.djangoproject.com/weblog/2023/feb/14/security-releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/14/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.djangoproject.com/en/4.1/releases/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21forum/django-announce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKYVMMR7RPM6AHJ2SBVM2LO6D3NGFY7B/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LTZVAKU5ALQWOKFTPISE257VCVIYGFQI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZS4G6NSZWPTVXMMZHJOJVQEPL3QTO77/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YJB6FUBBLVKKG655UMTLQNN6UQ6EDLSP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.djangoproject.com/weblog/2023/feb/14/security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20927",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-02-15T03:15:10.843",
      "lastModified" : "2025-03-19T18:15:18.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-244216503"
      }, {
        "lang" : "es",
        "value" : "En los permisos de AndroidManifest.xml, existe una forma posible de otorgar permisos de firma debido a una omisión de permisos. Esto podría conducir a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. No se necesita la interacción del usuario para la explotación. Producto: Android; versiones: Android-13; ID de Android: A-244216503"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/aaos/2023-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/aaos/2023-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20949",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-02-15T03:15:10.907",
      "lastModified" : "2025-03-19T18:15:19.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In s2mpg11_pmic_probe of s2mpg11-regulator.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-259323133References: N/A"
      }, {
        "lang" : "es",
        "value" : "En s2mpg11_pmic_probe de s2mpg11-regulator.c, hay una posible lectura fuera de los límites debido a un desbordamiento del buffer del almacenamiento dinámico. Esto podría dar lugar a la divulgación de información local sin necesidad de privilegios de ejecución adicionales. No se necesita la interacción del usuario para la explotación.Producto: AndroidVersiones: kernel de AndroidID de Android: A-259323133Referencias: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-02-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25011",
      "sourceIdentifier" : "psirt-info@cyber.jp.nec.com",
      "published" : "2023-02-15T04:15:11.217",
      "lastModified" : "2025-03-19T16:15:20.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PC settings tool Ver10.1.26.0 and earlier, PC settings tool Ver11.0.22.0 and earlier allows a attacker to write to the registry as administrator privileges with standard user privileges."
      }, {
        "lang" : "es",
        "value" : "La herramienta de configuración de PC Ver10.1.26.0 y anteriores, la herramienta de configuración de PC Ver11.0.22.0 y anteriores permiten a un atacante escribir en el registro como privilegios de administrador con privilegios de usuario estándar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nec:pc_settings_tool:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0.0",
            "versionEndIncluding" : "10.1.26.0",
            "matchCriteriaId" : "4E9328F6-C48B-4924-94B1-D047E5291382"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nec:pc_settings_tool:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0.0",
            "versionEndIncluding" : "11.0.22.0",
            "matchCriteriaId" : "D5625693-72A3-4A46-A1F4-7A9A0715DE04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv23-001_en.html",
        "source" : "psirt-info@cyber.jp.nec.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv23-001_en.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0840",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-15T14:15:13.180",
      "lastModified" : "2024-11-21T07:37:56.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in PHPCrazy 1.1.1. This vulnerability affects unknown code of the file admin/admin.php?action=users&mode=info&user=2. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221086 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpcrazy_project:phpcrazy:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DD2867F-F6ED-41F0-B575-1BFC8607E098"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/whiex/asdaszdfadsaf/blob/main/PHPCrazyCMS%20storage%20CSRF.docx",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221086",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221086",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/whiex/asdaszdfadsaf/blob/main/PHPCrazyCMS%20storage%20CSRF.docx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0841",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-15T14:15:13.283",
      "lastModified" : "2024-11-21T07:37:56.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file filters/reframe_mp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221087."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:2.3-dev-rev40-g3602a5ded:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8AB1FE-492D-4281-B779-FD501A50998C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advisories/GHSA-w52x-cp47-xhhw",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/gpac/gpac/commit/851560e3dc8155d45ace4b0d77421f241ed71dc4",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/gpac/gpac/issues/2396",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/gpac/gpac/releases/tag/v2.2.1",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/qianshuidewajueji/poc/blob/main/gpac/mp3_dmx_process_poc3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221087",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221087",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-w52x-cp47-xhhw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/gpac/gpac/commit/851560e3dc8155d45ace4b0d77421f241ed71dc4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/gpac/gpac/issues/2396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/gpac/gpac/releases/tag/v2.2.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/qianshuidewajueji/poc/blob/main/gpac/mp3_dmx_process_poc3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25761",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-02-15T14:15:13.387",
      "lastModified" : "2025-03-19T16:15:21.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:junit:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1166.va_436e268e972",
            "matchCriteriaId" : "ECC6E710-8E20-4679-991F-F9723D473945"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3032",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25762",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-02-15T14:15:13.470",
      "lastModified" : "2025-03-19T19:15:39.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:pipeline\\:_build_step:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.18",
            "matchCriteriaId" : "BBB22A4D-A6B5-4924-A0EF-2AC818EE8956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3019",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25763",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-02-15T14:15:13.543",
      "lastModified" : "2025-03-19T19:15:39.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Email Extension Plugin 2.93 and earlier does not escape various fields included in bundled email templates, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control affected fields."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:email_extension:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "2.93.1",
            "matchCriteriaId" : "0EAD1FED-8A76-46BE-BA9A-4407E1368FE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2931",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25764",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-02-15T14:15:13.617",
      "lastModified" : "2025-03-19T17:15:38.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Email Extension Plugin 2.93 and earlier does not escape, sanitize, or sandbox rendered email template output or log output generated during template rendering, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or change custom email templates."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:email_extension:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "2.93.1",
            "matchCriteriaId" : "0EAD1FED-8A76-46BE-BA9A-4407E1368FE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2934",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25765",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-02-15T14:15:13.700",
      "lastModified" : "2025-03-19T17:15:38.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection, allowing attackers able to define email templates in folders to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:email_extension:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "2.93.1",
            "matchCriteriaId" : "0EAD1FED-8A76-46BE-BA9A-4407E1368FE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2939",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25766",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-02-15T14:15:13.773",
      "lastModified" : "2025-03-19T17:15:38.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:azure_credentials:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "254.v64da_8176c83a",
            "matchCriteriaId" : "6F304843-1CE7-41AF-83C9-DC2FDA8681D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-1757",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-1757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25767",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-02-15T14:15:13.847",
      "lastModified" : "2025-03-19T17:15:39.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:azure_credentials:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "254.v64da_8176c83a",
            "matchCriteriaId" : "6F304843-1CE7-41AF-83C9-DC2FDA8681D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-1756",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-1756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25768",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-02-15T14:15:13.947",
      "lastModified" : "2025-03-19T17:15:39.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:azure_credentials:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "254.v64da_8176c83a",
            "matchCriteriaId" : "6F304843-1CE7-41AF-83C9-DC2FDA8681D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-1756",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/15/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-1756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25156",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-15T15:15:11.533",
      "lastModified" : "2024-11-21T07:49:13.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt brute-force attacks against the login page. Users should upgrade to v12.0 or later to receive a patch. As a workaround, users may install and configure a rate-limiting proxy in front of Kiwi TCMS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kiwitcms:kiwi_tcms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0",
            "matchCriteriaId" : "F9830382-D694-402E-98CE-29217187D623"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kiwitcms/Kiwi/commit/0ed213fa0ddb7a6dc77e3c3b99e8fc90ccdaf46f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-7968-h4m4-ghm9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/2b1a9be9-45e9-490b-8de0-26a492e79795/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://kiwitcms.org/blog/kiwi-tcms-team/2023/02/15/kiwi-tcms-120/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/commit/0ed213fa0ddb7a6dc77e3c3b99e8fc90ccdaf46f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-7968-h4m4-ghm9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/2b1a9be9-45e9-490b-8de0-26a492e79795/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://kiwitcms.org/blog/kiwi-tcms-team/2023/02/15/kiwi-tcms-120/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25171",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-15T15:15:11.653",
      "lastModified" : "2024-11-21T07:49:14.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt denial-of-service attacks against the Password reset page. An attacker could potentially send a large number of emails if they know the email addresses of users in Kiwi TCMS. Additionally that may strain SMTP resources. Users should upgrade to v12.0 or later to receive a patch. As potential workarounds, users may install and configure a rate-limiting proxy in front of Kiwi TCMS and/or configure rate limits on their email server when possible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kiwitcms:kiwi_tcms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0",
            "matchCriteriaId" : "F9830382-D694-402E-98CE-29217187D623"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kiwitcms/Kiwi/commit/761305d04f5910ba14cc04d1255a8f1afdbb87f3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-7j9h-3jxf-3vrf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/3b712cb6-3fa3-4f71-8562-7a7016c6262e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://kiwitcms.org/blog/kiwi-tcms-team/2023/02/15/kiwi-tcms-120/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/commit/761305d04f5910ba14cc04d1255a8f1afdbb87f3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-7j9h-3jxf-3vrf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/3b712cb6-3fa3-4f71-8562-7a7016c6262e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://kiwitcms.org/blog/kiwi-tcms-team/2023/02/15/kiwi-tcms-120/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-15T15:15:11.740",
      "lastModified" : "2025-03-19T16:15:20.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AMI MegaRAC SPX devices allow Password Disclosure through Redfish. The fixed versions are SPx_12-update-7.00 and SPx_13-update-5.00."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ami:megarac_sp-x:12:-:*:*:*:*:*:*",
            "matchCriteriaId" : "781C601A-7C89-48CA-A200-E5992A9BDA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ami:megarac_sp-x:13:-:*:*:*:*:*:*",
            "matchCriteriaId" : "28ED8DD4-8626-46AC-AD64-73255EC130BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023002.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023002.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-15T15:15:11.807",
      "lastModified" : "2025-03-19T16:15:20.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ami:megarac_sp-x:12:-:*:*:*:*:*:*",
            "matchCriteriaId" : "781C601A-7C89-48CA-A200-E5992A9BDA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ami:megarac_sp-x:13:-:*:*:*:*:*:*",
            "matchCriteriaId" : "28ED8DD4-8626-46AC-AD64-73255EC130BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023002.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023002.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25578",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-15T15:15:11.883",
      "lastModified" : "2024-11-21T07:49:45.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Starlite is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 1.5.2, the request body parsing in `starlite` allows a potentially unauthenticated attacker to consume a large amount of CPU time and RAM. The multipart body parser processes an unlimited number of file parts and an unlimited number of field parts. This is a remote, potentially unauthenticated Denial of Service vulnerability. This vulnerability affects applications with a request handler that accepts a `Body(media_type=RequestEncodingType.MULTI_PART)`. The large amount of CPU time required for processing requests can block all available worker processes and significantly delay or slow down the processing of legitimate user requests. The large amount of RAM accumulated while processing requests can lead to Out-Of-Memory kills. Complete DoS is achievable by sending many concurrent multipart requests in a loop. Version 1.51.2 contains a patch for this issue.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:starliteproject:starlite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.51.2",
            "matchCriteriaId" : "25F2731E-8C59-43E0-9F2F-1A5257FC77E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/starlite-api/starlite/commit/9674fe803628f986c03fe60769048cbc55b5bf83",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/starlite-api/starlite/releases/tag/v1.51.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/starlite-api/starlite/security/advisories/GHSA-p24m-863f-fm6q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/starlite-api/starlite/commit/9674fe803628f986c03fe60769048cbc55b5bf83",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/starlite-api/starlite/releases/tag/v1.51.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/starlite-api/starlite/security/advisories/GHSA-p24m-863f-fm6q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0102",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-15T18:15:11.503",
      "lastModified" : "2024-11-21T07:36:33.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ls-electric:xbc-dn32u_firmware:01.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242DFA36-841D-457E-B4B7-592A73993C76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ls-electric:xbc-dn32u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A41BC8-F37E-41EE-BA99-AC992AC24F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0103",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-15T18:15:11.590",
      "lastModified" : "2024-11-21T07:36:33.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating. This could allow an attacker to cause a denial-of-service condition.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-788"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ls-electric:xbc-dn32u_firmware:01.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242DFA36-841D-457E-B4B7-592A73993C76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ls-electric:xbc-dn32u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A41BC8-F37E-41EE-BA99-AC992AC24F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0361",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-15T18:15:11.683",
      "lastModified" : "2025-03-19T18:15:18.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:3.6.8-11.el8_2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE4C2DF-8869-439F-99E2-2A0E7A03A96F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:converged_systems_advisor_agent:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A865472-D6A4-49D9-96E5-D33D0E58144D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-0361",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tlsfuzzer/tlsfuzzer/pull/679",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://gitlab.com/gnutls/gnutls/-/issues/1050",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00015.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFIA3X4IZ3CW7SRQ2UHNHNPMRIAWF2FI/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WS4KVDOG6QTALWHC2QE4Y7VPDRMLTRWQ/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z634YBXAJ5VLDI62IOPBVP5K6YFHAWCY/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230324-0005/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230725-0005/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-0361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tlsfuzzer/tlsfuzzer/pull/679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://gitlab.com/gnutls/gnutls/-/issues/1050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFIA3X4IZ3CW7SRQ2UHNHNPMRIAWF2FI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WS4KVDOG6QTALWHC2QE4Y7VPDRMLTRWQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z634YBXAJ5VLDI62IOPBVP5K6YFHAWCY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230324-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230725-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22803",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-15T18:15:11.747",
      "lastModified" : "2024-11-21T07:45:27.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC. This could allow an attacker to change the PLC's mode arbitrarily.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ls-electric:xbc-dn32u_firmware:01.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242DFA36-841D-457E-B4B7-592A73993C76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ls-electric:xbc-dn32u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A41BC8-F37E-41EE-BA99-AC992AC24F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22804",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-15T18:15:11.827",
      "lastModified" : "2024-11-21T07:45:27.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC. This could allow an attacker to create and use an account with elevated privileges and take control of the device.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ls-electric:xbc-dn32u_firmware:01.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242DFA36-841D-457E-B4B7-592A73993C76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ls-electric:xbc-dn32u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A41BC8-F37E-41EE-BA99-AC992AC24F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22805",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-15T18:15:11.923",
      "lastModified" : "2024-11-21T07:45:27.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LS ELECTRIC XBC-DN32U with operating system version 01.80 has improper access control to its read prohibition feature. This could allow a remote attacker to remotely set the feature to lock users out of reading data from the device.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ls-electric:xbc-dn32u_firmware:01.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242DFA36-841D-457E-B4B7-592A73993C76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ls-electric:xbc-dn32u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A41BC8-F37E-41EE-BA99-AC992AC24F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22806",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-15T18:15:12.003",
      "lastModified" : "2024-11-21T07:45:27.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol. This could allow an attacker to gain sensitive information such as user credentials.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ls-electric:xbc-dn32u_firmware:01.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242DFA36-841D-457E-B4B7-592A73993C76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ls-electric:xbc-dn32u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A41BC8-F37E-41EE-BA99-AC992AC24F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22807",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-15T18:15:12.087",
      "lastModified" : "2024-11-21T07:45:27.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol.  An attacker could control and tamper with the PLC by sending the packets to the PLC over its XGT protocol.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ls-electric:xbc-dn32u_firmware:01.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "242DFA36-841D-457E-B4B7-592A73993C76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ls-electric:xbc-dn32u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78A41BC8-F37E-41EE-BA99-AC992AC24F32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23458",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-02-15T19:15:12.300",
      "lastModified" : "2025-03-19T20:15:17.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sunell DVR, latest version, CWE-200: Exposure of Sensitive Information to an Unauthorized Actor through an unspecified request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cyber.gov.il",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sunellsecurity:sn-xvr3804e1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D1F4B5-2155-4CB9-92AB-36D58A903EC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sunellsecurity:sn-xvr3804e1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC36AB47-4477-4459-BE5D-80E13BEF4FB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sunellsecurity:sn-xvr3808e2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918E8CCB-3CAC-4F5B-A2E0-93544CB6669A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sunellsecurity:sn-xvr3808e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8017E6B3-97D4-4ABE-933D-5DA085BD548A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sunellsecurity:sn-adr3804e1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B270EE6-5859-48C7-83B8-9939B9D736DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sunellsecurity:sn-adr3804e1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678AF443-C99A-4E69-9C3F-74755289390C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sunellsecurity:sn-adr3808e1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "037F9430-B87F-4CBD-833F-3F1079ADBE92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sunellsecurity:sn-adr3808e1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41607B2B-0B1E-4DEC-920D-A2D9985276B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sunellsecurity:sn-adr3816e1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD819F0-9BCE-41EB-9B50-8AC181502B25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sunellsecurity:sn-adr3816e1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F7B966-9FC9-448F-9C22-90819E7BCC48"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sunellsecurity:sn-adr3808e2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D2A2BF-3D1A-4861-A15F-64E935BE0871"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sunellsecurity:sn-adr3808e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B9A73-5268-4DFB-8D13-F3C105E4F40A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sunellsecurity:sn-adr3816e2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5536CEF5-1693-4202-9399-006C10A09188"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sunellsecurity:sn-adr3816e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433FCB67-4EFD-4580-92B6-FD2E944DEAE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23459",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-02-15T19:15:12.380",
      "lastModified" : "2025-03-19T20:15:17.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Priority Windows may allow Command Execution via SQL Injection using an unspecified method."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cyber.gov.il",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:priority-software:priority:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.1",
            "matchCriteriaId" : "4CDB7098-E08F-40E9-828B-3F77F22A5DC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23460",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-02-15T19:15:12.453",
      "lastModified" : "2025-03-19T19:15:38.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:priority-software:priority:19.1.0.68:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B811334B-E341-4410-88E0-9CAE71CD4F55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23461",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-02-15T19:15:12.520",
      "lastModified" : "2025-03-19T19:15:39.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Libpeconv – access violation, before commit b076013 (30/11/2022)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpeconv_project:libpeconv:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022-11-30",
            "matchCriteriaId" : "390C0CBA-CF37-4D3E-8CFD-092144D83DB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23462",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-02-15T19:15:12.577",
      "lastModified" : "2025-03-19T17:15:38.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Libpeconv – integer overflow, before commit 75b1565 (30/11/2022)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cyber.gov.il",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpeconv_project:libpeconv:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022-11-30",
            "matchCriteriaId" : "390C0CBA-CF37-4D3E-8CFD-092144D83DB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23463",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-02-15T19:15:12.640",
      "lastModified" : "2024-11-21T07:46:15.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sunell DVR, latest version, Insufficiently Protected Credentials (CWE-522) may be exposed through an unspecified request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cyber.gov.il",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sunellsecurity:sn-xvr3804e1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D1F4B5-2155-4CB9-92AB-36D58A903EC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sunellsecurity:sn-xvr3804e1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC36AB47-4477-4459-BE5D-80E13BEF4FB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sunellsecurity:sn-xvr3808e2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918E8CCB-3CAC-4F5B-A2E0-93544CB6669A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sunellsecurity:sn-xvr3808e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8017E6B3-97D4-4ABE-933D-5DA085BD548A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sunellsecurity:sn-adr3804e1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B270EE6-5859-48C7-83B8-9939B9D736DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sunellsecurity:sn-adr3804e1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678AF443-C99A-4E69-9C3F-74755289390C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sunellsecurity:sn-adr3808e1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "037F9430-B87F-4CBD-833F-3F1079ADBE92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sunellsecurity:sn-adr3808e1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41607B2B-0B1E-4DEC-920D-A2D9985276B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sunellsecurity:sn-adr3816e1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD819F0-9BCE-41EB-9B50-8AC181502B25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sunellsecurity:sn-adr3816e1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F7B966-9FC9-448F-9C22-90819E7BCC48"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sunellsecurity:sn-adr3808e2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D2A2BF-3D1A-4861-A15F-64E935BE0871"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sunellsecurity:sn-adr3808e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21B9A73-5268-4DFB-8D13-F3C105E4F40A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sunellsecurity:sn-adr3816e2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5536CEF5-1693-4202-9399-006C10A09188"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sunellsecurity:sn-adr3816e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433FCB67-4EFD-4580-92B6-FD2E944DEAE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23464",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-02-15T19:15:12.727",
      "lastModified" : "2025-03-19T16:15:18.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-942"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediacp:media_control_panel:2.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE25E4D-F021-4C34-8396-58AC9E7D1804"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23465",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-02-15T19:15:12.793",
      "lastModified" : "2024-11-21T07:46:15.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cyber.gov.il",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediacp:media_control_panel:2.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE25E4D-F021-4C34-8396-58AC9E7D1804"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23466",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-02-15T19:15:12.863",
      "lastModified" : "2025-03-19T16:15:19.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Media CP Media Control Panel latest version. Insufficiently protected credential change."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediacp:media_control_panel:2.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE25E4D-F021-4C34-8396-58AC9E7D1804"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23467",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-02-15T19:15:12.933",
      "lastModified" : "2024-11-21T07:46:15.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cyber.gov.il",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediacp:media_control_panel:2.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE25E4D-F021-4C34-8396-58AC9E7D1804"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23836",
      "sourceIdentifier" : "psirt@solarwinds.com",
      "published" : "2023-02-15T19:15:13.007",
      "lastModified" : "2024-11-21T07:46:55.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SolarWinds Platform version 2022.4.1 was found to be susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to the SolarWinds Web Console to execute arbitrary commands.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@solarwinds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@solarwinds.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:orion_platform:2022.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE9CF7A-D280-4DD9-9CCE-1493501A0AF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-1_release_notes.htm",
        "source" : "psirt@solarwinds.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-23836",
        "source" : "psirt@solarwinds.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-1_release_notes.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-23836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23847",
      "sourceIdentifier" : "disclosure@synopsys.com",
      "published" : "2023-02-15T19:15:13.083",
      "lastModified" : "2025-03-19T16:15:19.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@synopsys.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:synopsys_coverity:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "3.0.3",
            "matchCriteriaId" : "011F9D09-5679-4B61-9BF9-CD7E0D320131"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-Multiple-CVEs-affecting-Coverity-Jenkins-Plugin",
        "source" : "disclosure@synopsys.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2793%20%282%29",
        "source" : "disclosure@synopsys.com"
      }, {
        "url" : "https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-Multiple-CVEs-affecting-Coverity-Jenkins-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2793%20%282%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23848",
      "sourceIdentifier" : "disclosure@synopsys.com",
      "published" : "2023-02-15T19:15:13.150",
      "lastModified" : "2025-03-18T20:15:17.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@synopsys.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:synopsys_coverity:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "3.0.3",
            "matchCriteriaId" : "011F9D09-5679-4B61-9BF9-CD7E0D320131"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-Multiple-CVEs-affecting-Coverity-Jenkins-Plugin",
        "source" : "disclosure@synopsys.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2793%20%282%29",
        "source" : "disclosure@synopsys.com"
      }, {
        "url" : "https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-Multiple-CVEs-affecting-Coverity-Jenkins-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2793%20%282%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23850",
      "sourceIdentifier" : "disclosure@synopsys.com",
      "published" : "2023-02-15T19:15:13.217",
      "lastModified" : "2025-03-18T20:15:17.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@synopsys.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:synopsys_coverity:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "3.0.3",
            "matchCriteriaId" : "011F9D09-5679-4B61-9BF9-CD7E0D320131"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-Multiple-CVEs-affecting-Coverity-Jenkins-Plugin",
        "source" : "disclosure@synopsys.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2793%20%281%29",
        "source" : "disclosure@synopsys.com"
      }, {
        "url" : "https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-Multiple-CVEs-affecting-Coverity-Jenkins-Plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2793%20%281%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24498",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-02-15T19:15:13.280",
      "lastModified" : "2024-11-21T07:47:59.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An uspecified endpoint in the web server of the switch does not properly authenticate the user identity, and may allow downloading a config page with the password to the switch in clear text."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cyber.gov.il",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:prosafe_fs726tp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "032C8A6E-66C2-4FDE-8244-4327283FB50F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:prosafe_fs726tp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0BABC99-6920-4EF9-B296-E643C53AE7AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24499",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-02-15T19:15:13.350",
      "lastModified" : "2024-11-21T07:47:59.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Butterfly Button plugin may leave traces of its use on user's device. Since it is used for reporting domestic problems, this may lead to spouse knowing about its use."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:butterfly-button_project:butterfly-button:-:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "ACBF05FD-CA99-4D2E-9D37-AE7C4AB25D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-15T21:15:10.847",
      "lastModified" : "2025-03-19T17:15:37.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method (Path.Combine from .NET) without proper sanitisation. This yields the possibility of including local files, as well as remote files on SMB shares. If one provides a file with the extension .t4, it is rendered with the .NET templating engine mono/t4, which can execute code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kardex:kardex_control_center:5.7.12\\+0-a203c2a213-master:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82ECCAA-88C1-4175-982A-B14529972221"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171046/Kardex-Mlog-MCC-5.7.12-0-a203c2a213-master-File-Inclusion-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171689/Kardex-Mlog-MCC-5.7.12-Remote-Code-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Feb/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/patrickhener/CVE-2023-22855/blob/main/advisory/advisory.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/51239",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/171046/Kardex-Mlog-MCC-5.7.12-0-a203c2a213-master-File-Inclusion-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171689/Kardex-Mlog-MCC-5.7.12-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Feb/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/patrickhener/CVE-2023-22855/blob/main/advisory/advisory.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/51239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0848",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-15T22:15:12.127",
      "lastModified" : "2024-11-21T07:37:57.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Netgear WNDR3700v2 1.0.1.14. It has been rated as problematic. This issue affects some unknown processing of the component Web Management Interface. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221147."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C070DBCF-B268-4CD5-B914-BBD115E219A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C0FE2FB-A508-4429-86F4-FFE93C1DA055"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221147",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221147",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0849",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-15T22:15:12.233",
      "lastModified" : "2024-11-21T07:37:57.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Netgear WNDR3700v2 1.0.1.14 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221152."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C070DBCF-B268-4CD5-B914-BBD115E219A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C0FE2FB-A508-4429-86F4-FFE93C1DA055"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221152",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221152",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0850",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-15T22:15:12.323",
      "lastModified" : "2024-11-21T07:37:57.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Netgear WNDR3700v2 1.0.1.14 and classified as problematic. This issue affects some unknown processing of the component Web Interface. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221153 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3700_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C070DBCF-B268-4CD5-B914-BBD115E219A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C0FE2FB-A508-4429-86F4-FFE93C1DA055"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221153",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221153",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0568",
      "sourceIdentifier" : "security@php.net",
      "published" : "2023-02-16T07:15:10.327",
      "lastModified" : "2025-02-13T17:15:55.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@php.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@php.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.28",
            "matchCriteriaId" : "BBCCD85D-5679-42EE-B6C6-A9A309E2B4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.16",
            "matchCriteriaId" : "EDC7B443-3E3C-4888-AC9B-7415D2C5C059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.3",
            "matchCriteriaId" : "7C14298C-48A4-4FD8-BFA0-808CF935490B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.php.net/bug.php?id=81746",
        "source" : "security@php.net",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0001/",
        "source" : "security@php.net"
      }, {
        "url" : "https://bugs.php.net/bug.php?id=81746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0662",
      "sourceIdentifier" : "security@php.net",
      "published" : "2023-02-16T07:15:10.577",
      "lastModified" : "2025-02-13T17:15:56.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@php.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@php.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.28",
            "matchCriteriaId" : "BBCCD85D-5679-42EE-B6C6-A9A309E2B4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.16",
            "matchCriteriaId" : "EDC7B443-3E3C-4888-AC9B-7415D2C5C059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.3",
            "matchCriteriaId" : "7C14298C-48A4-4FD8-BFA0-808CF935490B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/php/php-src/security/advisories/GHSA-54hq-v5wp-fqgv",
        "source" : "security@php.net",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0001/",
        "source" : "security@php.net"
      }, {
        "url" : "https://github.com/php/php-src/security/advisories/GHSA-54hq-v5wp-fqgv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0861",
      "sourceIdentifier" : "research@onekey.com",
      "published" : "2023-02-16T09:15:10.237",
      "lastModified" : "2024-11-21T07:37:59.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges.\nThis issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "research@onekey.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "research@onekey.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0.0",
            "versionEndExcluding" : "4.3.0.119",
            "matchCriteriaId" : "FA6AD24E-E27F-4078-8066-AB0E0D1CAA33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0.0",
            "versionEndExcluding" : "4.4.0.118",
            "matchCriteriaId" : "8000F0E9-A55B-472E-B71E-20097FC15C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0.0",
            "versionEndExcluding" : "4.6.0.105",
            "matchCriteriaId" : "EFFBFAD7-53CB-4755-A338-2FE945B3689F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.7.0.0",
            "versionEndExcluding" : "4.7.0.103",
            "matchCriteriaId" : "B543F356-8395-4F7E-A3C8-1A5DB362533C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb1601:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C90BC32-C405-4178-B944-9CF39C212C46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb1800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A80AE348-C415-4B5F-B359-26E2F2A132F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb1810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CF8E81-2EB5-4CDC-9FC9-CEAF4E1E7514"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF579A1-A31C-47F3-912A-43F5B4894497"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb2810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41310FAF-CD23-4126-942D-DA950A96DF3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb3701:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962F7AFA-76A3-4F83-AA2C-AB168C644104"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7120564A-4FE0-403E-A976-9658A665E51A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B550124-772B-4384-BA89-72B68E01F61E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:ng800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0408E588-146F-4AD2-9D58-A12EBA83A697"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://onekey.com/blog/security-advisory-netmodule-multiple-vulnerabilities",
        "source" : "research@onekey.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://share.netmodule.com/public/system-software/4.7/4.7.0.103/NRSW-RN-4.7.0.103.pdf",
        "source" : "research@onekey.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://onekey.com/blog/security-advisory-netmodule-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://share.netmodule.com/public/system-software/4.7/4.7.0.103/NRSW-RN-4.7.0.103.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0860",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-16T10:15:11.530",
      "lastModified" : "2024-11-21T07:37:59.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modoboa:installer:*:*:*:*:*:modoboa:*:*",
            "versionEndExcluding" : "2.0.4",
            "matchCriteriaId" : "22F6D8E4-5E54-4EB9-9BFA-030CB903A403"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modoboa/modoboa-installer/commit/63d92b73f3da6971ae4e13d033d625773ac91085",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/64f3ab93-1357-4468-8ff4-52bbcec18cca",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modoboa/modoboa-installer/commit/63d92b73f3da6971ae4e13d033d625773ac91085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/64f3ab93-1357-4468-8ff4-52bbcec18cca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0862",
      "sourceIdentifier" : "research@onekey.com",
      "published" : "2023-02-16T10:15:11.983",
      "lastModified" : "2024-11-21T07:37:59.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web root directory, authenticated users could gain remote command execution with elevated privileges.\n\nThis issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "research@onekey.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "research@onekey.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0.0",
            "versionEndExcluding" : "4.3.0.119",
            "matchCriteriaId" : "FA6AD24E-E27F-4078-8066-AB0E0D1CAA33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0.0",
            "versionEndExcluding" : "4.4.0.118",
            "matchCriteriaId" : "8000F0E9-A55B-472E-B71E-20097FC15C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0.0",
            "versionEndExcluding" : "4.6.0.105",
            "matchCriteriaId" : "EFFBFAD7-53CB-4755-A338-2FE945B3689F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.7.0.0",
            "versionEndExcluding" : "4.7.0.103",
            "matchCriteriaId" : "B543F356-8395-4F7E-A3C8-1A5DB362533C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb1601:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C90BC32-C405-4178-B944-9CF39C212C46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb1800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A80AE348-C415-4B5F-B359-26E2F2A132F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb1810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CF8E81-2EB5-4CDC-9FC9-CEAF4E1E7514"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF579A1-A31C-47F3-912A-43F5B4894497"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb2810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41310FAF-CD23-4126-942D-DA950A96DF3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb3701:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962F7AFA-76A3-4F83-AA2C-AB168C644104"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7120564A-4FE0-403E-A976-9658A665E51A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:nb800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B550124-772B-4384-BA89-72B68E01F61E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netmodule:ng800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0408E588-146F-4AD2-9D58-A12EBA83A697"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://onekey.com/blog/security-advisory-netmodule-multiple-vulnerabilities/",
        "source" : "research@onekey.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://share.netmodule.com/public/system-software/4.7/4.7.0.103/NRSW-RN-4.7.0.103.pdf",
        "source" : "research@onekey.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://onekey.com/blog/security-advisory-netmodule-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://share.netmodule.com/public/system-software/4.7/4.7.0.103/NRSW-RN-4.7.0.103.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22578",
      "sourceIdentifier" : "csirt@divd.nl",
      "published" : "2023-02-16T15:15:18.160",
      "lastModified" : "2024-11-21T07:45:00.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "csirt@divd.nl",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "csirt@divd.nl",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-790"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "6.29.0",
            "matchCriteriaId" : "BE3C3303-7FFC-437C-855E-D85B06288D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4179FE6A-3886-4FA1-B490-CBF6B7CE0B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E16693FF-134A-41D1-986B-5FFA8E4986AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FC165BC5-4E17-406B-BEFE-AF8FE179D251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3DA8AD1D-10AD-4AE6-9D7D-C1F263E1A405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E3819430-A940-4613-84AB-7D9976B44FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha14:*:*:*:node.js:*:*",
            "matchCriteriaId" : "78CC6DC8-E66F-4761-B094-A573D9040C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha15:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AA275970-F6E9-4898-A1C4-070F51E9EDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha16:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5FDE1D82-C9AE-4648-B90A-05446ADE90BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha17:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7C4849E3-51F0-4F96-B04F-734E965B6E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha18:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D33B30B3-77B5-4726-A4F4-A87D16A96453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha19:*:*:*:node.js:*:*",
            "matchCriteriaId" : "08603865-D895-49F5-BE44-11572ADBD6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "84C4609A-DD50-40CB-B6F8-5EFB99D3A0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha2.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "06A56CCA-72DE-46A5-B3E1-06B16FEBF4FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha2.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "433309DA-0220-4993-AF16-55BD8BB58AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0DDF5574-DF93-4D64-8665-8F6F0DB64DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6C2602C0-EA83-4C58-ADB5-54D997C7DC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5A5A8ED4-8B8D-4EB2-8877-A44879676061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3CFA85F4-2997-42F3-81D6-3646E8B2A9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "25D004E2-EEAC-4931-AECC-4BACE1B53DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8F191D02-5ACE-45A8-8690-956E0E9692C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7A482F6B-DF87-46E8-BFA4-FB78FB2508E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "16D9C410-E3C0-4D1C-B6C9-241E44815CA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "686AF958-F9CA-4E40-9F45-02178EDB14F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BC7AA901-F475-4C79-ABFE-0D3CFE544AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7E8293BE-2BAB-4B4F-9219-3DBA34F0EF0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://csirt.divd.nl/CVE-2023-22578",
        "source" : "csirt@divd.nl",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://csirt.divd.nl/DIVD-2022-00020/",
        "source" : "csirt@divd.nl",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://csirt.divd.nl/CVE-2023-22578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://csirt.divd.nl/DIVD-2022-00020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22579",
      "sourceIdentifier" : "csirt@divd.nl",
      "published" : "2023-02-16T15:15:18.460",
      "lastModified" : "2024-11-21T07:45:00.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to improper parameter filtering in the sequalize js library, can a attacker peform injection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "csirt@divd.nl",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "csirt@divd.nl",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "6.28.1",
            "matchCriteriaId" : "C6D41099-F18E-4C0F-8EF9-6EE5E3828496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4179FE6A-3886-4FA1-B490-CBF6B7CE0B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E16693FF-134A-41D1-986B-5FFA8E4986AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FC165BC5-4E17-406B-BEFE-AF8FE179D251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3DA8AD1D-10AD-4AE6-9D7D-C1F263E1A405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E3819430-A940-4613-84AB-7D9976B44FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha14:*:*:*:node.js:*:*",
            "matchCriteriaId" : "78CC6DC8-E66F-4761-B094-A573D9040C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha15:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AA275970-F6E9-4898-A1C4-070F51E9EDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha16:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5FDE1D82-C9AE-4648-B90A-05446ADE90BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha17:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7C4849E3-51F0-4F96-B04F-734E965B6E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha18:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D33B30B3-77B5-4726-A4F4-A87D16A96453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha19:*:*:*:node.js:*:*",
            "matchCriteriaId" : "08603865-D895-49F5-BE44-11572ADBD6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "84C4609A-DD50-40CB-B6F8-5EFB99D3A0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha2.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "06A56CCA-72DE-46A5-B3E1-06B16FEBF4FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha2.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "433309DA-0220-4993-AF16-55BD8BB58AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0DDF5574-DF93-4D64-8665-8F6F0DB64DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6C2602C0-EA83-4C58-ADB5-54D997C7DC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5A5A8ED4-8B8D-4EB2-8877-A44879676061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3CFA85F4-2997-42F3-81D6-3646E8B2A9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "25D004E2-EEAC-4931-AECC-4BACE1B53DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8F191D02-5ACE-45A8-8690-956E0E9692C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7A482F6B-DF87-46E8-BFA4-FB78FB2508E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "16D9C410-E3C0-4D1C-B6C9-241E44815CA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "686AF958-F9CA-4E40-9F45-02178EDB14F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BC7AA901-F475-4C79-ABFE-0D3CFE544AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7E8293BE-2BAB-4B4F-9219-3DBA34F0EF0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://csirt.divd.nl/CVE-2023-22579",
        "source" : "csirt@divd.nl",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://csirt.divd.nl/DIVD-2022-00020/",
        "source" : "csirt@divd.nl",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://csirt.divd.nl/CVE-2023-22579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://csirt.divd.nl/DIVD-2022-00020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22580",
      "sourceIdentifier" : "csirt@divd.nl",
      "published" : "2023-02-16T15:15:18.727",
      "lastModified" : "2024-11-21T07:45:00.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "csirt@divd.nl",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "csirt@divd.nl",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "6.28.1",
            "matchCriteriaId" : "C6D41099-F18E-4C0F-8EF9-6EE5E3828496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4179FE6A-3886-4FA1-B490-CBF6B7CE0B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha10:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E16693FF-134A-41D1-986B-5FFA8E4986AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha11:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FC165BC5-4E17-406B-BEFE-AF8FE179D251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha12:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3DA8AD1D-10AD-4AE6-9D7D-C1F263E1A405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha13:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E3819430-A940-4613-84AB-7D9976B44FCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha14:*:*:*:node.js:*:*",
            "matchCriteriaId" : "78CC6DC8-E66F-4761-B094-A573D9040C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha15:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AA275970-F6E9-4898-A1C4-070F51E9EDAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha16:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5FDE1D82-C9AE-4648-B90A-05446ADE90BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha17:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7C4849E3-51F0-4F96-B04F-734E965B6E49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha18:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D33B30B3-77B5-4726-A4F4-A87D16A96453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha19:*:*:*:node.js:*:*",
            "matchCriteriaId" : "08603865-D895-49F5-BE44-11572ADBD6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "84C4609A-DD50-40CB-B6F8-5EFB99D3A0E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha2.1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "06A56CCA-72DE-46A5-B3E1-06B16FEBF4FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha2.2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "433309DA-0220-4993-AF16-55BD8BB58AF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0DDF5574-DF93-4D64-8665-8F6F0DB64DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6C2602C0-EA83-4C58-ADB5-54D997C7DC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha5:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5A5A8ED4-8B8D-4EB2-8877-A44879676061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha6:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3CFA85F4-2997-42F3-81D6-3646E8B2A9E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha7:*:*:*:node.js:*:*",
            "matchCriteriaId" : "25D004E2-EEAC-4931-AECC-4BACE1B53DB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha8:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8F191D02-5ACE-45A8-8690-956E0E9692C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha9:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7A482F6B-DF87-46E8-BFA4-FB78FB2508E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_1:*:*:*:node.js:*:*",
            "matchCriteriaId" : "16D9C410-E3C0-4D1C-B6C9-241E44815CA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_2:*:*:*:node.js:*:*",
            "matchCriteriaId" : "686AF958-F9CA-4E40-9F45-02178EDB14F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_3:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BC7AA901-F475-4C79-ABFE-0D3CFE544AD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_4:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7E8293BE-2BAB-4B4F-9219-3DBA34F0EF0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://csirt.divd.nl/CVE-2023-22580",
        "source" : "csirt@divd.nl",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://csirt.divd.nl/DIVD-2022-00020/",
        "source" : "csirt@divd.nl",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://csirt.divd.nl/CVE-2023-22580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://csirt.divd.nl/DIVD-2022-00020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-16T15:15:18.980",
      "lastModified" : "2025-03-18T20:15:18.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7100ru_firmware:7.4cu.2313_b20191024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C47206-6608-4258-A2FE-D15C5637192D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7100ru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DD0831-0EB3-4F09-B4E4-6165E53AB6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-16T15:15:19.193",
      "lastModified" : "2025-03-18T20:15:18.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parameter at setting/delStaticDhcpRules."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7100ru_firmware:7.4cu.2313_b20191024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C47206-6608-4258-A2FE-D15C5637192D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7100ru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DD0831-0EB3-4F09-B4E4-6165E53AB6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/20",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25153",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-16T15:15:19.477",
      "lastModified" : "2024-11-21T07:49:12.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file where a limit was not applied could cause a denial of service. This bug has been fixed in containerd 1.6.18 and 1.5.18.  Users should update to these versions to resolve the issue. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.18",
            "matchCriteriaId" : "4C98A2DA-3CDD-4438-AECC-DDDA67E61935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.0",
            "versionEndExcluding" : "1.6.18",
            "matchCriteriaId" : "BDD5FC3E-BEEB-4CAA-845E-3BADF39E46B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/containerd/containerd/commit/0c314901076a74a7b797a545d2f462285fdbb8c4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/containerd/containerd/releases/tag/v1.5.18",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/containerd/containerd/releases/tag/v1.6.18",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/containerd/containerd/commit/0c314901076a74a7b797a545d2f462285fdbb8c4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/containerd/containerd/releases/tag/v1.5.18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/containerd/containerd/releases/tag/v1.6.18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25173",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-16T15:15:20.057",
      "lastModified" : "2024-11-21T07:49:15.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive information or gaining the ability to execute code in that container. Downstream applications that use the containerd client library may be affected as well.\n\nThis bug has been fixed in containerd v1.6.18 and v.1.5.18. Users should update to these versions and recreate containers to resolve this issue. Users who rely on a downstream application that uses containerd's client library should check that application for a separate advisory and instructions. As a workaround, ensure that the `\"USER $USERNAME\"` Dockerfile instruction is not used. Instead, set the container entrypoint to a value similar to `ENTRYPOINT [\"su\", \"-\", \"user\"]` to allow `su` to properly set up supplementary groups."
      }, {
        "lang" : "es",
        "value" : "Containerd es contenedor de código abierto en tiempo de ejecución. Se encontró un error en Containerd antes de las versiones 1.6.18 y 1.5.18 donde los grupos suplementarios no están configurados correctamente dentro de un contenedor. Si un atacante tiene acceso directo a un contenedor y manipula su acceso de grupo suplementario, es posible que pueda utilizar el acceso de grupo suplementario para eludir las restricciones del grupo primario en algunos casos, obteniendo potencialmente acceso a información confidencial o obteniendo la capacidad de ejecutar código en ese contenedor. Las aplicaciones posteriores que utilizan la librería cliente en containerd también pueden verse afectadas. Este error se ha solucionado en Containerd v1.6.18 y v.1.5.18. Los usuarios deben actualizar a estas versiones y volver a crear containers para resolver este problema. Los usuarios que dependen de una aplicación posterior que utiliza la librería cliente de Containerd deben verificar esa aplicación para obtener avisos e instrucciones por separado. Como workaround, asegúrese de que no se utilice la instrucción de Dockerfile `\"USER $USERNAME\"`. En su lugar, establezca el punto de entrada del contenedor en un valor similar a `ENTRYPOINT [\"su\", \"-\", \"user\"]` para permitir que `su` configure correctamente grupos suplementarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.18",
            "matchCriteriaId" : "4C98A2DA-3CDD-4438-AECC-DDDA67E61935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.0",
            "versionEndExcluding" : "1.6.18",
            "matchCriteriaId" : "BDD5FC3E-BEEB-4CAA-845E-3BADF39E46B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advisories/GHSA-4wjj-jwc9-2x96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-fjm8-m7m6-2fjp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-phjr-8j92-w5v7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/containerd/containerd/commit/133f6bb6cd827ce35a5fb279c1ead12b9d21460a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/containerd/containerd/releases/tag/v1.5.18",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/containerd/containerd/releases/tag/v1.6.18",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-rc4r-wh2q-q6c4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-4wjj-jwc9-2x96",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-fjm8-m7m6-2fjp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-phjr-8j92-w5v7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/containerd/containerd/commit/133f6bb6cd827ce35a5fb279c1ead12b9d21460a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/containerd/containerd/releases/tag/v1.5.18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/containerd/containerd/releases/tag/v1.6.18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-rc4r-wh2q-q6c4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23558",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-16T16:15:12.463",
      "lastModified" : "2025-03-19T16:15:19.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver with mode 0777 before the etserver process is started. The attacker can choose to read sensitive information from that file, or modify the information in that file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eternal_terminal_project:eternal_terminal:6.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2836762E-FEA1-4C3D-BD08-EDDB8C1B4161"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/16/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1207126",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MisterTea/EternalTerminal",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/02/16/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1207126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MisterTea/EternalTerminal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23926",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-16T16:15:12.517",
      "lastModified" : "2024-11-21T07:47:06.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j. An XML External Entity (XXE) vulnerability found in the apoc.import.graphml procedure of APOC core plugin prior to version 5.5.0 and 4.4.0.14 (4.4 branch) in Neo4j graph database. XML External Entity (XXE) injection occurs when the XML parser allows external entities to be resolved. The XML parser used by the apoc.import.graphml procedure was not configured in a secure way and therefore allowed this. External entities can be used to read local files, send HTTP requests, and perform denial-of-service attacks on the application. Abusing the XXE vulnerability enabled assessors to read local files remotely. Although with the level of privileges assessors had this was limited to one-line files. With the ability to write to the database, any file could have been read. Additionally, assessors noted, with local testing, the server could be crashed by passing in improperly formatted XML. The minimum version containing a patch for this vulnerability is 5.5.0. Those who cannot upgrade the library can control the allowlist of the procedures that can be used in your system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neo4j:awesome_procedures_on_cyper:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.0",
            "matchCriteriaId" : "8ED72D9C-C212-4B86-902A-D4E40A44C0AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/neo4j/apoc/pull/310",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/neo4j/apoc/releases/tag/5.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/neo4j/apoc/security/advisories/GHSA-6wxg-wh7f-rqpr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://neo4j.com/docs/operations-manual/current/reference/configuration-settings/#config_dbms.security.procedures.allowlist",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/neo4j/apoc/pull/310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/neo4j/apoc/releases/tag/5.5.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/neo4j/apoc/security/advisories/GHSA-6wxg-wh7f-rqpr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://neo4j.com/docs/operations-manual/current/reference/configuration-settings/#config_dbms.security.procedures.allowlist",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23752",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2023-02-16T17:15:10.603",
      "lastModified" : "2025-10-24T20:48:06.707",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "cisaExploitAdd" : "2024-01-08",
      "cisaActionDue" : "2024-01-29",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Joomla! Improper Access Control Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.2.8",
            "matchCriteriaId" : "C6F63041-8035-4313-8636-4170A131A2C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/894-20230201-core-improper-access-check-in-webservice-endpoints.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/894-20230201-core-improper-access-check-in-webservice-endpoints.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23752",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23936",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-16T18:15:10.877",
      "lastModified" : "2024-11-21T07:47:08.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Undici is an HTTP/1.1 client for Node.js. Starting with version 2.0.0 and prior to version 5.19.1, the undici library does not protect `host` HTTP header from CRLF injection vulnerabilities. This issue is patched in Undici v5.19.1. As a workaround, sanitize the `headers.host` string before passing to undici."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.19.1",
            "matchCriteriaId" : "6E9FAEC6-2D3A-4CBE-859F-11BCECC4F724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "18.0.0",
            "versionEndExcluding" : "18.14.1",
            "matchCriteriaId" : "80500AD0-17C2-4698-AE03-1C6782FD38B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "19.0.0",
            "versionEndExcluding" : "19.6.1",
            "matchCriteriaId" : "8F4FCD16-4B9F-44B9-80DD-D024759CAB10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:undici:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "5.19.1",
            "matchCriteriaId" : "0B81E26E-5BF8-495E-9544-E9688B6AE5BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nodejs/undici/commit/a2eff05401358f6595138df963837c24348f2034",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nodejs/undici/releases/tag/v5.19.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nodejs/undici/security/advisories/GHSA-5r9g-qh6m-jxff",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1820955",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nodejs/undici/commit/a2eff05401358f6595138df963837c24348f2034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nodejs/undici/releases/tag/v5.19.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nodejs/undici/security/advisories/GHSA-5r9g-qh6m-jxff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1820955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23947",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-16T18:15:11.310",
      "lastModified" : "2024-11-21T07:47:09.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All Argo CD versions starting with 2.3.0-rc1 and prior to 2.3.17, 2.4.23  2.5.11, and 2.6.2 are vulnerable to an improper authorization bug which allows users who have the ability to update at least one cluster secret to update any cluster secret. The attacker could use this access to escalate privileges (potentially controlling Kubernetes resources) or to break Argo CD functionality (by preventing connections to external clusters). A patch for this vulnerability has been released in Argo CD versions 2.6.2, 2.5.11, 2.4.23, and 2.3.17. Two workarounds are available. Either modify the RBAC configuration to completely revoke all `clusters, update` access, or use the `destinations` and `clusterResourceWhitelist` fields to apply similar restrictions as the `namespaces` and `clusterResources` fields."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndExcluding" : "2.3.17",
            "matchCriteriaId" : "01F0F9FB-9877-4CA3-A9F1-1C8B79E3DC3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.4.23",
            "matchCriteriaId" : "F32C8974-5576-4D8A-8286-DA7EC6F6DA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.11",
            "matchCriteriaId" : "875E38E1-72CE-4DEC-AAE1-B89574E46C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndExcluding" : "2.6.2",
            "matchCriteriaId" : "4E764C4A-38DB-468D-88BB-F1E9C1E2CDD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/argoproj/argo-cd/commit/fbb0b99b1ac3361b253052bd30259fa43a520945",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/security/advisories/GHSA-3jfq-742w-xg8j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/commit/fbb0b99b1ac3361b253052bd30259fa43a520945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/security/advisories/GHSA-3jfq-742w-xg8j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24483",
      "sourceIdentifier" : "secure@citrix.com",
      "published" : "2023-02-16T18:15:11.613",
      "lastModified" : "2025-03-18T20:15:18.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@citrix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:virtual_apps_and_desktops:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "2212",
            "matchCriteriaId" : "91005BBC-3F35-4161-B525-8A8272861607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:-:*:*:ltsr:*:*:*",
            "matchCriteriaId" : "F9330183-B04B-46F1-9DA6-5EAF216DFCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu1:*:*:ltsr:*:*:*",
            "matchCriteriaId" : "A2486FD4-AF16-4F57-836A-42A2D11012C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu2:*:*:ltsr:*:*:*",
            "matchCriteriaId" : "1BF66372-CFDC-42DD-87FA-480DC0565977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu3:*:*:ltsr:*:*:*",
            "matchCriteriaId" : "AE1E7523-EEB7-46CE-A01E-04FACB407395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu4:*:*:ltsr:*:*:*",
            "matchCriteriaId" : "0B60552E-923B-4064-96D9-0F565C58695C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu5:*:*:ltsr:*:*:*",
            "matchCriteriaId" : "21EC9092-FCA9-41AA-9A9B-83D7E3DABB2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:-:*:*:ltsr:*:*:*",
            "matchCriteriaId" : "8AE1E7FC-9E2C-45BC-9F12-43149210D261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu1:*:*:ltsr:*:*:*",
            "matchCriteriaId" : "0AEBE958-3A73-4F9D-932E-62495408A609"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.citrix.com/article/CTX477616/citrix-virtual-apps-and-desktops-security-bulletin-for-cve202324483",
        "source" : "secure@citrix.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX477616/citrix-virtual-apps-and-desktops-security-bulletin-for-cve202324483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24484",
      "sourceIdentifier" : "secure@citrix.com",
      "published" : "2023-02-16T18:15:11.900",
      "lastModified" : "2025-03-18T20:15:18.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious user can cause log files to be written to a directory that they do not have permission to write to."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@citrix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:*:*:*:*:-:windows:*:*",
            "versionEndExcluding" : "2212",
            "matchCriteriaId" : "BF677539-1D84-4A05-A8AF-09723A3909D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:-:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "554F6592-C252-4B1D-ABEF-C4EE7EACF061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:cu1:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "3C032E97-4C37-4FE9-BD0E-3AC933489A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:cu1-hf1:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "AECFCE88-901F-4025-AF58-BC7A9207CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:cu2:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "179CEA0E-92D8-41A8-A2E2-B6808A2CAA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:cu3:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "998E9AAF-E239-4861-8377-B62330FAB903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:cu4:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "37D106D3-119F-4194-8F16-C3317248A4D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:cu5:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "3078BBCA-DC94-4B7A-8B74-C012DB4A98A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:cu6:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "D826A570-C5C3-4E67-BABE-E1999C2AB60B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:2203.1:-:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "FEB0B74B-89A7-4194-8881-F35FEAE672BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:2203.1:cu1:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "A1A14B8C-1B61-4682-AABE-4732B65E51BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485",
        "source" : "secure@citrix.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24485",
      "sourceIdentifier" : "secure@citrix.com",
      "published" : "2023-02-16T18:15:12.133",
      "lastModified" : "2025-03-19T15:15:44.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@citrix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:*:*:*:*:-:windows:*:*",
            "versionEndExcluding" : "2212",
            "matchCriteriaId" : "BF677539-1D84-4A05-A8AF-09723A3909D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:-:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "554F6592-C252-4B1D-ABEF-C4EE7EACF061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:cu1:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "3C032E97-4C37-4FE9-BD0E-3AC933489A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:cu1-hf1:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "AECFCE88-901F-4025-AF58-BC7A9207CF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:cu2:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "179CEA0E-92D8-41A8-A2E2-B6808A2CAA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:cu3:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "998E9AAF-E239-4861-8377-B62330FAB903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:cu4:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "37D106D3-119F-4194-8F16-C3317248A4D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:cu5:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "3078BBCA-DC94-4B7A-8B74-C012DB4A98A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:1912:cu6:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "D826A570-C5C3-4E67-BABE-E1999C2AB60B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:2203.1:-:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "FEB0B74B-89A7-4194-8881-F35FEAE672BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citrix:workspace:2203.1:cu1:*:*:ltsr:windows:*:*",
            "matchCriteriaId" : "A1A14B8C-1B61-4682-AABE-4732B65E51BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485",
        "source" : "secure@citrix.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24807",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-16T18:15:12.340",
      "lastModified" : "2024-11-21T07:48:26.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Undici is an HTTP/1.1 client for Node.js. Prior to version 5.19.1, the `Headers.set()` and `Headers.append()` methods are vulnerable to Regular Expression Denial of Service (ReDoS) attacks when untrusted values are passed into the functions. This is due to the inefficient regular expression used to normalize the values in the `headerValueNormalize()` utility function. This vulnerability was patched in v5.19.1. No known workarounds are available."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:undici:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.19.1",
            "matchCriteriaId" : "0C8DD628-9AE0-4AB8-9C30-28B60906F606"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nodejs/undici/commit/f2324e549943f0b0937b09fb1c0c16cc7c93abdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nodejs/undici/releases/tag/v5.19.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nodejs/undici/security/advisories/GHSA-r6ch-mqf9-qc9w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/bugs?report_id=1784449",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nodejs/undici/commit/f2324e549943f0b0937b09fb1c0c16cc7c93abdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nodejs/undici/releases/tag/v5.19.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/nodejs/undici/security/advisories/GHSA-r6ch-mqf9-qc9w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/bugs?report_id=1784449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230324-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0475",
      "sourceIdentifier" : "security@hashicorp.com",
      "published" : "2023-02-16T19:15:13.867",
      "lastModified" : "2024-11-21T07:37:15.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hashicorp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hashicorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-409"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:go-getter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.2",
            "matchCriteriaId" : "8D28DF0E-9F2C-43E8-80DE-E8F984651104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:go-getter:2.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "257D6714-497C-498D-97AA-EA0366238072"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-4-go-getter-vulnerable-to-denial-of-service-via-malicious-compressed-archive/50125",
        "source" : "security@hashicorp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-4-go-getter-vulnerable-to-denial-of-service-via-malicious-compressed-archive/50125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22638",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-02-16T19:15:13.977",
      "lastModified" : "2024-11-21T07:45:06.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Several improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC  9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.11 and below, 8.7.6 and below, 8.6.5 and below, 8.5.4 and below, 8.3.7 and below may allow an authenticated attacker to perform several XSS attacks via crafted HTTP GET requests."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0",
            "versionEndIncluding" : "8.5.4",
            "matchCriteriaId" : "8292B841-851C-42C2-AF13-17AB2FA894CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0",
            "versionEndIncluding" : "8.6.5",
            "matchCriteriaId" : "95E75B88-1750-4FB6-BCE4-74B69D93C918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0",
            "versionEndIncluding" : "8.7.6",
            "matchCriteriaId" : "3BD32B25-76B4-4D6E-BB5C-065070297058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.8.0",
            "versionEndIncluding" : "8.8.11",
            "matchCriteriaId" : "46929BE3-0396-4B8A-9889-9F6CA73FAD4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0",
            "versionEndIncluding" : "9.1.9",
            "matchCriteriaId" : "D101F116-0C73-401E-9882-8BA2F403FA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndIncluding" : "9.2.7",
            "matchCriteriaId" : "B341AE7E-48F1-4ABE-891F-F9D543D19E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortinac:8.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952F266E-0E48-4D69-81E0-9F813B60AC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12E11B0-E21A-4124-9DF9-FF268BB19813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortinac:9.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4648F862-AB8C-4B8D-8F2D-5D2641F08845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-260",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23778",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-02-16T19:15:14.120",
      "lastModified" : "2024-11-21T07:46:48.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated user to obtain unauthorized access to files and data via specifically crafted web requests."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.3",
            "versionEndIncluding" : "6.2.7",
            "matchCriteriaId" : "6BEC9155-F85D-4E82-903C-001822686BE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.0",
            "versionEndIncluding" : "6.3.21",
            "matchCriteriaId" : "2B368CF5-3A17-476C-BD57-887230A17A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A92A08-E6F6-4522-A6DA-061950AD3525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6775BE1F-184A-45D2-9D8D-AA8F40227988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DF60F8C-355E-4F89-A1E3-EE0644D03EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A50C87E-68F1-449E-8111-4082CD9BBCA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-142",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23779",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-02-16T19:15:14.187",
      "lastModified" : "2024-11-21T07:46:48.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below may allow an authenticated attacker to execute unauthorized code or commands via crafted parameters of HTTP requests."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.6",
            "versionEndIncluding" : "6.3.19",
            "matchCriteriaId" : "2D8BD0BB-6CD4-4340-9271-E774DF35FA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A92A08-E6F6-4522-A6DA-061950AD3525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:6.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6775BE1F-184A-45D2-9D8D-AA8F40227988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DF60F8C-355E-4F89-A1E3-EE0644D03EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A50C87E-68F1-449E-8111-4082CD9BBCA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-133",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23780",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-02-16T19:15:14.250",
      "lastModified" : "2024-11-21T07:46:49.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through 6.3.19, Fortinet FortiWeb 6.4 all versions allows attacker to escalation of privilege via specifically crafted HTTP requests."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.0",
            "versionEndExcluding" : "6.3.20",
            "matchCriteriaId" : "1EC1014F-44DE-4FC7-B0A7-82BEA9A443F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndIncluding" : "6.4.2",
            "matchCriteriaId" : "F6B93ABE-8620-4253-83C0-3D2228D20118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.2",
            "matchCriteriaId" : "9054E8B0-2CF0-4DD3-8D5A-34C399F7C20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-118",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23781",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-02-16T19:15:14.317",
      "lastModified" : "2024-11-21T07:46:49.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below SAML server configuration may allow an authenticated attacker to achieve arbitrary code execution via specifically crafted XML files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.0",
            "versionEndExcluding" : "6.3.20",
            "matchCriteriaId" : "1EC1014F-44DE-4FC7-B0A7-82BEA9A443F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndIncluding" : "6.4.2",
            "matchCriteriaId" : "F6B93ABE-8620-4253-83C0-3D2228D20118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.2",
            "matchCriteriaId" : "9054E8B0-2CF0-4DD3-8D5A-34C399F7C20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-151",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23782",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-02-16T19:15:14.383",
      "lastModified" : "2024-11-21T07:46:49.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 all versions, FortiWeb 6.1 all versions allows attacker to escalation of privilege via specifically crafted arguments to existing commands."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.2.7",
            "matchCriteriaId" : "906A573F-4734-453E-B9F1-320CE979A0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.0",
            "versionEndExcluding" : "6.3.20",
            "matchCriteriaId" : "1EC1014F-44DE-4FC7-B0A7-82BEA9A443F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndIncluding" : "6.4.2",
            "matchCriteriaId" : "F6B93ABE-8620-4253-83C0-3D2228D20118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.2",
            "matchCriteriaId" : "9054E8B0-2CF0-4DD3-8D5A-34C399F7C20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-111",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23783",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-02-16T19:15:14.450",
      "lastModified" : "2024-11-21T07:46:49.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted command arguments."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "6.4.2",
            "matchCriteriaId" : "C97F7E3F-4747-46AA-8D2C-5D7C363CDB14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.2",
            "matchCriteriaId" : "9054E8B0-2CF0-4DD3-8D5A-34C399F7C20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-187",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23784",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-02-16T19:15:14.517",
      "lastModified" : "2024-11-21T07:46:49.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker to information disclosure via specially crafted web requests."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.6",
            "versionEndExcluding" : "6.3.21",
            "matchCriteriaId" : "065777FA-70C7-418D-924E-379840F3C46B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndIncluding" : "6.4.2",
            "matchCriteriaId" : "F6B93ABE-8620-4253-83C0-3D2228D20118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.3",
            "matchCriteriaId" : "A9851C39-C7A5-4E0F-BF5D-0E3D2D36AAAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-251",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-251",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25602",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-02-16T19:15:14.583",
      "lastModified" : "2024-11-21T07:49:48.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb versions 6.2.6 and earlier, FortiWeb versions 6.1.2 and earlier, FortiWeb versions 6.0.7 and earlier, FortiWeb versions 5.9.1 and earlier, FortiWeb 5.8 all versions, FortiWeb 5.7 all versions, FortiWeb 5.6 all versions allows attacker to execute unauthorized code or commands via specially crafted command arguments."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndExcluding" : "5.9.2",
            "matchCriteriaId" : "E8FDE2B1-1E8E-4DA7-B545-487914EF232D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.8",
            "matchCriteriaId" : "8BE261E5-059D-4B89-893A-458E0B40CFD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.0",
            "versionEndExcluding" : "6.1.3",
            "matchCriteriaId" : "9EFA8AB9-2777-471C-A1DA-635BDACE2F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.2.7",
            "matchCriteriaId" : "919112F8-1479-45F0-BE4D-91112143D2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.0",
            "versionEndExcluding" : "6.3.18",
            "matchCriteriaId" : "5433933C-D06F-4325-B9D4-392D8A866813"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndIncluding" : "6.4.2",
            "matchCriteriaId" : "F6B93ABE-8620-4253-83C0-3D2228D20118"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-21-234",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-21-234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25653",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-16T19:15:14.650",
      "lastModified" : "2024-11-21T07:49:52.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior to version 2.2.0, when using the non-default \"fallback\" crypto back-end, ECC operations in `node-jose` can trigger a Denial-of-Service (DoS) condition, due to a possible infinite loop in an internal calculation.  For some ECC operations, this condition is triggered randomly; for others, it can be triggered by malicious input. The issue has been patched in version 2.2.0. Since this issue is only present in the \"fallback\" crypto implementation, it can be avoided by ensuring that either WebCrypto or the Node `crypto` module is available in the JS environment where `node-jose` is being run."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:node-jose:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.2.0",
            "matchCriteriaId" : "029A0CB3-C401-464A-8AF3-C1A26DD216C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cisco/node-jose/commit/901d91508a70e3b9bdfc45688ea07bb4e1b8210d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cisco/node-jose/security/advisories/GHSA-5h4j-qrvg-9xhw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/cisco/node-jose/commit/901d91508a70e3b9bdfc45688ea07bb4e1b8210d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cisco/node-jose/security/advisories/GHSA-5h4j-qrvg-9xhw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0866",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-16T20:15:15.173",
      "lastModified" : "2024-11-21T07:38:00.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "46EDD964-D166-4879-8E48-CF3AC00AF840"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/b964fe4226f1424cf676d5822ef898b6b01f5937",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7d3c5792-d20b-4cb6-9c6d-bb14f3430d7f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/gpac/gpac/commit/b964fe4226f1424cf676d5822ef898b6b01f5937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7d3c5792-d20b-4cb6-9c6d-bb14f3430d7f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22380",
      "sourceIdentifier" : "product-cna@github.com",
      "published" : "2023-02-16T21:15:14.237",
      "lastModified" : "2025-03-19T16:15:17.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.7.6. This vulnerability was reported via the GitHub Bug Bounty program."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-cna@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.6",
            "matchCriteriaId" : "F570C1BE-2212-4E66-81CE-38FFC943F37C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.github.com/en/enterprise-server%403.7/admin/release-notes#3.7.6",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%403.7/admin/release-notes#3.7.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0821",
      "sourceIdentifier" : "security@hashicorp.com",
      "published" : "2023-02-16T22:15:11.097",
      "lastModified" : "2024-11-21T07:37:54.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4."
      }, {
        "lang" : "es",
        "value" : "Los trabajos de HashiCorp Nomad y Nomad Enterprise 1.2.15 hasta 1.3.8 y 1.4.3 que utilizan una fuente de stanza de artefacto comprimida de forma maliciosa pueden causar un uso excesivo del disco. Corregido en 1.2.16, 1.3.9 y 1.4.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hashicorp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hashicorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-409"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "1.2.15",
            "matchCriteriaId" : "98DF3B6E-1C27-4843-BB28-1FA3AB012431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "1.2.15",
            "matchCriteriaId" : "F82F9A88-E6D7-4255-904B-2D7AA1C840D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndExcluding" : "1.3.9",
            "matchCriteriaId" : "64FB8A46-BF26-460F-87E7-9FF51A9E3951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndExcluding" : "1.3.9",
            "matchCriteriaId" : "9120A20A-0F48-4402-A281-820CD0D9D295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.4.4",
            "matchCriteriaId" : "345CB160-3D34-4F84-8957-91BD1103D89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.4.4",
            "matchCriteriaId" : "9A6D8426-DD9C-4142-B55C-5C3263DAA62A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-05-nomad-client-vulnerable-to-decompression-bombs-in-artifact-block/50292",
        "source" : "security@hashicorp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-05-nomad-client-vulnerable-to-decompression-bombs-in-artifact-block/50292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0877",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-17T01:15:10.663",
      "lastModified" : "2024-11-21T07:38:01.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11."
      }, {
        "lang" : "es",
        "value" : "Inyección de código en el repositorio froxlor/froxlor de GitHub anterior a 2.0.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.11",
            "matchCriteriaId" : "C1635360-5CD8-4058-99AD-C8F00ED696A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/froxlor/froxlor/commit/aa48ffca2bcaf7ae57be3b8147bb3138abdab984",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/b29cf038-06f1-4fb0-9437-08f2991f92a8",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/froxlor/froxlor/commit/aa48ffca2bcaf7ae57be3b8147bb3138abdab984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/b29cf038-06f1-4fb0-9437-08f2991f92a8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0878",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-17T01:15:10.773",
      "lastModified" : "2025-05-01T15:14:21.883",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository nuxt/framework prior to 3.2.1."
      }, {
        "lang" : "es",
        "value" : "Cross-site Scripting (XSS): genérico en el repositorio nuxt/framework de GitHub anterior a 3.2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuxt:nuxt:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.0.0",
            "versionEndExcluding" : "3.2.1",
            "matchCriteriaId" : "919CC63C-F71B-4632-A7CA-A9C66802858B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuxt:nuxt:3.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "741727C5-A904-4B59-BD98-8E78E450C8AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuxt:nuxt:3.0.0:rc13:*:*:*:*:*:*",
            "matchCriteriaId" : "FF6DACA0-1E3D-46F3-AB1C-14FABC3C5A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuxt:nuxt:3.0.0:rc14:*:*:*:*:*:*",
            "matchCriteriaId" : "9A33BBE0-F52A-4792-931B-92298FFB1529"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nuxt/framework/commit/7aa35ff958eec0c7d071d3fcd481db57281dbcd9",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a892caf7-b8c2-4638-8cee-eb779d51066a",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nuxt/framework/commit/7aa35ff958eec0c7d071d3fcd481db57281dbcd9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a892caf7-b8c2-4638-8cee-eb779d51066a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0879",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-17T02:15:10.680",
      "lastModified" : "2024-11-21T07:38:01.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12.\n\n"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Cross-site scripting (XSS) almacenado en el repositorio de GitHub btcpayserver/btcpayserver antes de la versión 1.7.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.12",
            "matchCriteriaId" : "4C4246CD-7443-49C2-A4DB-E030E01F856A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/btcpayserver/btcpayserver/pull/4635/commits/f2f3b245c4d8980d8e54e4708c796df82332c3d7",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/9464e3c6-961d-4e23-8b3d-07cbb31de541",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/pull/4635/commits/f2f3b245c4d8980d8e54e4708c796df82332c3d7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/9464e3c6-961d-4e23-8b3d-07cbb31de541",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0880",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-17T03:15:09.950",
      "lastModified" : "2024-11-21T07:38:01.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11.\n\n"
      }, {
        "lang" : "es",
        "value" : "Mala interpretación de la entrada en el repositorio de GitHub thorsten/phpmyfaq antes de la versión 3.1.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-115"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.11",
            "matchCriteriaId" : "0CADCF40-01A2-41DD-B454-4F5946570CA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/a67dca41576834a1ddfee61b9e799b686b75d4fa",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/14fc4841-0f5d-4e12-bf9e-1b60d2ac6a6c",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/a67dca41576834a1ddfee61b9e799b686b75d4fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/14fc4841-0f5d-4e12-bf9e-1b60d2ac6a6c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23695",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-17T07:15:10.890",
      "lastModified" : "2024-11-21T07:46:40.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell Secure Connect Gateway (SCG) version 5.14.00.12 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by performing MitM attacks and let attackers obtain sensitive information.\n\n"
      }, {
        "lang" : "es",
        "value" : "Dell Secure Connect Gateway (SCG) versión 5.14.00.12 contiene una vulnerabilidad de algoritmo criptográfico roto. Un atacante remoto no autenticado podría explotar esta vulnerabilidad realizando ataques MitM y permitiendo que los atacantes obtengan información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:secure_connect_gateway:5.12.00.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6F4927-ADE4-4F31-B61D-7D79DC77E56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:secure_connect_gateway:5.14.00.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5F17A6-AE2D-4860-B5A7-9D6331582CAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000208462/dsa-2023-020-dell-secure-connect-gateway-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000208462/dsa-2023-020-dell-secure-connect-gateway-security-update-for-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-17T07:15:11.633",
      "lastModified" : "2025-03-18T17:15:40.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Real Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE) vulnerability via the component /FuguHub/cmsdocs/."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que Real Time Logic FuguHub v8.1 y versiones anteriores contenían una vulnerabilidad de ejecución remota de código (RCE) a través del componente /FuguHub/cmsdocs/."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realtimelogic:fuguhub:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "8.1",
            "matchCriteriaId" : "F183BD82-1775-45FC-8B8E-2F94F33D18F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/173279/FuguHub-8.1-Remote-Code-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/ojan2021/Fuguhub-8.1-RCE",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173279/FuguHub-8.1-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ojan2021/Fuguhub-8.1-RCE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-17T07:15:11.817",
      "lastModified" : "2025-03-18T17:15:40.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/UserMapper.xml."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que LuckyframeWEB v3.5 contiene una vulnerabilidad de inyección SQL a través del parámetro dataScope en /system/UserMapper.xml."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luckyframe:luckyframeweb:3.5:*:*:*:*:luckyframe:*:*",
            "matchCriteriaId" : "3F319797-431B-452C-8880-E798AAF1F005"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/seagull1985/LuckyFrameWeb/issues/24",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/seagull1985/LuckyFrameWeb/issues/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-17T07:15:11.990",
      "lastModified" : "2025-03-18T17:15:41.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/RoleMapper.xml."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que LuckyframeWEB v3.5 contiene una vulnerabilidad de inyección SQL a través del parámetro dataScope en /system/RoleMapper.xml."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luckyframe:luckyframeweb:3.5:*:*:*:*:luckyframe:*:*",
            "matchCriteriaId" : "3F319797-431B-452C-8880-E798AAF1F005"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/seagull1985/LuckyFrameWeb/issues/22",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/seagull1985/LuckyFrameWeb/issues/22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-17T07:15:12.160",
      "lastModified" : "2025-03-18T17:15:41.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/DeptMapper.xml."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que LuckyframeWEB v3.5 contiene una vulnerabilidad de inyección SQL a través del parámetro dataScope en /system/DeptMapper.xml."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luckyframe:luckyframeweb:3.5:*:*:*:*:luckyframe:*:*",
            "matchCriteriaId" : "3F319797-431B-452C-8880-E798AAF1F005"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/seagull1985/LuckyFrameWeb/issues/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/seagull1985/LuckyFrameWeb/issues/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0883",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-17T09:15:14.743",
      "lastModified" : "2024-11-21T07:38:01.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /php-opos/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221350 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Online Pizza Ordering System 1.0 y clasificada como crítica. Esta vulnerabilidad afecta a un código desconocido del archivo /php-opos/index.php. La manipulación del argumento ID conduce a la inyección SQL. El ataque se puede iniciar de forma remota. El exploit ha sido divulgado al público y puede utilizarse. VDB-221350 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/awans2023/CVE",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221350",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221350",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/awans2023/CVE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0887",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-17T09:15:15.007",
      "lastModified" : "2024-11-21T07:38:02.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in phjounin TFTPD64-SE 4.64 and classified as critical. This issue affects some unknown processing of the file tftpd64_svc.exe. The manipulation leads to unquoted search path. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The associated identifier of this vulnerability is VDB-221351."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en phjounin TFTPD64-SE 4.64 y se ha clasificado como crítica. Este problema afecta un procesamiento desconocido del archivo tftpd64_svc.exe. La manipulación conduce a una ruta de búsqueda sin comillas. Un ataque debe abordarse localmente. La complejidad de un ataque es bastante alta. Se sabe que la explotación es difícil. El identificador asociado de esta vulnerabilidad es VDB-221351."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.0,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tftpd64_project:tftpd64:4.64:*:*:*:se:*:*:*",
            "matchCriteriaId" : "8508FD40-3AAB-4D89-A577-BD9BE13ADE4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221351",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221351",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0882",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-02-17T10:15:11.297",
      "lastModified" : "2024-11-21T07:38:01.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse. This issue affects Single Connect: 2.16."
      }, {
        "lang" : "es",
        "value" : "La validación de entrada inadecuada y la omisión de autorización a través de una vulnerabilidad de clave controlada por el usuario en Single Connect de Kron Tech  en Windows permiten el abuso de privilegios. Este problema afecta a Single Connect: 2.16."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:krontech:single_connect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.1",
            "matchCriteriaId" : "82B73035-D846-45AA-8955-3407A5FE3255"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.krontech.com/singleconnect-2-16/update-patch-rdp-proxy-idor-vulnerability",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0092",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.krontech.com/singleconnect-2-16/update-patch-rdp-proxy-idor-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23586",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-02-17T13:15:10.737",
      "lastModified" : "2024-11-21T07:46:29.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a vulnerability in the io_uring subsystem, it is possible to leak kernel memory information to the user process. timens_install calls current_is_single_threaded to determine if the current process is single-threaded, but this call does not consider io_uring's io_worker threads, thus it is possible to insert a time namespace's vvar page to process's memory space via a page fault. When this time namespace is destroyed, the vvar page is also freed, but not removed from the process' memory, and a next page allocated by the kernel will be still available from the user-space process and can leak memory contents via this (read-only) use-after-free vulnerability. We recommend upgrading past version 5.10.161 or commit  788d0824269bef539fe31a785b1517882eafed93 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring \n"
      }, {
        "lang" : "es",
        "value" : "Debido a una vulnerabilidad en el subsistema io_uring, es posible filtrar información de la memoria del kernel al proceso del usuario. timens_install llama a current_is_single_threaded para determinar si el proceso actual tiene un solo subproceso, pero esta llamada no considera los subprocesos io_worker de io_uring, por lo que es posible insertar una página vvar de un espacio de nombres de tiempo en el espacio de memoria del proceso a través de un error de página. Cuando se destruye este espacio de nombres de tiempo, la página vvar también se libera, pero no se elimina de la memoria del proceso, y una página siguiente asignada por el kernel todavía estará disponible en el proceso de espacio de usuario y puede filtrar el contenido de la memoria a través de esto (leer -solo) vulnerabilidad de Use-After-Free. Recomendamos actualizar la versión anterior 5.10.161 o el commit 788d0824269bef539fe31a785b1517882eafed93 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6",
            "versionEndExcluding" : "5.10.161",
            "matchCriteriaId" : "E6D163C0-5FC9-4FB8-AF75-5C27891361A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring?h=linux-5.10.y&id=788d0824269bef539fe31a785b1517882eafed93",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://kernel.dance/#788d0824269bef539fe31a785b1517882eafed93",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring?h=linux-5.10.y&id=788d0824269bef539fe31a785b1517882eafed93",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://kernel.dance/#788d0824269bef539fe31a785b1517882eafed93",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23899",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-02-17T15:15:12.153",
      "lastModified" : "2024-11-21T07:47:03.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Extensions For CF7 plugin <= 2.0.8 versions leads to arbitrary plugin activation."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Request Forgery (CSRF) en las versiones HasThemes Extensions For CF7 plugin &lt;= 2.0.8 conduce a la activación arbitraria del complemento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:extensions_for_cf7:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "A03540D5-5D97-46D2-A352-E2A2CDC2FE18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/extensions-for-cf7/wordpress-extensions-for-cf7-contact-form-7-database-conditional-fields-and-redirection-plugin-2-0-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/extensions-for-cf7/wordpress-extensions-for-cf7-contact-form-7-database-conditional-fields-and-redirection-plugin-2-0-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-17T15:15:12.243",
      "lastModified" : "2025-11-03T22:16:05.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters."
      }, {
        "lang" : "es",
        "value" : "Un problema en el componente urllib.parse de Python anterior a 3.11.4 permite a los atacantes eludir los métodos de listas de bloqueo proporcionando una URL que comienza con caracteres en blanco."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.17",
            "matchCriteriaId" : "CC324629-0240-4DC0-BAFA-D476D5FDDA61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.17",
            "matchCriteriaId" : "0A6B1607-9E1F-4A14-918F-B1A1786D028E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.17",
            "matchCriteriaId" : "0287FC5A-256F-40EE-93D0-2DFFE38BB5A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.12",
            "matchCriteriaId" : "4AA7FA11-C746-4E69-94C2-18E745D82054"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11.0",
            "versionEndExcluding" : "3.11.4",
            "matchCriteriaId" : "AD14A157-FEA9-411F-B338-F1B6F726599D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:management_services_for_element_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B51137-28D9-41F2-AFA2-3CC22B4954D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:management_services_for_netapp_hci:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4455CF3A-CC91-4BE4-A7AB-929AC82E34F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/python/cpython/issues/102153",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/python/cpython/pull/99421",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://pointernull.com/security/python-url-parse-problem.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230324-0004/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/127587",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/python/cpython/issues/102153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/python/cpython/pull/99421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/11/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pointernull.com/security/python-url-parse-problem.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230324-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/127587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24388",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-02-17T15:15:12.293",
      "lastModified" : "2026-04-28T19:19:39.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions affects plugin forms actions (create, duplicate, edit, delete)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-Site Request Forgery (CSRF) en el complemento WpDevArt Booking calendar, Appointment Booking System de WordPress en sus versiones &lt;= 3.2.3 afecta las acciones de los formularios del complemento (crear, duplicar, editar, eliminar)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdevart:booking_calendar:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.2.4",
            "matchCriteriaId" : "9119215F-E4EA-479A-9D79-A6AD79B7DD0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/booking-calendar/wordpress-booking-calendar-appointment-booking-system-plugin-3-2-3-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/booking-calendar/wordpress-booking-calendar-appointment-booking-system-plugin-3-2-3-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-17T16:15:10.997",
      "lastModified" : "2025-03-18T16:15:16.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ESPCMS P8.21120101 after logging in to the background, there is a SQL injection vulnerability in the function node where members are added."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en ESPCMS P8.21120101 después de iniciar sesión en segundo plano; hay una vulnerabilidad de inyección SQL en el nodo de función donde se agregan los miembros."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ecisp:espcms:p8.21120101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16DECF92-C687-40D1-BAFB-AB7AE692BEF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/earclink/espcms/issues/I680WG",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/earclink/espcms/issues/I680WG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0822",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-17T17:15:11.570",
      "lastModified" : "2024-11-21T07:37:54.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nThe affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access privileged functionality. \n\n"
      }, {
        "lang" : "es",
        "value" : "El producto afectado DIAEnergie (versiones anteriores a la v1.9.03.001) contiene una autorización inadecuada, lo que podría permitir a un usuario no autorizado eludir la autorización y acceder a funciones privilegiadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:diaenergie:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.03.001",
            "matchCriteriaId" : "91DA8424-5AF8-4F7E-9037-0870B423C5A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0895",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-17T17:15:11.660",
      "lastModified" : "2026-04-08T19:18:03.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Coder – add custom html, css and js code plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers with administrative privileges to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wow-company:wp_coder:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.5.3",
            "matchCriteriaId" : "785750DC-DB9E-41EF-849C-C4E4A62C5832"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?old=2757782&old_path=wp-coder%2Ftrunk%2Fadmin%2Fpartials%2Finclude-data.php&new=&new_path=wp-coder%2Ftrunk%2Fadmin%2Fpartials%2Finclude-data.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e4b6a9cd-4d29-4bd8-afa3-b5d455ad8340?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?old=2757782&old_path=wp-coder%2Ftrunk%2Fadmin%2Fpartials%2Finclude-data.php&new=&new_path=wp-coder%2Ftrunk%2Fadmin%2Fpartials%2Finclude-data.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e4b6a9cd-4d29-4bd8-afa3-b5d455ad8340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22868",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-02-17T17:15:11.777",
      "lastModified" : "2024-11-21T07:45:33.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Aspera Faspex 4.4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  244117."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_faspex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.1",
            "matchCriteriaId" : "CB591FF8-E10F-422D-9B82-0B16FDC59451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_faspex:4.4.1:patch_level_1:*:*:*:*:*:*",
            "matchCriteriaId" : "58689E6B-15F4-40C8-B5BF-6320F5195511"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244117",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6952319",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6952319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-17T17:15:11.857",
      "lastModified" : "2025-03-18T16:15:17.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter under the Add New Articles function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ujcms:ujcms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.3",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "19D13E70-E7AE-4FD3-A2A1-9DF1BF256A44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ujcms/ujcms/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ujcms/ujcms/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24964",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-02-17T17:15:11.920",
      "lastModified" : "2024-11-21T07:48:51.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information from a log files.  IBM X-Force ID:  246463."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED2F00-89E3-4BA9-A8FB-D43B308A59A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492C463-D76E-49B7-A4D4-3B499E422D89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/246463",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6953519",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/246463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6953519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-17T18:15:12.127",
      "lastModified" : "2025-03-18T16:15:18.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End of Archive tag function of the peazip/pea UNPEA feature."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peazip_project:peazip:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A691D6B-9DFC-4D3D-BE0A-C91D3F225A7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/peazip/tickets/734/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://sourceforge.net/p/peazip/tickets/734/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26020",
      "sourceIdentifier" : "security@craftersoftware.com",
      "published" : "2023-02-17T18:15:12.180",
      "lastModified" : "2024-11-21T07:50:36.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crafter Studio on Linux, MacOS, Windows, x86, ARM, 64 bit allows SQL Injection.This issue affects CrafterCMS v4.0 from 4.0.0 through 4.0.1, and v3.1 from 3.1.0 through 3.1.26.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@craftersoftware.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@craftersoftware.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftercms:crafter_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndIncluding" : "3.1.26",
            "matchCriteriaId" : "056B1C77-8EC9-4E5E-8065-05337645C909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftercms:crafter_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.1",
            "matchCriteriaId" : "6BED1219-8FA4-483C-9DBB-95A929384840"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.craftercms.org/en/4.0/security/advisory.html#cv-2023021701",
        "source" : "security@craftersoftware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.craftercms.org/en/4.0/security/advisory.html#cv-2023021701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-17T19:15:11.757",
      "lastModified" : "2025-03-18T17:15:40.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Canteen Management System 1.0 is vulnerable to SQL Injection via /php_action/getOrderReport.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canteen_management_system_project:canteen_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1475853-D5FD-4C3B-B1D0-67131503A745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/mG658E9iSW6TkbS8xAuUNg",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/mG658E9iSW6TkbS8xAuUNg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24960",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-02-17T19:15:11.900",
      "lastModified" : "2024-11-21T07:48:51.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system.  IBM X-Force ID:  246333"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED2F00-89E3-4BA9-A8FB-D43B308A59A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492C463-D76E-49B7-A4D4-3B499E422D89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/246333",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6953521",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/246333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6953521",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23921",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-02-17T20:15:11.807",
      "lastModified" : "2024-11-21T07:47:06.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in some returnurl parameters. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website. This flaw allows a remote attacker to perform cross-site scripting (XSS) attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.19",
            "matchCriteriaId" : "7EF7672C-DBD1-49E5-8005-17CC6ACA0F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11.0",
            "versionEndExcluding" : "3.11.12",
            "matchCriteriaId" : "C162F159-0BA5-4ECA-85AD-364554A07AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.6",
            "matchCriteriaId" : "E4481A07-1EB0-46C5-9015-E02A705C1A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B926AF-E5E5-466B-B507-99F995EA25F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76810",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2162526",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=443272#p1782021",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2162526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=443272#p1782021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23922",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-02-17T20:15:11.883",
      "lastModified" : "2024-11-21T07:47:06.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in blog search. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website. This flaw allows a remote attacker to perform cross-site scripting (XSS) attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.6",
            "matchCriteriaId" : "E4481A07-1EB0-46C5-9015-E02A705C1A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B926AF-E5E5-466B-B507-99F995EA25F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76861",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2162547",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=443273#p1782022",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2162547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=443273#p1782022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23923",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-02-17T20:15:11.940",
      "lastModified" : "2024-11-21T07:47:06.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vulnerability was found Moodle which exists due to insufficient limitations on the \"start page\" preference. A remote attacker can set that preference for another user. The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.19",
            "matchCriteriaId" : "7EF7672C-DBD1-49E5-8005-17CC6ACA0F83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11.0",
            "versionEndExcluding" : "3.11.12",
            "matchCriteriaId" : "C162F159-0BA5-4ECA-85AD-364554A07AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.6",
            "matchCriteriaId" : "E4481A07-1EB0-46C5-9015-E02A705C1A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B926AF-E5E5-466B-B507-99F995EA25F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76862",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2162549",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=443274#p1782023",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-76862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2162549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=443274#p1782023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24809",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-17T20:15:12.000",
      "lastModified" : "2024-11-21T07:48:26.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetHack is a single player dungeon exploration game. Starting with version 3.6.2 and prior to version 3.6.7, illegal input to the \"C\" (call) command can cause a buffer overflow and crash the NetHack process. This vulnerability may be a security issue for systems that have NetHack installed suid/sgid and for shared systems. For all systems, it may result in a process crash. This issue is resolved in NetHack 3.6.7. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nethack:nethack:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.2",
            "versionEndExcluding" : "3.6.7",
            "matchCriteriaId" : "9C2EA58F-C8B5-47CC-AE15-2DF9546846B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NetHack/NetHack/security/advisories/GHSA-2cqv-5w4v-mgch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nethack.org/security/CVE-2023-24809.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/NetHack/NetHack/security/advisories/GHSA-2cqv-5w4v-mgch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nethack.org/security/CVE-2023-24809.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0482",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-17T22:15:11.957",
      "lastModified" : "2025-03-18T16:15:15.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:resteasy:3.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC7F357-F788-45EA-9EC8-1827E0C3C3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:resteasy:4.7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1127722-44D1-4E06-BDD8-979BFD6E3301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:resteasy:5.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3A6FBC-A883-42F6-84D3-FCBC7A5DC5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:resteasy:6.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E6BA5D-DE79-45FE-B033-7E9CB458CE3C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "F3E0B672-3E06-4422-B2A4-0BD073AEC2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "E8F29E19-3A64-4426-A2AA-F169440267CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/resteasy/resteasy/pull/3409/commits/807d7456f2137cde8ef7c316707211bf4e542d56",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0001/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/resteasy/resteasy/pull/3409/commits/807d7456f2137cde8ef7c316707211bf4e542d56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21574",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:12.037",
      "lastModified" : "2024-11-21T07:43:06.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.5.4",
            "matchCriteriaId" : "BF818B1C-C45E-4DD8-A226-F22BCA65F3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.1.1",
            "matchCriteriaId" : "A70F9095-1B00-4EAE-8AD6-A47467149063"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb23-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb23-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21575",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:12.137",
      "lastModified" : "2024-11-21T07:43:07.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Photoshop versiones 23.5.3 (y anteriores) y 24.1 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. es requerida una interacción del usuario para la explotación de este problema, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.5.4",
            "matchCriteriaId" : "BF818B1C-C45E-4DD8-A226-F22BCA65F3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.1.1",
            "matchCriteriaId" : "A70F9095-1B00-4EAE-8AD6-A47467149063"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb23-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb23-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21576",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:12.217",
      "lastModified" : "2024-11-21T07:43:07.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Photoshop versiones 23.5.3 (y anteriores) y 24.1 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. es requerida una interacción del usuario para la explotación de este problema, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.5.4",
            "matchCriteriaId" : "BF818B1C-C45E-4DD8-A226-F22BCA65F3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.1.1",
            "matchCriteriaId" : "A70F9095-1B00-4EAE-8AD6-A47467149063"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb23-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb23-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21577",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:12.297",
      "lastModified" : "2024-11-21T07:43:07.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.5.4",
            "matchCriteriaId" : "BF818B1C-C45E-4DD8-A226-F22BCA65F3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.1.1",
            "matchCriteriaId" : "A70F9095-1B00-4EAE-8AD6-A47467149063"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb23-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb23-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21578",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:12.377",
      "lastModified" : "2024-11-21T07:43:07.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.5.4",
            "matchCriteriaId" : "BF818B1C-C45E-4DD8-A226-F22BCA65F3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.1.1",
            "matchCriteriaId" : "A70F9095-1B00-4EAE-8AD6-A47467149063"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb23-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb23-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21583",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:12.460",
      "lastModified" : "2024-11-21T07:43:07.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.0.4",
            "matchCriteriaId" : "AA5A6D96-2B4D-417B-BD88-E90553CFD71E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.0.2",
            "matchCriteriaId" : "517C864F-EBB9-45C1-868F-C6F043A41247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb23-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb23-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21584",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:12.540",
      "lastModified" : "2024-11-21T07:43:07.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:framemaker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2020.0.4",
            "matchCriteriaId" : "A8ABE03D-26DC-423F-A384-457372C3A458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:framemaker:2022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053985C-7CE4-4A9A-B4C9-4749767BD295"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/framemaker/apsb23-06.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/framemaker/apsb23-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21593",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:12.627",
      "lastModified" : "2024-11-21T07:43:08.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe InDesign versions ID18.1 (and earlier) and ID17.4 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.4",
            "matchCriteriaId" : "7382C8B6-9F66-4A95-AEFF-42393958E1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077FC86F-2C24-4B39-856B-AD9FCACFD026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:indesign:18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A338038D-8B20-4069-9DD1-FD1027594771"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb23-12.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/indesign/apsb23-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21619",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:12.713",
      "lastModified" : "2024-11-21T07:43:11.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "FrameMaker 2020 Update 4 (y anteriores) y 2022 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:framemaker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2020.0.4",
            "matchCriteriaId" : "A8ABE03D-26DC-423F-A384-457372C3A458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:framemaker:2022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053985C-7CE4-4A9A-B4C9-4749767BD295"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/framemaker/apsb23-06.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/framemaker/apsb23-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21620",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:12.793",
      "lastModified" : "2024-11-21T07:43:11.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:framemaker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2020.0.4",
            "matchCriteriaId" : "A8ABE03D-26DC-423F-A384-457372C3A458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:framemaker:2022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053985C-7CE4-4A9A-B4C9-4749767BD295"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/framemaker/apsb23-06.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/framemaker/apsb23-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21621",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:12.873",
      "lastModified" : "2024-11-21T07:43:11.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:framemaker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2020.0.4",
            "matchCriteriaId" : "A8ABE03D-26DC-423F-A384-457372C3A458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:framemaker:2022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053985C-7CE4-4A9A-B4C9-4749767BD295"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/framemaker/apsb23-06.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/framemaker/apsb23-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21622",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:12.957",
      "lastModified" : "2024-11-21T07:43:12.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "FrameMaker 2020 Update 4 (y anteriores) y 2022 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:framemaker:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2020.0.4",
            "matchCriteriaId" : "A8ABE03D-26DC-423F-A384-457372C3A458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:framemaker:2022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A053985C-7CE4-4A9A-B4C9-4749767BD295"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/framemaker/apsb23-06.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/framemaker/apsb23-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22226",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:13.043",
      "lastModified" : "2024-11-21T07:44:21.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Bridge versiones 12.0.3 (y anteriores) y 13.0.1 (y anteriores) están afectadas por una vulnerabilidad de desbordamiento del búfer en la región Stack de la memoria que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.0.4",
            "matchCriteriaId" : "AA5A6D96-2B4D-417B-BD88-E90553CFD71E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.0.2",
            "matchCriteriaId" : "517C864F-EBB9-45C1-868F-C6F043A41247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb23-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb23-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22227",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:13.130",
      "lastModified" : "2024-11-21T07:44:21.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Bridge versiones 12.0.3 (y anteriores) y 13.0.1 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.0.4",
            "matchCriteriaId" : "AA5A6D96-2B4D-417B-BD88-E90553CFD71E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.0.2",
            "matchCriteriaId" : "517C864F-EBB9-45C1-868F-C6F043A41247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb23-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb23-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22228",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:13.210",
      "lastModified" : "2024-11-21T07:44:21.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.0.4",
            "matchCriteriaId" : "AA5A6D96-2B4D-417B-BD88-E90553CFD71E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.0.2",
            "matchCriteriaId" : "517C864F-EBB9-45C1-868F-C6F043A41247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb23-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb23-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22229",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:13.293",
      "lastModified" : "2024-11-21T07:44:21.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Bridge versiones 12.0.3 (y anteriores) y 13.0.1 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.0.4",
            "matchCriteriaId" : "AA5A6D96-2B4D-417B-BD88-E90553CFD71E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.0.2",
            "matchCriteriaId" : "517C864F-EBB9-45C1-868F-C6F043A41247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb23-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb23-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22230",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:13.373",
      "lastModified" : "2024-11-21T07:44:21.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Bridge versiones 12.0.3 (y anteriores) y 13.0.1 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.0.4",
            "matchCriteriaId" : "AA5A6D96-2B4D-417B-BD88-E90553CFD71E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.0.2",
            "matchCriteriaId" : "517C864F-EBB9-45C1-868F-C6F043A41247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb23-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb23-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22231",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:13.457",
      "lastModified" : "2024-11-21T07:44:22.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.0.4",
            "matchCriteriaId" : "AA5A6D96-2B4D-417B-BD88-E90553CFD71E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.0.2",
            "matchCriteriaId" : "517C864F-EBB9-45C1-868F-C6F043A41247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb23-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb23-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22232",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:13.533",
      "lastModified" : "2024-11-21T07:44:22.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.4.5",
            "matchCriteriaId" : "C115DB15-0160-4A3C-A7AC-C4C7E57C7E7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "751B00DE-56F0-4334-A757-1C12A8BA22E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-File-Disclosure.html",
        "source" : "psirt@adobe.com"
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb23-05.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-File-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb23-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22233",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:13.617",
      "lastModified" : "2024-11-21T07:44:22.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.6.4",
            "matchCriteriaId" : "37677E66-FFC7-4A2E-ABE5-73D0F164A773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.2.0",
            "matchCriteriaId" : "3DE75558-EE49-4661-A92F-97F9166AD71D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb23-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb23-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22234",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:13.700",
      "lastModified" : "2024-11-21T07:44:22.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:premiere_rush:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "01B6ADD8-333A-49FD-BC64-A5E19EFE1C37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/premiere_rush/apsb23-14.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/premiere_rush/apsb23-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22236",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:13.780",
      "lastModified" : "2024-11-21T07:44:22.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Animate versión 22.0.8 (y anteriores), 23.0.0 (y anteriores), están afectadas por una vulnerabilidad de desbordamiento del búfer en la región Heap de la memoria que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndIncluding" : "22.0.8",
            "matchCriteriaId" : "BA1DD4E4-B661-4C96-8684-375DDF404AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:23.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF5C2D1-F1EF-441D-9423-16237F1A5F12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb23-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb23-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22237",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:13.860",
      "lastModified" : "2024-11-21T07:44:22.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "After Affects versiones 23.1 (y anteriores) y 22.6.3 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.6.4",
            "matchCriteriaId" : "37677E66-FFC7-4A2E-ABE5-73D0F164A773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.2.0",
            "matchCriteriaId" : "3DE75558-EE49-4661-A92F-97F9166AD71D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb23-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb23-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22238",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:13.940",
      "lastModified" : "2024-11-21T07:44:22.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "After Affects versiones 23.1 (y anteriores) y 22.6.3 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.6.4",
            "matchCriteriaId" : "37677E66-FFC7-4A2E-ABE5-73D0F164A773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.2.0",
            "matchCriteriaId" : "3DE75558-EE49-4661-A92F-97F9166AD71D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb23-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb23-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22239",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:14.020",
      "lastModified" : "2024-11-21T07:44:22.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.6.4",
            "matchCriteriaId" : "37677E66-FFC7-4A2E-ABE5-73D0F164A773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.2.0",
            "matchCriteriaId" : "3DE75558-EE49-4661-A92F-97F9166AD71D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb23-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/after_effects/apsb23-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22243",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:14.117",
      "lastModified" : "2024-11-21T07:44:23.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Animate versiones 22.0.8 (y anteriores) and 23.0.0 (y anteriores) están afectadas por una vulnerabilidad de desbordamiento del búfer en la región Stack de la memoria que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndIncluding" : "22.0.8",
            "matchCriteriaId" : "BA1DD4E4-B661-4C96-8684-375DDF404AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:23.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF5C2D1-F1EF-441D-9423-16237F1A5F12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb23-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb23-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22244",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:14.197",
      "lastModified" : "2024-11-21T07:44:23.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Premiere Rush version 2.6 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:premiere_rush:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6",
            "matchCriteriaId" : "01B6ADD8-333A-49FD-BC64-A5E19EFE1C37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/premiere_rush/apsb23-14.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/premiere_rush/apsb23-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22246",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-02-17T22:15:14.277",
      "lastModified" : "2024-11-21T07:44:23.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndIncluding" : "22.0.8",
            "matchCriteriaId" : "BA1DD4E4-B661-4C96-8684-375DDF404AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:23.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF5C2D1-F1EF-441D-9423-16237F1A5F12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb23-15.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb23-15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-17T22:15:14.353",
      "lastModified" : "2025-03-18T20:15:17.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a720r_firmware:4.1.5cu.532_b20210610:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B6CF77-0301-414A-BBC9-1AD57718172C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a720r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DE5168-B787-462C-B024-2B8F73759034"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shellpei/TOTOLINK-Unauthorized/blob/main/CVE-2023-23064",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shellpei/TOTOLINK-Unauthorized/blob/main/CVE-2023-23064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-17T22:15:14.407",
      "lastModified" : "2026-02-19T17:44:46.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter under the \"Add a new change detection watch\" function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webtechnologies:changedetection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.40.1.1",
            "matchCriteriaId" : "67B8C2C3-D21D-4F4D-9FC2-1849462630B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dgtlmoon/changedetection.io/issues/1358",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.edoardoottavianelli.it/CVE-2023-24769",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.youtube.com/watch?v=TRTpRlkU3Hc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/dgtlmoon/changedetection.io/issues/1358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.edoardoottavianelli.it/CVE-2023-24769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.youtube.com/watch?v=TRTpRlkU3Hc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0901",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-18T01:15:10.973",
      "lastModified" : "2024-11-21T07:38:03.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelfed:pixelfed:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.11.4",
            "matchCriteriaId" : "71573784-3C90-4131-B37F-1D88D97BFA31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pixelfed/pixelfed/commit/5b5f5bc38ca9ba39d0b7dacc3813fb899f71ba57",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/0327b1b2-6e7c-4154-a307-15f236571010",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pixelfed/pixelfed/commit/5b5f5bc38ca9ba39d0b7dacc3813fb899f71ba57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/0327b1b2-6e7c-4154-a307-15f236571010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0902",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-18T08:15:42.013",
      "lastModified" : "2024-11-21T07:38:03.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file process_order.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221451."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_food_ordering_system_project:simple_food_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1927F73F-FBCE-4B79-9409-B07BCF00348E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Simple%20Food%20Ordering%20System%20-%20Authenticated%20Reflected%20XSS.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221451",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221451",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Simple%20Food%20Ordering%20System%20-%20Authenticated%20Reflected%20XSS.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0903",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-18T08:15:42.240",
      "lastModified" : "2024-11-21T07:38:03.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file edit-task.php. The manipulation of the argument task_id leads to sql injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221452."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:employee_task_management_system_project:employee_task_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BF1E8-9D6D-4F70-8684-ABC3862873CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Employee%20Task%20Management%20System%20-%20SQL%20Injection.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221452",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221452",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Employee%20Task%20Management%20System%20-%20SQL%20Injection.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0904",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-18T08:15:42.330",
      "lastModified" : "2024-11-21T07:38:04.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument task_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221453 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:employee_task_management_system_project:employee_task_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BF1E8-9D6D-4F70-8684-ABC3862873CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Employee%20Task%20Management%20System%20-%20SQL%20Injection%20-%202.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221453",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221453",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Employee%20Task%20Management%20System%20-%20SQL%20Injection%20-%202.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0905",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-18T08:15:42.407",
      "lastModified" : "2024-11-21T07:38:04.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221454 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:employee_task_management_system_project:employee_task_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730BF1E8-9D6D-4F70-8684-ABC3862873CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Employee%20Task%20Management%20System%20-%20Broken%20Authentication.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221454",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221454",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Employee%20Task%20Management%20System%20-%20Broken%20Authentication.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0906",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-18T08:15:42.493",
      "lastModified" : "2024-11-21T07:38:04.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. Affected by this vulnerability is the function delete_category of the file ajax.php of the component POST Parameter Handler. The manipulation leads to missing authentication. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-221455."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221455",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221455",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0907",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-18T08:15:42.573",
      "lastModified" : "2024-11-21T07:38:04.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in Filseclab Twister Antivirus 8.17. Affected by this issue is the function 0x220017 in the library ffsmon.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221456."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:M/C:N/I:N/A:C",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 2.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filseclab:twister_antivirus:8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C900E994-BE87-4417-808D-42DEBF93920A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0907",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221456",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221456",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0908",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-18T08:15:42.657",
      "lastModified" : "2024-11-21T07:38:04.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-221457 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xoslab:easy_file_locker:2.2.0.184:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C72BD2D-77A7-4C0C-A794-405695DD13EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0908",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221457",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221457",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0909",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-18T09:15:10.727",
      "lastModified" : "2024-11-21T07:38:04.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in cxasm notepad-- 1.22. This affects an unknown part of the component Directory Comparison Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The associated identifier of this vulnerability is VDB-221475."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:notepad--_project:notepad--:1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4C43B1-8CAA-44CB-98F5-769441546D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/cxasm/notepad--/issues/I6C80Z",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221475",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221475",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/cxasm/notepad--/issues/I6C80Z",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0910",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-18T09:15:10.823",
      "lastModified" : "2024-11-21T07:38:04.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file view_prod.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-221476."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221476",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221476",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0912",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-18T20:15:11.813",
      "lastModified" : "2024-11-21T07:38:05.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. This affects an unknown part of the file /adms/admin/?page=vehicles/view_transaction. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221481 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auto_dealer_management_system_project:auto_dealer_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE7F9BB-FEDE-4E66-B32B-AA76D90D9809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Management%20System%20-%20SQL%20Injection%20-%201.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221481",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221481",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Management%20System%20-%20SQL%20Injection%20-%201.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0913",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-18T20:15:11.923",
      "lastModified" : "2024-11-21T07:38:05.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. This vulnerability affects unknown code of the file /adms/admin/?page=vehicles/sell_vehicle. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221482 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auto_dealer_management_system_project:auto_dealer_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE7F9BB-FEDE-4E66-B32B-AA76D90D9809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Management%20System%20-%20SQL%20Injection%20-%202.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221482",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221482",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Management%20System%20-%20SQL%20Injection%20-%202.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0914",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-19T01:15:16.927",
      "lastModified" : "2024-11-21T07:38:05.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelfed:pixelfed:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.11.4",
            "matchCriteriaId" : "71573784-3C90-4131-B37F-1D88D97BFA31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pixelfed/pixelfed/commit/ef56f92c3d77e9bafaa70c08b7c04d5a61b8d454",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/54d5fd76-e038-4eda-9e03-d5e95e09c0ec",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pixelfed/pixelfed/commit/ef56f92c3d77e9bafaa70c08b7c04d5a61b8d454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/54d5fd76-e038-4eda-9e03-d5e95e09c0ec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0915",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-19T09:15:10.537",
      "lastModified" : "2024-11-21T07:38:05.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manage_user. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221490 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auto_dealer_management_system_project:auto_dealer_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE7F9BB-FEDE-4E66-B32B-AA76D90D9809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Management%20System%20-%20SQL%20Injection%20-%203.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221490",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221490",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Management%20System%20-%20SQL%20Injection%20-%203.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0916",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-19T09:15:11.073",
      "lastModified" : "2024-11-21T07:38:05.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221491."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auto_dealer_management_system_project:auto_dealer_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE7F9BB-FEDE-4E66-B32B-AA76D90D9809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Management%20System%20-%20Broken%20Access%20Control.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221491",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221491",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Management%20System%20-%20Broken%20Access%20Control.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0917",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-19T09:15:11.197",
      "lastModified" : "2025-09-30T15:12:30.213",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Simple Customer Relationship Management System 1.0. This affects an unknown part of the file /php-scrm/login.php. The manipulation of the argument Password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221493 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_customer_relationship_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1110BA8-AEB2-410C-983F-6EFEBECC8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/awans2023/CVE/blob/main/README1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221493",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221493",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/awans2023/CVE/blob/main/README1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0918",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-19T09:15:11.307",
      "lastModified" : "2024-11-21T07:38:05.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221494 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pharmacy_management_system_project:pharmacy_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE46D7E-6D10-4440-A61E-1206012679BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.0xgabe.com/?p=71",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221494",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221494",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.0xgabe.com/?p=71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0919",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-19T15:15:10.433",
      "lastModified" : "2026-02-25T17:17:14.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kavitareader:kavita:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.7.0",
            "matchCriteriaId" : "4AD2FD65-B504-4E7E-8544-8457C6C85EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Kareadita/Kavita/pull/1748/commits/6648b79e1b2f92449d5816d0722b7a3d72f259d5",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3c514923-473f-4c50-ae0d-d002a41fe70f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kareadita/Kavita/pull/1748/commits/6648b79e1b2f92449d5816d0722b7a3d72f259d5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3c514923-473f-4c50-ae0d-d002a41fe70f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-20T03:15:10.313",
      "lastModified" : "2025-03-18T15:15:45.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:epiphany:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "43.1",
            "matchCriteriaId" : "415F3443-BB2C-4889-A91B-03AC1BF393E8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/google/security-research/security/advisories/GHSA-mhhf-w9xw-pp9x",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1275",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00015.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFWUNG6E4ZT43EYNHKYXS7QVSO2VW2H2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SADQCSQKTJKTTIJMEPY7GII6IVQSKEKV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/google/security-research/security/advisories/GHSA-mhhf-w9xw-pp9x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFWUNG6E4ZT43EYNHKYXS7QVSO2VW2H2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SADQCSQKTJKTTIJMEPY7GII6IVQSKEKV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-20T05:15:11.160",
      "lastModified" : "2025-03-17T19:15:19.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Liima before 1.17.28 allows server-side template injection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-917"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-917"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puzzle:liima:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.17.28",
            "matchCriteriaId" : "7ED6DCF2-520E-46AA-B141-210496B34802"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liimaorg/liima/blob/master/release-changelog.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/liimaorg/liima/pull/678",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/liimaorg/liima/blob/master/release-changelog.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/liimaorg/liima/pull/678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-20T05:15:11.373",
      "lastModified" : "2025-03-17T19:15:19.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Liima before 1.17.28 allows Hibernate query language (HQL) injection, related to colToSort in the deployment filter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:puzzle:liima:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.17.28",
            "matchCriteriaId" : "7ED6DCF2-520E-46AA-B141-210496B34802"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liimaorg/liima/blob/master/release-changelog.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/liimaorg/liima/pull/663",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/liimaorg/liima/blob/master/release-changelog.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/liimaorg/liima/pull/663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24998",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-02-20T16:15:10.423",
      "lastModified" : "2025-11-03T22:16:05.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads.\n\n\n\n\nNote that, like all of the file upload limits, the\n          new configuration option (FileUploadBase#setFileCountMax) is not\n          enabled by default and must be explicitly configured."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_fileupload:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "1.5",
            "matchCriteriaId" : "7B386378-64A5-417D-9FE8-F25AE7A26459"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_fileupload:1.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "58B413FF-EBC0-4DFA-B507-AA2A3579E349"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/22/1",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-37",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5522",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/22/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230302-0013/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20241108-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25569",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-20T16:15:10.503",
      "lastModified" : "2024-11-21T07:49:44.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apollo is a configuration management system. Prior to version 2.1.0, a low-privileged user can create a special web page. If an authenticated portal admin visits this page, the page can silently send a request to assign new roles for that user without any confirmation from the Portal admin. Cookie SameSite strategy was set to Lax in version 2.1.0. As a workaround, avoid visiting unknown source pages.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apolloconfig:apollo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "799ED7FE-4FAA-475E-A4E6-2F3179879F3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apolloconfig/apollo/commit/00d968a7229f809b0d8ed0532e8c01a6c2b7c750",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/apolloconfig/apollo/pull/4664",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/apolloconfig/apollo/releases/tag/v2.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/apolloconfig/apollo/security/advisories/GHSA-fmxq-v8mg-qh25",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.apolloconfig.com/#/en/usage/apollo-user-guide?id=_71-security-related",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/apolloconfig/apollo/commit/00d968a7229f809b0d8ed0532e8c01a6c2b7c750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/apolloconfig/apollo/pull/4664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/apolloconfig/apollo/releases/tag/v2.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/apolloconfig/apollo/security/advisories/GHSA-fmxq-v8mg-qh25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.apolloconfig.com/#/en/usage/apollo-user-guide?id=_71-security-related",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25570",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-20T16:15:10.593",
      "lastModified" : "2024-11-21T07:49:45.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apollo is a configuration management system. Prior to version 2.1.0, there are potential security issues if users expose apollo-configservice to the internet, which is not recommended. This is because there is no authentication feature enabled for the built-in eureka service. Malicious hackers may access eureka directly to mock apollo-configservice and apollo-adminservice. Login authentication for eureka was added in version 2.1.0. As a workaround, avoid exposing apollo-configservice to the internet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apolloconfig:apollo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "799ED7FE-4FAA-475E-A4E6-2F3179879F3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apolloconfig/apollo/commit/7df79bf8df6960433ed4ff782a54e3dfc74632bd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/apolloconfig/apollo/pull/4663",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/apolloconfig/apollo/releases/tag/v2.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/apolloconfig/apollo/security/advisories/GHSA-368x-wmmg-hq5c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apolloconfig/apollo/commit/7df79bf8df6960433ed4ff782a54e3dfc74632bd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/apolloconfig/apollo/pull/4663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/apolloconfig/apollo/releases/tag/v2.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/apolloconfig/apollo/security/advisories/GHSA-368x-wmmg-hq5c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25613",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-02-20T16:15:10.677",
      "lastModified" : "2025-08-11T14:24:58.983",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An LDAP Injection vulnerability exists in the LdapIdentityBackend of Apache Kerby before 2.0.3. "
      }, {
        "lang" : "es",
        "value" : "Existe una vulnerabilidad de inyección LDAP en LdapIdentityBackend de Apache Kerby anterior a 2.0.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:kerby_ldap_backend:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.3",
            "matchCriteriaId" : "772B0898-0772-49BE-8A9F-5C0D944BFD1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/ynz3hhbbq6d980fzpncwbh5jd8mkyt5y",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread/ynz3hhbbq6d980fzpncwbh5jd8mkyt5y",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25656",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-20T16:15:10.747",
      "lastModified" : "2024-11-21T07:49:52.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "notation-go is a collection of libraries for supporting Notation sign, verify, push, and pull of oci artifacts. Prior to version 1.0.0-rc.3, notation-go users will find their application using excessive memory when verifying signatures. The application will be killed, and thus availability is impacted. The problem has been patched in the release v1.0.0-rc.3. Some workarounds are available. Users can review their own trust policy file and check if the identity string contains `=#`. Meanwhile, users should only put trusted certificates in their trust stores referenced by their own trust policy files, and make sure the `authenticity` validation is set to `enforce`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:notaryproject:notation-go:0.7.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE9F3CB-8113-43F6-B85E-901E0F742EBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:notaryproject:notation-go:0.8.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "26950002-B9F0-42DE-95D9-AC4A4AA16693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:notaryproject:notation-go:0.9.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "17AF7E20-1C25-4660-9F8F-D99AB3AE4B7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/notaryproject/notation-go/releases/tag/v1.0.0-rc.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/notaryproject/notation-go/security/advisories/GHSA-87x9-7grx-m28v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/notaryproject/notation-go/releases/tag/v1.0.0-rc.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/notaryproject/notation-go/security/advisories/GHSA-87x9-7grx-m28v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25805",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-20T16:15:10.827",
      "lastModified" : "2024-11-21T07:50:14.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "versionn, software for changing version information across multiple files, has a command injection vulnerability in all versions prior to version 1.1.0. This issue is patched in version 1.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:versionn_project:versionn:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "E1348743-9E3E-400E-91C8-97056CA1C0C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/commenthol/versionn/commit/2ca128823efe962b37f2698f0eb530c2b124842d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/commenthol/versionn/security/advisories/GHSA-fj78-2vc5-f6cm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/commenthol/versionn/commit/2ca128823efe962b37f2698f0eb530c2b124842d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/commenthol/versionn/security/advisories/GHSA-fj78-2vc5-f6cm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23452",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2023-02-20T23:15:12.447",
      "lastModified" : "2025-03-18T15:15:44.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:fx0-gpnt00000_firmware:3.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5D70D0-8AB7-4718-946F-8899FEF6DD77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:fx0-gpnt00000_firmware:3.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5FC5162-066F-4FC0-875A-2BCD70B82842"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:fx0-gpnt00000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF3BF752-4F49-4E90-9790-1913ED64D8B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:fx0-gpnt00010_firmware:3.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "718BD86C-0389-421F-BDA7-5A7635EEAD36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:fx0-gpnt00010_firmware:3.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3211E28A-7225-4E4C-9D43-77C8AF0D1781"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:fx0-gpnt00010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B6F37A-78EE-4D1F-ACAE-FDE864F847B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sick.com/psirt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23453",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2023-02-20T23:15:12.517",
      "lastModified" : "2025-03-18T15:15:44.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:fx0-gent00010_firmware:3.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EC0ECE-70A8-442B-B93B-B84932F52DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:fx0-gent00010_firmware:3.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D73D794-5176-42B1-B73F-2BB30D123E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:fx0-gent00010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAC00EB-BB15-4A65-A58D-B3015F7CFF85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:fx0-gent00000_firmware:3.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0831A52-F30A-4CEF-AF5B-037D9E3F09A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:fx0-gent00000_firmware:3.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "914328E2-B380-4763-AE8A-91B711EDE944"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:fx0-gent00000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB590A4-F5E4-4A17-B5A6-33A995C96BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sick.com/psirt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-21T00:15:11.393",
      "lastModified" : "2025-03-17T19:15:20.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jd-gui_project:jd-gui:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C110DFC0-14E8-4651-A104-59C8F5957B8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/java-decompiler/jd-gui/issues/415",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/java-decompiler/jd-gui/pull/417",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/java-decompiler/jd-gui/issues/415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/java-decompiler/jd-gui/pull/417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-21T00:15:11.477",
      "lastModified" : "2025-03-17T19:15:20.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jd-gui_project:jd-gui:1.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C110DFC0-14E8-4651-A104-59C8F5957B8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/java-decompiler/jd-gui/pull/418",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/java-decompiler/jd-gui/pull/418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-21T01:15:11.423",
      "lastModified" : "2025-05-05T16:15:31.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "afu_mmio_region_get_by_offset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integer overflow."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.12",
            "matchCriteriaId" : "DB1CFD6A-A22C-43FB-B2C1-8436F7FE9407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1208518",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://patchwork.kernel.org/project/linux-fpga/patch/20230206054326.89323-1-k1rh4.lee%40gmail.com",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230406-0002/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1208518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://patchwork.kernel.org/project/linux-fpga/patch/20230206054326.89323-1-k1rh4.lee%40gmail.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230406-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-21T02:15:10.293",
      "lastModified" : "2025-03-14T19:15:41.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nic:knot_resolver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.0",
            "matchCriteriaId" : "7668D3CA-CB4A-46F7-94CC-9027E5E7B059"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.knot-resolver.cz/2023-01-26-knot-resolver-5.6.0.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.knot-resolver.cz/2023-01-26-knot-resolver-5.6.0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-21T02:15:10.367",
      "lastModified" : "2025-03-14T19:15:41.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gluster:glusterfs:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3E49EE-8F33-469E-94E9-A5C7EE296D2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gluster/glusterfs/issues/3954",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE6K2DXP4QZVKP32Z7BSYDSRBL4H7JSE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/gluster/glusterfs/issues/3954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE6K2DXP4QZVKP32Z7BSYDSRBL4H7JSE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-21T04:15:10.637",
      "lastModified" : "2025-03-14T19:15:42.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that are passed in via a URL. The function borg_preprocess_page in the file template.php does not properly sanitize incoming path arguments before using them."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:borg_project:borg:*:*:*:*:*:backdrop_cms:*:*",
            "versionEndExcluding" : "1.1.19",
            "matchCriteriaId" : "003F8258-6A8F-400D-806B-CAEF75158248"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://backdropcms.org/project/borg",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/backdrop-contrib/borg/compare/1.x-1.1.18...1.x-1.1.19",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://backdropcms.org/project/borg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/backdrop-contrib/borg/compare/1.x-1.1.18...1.x-1.1.19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-21T04:15:10.693",
      "lastModified" : "2025-03-14T19:15:42.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:afl\\+\\+_project:afl\\+\\+:4.05c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD6420A-E75A-437F-B3EC-CB6E9C57DB1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AFLplusplus/AFLplusplus/pull/1643",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/AFLplusplus/AFLplusplus/pull/1643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24575",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-21T05:15:11.243",
      "lastModified" : "2024-11-21T07:48:09.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell Multifunction Printer E525w Driver and Software Suite, versions prior to 1.047.2022, A05, contain a local privilege escalation vulnerability that could be exploited by malicious users to compromise the affected system\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:multifunction_printer_e525w_driver_and_software_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.047.2022\\,_a05",
            "matchCriteriaId" : "21776345-AEC4-40AC-B85E-7DA2747BFEA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000208396/dsa-2023-043",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000208396/dsa-2023-043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0059",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:11.897",
      "lastModified" : "2025-03-12T21:15:39.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Youzify WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kainelabs:youzify:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.2",
            "matchCriteriaId" : "EAE4C19F-AF3B-4D02-AFEB-3BF8340E25AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5e26c485-9a5a-44a3-95b3-6c063a1c321c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5e26c485-9a5a-44a3-95b3-6c063a1c321c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0067",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:11.967",
      "lastModified" : "2024-11-21T07:36:29.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Timed Content WordPress plugin before 2.73 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timed_content_project:timed_content:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.73",
            "matchCriteriaId" : "715AD21F-A57A-4BEA-A1FE-D22ADD247972"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/92f43da9-9903-4bcf-99e8-0e269072d389",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/92f43da9-9903-4bcf-99e8-0e269072d389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0231",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:12.037",
      "lastModified" : "2025-03-12T17:15:37.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ShopLentor WordPress plugin before 2.5.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:shoplentor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.5.4",
            "matchCriteriaId" : "4B26359F-D99E-47FB-8B08-38582D9AB8C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/533c19d5-219c-4389-a8bf-8b3a35b33b20",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/533c19d5-219c-4389-a8bf-8b3a35b33b20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0232",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:12.107",
      "lastModified" : "2025-03-12T21:15:40.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ShopLentor WordPress plugin before 2.5.4 unserializes user input from cookies in order to track viewed products and user data, which could lead to PHP Object Injection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:shoplentor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.5.4",
            "matchCriteriaId" : "4B26359F-D99E-47FB-8B08-38582D9AB8C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2852711/woolentor-addons/trunk/includes/helper-function.php",
        "source" : "contact@wpscan.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/1885a708-0e8a-4f4c-8e26-069bebe9a518",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2852711/woolentor-addons/trunk/includes/helper-function.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/1885a708-0e8a-4f4c-8e26-069bebe9a518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0271",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:12.187",
      "lastModified" : "2025-03-14T19:15:40.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Font Awesome WordPress plugin before 1.7.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedded, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp_font_awesome_project:wp_font_awesome:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.9",
            "matchCriteriaId" : "531CB578-33E3-4B08-B7DC-455F2A6DB864"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/fd7aaf06-4be7-48d6-83a1-cd5cd6c3d9c2",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/fd7aaf06-4be7-48d6-83a1-cd5cd6c3d9c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0285",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:12.257",
      "lastModified" : "2025-03-12T16:15:18.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devowl:real_media_library:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.18.29",
            "matchCriteriaId" : "FD510822-D54D-4D33-8B8B-68C8EE7656E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/adf09e29-baf5-4426-a281-6763c107d348",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/adf09e29-baf5-4426-a281-6763c107d348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0366",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:12.323",
      "lastModified" : "2025-03-12T21:15:40.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quick-plugins:loan_comparison:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.3",
            "matchCriteriaId" : "CDB00EBC-5C0F-4859-B278-16A139F7A3BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/7d68b0df-7169-46b2-b8e3-4d0c2aa8d605",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/7d68b0df-7169-46b2-b8e3-4d0c2aa8d605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0371",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:12.397",
      "lastModified" : "2025-03-13T20:15:14.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EmbedSocial WordPress plugin before 1.1.28 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedsocial:embedsocial:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.28",
            "matchCriteriaId" : "49CCF4D8-A2E1-4169-9400-5F911E03217F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/0b6381cd-fa31-4cc7-8b42-063a4c545577",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/0b6381cd-fa31-4cc7-8b42-063a4c545577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0372",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:12.467",
      "lastModified" : "2025-03-14T15:15:38.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EmbedStories WordPress plugin before 0.7.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:embedsocial:embedstories:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.7.5",
            "matchCriteriaId" : "F98AF265-B158-444D-8EA8-80241D533FD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/9cf90ad8-4aa4-466c-a33e-4f2706815765",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/9cf90ad8-4aa4-466c-a33e-4f2706815765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0375",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:12.533",
      "lastModified" : "2025-03-12T21:15:40.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Easy Affiliate Links WordPress plugin before 3.7.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embedded, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bootstrapped:easy_affiliate_links:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.7.1",
            "matchCriteriaId" : "1E628B95-0AE6-4356-B8BD-3106215733E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/915d6add-d3e2-4ced-969e-9523981ac886",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/915d6add-d3e2-4ced-969e-9523981ac886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0378",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:12.600",
      "lastModified" : "2025-06-10T11:44:28.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Greenshift WordPress plugin before 5.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpsoul:greenshift:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.0",
            "matchCriteriaId" : "E73DB4A1-0777-43D4-B48E-F3B0780EFD2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/3313cc05-2267-4d93-a8a8-2c0701c21f66",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/3313cc05-2267-4d93-a8a8-2c0701c21f66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0380",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:12.673",
      "lastModified" : "2025-03-14T19:15:40.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Easy Digital Downloads WordPress plugin before 3.1.0.5 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sandhillsdev:easy_digital_downloads:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.0.5",
            "matchCriteriaId" : "AB26F0F6-3DCE-42D3-B673-C2953A5D7D8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/3256e090-1131-459d-ade5-f052cd5d189f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/3256e090-1131-459d-ade5-f052cd5d189f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0419",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:12.747",
      "lastModified" : "2025-03-12T16:15:18.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Shortcode for Font Awesome WordPress plugin before 1.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedded, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smg-webdesign:shortcode_for_font_awesome:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "C3C3661B-A5A8-4033-994F-991F49776576"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5ccfee43-920d-4613-b976-2ea8966696ba",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5ccfee43-920d-4613-b976-2ea8966696ba",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0428",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:12.820",
      "lastModified" : "2025-03-12T21:15:40.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kibokolabs:watu_quiz:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.3.8.2",
            "matchCriteriaId" : "AA8307A8-E766-4F8D-97F6-D601191FD14D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c933460b-f77d-4986-9f5a-32d9f3f8b412",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c933460b-f77d-4986-9f5a-32d9f3f8b412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0429",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:12.887",
      "lastModified" : "2025-03-12T21:15:40.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 2.5
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kibokolabs:watu_quiz:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.3.8.2",
            "matchCriteriaId" : "AA8307A8-E766-4F8D-97F6-D601191FD14D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/67d84549-d368-4504-9fa9-b1fce63cb967",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/67d84549-d368-4504-9fa9-b1fce63cb967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0442",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:12.963",
      "lastModified" : "2025-03-12T14:15:13.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its query parameters before outputting them back in a page/post via an embedded shortcode, which could allow an attacker to inject javascript into into the site via a crafted URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:loan_comparison_project:loan_comparison:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.3",
            "matchCriteriaId" : "66959984-CF6F-4258-AD00-60B5CEC77B43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/34d95d88-4114-4597-b4db-e9f5ef80d322",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/34d95d88-4114-4597-b4db-e9f5ef80d322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0453",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:13.037",
      "lastModified" : "2025-03-12T16:15:18.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Private Message WordPress plugin (bundled with the Superio theme as a required plugin) before 1.0.6 does not ensure that private messages to be accessed belong to the user making the requests. This allowing any authenticated users to access private messages belonging to other users by tampering the ID."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apusthemes:wp_private_messaging:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "2814998C-F9B1-40A9-8295-AED2179F0D01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://themeforest.net/item/superio-job-board-wordpress-theme/32180231",
        "source" : "contact@wpscan.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f915e5ac-e216-4d1c-aec1-c3be11e2a6de",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://themeforest.net/item/superio-job-board-wordpress-theme/32180231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f915e5ac-e216-4d1c-aec1-c3be11e2a6de",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0492",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:13.117",
      "lastModified" : "2025-03-14T15:15:39.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GS Products Slider for WooCommerce WordPress plugin before 1.5.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gsplugins:gs_products_slider:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.9",
            "matchCriteriaId" : "A532513A-968D-48D5-AD2D-51F0876F10D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/ea3b129d-32d8-40e3-b1af-8b92a760db23",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ea3b129d-32d8-40e3-b1af-8b92a760db23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0540",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:13.187",
      "lastModified" : "2025-03-13T20:15:14.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GS Filterable Portfolio WordPress plugin before 1.6.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gsplugins:gs_filterable_portfolio:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.6.1",
            "matchCriteriaId" : "C75CE1D4-368E-46E1-B20F-90C4365ED7D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/b35b3da2-468d-4fe5-bff6-812432197a38",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/b35b3da2-468d-4fe5-bff6-812432197a38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0541",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:13.257",
      "lastModified" : "2025-03-12T21:15:40.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GS Books Showcase WordPress plugin before 1.3.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gsplugins:gs_books_showcase:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.1",
            "matchCriteriaId" : "2AA35804-DD4E-4540-BB60-99D36770E99F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/8453e587-cc8c-491a-af09-fc4ab215134b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8453e587-cc8c-491a-af09-fc4ab215134b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0559",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-21T09:15:13.330",
      "lastModified" : "2025-03-14T19:15:41.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GS Portfolio for Envato WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedded, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gsplugins:gs_portfolio_for_envato:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.0",
            "matchCriteriaId" : "D8338125-B511-436A-A762-B40083B4DD1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e5549261-66e2-4a5e-8781-bc555b629ccc",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e5549261-66e2-4a5e-8781-bc555b629ccc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-21T09:15:13.597",
      "lastModified" : "2025-03-14T19:15:43.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "php-saml-sp before 1.1.1 and 2.x before 2.1.1 allows reading arbitrary files as the webserver user because resolving XML external entities was silently enabled via \\LIBXML_DTDLOAD | \\LIBXML_DTDATTR."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-saml-sp_project:php-saml-sp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.1",
            "matchCriteriaId" : "DD7084C3-56AD-4621-965A-4CCAE5271FC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-saml-sp_project:php-saml-sp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.1.1",
            "matchCriteriaId" : "263AFB80-D118-48DB-836E-6B933BD3E44A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.sr.ht/~fkooman/php-saml-sp/commit/851f75b298a77e62d9022f1b170f662f5f7716d6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.sr.ht/~fkooman/php-saml-sp/log",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.sr.ht/~fkooman/php-saml-sp/commit/851f75b298a77e62d9022f1b170f662f5f7716d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.sr.ht/~fkooman/php-saml-sp/log",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0935",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-21T10:15:11.030",
      "lastModified" : "2024-11-21T07:38:08.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in DolphinPHP up to 1.5.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file common.php of the component Incomplete Fix CVE-2021-46097. The manipulation of the argument id leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221551."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolphinphp_project:dolphinphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "050D9121-B0FE-4B64-BEBE-E54514BB4E5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ssteveez/dolphin/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221551",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221551",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ssteveez/dolphin/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0936",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-21T10:15:11.517",
      "lastModified" : "2024-11-21T07:38:08.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in TP-Link Archer C50 V2_160801. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation leads to denial of service. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221552."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_c50:v2_160801:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFA2C38-399B-4CD3-AF56-6938BCC1A01F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_c50:2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAF991B-15EB-4858-B7A7-18FA24C180DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221552",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221552",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0938",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-21T10:15:11.603",
      "lastModified" : "2024-11-21T07:38:08.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown part of the file music_list.php of the component GET Request Handler. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221553 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:music_gallery_site_project:music_gallery_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560DB6F6-5EBB-460F-AF7A-BA43456DAC86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Music%20Gallery%20Site%20-%20SQL%20Injection%201.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221553",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221553",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Music%20Gallery%20Site%20-%20SQL%20Injection%201.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25928",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-02-21T14:15:13.853",
      "lastModified" : "2024-11-21T07:50:26.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  247646."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED2F00-89E3-4BA9-A8FB-D43B308A59A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492C463-D76E-49B7-A4D4-3B499E422D89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247646",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6956598",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6956598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0934",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-21T15:15:12.107",
      "lastModified" : "2024-11-21T07:38:08.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "BEA7FFD2-1A13-45E3-AD90-671B0E1C5FF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/edc06942d51fa8e56a134c5c7e5c8826d9260da0",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/cd213098-5bab-487f-82c7-13698ad43b51",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/edc06942d51fa8e56a134c5c7e5c8826d9260da0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/cd213098-5bab-487f-82c7-13698ad43b51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-21T15:15:12.197",
      "lastModified" : "2025-03-14T19:15:41.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7100ru_firmware:7.4cu.2313_b20191024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C47206-6608-4258-A2FE-D15C5637192D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7100ru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DD0831-0EB3-4F09-B4E4-6165E53AB6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fuxianghah/IOT/tree/main/Motorala/MR2600/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/fuxianghah/IOT/tree/main/Motorala/MR2600/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22920",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-02-21T16:15:11.743",
      "lastModified" : "2024-11-21T07:45:39.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security misconfiguration vulnerability exists in the Zyxel LTE3316-M604 firmware version V2.00(ABMP.6)C0 due to a factory default misconfiguration intended for testing purposes. A remote attacker could leverage this vulnerability to access an affected device using Telnet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:lte3202-m437_firmware:1.00\\(abwf.1\\)c0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA056DF-42B9-4530-9076-F5BAE33E4849"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:lte3202-m437:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AFA5A91-B372-464B-9C8E-DFC6552E64EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:lte3316-m604_firmware:2.00\\(abmp.6\\)c0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8CE2DA-94BB-4263-B0FD-02AB3ECA8858"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:lte3316-m604:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557BE1D0-A562-4176-8E59-562E329DD602"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-security-misconfiguration-vulnerability-of-4g-lte-indoor-routers",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-security-misconfiguration-vulnerability-of-4g-lte-indoor-routers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-21T16:15:11.820",
      "lastModified" : "2024-11-21T07:45:45.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:axis:207w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3D5A6B-F3A1-45CB-BDB7-72A2A1A95827"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:axis:207w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BA275E-EDF7-4A48-AB10-F2093CD49193"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://d0ub1e-d.github.io/2022/12/30/exploit-db-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://d0ub1e-d.github.io/2022/12/30/exploit-db-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-21T16:15:11.873",
      "lastModified" : "2025-03-17T17:15:15.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libreswan:libreswan:4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D49C745-4A03-4076-8F91-3AD698C1D1BD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libreswan/libreswan/issues/954",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MFOIQX2LRL43P3GJT33DE7G7COHNXDN/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CSMYJH7MC2FZGCY5NH5AXULO3ISXIHOF/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5368",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libreswan/libreswan/issues/954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MFOIQX2LRL43P3GJT33DE7G7COHNXDN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CSMYJH7MC2FZGCY5NH5AXULO3ISXIHOF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0942",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-21T20:15:12.523",
      "lastModified" : "2026-04-08T19:18:04.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Japanized For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artisanworkshop:japanized_for_woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.5.4",
            "matchCriteriaId" : "41CD8E02-716A-45A8-83FF-1368609AC4B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/woocommerce-for-japan/trunk/includes/admin/views/html-admin-setting-screen.php#L63",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2868545%40woocommerce-for-japan%2Ftrunk&old=2863064%40woocommerce-for-japan%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2023/03/multiple-reflected-cross-site-scripting-vulnerabilities-in-three-wordpress-plugins-patched/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bb606a30-2f7c-41e9-9ebc-9f1b0b84fff8?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/woocommerce-for-japan/trunk/includes/admin/views/html-admin-setting-screen.php#L63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2868545%40woocommerce-for-japan%2Ftrunk&old=2863064%40woocommerce-for-japan%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bb606a30-2f7c-41e9-9ebc-9f1b0b84fff8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0943",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-21T20:15:12.653",
      "lastModified" : "2024-11-21T07:38:09.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function save_settings of the file index.php?page=site_settings of the component Image Handler. The manipulation of the argument img with the input ../../shell.php leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-221591."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:best_pos_management_system_project:best_pos_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B85DBCB-A5E2-4203-8FB3-A511653BF5D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221591",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221591",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0945",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-21T21:15:10.970",
      "lastModified" : "2024-11-21T07:38:09.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input \"><img src=x onerror=prompt(document.domain);> leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-221592."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:best_pos_management_system_project:best_pos_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B85DBCB-A5E2-4203-8FB3-A511653BF5D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221592",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221592",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0946",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-21T21:15:11.067",
      "lastModified" : "2024-11-21T07:38:09.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file billing/index.php?id=9. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The identifier VDB-221593 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:best_pos_management_system_project:best_pos_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B85DBCB-A5E2-4203-8FB3-A511653BF5D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221593",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221593",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25158",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-21T21:15:11.157",
      "lastModified" : "2024-11-21T07:49:13.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GeoTools is an open source Java library that provides tools for geospatial data. GeoTools includes support for OGC Filter expression language parsing, encoding and execution against a range of datastore. SQL Injection Vulnerabilities have been found when executing OGC Filters with JDBCDataStore implementations. Users are advised to upgrade to either version 27.4 or to 28.2 to resolve this issue. Users unable to upgrade may disable `encode functions` for PostGIS DataStores or enable `prepared statements` for JDBCDataStores as a partial mitigation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geotools:geotools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "24.7",
            "matchCriteriaId" : "C176DA1D-2F0C-4851-B8F2-4E4B89EF846A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geotools:geotools:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.0",
            "versionEndExcluding" : "25.7",
            "matchCriteriaId" : "2DEC4D52-9DB7-4B98-B303-A85A25B2FF99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geotools:geotools:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "26.0",
            "versionEndExcluding" : "26.7",
            "matchCriteriaId" : "41A8AAAE-AD5F-480B-B4E3-1856A7A5F3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geotools:geotools:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "27.0",
            "versionEndExcluding" : "27.4",
            "matchCriteriaId" : "6675E1F5-3717-414F-A839-4DE8F36FE1D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geotools:geotools:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "28.0",
            "versionEndExcluding" : "28.2",
            "matchCriteriaId" : "4F011666-B3FF-4EA0-833B-E9738097FDAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/geotools/geotools/security/advisories/GHSA-99c3-qc2q-p94m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/geotools/geotools/security/advisories/GHSA-99c3-qc2q-p94m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25657",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-21T21:15:11.243",
      "lastModified" : "2024-11-21T07:49:53.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions earlier than 1.5.7 are impacted by a remote code execution vulnerability. Nautobot did not properly sandbox Jinja2 template rendering. In Nautobot 1.5.7 has enabled sandboxed environments for the Jinja2 template engine used internally for template rendering for the following objects: `extras.ComputedField`, `extras.CustomLink`, `extras.ExportTemplate`, `extras.Secret`, `extras.Webhook`. While no active exploits of this vulnerability are known this change has been made as a preventative measure to protect against any potential remote code execution attacks utilizing maliciously crafted template code. This change forces the Jinja2 template engine to use a `SandboxedEnvironment` on all new installations of Nautobot. This addresses any potential unsafe code execution everywhere the helper function `nautobot.utilities.utils.render_jinja2` is called. Additionally, the documentation that had previously suggesting the direct use of `jinja2.Template` has been revised to suggest `render_jinja2`. Users are advised to upgrade to Nautobot 1.5.7 or newer. For users that are unable to upgrade to the latest release of Nautobot, you may add the following setting to your `nautobot_config.py` to apply the sandbox environment enforcement: `TEMPLATES[1][\"OPTIONS\"][\"environment\"] = \"jinja2.sandbox.SandboxedEnvironment\"` After applying this change, you must restart all Nautobot services, including any Celery worker processes. **Note:** *Nautobot specifies two template engines by default, the first being “django” for the Django built-in template engine, and the second being “jinja” for the Jinja2 template engine. This recommended setting will update the second item in the list of template engines, which is the Jinja2 engine.* For users that are unable to immediately update their configuration such as if a Nautobot service restart is too disruptive to operations, access to provide custom Jinja2 template values may be mitigated using permissions to restrict “change” (write) actions to the affected object types listed in the first section. **Note:** *This solution is intended to be stopgap until you can successfully update your `nautobot_config.py` or upgrade your Nautobot instance to apply the sandboxed environment enforcement.*"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:networktocode:nautobot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.7",
            "matchCriteriaId" : "DA68D12E-E223-46ED-8C8F-A996B7FFEE07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nautobot/nautobot/commit/d47f157e83b0c353bb2b697f911882c71cf90ca0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nautobot/nautobot/security/advisories/GHSA-8mfq-f5wj-vw5m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jinja.palletsprojects.com/en/3.0.x/sandbox/#sandbox",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/nautobot/nautobot/commit/d47f157e83b0c353bb2b697f911882c71cf90ca0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nautobot/nautobot/security/advisories/GHSA-8mfq-f5wj-vw5m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jinja.palletsprojects.com/en/3.0.x/sandbox/#sandbox",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25810",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-21T21:15:11.337",
      "lastModified" : "2024-11-21T07:50:14.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma status page allows a persistent XSS attack. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Uptime Kuma es una herramienta de monitoreo autohospedada. En versiones anteriores a la 1.20.0, la página de estado de Uptime Kuma permite un ataque XSS persistente. Se recomienda a los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uptime-kuma_project:uptime-kuma:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.20.0",
            "matchCriteriaId" : "A0D59208-7194-4806-A209-CC4248A5CC26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/louislam/uptime-kuma/security/advisories/GHSA-wh8j-xr66-f296",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/louislam/uptime-kuma/security/advisories/GHSA-wh8j-xr66-f296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25811",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-21T21:15:11.423",
      "lastModified" : "2024-11-21T07:50:14.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma `name` parameter allows a persistent XSS attack. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Uptime Kuma es una herramienta de monitoreo autohospedada. En versiones anteriores a la 1.20.0, el parámetro \"nombre\" de Uptime Kuma permite un ataque XSS persistente. Se recomienda a los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uptime-kuma_project:uptime-kuma:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.20.0",
            "matchCriteriaId" : "A0D59208-7194-4806-A209-CC4248A5CC26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/louislam/uptime-kuma/security/advisories/GHSA-553g-fcpf-m3wp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/louislam/uptime-kuma/security/advisories/GHSA-553g-fcpf-m3wp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25812",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-21T21:15:11.507",
      "lastModified" : "2024-11-21T07:50:14.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Minio is a Multi-Cloud Object Storage framework. Affected versions do not correctly honor a `Deny` policy on ByPassGoverance. Ideally, minio should return \"Access Denied\" to all users attempting to DELETE a versionId  with the special header `X-Amz-Bypass-Governance-Retention: true`.  However, this was not honored instead the request will be honored and an object under governance would be incorrectly deleted.  All users are advised to upgrade. There are no known workarounds for this issue.\n"
      }, {
        "lang" : "es",
        "value" : "Minio es un framework de almacenamiento de objetos Multi-Cloud. Las versiones afectadas no respetan correctamente la política \"Denegar\" en ByPassGoverance. Idealmente, minio debería devolver \"Acceso denegado\" a todos los usuarios que intenten ELIMINAR un ID de versión con el encabezado especial \"X-Amz-Bypass-Governance-Retention: true\". Sin embargo, esto no se cumplió; en cambio, la solicitud se aceptará y un objeto bajo control se eliminará incorrectamente. Se recomienda a todos los usuarios que actualicen. No se conocen workarounds para este problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minio:minio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020-04-10t03-34-42z",
            "versionEndExcluding" : "2023-02-17t17-52-43z",
            "matchCriteriaId" : "451D6DA1-D25A-46A8-822B-D0A78D65C642"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/minio/minio/commit/a7188bc9d0f0a5ae05aaf1b8126bcd3cb3fdc485",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/minio/minio/pull/16635",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-c8fc-mjj8-fc63",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/commit/a7188bc9d0f0a5ae05aaf1b8126bcd3cb3fdc485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/minio/minio/pull/16635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-c8fc-mjj8-fc63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-21T22:15:10.557",
      "lastModified" : "2025-03-18T15:15:45.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An access control issue in Axcora POS #0~gitf77ec09 allows unauthenticated attackers to execute arbitrary commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Un problema de control de acceso en Axcora POS #0~gitf77ec09 permite a atacantes no autenticados ejecutar comandos arbitrarios a través de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axcora:axcora:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C394352-3BD4-4C94-89AC-A6C7BF994F45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.youtube.com/watch?v=1FhPL3erWd4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://yuyudhn.github.io/CVE-2023-24320/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.youtube.com/watch?v=1FhPL3erWd4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://yuyudhn.github.io/CVE-2023-24320/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://yuyudhn.github.io/CVE-2023-24320/",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25157",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-21T22:15:10.620",
      "lastModified" : "2024-11-21T07:49:13.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language (CQL) as part of the Web Feature Service (WFS) and Web Map Service (WMS) protocols.  CQL is also supported through the Web Coverage Service (WCS) protocol for ImageMosaic coverages. Users are advised to upgrade to either version 2.21.4, or version 2.22.2 to resolve this issue. Users unable to upgrade should disable the PostGIS Datastore *encode functions* setting to mitigate ``strEndsWith``, ``strStartsWith`` and ``PropertyIsLike `` misuse and enable the PostGIS DataStore *preparedStatements* setting to mitigate the ``FeatureId`` misuse."
      }, {
        "lang" : "es",
        "value" : "GeoServer es un servidor de software de código abierto escrito en Java que permite a los usuarios compartir y editar datos geoespaciales. GeoServer incluye soporte para el lenguaje de expresión de filtro OGC y el lenguaje de consulta común (CQL) de OGC como parte de los protocolos Web Feature Service (WFS) y Web Map Service (WMS). CQL también es compatible a través del protocolo Web Coverage Service (WCS) para coberturas de ImageMosaic. Se recomienda a los usuarios que actualicen a la versión 2.21.4 o 2.22.2 para resolver este problema. Los usuarios que no puedan actualizar deben deshabilitar la configuración *encode funciones* de PostGIS Datastore para mitigar el mal uso de ``strEndsWith``, ``strStartsWith`` y ``PropertyIsLike `` y habilitar la configuración *preparedStatements* de PostGIS DataStore para mitigar ``FeatureId` `mal uso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:geoserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.18.7",
            "matchCriteriaId" : "CAC1A80B-98D3-4625-8819-EA1B81CE00F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:geoserver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.19.0",
            "versionEndExcluding" : "2.19.7",
            "matchCriteriaId" : "6FA3065D-87A8-4DC1-8E2D-0FFEF02CAC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:geoserver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.20.0",
            "versionEndExcluding" : "2.20.7",
            "matchCriteriaId" : "10778C77-EB5C-4F66-B915-67BF09BDD364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:geoserver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.21.0",
            "versionEndExcluding" : "2.21.4",
            "matchCriteriaId" : "5CDCB1FA-BF94-4CB6-BC14-C38777BCDB89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:geoserver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.22.0",
            "versionEndExcluding" : "2.22.2",
            "matchCriteriaId" : "873D8AE3-D184-486E-86AB-E0D00454C533"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/geoserver/geoserver/security/advisories/GHSA-7g5f-wrx8-5ccf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/geoserver/geoserver/security/advisories/GHSA-7g5f-wrx8-5ccf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-21T23:15:11.543",
      "lastModified" : "2025-03-14T19:15:41.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 (on iOS) allows attackers to compromise user accounts via a bruteforce attack."
      }, {
        "lang" : "es",
        "value" : "La falta de rate limiting en el endpoint de restablecimiento de contraseña de Chamberlain myQ v5.222.0.32277 (en iOS) permite a los atacantes comprometer las cuentas de los usuarios mediante un ataque de fuerza bruta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chamberlain:myq:5.222.0.32277:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "E7B46EF7-6DFC-4DF7-BC1E-52D5882717D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://chamberlain.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://web.archive.org/web/20230122144550/https://brackish.io/chamberlain-myq-account-takeover/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://archive.ph/NH0Bk",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://chamberlain.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://web.archive.org/web/20230122144550/https://brackish.io/chamberlain-myq-account-takeover/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://archive.ph/NH0Bk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-21T23:15:11.600",
      "lastModified" : "2025-03-14T19:15:41.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stored cross-site scripting (XSS) vulnerabilities in Redrock Software TutorTrac before v4.2.170210 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the reason and location fields of the visits listing page."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de cross-site scripting (XSS) almacenadas en Redrock Software TutorTrac anterior a v4.2.170210 permiten a los atacantes ejecutar scripts web arbitrarias o HTML a través de un payload manipulado inyectado en los campos de motivo y ubicación de la página de listado de visitas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go-redrock:tutortrac:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.170210",
            "matchCriteriaId" : "72C8C0E8-9B6C-44B4-B42A-0F72246B9AF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://brackish.io/tutortrac-multiple-stored-xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wiki.go-redrock.com/index.php/4.0_Recent_Changes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.go-redrock.com/solutions/tutortrac/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://brackish.io/tutortrac-multiple-stored-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wiki.go-redrock.com/index.php/4.0_Recent_Changes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.go-redrock.com/solutions/tutortrac/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20855",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-02-22T00:15:11.513",
      "lastModified" : "2025-03-17T19:15:17.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator, may be able to use specially crafted input to bypass XML parsing restrictions leading to access to sensitive information or possible escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "VMware vRealize Orchestrator contiene una vulnerabilidad de entidad externa XML (XXE). Un actor malintencionado, con acceso no administrativo a vRealize Orchestrator, puede utilizar entradas especialmente manipuladas para evitar las restricciones de análisis XML que conducen al acceso a información confidencial o a una posible escalada de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_automation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.11.1",
            "matchCriteriaId" : "AA060EA5-4972-4843-B786-CC7EB1BBC25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.11.1",
            "matchCriteriaId" : "3771C890-95D8-4861-A551-46D2E7F4BA88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0005.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20858",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-02-22T00:15:11.570",
      "lastModified" : "2025-03-17T19:15:17.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Carbon Black App Control 8.7.x prior to 8.7.8, 8.8.x prior to 8.8.6, and 8.9.x.prior to 8.9.4 contain an injection vulnerability. A malicious actor with privileged access to the App Control administration console may be able to use specially crafted input allowing access to the underlying server operating system."
      }, {
        "lang" : "es",
        "value" : "VMware Carbon Black App Control 8.7.x anterior a 8.7.8, 8.8.x anterior a 8.8.6 y 8.9.x.anterior a 8.9.4 contienen una vulnerabilidad de inyección. Un actor malintencionado con acceso privilegiado a la consola de administración de App Control puede utilizar entradas especialmente manipuladas que permitan el acceso al sistema operativo del servidor subyacente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:carbon_black_app_control:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0",
            "versionEndExcluding" : "8.7.8",
            "matchCriteriaId" : "4C5A2498-F94D-44D0-B1F8-D8B4355B7DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:carbon_black_app_control:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.8.0",
            "versionEndExcluding" : "8.8.6",
            "matchCriteriaId" : "AB5BDDE2-A11A-4A9A-BF90-3019D32055A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:carbon_black_app_control:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.9.0",
            "versionEndExcluding" : "8.9.4",
            "matchCriteriaId" : "4A752F50-23BD-4E47-9657-21F15080D210"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0004.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0947",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-22T01:15:11.930",
      "lastModified" : "2024-11-21T07:38:09.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3."
      }, {
        "lang" : "es",
        "value" : "Salto de ruta en el repositorio de GitHub de flatpressblog/flatpress anterior a 1.3"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpress:flatpress:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "0B7F86F1-EF82-4C77-8939-18335BDF1537"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatpressblog/flatpress/commit/9c4e5d6567e446c472f3adae3b2fe612f66871c7",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7379d702-72ff-4a5d-bc68-007290015496",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpressblog/flatpress/commit/9c4e5d6567e446c472f3adae3b2fe612f66871c7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7379d702-72ff-4a5d-bc68-007290015496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-22T04:15:10.180",
      "lastModified" : "2025-03-13T20:15:14.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hour_of_code_python_2015 commit 520929797b9ca43bb818b2e8f963fb2025459fa3 was discovered to contain a code execution backdoor via the request package (requirements.txt). This vulnerability allows attackers to access sensitive user information and execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que hour_of_code_python_2015, en su commit 520929797b9ca43bb818b2e8f963fb2025459fa3 contenía una puerta trasera de ejecución de código a través del paquete de solicitud (requirements.txt). Esta vulnerabilidad permite a los atacantes acceder a información confidencial del usuario y ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hour_of_code_python_2015_project:hour_of_code_python_2015:2015-12-11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D40862A-9BDE-4DE3-BAF1-EA3B1907AA26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jminh/hour_of_code_python_2015/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/jminh/hour_of_code_python_2015/issues/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://mirrors.neusoft.edu.cn/pypi/web/simple/request/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/jminh/hour_of_code_python_2015/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/jminh/hour_of_code_python_2015/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://mirrors.neusoft.edu.cn/pypi/web/simple/request/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-22T04:15:10.240",
      "lastModified" : "2025-12-05T16:22:21.097",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MvcTools 6d48cd6830fc1df1d8c9d61caa1805fd6a1b7737 was discovered to contain a code execution backdoor via the request package (requirements.txt). This vulnerability allows attackers to access sensitive user information and execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que MvcTools 6d48cd6830fc1df1d8c9d61caa1805fd6a1b7737 contenía una puerta trasera de ejecución de código a través del paquete de solicitud (requirements.txt). Esta vulnerabilidad permite a los atacantes acceder a información confidencial del usuario y ejecutar código arbitrario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-912"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zetacomponents:mvctools:2008-09-23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8923D580-BBEF-4685-BF76-D55FCC152A9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zetacomponents/MvcTools/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/zetacomponents/MvcTools/issues/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://mirrors.neusoft.edu.cn/pypi/web/simple/request/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/zetacomponents/MvcTools/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/zetacomponents/MvcTools/issues/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://mirrors.neusoft.edu.cn/pypi/web/simple/request/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-22T07:15:10.900",
      "lastModified" : "2025-03-18T17:15:42.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type is associated with an un-sandboxed Mono CLR interpreter."
      }, {
        "lang" : "es",
        "value" : "El paquete mono anterior a 6.8.0.105+dfsg-3.3 para Debian permite la ejecución de código arbitrario porque el tipo MIME application/x-ms-dos-executable está asociado con un intérprete Mono CLR un-sandboxed."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mono-project:mono:5.18.0.240\\+dfsg-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F44FDC-98EA-4A66-8317-6F2F1EE42460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mono-project:mono:6.8.0.105\\+dfsg-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C03D54BC-10BC-4694-9488-6260F82E6D78"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/972146",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/05/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/972146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/05/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0949",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-22T09:15:10.140",
      "lastModified" : "2024-11-21T07:38:09.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5."
      }, {
        "lang" : "es",
        "value" : "El repositorio modoboa de GitHub, en versiones anteriores a 2.0.5, es vulnerable a un Cross-site Scripting (XSS) reflejado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modoboa:modoboa:*:*:*:*:*:modoboa:*:*",
            "versionEndExcluding" : "2.0.5",
            "matchCriteriaId" : "27596FAB-FEFE-415A-9AC6-BCAD3E1BEE8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modoboa/modoboa/commit/aa74e9a4a870162eea169e0a6a2eab841f8811b7",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ef87be4e-493b-4ee9-9738-44c55b8acc19",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modoboa/modoboa/commit/aa74e9a4a870162eea169e0a6a2eab841f8811b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ef87be4e-493b-4ee9-9738-44c55b8acc19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-22T15:15:11.633",
      "lastModified" : "2024-11-21T07:45:49.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cellinx:nvt_web_server:1.0.6.002b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8912B8-E1D7-4E77-857D-5D9CFA68B24D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ahmedalroky/CVEs/tree/cellinx",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ahmedalroky/CVEs/tree/cellinx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-22T17:15:11.997",
      "lastModified" : "2025-03-20T21:15:17.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resultant use-after-free if a physically proximate attacker removes a VCC device while calling open(), aka a race condition between vcc_open() and vcc_remove()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.0",
            "matchCriteriaId" : "2538208F-B820-4423-9F94-E95AF713227F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5283F553-3742-412C-8FBF-5C48E60E7F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDE77B0-4959-484D-B7B5-815682FA0EA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lkml.org/lkml/2023/1/1/169",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lkml.org/lkml/2023/1/1/169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-22T17:15:12.057",
      "lastModified" : "2025-03-12T21:15:41.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link router TL-WR940N V6 3.19.1 Build 180119 uses a deprecated MD5 algorithm to hash the admin password used for basic authentication."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wr940n_firmware:6_3.19.1:180119:*:*:*:*:*:*",
            "matchCriteriaId" : "B3246AFD-515D-4BD7-AFCE-EAD12981679B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wr940n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A1F9B1-C0C1-4FCC-AFD3-936E74ED6EA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://midist0xf.medium.com/tl-wr940n-uses-weak-md5-hashing-algorithm-ae7b589860d2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tp-link.com/en/support/download/tl-wr940n/#Firmware",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://midist0xf.medium.com/tl-wr940n-uses-weak-md5-hashing-algorithm-ae7b589860d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tp-link.com/en/support/download/tl-wr940n/#Firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0960",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-22T18:15:10.907",
      "lastModified" : "2024-11-21T07:38:11.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SeaCMS 11.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /data/config.ftp.php of the component Picture Management. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-221630 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seacms:seacms:11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334495D7-55B1-435F-AA3C-85337555F52C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jidle123/Seacms-v11.6/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://note.youdao.com/ynoteshare/index.html?id=ef23876c8744c5c230f3874387c06b11",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221630",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221630",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jidle123/Seacms-v11.6/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://note.youdao.com/ynoteshare/index.html?id=ef23876c8744c5c230f3874387c06b11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26214",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2023-02-22T18:15:10.990",
      "lastModified" : "2025-03-12T16:15:19.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's local system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect: versions 7.3.0 and below."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:businessconnect:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "7.3.1",
            "matchCriteriaId" : "4E0AAFC6-A32A-4FF7-AAB6-E513B350FF65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0846",
      "sourceIdentifier" : "security@opennms.com",
      "published" : "2023-02-22T19:15:11.090",
      "lastModified" : "2024-11-21T07:37:56.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confidential session information. Users\nshould upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and\nHorizon installation instructions state that they are intended for installation\nwithin an organization's private networks and should not be directly accessible\nfrom the Internet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@opennms.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opennms.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:horizon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "31.0.4",
            "matchCriteriaId" : "9DC4EEF4-1204-4051-8E8E-7D3E69911D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "4FCCB664-CCB6-4D87-A2C4-9C216BAC38DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.opennms.com/meridian/2022/releasenotes/changelog.html#releasenotes-changelog-Meridian-2022.1.13",
        "source" : "security@opennms.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenNMS/opennms/pull/5506/files",
        "source" : "security@opennms.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://docs.opennms.com/meridian/2022/releasenotes/changelog.html#releasenotes-changelog-Meridian-2022.1.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenNMS/opennms/pull/5506/files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0961",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-22T19:15:11.200",
      "lastModified" : "2024-11-21T07:38:11.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been classified as critical. This affects an unknown part of the file view_music_details.php of the component GET Request Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221631."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:music_gallery_site_project:music_gallery_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560DB6F6-5EBB-460F-AF7A-BA43456DAC86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Music%20Gallery%20Site%20-%20SQL%20Injection%202.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221631",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221631",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Music%20Gallery%20Site%20-%20SQL%20Injection%202.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0962",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-22T19:15:11.283",
      "lastModified" : "2024-11-21T07:38:11.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been declared as critical. This vulnerability affects unknown code of the file Master.php of the component GET Request Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221632."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:music_gallery_site_project:music_gallery_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560DB6F6-5EBB-460F-AF7A-BA43456DAC86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Music%20Gallery%20Site%20-%20SQL%20Injection%203.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221632",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221632",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Music%20Gallery%20Site%20-%20SQL%20Injection%203.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0963",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-22T19:15:11.367",
      "lastModified" : "2024-11-21T07:38:11.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file Users.php of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221633 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:music_gallery_site_project:music_gallery_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560DB6F6-5EBB-460F-AF7A-BA43456DAC86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Music%20Gallery%20Site%20-%20Broken%20Access%20Control.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221633",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221633",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Music%20Gallery%20Site%20-%20Broken%20Access%20Control.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0964",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-22T19:15:11.450",
      "lastModified" : "2024-11-21T07:38:11.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. Affected is an unknown function of the file admin/products/view_product.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. VDB-221634 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sales_tracker_management_system_project:sales_tracker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF52C94E-14A2-48E2-930E-56E6375C4846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221634",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221634",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25154",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-22T19:15:11.610",
      "lastModified" : "2024-11-21T07:49:12.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Misskey is an open source, decentralized social media platform. In versions prior to 13.5.0 the link to the instance to the sender that appears when viewing a user or note received through ActivityPub is not properly validated, so by inserting a URL with a javascript scheme an attacker may execute JavaScript code in the context of the recipient. This issue has been fixed in version 13.5.0. Users are advised to upgrade. Users unable to upgrade should not \"view on remote\" for untrusted instances."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misskey:misskey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.5.0",
            "matchCriteriaId" : "FFC6D0B2-D52A-49DC-AFD1-7E49379F3013"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/misskey-dev/misskey/security/advisories/GHSA-pfp5-r48x-fg25",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/misskey-dev/misskey/security/advisories/GHSA-pfp5-r48x-fg25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25579",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-22T19:15:11.697",
      "lastModified" : "2024-11-21T07:49:45.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud server is a self hosted home cloud product. In affected versions the `OC\\Files\\Node\\Folder::getFullPath()` function was validating and normalizing the string in the wrong order. The function is used in the `newFile()` and `newFolder()` items, which may allow to creation of paths outside of ones own space and overwriting data from other users with crafted paths. This issue has been addressed in versions 25.0.2, 24.0.8, and 23.0.12. Users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.0.12",
            "matchCriteriaId" : "B50151BE-566E-4F7F-BFF5-CDBA5A0AE4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "20.0.0",
            "versionEndExcluding" : "20.0.14",
            "matchCriteriaId" : "00D6E726-5ED1-4409-8063-903F9DF581C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndExcluding" : "21.0.9",
            "matchCriteriaId" : "3A67058C-45D1-48DD-9247-1F465D0FBC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "22.2.0",
            "versionEndExcluding" : "22.2.10",
            "matchCriteriaId" : "F019288C-0D86-4F4B-B6FE-7D6A5BE4125C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.12",
            "matchCriteriaId" : "61D5D9C2-C03D-4F66-89B5-D5F94EFBCDAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.8",
            "matchCriteriaId" : "7827F3FA-9D17-4915-90CB-B3652E310F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.8",
            "matchCriteriaId" : "FF5F1D96-7883-40CD-82A4-13AAF12F53D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.2",
            "matchCriteriaId" : "8D5A8D9E-E394-4841-8177-BBC971CAF023"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.2",
            "matchCriteriaId" : "A263A4CF-DF40-41F3-BB9A-D03FF96FF6F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-273v-9h7x-p68v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/35074",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-273v-9h7x-p68v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/35074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25813",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-22T19:15:11.777",
      "lastModified" : "2024-11-21T07:50:15.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific queries in use. The issue has been fixed in Sequelize 6.19.1. Users are advised to upgrade. Users unable to upgrade should not use the `replacements` and the `where` option in the same query."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sequelizejs:sequelize:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "6.19.1",
            "matchCriteriaId" : "17071F43-EBB2-4A3C-ACD4-8914666046E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sequelize/sequelize/commit/ccaa3996047fe00048d5993ab2dd43ebadd4f78b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sequelize/sequelize/issues/14519",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/sequelize/sequelize/releases/tag/v6.19.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/sequelize/sequelize/security/advisories/GHSA-wrh9-cjv3-2hpw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/sequelize/sequelize/commit/ccaa3996047fe00048d5993ab2dd43ebadd4f78b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sequelize/sequelize/issues/14519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/sequelize/sequelize/releases/tag/v6.19.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/sequelize/sequelize/security/advisories/GHSA-wrh9-cjv3-2hpw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0927",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-22T20:15:12.010",
      "lastModified" : "2024-11-21T07:38:06.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.177",
            "matchCriteriaId" : "DE56E887-268E-413C-90CA-EC21B076D65F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1414738",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1414738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0928",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-22T20:15:12.070",
      "lastModified" : "2024-11-21T07:38:07.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.177",
            "matchCriteriaId" : "DE56E887-268E-413C-90CA-EC21B076D65F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1309035",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1309035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0929",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-22T20:15:12.123",
      "lastModified" : "2024-11-21T07:38:07.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.177",
            "matchCriteriaId" : "DE56E887-268E-413C-90CA-EC21B076D65F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1399742",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1399742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0930",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-22T20:15:12.177",
      "lastModified" : "2024-11-21T07:38:07.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.177",
            "matchCriteriaId" : "DE56E887-268E-413C-90CA-EC21B076D65F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1410766",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1410766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0931",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-22T20:15:12.230",
      "lastModified" : "2024-11-21T07:38:07.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.177",
            "matchCriteriaId" : "DE56E887-268E-413C-90CA-EC21B076D65F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1407701",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1407701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0932",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-22T20:15:12.280",
      "lastModified" : "2024-11-21T07:38:07.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.177",
            "matchCriteriaId" : "DE56E887-268E-413C-90CA-EC21B076D65F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1413005",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1413005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0933",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-22T20:15:12.343",
      "lastModified" : "2025-05-05T16:15:27.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.177",
            "matchCriteriaId" : "DE56E887-268E-413C-90CA-EC21B076D65F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1404864",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1404864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0941",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-02-22T20:15:12.410",
      "lastModified" : "2024-11-21T07:38:08.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "110.0.5481.177",
            "matchCriteriaId" : "DE56E887-268E-413C-90CA-EC21B076D65F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1415366",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/02/stable-channel-desktop-update_22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1415366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0966",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-22T20:15:12.490",
      "lastModified" : "2024-11-21T07:38:12.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=orders/view_order. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221635."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_eyewear_shop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464A3580-D632-43EB-93EF-E2A1A5736F14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1MurasaKi/Eyewear_Shop_XSS/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221635",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221635",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/1MurasaKi/Eyewear_Shop_XSS/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-22T20:15:12.577",
      "lastModified" : "2025-03-12T21:15:41.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:a210-g_firmware:a210-gv100r005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93622C65-D4A0-4687-9015-9D24D9679298"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:h3c:a210-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "592702DA-9F4B-4C45-B2D1-D65E591F8FB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.luckytain.com/?p=66",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.luckytain.com/?p=66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24810",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-22T20:15:12.630",
      "lastModified" : "2024-11-21T07:48:26.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Misskey is an open source, decentralized social media platform. Due to insufficient validation of the redirect URL during `miauth` authentication in Misskey, arbitrary JavaScript can be executed when a user allows the link. All versions below 13.3.1 (including 12.x) are affected. This has been fixed in version 13.3.1. Users are advised to upgrade. Users unable to upgrade should not allow authentication of untrusted apps."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misskey:misskey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.3.1",
            "matchCriteriaId" : "981BA492-22E1-491A-945F-7106858A5249"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/misskey-dev/misskey/security/advisories/GHSA-cc6r-chgr-8r5m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/misskey-dev/misskey/security/advisories/GHSA-cc6r-chgr-8r5m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24811",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-22T20:15:12.700",
      "lastModified" : "2024-11-21T07:48:26.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Misskey is an open source, decentralized social media platform. In versions prior to 13.3.2 the URL preview function is subject to a cross site scripting vulnerability due to insufficient URL validation. Arbitrary JavaScript is executed when a malicious URL is loaded in the `View in Player` or `View in Window` preview. This has been fixed in version 13.3.2. Users are advised to upgrade. Users unable to upgrade should avoid usage of the `View in Player` or `View in Window` functions.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misskey:misskey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.3.2",
            "matchCriteriaId" : "E4B92EAB-F584-4A4F-9F1F-3C5AF8C44008"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/misskey-dev/misskey/commit/38f9d1e76428bea47c5944c440eab25428c7d99e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/misskey-dev/misskey/security/advisories/GHSA-vc39-c453-67g3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/misskey-dev/misskey/commit/38f9d1e76428bea47c5944c440eab25428c7d99e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/misskey-dev/misskey/security/advisories/GHSA-vc39-c453-67g3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24812",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-22T20:15:12.777",
      "lastModified" : "2024-11-21T07:48:26.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Misskey is an open source, decentralized social media platform. In versions prior to 13.3.3 SQL injection is possible due to insufficient parameter validation in the note search API by tag (notes/search-by-tag). This has been fixed in version 13.3.3. Users are advised to upgrade. Users unable to upgrade should block access to the `api/notes/search-by-tag` endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misskey:misskey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.3.3",
            "matchCriteriaId" : "C283C863-C990-470A-9815-AC6A14462687"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/misskey-dev/misskey/commit/ee74df68233adcd5b167258c621565f97c3b2306",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/misskey-dev/misskey/security/advisories/GHSA-cgwp-vmr4-wx4q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/misskey-dev/misskey/commit/ee74df68233adcd5b167258c621565f97c3b2306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/misskey-dev/misskey/security/advisories/GHSA-cgwp-vmr4-wx4q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0104",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-22T21:15:11.207",
      "lastModified" : "2024-11-21T07:36:33.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nThe listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data.   \n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:H",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-29"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weintek:easybuilder_pro:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.07.02.480",
            "matchCriteriaId" : "CFCF1DCF-C041-4A39-B84B-52D80CBEE863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weintek:easybuilder_pro:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.08.01.190",
            "versionEndExcluding" : "6.08.01.350",
            "matchCriteriaId" : "AE6E0235-908B-4CA0-8F07-6C0177F5BC93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-045-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-045-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-22T21:15:11.330",
      "lastModified" : "2024-11-21T07:45:44.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php/eye_mag_functions.php in OpenEMR < 7.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the REQUEST_URI."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.0",
            "matchCriteriaId" : "5398C0C8-ED2E-4F1C-96CD-F59E3097BD9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.open-emr.org/wiki/index.php/OpenEMR_Patches#7.0.0_Patch_.2811.2F30.2F22.29",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.open-emr.org/wiki/index.php/OpenEMR_Patches#7.0.0_Patch_.2811.2F30.2F22.29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-22T21:15:11.387",
      "lastModified" : "2024-11-21T07:45:44.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Local File Inclusion (LFI) vulnerability in interface/forms/LBF/new.php in OpenEMR < 7.0.0 allows remote authenticated users to execute code via the formname parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.0",
            "matchCriteriaId" : "5398C0C8-ED2E-4F1C-96CD-F59E3097BD9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.open-emr.org/wiki/index.php/OpenEMR_Patches#7.0.0_Patch_.2811.2F30.2F22.29",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.sonarsource.com/blog/openemr-remote-code-execution-in-your-healthcare-system/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.open-emr.org/wiki/index.php/OpenEMR_Patches#7.0.0_Patch_.2811.2F30.2F22.29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.sonarsource.com/blog/openemr-remote-code-execution-in-your-healthcare-system/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-22T21:15:11.443",
      "lastModified" : "2024-11-21T07:45:44.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.0",
            "matchCriteriaId" : "5398C0C8-ED2E-4F1C-96CD-F59E3097BD9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.open-emr.org/wiki/index.php/OpenEMR_Patches#7.0.0_Patch_.2811.2F30.2F22.29",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.sonarsource.com/blog/openemr-remote-code-execution-in-your-healthcare-system/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.open-emr.org/wiki/index.php/OpenEMR_Patches#7.0.0_Patch_.2811.2F30.2F22.29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://www.sonarsource.com/blog/openemr-remote-code-execution-in-your-healthcare-system/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-22T21:15:11.503",
      "lastModified" : "2025-03-18T15:15:45.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "typecho 1.1/17.10.30 was discovered to contain a remote code execution (RCE) vulnerability via install.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typecho:typecho:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "ABB61D0A-A767-43AD-85D3-42730B3B252F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/typecho/typecho/issues/1523",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/typecho/typecho/issues/1523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0884",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-02-22T23:15:17.453",
      "lastModified" : "2023-11-07T04:01:46.887",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-3759. Reason: This candidate is a reservation duplicate of CVE-2022-3759. Notes: All CVE users should reference CVE-2022-3759 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0885",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-02-22T23:15:17.527",
      "lastModified" : "2023-11-07T04:01:47.013",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-0518. Reason: This candidate is a reservation duplicate of CVE-2023-0518. Notes: All CVE users should reference CVE-2023-0518 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0886",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-02-22T23:15:17.600",
      "lastModified" : "2023-11-07T04:01:47.103",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-3411. Reason: This candidate is a reservation duplicate of CVE-2022-3411. Notes: All CVE users should reference CVE-2022-3411 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26302",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2023-02-22T23:15:17.677",
      "lastModified" : "2026-02-25T17:19:19.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@ubuntu.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@ubuntu.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-173"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-173"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:executablebooks:markdown-it-py:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.0",
            "matchCriteriaId" : "5E45476E-D78B-486D-9B62-30E7573AAA6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/executablebooks/markdown-it-py/commit/53ca3e9c2b9e9b295f6abf7f4ad2730a9b70f68c",
        "source" : "security@ubuntu.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/executablebooks/markdown-it-py/commit/53ca3e9c2b9e9b295f6abf7f4ad2730a9b70f68c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26303",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2023-02-23T00:15:11.390",
      "lastModified" : "2026-02-25T17:19:19.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@ubuntu.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@ubuntu.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-173"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-173"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:executablebooks:markdown-it-py:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.0",
            "matchCriteriaId" : "5E45476E-D78B-486D-9B62-30E7573AAA6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/executablebooks/markdown-it-py/commit/ae03c6107dfa18e648f6fdd1280f5b89092d5d49",
        "source" : "security@ubuntu.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/executablebooks/markdown-it-py/commit/ae03c6107dfa18e648f6fdd1280f5b89092d5d49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-23T06:15:10.340",
      "lastModified" : "2024-11-21T07:51:32.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ThingsBoard 3.4.1 could allow a remote attacker to gain elevated privileges because hard-coded service credentials (usable for privilege escalation) are stored in an insecure format. (To read this stored data, the attacker needs access to the application server or its source code.)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thingsboard:thingsboard:3.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2506E1-4D37-4556-8C9E-AE588E8BC72D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/238544",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://thingsboard.io/docs/reference/releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/238544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://thingsboard.io/docs/reference/releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0939",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-02-23T08:15:17.100",
      "lastModified" : "2024-11-21T07:38:08.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NTN Information Technologies Online Services Software allows SQL Injection.This issue affects Online Services Software: before 1.17.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_services_project:online_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.17",
            "matchCriteriaId" : "8683B937-5FE8-4AEF-8CA5-F873E36C4A22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0103",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25621",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-02-23T09:15:10.023",
      "lastModified" : "2025-03-18T15:15:45.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege Escalation vulnerability in Apache Software Foundation Apache Sling.\nAny content author is able to create i18n dictionaries in the repository in a location the author has write access to. As these translations are used across the whole product, it allows an author to change any text or dialog in the product. For example an attacker might fool someone by changing the text on a delete button to \"Info\".\nThis issue affects the i18n module of Apache Sling up to version 2.5.18. Version 2.6.2 and higher limit by default i18m dictionaries to certain paths in the repository (/libs and /apps).\n\nUsers of the module are advised to update to version 2.6.2 or higher, check the configuration for resource loading and then adjust the access permissions for the configured path accordingly.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:sling_i18n:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2",
            "matchCriteriaId" : "FA3464CB-F923-4B49-BBE4-EA63E82E5B3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sling.apache.org/news.html",
        "source" : "security@apache.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://sling.apache.org/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0980",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-23T12:15:09.987",
      "lastModified" : "2024-11-21T07:38:13.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/registrations/update_status.php of the component Status Update Handler. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-221675."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoga_class_registration_system_project:yoga_class_registration_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC6CA18-C062-4016-BFD9-45A66C7AEEA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221675",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221675",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0981",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-23T12:15:10.087",
      "lastModified" : "2024-11-21T07:38:13.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. Affected is an unknown function of the component Delete User. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-221676."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoga_class_registration_system_project:yoga_class_registration_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC6CA18-C062-4016-BFD9-45A66C7AEEA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221676",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221676",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0982",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-23T12:15:10.167",
      "lastModified" : "2024-11-21T07:38:13.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Add Class Entry. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The identifier VDB-221677 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoga_class_registration_system_project:yoga_class_registration_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC6CA18-C062-4016-BFD9-45A66C7AEEA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221677",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221677",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0815",
      "sourceIdentifier" : "security@opennms.com",
      "published" : "2023-02-23T15:15:10.897",
      "lastModified" : "2024-11-21T07:37:53.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Potential Insertion of Sensitive Information into Jetty Log Files in multiple versions of OpenNMS Meridian and Horizon could allow disclosure of usernames and passwords if the logging level is set to debug. Users\nshould upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and\nHorizon installation instructions state that they are intended for installation\nwithin an organization's private networks and should not be directly accessible\nfrom the Internet.\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@opennms.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opennms.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:horizon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "31.0.4",
            "matchCriteriaId" : "9DC4EEF4-1204-4051-8E8E-7D3E69911D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "4FCCB664-CCB6-4D87-A2C4-9C216BAC38DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.opennms.com/meridian/2022/releasenotes/changelog.html#releasenotes-changelog-Meridian-2022.1.13",
        "source" : "security@opennms.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenNMS/opennms/pull/5741/files",
        "source" : "security@opennms.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.opennms.com/meridian/2022/releasenotes/changelog.html#releasenotes-changelog-Meridian-2022.1.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenNMS/opennms/pull/5741/files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0867",
      "sourceIdentifier" : "security@opennms.com",
      "published" : "2023-02-23T15:15:11.000",
      "lastModified" : "2024-11-21T07:38:00.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stored and reflected cross-site scripting vulnerabilities in webapp jsp pages in multiple versions of OpenNMS Meridian and Horizon could allow an attacker access to confidential session information. Users\nshould upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and\nHorizon installation instructions state that they are intended for installation\nwithin an organization's private networks and should not be directly accessible\nfrom the Internet.\n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@opennms.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opennms.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:horizon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "31.0.4",
            "matchCriteriaId" : "9DC4EEF4-1204-4051-8E8E-7D3E69911D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "4FCCB664-CCB6-4D87-A2C4-9C216BAC38DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.opennms.com/meridian/2022/releasenotes/changelog.html#releasenotes-changelog-Meridian-2022.1.13",
        "source" : "security@opennms.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenNMS/opennms/pull/5765",
        "source" : "security@opennms.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://docs.opennms.com/meridian/2022/releasenotes/changelog.html#releasenotes-changelog-Meridian-2022.1.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenNMS/opennms/pull/5765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0868",
      "sourceIdentifier" : "security@opennms.com",
      "published" : "2023-02-23T15:15:11.090",
      "lastModified" : "2024-11-21T07:38:00.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected cross-site scripting in graph results in multiple versions of OpenNMS Meridian and Horizon could allow an attacker access to steal session cookies. Users\nshould upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and\nHorizon installation instructions state that they are intended for installation\nwithin an organization's private networks and should not be directly accessible\nfrom the Internet.\n\n\n\n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@opennms.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opennms.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:horizon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "31.0.4",
            "matchCriteriaId" : "9DC4EEF4-1204-4051-8E8E-7D3E69911D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "4FCCB664-CCB6-4D87-A2C4-9C216BAC38DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.opennms.com/meridian/2022/releasenotes/changelog.html#releasenotes-changelog-Meridian-2022.1.13",
        "source" : "security@opennms.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenNMS/opennms/pull/5740",
        "source" : "security@opennms.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.opennms.com/meridian/2022/releasenotes/changelog.html#releasenotes-changelog-Meridian-2022.1.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenNMS/opennms/pull/5740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0869",
      "sourceIdentifier" : "security@opennms.com",
      "published" : "2023-02-23T15:15:11.190",
      "lastModified" : "2024-11-21T07:38:00.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting in outage/list.htm in multiple versions of OpenNMS Meridian and Horizon allows an attacker access to confidential session information. The solution is to upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4 or newer. \n\n\n\n\n\n\n\n\n\n\n\nMeridian\nand Horizon installation instructions state that they are intended for\ninstallation within an organization's private networks and should not be\ndirectly accessible from the Internet.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@opennms.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opennms.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:horizon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "31.0.4",
            "matchCriteriaId" : "9DC4EEF4-1204-4051-8E8E-7D3E69911D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "4FCCB664-CCB6-4D87-A2C4-9C216BAC38DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.opennms.com/meridian/2023/releasenotes/changelog.html#releasenotes-changelog-Meridian-2023.1.0",
        "source" : "security@opennms.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenNMS/opennms/pull/5734",
        "source" : "security@opennms.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://docs.opennms.com/meridian/2023/releasenotes/changelog.html#releasenotes-changelog-Meridian-2023.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenNMS/opennms/pull/5734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23659",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-02-23T15:15:11.290",
      "lastModified" : "2024-11-21T07:46:37.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in MainWP Matomo Extension <= 4.0.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mainwp:motomo:*:*:*:*:*:motomo:*:*",
            "versionEndExcluding" : "4.0.5",
            "matchCriteriaId" : "7E9599A4-81AD-4194-AAE9-80FE169BA6F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/mainwp-piwik-extension/wordpress-mainwp-matomo-extension-plugin-4-0-4-csrf-leading-to-plugin-settings-change-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/mainwp-piwik-extension/wordpress-mainwp-matomo-extension-plugin-4-0-4-csrf-leading-to-plugin-settings-change-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24384",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-02-23T15:15:11.383",
      "lastModified" : "2024-11-21T07:47:45.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Organization chart <= 1.4.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdevart:organization_chart:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.4.4",
            "matchCriteriaId" : "5A14ABC1-3A14-49E5-8C83-5FA49FA2C997"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/organization-chart/wordpress-wpdevart-organization-chart-plugin-1-4-4-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/organization-chart/wordpress-wpdevart-organization-chart-plugin-1-4-4-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0986",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-23T16:15:11.317",
      "lastModified" : "2024-11-21T07:38:14.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. This affects an unknown part of the file admin/?page=user/manage_user of the component Edit User. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-221679."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sales_tracker_management_system_project:sales_tracker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF52C94E-14A2-48E2-930E-56E6375C4846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221679",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221679",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0987",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-23T16:15:11.427",
      "lastModified" : "2024-11-21T07:38:14.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221680."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1MurasaKi/PizzeXSS_Report/blob/main/Online%20Pizza%20Ordering%20System/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221680",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221680",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/1MurasaKi/PizzeXSS_Report/blob/main/Online%20Pizza%20Ordering%20System/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0988",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-23T16:15:11.530",
      "lastModified" : "2024-11-21T07:38:14.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=save_user. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221681 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1MurasaKi/PizzaCSRF_report/tree/main/vender/Online%20Pizza%20Ordering%20System",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221681",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221681",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/1MurasaKi/PizzaCSRF_report/tree/main/vender/Online%20Pizza%20Ordering%20System",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-23T16:15:11.630",
      "lastModified" : "2025-03-18T15:15:45.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:unifi_dream_machine_pro_firmware:7.2.95:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6CEC7A-AF22-4D1E-8EFC-735F3E2C4F01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:unifi_dream_machine_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B493983E-8632-4492-9B0A-E8E11E0E0BB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://attack.mitre.org/techniques/T1090/004/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/f1veT/BUG/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://attack.mitre.org/techniques/T1090/004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/f1veT/BUG/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24415",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-02-23T16:15:11.700",
      "lastModified" : "2024-11-21T07:47:49.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.2.8 versions."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad Cross-Site Request Forgery (CSRF) en versiones 4.2.8 y anteriores del plugin QuantumCloud ChatBot ?."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quantumcloud:chatbot:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.2.9",
            "matchCriteriaId" : "A01270F8-812D-4237-81D7-AB083C3B8A3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/chatbot/wordpress-chatbot-plugin-4-2-8-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/chatbot/wordpress-chatbot-plugin-4-2-8-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22476",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-23T19:15:13.110",
      "lastModified" : "2024-11-21T07:44:52.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions prior to 2.25.6, due to insufficient access-level checks, any logged-in user allowed to perform Group Actions can access to the _Summary_ field of private Issues (i.e. having Private view status, or belonging to a private Project) via a crafted `bug_arr[]` parameter in *bug_actiongroup_ext.php*. This issue is fixed in version 2.25.6. There are no workarounds.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mantisbt:mantisbt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.25.6",
            "matchCriteriaId" : "B9E044F9-FC0A-4E13-A9AF-98DAEB87C445"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mantisbt/mantisbt/security/advisories/GHSA-hf4x-6h87-hm79",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mantisbt.org/bugs/view.php?id=31086",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/mantisbt/mantisbt/security/advisories/GHSA-hf4x-6h87-hm79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mantisbt.org/bugs/view.php?id=31086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0044",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-23T20:15:12.823",
      "lastModified" : "2024-11-21T07:36:27.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.13.7",
            "matchCriteriaId" : "9CDB1115-A9F5-46F0-AB03-BBEFD72FA293"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:build_of_quarkus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE29B9D6-63DC-4779-ACE8-4E51E6A0AF37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-0044",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2158081",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-0044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2158081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0597",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-23T20:15:12.927",
      "lastModified" : "2025-03-12T20:15:13.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location of exception stack(s) or other important data. A local user could use this flaw to get access to some important data with expected location in memory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF501633-2F44-4913-A8EE-B021929F49F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/07/28/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://git.kernel.org/linus/97e3d26b5e5f371b3ee223d94dd123e6c442ba80",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/07/28/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/linus/97e3d26b5e5f371b3ee223d94dd123e6c442ba80",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/07/28/1",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20011",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-02-23T20:15:13.090",
      "lastModified" : "2024-11-21T07:40:20.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller, formerly Cisco Cloud APIC, could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. If the affected user has administrative privileges, these actions could include modifying the system configuration and creating new privileged accounts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2\\(6\\)",
            "versionEndExcluding" : "5.2\\(7g\\)",
            "matchCriteriaId" : "DCD458F3-D3E4-4F9B-82FE-B58AD6DF1EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0\\(2h\\)",
            "matchCriteriaId" : "20617C7E-820F-460A-9EC1-A240C7163AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:cloud_network_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2\\(6\\)",
            "versionEndExcluding" : "25.0\\(5\\)",
            "matchCriteriaId" : "6FD04E51-95F2-4E55-A52B-D8B35C7BDA26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-csrfv-DMx6KSwV",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-csrfv-DMx6KSwV",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20012",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-02-23T20:15:13.247",
      "lastModified" : "2024-11-21T07:40:20.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI console login authentication of Cisco Nexus 9300-FX3 Series Fabric Extender (FEX) when used in UCS Fabric Interconnect deployments could allow an unauthenticated attacker with physical access to bypass authentication. This vulnerability is due to the improper implementation of the password validation function. An attacker could exploit this vulnerability by logging in to the console port on an affected device. A successful exploit could allow the attacker to bypass authentication and execute a limited set of commands local to the FEX, which could cause a device reboot and denial of service (DoS) condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nexus_93180yc-fx3s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F379A314-72EB-462A-BEBF-57DC6689A558"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE49B45-F2E9-491D-9C29-1B46E9CE14E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nexus_93180yc-fx3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAAD9E8-EC29-47F8-AE0C-86F701BFF64D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D30D52-837F-4FDA-B8E5-A9066E9C6D2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2\\(2d\\)",
            "matchCriteriaId" : "409A003C-6F89-45D6-9951-4CE56E9F4BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6536_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834E1736-9E8D-476A-ADA9-EB81BEB8DC6C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6536:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C36A364-DBC0-44DA-9DB0-6CC8E9D074BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2\\(2d\\)",
            "matchCriteriaId" : "409A003C-6F89-45D6-9951-4CE56E9F4BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_64108_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF884E9-68AA-44F7-A551-F7D7DF2378DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_64108:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC04D48B-8B2F-45E1-A445-A87E92E790B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2\\(2d\\)",
            "matchCriteriaId" : "409A003C-6F89-45D6-9951-4CE56E9F4BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6454_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085034AF-4825-4E06-BCBD-6F0D80959A26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6454:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD096B7-6F8E-4E48-9EC4-9A10AA7D9AA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-elyfex-dos-gfvcByx",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-elyfex-dos-gfvcByx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20015",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-02-23T20:15:13.333",
      "lastModified" : "2024-11-21T07:40:20.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric Interconnects could allow an authenticated, local attacker to inject unauthorized commands. This vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to execute unauthorized commands within the CLI. An attacker with Administrator privileges could also execute arbitrary commands on the underlying operating system of Cisco UCS 6400 and 6500 Series Fabric Interconnects with root-level privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0\\(4o\\)",
            "matchCriteriaId" : "694A529B-AC10-4DEE-9858-E068DA02B602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1\\(3k\\)",
            "matchCriteriaId" : "DCC75B2F-216C-4653-9DFB-D387A1BEABDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2\\(2d\\)",
            "matchCriteriaId" : "409A003C-6F89-45D6-9951-4CE56E9F4BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6536_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834E1736-9E8D-476A-ADA9-EB81BEB8DC6C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6536:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C36A364-DBC0-44DA-9DB0-6CC8E9D074BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0\\(4o\\)",
            "matchCriteriaId" : "694A529B-AC10-4DEE-9858-E068DA02B602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1\\(3k\\)",
            "matchCriteriaId" : "DCC75B2F-216C-4653-9DFB-D387A1BEABDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2\\(2d\\)",
            "matchCriteriaId" : "409A003C-6F89-45D6-9951-4CE56E9F4BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_64108_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF884E9-68AA-44F7-A551-F7D7DF2378DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_64108:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC04D48B-8B2F-45E1-A445-A87E92E790B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0\\(4o\\)",
            "matchCriteriaId" : "694A529B-AC10-4DEE-9858-E068DA02B602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1\\(3k\\)",
            "matchCriteriaId" : "DCC75B2F-216C-4653-9DFB-D387A1BEABDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2\\(2d\\)",
            "matchCriteriaId" : "409A003C-6F89-45D6-9951-4CE56E9F4BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6454_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085034AF-4825-4E06-BCBD-6F0D80959A26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6454:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD096B7-6F8E-4E48-9EC4-9A10AA7D9AA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0\\(4o\\)",
            "matchCriteriaId" : "694A529B-AC10-4DEE-9858-E068DA02B602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1\\(3k\\)",
            "matchCriteriaId" : "DCC75B2F-216C-4653-9DFB-D387A1BEABDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2\\(2d\\)",
            "matchCriteriaId" : "409A003C-6F89-45D6-9951-4CE56E9F4BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD99394-5B1B-49FB-9085-3D92E4DBF1A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B96E5C-CC27-4020-93CE-413B95DCABB0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0\\(4o\\)",
            "matchCriteriaId" : "694A529B-AC10-4DEE-9858-E068DA02B602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1\\(3k\\)",
            "matchCriteriaId" : "DCC75B2F-216C-4653-9DFB-D387A1BEABDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2\\(2d\\)",
            "matchCriteriaId" : "409A003C-6F89-45D6-9951-4CE56E9F4BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6248up_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE37430-9711-443E-BF69-CAAEDD2A0E45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6248up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49112D3F-DFAD-4E71-992B-9E0640FA388C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0\\(4o\\)",
            "matchCriteriaId" : "694A529B-AC10-4DEE-9858-E068DA02B602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1\\(3k\\)",
            "matchCriteriaId" : "DCC75B2F-216C-4653-9DFB-D387A1BEABDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2\\(2d\\)",
            "matchCriteriaId" : "409A003C-6F89-45D6-9951-4CE56E9F4BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6296up_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E325ADE-5098-4C1B-82FB-CB04DDB68A2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6296up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A1D8F2-A4A6-4BAC-8326-9F9DE9572FA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0\\(4o\\)",
            "matchCriteriaId" : "694A529B-AC10-4DEE-9858-E068DA02B602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1\\(3k\\)",
            "matchCriteriaId" : "DCC75B2F-216C-4653-9DFB-D387A1BEABDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2\\(2d\\)",
            "matchCriteriaId" : "409A003C-6F89-45D6-9951-4CE56E9F4BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4BF0-A6E4-4241-8E30-48CAE65203F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6BCF41B-A617-4563-8D14-E906411354FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0\\(4o\\)",
            "matchCriteriaId" : "694A529B-AC10-4DEE-9858-E068DA02B602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1\\(3k\\)",
            "matchCriteriaId" : "DCC75B2F-216C-4653-9DFB-D387A1BEABDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2\\(2d\\)",
            "matchCriteriaId" : "409A003C-6F89-45D6-9951-4CE56E9F4BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6324_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D87F40-279D-46BD-9A1E-B980E9DDD24D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6324:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B82093C6-B36D-4E4E-AD7F-8C107646B8D9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0\\(4o\\)",
            "matchCriteriaId" : "694A529B-AC10-4DEE-9858-E068DA02B602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1\\(3k\\)",
            "matchCriteriaId" : "DCC75B2F-216C-4653-9DFB-D387A1BEABDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2\\(2d\\)",
            "matchCriteriaId" : "409A003C-6F89-45D6-9951-4CE56E9F4BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6332_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "148B3732-6F6C-4865-8FCC-A215883BEEC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6332:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E406DDCE-6753-43E9-B6F0-7A038DE84E41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0\\(4o\\)",
            "matchCriteriaId" : "694A529B-AC10-4DEE-9858-E068DA02B602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1\\(3k\\)",
            "matchCriteriaId" : "DCC75B2F-216C-4653-9DFB-D387A1BEABDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2\\(2d\\)",
            "matchCriteriaId" : "409A003C-6F89-45D6-9951-4CE56E9F4BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6332-16up_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027A27D8-DD06-420A-BCDC-553641F5CC83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6332-16up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054D8EB2-97A3-4725-9DFF-27A4D231D90A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:firepower_extensible_operating_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB194AF-51E8-4379-B416-34049BF03754"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9552E6-0B9B-4B32-BE79-90D4E3887A7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CBC7F5-7767-43B6-9384-BE143FCDBD7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4112:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957D64EB-D60E-4775-B9A8-B21CA48ED3B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4115:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A694AD51-9008-4AE6-8240-98B17AB527EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38AE6DC0-2B03-4D36-9856-42530312CC46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71DCEF22-ED20-4330-8502-EC2DD4C9838F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB2822B-B752-4CD9-A178-934957E306B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4145:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F4868A-6D62-479C-9C19-F9AABDBB6B24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65378F3A-777C-4AE2-87FB-1E7402F9EA1B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18048A84-BA0F-48EF-AFFB-635FF7F70C66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-36:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317DF3DD-C7CD-4CA2-804F-A738E048BEB4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13CF29B-9308-452B-B7E0-9E818B5A6C1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-44:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB527C2-855E-4BB9-BCA7-94BE86100D44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-44_x_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82C1B05-990D-49D2-B80A-C3EDD4082840"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421D91C3-8AB3-45E1-9E55-13ED1A4A623E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-56:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D741945-8B0A-408D-A5FE-D5B38DC6D46A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-56_x_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308CA67-E949-4338-A890-22B3C4428D70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxfp-cmdinj-XXBZjtR",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxfp-cmdinj-XXBZjtR",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20016",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-02-23T20:15:13.407",
      "lastModified" : "2024-11-21T07:40:20.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to decrypt sensitive information stored in the full state and configuration backup files. This vulnerability is due to a weakness in the encryption method used for the backup function. An attacker could exploit this vulnerability by leveraging a static key used for the backup configuration feature. A successful exploit could allow the attacker to decrypt sensitive information that is stored in full state and configuration backup files, such as local user credentials, authentication server passwords, Simple Network Management Protocol (SNMP) community names, and other credentials."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2\\(3c\\)",
            "matchCriteriaId" : "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6536_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834E1736-9E8D-476A-ADA9-EB81BEB8DC6C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6536:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C36A364-DBC0-44DA-9DB0-6CC8E9D074BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2\\(3c\\)",
            "matchCriteriaId" : "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_64108_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF884E9-68AA-44F7-A551-F7D7DF2378DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_64108:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC04D48B-8B2F-45E1-A445-A87E92E790B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2\\(3c\\)",
            "matchCriteriaId" : "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6454_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "085034AF-4825-4E06-BCBD-6F0D80959A26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6454:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD096B7-6F8E-4E48-9EC4-9A10AA7D9AA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2\\(3c\\)",
            "matchCriteriaId" : "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD99394-5B1B-49FB-9085-3D92E4DBF1A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B96E5C-CC27-4020-93CE-413B95DCABB0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2\\(3c\\)",
            "matchCriteriaId" : "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6248up_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE37430-9711-443E-BF69-CAAEDD2A0E45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6248up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49112D3F-DFAD-4E71-992B-9E0640FA388C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2\\(3c\\)",
            "matchCriteriaId" : "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6296up_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E325ADE-5098-4C1B-82FB-CB04DDB68A2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6296up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A1D8F2-A4A6-4BAC-8326-9F9DE9572FA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2\\(3c\\)",
            "matchCriteriaId" : "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192B4BF0-A6E4-4241-8E30-48CAE65203F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6BCF41B-A617-4563-8D14-E906411354FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2\\(3c\\)",
            "matchCriteriaId" : "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6324_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D87F40-279D-46BD-9A1E-B980E9DDD24D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6324:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B82093C6-B36D-4E4E-AD7F-8C107646B8D9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2\\(3c\\)",
            "matchCriteriaId" : "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6332_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "148B3732-6F6C-4865-8FCC-A215883BEEC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6332:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E406DDCE-6753-43E9-B6F0-7A038DE84E41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_central_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2\\(3c\\)",
            "matchCriteriaId" : "BD20288C-BDEE-45D4-A0AF-A68ABB3A8E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_6332-16up_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027A27D8-DD06-420A-BCDC-553641F5CC83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6332-16up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054D8EB2-97A3-4725-9DFF-27A4D231D90A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:fxos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1",
            "matchCriteriaId" : "FC22C69D-7B86-4ED8-87AA-D259D026CA6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9552E6-0B9B-4B32-BE79-90D4E3887A7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CBC7F5-7767-43B6-9384-BE143FCDBD7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4112:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957D64EB-D60E-4775-B9A8-B21CA48ED3B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4115:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A694AD51-9008-4AE6-8240-98B17AB527EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38AE6DC0-2B03-4D36-9856-42530312CC46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71DCEF22-ED20-4330-8502-EC2DD4C9838F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB2822B-B752-4CD9-A178-934957E306B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4145:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F4868A-6D62-479C-9C19-F9AABDBB6B24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65378F3A-777C-4AE2-87FB-1E7402F9EA1B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18048A84-BA0F-48EF-AFFB-635FF7F70C66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-36:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317DF3DD-C7CD-4CA2-804F-A738E048BEB4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13CF29B-9308-452B-B7E0-9E818B5A6C1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-44:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB527C2-855E-4BB9-BCA7-94BE86100D44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-44_x_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E82C1B05-990D-49D2-B80A-C3EDD4082840"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421D91C3-8AB3-45E1-9E55-13ED1A4A623E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-56:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D741945-8B0A-408D-A5FE-D5B38DC6D46A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300_sm-56_x_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9308CA67-E949-4338-A890-22B3C4428D70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsm-bkpsky-H8FCQgsA",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsm-bkpsky-H8FCQgsA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20050",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-02-23T20:15:13.483",
      "lastModified" : "2024-11-21T07:40:26.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the currently logged-in user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA35D4AA-24B3-428E-84ED-804EF941E9A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD00AB9-F2DD-4D07-8DFF-E7B34824D66A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C0D908-D7BA-48C3-9963-14A3A32A2662"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9132t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56426D35-FCFD-406E-9144-2E66C8C86EFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9134:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB00911-C0B0-4A4E-A0B9-413EC9D9C25A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F762E87A-BF80-4D33-ADDA-84369E068005"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9148:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E6B85A-3988-4EC5-B788-9664772CE64E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9148s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25FA4A8-408B-4E94-B7D9-7DC54B61322F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9148t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831B6D0F-A975-4CBA-B5BB-0AC4AD718FE8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25B92ED-37C0-4653-9C5E-B4C13C46464C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9216:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A72BDC4-6640-45CC-A128-0CDEE38D3ADC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9216a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90094569-AA2C-4D35-807F-9551FACE255F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9216i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306AFBC9-A236-4D03-A1EB-CE7E838D8415"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9222i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12DB1A25-A7C9-412F-88BC-E89588896395"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9250i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CD5738-029B-43AA-9342-63719DC16138"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9396s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF9DC03-5370-46FD-9CA8-AC4DF5E922FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9396t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E81D2CC1-376A-4D87-88EA-6E1831741EC6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2374E02D-46FE-477F-A74D-49E72149E6EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9506:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3925D2CF-9D7C-4498-8AF2-45E15D5D009F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9509:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C677D356-86C9-4491-A6CA-5E6306B2BB70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9513:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A3C579-7AAD-41A4-947F-CCB9B09402A5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C44335D8-8A78-486C-A325-9691FA4C3271"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9706:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5182CB50-4D32-4835-B1A8-817D989F919F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B3B617-7554-4C36-9B41-19AA3BD2F6E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9718:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B88879A9-A7F5-41E0-8A38-0E09E3FD27F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_1000_virtual_edge:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "5481E367-6692-48A3-8475-5299C5EE0822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_1000v:-:*:*:*:*:hyper-v:*:*",
            "matchCriteriaId" : "69E1B4D2-4200-4C05-9E64-57A18823AF38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_1000v:-:*:*:*:*:microsoft_hyper-v:*:*",
            "matchCriteriaId" : "B7063CEF-58CC-449E-BFDA-39371BA088AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC8699E-81C0-4374-B827-71B3916B910D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5519EA9-1236-4F51-9974-E3FC1B26B5D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0A3B06-8B25-4CD3-AFA9-5F928B1042F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1766443C-1C5A-486E-A36F-D3045F364D78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4D4403-F93B-4CC8-B75F-7A5B03FEDD85"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870F4379-68F6-4B34-B99B-107DFE0DBD63"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_56128p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB6E612-4246-4408-B3F6-B31E771F5ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5624q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B129B2-2B31-4DE0-9F83-CC6E0C8729A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5648q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBD3CD0-B542-4B23-9C9D-061643BE44E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22A2647-A4C0-4681-BBC5-D95ADBAA0457"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up-16g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367C2A49-4C4D-471B-9B34-AFAFA5AE9503"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5696q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BB1A3A-668C-4B0D-8AC2-6B4758B3420B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A58223F-3B15-420B-A6D4-841451CF0380"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9662D6B-AF0F-45C8-B7CD-AE7C76593FDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6001p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EAD169-9036-496E-B740-45D79546F6D6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6001t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E01F0DE-EA8A-451F-BADF-1A7A48B0C633"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F557E38-09F6-42C6-BABA-3C3168B38BBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6004x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F182AD1-6E51-456A-A8F7-8F3B92DBE4D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2\\(9\\)",
            "matchCriteriaId" : "5793DAEA-2828-4312-BE9E-187F76E89DDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12180BEB-7F21-4FA7-ABD2-E9A8EA7340F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36145717-6348-466D-87B4-B1A19F17BA55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7009:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4831C5F4-AF09-4951-B7AC-9DAF1C7045B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6BBDCF9-562C-44BA-B709-F91346F6F99F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7018:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "276BD181-125C-48EC-984C-29BAE20C21F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7A4B4B-3BB1-4A4D-911E-C4EEF01BBC45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7702:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596B885-5312-489B-BBDB-A5374E525DE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7706:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EC10DA-FE01-4BA3-B49F-B164F697D4BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1655CC-9BD5-4BD5-B113-776E4335D556"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7718:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA6F9ED-50A1-4D61-BC83-438585646856"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3\\(10\\)",
            "matchCriteriaId" : "D66D0919-8EF6-4D1D-8648-C0A72634F10D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528ED62B-D739-4E06-AC64-B506FD73BBAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3016q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D402AB0-BCFB-4F42-8C50-5DC930AEEC8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2A6C31-438A-4CF5-A3F3-364B1672EB7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C10D85-88AC-4A79-8866-BED88A0F8DF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064-32t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09AC2BAD-F536-48D0-A2F0-D4E290519EB6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65CB7F6D-A82B-4A31-BFAC-FF4A4B8DF9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC4FFCC-E886-49BC-9737-5B5BA2AAB14B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4E8EE4-031D-47D3-A12E-EE5F792172EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CDD8C3-67D5-4E9F-9D48-A77B55DB0AB1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41C14CC9-C244-4B86-AEA6-C50BAD5DA9A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3100-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FF2EC4-0C09-4C00-9956-A2A4A894F63D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3100-z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14D4B4E-120E-4607-A4F1-447C7BF3052E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3100v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15702ACB-29F3-412D-8805-E107E0729E35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108pc-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E930332-CDDD-48D5-93BC-C22D693BBFA2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108pv-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B34855-D8D2-4114-80D2-A4D159C62458"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108tc-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF4B8FE-E134-4491-B5C2-C1CFEB64731B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31128pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4226DA0-9371-401C-8247-E6E636A116C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132c-z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7664666F-BCE4-4799-AEEA-3A73E6AD33F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DBBFE9-835C-4411-8492-6006E74BAC65"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3293438-3D18-45A2-B093-2C3F65783336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97C29EE-9426-4BBE-8D84-AB5FF748703D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-x\\/3132q-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E142C18F-9FB5-4D96-866A-141D7D16CAF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F43B770-D96C-44EA-BC12-9F39FC4317B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3164q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA782EB3-E8E6-4DCF-B39C-B3CBD46E4384"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7817F4E6-B2DA-4F06-95A4-AF329F594C02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED628B5-97A8-4B26-AA40-BEC854982157"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172pq-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB9DD73-E31D-4921-A6D6-E14E04703588"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172pq\\/pq-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFC116A-627F-4E05-B631-651D161217C8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172tq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4532F513-0543-4960-9877-01F23CA7BA1B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172tq-32t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B43502B-FD53-465A-B60F-6A359C6ACD99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172tq-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3229124-B097-4AAC-8ACD-2F9C89DCC3AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A532C0-B0E3-484A-B356-88970E7D0248"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3232c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652A2849-668D-4156-88FB-C19844A59F33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3232c_:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D008CA1C-6F5A-40EA-BB12-A9D84D5AF700"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3264c-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FBE87B-8A4F-43A8-98A3-4A7D9C630937"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3264q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACD09AC-8B28-4ACB-967B-AB3D450BC137"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43913A0E-50D5-47DD-94D8-DD3391633619"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3408-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D397349-CCC6-479B-9273-FB1FFF4F34F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_34180yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7286A7-780F-4A45-940A-4AD5C9D0F201"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_34200yc-sm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA52D5C1-13D8-4D23-B022-954CCEF491F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3432d-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7AF8D7-431B-43CE-840F-CC0817D159C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3464c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC204C8-1A5A-4E85-824E-DC9B8F6A802D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E1073F-D374-4311-8F12-AD8C72FAA293"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF5AF71-15DF-4151-A1CF-E138A7103FC8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F80A72-AD54-4699-B8AE-82715F0B58E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524-x\\/xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E505C0B1-2119-4C6A-BF96-C282C633D169"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9354B6A2-D7D6-442E-BF4C-FE8A336D9E94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088C0323-683A-44F5-8D42-FF6EC85D080E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CB4002-7636-4382-B33E-FBA060A13C34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548-x\\/xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915EF8F6-6039-4DD0-B875-30D911752B74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CEBF73-3EE0-459A-86C5-F8F6243FE27C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97217080-455C-48E4-8CE1-6D5B9485864F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_36180yc-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D2C4C3-65CE-4612-A027-AF70CEFC3233"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3636c-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57572E4A-78D5-4D1A-938B-F05F01759612"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBEBA5B-5589-417B-BF3B-976083E9FE54"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD9C1F1-8582-4F67-A77D-97CBFECB88B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2\\(4\\)",
            "matchCriteriaId" : "0A1B63BF-C405-4C35-8573-5A1C31CAC4A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528ED62B-D739-4E06-AC64-B506FD73BBAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3016q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D402AB0-BCFB-4F42-8C50-5DC930AEEC8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2A6C31-438A-4CF5-A3F3-364B1672EB7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C10D85-88AC-4A79-8866-BED88A0F8DF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064-32t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09AC2BAD-F536-48D0-A2F0-D4E290519EB6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65CB7F6D-A82B-4A31-BFAC-FF4A4B8DF9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC4FFCC-E886-49BC-9737-5B5BA2AAB14B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4E8EE4-031D-47D3-A12E-EE5F792172EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CDD8C3-67D5-4E9F-9D48-A77B55DB0AB1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41C14CC9-C244-4B86-AEA6-C50BAD5DA9A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3100-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FF2EC4-0C09-4C00-9956-A2A4A894F63D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3100-z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14D4B4E-120E-4607-A4F1-447C7BF3052E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3100v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15702ACB-29F3-412D-8805-E107E0729E35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108pc-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E930332-CDDD-48D5-93BC-C22D693BBFA2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108pv-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B34855-D8D2-4114-80D2-A4D159C62458"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108tc-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF4B8FE-E134-4491-B5C2-C1CFEB64731B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31128pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4226DA0-9371-401C-8247-E6E636A116C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132c-z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7664666F-BCE4-4799-AEEA-3A73E6AD33F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DBBFE9-835C-4411-8492-6006E74BAC65"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3293438-3D18-45A2-B093-2C3F65783336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97C29EE-9426-4BBE-8D84-AB5FF748703D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-x\\/3132q-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E142C18F-9FB5-4D96-866A-141D7D16CAF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F43B770-D96C-44EA-BC12-9F39FC4317B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3164q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA782EB3-E8E6-4DCF-B39C-B3CBD46E4384"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7817F4E6-B2DA-4F06-95A4-AF329F594C02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED628B5-97A8-4B26-AA40-BEC854982157"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172pq-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB9DD73-E31D-4921-A6D6-E14E04703588"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172pq\\/pq-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFC116A-627F-4E05-B631-651D161217C8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172tq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4532F513-0543-4960-9877-01F23CA7BA1B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172tq-32t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B43502B-FD53-465A-B60F-6A359C6ACD99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172tq-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3229124-B097-4AAC-8ACD-2F9C89DCC3AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A532C0-B0E3-484A-B356-88970E7D0248"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3232c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652A2849-668D-4156-88FB-C19844A59F33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3232c_:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D008CA1C-6F5A-40EA-BB12-A9D84D5AF700"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3264c-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FBE87B-8A4F-43A8-98A3-4A7D9C630937"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3264q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACD09AC-8B28-4ACB-967B-AB3D450BC137"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43913A0E-50D5-47DD-94D8-DD3391633619"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3408-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D397349-CCC6-479B-9273-FB1FFF4F34F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_34180yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7286A7-780F-4A45-940A-4AD5C9D0F201"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_34200yc-sm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA52D5C1-13D8-4D23-B022-954CCEF491F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3432d-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7AF8D7-431B-43CE-840F-CC0817D159C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3464c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC204C8-1A5A-4E85-824E-DC9B8F6A802D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E1073F-D374-4311-8F12-AD8C72FAA293"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF5AF71-15DF-4151-A1CF-E138A7103FC8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F80A72-AD54-4699-B8AE-82715F0B58E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524-x\\/xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E505C0B1-2119-4C6A-BF96-C282C633D169"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9354B6A2-D7D6-442E-BF4C-FE8A336D9E94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088C0323-683A-44F5-8D42-FF6EC85D080E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CB4002-7636-4382-B33E-FBA060A13C34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548-x\\/xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915EF8F6-6039-4DD0-B875-30D911752B74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CEBF73-3EE0-459A-86C5-F8F6243FE27C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97217080-455C-48E4-8CE1-6D5B9485864F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_36180yc-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D2C4C3-65CE-4612-A027-AF70CEFC3233"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3636c-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57572E4A-78D5-4D1A-938B-F05F01759612"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EBEBA5B-5589-417B-BF3B-976083E9FE54"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD9C1F1-8582-4F67-A77D-97CBFECB88B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cli-cmdinject-euQVK9u",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cli-cmdinject-euQVK9u",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20089",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-02-23T20:15:13.557",
      "lastModified" : "2024-11-21T07:40:31.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Link Layer Discovery Protocol (LLDP) feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, adjacent attacker to cause a memory leak, which could result in an unexpected reload of the device. This vulnerability is due to incorrect error checking when parsing ingress LLDP packets. An attacker could exploit this vulnerability by sending a steady stream of crafted LLDP packets to an affected device. A successful exploit could allow the attacker to cause a memory leak, which could result in a denial of service (DoS) condition when the device unexpectedly reloads. Note: This vulnerability cannot be exploited by transit traffic through the device. The crafted LLDP packet must be targeted to a directly connected interface, and the attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). In addition, the attack surface for this vulnerability can be reduced by disabling LLDP on interfaces where it is not required."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.2\\(1g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C90C63-E006-4101-A737-429B28A5ABD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.2\\(2e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0235897B-D881-4C22-AEC5-6B0D8552B47B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.2\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "77B4432C-D3C1-45DA-8E2B-1282A98D4D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.2\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE2846A6-62B3-4035-968C-AA73FFA1EA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.2\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6DC1C38-8134-4548-9685-03664699B273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.2\\(3e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C46E10DB-6CA8-460F-9C6D-48684BDCCEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.2\\(3f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D027C394-ED7D-4302-92B1-F9A2F60C8568"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.2\\(3g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3914D468-662E-4F82-910F-67800189462E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.2\\(4d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6502FEA6-A959-48F3-84E7-6E2180D23956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.2\\(4e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1336D0EA-F391-411D-B140-040E805DF3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.2\\(4f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "60BC734F-D9DB-42B9-82C4-4A23C2A3C14D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.2\\(5c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F5D422-54B8-47F2-96E6-A820E27658DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.2\\(5d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2BBBEDF-6869-4C99-A1D9-1AF53EFA82E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.2\\(5e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB9500B-84F9-4B35-95C6-26F57BE8145C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:16.0\\(1g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B68CD3E-700F-43D2-960C-C53A6EE241B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:16.0\\(1j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "743AED05-E2D7-4322-8814-C803F0BD6265"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD9C1F1-8582-4F67-A77D-97CBFECB88B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4283E433-7F8C-4410-B565-471415445811"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92300yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80AB6FB-32FD-43D7-A9F1-80FA47696210"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B2E4C1-2627-4B9D-8E92-4B483F647651"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92348gc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557ED31C-C26A-4FAE-8B14-D06B49F7F08B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11411BFD-3F4D-4309-AB35-A3629A360FB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E663DE91-C86D-48DC-B771-FA72A8DF7A7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90184B3-C82F-4CE5-B2AD-97D5E4690871"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E40F42-632A-47DF-BE33-DC25B826310B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB89849-6DA4-4C9D-BC3F-EE0E41FD1901"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47F6BF9-2ADB-41A4-8D7D-8BB00141BB23"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx3p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEF7F26-BB47-44BD-872E-130820557C23"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DE6F63-2C7D-415B-8C34-01EC05C062F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F423E45D-A6DD-4305-9C6A-EAB26293E53A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9316d-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102F91CD-DFB6-43D4-AE5B-DA157A696230"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180lc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E952A96A-0F48-4357-B7DD-1127D8827650"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70D81F1-8B12-4474-9060-B4934D8A3873"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5394DE31-3863-4CA9-B7B1-E5227183100D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349D69B-D8FA-4462-AA28-69DD18A652D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4BB834-2C00-4384-A78E-AF3BCDDC58AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D30D52-837F-4FDA-B8E5-A9066E9C6D2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE49B45-F2E9-491D-9C29-1B46E9CE14E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93216tc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CC5F78-E88B-4B82-9E3E-C73D3A49DE26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93240yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91231DC6-2773-4238-8C14-A346F213B5E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF88547-BAF4-47B0-9F60-80A30297FCEB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332d-gx2b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C3CE6D-BD54-48B1-A188-8E53DA001424"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113772B6-E9D2-4094-9468-3F4E1A87D07D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93360yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45A38D6-BED6-4FEF-AD87-A1E813695DE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FC2B1F-232E-4754-8076-CC82F3648730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CDD27C9-5EAF-4956-8AB7-740C84C9D4FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "785FD17C-F32E-4042-9DDE-A89B3AAE0334"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9348d-gx2a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DC1E93-561E-490C-AE0E-B02BAB9A7C8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9348gc-fxp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C7E3DB-8E1A-47AD-B1C5-61747DC0CFB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93600cd-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF467E2-4567-426E-8F48-39669E0F514C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63842B25-8C32-4988-BBBD-61E9CB09B4F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EA1FEF-B6B6-49FE-A0A4-5387F76303F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364d-gx2a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D6DB7F-C025-4971-9615-73393ED61078"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4364ADB9-8162-451D-806A-B98924E6B2CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53BCB42-ED61-4FCF-8068-CB467631C63C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E0371B-FDE2-473C-AA59-47E1269D050F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489D11EC-5A18-4F32-BC7C-AC1FCEC27222"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC5293E-F2B4-46DC-85DA-167EA323FCFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA022E77-6557-4A33-9A3A-D028E2DB669A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9408:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D5D5E2-B40B-475D-9EF3-8441016E37E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC2F709-AFBE-48EA-A3A2-DA1134534FB6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3284D16F-3275-4F8D-8AE4-D413DE19C4FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aci-lldp-dos-ySCNZOpX",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aci-lldp-dos-ySCNZOpX",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23914",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-23T20:15:13.637",
      "lastModified" : "2025-03-12T19:15:35.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.77.0",
            "versionEndExcluding" : "7.88.0",
            "matchCriteriaId" : "7E7C640C-EEC0-4272-926C-E1710D1CD965"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "52DE3DFE-350F-4E83-B425-1D7D47BEF6DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.12",
            "matchCriteriaId" : "5722E753-75DE-4944-A11B-556CB299B57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.6",
            "matchCriteriaId" : "DC0F9351-81A4-4FEA-B6B5-6E960A933D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/1813864",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230309-0006/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1813864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230309-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23915",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-23T20:15:13.703",
      "lastModified" : "2026-02-13T21:16:11.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.77.0",
            "versionEndExcluding" : "7.88.0",
            "matchCriteriaId" : "7E7C640C-EEC0-4272-926C-E1710D1CD965"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "52DE3DFE-350F-4E83-B425-1D7D47BEF6DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.12",
            "matchCriteriaId" : "5722E753-75DE-4944-A11B-556CB299B57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.6",
            "matchCriteriaId" : "DC0F9351-81A4-4FEA-B6B5-6E960A933D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/1826048",
        "source" : "support@hackerone.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230309-0006/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1826048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230309-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23916",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-23T20:15:13.777",
      "lastModified" : "2025-03-12T19:15:36.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.57.0",
            "versionEndExcluding" : "7.88.0",
            "matchCriteriaId" : "7B5CB60A-77A6-4D2A-AD88-7D4AFE9D3EDE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE996B1-6951-4F85-AA58-B99A379D2163"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.12",
            "matchCriteriaId" : "5722E753-75DE-4944-A11B-556CB299B57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.6",
            "matchCriteriaId" : "DC0F9351-81A4-4FEA-B6B5-6E960A933D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/1826048",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00035.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO/",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230309-0006/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5365",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1826048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230309-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23917",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-23T20:15:13.847",
      "lastModified" : "2025-03-12T18:15:24.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A prototype pollution vulnerability exists in Rocket.Chat server <5.2.0 that could allow an attacker to a RCE under the admin account. Any user can create their own server in your cloud and become an admin so this vulnerability could affect the cloud infrastructure. This attack vector also may increase the impact of XSS to RCE which is dangerous for self-hosted users as well."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.0",
            "matchCriteriaId" : "E33A3CA1-AFAC-4F61-93E3-E16070C99CEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/1631258",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://hackerone.com/reports/1631258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23918",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-23T20:15:13.920",
      "lastModified" : "2025-05-08T17:16:00.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3 that made it possible to bypass the experimental Permissions (https://nodejs.org/api/permissions.html) feature in Node.js and access non authorized modules by using process.mainModule.require(). This only affects users who had enabled the experimental permissions option with --experimental-policy."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndIncluding" : "14.14.0",
            "matchCriteriaId" : "428DCD7B-6F66-4F18-B780-5BD80143D482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.21.3",
            "matchCriteriaId" : "DA48F3CE-68BC-43F1-9428-A9F928420081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndIncluding" : "16.12.0",
            "matchCriteriaId" : "1D1D0CEC-62E5-4368-B8F2-1DA5DD0B88FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.19.1",
            "matchCriteriaId" : "6E9FAEC6-2D3A-4CBE-859F-11BCECC4F724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "18.0.0",
            "versionEndIncluding" : "18.11.0",
            "matchCriteriaId" : "33DB62F6-9D8D-42F8-A75E-82DA091C02BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "18.0.0",
            "versionEndExcluding" : "18.14.1",
            "matchCriteriaId" : "80500AD0-17C2-4698-AE03-1C6782FD38B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "19.0.0",
            "versionEndExcluding" : "19.6.1",
            "matchCriteriaId" : "8F4FCD16-4B9F-44B9-80DD-D024759CAB10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0008/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23919",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-23T20:15:13.977",
      "lastModified" : "2025-03-12T15:15:38.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread. This in turn could be used to cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-310"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndIncluding" : "14.14.0",
            "matchCriteriaId" : "428DCD7B-6F66-4F18-B780-5BD80143D482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.21.3",
            "matchCriteriaId" : "DA48F3CE-68BC-43F1-9428-A9F928420081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndIncluding" : "16.12.0",
            "matchCriteriaId" : "1D1D0CEC-62E5-4368-B8F2-1DA5DD0B88FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.19.1",
            "matchCriteriaId" : "6E9FAEC6-2D3A-4CBE-859F-11BCECC4F724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "18.0.0",
            "versionEndIncluding" : "18.11.0",
            "matchCriteriaId" : "33DB62F6-9D8D-42F8-A75E-82DA091C02BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "18.0.0",
            "versionEndExcluding" : "18.14.1",
            "matchCriteriaId" : "80500AD0-17C2-4698-AE03-1C6782FD38B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "19.0.0",
            "versionEndExcluding" : "19.2.0",
            "matchCriteriaId" : "57BCF42B-D5BC-433A-A4BA-E3014E275FA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/1808596",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0008/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://hackerone.com/reports/1808596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23920",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-02-23T20:15:14.047",
      "lastModified" : "2025-03-17T19:15:19.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndIncluding" : "14.14.0",
            "matchCriteriaId" : "428DCD7B-6F66-4F18-B780-5BD80143D482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.21.3",
            "matchCriteriaId" : "DA48F3CE-68BC-43F1-9428-A9F928420081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndIncluding" : "16.12.0",
            "matchCriteriaId" : "1D1D0CEC-62E5-4368-B8F2-1DA5DD0B88FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.19.1",
            "matchCriteriaId" : "6E9FAEC6-2D3A-4CBE-859F-11BCECC4F724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "18.0.0",
            "versionEndIncluding" : "18.11.0",
            "matchCriteriaId" : "33DB62F6-9D8D-42F8-A75E-82DA091C02BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "18.0.0",
            "versionEndExcluding" : "18.14.1",
            "matchCriteriaId" : "80500AD0-17C2-4698-AE03-1C6782FD38B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "19.0.0",
            "versionEndExcluding" : "19.6.1",
            "matchCriteriaId" : "8F4FCD16-4B9F-44B9-80DD-D024759CAB10"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00038.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0008/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5395",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-23T20:15:14.117",
      "lastModified" : "2024-11-21T07:47:40.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Judging Management System 1.0 was discovered to contain an arbitrary file upload vulnerability via the component edit_organizer.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:judging_management_system_project:judging_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE693B0-3497-406C-AD53-36AC05735004"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://judging.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "URL Repurposed" ]
      }, {
        "url" : "http://sourcecodester.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/170205/Judging-Management-System-1.0-Shell-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://judging.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "URL Repurposed" ]
      }, {
        "url" : "http://sourcecodester.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/170205/Judging-Management-System-1.0-Shell-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26325",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-02-23T20:15:14.180",
      "lastModified" : "2024-11-21T07:51:07.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The 'rx_export_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerability in the 'filterValue' and 'selectedColumns' parameters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdeveloper:reviewx:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "303CDDDE-6B08-45F8-AC47-0AF45152A3F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26326",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-02-23T20:15:14.243",
      "lastModified" : "2024-11-21T07:51:07.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated insecure deserialization issue. An unauthenticated attacker could leverage this issue to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themekraft:buddyforms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.7.8",
            "matchCriteriaId" : "AC9FDD2D-7818-480A-ACB6-A38448FE0D77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-7",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0754",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-23T22:15:11.333",
      "lastModified" : "2024-11-21T07:37:45.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nThe affected products are vulnerable to an integer\noverflow or wraparound, which could  allow an attacker to crash the server and remotely\nexecute arbitrary code.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:digital_industrial_gateway_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.612",
            "matchCriteriaId" : "B4D9E061-4E5C-4390-916D-8AABE3523E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptc:kepware_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.12",
            "matchCriteriaId" : "A50F0395-983A-4261-9FE3-40762E5EC02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptc:kepware_serverex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.12",
            "matchCriteriaId" : "F7C3EDBB-FEB2-4BE7-A379-AF07F1BCD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptc:thingworx_.net-sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.8.4.971",
            "matchCriteriaId" : "63EBD473-C1FD-4B90-BEB9-38488F6EC8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptc:thingworx_edge_c-sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.12.1052",
            "matchCriteriaId" : "7D82325D-070B-462B-B92F-34CC047D3340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptc:thingworx_edge_microserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.10.0",
            "matchCriteriaId" : "E860B82D-355A-4AB3-AA93-6B1D15A1B2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptc:thingworx_industrial_connectivity:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A370A2-4847-4702-AC73-03A2B62C49C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptc:thingworx_kepware_edge:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "C16730F8-C263-478B-B286-9831FFF5A409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:kepserver_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.12",
            "matchCriteriaId" : "E5A51513-026A-43DA-9CB6-D5B68819CA47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-054-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-054-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0755",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-02-23T22:15:11.427",
      "lastModified" : "2024-11-21T07:37:45.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nThe affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:digital_industrial_gateway_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.612",
            "matchCriteriaId" : "B4D9E061-4E5C-4390-916D-8AABE3523E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptc:kepware_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.12",
            "matchCriteriaId" : "A50F0395-983A-4261-9FE3-40762E5EC02F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptc:kepware_serverex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.12",
            "matchCriteriaId" : "F7C3EDBB-FEB2-4BE7-A379-AF07F1BCD46D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptc:thingworx_.net-sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.8.4.971",
            "matchCriteriaId" : "63EBD473-C1FD-4B90-BEB9-38488F6EC8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptc:thingworx_edge_c-sdk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.12.1052",
            "matchCriteriaId" : "7D82325D-070B-462B-B92F-34CC047D3340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptc:thingworx_edge_microserver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.4.10.0",
            "matchCriteriaId" : "E860B82D-355A-4AB3-AA93-6B1D15A1B2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptc:thingworx_industrial_connectivity:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D01A814D-8F2B-4B88-A66B-F2A2C293A6AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ptc:thingworx_kepware_edge:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "C16730F8-C263-478B-B286-9831FFF5A409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:kepserver_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.12",
            "matchCriteriaId" : "E5A51513-026A-43DA-9CB6-D5B68819CA47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-054-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-054-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-23T22:15:11.523",
      "lastModified" : "2025-03-12T17:15:39.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via overwriting the configuration file (cfw-setting.yaml)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clash_project:clash:0.20.12:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "F67F7BC0-AFAC-4287-9B68-ED67087DA4F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Fndroid/clash_for_windows_pkg",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Fndroid/clash_for_windows_pkg/issues/3891",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Fndroid/clash_for_windows_pkg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Fndroid/clash_for_windows_pkg/issues/3891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25823",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-23T22:15:11.580",
      "lastModified" : "2024-11-21T07:50:16.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gradio is an open-source Python library to build machine learning and data science demos and web applications. Versions prior to 3.13.1 contain Use of Hard-coded Credentials. When using Gradio's share links (i.e. creating a Gradio app and then setting `share=True`), a private SSH key is sent to any user that connects to the Gradio machine, which means that a user could access other users' shared Gradio demos. From there, other exploits are possible depending on the level of access/exposure the Gradio app provides. This issue is patched in version 3.13.1, however, users  are recommended to update to 3.19.1 or later where the FRP solution has been properly tested. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "3.13.1",
            "matchCriteriaId" : "9780A646-24FE-4206-B2B6-4C9A7270F1FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gradio-app/gradio/security/advisories/GHSA-3x5j-9vwr-8rr5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gradio-app/gradio/security/advisories/GHSA-3x5j-9vwr-8rr5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25824",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-23T22:15:11.670",
      "lastModified" : "2024-11-21T07:50:16.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Versions from 0.9.0 to 0.12.0 (including) did not properly fail blocking read operations on TLS connections when the transport hit timeouts. Instead it entered an endless loop retrying the read operation, consuming CPU resources. This could be exploited for denial of service attacks. If trace level logging was enabled, it would also produce an excessive amount of log output during the loop, consuming disk space. The problem has been fixed in commit d7eec4e598158ab6a98bf505354e84352f9715ec, please update to version 0.12.1. There are no workarounds, users who cannot update should apply the errno fix detailed in the security advisory. \n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mod_gnutls_project:mod_gnutls:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.9.0",
            "versionEndExcluding" : "0.12.1",
            "matchCriteriaId" : "3450A7C9-BABB-46EB-9418-CCBE904DB84C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942737#25",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/airtower-luna/mod_gnutls/commit/d7eec4e598158ab6a98bf505354e84352f9715ec",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/airtower-luna/mod_gnutls/security/advisories/GHSA-6cfv-fvgm-7pc8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942737#25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/airtower-luna/mod_gnutls/commit/d7eec4e598158ab6a98bf505354e84352f9715ec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/airtower-luna/mod_gnutls/security/advisories/GHSA-6cfv-fvgm-7pc8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-23T23:15:10.847",
      "lastModified" : "2024-11-21T07:45:56.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name parameter to execute commands as root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2212g_firmware:1.3.t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75D969F-7446-4A9D-A1AC-435B26A1A466"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2212g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CF79B1-A8F9-4A3E-998A-8A7440659560"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2212x_firmware:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0A74A-7F26-4F01-83E9-02F49167919D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2212x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DB499F-F9EB-457F-9FFA-AAB262C503B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2212s_firmware:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D43809D-7E10-4BF8-A2F6-C2CDAE7300AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2212s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22491473-357B-4E88-9006-6688DCA38D67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2211c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "E491724C-2AF4-4044-8ED7-7719FA27C7A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2211c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47A49D-E233-4DC0-BBB6-16AA737B3897"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2411_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5",
            "matchCriteriaId" : "9241317A-63E6-490D-99DF-65AD99A9A0AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2411:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D421BE-1FFA-41C2-8A44-9EA6114F420F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2111_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5",
            "matchCriteriaId" : "EDFACC84-6465-4F7A-B9DC-977754365D46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13FDFF00-FF95-4B37-92AF-2468075C8434"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2411l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "DBF38C26-8E92-4BE0-BD18-95F87FBF501A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2411l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4310805B-4D4E-4635-899B-796494B1309A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2111l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "2A3502DF-35D5-46F5-AF62-D852815FF2FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2111l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E10C3AD-4A59-4EAF-B7E5-4A5F0DC96C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2414_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4",
            "matchCriteriaId" : "F2B04DBC-6BB0-465D-A977-0D25F9421F76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2414:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D6F8F8-4872-4AF4-966F-FC6EB0D98154"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2114_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4",
            "matchCriteriaId" : "31641276-2563-4D16-912D-0128BD0A9842"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2114:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEDECC8-2A8E-4DEB-BAEC-F4B66CAFE672"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2424_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3",
            "matchCriteriaId" : "75BB504F-E8F0-44B8-B458-B1E04F67D05E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2414:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D6F8F8-4872-4AF4-966F-FC6EB0D98154"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2460_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "2E947CE3-FF1D-40C7-8A34-0020E2D3FA75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2460:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E8EAD94-829D-4BE6-B725-598CD0D803E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_4221hp-e__firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "7B834DDE-9459-4053-87E5-63EF23B9139A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_4221hp-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C8BF4A-24BE-495E-A065-82941602C703"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_3220_v3__firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7",
            "matchCriteriaId" : "E8BD8890-959C-4FDA-934F-00750C93E653"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_3220_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F983F121-0CCD-4D33-9A4C-70D6ED452546"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_3420_v3__firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7",
            "matchCriteriaId" : "9B3D6BCF-37F3-49C8-9E9E-CF3E914B3C23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_3420_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CFF07AD-FDC3-492A-BDF4-CE4C510AF664"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-23T23:15:10.947",
      "lastModified" : "2025-03-17T19:15:18.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2212g_firmware:1.3.t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75D969F-7446-4A9D-A1AC-435B26A1A466"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2212g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CF79B1-A8F9-4A3E-998A-8A7440659560"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2212x_firmware:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0A74A-7F26-4F01-83E9-02F49167919D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2212x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DB499F-F9EB-457F-9FFA-AAB262C503B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2212s_firmware:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D43809D-7E10-4BF8-A2F6-C2CDAE7300AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2212s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22491473-357B-4E88-9006-6688DCA38D67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2211c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "E491724C-2AF4-4044-8ED7-7719FA27C7A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2211c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47A49D-E233-4DC0-BBB6-16AA737B3897"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2411_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5",
            "matchCriteriaId" : "9241317A-63E6-490D-99DF-65AD99A9A0AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2411:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D421BE-1FFA-41C2-8A44-9EA6114F420F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2111_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5",
            "matchCriteriaId" : "EDFACC84-6465-4F7A-B9DC-977754365D46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13FDFF00-FF95-4B37-92AF-2468075C8434"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2411l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "DBF38C26-8E92-4BE0-BD18-95F87FBF501A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2411l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4310805B-4D4E-4635-899B-796494B1309A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2111l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "2A3502DF-35D5-46F5-AF62-D852815FF2FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2111l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E10C3AD-4A59-4EAF-B7E5-4A5F0DC96C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2414_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4",
            "matchCriteriaId" : "F2B04DBC-6BB0-465D-A977-0D25F9421F76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2414:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D6F8F8-4872-4AF4-966F-FC6EB0D98154"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2114_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4",
            "matchCriteriaId" : "31641276-2563-4D16-912D-0128BD0A9842"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2114:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEDECC8-2A8E-4DEB-BAEC-F4B66CAFE672"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2424_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3",
            "matchCriteriaId" : "75BB504F-E8F0-44B8-B458-B1E04F67D05E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2414:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D6F8F8-4872-4AF4-966F-FC6EB0D98154"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2460_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "2E947CE3-FF1D-40C7-8A34-0020E2D3FA75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2460:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E8EAD94-829D-4BE6-B725-598CD0D803E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_4221hp-e__firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "7B834DDE-9459-4053-87E5-63EF23B9139A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_4221hp-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C8BF4A-24BE-495E-A065-82941602C703"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_3220_v3__firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7",
            "matchCriteriaId" : "E8BD8890-959C-4FDA-934F-00750C93E653"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_3220_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F983F121-0CCD-4D33-9A4C-70D6ED452546"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_3420_v3__firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7",
            "matchCriteriaId" : "9B3D6BCF-37F3-49C8-9E9E-CF3E914B3C23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_3420_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CFF07AD-FDC3-492A-BDF4-CE4C510AF664"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-23T23:15:11.007",
      "lastModified" : "2025-03-17T19:15:19.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2212g_firmware:1.3.t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75D969F-7446-4A9D-A1AC-435B26A1A466"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2212g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CF79B1-A8F9-4A3E-998A-8A7440659560"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2212x_firmware:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0A74A-7F26-4F01-83E9-02F49167919D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2212x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1DB499F-F9EB-457F-9FFA-AAB262C503B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2212s_firmware:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D43809D-7E10-4BF8-A2F6-C2CDAE7300AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2212s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22491473-357B-4E88-9006-6688DCA38D67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2211c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "E491724C-2AF4-4044-8ED7-7719FA27C7A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2211c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB47A49D-E233-4DC0-BBB6-16AA737B3897"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2411_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5",
            "matchCriteriaId" : "9241317A-63E6-490D-99DF-65AD99A9A0AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2411:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D421BE-1FFA-41C2-8A44-9EA6114F420F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2111_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5",
            "matchCriteriaId" : "EDFACC84-6465-4F7A-B9DC-977754365D46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13FDFF00-FF95-4B37-92AF-2468075C8434"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2411l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "DBF38C26-8E92-4BE0-BD18-95F87FBF501A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2411l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4310805B-4D4E-4635-899B-796494B1309A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2111l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "2A3502DF-35D5-46F5-AF62-D852815FF2FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2111l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E10C3AD-4A59-4EAF-B7E5-4A5F0DC96C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2414_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4",
            "matchCriteriaId" : "F2B04DBC-6BB0-465D-A977-0D25F9421F76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2414:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D6F8F8-4872-4AF4-966F-FC6EB0D98154"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2114_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4",
            "matchCriteriaId" : "31641276-2563-4D16-912D-0128BD0A9842"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2114:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEDECC8-2A8E-4DEB-BAEC-F4B66CAFE672"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2424_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3",
            "matchCriteriaId" : "75BB504F-E8F0-44B8-B458-B1E04F67D05E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2414:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D6F8F8-4872-4AF4-966F-FC6EB0D98154"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_2460_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "2E947CE3-FF1D-40C7-8A34-0020E2D3FA75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_2460:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E8EAD94-829D-4BE6-B725-598CD0D803E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_4221hp-e__firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "7B834DDE-9459-4053-87E5-63EF23B9139A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_4221hp-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C8BF4A-24BE-495E-A065-82941602C703"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_3220_v3__firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7",
            "matchCriteriaId" : "E8BD8890-959C-4FDA-934F-00750C93E653"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_3220_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F983F121-0CCD-4D33-9A4C-70D6ED452546"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:korenix:jetwave_3420_v3__firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7",
            "matchCriteriaId" : "9B3D6BCF-37F3-49C8-9E9E-CF3E914B3C23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:korenix:jetwave_3420_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CFF07AD-FDC3-492A-BDF4-CE4C510AF664"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-23T23:15:11.067",
      "lastModified" : "2024-11-21T07:47:35.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ax3_firmware:16.03.12.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD11D4-8E44-4156-9D8E-7094E36A2152"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ax3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A01F4C4-FFFF-48DD-90DB-4DD29FE57479"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Venus-WQLab/bug_report/blob/main/Tenda/CVE-2023-24212.md",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/w0x68y/cve-lists/blob/main/Tenda/vuln/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Venus-WQLab/bug_report/blob/main/Tenda/CVE-2023-24212.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/w0x68y/cve-lists/blob/main/Tenda/vuln/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26468",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-24T00:15:12.217",
      "lastModified" : "2024-11-21T07:51:33.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cerebrate 1.12 does not properly consider organisation_id during creation of API keys."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerebrate-project:cerebrate:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "087278E9-F2B1-4D6E-B2FF-D4C458DBD969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cerebrate-project/cerebrate/commit/7ccf9252470a23acc38ad6ed13eecf523e368b48",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cerebrate-project/cerebrate/commit/7ccf9252470a23acc38ad6ed13eecf523e368b48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0994",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-24T02:15:10.523",
      "lastModified" : "2024-11-21T07:38:14.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rosariosis:rosariosis:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.8.2",
            "matchCriteriaId" : "A5B1D492-A82F-4C49-9699-35B8EEE8E9E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/francoisjacquet/rosariosis/commit/630d3e3d78270db8dbcbfe87db265bc3e70c5a76",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a281c586-9b97-4d17-88ff-ca91bb4c45ad",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/francoisjacquet/rosariosis/commit/630d3e3d78270db8dbcbfe87db265bc3e70c5a76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a281c586-9b97-4d17-88ff-ca91bb4c45ad",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0995",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-24T03:15:11.510",
      "lastModified" : "2024-11-21T07:38:14.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to v2.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:business_management_system_project:business_management_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.1",
            "matchCriteriaId" : "CDDA1BD6-5A44-4149-B827-CD0996CCD2BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/unilogies/bumsys/commit/927214bd7c475b31062c56294ff7b23d523a7219",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2847b92b-22c2-4dbc-a9d9-56a7cd12fe5f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/unilogies/bumsys/commit/927214bd7c475b31062c56294ff7b23d523a7219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2847b92b-22c2-4dbc-a9d9-56a7cd12fe5f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0996",
      "sourceIdentifier" : "cve_disclosure@tech.gov.sg",
      "published" : "2023-02-24T04:15:12.317",
      "lastModified" : "2025-03-11T21:15:39.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nThere is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call.\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve_disclosure@tech.gov.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:struktur:libheif:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D5E710-7894-4E2C-BE7B-9957FCFF6FC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strukturag/libheif/pull/759",
        "source" : "cve_disclosure@tech.gov.sg",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://govtech-csg.github.io/security-advisories/2023/02/24/CVE-2023-0996.html",
        "source" : "cve_disclosure@tech.gov.sg",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/strukturag/libheif/pull/759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://govtech-csg.github.io/security-advisories/2023/02/24/CVE-2023-0996.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26102",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-02-24T05:15:15.140",
      "lastModified" : "2025-03-11T16:15:14.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-core.js.The function uses recursive merge which can lead an attacker to modify properties of the Object.prototype\r\r"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rangy_project:rangy:-:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C72BDE1F-4591-4BB6-BC9D-83C066420528"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/timdown/rangy/issues/478",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-RANGY-3175702",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/timdown/rangy/issues/478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-RANGY-3175702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22425",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-24T06:15:11.437",
      "lastModified" : "2025-03-12T16:15:19.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and earlier versions allows a remote authenticated attacker to inject an arbitrary script."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ss-proj:shirasagi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.16.2",
            "matchCriteriaId" : "50D146E0-93A1-4B29-8443-8D80B6A687C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shirasagi/shirasagi",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN18765463/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ss-proj.org/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.ss-proj.org/support/938.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shirasagi/shirasagi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN18765463/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ss-proj.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.ss-proj.org/support/938.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22427",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-02-24T06:15:11.503",
      "lastModified" : "2025-03-12T16:15:19.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and earlier versions allows a remote attacker with an administrative privilege to inject an arbitrary script."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ss-proj:shirasagi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.16.2",
            "matchCriteriaId" : "50D146E0-93A1-4B29-8443-8D80B6A687C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shirasagi/shirasagi",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN18765463/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ss-proj.org/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.ss-proj.org/support/938.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shirasagi/shirasagi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN18765463/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ss-proj.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.ss-proj.org/support/938.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0997",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-24T08:15:10.790",
      "lastModified" : "2024-11-21T07:38:15.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221732."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moosikay_e-commerce_system_project:moosikay_e-commerce_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D8CE23-7DF9-4D63-88C3-E74B6A36442B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jidle123/bug_report/blob/main/vendors/razormist/Moosikay%20-%20E-Commerce%20System/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221732",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221732",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/jidle123/bug_report/blob/main/vendors/razormist/Moosikay%20-%20E-Commerce%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0998",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-24T08:15:11.037",
      "lastModified" : "2024-11-21T07:38:15.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file /alphaware/summary.php of the component Payment Handler. The manipulation of the argument amount leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221733 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphaware_simple_e-commerce_system_project:alphaware_simple_e-commerce_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497CA7E0-4729-4D88-9318-C8F480CA97CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1MurasaKi/PaymentVul_report/blob/main/razormist/Alphaware%20-%20Simple%20E-Commerce%20System/payment_vulnerability.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221733",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221733",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/1MurasaKi/PaymentVul_report/blob/main/razormist/Alphaware%20-%20Simple%20E-Commerce%20System/payment_vulnerability.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0999",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-24T08:15:11.143",
      "lastModified" : "2024-11-21T07:38:15.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in SourceCodester Sales Tracker Management System 1.0. This vulnerability affects unknown code of the file admin/?page=user/list. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221734 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sales_tracker_management_system_project:sales_tracker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF52C94E-14A2-48E2-930E-56E6375C4846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1MurasaKi/STMS_CSRF/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221734",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221734",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/1MurasaKi/STMS_CSRF/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1002",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-24T08:15:11.243",
      "lastModified" : "2024-11-21T07:38:15.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in MuYuCMS 2.2. This issue affects some unknown processing of the file index.php. The manipulation of the argument file_path leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221735."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muyucms:muyucms:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E558AF9C-EBCD-4299-94C6-E32EC2D9C336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MuYuCMS/MuYuCMS/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221735",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221735",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/MuYuCMS/MuYuCMS/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1004",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-24T08:15:11.337",
      "lastModified" : "2024-11-21T07:38:16.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component WSH JScript Handler. The manipulation leads to code injection. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-221737 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marktext:marktext:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.17.1",
            "matchCriteriaId" : "AB68239C-90DB-4BD3-AF7E-5A79E97A7093"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/marktext/marktext/issues/3575",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221737",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221737",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/marktext/marktext/issues/3575",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1005",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-24T09:15:10.660",
      "lastModified" : "2024-11-21T07:38:16.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in JP1016 Markdown-Electron and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to code injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. VDB-221738 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:markdown-electron_project:markdown-electron:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E162A5E8-7B8D-4D9F-B38C-A2A09BF3DD2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JP1016/Markdown-Electron/issues/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221738",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221738",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JP1016/Markdown-Electron/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1006",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-24T09:15:10.757",
      "lastModified" : "2024-11-21T07:38:16.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been classified as problematic. This affects an unknown part of the component New Record Handler. The manipulation of the argument Firstname/Middlename/Lastname/Suffix/Nationality/Doctor Fullname/Doctor Suffix with the input \"><script>prompt(1)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-221739."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medical_certificate_generator_app_project:medical_certificate_generator_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99101B10-CEBF-4396-B794-8B4A8D91ED1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221739",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221739",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0595",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-02-24T11:15:10.643",
      "lastModified" : "2024-11-21T07:37:27.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021(All Versions prior to October 2022), ClearSCADA (All Versions)\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-117"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:clearscada:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8117E9AF-97C7-4C10-BE59-5341D32667F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32C7EA19-134A-4FF8-BB49-133020612947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7268.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337B3FD9-3C56-4914-B876-85928A4269DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7322.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599591CD-340D-4F5C-9442-3B77138DE5EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7429.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1CB9D8-07C9-492D-A4C5-87D5AAE73538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7457.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07CCE0CE-7ABC-4B32-8071-35C62F51184C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7488.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE0670A-636C-48DB-83CB-5CAB29EDB399"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7522.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "496D8DD9-00A0-4F06-B2BA-A51A0178C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7545.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66924EF0-0776-45A3-A61E-2EB1DEDEF391"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7578.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB87BE8B-CA3E-4D64-BA78-DD0E86DFCA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7613.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42883228-4736-4148-B7AD-08FD829FC07C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7641.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE6E43F-B4C1-47F5-994C-3154D47D728E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7690.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711E747D-7DF5-4576-AA01-E9B1B884F829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7714.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68D619A4-0F05-4C67-848B-E862954AB767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7742.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3AE4FA-D915-4F2C-8958-54DCC5118CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7777.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA71158-C61D-4F94-AA44-5C881601F18C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7808.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C52F5ACB-5811-4BE2-988A-B922E8848801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7840.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C36FAD5-E91F-4F54-ABBF-907EF2561D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7875.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A16BFCC-22ED-4D6E-9737-29E33B9870BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7896.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858A14E9-9FFA-47F2-ACC3-5A0A1B5754A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7936.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F71EB4-CAE9-430B-929A-A5B4B1D0BDEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.7980.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167317B6-BFC2-4DB8-AC22-F8C5E2BCEFA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8015.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B0EC77-A143-4919-BBF5-95127999FF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8108.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C717C22-CA76-4FC4-8565-F81C614A27F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8122.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337BA43E-CACF-4806-B641-35E1425A7C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8155.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71905992-FD0E-4FDA-A0A4-0C26BE5F8DE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8172.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9491C1-24B7-4AB2-8405-DE8B308537CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8197.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71862239-5155-4971-9E40-4444A7711148"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8220.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E81E4F51-1258-4AB6-B95A-CC787EDF0BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2019:81.8267.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD44BC64-F34B-4682-9EB1-0538D28D39FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5AA4D7F-76AA-45A7-86C9-4C57D5C23D8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7551.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BA5080-1791-4406-AFC3-807C9931E8F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7578.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD4B1884-110F-4D2B-A671-F9CDCCC0055A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7613.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEDA987-6E1F-4D3D-B65B-90B8EA59A4EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7641.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF6A930-242F-4479-A504-9E5BC0A4B0AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7692.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5D2147-D8E9-4A45-A1A3-C4376C18DEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7717.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F122BED3-BC5C-41A6-9785-E10E1E0DCA20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7742.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6A9061F-D17A-45CC-BC8E-75A35E5919A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7787.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0E703DE-39EC-4055-B0D0-729BFD4E4126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7809.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "294CBA2E-6004-4546-8BE2-44197A6FDC84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7840.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0123B7C-3FB6-47CC-94D8-595BC6514419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7875.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAB0301-6040-4C8D-AF70-87FCDD423DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7913.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52B3825-334A-4C4B-9186-FDF7B46127A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7936.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F400AFD-2CDD-4DD7-8276-8CAC66924E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.7980.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3C4797-9995-472B-9607-18ED9C76C73B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8017.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A923C3EE-44D0-4143-838E-608BC8B96E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8108.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6BEE89-D04B-46A4-BFF6-B34CC577E38D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8122.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504D36B5-2AAB-4B8C-ADA6-A2B23C25A7E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8155.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE6C0472-CF2A-4C92-A75D-1FEFCD375E33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8181.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10159C3-98C4-4A13-B513-6012C3AC9B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8197.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42B3C6B3-EB4C-4B81-8914-EA2CCB5E0D24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8221.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E25CAE4-84AB-4161-9C91-9ACF541AB65B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2020:83.8267.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31EF8CD9-10F5-490A-A070-76DCA6757AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C26D6FD-4A8A-4C35-9AFD-1CF44345832A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8027.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D373AAB2-CBF0-4051-BCEF-CFF88E65FA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8108.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDACB10C-9DC1-458A-A177-49D3CD86E3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8120.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FFE1B0-7C58-4E64-B429-E6354E00DD43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8158.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2FE473-2BDC-4FD2-A55D-B5D35E35653C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8182.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C447E85B-ADF3-4948-B622-03C2656A9E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8197.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBE34D7-C746-4C37-BD75-124D77588AF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8218.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753F662D-A172-459B-B3C9-D419C6559858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_geo_scada_expert_2021:84.8269.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB1525E-726C-4E78-8F74-378956B33F54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-01.pdf",
        "source" : "cybersecurity@se.com"
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-01.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1007",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-24T11:15:10.813",
      "lastModified" : "2024-11-21T07:38:16.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Twister Antivirus 8.17. It has been declared as critical. This vulnerability affects the function 0x801120E4 in the library filmfd.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221740."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filseclab:twister_antivirus:8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C900E994-BE87-4417-808D-42DEBF93920A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1wh20g2Ze4gwCtripe7QeHNXd3bS4aZNG/view?usp=sharing",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1007",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221740",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221740",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1wh20g2Ze4gwCtripe7QeHNXd3bS4aZNG/view?usp=sharing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1008",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-24T11:15:10.910",
      "lastModified" : "2024-11-21T07:38:16.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Twister Antivirus 8.17. It has been rated as problematic. This issue affects the function 0x801120E4 in the library filmfd.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-221741 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filseclab:twister_antivirus:8.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C900E994-BE87-4417-808D-42DEBF93920A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1fdQWJ1uvXELnXnDm2Jk81bA0fwwqQCpY/view?usp=sharing",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1008",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221741",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221741",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1fdQWJ1uvXELnXnDm2Jk81bA0fwwqQCpY/view?usp=sharing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1009",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-24T11:15:10.997",
      "lastModified" : "2024-11-21T07:38:16.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is the function sub_1DF14 of the file /cgi-bin/mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option with the input /../etc/passwd- leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221742 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad clasificada como problemática se ha encontrado en DrayTek Vigor 2960 1.5.1.4. Afectada es la función sub_1DF14 del archivo /cgi-bin/mainfunction.cgi. La manipulación de la opción de argumento con la entrada /.. /etc/passwd- conduce a la Path Traversal. El ataque debe realizarse dentro de la red local. El exploit ha sido divulgado al público y puede ser utilizado. VDB-221742 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2960_firmware:1.5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "564753CE-A701-4D76-94D8-C452AF0C5E82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDA3905-67DD-4F31-AFCF-014F1D7CCC1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xxy1126/Vuln/blob/main/Draytek/1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221742",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221742",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xxy1126/Vuln/blob/main/Draytek/1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1010",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-24T11:15:11.090",
      "lastModified" : "2024-11-21T07:38:16.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in vox2png 1.0. Affected by this vulnerability is an unknown functionality of the file vox2png.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221743."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vox2png_project:vox2png:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D68532-55B6-4EDC-9207-9D030374DC5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/vox2png/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221743",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221743",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/vox2png/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25691",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-02-24T12:15:30.570",
      "lastModified" : "2025-03-11T21:15:39.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation vulnerability in the Apache Airflow Google Provider.\n\nThis issue affects Apache Airflow Google Provider versions before 8.10.0.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apache-airflow-providers-google:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.10.0",
            "matchCriteriaId" : "9B36E44C-5B9D-4147-A07E-BED0776D158E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apache/airflow/pull/29497",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/zdr8ovfttbh7kj0lydgcw88tbt2nmkcy",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/apache/airflow/pull/29497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/zdr8ovfttbh7kj0lydgcw88tbt2nmkcy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25692",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-02-24T12:15:30.650",
      "lastModified" : "2025-03-11T21:15:40.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation vulnerability in the Apache Airflow Google Provider.\n\nThis issue affects Apache Airflow Google Provider versions before 8.10.0.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apache-airflow-providers-google:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.10.0",
            "matchCriteriaId" : "9B36E44C-5B9D-4147-A07E-BED0776D158E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apache/airflow/pull/29499",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread/ks4l78l5rwdpmvfn7y7yhs179nyxtlsh",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/apache/airflow/pull/29499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread/ks4l78l5rwdpmvfn7y7yhs179nyxtlsh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25693",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-02-24T12:15:30.720",
      "lastModified" : "2025-02-13T15:15:16.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider.\n\nThis issue affects Apache Airflow Sqoop Provider versions before 3.1.1.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apache-airflow-providers-apache-sqoop:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.1",
            "matchCriteriaId" : "8F2095B7-F394-49A1-8B28-7FA242137D0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apache/airflow/pull/29500",
        "source" : "security@apache.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread/79qn8g5xbq036f8crb115obvr22l52q4",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/apache/airflow/pull/29500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread/79qn8g5xbq036f8crb115obvr22l52q4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25696",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-02-24T12:15:30.790",
      "lastModified" : "2024-11-21T07:49:57.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation vulnerability in the Apache Airflow Hive Provider.\n\nThis issue affects Apache Airflow Hive Provider versions before 5.1.3.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apache-airflow-providers-apache-hive:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1.3",
            "matchCriteriaId" : "12C00250-1F55-4B0A-B5EA-DA14B825C2ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apache/airflow/pull/29502",
        "source" : "security@apache.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread/99g0qm56wmgdxmbtdsvhj4rdnxhpzpml",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/apache/airflow/pull/29502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread/99g0qm56wmgdxmbtdsvhj4rdnxhpzpml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25956",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-02-24T12:15:30.867",
      "lastModified" : "2024-11-21T07:50:30.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider.\n\nThis issue affects Apache Airflow AWS Provider versions before 7.2.1.\n\n"
      }, {
        "lang" : "es",
        "value" : "Generación de vulnerabilidad de mensaje de error que contiene información confidencial en el proveedor AWS Apache Airflow. Este problema afecta a las versiones del proveedor AWS de Apache Airflow anteriores a la 7.2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apache-airflow-providers-amazon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.1",
            "matchCriteriaId" : "0DE8C871-ABF3-4BE7-9E62-703DB1EC7978"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apache/airflow/pull/29587",
        "source" : "security@apache.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread/07pl9y4gdpw2c6rzqm77dvkm2z2kb5gv",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/apache/airflow/pull/29587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread/07pl9y4gdpw2c6rzqm77dvkm2z2kb5gv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0585",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-24T15:15:12.600",
      "lastModified" : "2026-04-08T18:17:43.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 4.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Administrator role or above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El complemento All in One SEO Pack para WordPress es vulnerable a cross-site scripting almacenado a través de múltiples parámetros en versiones hasta la 4.2.9 incluida debido a una desinfección de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados con rol de Administrador o superior inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.2.9",
            "matchCriteriaId" : "71A6AA9C-0FBE-443E-8615-5414B604E473"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/all-in-one-seo-pack/tags/4.2.9/app/Common/Main/Updates.php?v=2829340#L624",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/all-in-one-seo-pack/tags/4.2.9/app/Common/Main/Updates.php?v=2829340#L625",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/all-in-one-seo-pack/tags/4.2.9/app/Common/Main/Updates.php?v=2829340#L665",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/all-in-one-seo-pack/tags/4.2.9/app/Common/Main/Updates.php?v=2829340#L666",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2859011%40all-in-one-seo-pack%2Ftrunk&old=2847431%40all-in-one-seo-pack%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3db97180-9308-4891-9de9-acefe31d088f?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/all-in-one-seo-pack/tags/4.2.9/app/Common/Main/Updates.php?v=2829340#L624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/all-in-one-seo-pack/tags/4.2.9/app/Common/Main/Updates.php?v=2829340#L625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/all-in-one-seo-pack/tags/4.2.9/app/Common/Main/Updates.php?v=2829340#L665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/all-in-one-seo-pack/tags/4.2.9/app/Common/Main/Updates.php?v=2829340#L666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2859011%40all-in-one-seo-pack%2Ftrunk&old=2847431%40all-in-one-seo-pack%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/3db97180-9308-4891-9de9-acefe31d088f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0586",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-24T15:15:12.720",
      "lastModified" : "2026-04-08T17:16:48.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 4.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Contributor+ role to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      }, {
        "lang" : "es",
        "value" : "El complemento All in One SEO Pack para WordPress es vulnerable a cross-site scripting almacenado a través de múltiples parámetros en versiones hasta la 4.2.9 incluida debido a una desinfección de entrada y un escape de salida insuficientes. Esto hace posible que atacantes autenticados con rol de Contributor+ inyecten scripts web arbitrarios en páginas que se ejecutarán cada vez que un usuario acceda a una página inyectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.2.9",
            "matchCriteriaId" : "71A6AA9C-0FBE-443E-8615-5414B604E473"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/all-in-one-seo-pack/tags/4.2.9/app/Common/Admin/PostSettings.php?v=2829340#L202",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2859011%40all-in-one-seo-pack%2Ftrunk&old=2847431%40all-in-one-seo-pack%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2023/02/all-in-one-seo-pack-vulnerabilities-impacting-3-million-sites-patched/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c13f00e-3048-44cf-8979-2b0b0c508f3a?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/all-in-one-seo-pack/tags/4.2.9/app/Common/Admin/PostSettings.php?v=2829340#L202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2859011%40all-in-one-seo-pack%2Ftrunk&old=2847431%40all-in-one-seo-pack%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c13f00e-3048-44cf-8979-2b0b0c508f3a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-24T16:15:11.940",
      "lastModified" : "2025-03-12T16:15:19.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C/examples/multi_client_server/multi_client_server.c."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en lib60870 v2.3.2. Hay una pérdida de memoria en lib60870/lib60870-C/examples/multi_client_server/multi_client_server.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mz-automation:lib60870:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C775EFAE-1EDD-45BC-B606-8E2E794A508C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mz-automation/lib60870/issues/132",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/mz-automation/lib60870/issues/132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0481",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-24T18:15:14.140",
      "lastModified" : "2025-03-12T16:15:18.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user."
      }, {
        "lang" : "es",
        "value" : "En la implementación RestEasy Reactive de Quarkus, el inseguro File.createTempFile() se usa en la clase FileBodyHandler que crea archivos temporales con permisos inseguros que un usuario local podría leer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.1",
            "matchCriteriaId" : "5FDFC706-B7B5-458B-833E-195D65F2E8EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/quarkusio/quarkus/pull/30694",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/quarkusio/quarkus/pull/30694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1029",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-24T20:15:16.447",
      "lastModified" : "2026-04-08T18:17:52.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the regenerateSitemaps function. This makes it possible for unauthenticated attackers to regenerate Sitemaps via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      }, {
        "lang" : "es",
        "value" : "El complemento WP Meta SEO para WordPress es vulnerable a Cross-Site Request Forgery  en versiones hasta la 4.5.3 incluida. Esto se debe a una validación nonce faltante o incorrecta en la función regenerateSitemaps. Esto hace posible que atacantes no autenticados regeneren mapas de sitio a través de una solicitud falsificada, siempre que puedan engañar a un administrador del sitio para que realice una acción como hacer clic en un enlace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomunited:wp_meta_seo:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "4E214F57-89F8-4B8B-AF7A-7104AF2A1794"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/764aec73-f291-4372-9dde-812ffaf025ed?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/764aec73-f291-4372-9dde-812ffaf025ed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1030",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-24T20:15:16.550",
      "lastModified" : "2025-04-03T09:15:14.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester/code-projects Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en SourceCodester Online Boat Reservation System 1.0 y se ha clasificado como problemática. Una función desconocida del archivo /boat/login.php del componente POST Parameter Handler es afectada por esta vulnerabilidad. La manipulación del argumento un conduce a cross-site scripting. El ataque se puede lanzar de forma remota. El exploit ha sido divulgado al público y puede utilizarse. El identificador asociado de esta vulnerabilidad es VDB-221755."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "PASSIVE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "NONE",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_boat_reservation_system_project:online_boat_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5C7F45-85A9-453C-A98C-60EDD892810B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jidle123/bug_report/blob/main/vendors/winex01/Online%20Boat%20Reservation%20System/XSS-1.md#online-boat-reservation-system-v10-by-winex01-has-cross-site-scripting-reflected",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221755",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221755",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.94112",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/jidle123/bug_report/blob/main/vendors/winex01/Online%20Boat%20Reservation%20System/XSS-1.md#online-boat-reservation-system-v10-by-winex01-has-cross-site-scripting-reflected",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-24T22:15:10.880",
      "lastModified" : "2025-03-12T15:15:38.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary code via uploading a crafted XML file to /urule/common/saveFile."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de entidad externa XML (XXE) en urule v2.1.7 permite a los atacantes ejecutar código arbitrario cargando un archivo XML manipulado en /urule/common/saveFile."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bstek:urule:2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2341D49F-B835-4ED8-89FA-E152C92EEAB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Venus-WQLab/bug_report/blob/main/ureport/ureport-cve-2023-24189.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/youseries/urule",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Venus-WQLab/bug_report/blob/main/ureport/ureport-cve-2023-24189.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/youseries/urule",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25816",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-25T00:15:11.003",
      "lastModified" : "2024-11-21T07:50:15.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud is an Open Source private cloud software. Versions 25.0.0 and above, prior to 25.0.3, are subject to Uncontrolled Resource Consumption. A user can configure a very long password, consuming more resources on password validation than desired. This issue is patched in 25.0.3 No workaround is available.\n"
      }, {
        "lang" : "es",
        "value" : "Nextcloud es un software de nube privada de código abierto. Las versiones 25.0.0 y superiores, anteriores a la 25.0.3, están sujetas al Consumo Incontrolado de Recursos. Un usuario puede configurar una contraseña muy larga, consumiendo más recursos de los deseados en la validación de contraseña. Este problema se solucionó en 25.0.3. No hay ningún workaround disponible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.3",
            "matchCriteriaId" : "6C9E81EC-178A-4A85-A912-F8765456F60D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.3",
            "matchCriteriaId" : "C5E90102-61F6-4A2A-8EEC-A2795DCB56FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-53q2-cm29-7j83",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/35965",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1820864",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-53q2-cm29-7j83",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/35965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1820864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25821",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-25T00:15:11.093",
      "lastModified" : "2024-11-21T07:50:16.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud is an Open Source private cloud software. Versions 24.0.4 and above, prior to 24.0.7, and 25.0.0 and above, prior to 25.0.1, contain Improper Access Control. Secure view for internal shares can be circumvented if reshare permissions are also given. This issue is patched in versions 24.0.7 and 25.0.1. No workaround  is available."
      }, {
        "lang" : "es",
        "value" : "Nextcloud es un software de nube privada de código abierto. Las versiones 24.0.4 y posteriores, anteriores a la 24.0.7, y 25.0.0 y posteriores, anteriores a la 25.0.1, contienen control de acceso inadecuado. La vista segura de recursos compartidos internos se puede eludir si también se otorgan permisos para compartir. Este problema se solucionó en las versiones 24.0.7 y 25.0.1. No hay wordkarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.4",
            "versionEndExcluding" : "24.0.7",
            "matchCriteriaId" : "6768ABD1-86C2-4BDF-870A-E7280E019E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "24.0.4",
            "versionEndExcluding" : "24.0.7",
            "matchCriteriaId" : "72D35BC7-FAE8-4BEE-B201-37DD79A837E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:25.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFBE98C-443B-4B5A-BAA2-CC3050D91C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:25.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "2BC9F701-83D0-4FC0-A60F-07710532192B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7w6h-5qgw-4j94",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/34502",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1724016",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7w6h-5qgw-4j94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/34502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1724016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26033",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-25T00:15:11.170",
      "lastModified" : "2024-11-21T07:50:37.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gentoo soko is the code that powers packages.gentoo.org. Versions prior to 1.0.1 are vulnerable to SQL Injection, leading to a Denial of Service. If the user selects (in user preferences) the \"Recently Visited Packages\" view for the index page, the value of the `search_history` cookie is used as a base64 encoded comma separated list of atoms. These are string loaded directly into the SQL query with `atom = '%s'` format string. As a result, any user can modify the browser's cookie value and inject most SQL queries. A proof of concept malformed cookie was generated that wiped the database or changed it's content. On the database, only public data is stored, so there is no confidentiality issues to site users. If it is known that the database was modified, a full restoration of data is possible by performing a full database wipe and performing full update of all components. This issue is patched with commit id 5ae9ca83b73. Version 1.0.1 contains the patch. If users are unable to upgrade immediately, the following workarounds may be applied: (1.) Use a proxy to always drop the `search_history` cookie until upgraded. The impact on user experience is low. (2.) Sanitize to the value of `search_history` cookie after base64 decoding it."
      }, {
        "lang" : "es",
        "value" : "Gentoo soko es el código que impulsa a packages.gentoo.org. Las versiones anteriores a la 1.0.1 son vulnerables a la inyección SQL, lo que provoca una denegación de servicio. Si el usuario selecciona (en las preferencias del usuario) la vista \"Paquetes visitados recientemente\" para la página de índice, el valor de la cookie `search_history` se utiliza como una lista de átomos separados por comas codificados en base64. Estas son cadenas cargadas directamente en la consulta SQL con una cadena de formato `atom = '%s'`. Como resultado, cualquier usuario puede modificar el valor de la cookie del navegador e inyectar la mayoría de las consultas SQL. Se generó una cookie de prueba de concepto con formato incorrecto que borró la base de datos o cambió su contenido. En la base de datos, sólo se almacenan datos públicos, por lo que no hay problemas de confidencialidad para los usuarios del sitio. Si se sabe que la base de datos fue modificada, es posible realizar una restauración completa de los datos realizando un borrado completo de la base de datos y una actualización completa de todos los componentes. Este problema se solucionó en el commit con ID 5ae9ca83b73. La versión 1.0.1 contiene el parche. Si los usuarios no pueden actualizar inmediatamente, se pueden aplicar los siguientes wokarounds: (1.) Utilice un proxy para descartar siempre la cookie `search_history` hasta que se actualice. El impacto en la experiencia del usuario es bajo. (2.) desinfectar el valor de la cookie `search_history` después de decodificarla en base64."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:soko:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1",
            "matchCriteriaId" : "4BFAD223-9E9C-4854-B1F3-0A17CD7F5E43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gentoo/soko/security/advisories/GHSA-gp8g-jfq9-5q2g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitweb.gentoo.org/sites/soko.git/commit/?id=5ae9ca83b735804f2bd405592983a73d7fcc42f4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gentoo/soko/security/advisories/GHSA-gp8g-jfq9-5q2g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitweb.gentoo.org/sites/soko.git/commit/?id=5ae9ca83b735804f2bd405592983a73d7fcc42f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1033",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-25T01:15:54.487",
      "lastModified" : "2024-11-21T07:38:19.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.11."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Request Forgery (CSRF) en el repositorio froxlor/froxlor de GitHub anterior a 2.0.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.11",
            "matchCriteriaId" : "C1635360-5CD8-4058-99AD-C8F00ED696A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/froxlor/froxlor/commit/4003a8d2b60728a77476d1d4f5aa5c635f128950",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ba3cd929-8b60-4d8d-b77d-f28409ecf387",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/froxlor/froxlor/commit/4003a8d2b60728a77476d1d4f5aa5c635f128950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ba3cd929-8b60-4d8d-b77d-f28409ecf387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25825",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-25T01:15:56.627",
      "lastModified" : "2024-11-21T07:50:16.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 are vulnerable to Cross-site Scripting. Log entries can be injected into the database logs, containing a malicious referrer field.  This is unescaped when viewing the logs in the web ui. This issue is patched in version 1.36.33. "
      }, {
        "lang" : "es",
        "value" : "ZoneMinder es una aplicación de software de circuito cerrado de televisión de código abierto y gratuita para Linux que admite cámaras IP, USB y analógicas. Las versiones anteriores a la 1.36.33 son vulnerables a los scripts entre sitios. Las entradas de registro se pueden inyectar en los registros de la base de datos y contienen un campo de referencia malicioso. Esto no tiene escape cuando se ven los registros en la interfaz de usuario web. Este problema se solucionó en la versión 1.36.33."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.36.33",
            "matchCriteriaId" : "A4A5EDFC-FCEB-4982-A3D1-C95814646A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.37.0",
            "versionEndExcluding" : "1.37.33",
            "matchCriteriaId" : "04CEC79C-0ABE-43D6-94DD-2DFAEC3939B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZoneMinder/zoneminder/commit/4637eaf9ea530193e0897ec48899f5638bdd6d81",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/commit/57bf25d39f12d620693f26068b8441b4f3f0b6c0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/commit/e1028c1d7f23cc1e0941b7b37bb6ae5a04364308",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-68vf-g4qm-jr6v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/commit/4637eaf9ea530193e0897ec48899f5638bdd6d81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/commit/57bf25d39f12d620693f26068b8441b4f3f0b6c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/commit/e1028c1d7f23cc1e0941b7b37bb6ae5a04364308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-68vf-g4qm-jr6v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26032",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-25T01:15:56.760",
      "lastModified" : "2024-11-21T07:50:37.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain SQL Injection via malicious jason web token. The Username field of the JWT token was trusted when performing an SQL query to load the user.  If an attacker could determine the HASH key used by ZoneMinder, they could generate a malicious JWT token and use it to execute arbitrary SQL. This issue is fixed in versions 1.36.33 and 1.37.33."
      }, {
        "lang" : "es",
        "value" : "ZoneMinder es una aplicación de software de circuito cerrado de televisión de código abierto y gratuita para Linux que admite cámaras IP, USB y analógicas. Las versiones anteriores a la 1.36.33 y 1.37.33 contienen inyección SQL mediante un token web jason malicioso. Se confiaba en el campo Username del token JWT al realizar una consulta SQL para cargar el usuario. Si un atacante pudiera determinar la clave HASH utilizada por ZoneMinder, podría generar un token JWT malicioso y usarlo para ejecutar SQL arbitrario. Este problema se solucionó en las versiones 1.36.33 y 1.37.33."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.36.33",
            "matchCriteriaId" : "A4A5EDFC-FCEB-4982-A3D1-C95814646A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.37.00",
            "versionEndExcluding" : "1.37.33",
            "matchCriteriaId" : "B1AF3896-BC5B-4FB6-842D-29B621F987E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-6c72-q9mw-mwx9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-6c72-q9mw-mwx9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26034",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-25T01:15:56.877",
      "lastModified" : "2024-11-21T07:50:37.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are affected by a SQL Injection vulnerability. The (blind) SQL Injection vulnerability is present within the `filter[Query][terms][0][attr]` query string parameter of the  `/zm/index.php` endpoint. A user with the View or Edit permissions of Events may execute arbitrary SQL. The resulting impact can include unauthorized data access (and modification), authentication and/or authorization bypass, and remote code execution."
      }, {
        "lang" : "es",
        "value" : "ZoneMinder es una aplicación de software de circuito cerrado de televisión de código abierto y gratuita para Linux que admite cámaras IP, USB y analógicas. Las versiones anteriores a 1.36.33 y 1.37.33 se ven afectadas por una vulnerabilidad de inyección SQL. Una vulnerabilidad de inyección SQL de tipo Blind está presente dentro del parámetro de cadena de consulta `filter[Query][terms][0][attr]` del endpoint `/zm/index.php`. Un usuario con permisos de Ver o Editar Eventos puede ejecutar SQL arbitrario. El impacto resultante puede incluir acceso no autorizado a datos (y modificación), autenticación y/o omisión de autorización y ejecución remota de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.36.33",
            "matchCriteriaId" : "A4A5EDFC-FCEB-4982-A3D1-C95814646A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.37.00",
            "versionEndExcluding" : "1.37.33",
            "matchCriteriaId" : "B1AF3896-BC5B-4FB6-842D-29B621F987E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-222j-wh8m-xjrx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-222j-wh8m-xjrx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1034",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-25T02:15:12.473",
      "lastModified" : "2024-11-21T07:38:19.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path Traversal: '\\..\\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9."
      }, {
        "lang" : "es",
        "value" : "Path traversal: '\\..\\filename' en el repositorio salesagility/suitecrm de GitHub anterior a 7.12.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-29"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.12.9",
            "matchCriteriaId" : "3114AEC4-D6B1-42BE-B7AF-61708553D1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/salesagility/suitecrm/commit/c19f221a41706efc8d73cef95c5e362c4f86bf06",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/0c1365bc-8d9a-4ae0-8b55-615d492b3730",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/salesagility/suitecrm/commit/c19f221a41706efc8d73cef95c5e362c4f86bf06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/0c1365bc-8d9a-4ae0-8b55-615d492b3730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26035",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-25T02:15:13.550",
      "lastModified" : "2024-11-21T07:50:37.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the snapshot action, which expects an id to fetch an existing monitor but can be passed an object to create a new one instead. TriggerOn ends up calling shell_exec using the supplied Id. This issue is fixed in This issue is fixed in versions 1.36.33 and 1.37.33."
      }, {
        "lang" : "es",
        "value" : "ZoneMinder es una aplicación de software de circuito cerrado de televisión de código abierto y gratuita para Linux que admite cámaras IP, USB y analógicas. Las versiones anteriores a 1.36.33 y 1.37.33 son vulnerables a la ejecución remota de código no autenticado mediante autorización faltante. No hay verificación de permisos en la acción de instantánea, que espera que una identificación busque un monitor existente, pero en su lugar se le puede pasar un objeto para crear uno nuevo. TriggerOn termina llamando a shell_exec usando la identificación proporcionada. Este problema se solucionó en Este problema se solucionó en las versiones 1.36.33 y 1.37.33."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.36.33",
            "matchCriteriaId" : "A4A5EDFC-FCEB-4982-A3D1-C95814646A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.37.00",
            "versionEndExcluding" : "1.37.33",
            "matchCriteriaId" : "B1AF3896-BC5B-4FB6-842D-29B621F987E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/175675/ZoneMinder-Snapshots-Command-Injection.html",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-72rg-h4vf-29gr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/175675/ZoneMinder-Snapshots-Command-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-72rg-h4vf-29gr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26036",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-25T02:15:13.667",
      "lastModified" : "2024-11-21T07:50:38.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion (Untrusted Search Path) vulnerability via /web/index.php. By controlling $view, any local file ending in .php can be executed. This is supposed to be mitigated by calling detaintPath, however dentaintPath does not properly sandbox the path. This can be exploited by constructing paths like \"..././\", which get replaced by \"../\". This issue is patched in versions 1.36.33 and 1.37.33."
      }, {
        "lang" : "es",
        "value" : "ZoneMinder es una aplicación de software de circuito cerrado de televisión de código abierto y gratuita para Linux que admite cámaras IP, USB y analógicas. Las versiones anteriores a 1.36.33 y 1.37.33 contienen una vulnerabilidad de inclusión de archivos locales (ruta de búsqueda no confiable) a través de /web/index.php. Al controlar $view, se puede ejecutar cualquier archivo local que termine en .php. Se supone que esto se mitiga llamando a detaintPath, sin embargo, dentaintPath no protege adecuadamente la ruta de la sandbox. Esto se puede aprovechar construyendo rutas como \"..././\", que se reemplazan por \"../\". Este problema se solucionó en las versiones 1.36.33 y 1.37.33."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.36.33",
            "matchCriteriaId" : "A4A5EDFC-FCEB-4982-A3D1-C95814646A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.37.00",
            "versionEndExcluding" : "1.37.33",
            "matchCriteriaId" : "B1AF3896-BC5B-4FB6-842D-29B621F987E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-h5m9-6jjc-cgmw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-h5m9-6jjc-cgmw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26037",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-25T02:15:13.770",
      "lastModified" : "2024-11-21T07:50:38.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an SQL Injection. The minTime and maxTime request parameters are not properly validated and could be used execute arbitrary SQL. This issue is fixed in versions 1.36.33 and 1.37.33."
      }, {
        "lang" : "es",
        "value" : "ZoneMinder es una aplicación de software de circuito cerrado de televisión de código abierto y gratuita para Linux que admite cámaras IP, USB y analógicas. Las versiones anteriores a la 1.36.33 y 1.37.33 contienen una inyección SQL. Los parámetros de solicitud minTime y maxTime no están validados correctamente y podrían usarse para ejecutar SQL arbitrario. Este problema se solucionó en las versiones 1.36.33 y 1.37.33."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.36.33",
            "matchCriteriaId" : "A4A5EDFC-FCEB-4982-A3D1-C95814646A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.37.00",
            "versionEndExcluding" : "1.37.33",
            "matchCriteriaId" : "B1AF3896-BC5B-4FB6-842D-29B621F987E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-65jp-2hj3-3733",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-65jp-2hj3-3733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26038",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-25T02:15:13.867",
      "lastModified" : "2024-11-21T07:50:38.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion (Untrusted Search Path) vulnerability via web/ajax/modal.php, where an arbitrary php file path can be passed in the request and loaded. This issue is patched in versions 1.36.33 and 1.37.33."
      }, {
        "lang" : "es",
        "value" : "ZoneMinder es una aplicación de software de circuito cerrado de televisión de código abierto y gratuita para Linux que admite cámaras IP, USB y analógicas. Las versiones anteriores a 1.36.33 y 1.37.33 contienen una vulnerabilidad de inclusión de archivos locales (ruta de búsqueda no confiable) a través de web/ajax/modal.php, donde se puede pasar una ruta de archivo php arbitraria en la solicitud y cargarla. Este problema se solucionó en las versiones 1.36.33 y 1.37.33."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.36.33",
            "matchCriteriaId" : "A4A5EDFC-FCEB-4982-A3D1-C95814646A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.37.00",
            "versionEndExcluding" : "1.37.33",
            "matchCriteriaId" : "B1AF3896-BC5B-4FB6-842D-29B621F987E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-wrx3-r8c4-r24w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-wrx3-r8c4-r24w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26039",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-25T02:15:13.957",
      "lastModified" : "2024-11-21T07:50:38.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an OS Command Injection via daemonControl() in (/web/api/app/Controller/HostController.php). Any authenticated user can construct an api command to execute any shell command as the web user. This issue is patched in versions 1.36.33 and 1.37.33."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.36.33",
            "matchCriteriaId" : "A4A5EDFC-FCEB-4982-A3D1-C95814646A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.37.00",
            "versionEndExcluding" : "1.37.33",
            "matchCriteriaId" : "B1AF3896-BC5B-4FB6-842D-29B621F987E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-44q8-h2pw-cc9g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-44q8-h2pw-cc9g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-25T04:15:10.057",
      "lastModified" : "2025-05-05T16:15:31.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between NTFS sector size and media sector size."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15",
            "versionEndExcluding" : "5.15.87",
            "matchCriteriaId" : "AF34DC7D-4D5D-4D9C-B1B4-FAE010E910F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.0.17",
            "matchCriteriaId" : "05B2AE8A-556C-47C1-9119-DBAC5EB60947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndExcluding" : "6.1.3",
            "matchCriteriaId" : "70594F60-3413-4969-AFD7-965266760EA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1208697",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=887bfc546097fbe8071dac13b2fef73b77920899",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lkml.org/lkml/2023/2/20/128",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0010/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1208697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=887bfc546097fbe8071dac13b2fef73b77920899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lkml.org/lkml/2023/2/20/128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-25T04:15:10.127",
      "lastModified" : "2025-06-25T20:54:48.233",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a new location) during the renaming of a device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "6.1.13",
            "matchCriteriaId" : "34E7B01C-B8DC-4B6E-B51E-A7DFD70FA1F4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.13",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fda6c89fe3d9aca073495a664e1d5aea28cd4377",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/fda6c89fe3d9aca073495a664e1d5aea28cd4377",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0009/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fda6c89fe3d9aca073495a664e1d5aea28cd4377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/fda6c89fe3d9aca073495a664e1d5aea28cd4377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26103",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-02-25T05:15:12.343",
      "lastModified" : "2025-03-11T16:15:14.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the upgradeWebSocket function, which contains regexes in the form of /s*,s*/, used for splitting the Connection/Upgrade header. A specially crafted Connection/Upgrade header can be used to significantly slow down a web socket server.\r\r"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.31.0",
            "matchCriteriaId" : "EFFBE1A2-4130-4E48-B807-89F14A2D0CE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/denoland/deno/blob/2b247be517d789a37e532849e2e40b724af0918f/ext/http/01_http.js%23L395-L409",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/denoland/deno/commit/cf06a7c7e672880e1b38598fe445e2c50b4a9d06",
        "source" : "report@snyk.io",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/denoland/deno/pull/17722",
        "source" : "report@snyk.io",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/denoland/deno/releases/tag/v1.31.0",
        "source" : "report@snyk.io",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-RUST-DENO-3315970",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/denoland/deno/blob/2b247be517d789a37e532849e2e40b724af0918f/ext/http/01_http.js%23L395-L409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/denoland/deno/commit/cf06a7c7e672880e1b38598fe445e2c50b4a9d06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/denoland/deno/pull/17722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/denoland/deno/releases/tag/v1.31.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-RUST-DENO-3315970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26104",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-02-25T05:15:12.487",
      "lastModified" : "2025-03-11T16:15:14.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the package lite-web-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters that the decodeURI() function is unable to parse."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lite-web-server_project:lite-web-server:-:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E54E58C0-C97D-4C62-BF6E-9D0ECC3A7A1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/lirantal/637520812da06fffb91dd86d02ff6bde",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chasyumen/lite-web-server/blob/main/src/WebServer.js%23L274",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-LITEWEBSERVER-3153703",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/lirantal/637520812da06fffb91dd86d02ff6bde",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chasyumen/lite-web-server/blob/main/src/WebServer.js%23L274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-LITEWEBSERVER-3153703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1035",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-25T08:15:10.297",
      "lastModified" : "2025-05-05T14:13:50.337",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as critical. Affected is an unknown function of the file update_user.php. The manipulation of the argument user_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221784."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:clinic\\'s_patient_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B79041F-F46A-46A6-927D-98ECD0A65838"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/clinics%20patient%20management%20system/clinics-patient-management-system%20vlun2.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221784",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221784",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/clinics%20patient%20management%20system/clinics-patient-management-system%20vlun2.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-25T20:15:11.057",
      "lastModified" : "2025-03-11T21:15:40.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bmc:control-m:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.20.214",
            "matchCriteriaId" : "E4CC0EEF-6FC2-4B13-BBE9-72C2AEDA8CD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synacktiv.com/sites/default/files/2023-02/Synacktiv-ControlM-Multiple-Vulnerabilities.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synacktiv.com/sites/default/files/2023-02/Synacktiv-ControlM-Multiple-Vulnerabilities.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-26T05:15:10.553",
      "lastModified" : "2024-11-21T07:50:45.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The frp_form_answers (aka Forms Export) extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappant:forms_export:*:*:*:*:*:typo3:*:*",
            "versionEndExcluding" : "3.1.2",
            "matchCriteriaId" : "B994FB86-531C-4AF4-8718-3A70AD68A113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frappant:forms_export:*:*:*:*:*:typo3:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.2",
            "matchCriteriaId" : "1460B252-09A9-44A9-9917-B56E90D06572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://typo3.org/help/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2023-002",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://typo3.org/help/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2023-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1036",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-26T12:15:10.540",
      "lastModified" : "2024-11-21T07:38:19.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221794 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dental_clinic_appointment_reservation_system_project:dental_clinic_appointment_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79E0DA8-2952-4A16-89B0-95559925659C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nightcloudos/bug_report/blob/main/vendors/jkev/Dental%20Clinic%20Appointment%20Reservation%20System/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221794",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221794",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/nightcloudos/bug_report/blob/main/vendors/jkev/Dental%20Clinic%20Appointment%20Reservation%20System/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1037",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-26T12:15:10.963",
      "lastModified" : "2024-11-21T07:38:20.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /APR/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221795."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dental_clinic_appointment_reservation_system_project:dental_clinic_appointment_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F79E0DA8-2952-4A16-89B0-95559925659C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nightcloudos/bug_report/blob/main/vendors/jkev/Dental%20Clinic%20Appointment%20Reservation%20System/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221795",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221795",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/nightcloudos/bug_report/blob/main/vendors/jkev/Dental%20Clinic%20Appointment%20Reservation%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1038",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-26T12:15:11.057",
      "lastModified" : "2024-11-21T07:38:20.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Online Reviewer Management System 1.0. Affected is an unknown function of the file /reviewer_0/admins/assessments/pretest/questions-view.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221796."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_reviewer_management_system_project:online_reviewer_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688727F8-4DD7-4256-9DC4-44572DF5D3F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/believeti/bug_report/blob/main/vendors/janobe/Online%20Reviewer%20Management%20System/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221796",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221796",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/believeti/bug_report/blob/main/vendors/janobe/Online%20Reviewer%20Management%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1039",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-26T12:15:11.140",
      "lastModified" : "2024-11-21T07:38:20.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the argument password leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221797 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:class_and_exam_timetabling_system_project:class_and_exam_timetabling_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72FA4CE4-980F-483A-B780-77FE00C0CD56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anquanclub/bug_report/blob/main/vendors/Cherylda%20Jardeliza%20Ohiman/Class%20and%20Exam%20Timetabling%20System/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221797",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221797",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/anquanclub/bug_report/blob/main/vendors/Cherylda%20Jardeliza%20Ohiman/Class%20and%20Exam%20Timetabling%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1040",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-26T12:15:11.217",
      "lastModified" : "2024-11-21T07:38:20.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file tracking/admin/add_acc.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-221798 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_graduate_tracer_system_project:online_graduate_tracer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9A6FC0-9440-489D-AD8D-3FF732389484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/129228718",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221798",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221798",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/129228718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1041",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-26T12:15:11.303",
      "lastModified" : "2026-02-18T18:24:48.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in SourceCodester Simple Responsive Tourism Website 1.0. This affects an unknown part of the file /tourism/rate_review.php. The manipulation of the argument id with the input 1\"><script>alert(1111)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221799."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_responsive_tourism_website:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3930D5-8A1D-4675-BA33-98CFAFC5FF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/verylazycat/bug_report/blob/main/vendors/oretnom23/Simple%20Responsive%20Tourism%20Website/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221799",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221799",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/verylazycat/bug_report/blob/main/vendors/oretnom23/Simple%20Responsive%20Tourism%20Website/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1042",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-26T13:15:10.433",
      "lastModified" : "2024-11-21T07:38:20.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Online Pet Shop We App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /pet_shop/admin/orders/update_status.php. The manipulation of the argument oid with the input 1\"><script>alert(1111)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221800."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pet_shop_we_app_project:online_pet_shop_we_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55AD129C-1298-41BA-8500-D9B677025B29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hujianjie123/bug_report/blob/main/vendors/oretnom23/Online%20Pet%20Shop%20We%20App/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221800",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221800",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hujianjie123/bug_report/blob/main/vendors/oretnom23/Online%20Pet%20Shop%20We%20App/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1043",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-26T13:15:10.523",
      "lastModified" : "2024-11-21T07:38:20.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in MuYuCMS 2.2. It has been classified as problematic. Affected is an unknown function of the file /editor/index.php. The manipulation of the argument dir_path leads to relative path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221802 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muyucms:muyucms:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E558AF9C-EBCD-4299-94C6-E32EC2D9C336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MuYuCMS/MuYuCMS/issues/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221802",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221802",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/MuYuCMS/MuYuCMS/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1044",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-26T13:15:10.610",
      "lastModified" : "2024-11-21T07:38:20.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in MuYuCMS 2.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /editor/index.php. The manipulation of the argument file_path leads to relative path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221803."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muyucms:muyucms:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E558AF9C-EBCD-4299-94C6-E32EC2D9C336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MuYuCMS/MuYuCMS/issues/5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221803",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221803",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/MuYuCMS/MuYuCMS/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1045",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-26T13:15:10.697",
      "lastModified" : "2024-11-21T07:38:21.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in MuYuCMS 2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin.php/accessory/filesdel.html. The manipulation of the argument filedelur leads to relative path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221804."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:P",
            "baseScore" : 4.7,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muyucms:muyucms:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E558AF9C-EBCD-4299-94C6-E32EC2D9C336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MuYuCMS/MuYuCMS/issues/6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221804",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221804",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/MuYuCMS/MuYuCMS/issues/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221804",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1046",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-26T13:15:10.797",
      "lastModified" : "2024-11-21T07:38:21.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in MuYuCMS 2.2. This affects an unknown part of the file /admin.php/update/getFile.html. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221805 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muyucms:muyucms:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E558AF9C-EBCD-4299-94C6-E32EC2D9C336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MuYuCMS/MuYuCMS/issues/7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221805",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221805",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/MuYuCMS/MuYuCMS/issues/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221805",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1047",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-26T13:15:10.880",
      "lastModified" : "2024-11-21T07:38:21.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in TechPowerUp RealTemp 3.7.0.0. This vulnerability affects unknown code in the library WinRing0x64.sys. The manipulation leads to improper initialization. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. VDB-221806 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techpowerup:realtemp:3.7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379F2E71-7013-46F5-AA87-2DCE665613A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1047",
        "source" : "cna@vuldb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221806",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221806",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1048",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-26T13:15:10.970",
      "lastModified" : "2024-11-21T07:38:21.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in TechPowerUp Ryzen DRAM Calculator 1.2.0.5. This issue affects some unknown processing in the library WinRing0x64.sys. The manipulation leads to improper initialization. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221807."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:techpowerup:dram_calculator_for_ryzen:1.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5EF573E-0F72-47F9-B4B5-273EA80F75B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1048",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221807",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221807",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26602",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-26T20:15:10.697",
      "lastModified" : "2024-11-21T07:51:50.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for NET-SNMP-EXTEND-MIB with /bin/sh for command execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.14.51",
            "matchCriteriaId" : "BCAA3760-8EF9-4648-BB97-7B9FFB002F22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171137/ASUS-ASMB8-iKVM-1.14.51-SNMP-Remote-Root.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Feb/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://nwsec.de/NWSSA-002-2023.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171137/ASUS-ASMB8-iKVM-1.14.51-SNMP-Remote-Root.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Feb/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://nwsec.de/NWSSA-002-2023.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26605",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-26T23:15:10.827",
      "lastModified" : "2025-05-05T16:15:31.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel 6.0.8, there is a use-after-free in inode_cgwb_move_to_attached in fs/fs-writeback.c, related to __list_del_entry_valid."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.75",
            "versionEndExcluding" : "5.15.81",
            "matchCriteriaId" : "C15A1592-2D11-489C-A208-5474834B2E80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.19.17",
            "versionEndExcluding" : "6.0.0",
            "matchCriteriaId" : "25175142-441A-4526-B1D9-18913C052F3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.3",
            "versionEndExcluding" : "6.0.11",
            "matchCriteriaId" : "73FC69CE-E4BD-4315-AC3C-42B1AD292E2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4e3c51f4e805291b057d12f5dda5aeb50a538dc4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lkml.org/lkml/2023/2/22/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0010/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4e3c51f4e805291b057d12f5dda5aeb50a538dc4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lkml.org/lkml/2023/2/22/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-26T23:15:10.883",
      "lastModified" : "2025-05-05T16:15:31.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel 6.0.8, there is a use-after-free in ntfs_trim_fs in fs/ntfs3/bitmap.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15",
            "versionEndExcluding" : "5.15.86",
            "matchCriteriaId" : "5200A423-605D-4010-B20B-9EEEB516EAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.0.16",
            "matchCriteriaId" : "C720A569-3D93-4D77-95F6-E2B3A3267D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndExcluding" : "6.1.2",
            "matchCriteriaId" : "77239F4B-6BB2-4B9E-A654-36A52396116C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=557d19675a470bb0a98beccec38c5dc3735c20fa",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lkml.org/lkml/2023/2/20/860",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0010/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=557d19675a470bb0a98beccec38c5dc3735c20fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lkml.org/lkml/2023/2/20/860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-26T23:15:10.947",
      "lastModified" : "2025-05-05T16:15:31.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.12",
            "versionEndExcluding" : "4.9.334",
            "matchCriteriaId" : "031BD5BC-9E38-498A-95A0-B6CA8ED82039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.300",
            "matchCriteriaId" : "424802D2-E9E7-48A9-AD6F-DF2227B3D83A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.267",
            "matchCriteriaId" : "A5C69A12-68E2-400E-9A5A-375A673C8402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.225",
            "matchCriteriaId" : "94D21814-3051-4860-AB06-C7880A3D4933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.10.156",
            "matchCriteriaId" : "24FDE7A3-F8EF-4339-A725-9F238448BCFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.80",
            "matchCriteriaId" : "51BBEF3B-79F5-4D4C-ADBA-F34DA0E2465C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.0.10",
            "matchCriteriaId" : "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27227B35-932A-4035-B39F-6A455753C0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489D20B9-166F-423D-8C48-A23D3026E33B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AD592C-222D-4C6F-B176-8145A1A5AFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8603654B-A8A9-4DEB-B0DD-C82E1C885749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C855C933-F271-45E6-8E85-8D7CF2EF1BE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1208703",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=36a4d82dddbbd421d2b8e79e1cab68c8126d5075",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lkml.org/lkml/2023/2/21/1353",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0010/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1208703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=36a4d82dddbbd421d2b8e79e1cab68c8126d5075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lkml.org/lkml/2023/2/21/1353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230316-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T02:16:06.680",
      "lastModified" : "2025-05-05T16:15:32.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abus:tvip_20000-21150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E74AD21-704C-4438-9ABA-5D1081BC5F17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abus:tvip_20000-21150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CBFDEE-3C20-4CBC-8B89-4DC12A9080A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171136/ABUS-Security-Camera-TVIP-20000-21150-LFI-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Feb/16",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://nwsec.de/NWSSA-001-2023.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171136/ABUS-Security-Camera-TVIP-20000-21150-LFI-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Feb/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://nwsec.de/NWSSA-001-2023.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T05:15:12.757",
      "lastModified" : "2024-11-21T07:50:59.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI) dlt-daemon through 2.18.8. Dynamic memory is not released after it is allocated in dlt-control-common.c."
      }, {
        "lang" : "es",
        "value" : "Se descubrió un problema en el daemon dlt de Connected Vehicle Systems Alliance (COVESA; anteriormente GENIVI) hasta la versión 2.18.8. La memoria dinámica no se libera después de asignarla en dlt-control-common.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:covesa:dlt-daemon:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.18.8",
            "matchCriteriaId" : "66004448-7EF2-4593-88DC-D85CB481BD06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/COVESA/dlt-daemon/issues/440",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/COVESA/dlt-daemon/pull/441/commits/b6149e203f919c899fefc702a17fbb78bdec3700",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00021.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/COVESA/dlt-daemon/issues/440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/COVESA/dlt-daemon/pull/441/commits/b6149e203f919c899fefc702a17fbb78bdec3700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22636",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-02-27T09:15:09.267",
      "lastModified" : "2024-11-21T07:45:05.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0 through 6.4.2 and 7.0.0 through 7.0.4 may allow a local attacker to access confidential configuration files via a crafted http request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.6",
            "versionEndIncluding" : "6.3.21",
            "matchCriteriaId" : "1015CCDD-15E5-4E64-8D0B-4BE77459FD8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndIncluding" : "6.4.2",
            "matchCriteriaId" : "F6B93ABE-8620-4253-83C0-3D2228D20118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.4",
            "matchCriteriaId" : "8A569BDB-622C-43C5-8CA9-6CF8DCBA055E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-460",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1053",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-27T11:15:11.023",
      "lastModified" : "2024-11-21T07:38:22.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Music Gallery Site 1.0 and classified as critical. This issue affects some unknown processing of the file view_category.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-221819."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:music_gallery_site_project:music_gallery_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560DB6F6-5EBB-460F-AF7A-BA43456DAC86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221819",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221819",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1054",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-27T11:15:11.173",
      "lastModified" : "2024-11-21T07:38:22.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=user/manage. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-221820."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:music_gallery_site_project:music_gallery_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560DB6F6-5EBB-460F-AF7A-BA43456DAC86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.221820",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221820",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1056",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-27T12:15:10.820",
      "lastModified" : "2024-11-21T07:38:22.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edoc/doctor/patient.php. The manipulation of the argument search12 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221821 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctors_appointment_system_project:doctors_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D080F4CA-E377-4642-8AB8-779DB6C86267"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20docker%20search.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221821",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221821",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20docker%20search.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1057",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-27T12:15:10.923",
      "lastModified" : "2024-11-21T07:38:22.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been rated as critical. Affected by this issue is the function edoc of the file login.php. The manipulation of the argument usermail leads to sql injection. VDB-221822 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctors_appointment_system_project:doctors_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D080F4CA-E377-4642-8AB8-779DB6C86267"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun1.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221822",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221822",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1058",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-27T12:15:11.013",
      "lastModified" : "2024-11-21T07:38:22.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Doctors Appointment System 1.0. This affects an unknown part of the file create-account.php. The manipulation of the argument newemail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221823."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctors_appointment_system_project:doctors_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D080F4CA-E377-4642-8AB8-779DB6C86267"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun2.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221823",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221823",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun2.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1059",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-27T12:15:11.103",
      "lastModified" : "2025-09-27T00:31:45.000",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/doctors.php of the component Parameter Handler. The manipulation of the argument search/id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctors_appointment_system_project:doctors_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D080F4CA-E377-4642-8AB8-779DB6C86267"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun3.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221824",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221824",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.95222",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun3.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1061",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-27T12:15:11.197",
      "lastModified" : "2025-09-27T00:32:04.817",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/edit-doc.php. The manipulation of the argument email/oldmail leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctors_appointment_system_project:doctors_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D080F4CA-E377-4642-8AB8-779DB6C86267"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun4.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221825",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221825",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?submit.95223",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun4.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.221825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1062",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-27T12:15:11.287",
      "lastModified" : "2024-11-21T07:38:23.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Doctors Appointment System 1.0. Affected is an unknown function of the file /admin/add-new.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221826 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctors_appointment_system_project:doctors_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D080F4CA-E377-4642-8AB8-779DB6C86267"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun5.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221826",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221826",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun5.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1063",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-27T12:15:11.377",
      "lastModified" : "2024-11-21T07:38:23.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Doctors Appointment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/patient.php of the component Parameter Handler. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221827."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctors_appointment_system_project:doctors_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D080F4CA-E377-4642-8AB8-779DB6C86267"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun6.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221827",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221827",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun6.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.221827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T13:15:10.367",
      "lastModified" : "2024-11-21T07:47:35.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:davinci_project:davinci:0.3.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "DD59B0B9-4295-4442-B22D-93823ED9406F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/edp963/davinci/issues/2320",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/edp963/davinci/issues/2320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1067",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-27T14:15:10.410",
      "lastModified" : "2024-11-21T07:38:23.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.18",
            "matchCriteriaId" : "C5062760-52C7-46A6-8252-9C6869A920AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/4b5733266d7d6aeb4f221a15e005db83fc198edf",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/31d17b34-f80d-49f2-86e7-97ae715cc045",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/4b5733266d7d6aeb4f221a15e005db83fc198edf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/31d17b34-f80d-49f2-86e7-97ae715cc045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1068",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-27T14:15:10.497",
      "lastModified" : "2026-04-08T17:16:50.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Download Read More Excerpt Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.0. This is due to missing or incorrect nonce validation on the read_more_excerpt_link_menu_options() function. This makes it possible for unauthenticated attackers to update he plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:read_more_excerpt_link_project:read_more_excerpt_link:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "603532AE-769A-4B06-853B-52E0BBE9D3C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2871098/read-more-excerpt-link/trunk/read-more-excerpt-link.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/0359434b-9d88-4a40-8e9f-ec354c8de816?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2871098/read-more-excerpt-link/trunk/read-more-excerpt-link.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/0359434b-9d88-4a40-8e9f-ec354c8de816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T14:15:10.613",
      "lastModified" : "2024-11-21T07:45:50.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS<=V2209020908."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:it7-lcs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2209020914",
            "matchCriteriaId" : "8E5742BF-D47F-4DA5-9BCC-F0D52DCDE006"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:it7-lcs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F80CFE9-86E6-4CD0-8FD2-C30BBCB167D3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:it7-pcs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2209020914",
            "matchCriteriaId" : "3D5BC1F0-34D6-47EE-BAA0-3169B38B266A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:it7-pcs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D64B36F5-F25C-488D-AC93-D41EE9385308"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:it7-prs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2209020908",
            "matchCriteriaId" : "F736E2FD-DCFF-4185-A100-5F1384588751"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:it7-prs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E454A2B7-511E-48C2-9799-52C69064D844"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:cp3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20220906024_2025",
            "matchCriteriaId" : "F2AD549B-15EF-4542-AC06-F9F13E967B56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:cp3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FD7FFD-98DF-46EC-B95C-7B12C172453C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:cp7_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.00.2211041403",
            "matchCriteriaId" : "2E94CFF8-CDB8-4BBD-ACE2-70926E408196"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:cp7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF52C97-2A9F-45CA-A258-827B8DA08B26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fxc233/iot-vul/tree/main/Tenda/IPC",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fxc233/iot-vul/tree/main/Tenda/IPC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T14:15:10.670",
      "lastModified" : "2024-11-21T07:45:51.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crasm_project:crasm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11",
            "matchCriteriaId" : "422CDCD7-C28C-40E8-9B0C-542A189395F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WhatTheFuzz/crasm-fuzz/tree/a020ad6ad99a72ca373f7dd1aab3a61a7c87fd66/bug-null-pointer",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/colinbourassa/crasm/pull/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/WhatTheFuzz/crasm-fuzz/tree/a020ad6ad99a72ca373f7dd1aab3a61a7c87fd66/bug-null-pointer",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/colinbourassa/crasm/pull/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T14:15:10.727",
      "lastModified" : "2024-11-21T07:45:51.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crasm_project:crasm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11",
            "matchCriteriaId" : "422CDCD7-C28C-40E8-9B0C-542A189395F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WhatTheFuzz/crasm-fuzz/tree/a020ad6ad99a72ca373f7dd1aab3a61a7c87fd66/bug-floating-point-exception",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/colinbourassa/crasm/pull/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/WhatTheFuzz/crasm-fuzz/tree/a020ad6ad99a72ca373f7dd1aab3a61a7c87fd66/bug-floating-point-exception",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/colinbourassa/crasm/pull/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22860",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-02-27T15:15:11.663",
      "lastModified" : "2024-11-21T07:45:32.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  244100."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:18.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D419EF8-4D41-4FBE-A41B-9F9EAF7F72EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:18.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A70646-ADD3-4CF7-A591-8BE96FBEF5A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:19.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6CB2C4-800F-487A-B0E5-8A0A9718549D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:19.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2C6F84-C83F-4AE1-B0A7-740568F52C04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:20.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8A641D-B7AB-41FA-AFDB-2C8EBDA6A1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:20.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C5B7FA4-A27C-40CA-AA53-183909D18C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7E2601-47E6-4111-9DE0-C3C01705884A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_001:*:*:*:*:*:*",
            "matchCriteriaId" : "AECC2FB4-0D29-45DB-AB55-B6C6C6A8BB2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_002:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F5E495-92A5-419D-884B-C82D6AA5B56B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_003:*:*:*:*:*:*",
            "matchCriteriaId" : "508939AF-58FC-4E12-B4E2-B11865B603F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_004:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B419DE-4597-4A33-861D-5530BDA9E679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_005:*:*:*:*:*:*",
            "matchCriteriaId" : "00EE653A-0EAD-489B-9610-6BEE3295AAEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_006:*:*:*:*:*:*",
            "matchCriteriaId" : "06B644E7-7EB2-4AB6-9D30-EA0602373FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_007:*:*:*:*:*:*",
            "matchCriteriaId" : "838846CB-8436-40D1-9C3B-FBA2426351E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BA799229-3577-409F-BFCC-0ABA541EA710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_001:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB47B7D-C408-4ED1-9D98-8BF77FFEF8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_0012:*:*:*:*:*:*",
            "matchCriteriaId" : "02D22CC4-3541-4BAA-8B45-FEB41F2E1697"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_002:*:*:*:*:*:*",
            "matchCriteriaId" : "E8859A71-36FD-4E83-B8C6-BEEF772AB084"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_003:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEF9352-EDCB-4D16-B3F9-11962D3E9F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_004:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C8892F-A803-4E3F-8992-5011B2E73C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_005:*:*:*:*:*:*",
            "matchCriteriaId" : "4890680E-8D82-46DB-9346-3C26D8C9F7A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_006:*:*:*:*:*:*",
            "matchCriteriaId" : "4F11DDE3-29C4-4CC4-AF73-DF7CCC73D5FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_007:*:*:*:*:*:*",
            "matchCriteriaId" : "358590C1-6CAF-4FA7-9975-C9DD41242B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_008:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2A88F1-55B3-43A9-8051-71C467A6712F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_009:*:*:*:*:*:*",
            "matchCriteriaId" : "E06C0789-2CC4-4D57-87D0-C0FAB9DB1B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_010:*:*:*:*:*:*",
            "matchCriteriaId" : "3B207F2D-B5F2-4B0C-863A-AD1620633A23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_011:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3468FC-CB4C-4EFE-A1ED-46F780ABB703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_012:*:*:*:*:*:*",
            "matchCriteriaId" : "D26A78C9-525C-43B3-88FF-9A6AC62A6C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8D6EB68-3804-494D-B12A-2E96E31D1B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_001:*:*:*:*:*:*",
            "matchCriteriaId" : "21D8DE68-5651-4068-B978-79B28F2DC5D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_002:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEA972A-A41E-44C9-8D35-1A991D3384B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_003:*:*:*:*:*:*",
            "matchCriteriaId" : "D3009F4E-7157-43D3-B6A0-2531CDE619BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_004:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA97C23-9B80-4956-9873-317902A0D804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_005:*:*:*:*:*:*",
            "matchCriteriaId" : "1D0B6203-C775-4C5E-BAE9-C956E718F261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_006:*:*:*:*:*:*",
            "matchCriteriaId" : "257A7A17-7EDF-4E23-88A6-216BC29EC467"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_007:*:*:*:*:*:*",
            "matchCriteriaId" : "26FF217B-1BD4-46E5-8023-2B2989FF7868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_008:*:*:*:*:*:*",
            "matchCriteriaId" : "C60E58EA-C4D5-4D4D-8C9B-3EC33A7027E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_009:*:*:*:*:*:*",
            "matchCriteriaId" : "7817670E-5649-42A9-B5F9-7586D7AEB4CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_010:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7F85E8-8185-418A-B25F-8E64A58177DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_011:*:*:*:*:*:*",
            "matchCriteriaId" : "37616DCD-C26C-44EA-AA7F-732DC128FFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_012:*:*:*:*:*:*",
            "matchCriteriaId" : "26CAC076-6FED-49E2-BF33-230F1D1195F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_013:*:*:*:*:*:*",
            "matchCriteriaId" : "5A88C56C-22CC-4791-BB33-C1494E7F41EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_014:*:*:*:*:*:*",
            "matchCriteriaId" : "12652B2E-307E-4568-920B-A869914ED650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_015:*:*:*:*:*:*",
            "matchCriteriaId" : "8F4E242F-BDF4-4CFE-B808-4A4B7A6FAD0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_016:*:*:*:*:*:*",
            "matchCriteriaId" : "88E736CF-CA6E-400B-9AE3-2C58D2265752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_017:*:*:*:*:*:*",
            "matchCriteriaId" : "02488B2F-8D6E-4BDC-8DA9-45F5EBC42049"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F22E2017-86A6-4CD1-8192-7A5DF0A1D818"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.1:interim_fix_001:*:*:*:*:*:*",
            "matchCriteriaId" : "31BC7CBD-C728-481C-AC5F-110FD7799B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.1:interim_fix_002:*:*:*:*:*:*",
            "matchCriteriaId" : "49793CE0-A419-4937-89B4-B6A8F0E22C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.1:interim_fix_003:*:*:*:*:*:*",
            "matchCriteriaId" : "E7ABFE27-D890-4AF4-8686-296F4DB90F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.1:interim_fix_004:*:*:*:*:*:*",
            "matchCriteriaId" : "BE746B2B-EECA-4332-9A24-8EF23BDA1B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.1:interim_fix_005:*:*:*:*:*:*",
            "matchCriteriaId" : "CEE539C9-6AF2-4B02-8916-2AC7D4A93C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.1:interim_fix_006:*:*:*:*:*:*",
            "matchCriteriaId" : "72743164-5279-4FB6-86EE-EBE5B8CD6D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "517C5EDE-5104-4E22-B9C6-64DFBA7650C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.2:interim_fix_001:*:*:*:*:*:*",
            "matchCriteriaId" : "7A81368D-744B-4886-96C7-1755A27C0AAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244100",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6958062",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6958062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26042",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-27T15:15:11.753",
      "lastModified" : "2024-11-21T07:50:38.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Part-DB is an open source inventory management system for your electronic components. User input was found not being properly escaped, which allowed malicious users to inject arbitrary HTML into the pages. The Content-Security-Policy forbids inline and external scripts so it is not possible to execute JavaScript code, unless in combination with other vulnerabilities. There are no workarounds, please upgrade to Pat-DB 1.0.2 or later."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:part-db_project:part-db:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.0.2",
            "matchCriteriaId" : "CFE67675-403E-49C9-99BE-E3B4B8BA3C18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Part-DB/Part-DB-server/commit/5b7f44f4eaacad8a79bcedec32780e00d7347099",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Part-DB/Part-DB-server/pull/227",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Part-DB/Part-DB-server/releases/tag/v1.0.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Part-DB/Part-DB-server/security/advisories/GHSA-9pmh-gmxx-rg2x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Part-DB/Part-DB-server/commit/5b7f44f4eaacad8a79bcedec32780e00d7347099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Part-DB/Part-DB-server/pull/227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Part-DB/Part-DB-server/releases/tag/v1.0.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Part-DB/Part-DB-server/security/advisories/GHSA-9pmh-gmxx-rg2x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27263",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2023-02-27T15:15:11.837",
      "lastModified" : "2024-11-21T07:52:33.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permissions check in the /plugins/playbooks/api/v0/runs API in Mattermost allows an attacker to list and view playbooks belonging to a team they are not a member of.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.4",
            "matchCriteriaId" : "32157EFB-F319-43F9-88DD-7F3A7CFEAC2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAC1D9A-3DE8-4F30-BBDA-903265E25846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13054F6-D88D-4700-8DD6-6C4E42CCEAB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost:7.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F45729-4F50-47C6-BBA0-26EA5F699846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27264",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2023-02-27T15:15:11.927",
      "lastModified" : "2024-11-21T07:52:33.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permissions check in Mattermost Playbooks in Mattermost allows an attacker to modify a playbook via the /plugins/playbooks/api/v0/playbooks/[playbookID] API.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.1.4",
            "matchCriteriaId" : "32157EFB-F319-43F9-88DD-7F3A7CFEAC2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CAC1D9A-3DE8-4F30-BBDA-903265E25846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13054F6-D88D-4700-8DD6-6C4E42CCEAB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost:7.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F45729-4F50-47C6-BBA0-26EA5F699846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27265",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2023-02-27T15:15:11.997",
      "lastModified" : "2024-11-21T07:52:33.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mattermost fails to honor the ShowEmailAddress setting when constructing a response to the \"Regenerate Invite Id\" API endpoint, allowing an attacker with team admin privileges to learn the team owner's email address in the response.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.12.0",
            "versionEndExcluding" : "7.7.0",
            "matchCriteriaId" : "B5905FB2-E275-4956-B1A0-46346378A795"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27266",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2023-02-27T15:15:12.067",
      "lastModified" : "2024-11-21T07:52:33.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mattermost fails to honor the ShowEmailAddress setting when constructing a response to the /api/v4/users/me/teams  API endpoint, allowing an attacker with team admin privileges to learn the team owner's email address in the response.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.12.0",
            "versionEndExcluding" : "7.7.0",
            "matchCriteriaId" : "B5905FB2-E275-4956-B1A0-46346378A795"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0043",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-27T16:15:11.580",
      "lastModified" : "2025-03-10T19:15:36.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Custom Add User WordPress plugin through 2.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:add_user_project:add_user:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "1201984C-89BD-41C5-9957-6E90EE975002"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e012f23a-7daf-4ef3-b116-d0e2ed5bd0a3",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e012f23a-7daf-4ef3-b116-d0e2ed5bd0a3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0168",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-27T16:15:11.657",
      "lastModified" : "2025-03-18T15:15:42.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Olevmedia Shortcodes WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olevmedia:olevmedia_shortcodes:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.9",
            "matchCriteriaId" : "A0A7AF9F-66A4-441A-8F81-CD7BB7F381A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e854efee-16fc-4379-9e66-d2883e01fb32",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e854efee-16fc-4379-9e66-d2883e01fb32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0230",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-27T16:15:11.730",
      "lastModified" : "2025-03-10T18:15:25.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VK All in One Expansion Unit WordPress plugin before 9.86.0.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vektor-inc:vk_all_in_one_expansion_unit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.86.0.0",
            "matchCriteriaId" : "6686F102-4A07-4DCF-89D3-AA1AF9A02327"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/a4ad73b2-6a70-48ff-bf4c-28f81b193748",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/a4ad73b2-6a70-48ff-bf4c-28f81b193748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0278",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-27T16:15:11.807",
      "lastModified" : "2025-03-10T19:15:36.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GeoDirectory WordPress plugin before 2.2.24 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpgeodirectory:geodirectory:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.24",
            "matchCriteriaId" : "D0602284-2A67-4078-9AB4-9D02FF5682B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bulletin.iese.de/post/geodirectory_2-2-21",
        "source" : "contact@wpscan.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/98deb84e-01ca-4b70-a8f8-0a226daa85a6",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bulletin.iese.de/post/geodirectory_2-2-21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/98deb84e-01ca-4b70-a8f8-0a226daa85a6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0279",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-27T16:15:11.883",
      "lastModified" : "2025-03-10T19:15:37.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Media Library Assistant WordPress plugin before 3.06 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:media_library_assistant_project:media_library_assistant:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.06",
            "matchCriteriaId" : "DB564683-0E96-48EA-B71C-62BF09C5D197"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bulletin.iese.de/post/media-library-assistant_3-05_1",
        "source" : "contact@wpscan.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/42db1ba5-1b14-41bd-a2b3-7243a84c9d3d",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bulletin.iese.de/post/media-library-assistant_3-05_1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/42db1ba5-1b14-41bd-a2b3-7243a84c9d3d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0331",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-27T16:15:11.967",
      "lastModified" : "2025-03-10T19:15:37.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Correos Oficial WordPress plugin through 1.2.0.2 does not have an authorization check user input validation when generating a file path, allowing unauthenticated attackers to download arbitrary files from the server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:correos:correos_oficial:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.0.2",
            "matchCriteriaId" : "7EBEBB1A-84AF-4093-A5F3-E4B74C157779"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/1b4dbaf3-1364-4103-9a7b-b5a1355c685b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/1b4dbaf3-1364-4103-9a7b-b5a1355c685b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0334",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-27T16:15:12.047",
      "lastModified" : "2025-03-10T18:15:25.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ShortPixel Adaptive Images WordPress plugin before 3.6.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against any high privilege users such as admin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shortpixel:shortpixel_adaptive_images:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.6.3",
            "matchCriteriaId" : "54307660-2CCC-4A9F-943E-4D22C47FF3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/b027a8db-0fd6-444d-b14a-0ae58f04f931",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/b027a8db-0fd6-444d-b14a-0ae58f04f931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0381",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-27T16:15:12.123",
      "lastModified" : "2025-03-18T15:15:42.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tri:gigpress:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.3.28",
            "matchCriteriaId" : "90FFA53D-4BEF-451B-99F7-B8DBB68F6C3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/39c964fa-6d8d-404d-ac38-72f6f88d203c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/39c964fa-6d8d-404d-ac38-72f6f88d203c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0487",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-27T16:15:12.227",
      "lastModified" : "2025-03-10T14:15:22.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The My Sticky Elements WordPress plugin before 2.0.9 does not properly sanitise and escape a parameter before using it in a SQL statement when deleting messages, leading to a SQL injection exploitable by high privilege users such as admin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:premio:my_sticky_elements:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "BC3DCD1C-6E00-4937-BB19-6063387DC6CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/0e874a1d-c866-45fa-b456-c8012dca32af",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/0e874a1d-c866-45fa-b456-c8012dca32af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0535",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-27T16:15:12.313",
      "lastModified" : "2025-03-10T19:15:37.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Donation Block For PayPal WordPress plugin before 2.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:donation_block_for_paypal_project:donation_block_for_paypal:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "08F1A729-FC6A-4095-A9B9-8AC2B3BE6462"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/8c50321a-dba8-4379-9b9c-4c349e44b2ed",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8c50321a-dba8-4379-9b9c-4c349e44b2ed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0539",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-27T16:15:12.383",
      "lastModified" : "2024-11-21T07:37:22.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GS Insever Portfolio WordPress plugin before 1.4.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gsplugins:gs_insever_portfolio:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.5",
            "matchCriteriaId" : "C4161C1D-8733-48F9-A823-D4AA86F73C46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/a4b6a83a-6394-4dfc-8bb3-4982867dab7d",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/a4b6a83a-6394-4dfc-8bb3-4982867dab7d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0543",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-27T16:15:12.457",
      "lastModified" : "2025-03-11T20:15:14.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Arigato Autoresponder and Newsletter WordPress plugin before 2.1.7.2 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kibokolabs:arigato_autoresponder_and_newsletter:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.7.2",
            "matchCriteriaId" : "AF7D10E2-882C-476D-8C82-73AE438D1D7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e3771938-40b5-4e8b-bb5a-847131a2b4a7",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e3771938-40b5-4e8b-bb5a-847131a2b4a7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0548",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-27T16:15:12.537",
      "lastModified" : "2025-03-10T18:15:26.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Namaste! LMS WordPress plugin before 2.5.9.4 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kibokolabs:namaste\\!_lms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.5.9.4",
            "matchCriteriaId" : "B014077D-2C9A-462F-96E7-0C0D2E499F45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/b6c1ed7a-5b2d-4985-847d-56586b1aae9b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/b6c1ed7a-5b2d-4985-847d-56586b1aae9b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0552",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-02-27T16:15:12.610",
      "lastModified" : "2025-03-18T15:15:43.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Registration Forms WordPress plugin before 3.8.2.3 does not properly validate the redirection URL when logging in and login out, leading to an Open Redirect vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genetechsolutions:pie_register:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.8.2.3",
            "matchCriteriaId" : "007A99F3-2A38-4CD0-A1FF-4812B97861F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/832c6155-a413-4641-849c-b98ba55e8551",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/832c6155-a413-4641-849c-b98ba55e8551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1070",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-27T16:15:12.697",
      "lastModified" : "2024-11-21T07:38:24.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.22",
            "matchCriteriaId" : "C5B67102-2E2A-4A47-B6E7-9830A17463BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nilsteampassnet/teampass/commit/0af3574caba27a61b16dc25c94fa51ae12d2d967",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/318bfdc4-7782-4979-956f-9ba2cc44889c",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/teampass/commit/0af3574caba27a61b16dc25c94fa51ae12d2d967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/318bfdc4-7782-4979-956f-9ba2cc44889c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:12.797",
      "lastModified" : "2024-11-21T07:45:54.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the username parameter in the Admin Login."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:art_gallery_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7F7EC5-D077-4052-9013-D37C2F794796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/y0gesh-verma/3de9b3e3f0d2b63c07e6704e232d9620",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/y0gesh-verma/3de9b3e3f0d2b63c07e6704e232d9620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:12.860",
      "lastModified" : "2024-11-21T07:45:54.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:art_gallery_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7F7EC5-D077-4052-9013-D37C2F794796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/y0gesh-verma/3de9b3e3f0d2b63c07e6704e232d9620",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/y0gesh-verma/3de9b3e3f0d2b63c07e6704e232d9620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:12.917",
      "lastModified" : "2024-11-21T07:45:54.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullname parameter on the enquiry page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:art_gallery_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7F7EC5-D077-4052-9013-D37C2F794796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-23157/CVE-2023-23157.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-23157/CVE-2023-23157.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:12.973",
      "lastModified" : "2024-11-21T07:45:54.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the message parameter on the enquiry page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:art_gallery_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7F7EC5-D077-4052-9013-D37C2F794796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-23158/CVE-2023-23158.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-23158/CVE-2023-23158.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.030",
      "lastModified" : "2024-11-21T07:47:37.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WangEditor v5 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /dist/index.js."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wangeditor:wangeditor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "5F700485-A98B-4B79-A634-BC4F83E17B32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Cutegod/CMS_0_day/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Cutegod/CMS_0_day/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.087",
      "lastModified" : "2025-06-27T19:05:16.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter under the Admin Panel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_customer_relationship_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1110BA8-AEB2-410C-983F-6EFEBECC8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.150",
      "lastModified" : "2025-06-27T19:05:16.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter on the registration page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_customer_relationship_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1110BA8-AEB2-410C-983F-6EFEBECC8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-24651/CVE-2023-24651.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-24651/CVE-2023-24651.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.210",
      "lastModified" : "2025-06-27T19:05:16.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the Description parameter under the Create ticket function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_customer_relationship_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1110BA8-AEB2-410C-983F-6EFEBECC8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.273",
      "lastModified" : "2025-06-27T19:05:16.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldpass parameter under the Change Password function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_customer_relationship_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1110BA8-AEB2-410C-983F-6EFEBECC8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.330",
      "lastModified" : "2025-06-27T19:05:16.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Request a Quote function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_customer_relationship_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1110BA8-AEB2-410C-983F-6EFEBECC8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24656",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.390",
      "lastModified" : "2025-06-27T19:05:16.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the subject parameter under the Create Ticket function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_customer_relationship_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1110BA8-AEB2-410C-983F-6EFEBECC8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.453",
      "lastModified" : "2025-03-10T18:15:27.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda Router W30E V1.0.1.25(633) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w30e_firmware:v1.0.1.25\\(633\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5035E7-593E-4891-8536-B1768D263A02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w30e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02FBE634-0D3F-4439-B4A6-F427C82967C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/104",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.513",
      "lastModified" : "2025-03-10T14:15:23.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac500_firmware:2.0.1.9\\(1307\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0EEFAB-B3B0-4C10-A712-7A35F5FD076E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64192A8B-CC65-44EC-942B-CC16AADF0D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/113",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.577",
      "lastModified" : "2025-03-10T18:15:27.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInterface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac500_firmware:2.0.1.9\\(1307\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0EEFAB-B3B0-4C10-A712-7A35F5FD076E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64192A8B-CC65-44EC-942B-CC16AADF0D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/113_1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/113_1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.637",
      "lastModified" : "2025-03-10T18:15:28.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function formOneSsidCfgSet via parameter ssid."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac500_firmware:2.0.1.9\\(1307\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0EEFAB-B3B0-4C10-A712-7A35F5FD076E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64192A8B-CC65-44EC-942B-CC16AADF0D69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/113_2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/113_2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.700",
      "lastModified" : "2025-03-10T18:15:28.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /ResourceService."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smeup:erp:tokyo_v6r1m220406:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480899F6-581D-4DD7-BABA-6C9D084E3350"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.swascan.com/it/security-advisory-sme-up-erp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.swascan.com/it/security-advisory-sme-up-erp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.760",
      "lastModified" : "2024-11-21T07:51:54.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMService component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smeup:erp:tokyo_v6r1m220406:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480899F6-581D-4DD7-BABA-6C9D084E3350"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.swascan.com/it/security-advisory-sme-up-erp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.swascan.com/it/security-advisory-sme-up-erp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.817",
      "lastModified" : "2024-11-21T07:51:54.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability allows attackers to access cleartext credentials needed to authenticate to the AS400 system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smeup:erp:tokyo_v6r1m220406:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480899F6-581D-4DD7-BABA-6C9D084E3350"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.swascan.com/it/security-advisory-sme-up-erp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.swascan.com/it/security-advisory-sme-up-erp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T16:15:13.877",
      "lastModified" : "2024-11-21T07:51:54.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smeup:erp:tokyo_v6r1m220406:*:*:*:*:*:*:*",
            "matchCriteriaId" : "480899F6-581D-4DD7-BABA-6C9D084E3350"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.swascan.com/it/security-advisory-sme-up-erp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.swascan.com/it/security-advisory-sme-up-erp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T19:15:11.307",
      "lastModified" : "2024-11-21T07:47:37.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de carga de archivos arbitrarios en laravel-admin v1.8.19 permite a los atacantes ejecutar código arbitrario a través de un archivo PHP manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:laravel-admin:laravel-admin:1.8.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1332193-4DB2-491B-8A96-762E669C0207"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://flyd.uk/post/cve-2023-24249/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z-song/laravel-admin",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://laravel-admin.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://flyd.uk/post/cve-2023-24249/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z-song/laravel-admin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://laravel-admin.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T19:15:11.367",
      "lastModified" : "2024-11-21T07:47:38.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Domotica Labs srl Ikon Server before v2.8.6 was discovered to contain a SQL injection vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se descubrió que Domotica Labs srl Ikon Server anterior a v2.8.6 contiene una vulnerabilidad de inyección SQL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:domoticalabs:ikon_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.6",
            "matchCriteriaId" : "6228E2DA-3364-4137-B4DA-978F06660A17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.swascan.com/it/security-advisory-domotica-labs-ikon-server/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.swascan.com/it/security-advisory-domotica-labs-ikon-server/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23493",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:13.090",
      "lastModified" : "2024-11-21T07:46:17.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without prompting for the password."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.6.3",
            "matchCriteriaId" : "C71359B9-7DCE-4F45-B03F-77CF313A74EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23496",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:13.157",
      "lastModified" : "2025-03-11T14:15:18.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS 15.7.2 and iPadOS 15.7.2, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "99403ED1-F1EB-4E71-8937-DC09A226D520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "4FAC57E1-C456-4770-815E-DDD7A3621DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "3710A47F-64BC-443A-8E80-F8116A01BD5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "362E766C-05AD-4205-85FA-F388DDF5DD1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "51F6EA1D-B654-455F-AB85-2E3C486F0C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "870BF5F9-6408-4EB6-8821-1881E66B003B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213531",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213600",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213638",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/en-us/HT213531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23497",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:13.220",
      "lastModified" : "2025-03-11T14:15:18.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. An app may be able to gain root privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.7.3",
            "matchCriteriaId" : "4D13504E-ABCF-4E6F-8984-EADB123DFDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.6.3",
            "matchCriteriaId" : "C71359B9-7DCE-4F45-B03F-77CF313A74EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213603",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23498",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:13.287",
      "lastModified" : "2024-11-21T07:46:18.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.3 and iPadOS 15.7.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. The quoted original message may be selected from the wrong email when forwarding an email from an Exchange account."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.3",
            "matchCriteriaId" : "25571006-94E5-43C8-849C-600C7E5CE329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "84A6CE41-699B-4511-8B52-625F271CA9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.3",
            "matchCriteriaId" : "6EB34B65-AC55-488B-8D12-F2E6FBCC284A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "08EA5BA7-5C1B-43E5-8988-22C33DAAE754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213598",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23499",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:13.353",
      "lastModified" : "2025-03-11T14:15:18.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may be able to access user-sensitive data."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "4FAC57E1-C456-4770-815E-DDD7A3621DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "3710A47F-64BC-443A-8E80-F8116A01BD5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.7.3",
            "matchCriteriaId" : "4D13504E-ABCF-4E6F-8984-EADB123DFDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.6.3",
            "matchCriteriaId" : "C71359B9-7DCE-4F45-B03F-77CF313A74EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "51F6EA1D-B654-455F-AB85-2E3C486F0C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "870BF5F9-6408-4EB6-8821-1881E66B003B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213603",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23500",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:13.423",
      "lastModified" : "2025-03-11T14:15:19.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, watchOS 9.3. An app may be able to leak sensitive kernel state."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.3",
            "matchCriteriaId" : "25571006-94E5-43C8-849C-600C7E5CE329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "84A6CE41-699B-4511-8B52-625F271CA9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.3",
            "matchCriteriaId" : "6EB34B65-AC55-488B-8D12-F2E6FBCC284A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "08EA5BA7-5C1B-43E5-8988-22C33DAAE754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "51F6EA1D-B654-455F-AB85-2E3C486F0C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "870BF5F9-6408-4EB6-8821-1881E66B003B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213598",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23501",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:13.497",
      "lastModified" : "2024-11-21T07:46:18.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling This issue is fixed in macOS Ventura 13.2. An app may be able to disclose kernel memory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "362E766C-05AD-4205-85FA-F388DDF5DD1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23502",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:13.553",
      "lastModified" : "2025-03-12T14:15:14.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to determine kernel memory layout."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "4FAC57E1-C456-4770-815E-DDD7A3621DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "3710A47F-64BC-443A-8E80-F8116A01BD5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.6.3",
            "matchCriteriaId" : "C71359B9-7DCE-4F45-B03F-77CF313A74EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "51F6EA1D-B654-455F-AB85-2E3C486F0C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "870BF5F9-6408-4EB6-8821-1881E66B003B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23503",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:13.617",
      "lastModified" : "2025-03-12T14:15:14.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, watchOS 9.3. An app may be able to bypass Privacy preferences."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.3",
            "matchCriteriaId" : "25571006-94E5-43C8-849C-600C7E5CE329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "84A6CE41-699B-4511-8B52-625F271CA9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.3",
            "matchCriteriaId" : "6EB34B65-AC55-488B-8D12-F2E6FBCC284A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "08EA5BA7-5C1B-43E5-8988-22C33DAAE754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "362E766C-05AD-4205-85FA-F388DDF5DD1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "51F6EA1D-B654-455F-AB85-2E3C486F0C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "870BF5F9-6408-4EB6-8821-1881E66B003B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213598",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23504",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:13.677",
      "lastModified" : "2025-03-11T18:15:28.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code with kernel privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.3",
            "matchCriteriaId" : "25571006-94E5-43C8-849C-600C7E5CE329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "84A6CE41-699B-4511-8B52-625F271CA9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.3",
            "matchCriteriaId" : "6EB34B65-AC55-488B-8D12-F2E6FBCC284A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "08EA5BA7-5C1B-43E5-8988-22C33DAAE754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.6.3",
            "matchCriteriaId" : "C71359B9-7DCE-4F45-B03F-77CF313A74EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "51F6EA1D-B654-455F-AB85-2E3C486F0C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "870BF5F9-6408-4EB6-8821-1881E66B003B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213598",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23505",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:13.750",
      "lastModified" : "2025-03-11T18:15:28.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, iOS 15.7.3 and iPadOS 15.7.3, iOS 16.3 and iPadOS 16.3. An app may be able to access information about a user’s contacts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.3",
            "matchCriteriaId" : "25571006-94E5-43C8-849C-600C7E5CE329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "84A6CE41-699B-4511-8B52-625F271CA9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.3",
            "matchCriteriaId" : "6EB34B65-AC55-488B-8D12-F2E6FBCC284A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "08EA5BA7-5C1B-43E5-8988-22C33DAAE754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.7.3",
            "matchCriteriaId" : "4D13504E-ABCF-4E6F-8984-EADB123DFDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.6.3",
            "matchCriteriaId" : "C71359B9-7DCE-4F45-B03F-77CF313A74EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "870BF5F9-6408-4EB6-8821-1881E66B003B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213598",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213603",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23506",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:13.817",
      "lastModified" : "2025-03-11T18:15:28.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be able to access user-sensitive data."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "362E766C-05AD-4205-85FA-F388DDF5DD1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23507",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:13.880",
      "lastModified" : "2025-03-11T16:15:12.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2. An app may be able to execute arbitrary code with kernel privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.6.3",
            "matchCriteriaId" : "C71359B9-7DCE-4F45-B03F-77CF313A74EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23508",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:13.940",
      "lastModified" : "2025-03-11T16:15:12.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. An app may be able to bypass Privacy preferences."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.7.3",
            "matchCriteriaId" : "4D13504E-ABCF-4E6F-8984-EADB123DFDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.6.3",
            "matchCriteriaId" : "C71359B9-7DCE-4F45-B03F-77CF313A74EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213603",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23510",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:14.010",
      "lastModified" : "2025-03-11T16:15:13.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be able to access a user’s Safari history."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "362E766C-05AD-4205-85FA-F388DDF5DD1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23511",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:14.073",
      "lastModified" : "2025-03-11T04:15:20.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to bypass Privacy preferences."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "4FAC57E1-C456-4770-815E-DDD7A3621DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "3710A47F-64BC-443A-8E80-F8116A01BD5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.6.3",
            "matchCriteriaId" : "C71359B9-7DCE-4F45-B03F-77CF313A74EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "51F6EA1D-B654-455F-AB85-2E3C486F0C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "870BF5F9-6408-4EB6-8821-1881E66B003B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23512",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:14.133",
      "lastModified" : "2024-11-21T07:46:19.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Visiting a website may lead to an app denial-of-service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "4FAC57E1-C456-4770-815E-DDD7A3621DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "3710A47F-64BC-443A-8E80-F8116A01BD5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "51F6EA1D-B654-455F-AB85-2E3C486F0C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "870BF5F9-6408-4EB6-8821-1881E66B003B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23513",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:14.200",
      "lastModified" : "2024-11-21T07:46:20.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.7.3",
            "matchCriteriaId" : "76C903BC-0279-44FE-B413-BE85290AA727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.6.3",
            "matchCriteriaId" : "770A5E3D-501A-45EC-B0F9-379C5A961A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213603",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23514",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:14.263",
      "lastModified" : "2025-03-11T16:15:13.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, macOS Big Sur 11.7.5. An app may be able to execute arbitrary code with kernel privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3.1",
            "matchCriteriaId" : "E5B28D85-E3A2-4118-A63D-C6D4BB0BDE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3.1",
            "matchCriteriaId" : "2D2380DB-BDAF-461E-8200-1AE8044F618F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2.1",
            "matchCriteriaId" : "029F0FBC-6765-4560-B98E-7CAB10555DDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213633",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213635",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213670",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/en-us/HT213675",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/en-us/HT213677",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/en-us/HT213633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/en-us/HT213675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/en-us/HT213677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23517",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:14.320",
      "lastModified" : "2025-03-11T16:15:13.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "99403ED1-F1EB-4E71-8937-DC09A226D520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "4FAC57E1-C456-4770-815E-DDD7A3621DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "3710A47F-64BC-443A-8E80-F8116A01BD5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.7.3",
            "matchCriteriaId" : "76C903BC-0279-44FE-B413-BE85290AA727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.6.3",
            "matchCriteriaId" : "770A5E3D-501A-45EC-B0F9-379C5A961A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "51F6EA1D-B654-455F-AB85-2E3C486F0C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "870BF5F9-6408-4EB6-8821-1881E66B003B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213603",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213638",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23518",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:14.387",
      "lastModified" : "2025-03-11T16:15:13.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "99403ED1-F1EB-4E71-8937-DC09A226D520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "4FAC57E1-C456-4770-815E-DDD7A3621DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "3710A47F-64BC-443A-8E80-F8116A01BD5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.7.3",
            "matchCriteriaId" : "76C903BC-0279-44FE-B413-BE85290AA727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.6.3",
            "matchCriteriaId" : "770A5E3D-501A-45EC-B0F9-379C5A961A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "51F6EA1D-B654-455F-AB85-2E3C486F0C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "870BF5F9-6408-4EB6-8821-1881E66B003B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213600",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213603",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213638",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23519",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:14.453",
      "lastModified" : "2025-03-11T16:15:13.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Processing an image may lead to a denial-of-service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "4FAC57E1-C456-4770-815E-DDD7A3621DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "3710A47F-64BC-443A-8E80-F8116A01BD5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "362E766C-05AD-4205-85FA-F388DDF5DD1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "51F6EA1D-B654-455F-AB85-2E3C486F0C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "870BF5F9-6408-4EB6-8821-1881E66B003B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23520",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:14.517",
      "lastModified" : "2025-03-11T18:15:28.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may be able to read arbitrary files as root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "4FAC57E1-C456-4770-815E-DDD7A3621DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "3710A47F-64BC-443A-8E80-F8116A01BD5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "362E766C-05AD-4205-85FA-F388DDF5DD1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/en-us/HT213601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23522",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:14.580",
      "lastModified" : "2025-03-11T18:15:28.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.2.1. An app may be able to observe unprotected user data."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "362E766C-05AD-4205-85FA-F388DDF5DD1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213633",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23524",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:14.640",
      "lastModified" : "2025-03-18T15:15:44.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial-of-service issue was addressed with improved input validation. This issue is fixed in tvOS 16.3.2, iOS 16.3.1 and iPadOS 16.3.1, watchOS 9.3.1, macOS Ventura 13.2.1. Processing a maliciously crafted certificate may lead to a denial-of-service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3.1",
            "matchCriteriaId" : "E5B28D85-E3A2-4118-A63D-C6D4BB0BDE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3.1",
            "matchCriteriaId" : "2D2380DB-BDAF-461E-8200-1AE8044F618F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.2.1",
            "matchCriteriaId" : "B40AA062-1B77-4AA0-B1ED-1E91761BC417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3.2",
            "matchCriteriaId" : "4E65B494-7364-4477-ABA6-EB84F3FB38B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.3.1",
            "matchCriteriaId" : "CC62730D-7609-468E-9B81-034D1966EA8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213632",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213633",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213634",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213635",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23529",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:14.710",
      "lastModified" : "2025-10-23T18:04:04.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-02-14",
      "cisaActionDue" : "2023-03-07",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Apple Multiple Products WebKit Type Confusion Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "99403ED1-F1EB-4E71-8937-DC09A226D520"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "6342B4CB-4D7D-4FBD-8A5E-E3DABDC7770E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.3.1",
            "matchCriteriaId" : "30E7C45D-05AC-4F31-BA68-88494D32193B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.4",
            "matchCriteriaId" : "C75E4307-6CF3-4835-8E5F-96BF060658C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.3.1",
            "matchCriteriaId" : "F9AD7A33-3B5A-4BBB-982F-95BA21035677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2.1",
            "matchCriteriaId" : "029F0FBC-6765-4560-B98E-7CAB10555DDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213633",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213635",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213638",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213673",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23529",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23530",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:14.773",
      "lastModified" : "2025-03-18T15:15:44.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "4FAC57E1-C456-4770-815E-DDD7A3621DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "3710A47F-64BC-443A-8E80-F8116A01BD5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "362E766C-05AD-4205-85FA-F388DDF5DD1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23531",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-02-27T20:15:14.843",
      "lastModified" : "2025-03-11T17:15:47.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "4FAC57E1-C456-4770-815E-DDD7A3621DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "3710A47F-64BC-443A-8E80-F8116A01BD5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "362E766C-05AD-4205-85FA-F388DDF5DD1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-27T21:15:11.947",
      "lastModified" : "2024-11-21T07:47:38.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.5",
            "matchCriteriaId" : "22E695BD-3A5E-4684-A99F-FC6B30F474A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-1-7-SPIP-4-0-9-et-SPIP-3-2-17.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Abyss-W4tcher/ab4yss-wr4iteups/blob/ffa980faa9e3598d49d6fb7def4f7a67cfb5f427/SPIP%20-%20Pentest/SPIP%204.1.5/SPIP_4.1.5_AND_BEFORE_AUTH_SQLi_Abyss_Watcher.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5325",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-1-7-SPIP-4-0-9-et-SPIP-3-2-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Abyss-W4tcher/ab4yss-wr4iteups/blob/ffa980faa9e3598d49d6fb7def4f7a67cfb5f427/SPIP%20-%20Pentest/SPIP%204.1.5/SPIP_4.1.5_AND_BEFORE_AUTH_SQLi_Abyss_Watcher.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26041",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-27T21:15:12.013",
      "lastModified" : "2024-11-21T07:50:38.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Talk is a fully on-premises audio/video and chat communication service. When cron jobs were misconfigured and therefore messages are not expired, the API would still return them while they were then hidden by the frontend code. It is recommended that the Nextcloud Talk is upgraded to 15.0.3. There are no workaround available.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-359"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_talk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.0.3",
            "matchCriteriaId" : "0A57E500-A498-413E-A4A4-4151689AC1C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-j53p-r755-v4jf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/spreed/pull/8515",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1784310",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-j53p-r755-v4jf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/spreed/pull/8515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1784310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26043",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-27T21:15:12.103",
      "lastModified" : "2024-11-21T07:50:38.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. GeoNode is vulnerable to an XML External Entity (XXE) injection in the style upload functionality of GeoServer leading to Arbitrary File Read. This issue has been patched in version 4.0.3.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geosolutionsgroup:geonode:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "FF65F806-F0DC-43AE-BA82-D15F8BB2F5B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GeoNode/geonode/commit/2fdfe919f299b21f1609bf898f9dcfde58770ac0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GeoNode/geonode/security/advisories/GHSA-mcmc-c59m-pqq8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GeoNode/geonode/commit/2fdfe919f299b21f1609bf898f9dcfde58770ac0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GeoNode/geonode/security/advisories/GHSA-mcmc-c59m-pqq8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1055",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-27T22:15:09.990",
      "lastModified" : "2024-11-21T07:38:22.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information leaked. An attacker with a local account where the cockpit-389-ds is running can list the processes and display the hashed passwords. The highest threat from this vulnerability is to data confidentiality."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:directory_server:11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5532B7A4-A873-4639-B8D4-B6A65CFCFB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:directory_server:11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151CA15F-B090-4767-A1B0-03CBE45A7B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:directory_server:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DAF61A-58A9-41A6-A4DC-64148055B0C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:directory_server:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8C6D6E7-66A9-4F10-B38D-5D6832CD4D77"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2173517#c0",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZOYQ5TCV6ZEPMDV4CSLK3KINAAO4SRI/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2173517#c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZOYQ5TCV6ZEPMDV4CSLK3KINAAO4SRI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1081",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-02-28T02:15:08.893",
      "lastModified" : "2024-11-21T07:38:25.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.2",
            "matchCriteriaId" : "F617B71A-57BB-443F-B3A7-7EFF563372F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/microweber/microweber/commit/29d418461d8407688f2720e7b4be915e03fc16c1",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/cf59deed-9d43-4552-acfd-43f38f3aabba",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/microweber/microweber/commit/29d418461d8407688f2720e7b4be915e03fc16c1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/cf59deed-9d43-4552-acfd-43f38f3aabba",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22995",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T05:15:12.957",
      "lastModified" : "2025-05-05T16:15:29.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 5.17, an error path in dwc3_qcom_acpi_register_core in drivers/usb/dwc3/dwc3-qcom.c lacks certain platform_device_put and kfree calls."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.17",
            "matchCriteriaId" : "A37A8EE9-3F14-4C7A-A882-DA8A6AD1897C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/fa0ef93868a6062babe1144df2807a8b1d4924d2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230331-0004/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/fa0ef93868a6062babe1144df2807a8b1d4924d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230331-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26105",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-02-28T05:15:13.053",
      "lastModified" : "2025-03-11T15:15:37.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the package utilities are vulnerable to Prototype Pollution via the _mix function.\r\r"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:utilities_project:utilities:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "0D407893-B946-4A84-BE64-58F863ACB055"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mde/utilities/issues/29",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-UTILITIES-3184491",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mde/utilities/issues/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-UTILITIES-3184491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1022",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-28T13:15:09.927",
      "lastModified" : "2026-04-08T18:17:51.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Meta SEO plugin for WordPress is vulnerable to unauthorized options update due to a missing capability check on the wpmsGGSaveInformation function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to update google analytics options maintained by the plugin. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomunited:wp_meta_seo:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "4E214F57-89F8-4B8B-AF7A-7104AF2A1794"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/702f9d3b-5d33-4215-ac76-9aae3162d775?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/702f9d3b-5d33-4215-ac76-9aae3162d775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1023",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-28T13:15:10.080",
      "lastModified" : "2026-04-08T18:17:51.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Meta SEO plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the saveSitemapSettings function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to change sitemap-related settings of the plugin. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomunited:wp_meta_seo:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "4E214F57-89F8-4B8B-AF7A-7104AF2A1794"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9d1e498a-ddcb-4c67-bf0d-bb45b6fe0e9d?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/9d1e498a-ddcb-4c67-bf0d-bb45b6fe0e9d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1024",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-28T13:15:10.163",
      "lastModified" : "2026-04-08T18:17:52.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check on the regenerateSitemaps function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to generate sitemaps. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomunited:wp_meta_seo:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "4E214F57-89F8-4B8B-AF7A-7104AF2A1794"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4a3f835e-0aa9-4581-9150-fe5041e0f293?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4a3f835e-0aa9-4581-9150-fe5041e0f293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1026",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-28T13:15:10.257",
      "lastModified" : "2026-04-08T18:17:52.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Meta SEO plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the listPostsCategory function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to get post listings by category as long as those posts are published. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomunited:wp_meta_seo:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "4E214F57-89F8-4B8B-AF7A-7104AF2A1794"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/978d5715-7993-4f89-8d69-895467633bfb?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/978d5715-7993-4f89-8d69-895467633bfb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1027",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-28T13:15:10.347",
      "lastModified" : "2026-04-08T18:17:52.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check on the checkAllCategoryInSitemap function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to obtain post categories. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomunited:wp_meta_seo:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "4E214F57-89F8-4B8B-AF7A-7104AF2A1794"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4f589e21-7417-4b43-b580-4f1d3c2041f4?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2870465%40wp-meta-seo&new=2870465%40wp-meta-seo&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4f589e21-7417-4b43-b580-4f1d3c2041f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1028",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-28T13:15:10.427",
      "lastModified" : "2026-04-08T18:17:52.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the setIgnore function. This makes it possible for unauthenticated attackers to update plugin options via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomunited:wp_meta_seo:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.5.3",
            "matchCriteriaId" : "4E214F57-89F8-4B8B-AF7A-7104AF2A1794"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/tags/4.5.4/inc/class.metaseo-admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6b978749-7ea5-45f4-9f69-66a19c0e39ca?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/tags/4.5.4/inc/class.metaseo-admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2870465/wp-meta-seo/trunk?contextall=1&old=2869205&old_path=%2Fwp-meta-seo%2Ftrunk#file2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6b978749-7ea5-45f4-9f69-66a19c0e39ca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1080",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-02-28T13:15:10.510",
      "lastModified" : "2026-04-08T18:17:52.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GN Publisher plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnpublisher:gn_publisher:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.5.5",
            "matchCriteriaId" : "DE4ED60E-EC76-4236-A31F-77BB0EFB1B02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/gn-publisher/trunk/templates/settings.php#L70",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2023/03/multiple-reflected-cross-site-scripting-vulnerabilities-in-three-wordpress-plugins-patched/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8a4ee97c-63cd-4a5e-a112-6d4c4c627a57?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/gn-publisher/trunk/templates/settings.php#L70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8a4ee97c-63cd-4a5e-a112-6d4c4c627a57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23992",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-02-28T14:15:09.463",
      "lastModified" : "2026-04-28T19:19:36.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in AutomatorWP plugin <= 2.5.0 leads to object delete."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatorwp:automatorwp:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.5.1",
            "matchCriteriaId" : "6DB9C546-62E5-4783-A365-AB57F15C2511"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/automatorwp/wordpress-automatorwp-the-most-flexible-and-powerful-no-code-automation-plugin-for-wordpress-plugin-2-5-0-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/automatorwp/wordpress-automatorwp-the-most-flexible-and-powerful-no-code-automation-plugin-for-wordpress-plugin-2-5-0-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24419",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-02-28T14:15:09.540",
      "lastModified" : "2024-11-21T07:47:49.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Form Builder Team Formidable Forms plugin <= 5.5.6 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strategy11:formidable_form_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.5.7",
            "matchCriteriaId" : "471D6611-251C-4480-A474-B7090893DC73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/formidable/wordpress-formidable-forms-plugin-5-5-6-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/formidable/wordpress-formidable-forms-plugin-5-5-6-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0461",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-02-28T15:15:11.550",
      "lastModified" : "2024-11-21T07:37:13.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege.\n\nThere is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock.\n\nWhen CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable.\n\nThe setsockopt TCP_ULP operation does not require any privilege.\n\nWe recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.13.0",
            "versionEndExcluding" : "4.14.303",
            "matchCriteriaId" : "D375FAEB-F480-4787-A5D8-E1012F3089DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.19",
            "versionEndExcluding" : "4.19.270",
            "matchCriteriaId" : "E60D856E-8039-4750-B1B9-7A01D40BBCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4",
            "versionEndExcluding" : "5.4.229",
            "matchCriteriaId" : "E4A27F20-0847-4A4D-8BF9-1EE6B2E80E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndExcluding" : "5.10.163",
            "matchCriteriaId" : "CE4DEDD1-2BE5-40F9-8FBB-C0E7E01EF072"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15",
            "versionEndExcluding" : "5.15.88",
            "matchCriteriaId" : "BEB9094F-84DB-4514-BCD4-B815185BBBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0.19",
            "matchCriteriaId" : "7E070665-7647-450B-AB3D-C01637029C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndExcluding" : "6.1.5",
            "matchCriteriaId" : "8C1E7766-4310-43F9-BAC4-3763A36C043A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF501633-2F44-4913-A8EE-B021929F49F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDA597B-CAC1-4DF0-86F0-42E142C654E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2c02d41d71f90a5168391b6a5f2954112ba2307c",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://kernel.dance/#2c02d41d71f90a5168391b6a5f2954112ba2307c",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2c02d41d71f90a5168391b6a5f2954112ba2307c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://kernel.dance/#2c02d41d71f90a5168391b6a5f2954112ba2307c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230331-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23865",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-02-28T15:15:12.053",
      "lastModified" : "2024-11-21T07:46:59.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Checkout Plugins Stripe Payments For WooCommerce plugin <= 1.4.10 leads to settings change."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkoutplugins:stripe_payments_for_woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.11",
            "matchCriteriaId" : "AC6A9706-90B8-4A6C-A488-AAAAA36D893A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/checkout-plugins-stripe-woo/wordpress-stripe-payments-for-woocommerce-by-checkout-plugins-plugin-1-4-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/checkout-plugins-stripe-woo/wordpress-stripe-payments-for-woocommerce-by-checkout-plugins-plugin-1-4-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23983",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-02-28T15:15:12.147",
      "lastModified" : "2024-11-21T07:47:12.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in wpdevart Responsive Vertical Icon Menu plugin <= 1.5.8 can lead to theme deletion."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdevart:responsive_vertical_icon_menu:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.9",
            "matchCriteriaId" : "154CE58F-1B2D-4656-83EE-E64C85ED7184"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wpdevart-vertical-menu/wordpress-responsive-vertical-icon-menu-plugin-1-5-8-cross-site-request-forgery-csrf-leading-to-settings-change-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wpdevart-vertical-menu/wordpress-responsive-vertical-icon-menu-plugin-1-5-8-cross-site-request-forgery-csrf-leading-to-settings-change-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T16:15:09.157",
      "lastModified" : "2025-03-18T16:15:18.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker can bypass the authentication check filter completely by introducing a specially crafted request with relative path segments."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docmosis:tornado:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.5",
            "matchCriteriaId" : "48EC1ECE-07BE-4144-B966-A48D978651CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T16:15:09.237",
      "lastModified" : "2025-03-18T16:15:18.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Docmosis Tornado <= 2.9.4 is vulnerable to Directory Traversal leading to the disclosure of arbitrary content on the file system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docmosis:tornado:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.5",
            "matchCriteriaId" : "48EC1ECE-07BE-4144-B966-A48D978651CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T16:15:09.297",
      "lastModified" : "2025-03-18T16:15:19.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Docmosis Tornado prior to version 2.9.5. An authenticated attacker can change the Office directory setting pointing to an arbitrary remote network path. This triggers the execution of the soffice binary under the attackers control leading to arbitrary remote code execution (RCE)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docmosis:tornado:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.5",
            "matchCriteriaId" : "48EC1ECE-07BE-4144-B966-A48D978651CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25807",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-28T16:15:09.353",
      "lastModified" : "2024-11-21T07:50:14.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DataEase is an open source data visualization and analysis tool. When saving a dashboard on the DataEase platform saved data can be modified and store malicious code. This vulnerability can lead to the execution of malicious code stored by the attacker on the server side when the user accesses the dashboard. The vulnerability has been fixed in version 1.18.3.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.18.3",
            "matchCriteriaId" : "6F420A41-D962-4B89-A618-07F61FDDAF3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dataease/dataease/commit/cc94fb8e69ddbb37c96d02ec0f0ddcd74273ef49",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dataease/dataease/security/advisories/GHSA-xj3h-3wmw-j5vf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dataease/dataease/commit/cc94fb8e69ddbb37c96d02ec0f0ddcd74273ef49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dataease/dataease/security/advisories/GHSA-xj3h-3wmw-j5vf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T16:15:09.447",
      "lastModified" : "2025-03-18T16:15:19.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthenticated path traversal vulnerability affects the \"STAGIL Navigation for Jira - Menu & Themes\" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stagil:stagil_navigation:*:*:*:*:*:jira:*:*",
            "versionEndExcluding" : "2.0.52",
            "matchCriteriaId" : "5544F195-1C40-4562-BD33-90E43B9866F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1nters3ct/CVEs/blob/main/CVE-2023-26255.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.atlassian.com/apps/1216090/stagil-navigation-for-jira-menus-themes?tab=overview&hosting=cloud",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/1nters3ct/CVEs/blob/main/CVE-2023-26255.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.atlassian.com/apps/1216090/stagil-navigation-for-jira-menus-themes?tab=overview&hosting=cloud",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T16:15:09.500",
      "lastModified" : "2025-03-21T21:15:33.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthenticated path traversal vulnerability affects the \"STAGIL Navigation for Jira - Menu & Themes\" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjFooterNavigationConfig endpoint, it is possible to traverse and read the file system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stagil:stagil_navigation:*:*:*:*:*:jira:*:*",
            "versionEndExcluding" : "2.0.52",
            "matchCriteriaId" : "5544F195-1C40-4562-BD33-90E43B9866F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1nters3ct/CVEs/blob/main/CVE-2023-26256.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.atlassian.com/apps/1216090/stagil-navigation-for-jira-menus-themes?tab=overview&hosting=cloud",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/1nters3ct/CVEs/blob/main/CVE-2023-26256.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.atlassian.com/apps/1216090/stagil-navigation-for-jira-menus-themes?tab=overview&hosting=cloud",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0339",
      "sourceIdentifier" : "psirt@forgerock.com",
      "published" : "2023-02-28T17:15:10.300",
      "lastModified" : "2025-04-14T17:15:26.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Policy Agent: all versions up to 5.10.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@forgerock.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@forgerock.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forgerock:web_policy_agents:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.10.1",
            "matchCriteriaId" : "693D0300-A45E-4C9B-AFAA-EB463602BD8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://backstage.forgerock.com/downloads/browse/am/featured/web-agents",
        "source" : "psirt@forgerock.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a21576868",
        "source" : "psirt@forgerock.com",
        "tags" : [ "Mitigation", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://backstage.forgerock.com/downloads/browse/am/featured/web-agents",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a21576868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0511",
      "sourceIdentifier" : "psirt@forgerock.com",
      "published" : "2023-02-28T17:15:10.387",
      "lastModified" : "2025-04-14T17:15:26.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Relative Path Traversal vulnerability in ForgeRock Access Management Java Policy Agent allows Authentication Bypass. This issue affects Access Management Java Policy Agent: all versions up to 5.10.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@forgerock.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@forgerock.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forgerock:java_policy_agents:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.10.1",
            "matchCriteriaId" : "6B61785A-6514-4F3E-A5D3-8908CC7403E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://backstage.forgerock.com/downloads/browse/am/featured/java-agents",
        "source" : "psirt@forgerock.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a21576868",
        "source" : "psirt@forgerock.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://backstage.forgerock.com/downloads/browse/am/featured/java-agents",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a21576868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20857",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-02-28T17:15:10.457",
      "lastModified" : "2025-03-10T15:15:36.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workspace_one_content:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "23.02",
            "matchCriteriaId" : "125FF25E-BC38-4D83-AEAC-0DF871883FD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171158/VMware-Security-Advisory-2023-0006.html",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0006.html",
        "source" : "security@vmware.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171158/VMware-Security-Advisory-2023-0006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20932",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-02-28T17:15:10.513",
      "lastModified" : "2025-03-21T16:15:16.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-248251018"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20933",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-02-28T17:15:10.563",
      "lastModified" : "2025-03-21T18:15:30.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-245860753"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20934",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-02-28T17:15:10.613",
      "lastModified" : "2025-03-21T18:15:30.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicator due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-258672042"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20937",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-02-28T17:15:10.667",
      "lastModified" : "2025-03-21T18:15:30.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257443051References: Upstream kernel"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171239/Android-GKI-Kernels-Contain-Broken-Non-Upstream-Speculative-Page-Faults-MM-Code.html",
        "source" : "security@android.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171239/Android-GKI-Kernels-Contain-Broken-Non-Upstream-Speculative-Page-Faults-MM-Code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20938",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-02-28T17:15:10.723",
      "lastModified" : "2024-11-21T07:41:51.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257685302References: Upstream kernel"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20939",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-02-28T17:15:10.807",
      "lastModified" : "2025-03-21T18:15:31.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-243362981"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20940",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-02-28T17:15:10.867",
      "lastModified" : "2025-03-21T18:15:31.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-256237041"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20943",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-02-28T17:15:10.927",
      "lastModified" : "2025-03-21T19:15:42.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a path traversal error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-240267890"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20944",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-02-28T17:15:10.980",
      "lastModified" : "2025-03-21T19:15:42.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-244154558"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20945",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-02-28T17:15:11.037",
      "lastModified" : "2025-03-21T19:15:42.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-246932269"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20946",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-02-28T17:15:11.090",
      "lastModified" : "2025-03-21T19:15:43.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onStart of BluetoothSwitchPreferenceController.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-244423101"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20948",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-02-28T17:15:11.147",
      "lastModified" : "2025-03-18T16:15:16.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-230630526"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23689",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-28T17:15:11.200",
      "lastModified" : "2024-11-21T07:46:39.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrated hardware management software contains an uncontrolled resource consumption vulnerability. This may allow an unauthenticated network host to impair built-in hardware management functionality and trigger OneFS data protection mechanism causing a denial of service.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:a200_firmware:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE29D0B5-8B9E-4315-9EF8-9A0C79CFB864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:a200_firmware:9.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B97A62A-9141-4110-9E63-286494BF8B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:a200_firmware:9.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF4F7E6-3CF2-462A-968E-652759AE28F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:a200_firmware:9.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938CF757-C473-4762-A25C-196C7CF1ECE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:a200_firmware:9.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "789DC83A-C655-4284-963B-9F11A0BD942F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:a200_firmware:9.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88312C85-7160-4CF2-9076-066A76F74F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:a200_firmware:9.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3C3DA1-469F-4DF2-930D-7CEC2EE23CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:a200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C65730FE-CEB1-44E3-B2C3-0F6563A5ADD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:a2000_firmware:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E895B354-D4B4-422E-BAAD-F92CED2D8CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:a2000_firmware:9.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3074A2-5BAC-4325-A9FA-5289A6B423FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:a2000_firmware:9.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33A1CCD-8AC8-491E-BEF2-419668B82CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:a2000_firmware:9.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5040740B-62EF-4CD2-9A27-B57B3F3DC226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:a2000_firmware:9.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715DF08-A7C3-4617-A4D1-631A3BE1F82A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:a2000_firmware:9.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF36683-E350-4432-8812-089F29227A68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:a2000_firmware:9.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B237FAB-17C8-4ADA-B79A-9E3EB9E1C682"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:a2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27E6A822-E31C-4B2E-9B96-CB25E0E55444"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h400_firmware:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CFB77A-E2EB-4608-9C91-3257CEDAEB10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h400_firmware:9.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDAB45AC-DE75-4D37-8965-AE5D34A22EE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h400_firmware:9.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79E99D60-BCAE-4B03-BF06-9AD76418FFC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h400_firmware:9.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45EA731C-448E-4B41-9CFB-FF38F15B6840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h400_firmware:9.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F014B415-D0A0-47D5-A34D-295A82FDA82B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h400_firmware:9.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "530B5E84-07FD-4C1A-BF22-49A9179FFF85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h400_firmware:9.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D79E132-DF3C-4AE5-8585-DEA5FDB1EFA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:h400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1328B5-65EE-42D2-B3DA-8E69F509971F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h500_firmware:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E4D4C3-CF81-4E63-AEA0-475AE2E8F235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h500_firmware:9.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DEE8B61-B18A-418A-9519-FF6F15EBF42E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h500_firmware:9.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07A7269C-C944-4F98-9FEC-1AFD7A600366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h500_firmware:9.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37EC0FD6-4367-4402-A8FF-571664757B6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h500_firmware:9.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCD63BA6-A7FC-4B44-9148-E54BD25BCED9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h500_firmware:9.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D767F09C-E638-4E69-A476-0AE6C0A0D54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h500_firmware:9.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB67BDE-AA33-45DE-B043-9F474F7F8951"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:h500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A9A004-FC1C-41D1-BD93-90D1046CB81F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h600_firmware:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAAE5794-C84F-4E80-B055-9F377731AC87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h600_firmware:9.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599CF350-9376-45A0-B65A-AE5588B536A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h600_firmware:9.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB1C271-753A-4C7E-B960-EC0B1BDE0942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h600_firmware:9.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15131A19-ED57-42BA-9599-FC58A39DEA9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h600_firmware:9.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82036E65-E9C8-4397-BCC6-FB8890265744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h600_firmware:9.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54784BD-B87F-4254-9FFE-83DF4A52A545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h600_firmware:9.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C0D8FB-F434-444C-B8EB-0D1DB4E0AD00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:h600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2D5E62-9649-4111-93C3-188A7845CF03"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h5600_firmware:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8C7422-7355-4E39-99D3-ED85A15ACD77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h5600_firmware:9.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E826FCE0-8A02-4074-947C-010630DE7544"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h5600_firmware:9.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE1CEFC-5551-4D86-AF0F-11D3F52AB968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h5600_firmware:9.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "785BEFFD-A51B-433D-BD06-36F136A3EBFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h5600_firmware:9.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B476F8F4-C955-421A-90D7-8BAE4C43E59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h5600_firmware:9.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75D388B-97BB-498E-9F46-098B3D7C484F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:h5600_firmware:9.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CB2FA7-459E-4276-A7F3-33E77F0BBABA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:h5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC05FCFD-D05D-45D5-9FD6-152DF3CEB273"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:f800_firmware:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25FDFDF-7D1F-4470-9AB8-E53273768C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:f800_firmware:9.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B88E9A9-A071-4453-B2C0-536B65608206"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:f800_firmware:9.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1A40208-4C8D-44E1-A3BA-23E6A772D6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:f800_firmware:9.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A266F7-3BDB-4495-BF80-0E2380BF8CCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:f800_firmware:9.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E15CC67-D8CB-4AFB-BCFA-AA7849331A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:f800_firmware:9.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C963B6F2-8708-48B4-ACE8-09B65702AC9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:f800_firmware:9.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF569C5-8494-4A70-B128-508B51B10B48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:f800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF35AAF-9201-4B28-AEAB-0731EB15690D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:f810_firmware:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3302BD9A-75D3-4AB6-A827-F442A86570DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:f810_firmware:9.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658416B1-8E38-45A7-8872-FBD1D5F9F890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:f810_firmware:9.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82EA4B0-6139-463E-A4BA-01ACE11ADB0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:f810_firmware:9.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E2666D7-C2E4-48D7-B76D-D282090648C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:f810_firmware:9.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01F33730-BC1A-4E2B-9E92-6A038E9489B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:f810_firmware:9.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D54960-EE50-49F5-BA6E-22B324A7D393"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:f810_firmware:9.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15930676-6E85-408C-B793-E15DFDB3EADA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:f810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228CF091-BC4F-427A-84ED-013D7455244F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25540",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-02-28T17:15:11.287",
      "lastModified" : "2024-11-21T07:49:41.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell PowerScale OneFS 9.4.0.x contains an incorrect default permissions vulnerability. A local malicious user could potentially exploit this vulnerability to overwrite arbitrary files causing denial of service.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0.0",
            "versionEndIncluding" : "9.4.0.11",
            "matchCriteriaId" : "79930FC1-1A26-43DC-AC30-CB0CFE1085CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27292",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-02-28T17:15:11.373",
      "lastModified" : "2025-03-21T21:15:34.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencats:opencats:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDD64E6-61FF-4F3B-9640-0F6D8C0FCA57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-8",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27293",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-02-28T17:15:11.427",
      "lastModified" : "2025-03-21T21:15:34.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of input during web page generation allows an unauthenticated attacker to submit malicious Javascript as the answer to a questionnaire which would then be executed when an authenticated user reviews the candidate's submission. This could be used to steal other users’ cookies and force users to make actions without their knowledge."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencats:opencats:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDD64E6-61FF-4F3B-9640-0F6D8C0FCA57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-8",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27294",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-02-28T17:15:11.487",
      "lastModified" : "2025-03-21T21:15:34.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of input during web page generation allows an authenticated attacker with access to a restricted account to submit malicious Javascript as the description for a calendar event, which would then be executed in other users' browsers if they browse to that event. This could result in stealing session tokens from users with higher permission levels or forcing users to make actions without their knowledge."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencats:opencats:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDD64E6-61FF-4F3B-9640-0F6D8C0FCA57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-8",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27295",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-02-28T17:15:11.547",
      "lastModified" : "2025-03-10T15:15:36.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. An attacker can exploit this issue by creating a dummy page that executes Javascript in an authenticated user's session when visited."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencats:opencats:0.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDD64E6-61FF-4F3B-9640-0F6D8C0FCA57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-8",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1018",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2023-02-28T18:15:10.290",
      "lastModified" : "2025-11-04T20:16:16.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustedcomputinggroup:trusted_platform_module:2.0:revision_1.16:*:*:*:*:*:*",
            "matchCriteriaId" : "AC453113-CAE8-44B0-8306-7BB854B77EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustedcomputinggroup:trusted_platform_module:2.0:revision_1.38:*:*:*:*:*:*",
            "matchCriteriaId" : "6F43ED59-0C7E-4BBB-8931-4033AEC36269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustedcomputinggroup:trusted_platform_module:2.0:revision_1.59:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC8BA48-73AA-483B-9276-A0605B15F22F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "3FE6559F-B4C0-4188-86CB-4DB6FBB85A5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "93CEF0C6-6B6E-4157-A763-89F570FE0AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "3001E324-7A3C-4EEB-86DC-E79471F752BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "579AE0F1-E226-4504-9BF8-05E7BAE682D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "D41F5E5B-D344-41B1-A160-8118DDB623C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "BA59AB71-F8C7-49B0-AD2F-F9C00D82C85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "6D06089A-31F7-44C7-98CB-216ABAD280A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1413",
            "matchCriteriaId" : "7BB45E5C-C74C-46B1-BE64-4EF90075A3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "40EFB742-9414-4585-A71E-4316D488BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "D19233CA-3830-499D-A4C0-2C023C8AD700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.1607",
            "matchCriteriaId" : "BA73D25B-EB4C-4493-9C79-4F4E181FF95B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.cert.org/vuls/id/782720",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://trustedcomputinggroup.org/about/security/",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://trustedcomputinggroup.org/wp-content/uploads/TCGVRT0007-Advisory-FINAL.pdf",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.cert.org/vuls/id/782720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://trustedcomputinggroup.org/about/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://trustedcomputinggroup.org/wp-content/uploads/TCGVRT0007-Advisory-FINAL.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/782720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25431",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T18:15:10.393",
      "lastModified" : "2025-03-18T16:15:19.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Online Reviewer Management System v1.0. There is a XSS vulnerability via reviewer_0/admins/assessments/course/course-update.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_reviewer_management_system_project:online_reviewer_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688727F8-4DD7-4256-9DC4-44572DF5D3F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hundanchen69/bug_report/blob/main/vendors/janobe/Online%20Reviewer%20Management%20System/XSS-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/hundanchen69/bug_report/blob/main/vendors/janobe/Online%20Reviewer%20Management%20System/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25432",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T18:15:10.450",
      "lastModified" : "2024-11-21T07:49:30.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue instructions to the background database system via reviewer_0/admins/assessments/course/course-update.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_reviewer_management_system_project:online_reviewer_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688727F8-4DD7-4256-9DC4-44572DF5D3F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hundanchen69/bug_report/blob/main/vendors/janobe/Online%20Reviewer%20Management%20System/SQLi-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/hundanchen69/bug_report/blob/main/vendors/janobe/Online%20Reviewer%20Management%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T18:15:10.547",
      "lastModified" : "2025-03-21T21:15:34.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sudo before 1.9.13p2 has a double free in the per-command chroot feature."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.8",
            "versionEndExcluding" : "1.9.13",
            "matchCriteriaId" : "0FD49FC3-CC8E-4B40-B025-D4CEAD9225AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:1.9.13:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CB860E-795E-4B23-A5B8-4AEA873994ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:1.9.13:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "55CC00CC-E4DD-40F3-8E89-93E04E8E0027"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/03/01/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/332KN4QI6QXB7NI7SWSJ2EQJKWIILFN6/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLXMRAMXC3BYL4DNKVTK3V6JDMUXZ7B/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6VW24YGXJYI4NZ5HZPQCF4MCE7766AU/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0009/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/02/28/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sudo.ws/releases/stable/#1.9.13p2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/03/01/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/332KN4QI6QXB7NI7SWSJ2EQJKWIILFN6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLXMRAMXC3BYL4DNKVTK3V6JDMUXZ7B/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6VW24YGXJYI4NZ5HZPQCF4MCE7766AU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/02/28/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sudo.ws/releases/stable/#1.9.13p2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1017",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2023-02-28T19:15:16.657",
      "lastModified" : "2025-11-04T20:16:16.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustedcomputinggroup:trusted_platform_module:2.0:revision_1.16:*:*:*:*:*:*",
            "matchCriteriaId" : "AC453113-CAE8-44B0-8306-7BB854B77EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustedcomputinggroup:trusted_platform_module:2.0:revision_1.38:*:*:*:*:*:*",
            "matchCriteriaId" : "6F43ED59-0C7E-4BBB-8931-4033AEC36269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustedcomputinggroup:trusted_platform_module:2.0:revision_1.59:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC8BA48-73AA-483B-9276-A0605B15F22F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "3FE6559F-B4C0-4188-86CB-4DB6FBB85A5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "93CEF0C6-6B6E-4157-A763-89F570FE0AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "3001E324-7A3C-4EEB-86DC-E79471F752BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "579AE0F1-E226-4504-9BF8-05E7BAE682D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "D41F5E5B-D344-41B1-A160-8118DDB623C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "BA59AB71-F8C7-49B0-AD2F-F9C00D82C85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "6D06089A-31F7-44C7-98CB-216ABAD280A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22621.1413",
            "matchCriteriaId" : "7BB45E5C-C74C-46B1-BE64-4EF90075A3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "40EFB742-9414-4585-A71E-4316D488BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "D19233CA-3830-499D-A4C0-2C023C8AD700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.1607",
            "matchCriteriaId" : "BA73D25B-EB4C-4493-9C79-4F4E181FF95B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.cert.org/vuls/id/782720",
        "source" : "cret@cert.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://trustedcomputinggroup.org/about/security/",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://trustedcomputinggroup.org/wp-content/uploads/TCGVRT0007-Advisory-FINAL.pdf",
        "source" : "cret@cert.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.cert.org/vuls/id/782720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://trustedcomputinggroup.org/about/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://trustedcomputinggroup.org/wp-content/uploads/TCGVRT0007-Advisory-FINAL.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/782720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1065",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-02-28T19:15:16.727",
      "lastModified" : "2024-11-21T07:38:23.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a Snyk Organization, which could in turn obfuscate other, relevant, security issues. It does not expose the user of the integration to any direct security risk and no user data can be leaked. To exploit the vulnerability the attacker does not need to be authenticated to Snyk but does need to know the target's Integration ID (which may or may not be the same as the Organization ID, although this is an unpredictable UUID in either case)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snyk:kubernetes_monitor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "B1E859F1-7DBE-4E50-BE04-05D68CD9337B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/snyk/kubernetes-monitor",
        "source" : "report@snyk.io",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/snyk/kubernetes-monitor/commit/5b9a7821680bbfb6c4a900ab05d898ce2b2cc157",
        "source" : "report@snyk.io",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/snyk/kubernetes-monitor/pull/1275",
        "source" : "report@snyk.io",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://snyk.io/blog/api-auth-vuln-snyk-kubernetes-cve-2023-1065/",
        "source" : "report@snyk.io",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/snyk/kubernetes-monitor",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/snyk/kubernetes-monitor/commit/5b9a7821680bbfb6c4a900ab05d898ce2b2cc157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/snyk/kubernetes-monitor/pull/1275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://snyk.io/blog/api-auth-vuln-snyk-kubernetes-cve-2023-1065/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T20:15:10.157",
      "lastModified" : "2024-11-21T07:52:46.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libmicrohttpd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.76",
            "matchCriteriaId" : "0EAC21CC-DA9B-4D96-A7F3-A5992C3D5537"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.gnunet.org/libmicrohttpd.git/commit/?id=6d6846e20bfdf4b3eb1b592c97520a532f724238",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/0xhebi/CVEs/tree/main/GNU%20Libmicrohttpd",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00029.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.gnu.org/archive/html/libmicrohttpd/2023-02/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://git.gnunet.org/libmicrohttpd.git/commit/?id=6d6846e20bfdf4b3eb1b592c97520a532f724238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/0xhebi/CVEs/tree/main/GNU%20Libmicrohttpd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.gnu.org/archive/html/libmicrohttpd/2023-02/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T20:15:10.243",
      "lastModified" : "2025-03-11T15:15:38.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.18",
            "matchCriteriaId" : "FF6C248E-6246-469B-858D-DB628B535BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.10",
            "matchCriteriaId" : "A67A687F-6F6C-4150-92BB-90A308B89B4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.8",
            "matchCriteriaId" : "4188B203-546F-4EE3-AD33-A31F3AF16B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:4.2.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D55ECBAF-CDAB-4F7E-9BD1-BD9178732934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:4.2.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "1CED71D6-E720-4007-BEE3-B81CC4F5EDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spip:spip:4.2.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "0746C763-3FD4-4095-9F1C-9BEAE6E6E29B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171921/SPIP-Remote-Command-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/173044/SPIP-4.2.1-Remote-Code-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://blog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-2-1-SPIP-4-1-8-SPIP-4-0-10-et.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://git.spip.net/spip/spip/commit/5aedf49b89415a4df3eb775eee3801a2b4b88266",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.spip.net/spip/spip/commit/96fbeb38711c6706e62457f2b732a652a04a409d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5367",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171921/SPIP-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/173044/SPIP-4.2.1-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://blog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-2-1-SPIP-4-1-8-SPIP-4-0-10-et.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://git.spip.net/spip/spip/commit/5aedf49b89415a4df3eb775eee3801a2b4b88266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.spip.net/spip/spip/commit/96fbeb38711c6706e62457f2b732a652a04a409d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstorm.news/files/id/171921",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      }, {
        "url" : "https://packetstorm.news/files/id/173044",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1099",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-28T21:15:11.823",
      "lastModified" : "2024-11-21T07:38:27.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222002 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_student_management_system_project:online_student_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422F2579-A688-4D6E-97D2-873C5BCABFD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20student%20management%20system%20pdf/Online%20student%20management%20system%20sql%20vlun%201.pdf",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.222002",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222002",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20student%20management%20system%20pdf/Online%20student%20management%20system%20sql%20vlun%201.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://vuldb.com/?ctiid.222002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1100",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-02-28T21:15:11.943",
      "lastModified" : "2024-11-21T07:38:27.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Online Catering Reservation System 1.0. This affects an unknown part of the file /reservation/add_message.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222003."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_catering_reservation_system_project:online_catering_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3826273-5E23-4D22-8B31-E560F86671D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jackswordsz/bug_report/blob/main/vendors/emoblazz/Online%20Catering%20Reservation%20System/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222003",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222003",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jackswordsz/bug_report/blob/main/vendors/emoblazz/Online%20Catering%20Reservation%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T21:15:12.057",
      "lastModified" : "2025-03-20T20:15:28.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 5.17.2, drivers/soc/qcom/qcom_aoss.c does not release an of_find_device_by_node reference after use, e.g., with put_device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.17.2",
            "matchCriteriaId" : "23C454F5-61F7-44DC-BCFA-17E6C23CF2EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4b41a9d0fe3db5f91078a380f62f0572c3ecf2dd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4b41a9d0fe3db5f91078a380f62f0572c3ecf2dd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T21:15:12.117",
      "lastModified" : "2025-03-20T20:15:28.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the module_get_next_page return value (expects it to be NULL in the error case, whereas it is actually an error pointer)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.2",
            "matchCriteriaId" : "6C1DD811-F5C6-4439-A808-D788FE878C65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/45af1d7aae7d5520d2858f8517a1342646f015db",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/45af1d7aae7d5520d2858f8517a1342646f015db",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T21:15:12.180",
      "lastModified" : "2025-03-19T17:15:38.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the drm_gem_shmem_get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.3",
            "matchCriteriaId" : "D609BC07-3DEC-40DC-8C58-47EA751E5D46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c24968734abfed81c8f93dc5f44a7b7a9aecadfa",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/c24968734abfed81c8f93dc5f44a7b7a9aecadfa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-02-28T21:15:12.240",
      "lastModified" : "2025-03-20T20:15:28.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the dwc3_qcom_create_urs_usb_platdev return value (expects it to be NULL in the error case, whereas it is actually an error pointer)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.16.3",
            "matchCriteriaId" : "6FBCF385-C05A-44CC-AF30-EDA38785D4BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b52fe2dbb3e655eb1483000adfab68a219549e13",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b52fe2dbb3e655eb1483000adfab68a219549e13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1095",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-02-28T23:15:11.460",
      "lastModified" : "2025-03-18T16:15:16.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0",
            "matchCriteriaId" : "87B81C9D-7173-4FFB-97BC-9C41AB20A53C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2173973",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/580077855a40741cf511766129702d97ff02f4d9",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2173973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/580077855a40741cf511766129702d97ff02f4d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25575",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-02-28T23:15:11.553",
      "lastModified" : "2024-11-21T07:49:45.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "API Platform Core is the server component of API Platform: hypermedia and GraphQL APIs. Resource properties secured with the `security` option of the `ApiPlatform\\Metadata\\ApiProperty` attribute can be disclosed to unauthorized users. The problem affects most serialization formats, including raw JSON, which is enabled by default when installing API Platform. Custom serialization formats may also be impacted. Only collection endpoints are affected by the issue, item endpoints are not. The JSON-LD format is not affected by the issue. The result of the security rule is only executed for the first item of the collection. The result of the rule is then cached and reused for the next items. This bug can leak data to unauthorized users when the rule depends on the value of a property of the item. This bug can also hide properties that should be displayed to authorized users. This issue impacts the 2.7, 3.0 and 3.1 branches. Please upgrade to versions 2.7.10, 3.0.12 or 3.1.3. As a workaround, replace the `cache_key` of the context array of the Serializer inside a custom normalizer that works on objects if the security option of the `ApiPlatform\\Metadata\\ApiProperty` attribute is used."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-842"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:api-platform:core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndExcluding" : "2.7.10",
            "matchCriteriaId" : "024903BC-5E39-4043-9DD1-C5A930CC3DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:api-platform:core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.12",
            "matchCriteriaId" : "86D99A32-DD68-4BC9-B204-26371066E5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:api-platform:core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndExcluding" : "3.1.3",
            "matchCriteriaId" : "A5D9B7FE-2AD0-4320-9E65-EDB326BF19F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/api-platform/core/commit/5723d68369722feefeb11e42528d9580db5dd0fb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/api-platform/core/security/advisories/GHSA-vr2x-7687-h6qv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/api-platform/core/commit/5723d68369722feefeb11e42528d9580db5dd0fb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/api-platform/core/security/advisories/GHSA-vr2x-7687-h6qv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0847",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-01T00:15:10.897",
      "lastModified" : "2024-11-21T07:37:56.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nThe Sub-IoT implementation of the DASH 7 Alliance protocol has a vulnerability that can lead to an out-of-bounds write prior to implementation version 0.5.0. If the protocol has been compiled using default settings, this will only grant the attacker access to allocated but unused memory. However, if it was configured using non-default settings, there is the possibility that exploiting this vulnerability could lead to system crashes and remote code execution. \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dash7-alliance:dash7_alliance_protcol:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "A9668FF9-20AE-45A5-943E-ED7BBD9B3CD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Sub-IoT/Sub-IoT-Stack/security/advisories/GHSA-ggxh-88wc-c4fg",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-047-13",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://github.com/Sub-IoT/Sub-IoT-Stack/security/advisories/GHSA-ggxh-88wc-c4fg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-047-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T01:15:10.537",
      "lastModified" : "2025-03-10T19:15:37.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataiku:data_science_studio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.2",
            "matchCriteriaId" : "027255C1-860A-4701-8345-A850DB8343BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dataiku.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/alert3/04e2d0a934001180104f846cfa00552b",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://dataiku.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/alert3/04e2d0a934001180104f846cfa00552b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26608",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T01:15:10.597",
      "lastModified" : "2024-11-21T07:51:51.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SOLDR (System of Orchestration, Lifecycle control, Detection and Response) 1.1.0 allows stored XSS via the module editor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vxcontrol:soldr:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF81C55A-AEF2-4824-A911-BD586EEAC763"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vxcontrol/soldr/compare/v1.1.0...v1.2.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/vxcontrol/soldr/issues/89",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vxcontrol/soldr/compare/v1.1.0...v1.2.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/vxcontrol/soldr/issues/89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1103",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-01T02:15:51.417",
      "lastModified" : "2023-11-07T04:02:30.710",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was a duplicate of CVE-2022-4821. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1104",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-01T02:15:51.520",
      "lastModified" : "2024-11-21T07:38:27.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpress:flatpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3",
            "matchCriteriaId" : "2C1FD291-99DD-40F3-96DB-D79CA8279692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatpressblog/flatpress/commit/f6394eac7a0e001d2b1ac638d3313e531d19ea93",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a4909b4e-ab3c-41d6-b0d8-1c6e933bf758",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/flatpressblog/flatpress/commit/f6394eac7a0e001d2b1ac638d3313e531d19ea93",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a4909b4e-ab3c-41d6-b0d8-1c6e933bf758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1105",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-01T02:15:51.597",
      "lastModified" : "2024-11-21T07:38:27.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpress:flatpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022-12-25",
            "matchCriteriaId" : "F0EEB64E-678C-4C3E-BE11-60BB6A00193A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatpressblog/flatpress/commit/5d5c7f6d8f072d14926fc2c3a97cdd763802f170",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/4089a63f-cffd-42f3-b8d8-e80b6bd9c80f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpressblog/flatpress/commit/5d5c7f6d8f072d14926fc2c3a97cdd763802f170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/4089a63f-cffd-42f3-b8d8-e80b6bd9c80f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0567",
      "sourceIdentifier" : "security@php.net",
      "published" : "2023-03-01T08:15:11.530",
      "lastModified" : "2026-02-25T17:17:09.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@php.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-916"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-916"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.28",
            "matchCriteriaId" : "BBCCD85D-5679-42EE-B6C6-A9A309E2B4BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.16",
            "matchCriteriaId" : "EDC7B443-3E3C-4888-AC9B-7415D2C5C059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.3",
            "matchCriteriaId" : "7C14298C-48A4-4FD8-BFA0-808CF935490B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.php.net/bug.php?id=81744",
        "source" : "security@php.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4",
        "source" : "security@php.net",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=81744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230331-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0951",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-03-01T08:15:11.603",
      "lastModified" : "2025-03-17T19:15:15.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access controls on some API endpoints in Devolutions Server 2022.3.12 \nand earlier could allow a standard privileged user to perform privileged \nactions.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2022.3.12",
            "matchCriteriaId" : "6A1ABDAA-CAE5-4CE3-8DB4-245062DAF575"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0003",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0952",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-03-01T08:15:11.657",
      "lastModified" : "2025-03-17T19:15:15.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access controls on entries in Devolutions Server \n2022.3.12 and earlier could allow an authenticated user to access \nsensitive data without proper authorization."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2022.3.12",
            "matchCriteriaId" : "6A1ABDAA-CAE5-4CE3-8DB4-245062DAF575"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0003",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0953",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-03-01T08:15:11.713",
      "lastModified" : "2025-03-12T14:15:14.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and earlier allows an authenticated attacker to perform an SQL Injection, potentially resulting in unauthorized access to system resources.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2022.3.12",
            "matchCriteriaId" : "6A1ABDAA-CAE5-4CE3-8DB4-245062DAF575"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0003",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20009",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-01T08:15:11.767",
      "lastModified" : "2024-11-21T07:40:20.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential with at least a [[privilege of operator - validate actual name]].\r\n\r The vulnerability is due to the processing of a specially crafted SNMP configuration file. An attacker could exploit this vulnerability by authenticating to the targeted device and uploading a specially crafted SNMP configuration file that when uploaded could allow for the execution of commands as root. An exploit could allow the attacker to gain root access on the device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.5.3-041",
            "matchCriteriaId" : "DFF0842A-E854-4188-A561-56FEA052A553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.0.5-007",
            "matchCriteriaId" : "53BC2A26-68D8-44F5-8C36-22ECBD492F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.5.0",
            "versionEndExcluding" : "13.5.4-038",
            "matchCriteriaId" : "E2720C1E-1AD6-4EB0-8BBC-7E23F069539B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.2.1-020",
            "matchCriteriaId" : "5EA000FA-4AEA-4A05-883E-52333F4445FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.3.0",
            "versionEndExcluding" : "14.3.0-032",
            "matchCriteriaId" : "05D45B94-07E6-436D-8936-317463E77608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_email_and_web_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.8.1-021",
            "matchCriteriaId" : "9A15F884-ACBF-4CC8-BE9B-0369B600F378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_email_and_web_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.1-108",
            "matchCriteriaId" : "26652060-E3C9-401B-A520-E1A768F76334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_email_and_web_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.2.0-224",
            "matchCriteriaId" : "6A32B4D8-F1A3-4233-AD64-CCC016E037C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_email_and_web_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.3.0",
            "versionEndExcluding" : "14.3.0-120",
            "matchCriteriaId" : "28540076-CF1E-4584-BD17-929F4346FAA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-privesc-9DVkFpJ8",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-privesc-9DVkFpJ8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20014",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-01T08:15:11.833",
      "lastModified" : "2024-11-21T07:40:20.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.\r\n\r This vulnerability is due to the improper processing of DNS requests. An attacker could exploit this vulnerability by sending a continuous stream of DNS requests to an affected device. A successful exploit could allow the attacker to cause the coredns service to stop working or cause the device to reload, resulting in a DoS condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:nexus_dashboard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3\\(1c\\)",
            "matchCriteriaId" : "9D9348B3-A438-4B9F-9818-5E6F794653D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-dnsdos-bYscZOsu",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-dnsdos-bYscZOsu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20032",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-01T08:15:11.907",
      "lastModified" : "2024-11-21T07:40:23.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed:\r\n\r \r A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to execute arbitrary code.\r\n\r \r This vulnerability is due to a missing buffer size check that may result in a heap buffer overflow write. An attacker could exploit this vulnerability by submitting a crafted HFS+ partition file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the ClamAV scanning process, or else crash the process, resulting in a denial of service (DoS) condition.\r\n\r For a description of this vulnerability, see the ClamAV blog [\"https://blog.clamav.net/\"]."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:linux:*:*",
            "versionEndExcluding" : "1.20.2",
            "matchCriteriaId" : "40572314-306A-4594-A279-216B8139B7A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "1.21.1",
            "matchCriteriaId" : "726A787E-E64F-4906-9BAE-4F79EB530F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "7.5.9",
            "matchCriteriaId" : "C4F63447-CA0E-43FC-8FF1-B4032D21E32A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "8.0.1.21160",
            "versionEndExcluding" : "8.1.5",
            "matchCriteriaId" : "D0FC45E7-C4AB-4AC5-87AB-0ED1508CCFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_endpoint_private_cloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.0",
            "matchCriteriaId" : "07BFC8FC-6CF0-49DA-B4ED-5B7936A4233E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.5.6",
            "matchCriteriaId" : "2EFF7AB1-33C6-4627-9950-2F2E48BCCC7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.0.4-005",
            "matchCriteriaId" : "A8361D69-981F-4F28-86F9-EFF202C9E537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5.0",
            "versionEndExcluding" : "14.5.1-013",
            "matchCriteriaId" : "CF6E494A-FCA7-4569-847D-2AA3C14C3E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.0.0-254",
            "matchCriteriaId" : "BD8B1F66-9FD3-4970-BDA3-26241B18B4AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.103.7",
            "matchCriteriaId" : "BDF08008-9C84-4075-8AB7-233209E4F3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.104.0",
            "versionEndIncluding" : "0.105.1",
            "matchCriteriaId" : "14FA7424-A3E5-4F46-83F8-E9767330F1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:1.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A381BD3C-88E0-41FD-91E6-26BCF78B84CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:1.0.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "88BE0B1C-4515-40EA-ADDD-A04BF50743DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:1.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB00FEFE-F8A2-482D-A7EE-002DA4E10FF6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.7.35",
            "matchCriteriaId" : "88CF061E-FFD8-48DE-887F-2119C916E2B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.11.23",
            "matchCriteriaId" : "F499B698-4EB6-4262-BAF4-9BDE7F114805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndExcluding" : "4.3.17",
            "matchCriteriaId" : "40519377-ECDC-41E2-B6A6-7F601AC28ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.6.4",
            "matchCriteriaId" : "77BAC9BA-B215-490F-9202-617B1B4E7C8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-q8DThCy",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-q8DThCy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20052",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-01T08:15:11.980",
      "lastModified" : "2024-11-21T07:40:26.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed:\r\n\r \r A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on an affected device.\r\n\r \r This vulnerability is due to enabling XML entity substitution that may result in XML external entity injection. An attacker could exploit this vulnerability by submitting a crafted DMG file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to leak bytes from any file that may be read by the ClamAV scanning process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-776"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:linux:*:*",
            "versionEndExcluding" : "1.20.2",
            "matchCriteriaId" : "40572314-306A-4594-A279-216B8139B7A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "1.21.1",
            "matchCriteriaId" : "726A787E-E64F-4906-9BAE-4F79EB530F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "7.5.9",
            "matchCriteriaId" : "C4F63447-CA0E-43FC-8FF1-B4032D21E32A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "8.0.1.21160",
            "versionEndExcluding" : "8.1.5",
            "matchCriteriaId" : "D0FC45E7-C4AB-4AC5-87AB-0ED1508CCFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_endpoint_private_cloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.0",
            "matchCriteriaId" : "07BFC8FC-6CF0-49DA-B4ED-5B7936A4233E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.103.7",
            "matchCriteriaId" : "BDF08008-9C84-4075-8AB7-233209E4F3C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.104.0",
            "versionEndIncluding" : "0.105.1",
            "matchCriteriaId" : "14FA7424-A3E5-4F46-83F8-E9767330F1CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:1.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A381BD3C-88E0-41FD-91E6-26BCF78B84CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:1.0.0:rc:*:*:*:*:*:*",
            "matchCriteriaId" : "88BE0B1C-4515-40EA-ADDD-A04BF50743DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:1.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "FB00FEFE-F8A2-482D-A7EE-002DA4E10FF6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.7.35",
            "matchCriteriaId" : "88CF061E-FFD8-48DE-887F-2119C916E2B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.11.23",
            "matchCriteriaId" : "F499B698-4EB6-4262-BAF4-9BDE7F114805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndExcluding" : "4.3.17",
            "matchCriteriaId" : "40519377-ECDC-41E2-B6A6-7F601AC28ACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.6.4",
            "matchCriteriaId" : "77BAC9BA-B215-490F-9202-617B1B4E7C8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-xxe-TcSZduhN",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-xxe-TcSZduhN",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20053",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-01T08:15:12.057",
      "lastModified" : "2024-11-21T07:40:26.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.\r\n\r This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:nexus_dashboard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3\\(1c\\)",
            "matchCriteriaId" : "9D9348B3-A438-4B9F-9818-5E6F794653D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nexus-dashboard-xss-xc5BcgsQ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nexus-dashboard-xss-xc5BcgsQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20075",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-01T08:15:12.283",
      "lastModified" : "2024-11-21T07:40:29.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands.\r\n\r These vulnerability is due to improper input validation in the CLI. An attacker could exploit this vulnerability by injecting operating system commands into a legitimate command. A successful exploit could allow the attacker to escape the restricted command prompt and execute arbitrary commands on the underlying operating system. To successfully exploit this vulnerability, an attacker would need valid Administrator credentials.\r\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5.0",
            "versionEndExcluding" : "12.5.3-041",
            "matchCriteriaId" : "FD21E5B1-FC32-455B-979D-8FF0D2898E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.0.5-007",
            "matchCriteriaId" : "53BC2A26-68D8-44F5-8C36-22ECBD492F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.5.0",
            "versionEndExcluding" : "13.5.4-038",
            "matchCriteriaId" : "E2720C1E-1AD6-4EB0-8BBC-7E23F069539B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.2.1-020",
            "matchCriteriaId" : "5EA000FA-4AEA-4A05-883E-52333F4445FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.3.0",
            "versionEndExcluding" : "14.3.0-032",
            "matchCriteriaId" : "05D45B94-07E6-436D-8936-317463E77608"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-privesc-9DVkFpJ8",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-privesc-9DVkFpJ8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20085",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-01T08:15:12.353",
      "lastModified" : "2024-11-21T07:40:31.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.\r\n\r This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script in the context of the affected interface or access sensitive, browser-based information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "36722B6C-64A5-4D00-94E1-442878C37A35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-ubfHG75C",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-ubfHG75C",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22747",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:12.427",
      "lastModified" : "2025-03-11T15:15:37.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22748",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:12.493",
      "lastModified" : "2025-03-07T21:15:13.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nThere are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22749",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:12.560",
      "lastModified" : "2025-03-07T21:15:13.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nThere are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22750",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:12.620",
      "lastModified" : "2025-03-07T21:15:13.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nThere are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22751",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:12.690",
      "lastModified" : "2025-03-07T21:15:13.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211).  Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22752",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:12.760",
      "lastModified" : "2025-03-11T14:15:17.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UDP port (8211).  Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22753",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:12.823",
      "lastModified" : "2025-03-11T14:15:17.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22754",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:12.897",
      "lastModified" : "2024-11-21T07:45:21.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22755",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:12.967",
      "lastModified" : "2024-11-21T07:45:21.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22756",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.033",
      "lastModified" : "2024-11-21T07:45:21.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22757",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.100",
      "lastModified" : "2024-11-21T07:45:22.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted packets via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22758",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.170",
      "lastModified" : "2024-11-21T07:45:22.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22759",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.233",
      "lastModified" : "2024-11-21T07:45:22.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22760",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.300",
      "lastModified" : "2024-11-21T07:45:22.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22761",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.367",
      "lastModified" : "2024-11-21T07:45:22.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22762",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.433",
      "lastModified" : "2024-11-21T07:45:22.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CF160-4F83-452D-9BA5-E8DCA1A15ABB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E729365A-B367-474E-BD7D-8437AD47D9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDDD143-B396-4C58-9FB9-BA4C3B8B953E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD639D9E-2722-47EF-94F0-2CAF9E94EFD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA9CA7B-AC2C-408A-B759-E2F4778B20ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A42369-3558-4015-AF7B-7F2E2465AE61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D8DDC4-17FB-4A9D-BB01-E8C130B04ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47572BC-93F8-4E53-B2B7-E00855B59499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80337C7-2A72-4E09-858B-0AA817D70746"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670224DA-CE4B-46BE-8B5C-2F310F7988B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B86FAE-2D7E-4B30-835A-C3D37A361A29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE3DC2D-7C6E-4044-AAB7-75FA5451AA56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22763",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.500",
      "lastModified" : "2025-03-11T14:15:17.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CF160-4F83-452D-9BA5-E8DCA1A15ABB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E729365A-B367-474E-BD7D-8437AD47D9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDDD143-B396-4C58-9FB9-BA4C3B8B953E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD639D9E-2722-47EF-94F0-2CAF9E94EFD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA9CA7B-AC2C-408A-B759-E2F4778B20ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A42369-3558-4015-AF7B-7F2E2465AE61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D8DDC4-17FB-4A9D-BB01-E8C130B04ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47572BC-93F8-4E53-B2B7-E00855B59499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80337C7-2A72-4E09-858B-0AA817D70746"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670224DA-CE4B-46BE-8B5C-2F310F7988B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B86FAE-2D7E-4B30-835A-C3D37A361A29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE3DC2D-7C6E-4044-AAB7-75FA5451AA56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22764",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.573",
      "lastModified" : "2025-03-11T14:15:17.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CF160-4F83-452D-9BA5-E8DCA1A15ABB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E729365A-B367-474E-BD7D-8437AD47D9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDDD143-B396-4C58-9FB9-BA4C3B8B953E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD639D9E-2722-47EF-94F0-2CAF9E94EFD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA9CA7B-AC2C-408A-B759-E2F4778B20ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A42369-3558-4015-AF7B-7F2E2465AE61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D8DDC4-17FB-4A9D-BB01-E8C130B04ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47572BC-93F8-4E53-B2B7-E00855B59499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80337C7-2A72-4E09-858B-0AA817D70746"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670224DA-CE4B-46BE-8B5C-2F310F7988B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B86FAE-2D7E-4B30-835A-C3D37A361A29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE3DC2D-7C6E-4044-AAB7-75FA5451AA56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22765",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.637",
      "lastModified" : "2025-03-11T14:15:18.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CF160-4F83-452D-9BA5-E8DCA1A15ABB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E729365A-B367-474E-BD7D-8437AD47D9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDDD143-B396-4C58-9FB9-BA4C3B8B953E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD639D9E-2722-47EF-94F0-2CAF9E94EFD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA9CA7B-AC2C-408A-B759-E2F4778B20ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A42369-3558-4015-AF7B-7F2E2465AE61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D8DDC4-17FB-4A9D-BB01-E8C130B04ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47572BC-93F8-4E53-B2B7-E00855B59499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80337C7-2A72-4E09-858B-0AA817D70746"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670224DA-CE4B-46BE-8B5C-2F310F7988B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B86FAE-2D7E-4B30-835A-C3D37A361A29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE3DC2D-7C6E-4044-AAB7-75FA5451AA56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22766",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.700",
      "lastModified" : "2025-03-11T15:15:37.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CF160-4F83-452D-9BA5-E8DCA1A15ABB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E729365A-B367-474E-BD7D-8437AD47D9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDDD143-B396-4C58-9FB9-BA4C3B8B953E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD639D9E-2722-47EF-94F0-2CAF9E94EFD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA9CA7B-AC2C-408A-B759-E2F4778B20ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A42369-3558-4015-AF7B-7F2E2465AE61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D8DDC4-17FB-4A9D-BB01-E8C130B04ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47572BC-93F8-4E53-B2B7-E00855B59499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80337C7-2A72-4E09-858B-0AA817D70746"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670224DA-CE4B-46BE-8B5C-2F310F7988B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B86FAE-2D7E-4B30-835A-C3D37A361A29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE3DC2D-7C6E-4044-AAB7-75FA5451AA56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22767",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.767",
      "lastModified" : "2025-03-11T15:15:37.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CF160-4F83-452D-9BA5-E8DCA1A15ABB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E729365A-B367-474E-BD7D-8437AD47D9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDDD143-B396-4C58-9FB9-BA4C3B8B953E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD639D9E-2722-47EF-94F0-2CAF9E94EFD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA9CA7B-AC2C-408A-B759-E2F4778B20ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A42369-3558-4015-AF7B-7F2E2465AE61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D8DDC4-17FB-4A9D-BB01-E8C130B04ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47572BC-93F8-4E53-B2B7-E00855B59499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80337C7-2A72-4E09-858B-0AA817D70746"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670224DA-CE4B-46BE-8B5C-2F310F7988B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B86FAE-2D7E-4B30-835A-C3D37A361A29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE3DC2D-7C6E-4044-AAB7-75FA5451AA56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22768",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.833",
      "lastModified" : "2024-11-21T07:45:23.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CF160-4F83-452D-9BA5-E8DCA1A15ABB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E729365A-B367-474E-BD7D-8437AD47D9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDDD143-B396-4C58-9FB9-BA4C3B8B953E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD639D9E-2722-47EF-94F0-2CAF9E94EFD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA9CA7B-AC2C-408A-B759-E2F4778B20ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A42369-3558-4015-AF7B-7F2E2465AE61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D8DDC4-17FB-4A9D-BB01-E8C130B04ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47572BC-93F8-4E53-B2B7-E00855B59499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80337C7-2A72-4E09-858B-0AA817D70746"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670224DA-CE4B-46BE-8B5C-2F310F7988B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B86FAE-2D7E-4B30-835A-C3D37A361A29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE3DC2D-7C6E-4044-AAB7-75FA5451AA56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22769",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.900",
      "lastModified" : "2024-11-21T07:45:23.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CF160-4F83-452D-9BA5-E8DCA1A15ABB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E729365A-B367-474E-BD7D-8437AD47D9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDDD143-B396-4C58-9FB9-BA4C3B8B953E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD639D9E-2722-47EF-94F0-2CAF9E94EFD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA9CA7B-AC2C-408A-B759-E2F4778B20ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A42369-3558-4015-AF7B-7F2E2465AE61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D8DDC4-17FB-4A9D-BB01-E8C130B04ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47572BC-93F8-4E53-B2B7-E00855B59499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80337C7-2A72-4E09-858B-0AA817D70746"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670224DA-CE4B-46BE-8B5C-2F310F7988B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B86FAE-2D7E-4B30-835A-C3D37A361A29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE3DC2D-7C6E-4044-AAB7-75FA5451AA56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22770",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:13.963",
      "lastModified" : "2024-11-21T07:45:23.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CF160-4F83-452D-9BA5-E8DCA1A15ABB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E729365A-B367-474E-BD7D-8437AD47D9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDDD143-B396-4C58-9FB9-BA4C3B8B953E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD639D9E-2722-47EF-94F0-2CAF9E94EFD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA9CA7B-AC2C-408A-B759-E2F4778B20ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A42369-3558-4015-AF7B-7F2E2465AE61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D8DDC4-17FB-4A9D-BB01-E8C130B04ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47572BC-93F8-4E53-B2B7-E00855B59499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80337C7-2A72-4E09-858B-0AA817D70746"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670224DA-CE4B-46BE-8B5C-2F310F7988B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B86FAE-2D7E-4B30-835A-C3D37A361A29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE3DC2D-7C6E-4044-AAB7-75FA5451AA56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22771",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:14.030",
      "lastModified" : "2024-11-21T07:45:23.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An insufficient session expiration vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability allows an attacker to keep a session running on an affected device after the removal of the impacted account\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CF160-4F83-452D-9BA5-E8DCA1A15ABB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E729365A-B367-474E-BD7D-8437AD47D9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDDD143-B396-4C58-9FB9-BA4C3B8B953E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD639D9E-2722-47EF-94F0-2CAF9E94EFD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA9CA7B-AC2C-408A-B759-E2F4778B20ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A42369-3558-4015-AF7B-7F2E2465AE61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D8DDC4-17FB-4A9D-BB01-E8C130B04ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47572BC-93F8-4E53-B2B7-E00855B59499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80337C7-2A72-4E09-858B-0AA817D70746"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670224DA-CE4B-46BE-8B5C-2F310F7988B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B86FAE-2D7E-4B30-835A-C3D37A361A29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE3DC2D-7C6E-4044-AAB7-75FA5451AA56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22772",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:14.100",
      "lastModified" : "2025-03-07T21:15:14.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22773",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:14.167",
      "lastModified" : "2025-03-07T21:15:14.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files in the underlying operating system.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CF160-4F83-452D-9BA5-E8DCA1A15ABB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E729365A-B367-474E-BD7D-8437AD47D9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDDD143-B396-4C58-9FB9-BA4C3B8B953E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD639D9E-2722-47EF-94F0-2CAF9E94EFD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA9CA7B-AC2C-408A-B759-E2F4778B20ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A42369-3558-4015-AF7B-7F2E2465AE61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D8DDC4-17FB-4A9D-BB01-E8C130B04ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47572BC-93F8-4E53-B2B7-E00855B59499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80337C7-2A72-4E09-858B-0AA817D70746"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670224DA-CE4B-46BE-8B5C-2F310F7988B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B86FAE-2D7E-4B30-835A-C3D37A361A29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE3DC2D-7C6E-4044-AAB7-75FA5451AA56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22774",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:14.253",
      "lastModified" : "2025-03-07T21:15:14.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files in the underlying operating system.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CF160-4F83-452D-9BA5-E8DCA1A15ABB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E729365A-B367-474E-BD7D-8437AD47D9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDDD143-B396-4C58-9FB9-BA4C3B8B953E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD639D9E-2722-47EF-94F0-2CAF9E94EFD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA9CA7B-AC2C-408A-B759-E2F4778B20ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A42369-3558-4015-AF7B-7F2E2465AE61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D8DDC4-17FB-4A9D-BB01-E8C130B04ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47572BC-93F8-4E53-B2B7-E00855B59499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80337C7-2A72-4E09-858B-0AA817D70746"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670224DA-CE4B-46BE-8B5C-2F310F7988B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B86FAE-2D7E-4B30-835A-C3D37A361A29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE3DC2D-7C6E-4044-AAB7-75FA5451AA56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22775",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:14.330",
      "lastModified" : "2025-03-07T21:15:14.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability exists which allows an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22776",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:14.473",
      "lastModified" : "2025-03-07T21:15:14.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59612211-5054-44DC-B028-61A2C5C6133D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E68DB6-149B-4469-BD27-69F1AC59166F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9AA178-1327-402E-8740-8409ECA448BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33BAD0-0596-4910-B096-99E2033F73D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDA5E-3895-463A-86EA-1823EC1B5045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17162DB3-973E-47C6-9157-39A0E94603F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CF160-4F83-452D-9BA5-E8DCA1A15ABB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E729365A-B367-474E-BD7D-8437AD47D9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FDDD143-B396-4C58-9FB9-BA4C3B8B953E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mc-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD639D9E-2722-47EF-94F0-2CAF9E94EFD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA9CA7B-AC2C-408A-B759-E2F4778B20ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A42369-3558-4015-AF7B-7F2E2465AE61"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-hw-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D8DDC4-17FB-4A9D-BB01-E8C130B04ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B47572BC-93F8-4E53-B2B7-E00855B59499"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-1k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D80337C7-2A72-4E09-858B-0AA817D70746"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670224DA-CE4B-46BE-8B5C-2F310F7988B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B86FAE-2D7E-4B30-835A-C3D37A361A29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:mcr-va-5k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE3DC2D-7C6E-4044-AAB7-75FA5451AA56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22777",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:14.563",
      "lastModified" : "2025-03-07T21:15:14.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated information disclosure vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files in the underlying operating system.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22778",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-01T08:15:14.657",
      "lastModified" : "2025-03-07T21:15:14.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ArubaOS web management interface could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0-2.3.0.0",
            "versionEndIncluding" : "8.7.0.0-2.3.0.8",
            "matchCriteriaId" : "D7940F80-A647-488F-95D7-FBBB46CD5100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndIncluding" : "8.6.0.19",
            "matchCriteriaId" : "83AF7A4D-4169-47A8-A6BD-70C2AEB5E199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.0.0",
            "versionEndIncluding" : "8.10.0.4",
            "matchCriteriaId" : "FCB80251-B38D-4145-89E8-FFBFB653D8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0",
            "versionEndIncluding" : "10.3.1.0",
            "matchCriteriaId" : "E9226A2A-7048-4300-AC20-7629AA05E9D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25694",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-01T08:15:14.730",
      "lastModified" : "2023-11-07T04:09:07.633",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26281",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-01T08:15:14.783",
      "lastModified" : "2024-11-21T07:51:03.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM HTTP Server 8.5 used by IBM WebSphere Application Server could allow a remote user to cause a denial of service using a specially crafted URL.  IBM X-Force ID:  248296."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:http_server:8.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "000FBE9B-D6A0-4C2F-9466-B4E3EBC023AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F480AA32-841A-4E68-9343-B2E7548B0A0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492C463-D76E-49B7-A4D4-3B499E422D89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:z\\/os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E97A964-6F9E-4C87-9B90-21AE2C1DF52F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F372EA-3A78-4703-A457-751B2C98D796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/248296",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6958522",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/248296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6958522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1112",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-01T10:15:09.700",
      "lastModified" : "2024-11-21T07:38:28.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Drag and Drop Multiple File Upload Contact Form 7 5.0.6.1 on WordPress. It has been classified as critical. Affected is an unknown function of the file admin-ajax.php. The manipulation of the argument upload_name leads to relative path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222072."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codedropz:drag_and_drop_multiple_file_upload_-_contact_form_7:*:*:*:*:pro:wordpress:*:*",
            "versionEndExcluding" : "5.0.6.3",
            "matchCriteriaId" : "6D0D0D2F-60D2-4829-970B-BB7CDC9CEE40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Nickguitar/Drag-and-Drop-Multiple-File-Uploader-PRO-Path-Traversal",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222072",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222072",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Nickguitar/Drag-and-Drop-Multiple-File-Uploader-PRO-Path-Traversal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1113",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-01T10:15:10.780",
      "lastModified" : "2024-11-21T07:38:29.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Simple Payroll System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file admin/?page=admin of the component POST Parameter Handler. The manipulation of the argument fullname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222073 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_payroll_system_with_dynamic_tax_bracket_project:simple_payroll_system_with_dynamic_tax_bracket:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281FA138-2856-480E-9180-8A2E47D9FCCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lcg-22266/bug_report/blob/main/vendors/oretnom23/Simple%20Payroll%20System/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222073",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222073",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lcg-22266/bug_report/blob/main/vendors/oretnom23/Simple%20Payroll%20System/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1064",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-01T13:15:10.183",
      "lastModified" : "2024-11-21T07:38:23.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection.This issue affects Weighbridge Automation Software: before 1.1.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uzaybaskul:weighbridge_automation_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1",
            "matchCriteriaId" : "87BABAD1-CF18-4A85-B2D4-DBF56D474FEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0115",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1114",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-01T13:15:10.347",
      "lastModified" : "2024-11-21T07:38:29.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation.This issue affects e-Belediye: from 1.0.0.95 before 1.0.0.100.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eskom:e-belediye:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0.95",
            "versionEndExcluding" : "1.0.0.100",
            "matchCriteriaId" : "B7C2EFBA-5833-4F6E-A69E-47B151BAC3E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0113-2",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0113-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23973",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-01T13:15:10.437",
      "lastModified" : "2024-11-21T07:47:11.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in a3rev Software Contact Us Page – Contact People plugin <= 3.7.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:a3rev:contact_us_page_-_contact_people:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.7.1",
            "matchCriteriaId" : "166865D0-284C-4690-8876-D83BC6995ED6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/contact-us-page-contact-people/wordpress-contact-us-page-contact-people-plugin-3-7-0-cross-site-request-forgery-csrf-leading-to-contact-creation-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/contact-us-page-contact-people/wordpress-contact-us-page-contact-people-plugin-3-7-0-cross-site-request-forgery-csrf-leading-to-contact-creation-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23974",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-01T13:15:10.520",
      "lastModified" : "2026-04-28T19:19:35.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 affecting all registration actions (delete, delete all, edit, update)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fullworksplugins:quick_event_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "9.7.5",
            "matchCriteriaId" : "4B4745F0-6309-45C9-9A83-5F72674E6F4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/quick-event-manager/wordpress-quick-event-manager-plugin-9-7-4-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/quick-event-manager/wordpress-quick-event-manager-plugin-9-7-4-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23984",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-01T13:15:10.607",
      "lastModified" : "2026-04-28T19:19:35.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Bubble Menu – circle floating menu plugin <= 3.0.1 leading to form deletion."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wow-company:bubble_menu:*:*:*:*:free:wordpress:*:*",
            "versionEndExcluding" : "3.0.2",
            "matchCriteriaId" : "BCFBFBBD-5F71-4CC5-9E59-BE91DB90DA42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/bubble-menu/wordpress-bubble-menu-circle-floating-menu-plugin-3-0-1-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/bubble-menu/wordpress-bubble-menu-circle-floating-menu-plugin-3-0-1-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1115",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-01T14:15:16.493",
      "lastModified" : "2024-11-21T07:38:29.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.18",
            "matchCriteriaId" : "C5062760-52C7-46A6-8252-9C6869A920AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/c6368b7cc69a3ebf2c83de7586f492ca1f404dd3",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/cfa80332-e4cf-4d64-b3e5-e10298628d17",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/c6368b7cc69a3ebf2c83de7586f492ca1f404dd3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/cfa80332-e4cf-4d64-b3e5-e10298628d17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1116",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-01T14:15:16.593",
      "lastModified" : "2024-11-21T07:38:29.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.18",
            "matchCriteriaId" : "C5062760-52C7-46A6-8252-9C6869A920AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/f6d322efa207a737eedd8726b7c92e957a83341e",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3245ff99-9adf-4db9-af94-f995747e09d1",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/f6d322efa207a737eedd8726b7c92e957a83341e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3245ff99-9adf-4db9-af94-f995747e09d1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1117",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-01T14:15:16.693",
      "lastModified" : "2024-11-21T07:38:29.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:L",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.18",
            "matchCriteriaId" : "C5062760-52C7-46A6-8252-9C6869A920AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/b9ba69f66d6a9986fb36f239661b98cd33a89853",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e8c0044d-a31b-4347-b2d5-59fbf492da39",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/b9ba69f66d6a9986fb36f239661b98cd33a89853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e8c0044d-a31b-4347-b2d5-59fbf492da39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T15:15:11.253",
      "lastModified" : "2024-11-21T07:45:59.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method `stripejsValidationModuleFrontController::initContent()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stripe:stripe_payment_pro:*:*:*:*:*:prestashop:*:*",
            "versionEndExcluding" : "4.5.5",
            "matchCriteriaId" : "85B3E21A-0FA7-44C8-82B6-3913D0980E24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/03/01/stripejs.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/03/01/stripejs.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24567",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-03-01T15:15:11.310",
      "lastModified" : "2024-11-21T07:48:08.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell NetWorker versions 19.5 and earlier contain 'RabbitMQ' version disclosure vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and may launch target-specific attacks.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_networker:*:*:*:*:virtual:*:*:*",
            "versionEndExcluding" : "19.6",
            "matchCriteriaId" : "99E07B7D-C410-48FF-990A-AB8EE3C2F05E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000210471/dsa-2023-058-dell-networker-security-update-for-version-disclosure-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000210471/dsa-2023-058-dell-networker-security-update-for-version-disclosure-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T15:15:11.393",
      "lastModified" : "2024-11-21T07:48:21.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:struktur:libde265:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99171A4-8D0A-441C-98FE-0D24B39BFFE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strukturag/libde265/issues/379",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/strukturag/libde265/issues/379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T15:15:11.447",
      "lastModified" : "2024-11-21T07:48:22.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:struktur:libde265:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99171A4-8D0A-441C-98FE-0D24B39BFFE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strukturag/libde265/issues/378",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/strukturag/libde265/issues/378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T15:15:11.510",
      "lastModified" : "2025-03-07T21:15:16.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:struktur:libde265:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99171A4-8D0A-441C-98FE-0D24B39BFFE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strukturag/libde265/issues/382",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/strukturag/libde265/issues/382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T15:15:11.577",
      "lastModified" : "2025-03-07T21:15:16.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_weighted_pred_8_fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:struktur:libde265:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99171A4-8D0A-441C-98FE-0D24B39BFFE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strukturag/libde265/issues/384",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/strukturag/libde265/issues/384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T15:15:11.623",
      "lastModified" : "2025-03-07T21:15:16.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_unweighted_pred_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:struktur:libde265:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99171A4-8D0A-441C-98FE-0D24B39BFFE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strukturag/libde265/issues/380",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/strukturag/libde265/issues/380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T15:15:11.683",
      "lastModified" : "2025-03-07T16:15:36.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_unweighted_pred_16_fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:struktur:libde265:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99171A4-8D0A-441C-98FE-0D24B39BFFE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strukturag/libde265/issues/385",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/strukturag/libde265/issues/385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T15:15:11.743",
      "lastModified" : "2025-03-07T21:15:16.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:struktur:libde265:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99171A4-8D0A-441C-98FE-0D24B39BFFE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strukturag/libde265/issues/383",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/strukturag/libde265/issues/383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T15:15:11.803",
      "lastModified" : "2024-11-21T07:49:20.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function in motion.cc."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:struktur:libde265:1.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99171A4-8D0A-441C-98FE-0D24B39BFFE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strukturag/libde265/issues/388",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/strukturag/libde265/issues/388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T15:15:11.860",
      "lastModified" : "2024-11-21T07:49:20.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libredwg:0.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B002438-509E-462D-B17E-129197C3E4B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LibreDWG/libredwg/issues/615",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/LibreDWG/libredwg/issues/615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25544",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-03-01T15:15:11.920",
      "lastModified" : "2024-11-21T07:49:42.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell NetWorker versions 19.5 and earlier contain 'Apache Tomcat' version disclosure vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and may launch target-specific attacks.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_networker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.6",
            "matchCriteriaId" : "7B0A6221-ACDA-4377-9FFE-2E888B4F8C45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000210471/dsa-2023-058-dell-networker-security-update-for-version-disclosure-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000210471/dsa-2023-058-dell-networker-security-update-for-version-disclosure-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0507",
      "sourceIdentifier" : "security@grafana.com",
      "published" : "2023-03-01T16:15:09.647",
      "lastModified" : "2025-02-13T17:15:55.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grafana is an open-source platform for monitoring and observability. \n\nStarting with the 8.1 branch, Grafana had a stored XSS vulnerability affecting the core plugin GeoMap. \n\nThe stored XSS vulnerability was possible due to map attributions weren't properly sanitized and allowed arbitrary JavaScript to be executed in the context of the currently authorized user of the Grafana instance. \n\nAn attacker needs to have the Editor role in order to change a panel to include a map attribution containing JavaScript. \n\nThis means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user having Admin role if the user with Admin role executes malicious JavaScript viewing a dashboard. \n\nUsers may upgrade to version 8.5.21, 9.2.13 and 9.3.8 to receive a fix."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@grafana.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@grafana.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.5.21",
            "matchCriteriaId" : "C69BD980-A7D8-4E4F-9D05-BD0FD13F5B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.13",
            "matchCriteriaId" : "C011698D-074B-486F-AACF-770F4EB94696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "9.3.8",
            "matchCriteriaId" : "F026C7DA-A969-45F5-83AF-582651D1AA0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://grafana.com/security/security-advisories/cve-2023-0507/",
        "source" : "security@grafana.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0001/",
        "source" : "security@grafana.com"
      }, {
        "url" : "https://grafana.com/security/security-advisories/cve-2023-0507/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0594",
      "sourceIdentifier" : "security@grafana.com",
      "published" : "2023-03-01T16:15:09.743",
      "lastModified" : "2024-11-21T07:37:27.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grafana is an open-source platform for monitoring and observability. \n\nStarting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. \n\nThe stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this will be rendered when the span's attributes/resources are expanded.\n\nAn attacker needs to have the Editor role in order to change the value of a trace view visualization to contain JavaScript. \n\nThis means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user having Admin role if the user with Admin role executes malicious JavaScript viewing a dashboard. \n\nUsers may upgrade to version 8.5.21, 9.2.13 and 9.3.8 to receive a fix. \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@grafana.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@grafana.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "8.5.21",
            "matchCriteriaId" : "C8F0A695-0DD1-44B2-8E2E-34EB9E611038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.13",
            "matchCriteriaId" : "C011698D-074B-486F-AACF-770F4EB94696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "9.3.8",
            "matchCriteriaId" : "F026C7DA-A969-45F5-83AF-582651D1AA0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://grafana.com/security/security-advisories/cve-2023-0594/",
        "source" : "security@grafana.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/security/security-advisories/cve-2023-0594/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230331-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0460",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-03-01T17:15:11.397",
      "lastModified" : "2024-11-21T07:37:13.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YouTube Embedded 1.2 SDK binds to a service within the YouTube Main App. After binding, a remote context is created with the flags Context.CONTEXT_INCLUDE_CODE | Context.CONTEXT_IGNORE_SECURITY. This allows the client app to remotely load code from YouTube Main App by retrieving the Main App’s ClassLoader. A potential vulnerability in the binding logic used by the client SDK where the SDK ends up calling bindService() on a malicious app rather than YT Main App. This creates a vulnerability where the SDK can load the malicious app’s ClassLoader instead, allowing the malicious app to load arbitrary code into the calling app whenever the embedded SDK is invoked.\n\nIn order to trigger this vulnerability, an attacker must masquerade the Youtube app and install it on a device, have a second app that uses the Embedded player and typically distribute both to the victim outside of the Play Store."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-470"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-470"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:youtube_android_player_api:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2",
            "versionEndIncluding" : "1.2.2",
            "matchCriteriaId" : "4E846848-D5EB-47FF-BBB4-E3B25BF23570"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developers.google.com/youtube/android/player/downloads",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://developers.google.com/youtube/android/player/downloads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1127",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-01T19:15:25.860",
      "lastModified" : "2024-11-21T07:38:30.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Divide By Zero in GitHub repository vim/vim prior to 9.0.1367."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.1367",
            "matchCriteriaId" : "F1F930ED-3963-4FA6-AC1A-4A1286298B02"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vim/vim/commit/e0f869196930ef5f25a0ac41c9215b09c9ce2d3c",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2d4d309e-4c96-415f-9070-36d0815f1beb",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDVN5HSWPNVP4QXBPCEGZDLZKURLJWTE/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ6TMKKBXHGVUHWFGM4X46VIJO7ZAG2W/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/vim/vim/commit/e0f869196930ef5f25a0ac41c9215b09c9ce2d3c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2d4d309e-4c96-415f-9070-36d0815f1beb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDVN5HSWPNVP4QXBPCEGZDLZKURLJWTE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ6TMKKBXHGVUHWFGM4X46VIJO7ZAG2W/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T19:15:25.967",
      "lastModified" : "2025-03-20T20:15:28.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers expect NULL in the error case, but an error pointer is used."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.17",
            "matchCriteriaId" : "A37A8EE9-3F14-4C7A-A882-DA8A6AD1897C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/045a31b95509c8f25f5f04ec5e0dec5cd09f2c5f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230331-0004/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/045a31b95509c8f25f5f04ec5e0dec5cd09f2c5f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230331-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25931",
      "sourceIdentifier" : "security@medtronic.com",
      "published" : "2023-03-01T19:15:26.047",
      "lastModified" : "2024-11-21T07:50:26.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which has greater control over therapy parameters than the patient app.  Changes still cannot be made outside of the established therapy parameters of the programmer.  For unauthorized access to occur, an individual would need physical access to the Smart Programmer. \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@medtronic.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@medtronic.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-620"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medtronic:interstim_x_clinician:a51300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81EEC6A7-21C5-46B5-83BD-C3BF94A6D41B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medtronic:micro_clinician:a51200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDDEB06-CB9C-4CD4-B0E1-59B870AAC7C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://global.medtronic.com/xg-en/product-security/security-bulletins/pelvic-health-interstim-micro.html",
        "source" : "security@medtronic.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://global.medtronic.com/xg-en/product-security/security-bulletins/pelvic-health-interstim-micro.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1097",
      "sourceIdentifier" : "security@baicells.com",
      "published" : "2023-03-01T20:15:11.073",
      "lastModified" : "2024-11-21T07:38:27.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Baicells EG7035-M11 devices with firmware through  BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party analyst and have been confirmed exploitable special thanks to Lionel Musonza for the discovery.\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@baicells.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@baicells.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:baicells:eg7035-m11_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "bce-odu-1.0.8",
            "matchCriteriaId" : "36273B84-D85D-43E1-92E2-B30F5C68E989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:baicells:eg7035-m11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA6185C-6193-4821-823C-7C6BF54208B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.na.baicells.com/t/baice-bm-2-5-26-new-cpe-software-has-been-released/1756",
        "source" : "security@baicells.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://img.baicells.com//Upload/20220524/FILE/BaiCE_BM_2.5.26_NA.bin.bin",
        "source" : "security@baicells.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://community.na.baicells.com/t/baice-bm-2-5-26-new-cpe-software-has-been-released/1756",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://img.baicells.com//Upload/20220524/FILE/BaiCE_BM_2.5.26_NA.bin.bin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1130",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-01T20:15:11.853",
      "lastModified" : "2024-11-21T07:38:30.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file processlogin. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222105 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:computer_parts_sales_and_inventory_system_project:computer_parts_sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA0F478-300D-4B7A-AD30-0965A74BE217"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WhiteA1so/Cvetest/blob/main/Sql1.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222105",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222105",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/WhiteA1so/Cvetest/blob/main/Sql1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1131",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-01T20:15:12.423",
      "lastModified" : "2024-11-21T07:38:30.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Computer Parts Sales and Inventory System 1.0 and classified as problematic. This vulnerability affects unknown code of the file customer.php. The manipulation of the argument FIRST_NAME/LAST_NAME/PHONE_NUMBER leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222106 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:computer_parts_sales_and_inventory_system_project:computer_parts_sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA0F478-300D-4B7A-AD30-0965A74BE217"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WhiteA1so/Cvetest/blob/main/1.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222106",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222106",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/WhiteA1so/Cvetest/blob/main/1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23001",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T20:15:13.270",
      "lastModified" : "2025-03-20T20:15:28.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 5.16.3, drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value (expects it to be NULL in the error case, whereas it is actually an error pointer)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.16.3",
            "matchCriteriaId" : "6FBCF385-C05A-44CC-AF30-EDA38785D4BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3ba880a12df5aa4488c18281701b5b1bc3d4531a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3ba880a12df5aa4488c18281701b5b1bc3d4531a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T20:15:13.813",
      "lastModified" : "2025-03-20T19:15:18.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 5.16.3, drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in the error case, whereas it is actually an error pointer)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.16.3",
            "matchCriteriaId" : "6FBCF385-C05A-44CC-AF30-EDA38785D4BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6845667146a28c09b5dfc401c1ad112374087944",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6845667146a28c09b5dfc401c1ad112374087944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T20:15:14.233",
      "lastModified" : "2025-03-20T15:15:38.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 5.16, tools/perf/util/expr.c lacks a check for the hashmap__new return value."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.16",
            "matchCriteriaId" : "D692A2AE-8E9E-46AE-8670-7E1284317A25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/0a515a06c5ebfa46fee3ac519e418f801e718da4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230331-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/0a515a06c5ebfa46fee3ac519e418f801e718da4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230331-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T20:15:14.673",
      "lastModified" : "2025-03-19T20:15:17.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.19",
            "matchCriteriaId" : "E74E9AF8-BDF5-4917-A9CA-0AAD8E13149B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/15342f930ebebcfe36f2415049736a77d7d2e045",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/15342f930ebebcfe36f2415049736a77d7d2e045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T20:15:15.100",
      "lastModified" : "2025-03-19T19:15:38.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer). NOTE: this is disputed by third parties because there are no realistic cases in which a user can cause the alloc_memory_type error case to be reached."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "108695B6-7133-4B6C-80AF-0F66880FE858"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:15:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "F6461786-1240-4D6A-B767-9EE3BD4A6DAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1208844#c2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4a625ceee8a0ab0273534cb6b432ce6b331db5ee",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1208844#c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4a625ceee8a0ab0273534cb6b432ce6b331db5ee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T20:15:15.520",
      "lastModified" : "2025-03-19T19:15:38.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (expects it to be NULL in the error case, whereas it is actually an error pointer)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.15.13",
            "matchCriteriaId" : "593B86F2-A429-462E-84F5-AA4BA0DA61A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.13",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6b8b42585886c59a008015083282aae434349094",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6b8b42585886c59a008015083282aae434349094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T20:15:15.933",
      "lastModified" : "2024-11-21T07:47:26.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey2_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey2_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T20:15:16.370",
      "lastModified" : "2024-11-21T07:47:26.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey4 parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey4_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey4_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T20:15:16.800",
      "lastModified" : "2024-11-21T07:47:26.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T20:15:17.253",
      "lastModified" : "2024-11-21T07:47:26.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey1_5g parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey1_5g_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey1_5g_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T20:15:17.680",
      "lastModified" : "2024-11-21T07:47:27.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey3_5g parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey3_5g_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey3_5g_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T20:15:18.113",
      "lastModified" : "2024-11-21T07:47:27.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey_5g parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey_5g_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey_5g_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T20:15:18.553",
      "lastModified" : "2024-11-21T07:47:27.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey3 parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey3_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey3_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22738",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-01T21:15:10.397",
      "lastModified" : "2024-11-21T07:45:19.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Assigning existing users to a different organizations is currently possible. It may lead to unintended access: if a user from organization A is accidentally assigned to organization B, they will retain their permissions and therefore might be able to access stuff they should not be allowed to access. This issue is patched in version 3.8.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vantage6:vantage6:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.1",
            "matchCriteriaId" : "0C666F00-D4E9-450E-A197-6399C730A425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vantage6:vantage6:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndIncluding" : "3.7.3",
            "matchCriteriaId" : "BB9DA9E7-464C-4C7E-A663-364D95684297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vantage6:vantage6:3.8.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB8F275-E306-4985-983A-849D9B33272F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vantage6:vantage6:3.8.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A60FDE-7084-4EA3-9DAC-AA14A2FEF767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vantage6:vantage6:3.8.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "402531F7-2FAA-4324-A423-A63924D09136"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vantage6/vantage6/commit/798aca1de142a4eca175ef51112e2235642f4f24",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vantage6/vantage6/security/advisories/GHSA-vvjv-97j8-94xh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vantage6/vantage6/commit/798aca1de142a4eca175ef51112e2235642f4f24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vantage6/vantage6/security/advisories/GHSA-vvjv-97j8-94xh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T21:15:10.723",
      "lastModified" : "2025-03-07T17:15:16.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepauth_5g parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepauth_5g_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepauth_5g_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T21:15:10.797",
      "lastModified" : "2025-03-10T17:15:33.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the security parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_security_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_security_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T21:15:10.863",
      "lastModified" : "2025-03-07T21:15:15.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wrlEn_5g_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wrlEn_5g_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T21:15:10.933",
      "lastModified" : "2025-03-07T21:15:15.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wrlEn_5g_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wrlEn_5g_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T21:15:10.997",
      "lastModified" : "2025-03-07T21:15:15.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_security_5g_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_security_5g_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T21:15:11.057",
      "lastModified" : "2025-03-18T16:15:16.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the ssid_5g parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_ssid_5g_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_ssid_5g_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T21:15:11.117",
      "lastModified" : "2025-03-18T16:15:16.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepauth_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepauth_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T21:15:11.177",
      "lastModified" : "2025-03-18T16:15:17.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wrlEn_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wrlEn_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T21:15:11.237",
      "lastModified" : "2025-03-07T21:15:15.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey2_5g parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey2_5g_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey2_5g_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T21:15:11.290",
      "lastModified" : "2025-03-07T21:15:15.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey4_5g parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey4_5g_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey4_5g_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-01T21:15:11.347",
      "lastModified" : "2024-11-21T07:47:26.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07EC483C-D7CC-4A62-B2CC-FE8C3C5B0E00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:heimgardtechnologies:eagle_1200ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126ACF7C-A6C5-4A51-A87A-278B7036F5FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://eagle.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey1_DoS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://eagle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://jensen.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://oxnan.com/posts/WifiBasic_wepkey1_DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0053",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-02T01:15:11.590",
      "lastModified" : "2024-11-21T07:36:28.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and \nprior and BACnetstac version 4.2.1 and prior have only FTP and Telnet \navailable for device management. Any sensitive information communicated \nthrough these protocols, such as credentials, is sent in cleartext. An \nattacker could obtain sensitive information such as user credentials to \ngain access to the system. \n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:nova_220_eyk220f001_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3-006",
            "matchCriteriaId" : "5E514737-2011-43D1-8283-58D57BA13BE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:nova_220_eyk220f001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F35195-7225-426C-998F-9E68AE7823F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:nova_230_eyk230f001_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3-006",
            "matchCriteriaId" : "0CBBF6A0-9764-47E0-81DC-04AEEED9AC18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:nova_230_eyk230f001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11465A2B-145D-47A5-9275-C4853304488C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:nova_106_eyk300f001_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3-006",
            "matchCriteriaId" : "4D125C85-B22C-4A2F-A304-988C606259BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:nova_106_eyk300f001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "668A40CB-2C90-426B-B0B3-709C6601104D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:modunet300_ey-am300f001_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3-006",
            "matchCriteriaId" : "8668DBA6-866D-43DE-97F6-C7D91E1FD308"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:modunet300_ey-am300f001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7214F356-6035-4A3B-8519-F6D89FF00370"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:modunet300_ey-am300f002_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.3-006",
            "matchCriteriaId" : "2A38DFF4-32E2-4B7C-A93D-8ADE3A862FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:modunet300_ey-am300f002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8B577B-9BEB-4DE3-A2A4-648EAF1C15CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sauter-controls:bacnetstac:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.1",
            "matchCriteriaId" : "10FFD021-861D-40B7-B545-8F2F6BA70B67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22462",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T01:15:11.727",
      "lastModified" : "2024-11-21T07:44:51.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grafana is an open-source platform for monitoring and observability. On 2023-01-01 during an internal audit of Grafana, a member of the security team found a stored XSS vulnerability affecting the core plugin \"Text\". The stored XSS vulnerability requires several user interactions in order to be fully exploited. The vulnerability was possible due to React's render cycle that will pass though the unsanitized HTML code, but in the next cycle the HTML is cleaned up and saved in Grafana's database. An attacker needs to have the Editor role in order to change a Text panel to include JavaScript. Another user needs to edit the same Text panel, and click on \"Markdown\" or \"HTML\" for the code to be executed. This means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user having Admin role if the user with Admin role executes malicious JavaScript viewing a dashboard. This issue has been patched in versions 9.2.10 and 9.3.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.10",
            "matchCriteriaId" : "2145D69A-D240-4E87-80F1-08AC1F4E5DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "9.3.4",
            "matchCriteriaId" : "E8642012-7942-4810-8DB0-1894D3BF4662"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/grafana/grafana/commit/db83d5f398caffe35c5846cfa7727d1a2a414165",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/grafana/grafana/security/advisories/GHSA-7rqg-hjwc-6mjf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/blog/2023/02/28/grafana-security-release-new-versions-with-security-fixes-for-cve-2023-0594-cve-2023-0507-and-cve-2023-22462/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0004/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/grafana/grafana/commit/db83d5f398caffe35c5846cfa7727d1a2a414165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/grafana/grafana/security/advisories/GHSA-7rqg-hjwc-6mjf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/blog/2023/02/28/grafana-security-release-new-versions-with-security-fixes-for-cve-2023-0594-cve-2023-0507-and-cve-2023-22462/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26046",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T01:15:11.840",
      "lastModified" : "2024-11-21T07:50:39.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version 0.1.1 is vulnerable to bypassing common web attack rules when a specific HTML entities payload is used. This vulnerability allows an attacker to execute arbitrary JavaScript code on the victim's browser and compromise the security of the web application. The vulnerability exists due to teler-waf failure to properly sanitize and filter HTML entities in user input. An attacker can exploit this vulnerability to bypass common web attack threat rules in teler-waf and launch cross-site scripting (XSS) attacks. The attacker can execute arbitrary JavaScript code on the victim's browser and steal sensitive information, such as login credentials and session tokens, or take control of the victim's browser and perform malicious actions. This issue has been fixed in version 0.1.1.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kitabisa:teler-waf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.1",
            "matchCriteriaId" : "B024397E-BFE9-4CF5-AC4F-84248CAF9865"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kitabisa/teler-waf/commit/d1d49cfddfa3ec2adad962870f14b85cd1aaf739",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kitabisa/teler-waf/releases/tag/v0.1.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kitabisa/teler-waf/security/advisories/GHSA-9f95-hhg4-pg4f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kitabisa/teler-waf/commit/d1d49cfddfa3ec2adad962870f14b85cd1aaf739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kitabisa/teler-waf/releases/tag/v0.1.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kitabisa/teler-waf/security/advisories/GHSA-9f95-hhg4-pg4f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0196",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-03-02T02:15:41.200",
      "lastModified" : "2024-11-21T07:36:43.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nNVIDIA CUDA Toolkit SDK contains a bug in cuobjdump, where a local user running the tool against an ill-formed binary may cause a null- pointer dereference, which may result in a limited denial of service.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1",
            "matchCriteriaId" : "89540470-585C-46D3-A345-A92D145F870F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA79AC0-A0CC-4EE6-AEF5-9B8C8EA2C9F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5446",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0228",
      "sourceIdentifier" : "cybersecurity@ch.abb.com",
      "published" : "2023-03-02T02:15:41.303",
      "lastModified" : "2024-11-21T07:36:46.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@ch.abb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@ch.abb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abb:symphony_plus_s\\+_operations:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "2.1",
            "matchCriteriaId" : "A4420528-FF5F-4DF5-8EF8-7FE3AE3E2E2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abb:symphony_plus_s\\+_operations:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.3",
            "matchCriteriaId" : "039A846A-1C0D-4891-AF1D-594168EB541B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abb:symphony_plus_s\\+_operations:2.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6C585018-9810-4239-BF2B-D34DA1053075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abb:symphony_plus_s\\+_operations:2.1:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "746D2895-488F-4460-99D8-5BA92FA76115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abb:symphony_plus_s\\+_operations:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E94F36AC-37BA-4192-8790-6F432A5CE318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abb:symphony_plus_s\\+_operations:3.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1F98897F-AB7D-47C1-A560-94C59C094765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abb:symphony_plus_s\\+_operations:3.3:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "6435B0C6-91D9-484A-9891-11910776E542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abb:symphony_plus_s\\+_operations:3.3:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CCF182-6902-4771-96A9-6BD3C2A64158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://search.abb.com/library/Download.aspx?DocumentID=7PAA006722&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "cybersecurity@ch.abb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://search.abb.com/library/Download.aspx?DocumentID=7PAA006722&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1106",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-02T02:15:41.977",
      "lastModified" : "2024-11-21T07:38:28.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpress:flatpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3",
            "matchCriteriaId" : "2C1FD291-99DD-40F3-96DB-D79CA8279692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatpressblog/flatpress/commit/5f23b4c2eac294cc0ba5e541f83a6f8a26f9fed1",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/1288ec00-f69d-4b84-abce-efc9a97941a0",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpressblog/flatpress/commit/5f23b4c2eac294cc0ba5e541f83a6f8a26f9fed1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/1288ec00-f69d-4b84-abce-efc9a97941a0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1107",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-02T02:15:42.057",
      "lastModified" : "2024-11-21T07:38:28.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpress:flatpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3",
            "matchCriteriaId" : "2C1FD291-99DD-40F3-96DB-D79CA8279692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatpressblog/flatpress/commit/d3f329496536dc99f9707f2f295d571d65a496f5",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/4b880868-bd28-4fd0-af56-7686e55d3762",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpressblog/flatpress/commit/d3f329496536dc99f9707f2f295d571d65a496f5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/4b880868-bd28-4fd0-af56-7686e55d3762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1146",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-02T03:15:08.977",
      "lastModified" : "2024-11-21T07:38:32.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository flatpressblog/flatpress prior to 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpress:flatpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3",
            "matchCriteriaId" : "2C1FD291-99DD-40F3-96DB-D79CA8279692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatpressblog/flatpress/commit/0ee4f2e8a7b9276880b56858e408cc9c6643cc3b",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d6d1e1e2-2f67-4d28-aa84-b30fb1d2e737",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpressblog/flatpress/commit/0ee4f2e8a7b9276880b56858e408cc9c6643cc3b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d6d1e1e2-2f67-4d28-aa84-b30fb1d2e737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1147",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-02T03:15:09.790",
      "lastModified" : "2024-11-21T07:38:33.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpress:flatpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3",
            "matchCriteriaId" : "2C1FD291-99DD-40F3-96DB-D79CA8279692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatpressblog/flatpress/commit/264217f318a8852c4f3e34350d4a0e1363cdd727",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/187f5353-f866-4d26-a5ba-fca378520020",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpressblog/flatpress/commit/264217f318a8852c4f3e34350d4a0e1363cdd727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/187f5353-f866-4d26-a5ba-fca378520020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1148",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-02T03:15:09.910",
      "lastModified" : "2024-11-21T07:38:33.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpress:flatpress:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3",
            "matchCriteriaId" : "2C1FD291-99DD-40F3-96DB-D79CA8279692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatpressblog/flatpress/commit/3a32aad0dec5df24c6576d7567d4f2eadbfc75de",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f0cc2c4b-fdf9-483b-9a83-4e0dfeb4dac7",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpressblog/flatpress/commit/3a32aad0dec5df24c6576d7567d4f2eadbfc75de",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f0cc2c4b-fdf9-483b-9a83-4e0dfeb4dac7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25155",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T04:15:10.807",
      "lastModified" : "2024-11-21T07:49:12.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SRANDMEMBER`, `ZRANDMEMBER`, and `HRANDFIELD` commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. This problem affects all Redis versions. Patches were released in Redis version(s) 6.0.18, 6.2.11 and 7.0.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.18",
            "matchCriteriaId" : "6F70AB47-0452-4438-87FC-6CBD440815EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.2.11",
            "matchCriteriaId" : "F953DA13-66E1-4983-9744-F861931E8628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.9",
            "matchCriteriaId" : "BB0A4E48-9EF2-4F32-B72C-7F243EC31DB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redis/redis/commit/2a2a582e7cd99ba3b531336b8bd41df2b566e619",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis/releases/tag/6.0.18",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redis/redis/releases/tag/6.2.11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redis/redis/releases/tag/7.0.9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redis/redis/security/advisories/GHSA-x2r7-j9vw-3w83",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/commit/2a2a582e7cd99ba3b531336b8bd41df2b566e619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis/releases/tag/6.0.18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redis/redis/releases/tag/6.2.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redis/redis/releases/tag/7.0.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redis/redis/security/advisories/GHSA-x2r7-j9vw-3w83",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25806",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T04:15:10.987",
      "lastModified" : "2024-11-21T07:50:14.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. There is an observable discrepancy in the authentication response time between calls where the user provided exists and calls where it does not. This issue only affects calls using the internal basic identity provider (IdP), and not other externally configured IdPs. Patches were released in versions 1.3.9 and 2.6.0, there are no workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:opensearch:*:*:*:*:*:docker:*:*",
            "versionEndExcluding" : "1.3.9",
            "matchCriteriaId" : "F4FB9386-A716-45F8-BADB-FD3DEC46CE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:opensearch:*:*:*:*:*:docker:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.6.0",
            "matchCriteriaId" : "3B071571-5E3B-4949-BF5C-A940332F6ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:opensearch_security:*:*:*:*:*:opensearch:*:*",
            "versionEndExcluding" : "1.3.9",
            "matchCriteriaId" : "086C9822-AD99-4E9D-99F5-50D47AA4A24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:opensearch_security:*:*:*:*:*:opensearch:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.6.0",
            "matchCriteriaId" : "BF88357A-F2C2-4D68-9A2D-E020B60024FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opensearch-project/security/security/advisories/GHSA-c6wg-cm5x-rqvj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/opensearch-project/security/security/advisories/GHSA-c6wg-cm5x-rqvj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26053",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T04:15:11.147",
      "lastModified" : "2024-11-21T07:50:40.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gradle is a build tool with a focus on build automation and support for multi-language development. This is a collision attack on long IDs (64bits) for PGP keys. Users of dependency verification in Gradle are vulnerable if they use long IDs for PGP keys in a `trusted-key` or `pgp` element in their dependency verification metadata file. The fix is to fail dependency verification if anything but a fingerprint is used in a trust element in dependency verification metadata. The problem is fixed in Gradle 8.0 and above. The problem is also patched in Gradle 6.9.4 and 7.6.1. As a workaround, use only full fingerprint IDs for `trusted-key` or `pgp` element in the metadata is a protection against this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradle:gradle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.9.4",
            "matchCriteriaId" : "8732BDFB-DB33-45F9-A52E-15330C68D124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradle:gradle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "81ABACD1-D93F-4D90-AA79-5A64C9D2F71A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gradle/gradle/commit/bf3cc0f2b463033037e67aaacda31291643ea1a9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gradle/gradle/security/advisories/GHSA-c724-3xg7-g3hf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0002/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/gradle/gradle/commit/bf3cc0f2b463033037e67aaacda31291643ea1a9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gradle/gradle/security/advisories/GHSA-c724-3xg7-g3hf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1149",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-02T05:15:11.647",
      "lastModified" : "2024-11-21T07:38:33.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-76"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.0",
            "matchCriteriaId" : "EF93CD27-A3BD-4F17-BE43-6E1F3E795E04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/btcpayserver/btcpayserver/commit/ddb125f45892b4dafdbd5c072af1ce623758bb92",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2e734209-d7b0-4f57-a8be-c65c82208f2f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/commit/ddb125f45892b4dafdbd5c072af1ce623758bb92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2e734209-d7b0-4f57-a8be-c65c82208f2f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1151",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-02T07:15:08.647",
      "lastModified" : "2024-11-21T07:38:33.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Electronic Medical Records System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file administrator.php of the component Cookie Handler. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222163."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electronic_medical_records_system_project:electronic_medical_records_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB384499-422F-4DEE-B1AC-5E5540BBD799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lcg-22266/bug_report/blob/main/vendors/Patrick%20Mvuma/Electronic%20Medical%20Records%20System/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222163",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.222163",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lcg-22266/bug_report/blob/main/vendors/Patrick%20Mvuma/Electronic%20Medical%20Records%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.222163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-02T15:15:10.370",
      "lastModified" : "2025-03-07T16:15:37.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.36.8",
            "matchCriteriaId" : "72FADC28-61B6-42DD-95E3-91A7F0A6C66D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/21/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=242683",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5OKKVEUQAAGH3NHMX3WHWKRPYU4QFKTQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QL5OGMSHRQ26FTYWZUXVNWB2VHOSVXK/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC7DMUX37BRCLAI4VPQYHDUVEGTNYN5A/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-32",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/21/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=242683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5OKKVEUQAAGH3NHMX3WHWKRPYU4QFKTQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QL5OGMSHRQ26FTYWZUXVNWB2VHOSVXK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC7DMUX37BRCLAI4VPQYHDUVEGTNYN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25360",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-02T15:15:10.530",
      "lastModified" : "2025-03-07T17:15:17.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.36.8",
            "matchCriteriaId" : "72FADC28-61B6-42DD-95E3-91A7F0A6C66D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/21/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=242686",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-32",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/21/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=242686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-02T16:15:14.480",
      "lastModified" : "2025-03-07T17:15:17.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.36.8",
            "matchCriteriaId" : "72FADC28-61B6-42DD-95E3-91A7F0A6C66D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/21/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=244249",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-32",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/21/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=244249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-02T16:15:14.570",
      "lastModified" : "2024-11-21T07:49:26.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.36.8",
            "matchCriteriaId" : "72FADC28-61B6-42DD-95E3-91A7F0A6C66D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/21/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=244802",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-32",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/21/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=244802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-02T16:15:14.647",
      "lastModified" : "2024-11-21T07:49:26.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code remotely."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.36.8",
            "matchCriteriaId" : "72FADC28-61B6-42DD-95E3-91A7F0A6C66D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/21/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=242684",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-32",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/21/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://bugs.webkit.org/show_bug.cgi?id=242684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25536",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-03-02T16:15:14.727",
      "lastModified" : "2024-11-21T07:49:41.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell PowerScale OneFS 9.4.0.x contains exposure of sensitive information to an unauthorized actor. A malicious authenticated local user could potentially exploit this vulnerability in certificate management, leading to a potential system takeover.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0.0",
            "versionEndIncluding" : "9.4.0.11",
            "matchCriteriaId" : "3D6CB9D6-7C17-421A-9F8E-4317D46694AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-02T16:15:14.857",
      "lastModified" : "2024-11-21T07:51:56.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yf-exam_project:yf-exam:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9681-5722-40F8-8836-EB0BFED22182"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CleverStupidDog/yf-exam/issues/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-26780",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/CleverStupidDog/yf-exam/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-26780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0085",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-02T17:15:09.957",
      "lastModified" : "2026-04-08T18:17:40.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to reCaptcha Bypass in versions up to, and including, 3.2.1. This is due to insufficient server side checking on the captcha value submitted during a form submission. This makes it possible for unauthenticated attackers to bypass Captcha restrictions and for attackers to utilize bots to submit forms."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.2.1",
            "matchCriteriaId" : "6F8F5F72-CA92-45D6-8985-F25160CD636D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2868889%40metform&new=2868889%40metform&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/plugins/metform/",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/69527d4b-49b6-47cd-93b6-39350f881ec9?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2868889%40metform&new=2868889%40metform&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/plugins/metform/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/69527d4b-49b6-47cd-93b6-39350f881ec9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1118",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-02T18:15:09.637",
      "lastModified" : "2025-04-23T17:16:24.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user detaching rc device. A local user could use this flaw to crash the system or potentially escalate their privileges on the system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.36",
            "versionEndExcluding" : "4.14.308",
            "matchCriteriaId" : "46F8AE37-59BA-4536-9186-3B52313360E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.276",
            "matchCriteriaId" : "C902FC54-DDBD-4DA6-BFEF-26889A267464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.235",
            "matchCriteriaId" : "13DD5E68-8CB4-46EE-9A8F-C7F6C1A84430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.173",
            "matchCriteriaId" : "4D810CFB-B7C5-493C-B98A-0D5F0D8A47B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.99",
            "matchCriteriaId" : "5B8B2AC9-2F31-4A0F-96F5-7E26B50B27BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.16",
            "matchCriteriaId" : "0FD95FDA-6525-4B13-B3FB-49D9995FD8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.2.3",
            "matchCriteriaId" : "88C67289-22AD-4CA9-B202-5F5A80E5BA4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/torvalds/linux/commit/29b0589a865b6f66d141d79b2dd1373e4e50fe17",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0003/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/29b0589a865b6f66d141d79b2dd1373e4e50fe17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1155",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-02T18:15:09.957",
      "lastModified" : "2026-04-08T18:17:53.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the nd_cc_meta_box_cc_price_icon parameter in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nicdark:cost_calculator:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "E6EB288E-C786-4AEC-8433-C8B96A750185"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/nd-projects/#developers",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/750be90d-dc12-4974-8921-75259d56c7b3?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/nd-projects/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/750be90d-dc12-4974-8921-75259d56c7b3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26477",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T18:15:10.293",
      "lastModified" : "2024-11-21T07:51:35.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform. Starting in versions 6.3-rc-1 and 6.2.4, it's possible to inject arbitrary wiki syntax including Groovy, Python and Velocity script macros via the `newThemeName` request parameter (URL parameter), in combination with additional parameters. This has been patched in the supported versions 13.10.10, 14.9-rc-1, and 14.4.6. As a workaround, it is possible to edit `FlamingoThemesCode.WebHomeSheet` and manually perform the changes from the patch fixing the issue.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.4",
            "versionEndExcluding" : "13.10.10",
            "matchCriteriaId" : "12F2B9E1-8405-4459-A296-ECB36B9FF897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.6",
            "matchCriteriaId" : "4DC3E3FE-42E5-412F-AD0B-6E6531319461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.9",
            "matchCriteriaId" : "E0DE5CA5-2618-434D-854A-CDAB06A713E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/ea2e615f50a918802fd60b09ec87aa04bc6ea8e2#diff-e2153fa59f9d92ef67b0afbf27984bd17170921a3b558fac227160003d0dfd2aR283-R284",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-x2qm-r4wx-8gpg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19757",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/ea2e615f50a918802fd60b09ec87aa04bc6ea8e2#diff-e2153fa59f9d92ef67b0afbf27984bd17170921a3b558fac227160003d0dfd2aR283-R284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-x2qm-r4wx-8gpg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26478",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T18:15:10.697",
      "lastModified" : "2024-11-21T07:51:35.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform. Starting in version 14.3-rc-1, `org.xwiki.store.script.TemporaryAttachmentsScriptService#uploadTemporaryAttachment` returns an instance of `com.xpn.xwiki.doc.XWikiAttachment`. This class is not supported to be exposed to users without the `programing` right.\n`com.xpn.xwiki.api.Attachment` should be used instead and takes case of checking the user's rights before performing dangerous operations. This has been patched in versions 14.9-rc-1 and 14.4.6. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-749"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.3",
            "versionEndExcluding" : "14.4.6",
            "matchCriteriaId" : "89AA5983-8A42-4C9C-A0CF-91CDE85710C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.9",
            "matchCriteriaId" : "E0DE5CA5-2618-434D-854A-CDAB06A713E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/3c73c59e39b6436b1074d8834cf276916010014d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-8692-g6g9-gm5p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20180",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/3c73c59e39b6436b1074d8834cf276916010014d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-8692-g6g9-gm5p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26479",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T18:15:11.057",
      "lastModified" : "2024-11-21T07:51:35.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform. Starting in version 6.0, users with write rights can insert well-formed content that is not handled well by the parser. As a consequence, some pages becomes unusable, including the user index (if the page containing the faulty content is a user page) and the page index.\n\nNote that on the page, the normal UI is completely missing and it is not possible to open the editor directly to revert the change as the stack overflow is already triggered while getting the title of the document. This means that it is quite difficult to remove this content once inserted.\n\nThis has been patched in XWiki 13.10.10, 14.4.6, and 14.9-rc-1. A temporary workaround to avoid Stack Overflow errors is to increase the memory allocated to the stack by using the `-Xss` JVM parameter (e.g., `-Xss32m`). This should allow the parser to pass and to fix the faulty content. The consequences for other aspects of the system (e.g., performance) are unknown, and this workaround should be only be used as a temporary solution. The workaround does not prevent the issue occurring again with other content. Consequently, it is strongly advised to upgrade to a version where the issue has been patched."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "13.10.10",
            "matchCriteriaId" : "FBF07EE2-1901-4F21-84BB-BCA087436E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.6",
            "matchCriteriaId" : "4DC3E3FE-42E5-412F-AD0B-6E6531319461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.9",
            "matchCriteriaId" : "E0DE5CA5-2618-434D-854A-CDAB06A713E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/e5b82cd98072464196a468b8f7fe6396dce142a7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-52vf-hvv3-98h7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19838",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/e5b82cd98072464196a468b8f7fe6396dce142a7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-52vf-hvv3-98h7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26480",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T18:15:11.407",
      "lastModified" : "2024-11-21T07:51:36.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform. Starting in version 12.10, a user without script rights can introduce a stored cross-site scripting by using the Live Data macro. This has been patched in XWiki 14.9, 14.4.7, and 13.10.10. There are no known workarounds.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.10",
            "versionEndExcluding" : "13.10.10",
            "matchCriteriaId" : "52A4D585-FE3E-46F2-97F6-A352F8C8D3FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FA3A5151-58FB-48CF-BFFB-5688608200C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.9",
            "matchCriteriaId" : "E0DE5CA5-2618-434D-854A-CDAB06A713E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4D4AE3-507D-4F0A-B597-E8AF301EB26A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/23d5ea9b23e84b5f3d1f1b2d5673fe8c774d0d79",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/556e7823260b826f344c1a6e95d935774587e028",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-32fq-m2q5-h83g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20143",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/23d5ea9b23e84b5f3d1f1b2d5673fe8c774d0d79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/556e7823260b826f344c1a6e95d935774587e028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-32fq-m2q5-h83g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0084",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-02T19:15:10.383",
      "lastModified" : "2026-04-08T17:16:48.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via text areas on forms in versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page, which is the submissions page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.1.2",
            "matchCriteriaId" : "6EE8BEE6-179C-4435-902E-512080B3272A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2845078%40metform&new=2845078%40metform&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/plugins/metform/#description",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2023/02/high-severity-xss-vulnerability-in-metform-elementor-contact-form-builder/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/05f7d9fe-e95f-4ddf-9bce-2aeac3c2e946?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2845078%40metform&new=2845078%40metform&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/plugins/metform/#description",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/05f7d9fe-e95f-4ddf-9bce-2aeac3c2e946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1156",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-02T19:15:10.493",
      "lastModified" : "2024-11-21T07:38:34.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in SourceCodester Health Center Patient Record Management System 1.0. This vulnerability affects unknown code of the file admin/fecalysis_form.php. The manipulation of the argument itr_no leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222220."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:health_center_patient_record_management_system_project:health_center_patient_record_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E023BA-9374-482C-BD41-6FDC328F1B1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Lacer23/bug_report/blob/main/bug_report/razormist/Health%20Center%20Patient%20Record%20Management/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222220",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222220",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Lacer23/bug_report/blob/main/bug_report/razormist/Health%20Center%20Patient%20Record%20Management/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1157",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-02T19:15:10.570",
      "lastModified" : "2024-11-21T07:38:34.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in finixbit elf-parser. Affected is the function elf_parser::Elf_parser::get_segments of the file elf_parser.cpp. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. VDB-222222 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elf-parser_project:elf-parser:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B085144-16CD-4927-B6DD-E33A3EEA99CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/elf-parser_segments_poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222222",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222222",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/elf-parser_segments_poc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26051",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T19:15:10.667",
      "lastModified" : "2024-11-21T07:50:39.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like user email address in staff-authenticated requests.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "3.1.48",
            "matchCriteriaId" : "32910EFF-045F-4F93-BBD2-8D370D8DC6EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.7.59",
            "matchCriteriaId" : "087E100F-63DE-4F84-9410-77BB517D14E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.30",
            "matchCriteriaId" : "FE021955-5B68-4626-8C74-534A3C0BFA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.27",
            "matchCriteriaId" : "B87F6451-DB7D-47E2-9265-86EFF197727B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.14",
            "matchCriteriaId" : "10A27FA1-6BA8-4678-A27E-16BFDD241DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11.0",
            "versionEndExcluding" : "3.11.12",
            "matchCriteriaId" : "A86A9221-83AB-4977-81AD-83364AF05B9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/saleor/saleor/commit/31bce881ccccf0d79a9b14ecb6ca3138d1edeec1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.1.48",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.10.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.11.12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.7.59",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.8.30",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.9.27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/security/advisories/GHSA-r8qr-wwg3-2r85",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/saleor/saleor/commit/31bce881ccccf0d79a9b14ecb6ca3138d1edeec1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.1.48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.10.14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.11.12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.7.59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.8.30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.9.27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/security/advisories/GHSA-r8qr-wwg3-2r85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26052",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T19:15:10.770",
      "lastModified" : "2024-11-21T07:50:39.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like infrastructure details in unauthenticated requests. This issue has been patched in versions 3.1.48, 3.7.59, 3.8.0, 3.9.27, 3.10.14 and 3.11.12. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "3.1.48",
            "matchCriteriaId" : "32910EFF-045F-4F93-BBD2-8D370D8DC6EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.7.59",
            "matchCriteriaId" : "087E100F-63DE-4F84-9410-77BB517D14E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.30",
            "matchCriteriaId" : "FE021955-5B68-4626-8C74-534A3C0BFA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.27",
            "matchCriteriaId" : "B87F6451-DB7D-47E2-9265-86EFF197727B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.14",
            "matchCriteriaId" : "10A27FA1-6BA8-4678-A27E-16BFDD241DCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleor:saleor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11.0",
            "versionEndExcluding" : "3.11.12",
            "matchCriteriaId" : "A86A9221-83AB-4977-81AD-83364AF05B9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.1.48",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.10.14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.11.12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.7.59",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.8.30",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.9.27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/security/advisories/GHSA-3hvj-3cg9-v242",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.1.48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.10.14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.11.12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.7.59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.8.30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/releases/tag/3.9.27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/saleor/saleor/security/advisories/GHSA-3hvj-3cg9-v242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26055",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T19:15:10.867",
      "lastModified" : "2024-11-21T07:50:40.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. Starting in version 3.1-milestone-1, any user can edit their own profile and inject code, which is going to be executed with programming right. The same vulnerability can also be exploited in all other places where short text properties are displayed, e.g., in apps created using Apps Within Minutes that use a short text field. The problem has been patched on versions 13.10.9, 14.4.4, 14.7RC1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-150"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:commons:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndExcluding" : "13.10.9",
            "matchCriteriaId" : "F3E30C43-2D72-41AB-BE10-AA767A6DBF0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:commons:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.4",
            "versionEndExcluding" : "14.4.4",
            "matchCriteriaId" : "83497DF7-F317-4BDE-9A31-AC5222C04C70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:commons:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.7",
            "matchCriteriaId" : "DF029B4B-7633-425B-AEFA-F71482CB1857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:commons:3.1:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "4D52F455-D215-49B5-A91D-D3F3CD6D6D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:commons:3.1:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "728B6761-BA45-480C-8374-28B93B7CF78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:commons:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB77C57C-BE72-4917-A374-E36F2165BCCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:commons:14.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DB29BA36-84FA-423A-8D56-E5CFEFF696E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-commons/security/advisories/GHSA-8cw6-4r32-6r3h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XCOMMONS-2498",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19793",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19794",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-commons/security/advisories/GHSA-8cw6-4r32-6r3h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XCOMMONS-2498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26056",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T19:15:10.957",
      "lastModified" : "2024-11-21T07:50:40.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform. Starting in version 3.0-milestone-1, it's possible to execute a script with the right of another user, provided the target user does not have programming right. The problem has been patched in XWiki 14.8-rc-1, 14.4.5, and 13.10.10. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndExcluding" : "13.10.10",
            "matchCriteriaId" : "D1595259-D265-4602-95D3-C6C8F83EBEF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.5",
            "matchCriteriaId" : "DD91ED5A-574E-416A-B503-04D5EBD7FCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.8",
            "matchCriteriaId" : "DD83BA23-29DC-4430-A6DF-02D03BDFC983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:3.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "7BEE764B-ED54-43D8-9748-DE57B5F1D701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:3.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "90C4A1EA-8B6A-4FE8-985B-EB924DA3A826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:3.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "A45A230D-909F-42D3-836D-95660805B094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/4b75f212c2dd2dfc5fb5726c7830c6dbc9a425c6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/bd34ad6710ed72304304a3d5fec38b7cc050ef3b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/dd3f4735b41971b3afc3f3aedf6664b4e8be4894",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-859x-p6jp-rc2w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19856",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/4b75f212c2dd2dfc5fb5726c7830c6dbc9a425c6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/bd34ad6710ed72304304a3d5fec38b7cc050ef3b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/dd3f4735b41971b3afc3f3aedf6664b4e8be4894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-859x-p6jp-rc2w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26470",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T19:15:11.050",
      "lastModified" : "2024-11-21T07:51:34.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to make the farm unusable by adding an object to a page with a huge number (e.g. 67108863). Most of the time this will fill the memory allocated to XWiki and make it unusable every time this document is manipulated. This issue has been patched in XWiki 14.0-rc-1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.0",
            "matchCriteriaId" : "49C4E9F0-5C8D-49BE-9637-E518350C58D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/04e5a89d2879b160cdfaea846024d3d9c1a525e6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/db3d1c62fc5fb59fefcda3b86065d2d362f55164",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/fdfce062642b0ac062da5cda033d25482f4600fa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-92wp-r7hm-42g7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19223",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/04e5a89d2879b160cdfaea846024d3d9c1a525e6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/db3d1c62fc5fb59fefcda3b86065d2d362f55164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/fdfce062642b0ac062da5cda033d25482f4600fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-92wp-r7hm-42g7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26471",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T19:15:11.137",
      "lastModified" : "2024-11-21T07:51:34.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform. Starting in version 11.6-rc-1, comments are supposed to be executed with the right of superadmin but in restricted mode (anything dangerous is disabled), but the async macro does not take into account the restricted mode. This means that any user with comment right can use the async macro to make it execute any wiki content with the right of superadmin. This has been patched in XWiki 14.9, 14.4.6, and 13.10.10. The only known workaround consists of applying a patch and rebuilding and redeploying `org.xwiki.platform:xwiki-platform-rendering-async-macro`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6",
            "versionEndExcluding" : "13.10.10",
            "matchCriteriaId" : "3FA123D1-5D75-4522-9F26-0446E0C8AA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.6",
            "matchCriteriaId" : "4DC3E3FE-42E5-412F-AD0B-6E6531319461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.9",
            "matchCriteriaId" : "E0DE5CA5-2618-434D-854A-CDAB06A713E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:11.6:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB08C92-EE96-4A6E-BB37-E988C47B8590"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/00532d9f1404287cf3ec3a05056640d809516006",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9cqm-5wf7-wcj7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20234",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/00532d9f1404287cf3ec3a05056640d809516006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9cqm-5wf7-wcj7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26472",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T19:15:11.220",
      "lastModified" : "2024-11-21T07:51:34.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform. Starting in version 6.2-milestone-1, one can execute any wiki content with the right of IconThemeSheet author by creating an icon theme with certain content. This can be done by creating a new page or even through the user profile for users not having edit right. The issue has been patched in XWiki 14.9, 14.4.6, and 13.10.10. An available workaround is to fix the bug in the page `IconThemesCode.IconThemeSheet` by applying a modification from commit 48caf7491595238af2b531026a614221d5d61f38."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.1",
            "versionEndExcluding" : "13.10.10",
            "matchCriteriaId" : "1F93CEA3-C06A-4F48-B499-CDFCA5372E4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.6",
            "matchCriteriaId" : "4DC3E3FE-42E5-412F-AD0B-6E6531319461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.9",
            "matchCriteriaId" : "E0DE5CA5-2618-434D-854A-CDAB06A713E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:6.2:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "67A33C16-E37C-40B3-AAB4-D598BDF066BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:6.2:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "63E88234-FB07-452D-8062-2AD64B22FFE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/48caf7491595238af2b531026a614221d5d61f38#diff-2ec9d716673ee049937219cdb0a92e520f81da14ea84d144504b97ab2bdae243R45",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vwr6-qp4q-2wj7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19731",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/48caf7491595238af2b531026a614221d5d61f38#diff-2ec9d716673ee049937219cdb0a92e520f81da14ea84d144504b97ab2bdae243R45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vwr6-qp4q-2wj7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26473",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T19:15:11.313",
      "lastModified" : "2024-11-21T07:51:34.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform. Starting in version 1.3-rc-1, any user with edit right can execute arbitrary database select and access data stored in the database. The problem has been patched in XWiki 13.10.11, 14.4.7, and 14.10. There is no workaround for this vulnerability other than upgrading."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "81D871BF-1B0C-4673-A5C5-4B8E93F28F36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FA3A5151-58FB-48CF-BFFB-5688608200C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10",
            "matchCriteriaId" : "569EE28C-5C86-467F-A153-DD4B9BF0053D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:1.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4524D3-0083-43A7-B398-6329A5781741"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vpx4-7rfp-h545",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19523",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vpx4-7rfp-h545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26474",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T19:15:11.390",
      "lastModified" : "2024-11-21T07:51:35.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform. Starting in version 13.10, it's possible to use the right of an existing document content author to execute a text area property. This has been patched in XWiki 14.10, 14.4.7, and 13.10.11. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.10",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3FA9FDC-9DA1-4848-9B6D-F7040C4EB579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FA3A5151-58FB-48CF-BFFB-5688608200C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10",
            "matchCriteriaId" : "569EE28C-5C86-467F-A153-DD4B9BF0053D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-3738-p9x3-mv9r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20373",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-3738-p9x3-mv9r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26475",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T19:15:11.470",
      "lastModified" : "2024-11-21T07:51:35.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform. Starting in version 2.3-milestone-1, the annotation displayer does not execute the content in a restricted context. This allows executing anything with the right of the author of any document by annotating the document. This has been patched in XWiki 13.10.11, 14.4.7 and 14.10. There is no easy workaround except to upgrade."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        }, {
          "lang" : "en",
          "value" : "CWE-270"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "2.3",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "E2345A26-DC22-4A19-9CE0-9DCE395C7996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FA3A5151-58FB-48CF-BFFB-5688608200C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10",
            "matchCriteriaId" : "569EE28C-5C86-467F-A153-DD4B9BF0053D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:2.3:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "0075AEEF-E71A-4BE1-9062-1F304E734E09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/d87d7bfd8db18c20d3264f98c6deefeae93b99f7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-h6f5-8jj5-cxhr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20360",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20384",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/d87d7bfd8db18c20d3264f98c6deefeae93b99f7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-h6f5-8jj5-cxhr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26476",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-02T19:15:11.567",
      "lastModified" : "2024-11-21T07:51:35.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform. Starting in version 3.2-m3, users can deduce the content of the password fields by repeated call to `LiveTableResults` and `WikisLiveTableResultsMacros`. The issue can be fixed by upgrading to versions 14.7-rc-1, 13.4.4, or 13.10.9 and higher, or in version >= 3.2M3 by applying the patch manually on `LiveTableResults` and `WikisLiveTableResultsMacros`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3",
            "versionEndExcluding" : "13.4.4",
            "matchCriteriaId" : "2203B3A1-804B-4112-B317-695CCDD55BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.5.0",
            "versionEndExcluding" : "13.10.9",
            "matchCriteriaId" : "608DA14C-3153-44CC-A683-F620A2C0DC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.7",
            "matchCriteriaId" : "20E3626B-E74D-4CB1-8959-4E56C2DC3013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:3.2:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7202B8-E057-446D-A56A-30ED1D5D350F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0FFF502D-9C1B-41AE-A25A-981ABB43DEE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/7f8825537c9523ccb5051abd78014d156f9791c8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-5cf8-vrr8-8hjm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19949",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/7f8825537c9523ccb5051abd78014d156f9791c8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-5cf8-vrr8-8hjm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22381",
      "sourceIdentifier" : "product-cna@github.com",
      "published" : "2023-03-02T21:15:10.403",
      "lastModified" : "2024-11-21T07:44:40.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A code injection vulnerability was identified in GitHub Enterprise Server that allowed setting arbitrary environment variables from a single environment variable value in GitHub Actions when using a Windows based runner. To exploit this vulnerability, an attacker would need existing permission to control the value of environment variables for use with GitHub Actions. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.8.0 and was fixed in versions 3.4.15, 3.5.12, 3.6.8, 3.7.5. This vulnerability was reported via the GitHub Bug Bounty program.\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-cna@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-cna@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.15",
            "matchCriteriaId" : "64C81994-84EA-4B29-A7F5-8AFEECBEA9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.12",
            "matchCriteriaId" : "D976E9E1-1CEF-40DB-AAFF-793D8AEE1FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.8",
            "matchCriteriaId" : "B704CE69-3F7F-430A-BC02-89BD1C1CF132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.5",
            "matchCriteriaId" : "2B55AC18-CDFC-4CD5-9610-A0FB2C2729CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.15",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.12",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.8",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.5",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.8/admin/release-notes",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.8/admin/release-notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0656",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2023-03-02T22:15:09.487",
      "lastModified" : "2024-11-21T07:37:34.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.1-5111",
            "matchCriteriaId" : "D3048789-B1A5-4C58-9EA8-A0ABF8EE693E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69E000B-5806-46FD-A233-4E2CC9DD38D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C15FED5-C48C-47CF-9645-0563D77883C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6739DEA3-06FF-4FEB-9931-0DB27F63B70E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2ABC8D8-2943-4073-9568-E87961A18998"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F57D527-AA3F-45E9-9BCE-6F76691066B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_870:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECCCF0-A5D8-42A8-8EC1-D12B49B1124A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70340DD4-687B-402C-85AF-C2B80D0F1600"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52847BA2-470B-4078-A79B-52095DB9214B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD10C-F89D-4051-BC70-67B41167FF9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C23940E-2F9D-447B-A740-42035ED5D400"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C790AD-C40E-4527-8F83-D278282A9600"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352DFCF9-E333-41C0-8033-91265768FD8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C882C38-9DA5-4C03-BB23-AB2B448E3307"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.1-5083",
            "matchCriteriaId" : "C61C96E2-0679-4555-A5D6-75E1BE44CB1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6CF3CF-256C-4C04-8BDF-B16398CD0459"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.4.4-44v-21-1551",
            "matchCriteriaId" : "715F6C7A-0A62-4261-8DD1-17F34AD5F710"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75912A50-E148-43C9-9335-BE19977F8A70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CF8746-84DF-4FB6-B5B7-AAED39E7FA6C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_1600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED84FC8-3E4E-4D29-B725-57AE7EEEC6DA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0B21B1-ABA5-49E2-9B43-E85B9B447F45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731B4849-2F0B-4625-B768-2287964ECDAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC92834-A624-49D8-BF14-9F545C63EB0B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18066544-CD00-41A5-9392-6023020853D4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A644965-B1B8-4581-BCAC-8D6BCC961A03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30061761-D324-43DD-B43D-F2DFEF987364"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0004",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1101",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2023-03-02T22:15:09.560",
      "lastModified" : "2025-03-07T20:15:36.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.1-5111",
            "matchCriteriaId" : "680A1C61-AA45-4CA1-88F6-95EC0A275E41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69E000B-5806-46FD-A233-4E2CC9DD38D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C15FED5-C48C-47CF-9645-0563D77883C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6739DEA3-06FF-4FEB-9931-0DB27F63B70E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2ABC8D8-2943-4073-9568-E87961A18998"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F57D527-AA3F-45E9-9BCE-6F76691066B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_870:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5ECCCF0-A5D8-42A8-8EC1-D12B49B1124A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70340DD4-687B-402C-85AF-C2B80D0F1600"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52847BA2-470B-4078-A79B-52095DB9214B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD10C-F89D-4051-BC70-67B41167FF9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C23940E-2F9D-447B-A740-42035ED5D400"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90C790AD-C40E-4527-8F83-D278282A9600"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "352DFCF9-E333-41C0-8033-91265768FD8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C882C38-9DA5-4C03-BB23-AB2B448E3307"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.1-5083",
            "matchCriteriaId" : "C61C96E2-0679-4555-A5D6-75E1BE44CB1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6CF3CF-256C-4C04-8BDF-B16398CD0459"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.4.4-44v-21-1551",
            "matchCriteriaId" : "715F6C7A-0A62-4261-8DD1-17F34AD5F710"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75912A50-E148-43C9-9335-BE19977F8A70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CF8746-84DF-4FB6-B5B7-AAED39E7FA6C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_1600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED84FC8-3E4E-4D29-B725-57AE7EEEC6DA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0B21B1-ABA5-49E2-9B43-E85B9B447F45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731B4849-2F0B-4625-B768-2287964ECDAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC92834-A624-49D8-BF14-9F545C63EB0B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18066544-CD00-41A5-9392-6023020853D4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A644965-B1B8-4581-BCAC-8D6BCC961A03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsv_800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30061761-D324-43DD-B43D-F2DFEF987364"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.5.4.11-97n",
            "matchCriteriaId" : "24C1B08A-B303-44F3-9285-1539588476BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_2600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F86D13F9-D41E-4230-9116-A781FFAEF00D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A24BCC0-CE41-49AF-B03D-D4FCB422503B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "043858A6-26AC-4EB0-A240-A43AD08C6AD5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FD73880-DC60-467F-99B6-69807D58A840"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BB9452-A014-4A68-9662-63E6C60EEAD2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CF683A-7E83-464B-8A0D-4CC641377FA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60219D0D-240E-4C5E-ADEE-0144DB076F28"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260EAE19-8320-4616-8833-B214D41FA98E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94F17A77-EB74-4815-A026-6116755EFB37"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp12400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD310CFE-1171-471A-8B29-A8974F06FF5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:nssp12800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462177B2-E0EC-494A-93A8-9582DCECC368"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sm10200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96A9430-B9FC-48FE-8507-E7694F80EF5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sm10400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A515B0BE-3655-48A1-B113-9A4E39A40CE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sm10800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C227CA-D865-47CC-AD4D-96ED19892BDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sm9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3547DE9C-A657-4AB6-AD00-5185BE7D227E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sm9400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DB2D0B-8199-4241-A826-4BD91AB5D4E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sm9600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7079B7DB-CBC1-4116-929B-956C361AF764"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sm9800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCBF16D6-4C60-440D-95AB-986ABC4F9100"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8F3935-89B4-4091-9B8C-442C02FD4F3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7268E89B-FF46-45AD-82FF-333505EF957B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09678BBE-7603-41D2-BF09-415CA33C7EFA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7003DBEF-CA74-4429-B567-5CFFB83762E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8AC8EAE-99BE-4889-9978-5083F71D7178"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479B1418-CA62-4B24-A5DB-21F488941754"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D50B19A6-80C4-4FF7-9CD5-58938641D3DC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745643D6-9336-4FBE-9625-99599DFBB8A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09B5BCD-C830-4C67-B966-1CA499F21D04"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA61303F-736E-411F-AEF3-6335C0795138"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3506950B-2404-41D2-8EF3-1694777D9EEA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4C9916-AD16-4E31-90A6-2AD577EA9783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0005",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1160",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-03T02:15:53.640",
      "lastModified" : "2024-11-21T07:38:34.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1103"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agentejo:cockpit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.9",
            "matchCriteriaId" : "4F2AF6E0-E846-415A-B46B-4D49D1806856"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cockpit-hq/cockpit/commit/690016208850f2d788ebc3c67884d4c692587eb8",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3ce480dc-1b1c-4230-9287-0dc3b31c2f87",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cockpit-hq/cockpit/commit/690016208850f2d788ebc3c67884d4c692587eb8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3ce480dc-1b1c-4230-9287-0dc3b31c2f87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0457",
      "sourceIdentifier" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
      "published" : "2023-03-03T05:15:12.037",
      "lastModified" : "2024-11-21T07:37:12.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Plaintext Storage of a Password vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series, MELSEC iQ-R Series, MELSEC-Q Series and MELSEC-L Series allows a remote unauthenticated attacker to disclose plaintext credentials stored in project files and login into FTP server or Web server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-256"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uc-32mr\\/ds-ts_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CDE5DB8-A6A9-4B56-9D7E-D10A63931B32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uc-32mr\\/ds-ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6319D639-CC7B-414E-9DCB-F9D427E8FEF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uc-32mt\\/d_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08A2C6F6-B0F6-49A0-AE67-E21F9DBA427C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uc-32mt\\/d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBBFA917-5DCF-4B0C-8C32-AC384FB880AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uc-32mt\\/dss_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E2560F-DC94-4262-94FB-4A08E1569F3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uc-32mt\\/dss:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFE160B-32CC-4529-AD35-7467A32B609E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uc-32mt\\/dss-ts_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F382C88-C839-4E83-BAC0-79A7FA32A196"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uc-32mt\\/dss-ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2122A970-5A7D-40A6-BB97-622B695713ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uc-32mt\\/ds-ts_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5077F2-720D-469F-B5B1-7DA41882C5D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uc-32mt\\/ds-ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B64FFA-59CE-46E9-B240-F083B332BFD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uc-64mt\\/d_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2433A69-CE8D-4BF1-8C43-9B89CCB2BED8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uc-64mt\\/d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F19AFE-8A0C-4F21-AE83-5DE3040917C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uc-64mt\\/dss_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C700E9DB-1BA4-4081-9689-EC824DFB87EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uc-64mt\\/dss:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDE9CE57-6C80-4547-8476-55E5CA4BFCE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uc-96mt\\/d_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33803BBE-470E-46C3-9682-5E5C40094A9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uc-96mt\\/d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5233D432-3102-421D-B4F5-66469C28DF3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uc-96mt\\/dss_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C0D393-A809-473E-A635-6E3ED0CF3B3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uc-96mt\\/dss:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "491D865E-3C0A-4ED7-AEAF-A0D69D832DBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-24mr\\/es_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075AEA8E-DD81-43FF-B896-732CCF073C99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-24mr\\/es:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4BA009-4F0A-427C-9D4A-F8A128F5F8C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-24mr\\/es-a_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93BFC0D1-8500-4E66-8B1E-4A7B304DD1AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-24mr\\/es-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330C0F0C-CDD8-4F69-AC97-4FCE2B18FDEB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-24mt\\/es_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4897811B-EAA0-48DA-B91E-E518395ED649"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-24mt\\/es:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B284B91-7571-4614-A721-676D1972E2D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-24mt\\/es-a_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F94305D1-C506-4634-BCE2-CF0341C8144E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-24mt\\/es-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345CD57D-EC2D-4A9E-B4A3-9E32535ECC23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-24mt\\/ess_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2EA335D-33BD-4EF1-A089-849104BC49AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-24mt\\/ess:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8A69D9-DE42-4953-AD81-40EF7A003823"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-40mr\\/es_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5CCEC3B-9F39-4E49-8122-B30B826D48EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-40mr\\/es:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0AA6C3-68CC-454B-A959-707BB20F4E07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-40mr\\/es-a_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A8C6E64-974E-4BC6-BC23-1DE74719ACA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-40mr\\/es-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EDA888-358E-4207-A887-C376A13C6865"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-40mt\\/es_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0956C2A7-F39B-45C3-8264-2D5F82CAF744"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-40mt\\/es:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED5C2F9-C203-40FD-B15C-F91A68FA0DCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-40mt\\/es-a_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC327F2-031C-4B6D-A111-761A481C2D3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-40mt\\/es-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F93585F-E50B-4EFB-AD36-538D2780C9F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-40mt\\/ess_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23DECD15-2856-46D7-B433-24CD755934FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-40mt\\/ess:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A38E527-6290-49AE-885A-21C4FC77EE96"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-60mr\\/es_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4041A9-B455-4008-86BB-EA79364EA0F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-60mr\\/es:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAF8ED8-B265-4FC5-91AE-CFA4C282E27F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-60mr\\/es-a_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4DDC7E-49E5-4466-9A12-66CAF434DF8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-60mr\\/es-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E9C2820-AE1B-46CD-B89E-F7DB9956F821"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-60mt\\/es_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "653C938B-3F64-4FA8-8C6E-F8EF0E16C770"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-60mt\\/es:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5B2760-4E56-4FAA-A723-BB7CC28FAFD2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-60mt\\/es-a_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2960A78-6608-465A-91CB-CF8665348BF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-60mt\\/es-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427E4718-7C06-4E32-937B-F7C1DDCC1417"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5uj-60mt\\/ess_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2265DA-D870-4DE5-9252-F9A826342C3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5uj-60mt\\/ess:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7625B11E-0A91-46D2-8952-AC0BA956D7A8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5s-30mr\\/es_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA22AAC-C754-4A64-8701-81C989CC14B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5s-30mr\\/es:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9399ED33-EE3C-4414-8A64-302818CCB800"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5s-30mt\\/es_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC33A08-4B82-4049-8025-2CA40AF6584E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5s-30mt\\/es:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220F7702-E3A5-423D-B8E9-497E6D13AC96"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5s-30mt\\/ess_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "428F794E-83B6-4C81-A367-4154A632F655"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5s-30mt\\/ess:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D96E9F3-772A-4409-BD58-1B11849B5B0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5s-40mr\\/es_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FCDF4D0-26AF-4E40-8312-FA35D232878E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5s-40mr\\/es:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FF4238-35D3-47D6-B525-25BCF3A2387D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5s-40mt\\/es_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D4254D-8618-4365-8675-BD51E4D3AB78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5s-40mt\\/es:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8420F36A-8929-412F-B76C-D5EC0C02DE85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5s-40mt\\/ess_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16DDB35E-0068-41A3-8BC9-32175A59ADEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5s-40mt\\/ess:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A9BFDA-4780-4747-8B55-B111C0502BFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5s-60mr\\/es_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67832CC5-B673-4723-ABC8-68066D1FE651"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5s-60mr\\/es:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "452DE6F2-39A0-401C-905B-BA3D98DAE4B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5s-60mt\\/es_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52315EF-9BF0-46A0-A334-AB7B38A79A3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5s-60mt\\/es:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1CB7DA-A3E4-4ED3-8C89-6D191539C697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5s-60mt\\/ess_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B538CF8A-E8FD-475D-B074-E797507DFEDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5s-60mt\\/ess:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5589A7F-1159-4CD1-86FB-1392E8D17F3F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5s-80mr\\/es_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D63DFB9-208E-4977-B34C-D3B41A8495B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5s-80mr\\/es:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A92C4E6-6D6B-4A68-9920-CD37E1E49B31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5s-80mt\\/es_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BD0DA8-4CA8-4CFC-8C2C-EF323BE76D65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5s-80mt\\/es:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71E25F0-29AE-4924-9A32-BF597C58034F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5s-80mt\\/ess_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D4BF30-6403-4D3C-A4C5-F3E0C1A5F839"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5s-80mt\\/ess:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDE63C5E-36DC-4650-AF9B-C324FDA475A8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5-enet_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B30BB01B-45FB-43D1-B24E-530978EBF3EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5-enet:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1050809B-A058-451E-A62B-2E1707B3887E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:fx5-enet\\/ip_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE006D41-B94B-45A2-B43C-642616811792"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:fx5-enet\\/ip:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5786BC-2E60-45A5-AD11-21CCAAFDDAAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/vu/JVNVU93891523/index.html",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-023_en.pdf",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/vu/JVNVU93891523/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-023_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-03T06:15:08.653",
      "lastModified" : "2025-03-06T21:15:13.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpseclib:phpseclib:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.19",
            "matchCriteriaId" : "D2243A87-8051-428C-8C5F-6FB463E453BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/phpseclib/phpseclib/commit/6298d1cd55c3ffa44533bd41906caec246b60440",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/phpseclib/phpseclib/releases/tag/3.0.19",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/phpseclib/phpseclib/commit/6298d1cd55c3ffa44533bd41906caec246b60440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/phpseclib/phpseclib/releases/tag/3.0.19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0577",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-03T07:15:08.650",
      "lastModified" : "2024-11-21T07:37:25.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ASOS Information Technologies SOBIAD allows Cross-Site Scripting (XSS).This issue affects SOBIAD: before 23.02.01.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asosegitim:sobiad:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.02.01",
            "matchCriteriaId" : "7B96153E-CE0F-4A39-86D3-4315D497B2D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0125",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0578",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-03T07:15:09.053",
      "lastModified" : "2024-11-21T07:37:25.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting (XSS).This issue affects Book Cites: before 23.01.05.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asosegitim:bookcites:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.01.05",
            "matchCriteriaId" : "DB973A87-D95C-47CB-978C-5ADBE52C4AB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0125",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1162",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-03T07:15:09.140",
      "lastModified" : "2024-11-21T07:38:34.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is an unknown function of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument password leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222258 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor_2960_firmware:1.5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C9B7A8F-2F3D-4F78-B8BC-8A796D92AD3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor_2960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D6E31A-4AE7-481A-B7A4-1C198B01F8FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xxy1126/Vuln/blob/main/Draytek/2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222258",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222258",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/xxy1126/Vuln/blob/main/Draytek/2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1163",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-03T07:15:09.263",
      "lastModified" : "2024-11-21T07:38:35.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5 and classified as critical. Affected by this vulnerability is the function getSyslogFile of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222259. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor_2960_firmware:1.5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C9B7A8F-2F3D-4F78-B8BC-8A796D92AD3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor_2960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D6E31A-4AE7-481A-B7A4-1C198B01F8FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xxy1126/Vuln/blob/main/Draytek/3.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222259",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222259",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/xxy1126/Vuln/blob/main/Draytek/3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1164",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-03T07:15:09.370",
      "lastModified" : "2024-11-21T07:38:35.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is some unknown functionality of the component File Import. The manipulation leads to improper authorization. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.3.11-23 and 1.30.10-5.p23 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-222260."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kylinos:kylin_os:*:*:*:*:desktop:*:*:*",
            "versionEndExcluding" : "1.3.11-23",
            "matchCriteriaId" : "C252764F-C50D-48FB-A5B1-249C0BABF15D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kylinos:kylin_os:*:*:*:*:server:*:*:*",
            "versionEndExcluding" : "1.30.10-5.p23",
            "matchCriteriaId" : "A6A58525-6877-43FA-BB56-7613B8FD560E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/i900008/vulndb/blob/main/kylin-activation_vuln.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222260",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222260",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/i900008/vulndb/blob/main/kylin-activation_vuln.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0957",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-03-03T08:15:08.613",
      "lastModified" : "2024-11-21T07:38:10.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to the Gitpod JSONRPC server using a victim’s credentials, because the Origin header is not restricted. This can lead to the extraction of data from workspaces, to a full takeover of the workspace."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1385"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitpod:gitpod:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022.11.2",
            "matchCriteriaId" : "DA92F145-3FE3-4749-AA7B-648BC0588E31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://app.safebase.io/portal/71ccd717-aa2d-4a1e-942e-c768d37e9e0c/preview?product=default&orgId=71ccd717-aa2d-4a1e-942e-c768d37e9e0c&tcuUid=1d505bda-9a38-4ca5-8724-052e6337f34d",
        "source" : "report@snyk.io",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gitpod-io/gitpod/commit/12956988eec0031f42ffdfa3bdc3359f65628f9f",
        "source" : "report@snyk.io",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gitpod-io/gitpod/commit/673ab6856fa04c13b7b1f2a968e4d090f1d94e4f",
        "source" : "report@snyk.io",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gitpod-io/gitpod/pull/16378",
        "source" : "report@snyk.io",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/gitpod-io/gitpod/pull/16405",
        "source" : "report@snyk.io",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/gitpod-io/gitpod/releases/tag/release-2022.11.2",
        "source" : "report@snyk.io",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://snyk.io/blog/gitpod-remote-code-execution-vulnerability-websockets/",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://app.safebase.io/portal/71ccd717-aa2d-4a1e-942e-c768d37e9e0c/preview?product=default&orgId=71ccd717-aa2d-4a1e-942e-c768d37e9e0c&tcuUid=1d505bda-9a38-4ca5-8724-052e6337f34d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gitpod-io/gitpod/commit/12956988eec0031f42ffdfa3bdc3359f65628f9f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gitpod-io/gitpod/commit/673ab6856fa04c13b7b1f2a968e4d090f1d94e4f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gitpod-io/gitpod/pull/16378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/gitpod-io/gitpod/pull/16405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/gitpod-io/gitpod/releases/tag/release-2022.11.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://snyk.io/blog/gitpod-remote-code-execution-vulnerability-websockets/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1165",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-03T08:15:12.613",
      "lastModified" : "2024-11-21T07:38:35.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Zhong Bang CRMEB Java 1.3.4. It has been classified as critical. This affects an unknown part of the file /api/admin/system/store/order/list. The manipulation of the argument keywords leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-222261 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crmeb:crmeb:1.3.4:*:*:*:*:java:*:*",
            "matchCriteriaId" : "D3E08510-3736-45B4-B43C-371EA06A7232"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ha1yuYiqiyinHangzhouTechn0logy/crmeb_java/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222261",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222261",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/ha1yuYiqiyinHangzhouTechn0logy/crmeb_java/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20061",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-03T16:15:09.990",
      "lastModified" : "2024-11-21T07:40:27.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system. Cisco plans to release software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:packaged_contact_center_enterprise:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3CDF903-2720-421E-BEE0-77422403956D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_enterprise:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D31CC0E9-8E21-436B-AB84-EA1B1BC60DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_express:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444F1581-0CD5-40B9-8C9E-0E428E6D75C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_intelligence_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6\\(2\\)",
            "matchCriteriaId" : "D5B7ABD3-A909-432D-87D3-9C52496DEFAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-infodisc-ssrf-84ZBmwVk",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-infodisc-ssrf-84ZBmwVk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20062",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-03T16:15:10.093",
      "lastModified" : "2024-11-21T07:40:27.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system. Cisco plans to release software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:packaged_contact_center_enterprise:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3CDF903-2720-421E-BEE0-77422403956D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_enterprise:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D31CC0E9-8E21-436B-AB84-EA1B1BC60DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_express:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444F1581-0CD5-40B9-8C9E-0E428E6D75C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_intelligence_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6\\(2\\)",
            "matchCriteriaId" : "D5B7ABD3-A909-432D-87D3-9C52496DEFAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-infodisc-ssrf-84ZBmwVk",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-infodisc-ssrf-84ZBmwVk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20069",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-03T16:15:10.167",
      "lastModified" : "2024-11-21T07:40:28.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker would need to have valid credentials to access the web-based management interface of the affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0",
            "matchCriteriaId" : "929F2586-6A41-4560-AD9B-E96067766280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.10.3",
            "matchCriteriaId" : "27E0CC45-5CFF-4ABC-9E69-6B7119B697C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pi-epnm-xss-mZShH2J",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pi-epnm-xss-mZShH2J",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20078",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-03T16:15:10.277",
      "lastModified" : "2024-11-21T07:40:30.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_6871_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "7FB46C93-0E51-42F3-8F94-40042A5CBF46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_6871:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "864B486C-71F6-4EFD-8F04-BA7FC18DFD5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_6861_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "4AD2F635-094B-4883-BF55-B85B16AD773F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_6861:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05A7CA6-AD58-45D7-AF32-129E22855D8E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_6851_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "39BA7B78-4934-404F-B4DF-6C936460E05E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_6851:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5809CA01-CF32-4E3A-A771-01D5065F0061"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_6841_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "470A77FC-6DD6-44B8-B332-79844AE06BB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_6841:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4960B1-22B4-4B3D-955E-684DA520A1A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_6825_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "3CB8846B-6B42-49AF-BFC9-85CF89CA4E56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_6825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07D81AF-3DF8-4EE4-AE4E-FB875BE14BB4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7861_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "6F675EDC-3F39-4BDA-B6BD-2A0C1075D1D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52C420C-FD54-4BE4-8720-E05307D53520"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7841_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "3D9466BE-960D-41DD-A137-ABE2C3F6D4B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CF8A50-11BD-4506-BF2A-CCA36BF59EFF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7832_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "D27EA4CE-9BA5-42B8-B1CE-5710A6207CC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7832:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D8B3FD-3157-49D3-A4BA-D4FAAB1B6D4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7821_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "4550A390-A8D8-4857-8C66-EC6B1F8E322E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7AFFF0-5B21-400B-B923-E9B7FCCE08FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7811_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "D975C4C2-9567-4F5C-BE6A-137AE321F9F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7260C17-7067-47AD-995F-366A5E8B10E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8865_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "E8BD1967-D870-4E21-BF1C-D712809077EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB99B9AB-64B5-4989-9579-A1BB5D2D87EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8861_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "ACB956C5-4165-4C00-BC5C-F4D4C6270070"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090EE553-01D5-45F0-87A4-E1167F46EB77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8851_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "83E1D601-371E-4F90-B6F7-8A6B91C949AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF6DC5E-F582-445E-BF05-2D55A0954663"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8845_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "7C4C70C3-D9D7-468C-B522-666EF6C01D20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A313E64A-F43C-4FBA-A389-6171CBD709C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8841_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "C7609CA0-F9E8-47AB-A621-212DC124018E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7944CC9C-AE08-4F30-AF65-134DADBD0FA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8832_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "5D936075-78C7-4E1E-A2B1-1EB8B668E3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8832:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5EA5C6B-243B-419A-9C60-1CDBD039C1D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8811_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "2691AABE-6E0A-422B-88B9-89E63D1436F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CC3127-3152-4906-9FE0-BC6F21DCADAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20079",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-03T16:15:10.380",
      "lastModified" : "2024-11-21T07:40:30.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_6871_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "7FB46C93-0E51-42F3-8F94-40042A5CBF46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_6871:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "864B486C-71F6-4EFD-8F04-BA7FC18DFD5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_6861_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "4AD2F635-094B-4883-BF55-B85B16AD773F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_6861:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C05A7CA6-AD58-45D7-AF32-129E22855D8E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_6851_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "39BA7B78-4934-404F-B4DF-6C936460E05E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_6851:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5809CA01-CF32-4E3A-A771-01D5065F0061"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_6841_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "470A77FC-6DD6-44B8-B332-79844AE06BB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_6841:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4960B1-22B4-4B3D-955E-684DA520A1A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_6825_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "3CB8846B-6B42-49AF-BFC9-85CF89CA4E56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_6825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07D81AF-3DF8-4EE4-AE4E-FB875BE14BB4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7861_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "6F675EDC-3F39-4BDA-B6BD-2A0C1075D1D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52C420C-FD54-4BE4-8720-E05307D53520"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7841_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "3D9466BE-960D-41DD-A137-ABE2C3F6D4B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CF8A50-11BD-4506-BF2A-CCA36BF59EFF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7832_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "D27EA4CE-9BA5-42B8-B1CE-5710A6207CC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7832:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32D8B3FD-3157-49D3-A4BA-D4FAAB1B6D4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7821_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "4550A390-A8D8-4857-8C66-EC6B1F8E322E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7AFFF0-5B21-400B-B923-E9B7FCCE08FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_7811_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "D975C4C2-9567-4F5C-BE6A-137AE321F9F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7260C17-7067-47AD-995F-366A5E8B10E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8865_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "E8BD1967-D870-4E21-BF1C-D712809077EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB99B9AB-64B5-4989-9579-A1BB5D2D87EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8861_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "ACB956C5-4165-4C00-BC5C-F4D4C6270070"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090EE553-01D5-45F0-87A4-E1167F46EB77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8851_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "83E1D601-371E-4F90-B6F7-8A6B91C949AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF6DC5E-F582-445E-BF05-2D55A0954663"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8845_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "7C4C70C3-D9D7-468C-B522-666EF6C01D20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A313E64A-F43C-4FBA-A389-6171CBD709C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8841_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "C7609CA0-F9E8-47AB-A621-212DC124018E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7944CC9C-AE08-4F30-AF65-134DADBD0FA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8832_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "5D936075-78C7-4E1E-A2B1-1EB8B668E3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8832:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5EA5C6B-243B-419A-9C60-1CDBD039C1D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8811_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "2691AABE-6E0A-422B-88B9-89E63D1436F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CC3127-3152-4906-9FE0-BC6F21DCADAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ip_phone_8831_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "6579DD70-1AC9-42FC-9464-90523A7008E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ip_phone_8831:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF13D70B-1F27-4B3F-83FD-EF9688F1D123"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:unified_ip_phone_7945g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "E49D5D04-A5B9-461D-94A3-15676DD90CD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:unified_ip_phone_7945g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5980E646-CA07-4222-A9DD-A71306A4A678"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:unified_ip_phone_7965g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "0587084E-0B87-46D3-A5D8-3FD7EBC826E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:unified_ip_phone_7965g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF30D1CC-D27F-49FF-9C63-BB890002D1C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:unified_ip_phone_7975g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.7sr1",
            "matchCriteriaId" : "C77D2870-D2C9-40D7-8877-F9E9AD4E1DF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:unified_ip_phone_7975g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA879B6-04D6-402A-8F38-8A7CB34D76F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20088",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-03T16:15:10.453",
      "lastModified" : "2024-11-21T07:40:31.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for new and existing users who are connected through a load balancer. This vulnerability is due to improper IP address filtering by the reverse proxy. An attacker could exploit this vulnerability by sending a series of unauthenticated requests to the reverse proxy. A successful exploit could allow the attacker to cause all current traffic and subsequent requests to the reverse proxy through a load balancer to be dropped, resulting in a DoS condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6\\(1\\)",
            "matchCriteriaId" : "2A285C40-170D-4C95-8031-2C6E4D5FB1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.6\\(1\\):-:*:*:*:*:*:*",
            "matchCriteriaId" : "4DFCE723-9359-40C7-BA35-B71BDF8E3CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.6\\(1\\):es01:*:*:*:*:*:*",
            "matchCriteriaId" : "28B1524E-FDCA-4570-86DD-CE396271B232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.6\\(1\\):es02:*:*:*:*:*:*",
            "matchCriteriaId" : "74DC6F28-BFEF-4D89-93D5-10072DAC39C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.6\\(1\\):es03:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1D60D7-1B4A-4EEE-A26C-389D9271E005"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-proxy-dos-vY5dQhrV",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-proxy-dos-vY5dQhrV",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20104",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-03T16:15:10.523",
      "lastModified" : "2024-11-21T07:40:33.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending an arbitrary file to a user and persuading that user to browse to a specific URL. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_teams:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8185FE3-9268-4784-8F4E-8079A920D87B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-Yn8HHsMJ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-Yn8HHsMJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26604",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-03T16:15:10.607",
      "lastModified" : "2025-06-20T19:17:18.077",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the \"systemctl status\" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "246.7",
            "matchCriteriaId" : "435DD039-3F1D-4C69-920C-09FCCD720863"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/174130/systemd-246-Local-Root-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.compass-security.com/2012/10/dangerous-sudoers-entries-part-2-insecure-functionality/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/systemd/systemd/blob/main/NEWS#L4335-L4340",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00032.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/%40zenmoviefornotification/saidov-maxim-cve-2023-26604-c1232a526ba7",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230505-0009/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/174130/systemd-246-Local-Root-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.compass-security.com/2012/10/dangerous-sudoers-entries-part-2-insecure-functionality/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/systemd/systemd/blob/main/NEWS#L4335-L4340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/%40zenmoviefornotification/saidov-maxim-cve-2023-26604-c1232a526ba7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230505-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-03T19:15:11.117",
      "lastModified" : "2025-03-07T17:15:16.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateview.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:judging_management_system_project:judging_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE693B0-3497-406C-AD53-36AC05735004"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-03T19:15:11.197",
      "lastModified" : "2025-03-07T17:15:17.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateTxtview.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:judging_management_system_project:judging_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE693B0-3497-406C-AD53-36AC05735004"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-03T19:15:11.263",
      "lastModified" : "2024-11-21T07:48:15.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateBlankTxtview.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:judging_management_system_project:judging_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE693B0-3497-406C-AD53-36AC05735004"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27561",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-03T19:15:11.330",
      "lastModified" : "2024-12-06T14:15:19.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. NOTE: this issue exists because of a CVE-2019-19921 regression."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-706"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-706"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:runc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.5",
            "matchCriteriaId" : "AE0C5D34-F78A-4993-AC70-25A6606FC82B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932D137F-528B-4526-9A89-CD59FA1AB0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/LiveOverflow/c937820b688922eb127fb760ce06dab9",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencontainers/runc/issues/2197#issuecomment-1437617334",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencontainers/runc/issues/3751",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ANUGDBJ7NBUMSUFZUSKU3ZMQYZ2Z3STN/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DHGVGGMKGZSJ7YO67TGGPFEHBYMS63VF/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNB2UEDIIJCRQW4WJLZOPQJZXCVSXMLD/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FYVE3GB4OG3BNT5DLQHYO4M5SXX33AQ5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6BF24VCZRFTYBTT3T7HDZUOTKOTNPLZ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gist.github.com/LiveOverflow/c937820b688922eb127fb760ce06dab9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencontainers/runc/issues/2197#issuecomment-1437617334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencontainers/runc/issues/3751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ANUGDBJ7NBUMSUFZUSKU3ZMQYZ2Z3STN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DHGVGGMKGZSJ7YO67TGGPFEHBYMS63VF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNB2UEDIIJCRQW4WJLZOPQJZXCVSXMLD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FYVE3GB4OG3BNT5DLQHYO4M5SXX33AQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6BF24VCZRFTYBTT3T7HDZUOTKOTNPLZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20241206-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-03T20:15:09.353",
      "lastModified" : "2024-11-21T07:53:09.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cubism Core in Live2D Cubism Editor 4.2.03 allows out-of-bounds write via a crafted Section Offset Table or Count Info Table in an MOC3 file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:live2d:cubism_editor:4.2.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0CCF53-AF5C-4623-8C94-7A92A4682676"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.live2d.com/cubism-editor-manual/updates4/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/openl2d/moc3ingbird",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=35013098",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://undeleted.ronsor.com/live2d-a-security-trainwreck/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://docs.live2d.com/cubism-editor-manual/updates4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/openl2d/moc3ingbird",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=35013098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://undeleted.ronsor.com/live2d-a-security-trainwreck/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0968",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-03T22:15:09.557",
      "lastModified" : "2026-04-08T18:17:51.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Watu Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘dn’, 'email', 'points', and 'date' parameters in versions up to, and including, 3.3.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kibokolabs:watu_quiz:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.3.9",
            "matchCriteriaId" : "96881B90-138E-4F75-8921-8AEDC7A5C81C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/watu/trunk/views/takings.php#L31",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2023/03/multiple-reflected-cross-site-scripting-vulnerabilities-in-three-wordpress-plugins-patched/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6341bdcc-c99f-40c3-81c4-ad90ff19f802?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/watu/trunk/views/takings.php#L31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/6341bdcc-c99f-40c3-81c4-ad90ff19f802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-03T22:15:09.690",
      "lastModified" : "2025-10-07T19:00:07.737",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's web application management portal. This affects Vigor3910, Vigor1000B, Vigor2962 v4.3.2.1; Vigor2865 and Vigor2866 v4.4.1.0; Vigor2927 v4.4.2.2; and Vigor2915, Vigor2765, Vigor2766, Vigor2135 v4.4.2.0; Vigor2763 v4.4.2.1; Vigor2862 and Vigor2926 v3.9.9.0; Vigor2925 v3.9.3; Vigor2952 and Vigor3220 v3.9.7.3; Vigor2133 and Vigor2762 v3.9.6.4; and Vigor2832 v3.9.6.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "C69AB3BE-7E50-4315-AB58-C33C49E8BB30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "266C73DE-BFC6-4F3E-B022-559B3971CA44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2860n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "12F8DFDE-A5B0-44C2-ABAF-109058B56134"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2860n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499BAE46-109A-4BD5-BFBD-9EB8FD824196"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2860n-plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "7A0B678C-D666-4225-8756-727BFC699284"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2860n-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "896A175A-89F5-4120-A181-C300FE0C5DF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2860vn-plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "6B7D5E6C-F079-422F-B18F-22E8D82D37F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2860vn-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFB93AF-0BD9-499C-AC77-E5B78D2FF51C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2860ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "11C4E10B-0C86-4103-87C4-E9154014ECBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2860ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BED772E6-7A3B-44DA-B0AE-6EDB09C646B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2860vac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "594D3E56-7A7C-4A17-8BE9-DC08C6AB2662"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2860vac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "997B7B3F-F81A-4644-BB79-8DC79E6ADD0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2860l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "C90047D4-532C-4B75-BACC-CBCC77F82361"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2860l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5437856D-50E6-497E-AE7E-15C3D8F2CD41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2860ln_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "178EE86C-DE2A-42EB-B27E-CC6615BB8618"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2860ln:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE2B9AA-B33E-4689-8765-56603FA3A5EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2832_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.6.3",
            "matchCriteriaId" : "F4E9EBB3-C5D0-41DC-93F4-9BBCE183A1B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2832:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0978465-D59F-4C0A-A29F-5D7BE58BA557"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2832n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.6.3",
            "matchCriteriaId" : "2E3C1158-B7E0-4B14-ACB8-11C9D080C6E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2832n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B22E55C6-F71F-4EA7-B679-895A012B7020"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2766_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "D205DD2E-3787-4345-BE2D-639E4576E4F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AB3C84-67CA-4531-85FB-1A56F3C93ABF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2766ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "1405F9A0-3D26-4412-8ADE-FBAD8215A860"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2766ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3D0E87-A5A2-4828-A79D-DB10FE6BC4D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2766ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "65B95391-36FA-43EB-BFB5-7F6E66FE2161"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2766ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787134FE-0549-427D-A9CE-32B1C58BC954"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2766vac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "95026A20-EB1B-49F4-ADBE-7CD3094C9E92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2766vac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228DC583-B6BC-4948-A167-53C49B6D04B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2765_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "B1FA8A23-F2A8-4EBE-ACEE-99C3879C8AC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60657812-D3A8-4B1B-B7BE-F629991CB053"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2765ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "849F90B6-C7AE-437E-8A47-56A64C43EBD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2765ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F653097B-9197-43A9-A9B4-8AA6EAFC5666"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2765ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "60411E51-9FE5-415F-A5A7-B392B69AFD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2765ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B9AF22-089B-41FB-8E30-BED3E4CE32ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2765va_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "B1DAF2A5-0129-42F3-9157-6D8CEA3B808F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2765va:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2C3E48-B40E-4E2D-BA7E-111FA3CC5ADA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2763_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.2",
            "matchCriteriaId" : "DEA4A96F-598F-46F6-B634-E34683D72C34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EA9DF5D-6651-455A-9305-C42C0FF51F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2763ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.2",
            "matchCriteriaId" : "FDB9FADB-2C06-40C9-A895-C5396F9B3BC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2763ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9BF014-B8EA-4DD9-8320-627C3D276596"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2762_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.6.5",
            "matchCriteriaId" : "247A0B24-5A88-42A1-A54E-566530CE599A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3873B2B9-95C1-4F00-9165-7C4D2A90CDE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2762n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.6.5",
            "matchCriteriaId" : "4FE71C5B-EEE1-4903-96A2-47D2B318E6DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2762n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B532B5-386F-4C4C-8554-C73409124306"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2762ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.6.5",
            "matchCriteriaId" : "B5BC3CD7-1876-45FE-9BB2-37BE9CCC7D8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2762ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEA5BFB-5D2F-44B2-B995-0675243264CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2762vac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.6.5",
            "matchCriteriaId" : "125E3846-5419-474E-B6C7-D407239B43FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2762vac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F97B07D-BC53-42A4-BBA3-D9CF5D474C9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2135_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "ED11EF06-B83B-410C-A2D1-0841CF25F61F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2135:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEDC8A7F-08CF-44D2-A9A5-A1353AF35B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2135ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "4003BBE0-09BA-46D0-9683-3855E5F0AAD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2135ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C37EA55-2526-4130-A57C-65950A5DFE57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2135ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "A16548F6-3D21-4875-B462-FDC5AF9A642A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2135ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D227B7-1121-4657-A621-AF0C0E766D90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2135vac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "06507A17-10FC-42CF-A81B-DC5BA7575CFF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2135vac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC1C9BE-31B5-47DD-BE09-0984EE29A957"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2135fvac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "D86329F8-FF42-4477-BE57-A0B25AAB5FBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2135fvac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "625DE418-F506-4579-9C25-04DCD0FBC7ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2133_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.6.5",
            "matchCriteriaId" : "064DB573-532E-418B-BAED-78AA19B0CADA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2133:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1878E59C-FB40-435D-940A-8952C56FA88B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2133n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.6.5",
            "matchCriteriaId" : "27258517-C97A-4A9E-AD0A-D27E49E7C39F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2133n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F57E3F-8FFB-4A48-8BFD-5245D1EF2B80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2133ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.6.5",
            "matchCriteriaId" : "9F1039C4-B2E1-48E2-A177-372B6285C6D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2133ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196CE92C-805E-4B6A-8EA8-7A49515FB617"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2133vac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.6.5",
            "matchCriteriaId" : "D5D3D2B2-8BD4-4654-A801-04E999CC28C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2133vac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B81C46C-C837-4C10-AE7F-9E98A1A9E15C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2133fvac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.6.5",
            "matchCriteriaId" : "3A877CD3-16CA-4461-8D1B-A56E242B2B09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2133fvac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1999AE2-3E6E-4D18-8FF1-D2A853B5975F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor166_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.4.1",
            "matchCriteriaId" : "A1ADA571-2AA2-46FC-8B0D-74E44C4AE4CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor166:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E33E647-5883-44FA-9915-34B89090D4E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor165_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.4.1",
            "matchCriteriaId" : "84121576-0E77-4CFB-9C9B-3ABCA7CAC0B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor165:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E644893-0457-43A9-98AB-9DB37A5C415C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor130_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.8.5.1",
            "matchCriteriaId" : "C20E7E09-4B2A-4134-B7AB-78EE38FB2001"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7194998-2D96-43DE-85B6-35A8E474C695"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigornic_132_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.8.5.1",
            "matchCriteriaId" : "6062FBA9-6034-44E2-BD4F-1F06BDD291B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigornic_132:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B523DCD7-27FA-4376-BB96-A9C8CD39C4B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor3910_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.2.2",
            "matchCriteriaId" : "3ACA540A-EAC4-4CB1-B447-6EEDEE59D3AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor3910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894E4DDA-D9BE-441D-B447-B1CE52959347"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor3220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.7.4",
            "matchCriteriaId" : "1CC9E78F-1295-4B45-A90F-39DDF290213F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor3220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64955940-3998-4B76-92D1-D9F3FAB874B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2962_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.2.2",
            "matchCriteriaId" : "6B2B9784-5D14-4586-950E-8F3EE71258EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2962:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0C9A21-7CFE-452F-8505-834AB8579D9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2962p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.2.2",
            "matchCriteriaId" : "08830DB7-8638-4D71-A117-CF527D0BDD0A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2962p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F44E9E-D6E6-44CB-A724-143EE7D74691"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor1000b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.2.2",
            "matchCriteriaId" : "FEF879ED-84FC-4EF0-B6D0-055AF51200A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor1000b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF86645-253A-4BA3-BA2A-2725575C390D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2952_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.7.4",
            "matchCriteriaId" : "5B53E0D4-BE6D-400B-9BA8-206AD450D3F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2952:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167336E2-AAA8-4424-AB07-2D7C9E1542B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2952p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.7.4",
            "matchCriteriaId" : "8A73B1BE-7704-40DB-BCD2-5CD33507F675"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2952p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F421E8-00BE-4451-A948-0D9862E442E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2927_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.3",
            "matchCriteriaId" : "91056A5C-E2B0-4080-9D63-D0FCD8262226"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2927:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12460F51-25AB-4EA9-BC43-9CE8DA992D75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2927ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.3",
            "matchCriteriaId" : "8AE75731-DD73-4A40-8C4E-1CC0143FFE84"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2927ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C188F12-157F-4B8C-9A66-678B933E20F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2927ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.3",
            "matchCriteriaId" : "0E146CFF-D5BA-4D24-B590-32F995ED9B84"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2927ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846175B-4DC0-4268-AAF2-F266BFD7646E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2927vac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.3",
            "matchCriteriaId" : "BE82FB7F-9EC3-4D07-AF77-4FF17B387303"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2927vac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD217200-9848-425F-B113-E624C027BC9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2927f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.3",
            "matchCriteriaId" : "091C4285-5CB7-4CF3-908C-894635455E05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2927f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5CF335-A5C0-46CC-A56C-0DBE15D01F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2927l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.3",
            "matchCriteriaId" : "913E45FD-1360-4721-A314-EFD25BBEA638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2927l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC9D70E8-080B-4F0E-BA3A-ACFE8F61475B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2927lac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.3",
            "matchCriteriaId" : "3239F8C4-451B-419C-844C-7A7B9D7FF1CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2927lac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5ABFF7-F5DA-485F-976B-5C858B85E994"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2926_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "45A0D285-46C7-4589-8456-F952DC209E84"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2926:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1B117B-603D-493C-A804-C18ED332A221"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2926n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "CF77E5E2-6C25-4E58-AE48-3570064F8690"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2926n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04C85F3-C187-4F82-87A9-ECAF197ABA30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2926ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "80490792-32DC-4472-9D87-84489C9F54B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2926ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65625316-A171-4C06-BFD0-C15A5ACF58A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2926vac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "A790737D-8EDB-4BA0-A381-BBE14887DB50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2926vac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059842A3-553B-43A0-A714-15C55DA85752"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2926l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "A11EB963-A1EE-4851-9406-A233820BC2A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2926l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "775E8858-B078-427D-BCB5-6D2B91D17A9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2926ln_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "AF6D4E27-E17F-4DF3-A26D-576B407E567F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2926ln:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E30F255-ECE9-4E6F-9A22-2826E548C18B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2926lac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "A8FC0332-69A8-4097-B904-1A7EBAEC5E1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2926lac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4953A99-AD72-4204-BAA9-D87164349E01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2925_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "00893432-0C77-4B19-81A8-AB893AFFAF63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7536B29C-2030-4331-B8BF-D269D86D199B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2925n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "5B8B9C17-5233-42E5-A1FB-07911BD4D677"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2925n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB816A0-B3F2-4C49-AAFF-5099AD5F2036"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2925n-plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "31B69B27-9F78-4B93-A597-69EB905BC164"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2925n-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8940245-090F-40AF-A0F5-F56AC2DDCE9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2925vn-plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "AF45D40A-489C-4B61-9BB2-C9704EA55025"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2925vn-plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "216C7078-B72E-46B4-A039-6D3331A5AA13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2925ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "67A71E52-14C8-42B8-886A-6E919A57EF58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2925ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2AA7A61-2672-425D-89D0-4BE755FA6BFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2925vac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "64B25C71-51AB-4467-BE30-608E7DB4C73F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2925vac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C0AA77-8B78-425A-B9E8-078B79C4AC66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2925fn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "110FD744-1E76-4653-B305-6B8ACD9D518C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2925fn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4DE43C-8CE1-4DF4-B648-106E1A61C89B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2925l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "761348BA-8EAA-417F-9307-012B24175D7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2925l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF6E46A7-46DB-4EAE-8833-9F31B78A86AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2925ln_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "581777B9-1CBF-4411-AB0B-B07085A7B798"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2925ln:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "786D2F19-0E84-4742-ACC6-2067F33CE89C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2915_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "1250B6A3-321B-4364-9A16-7A488904F38B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2915:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5860CBE4-328E-418D-9E81-1D3AF7DB8F2B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2915ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.2.1",
            "matchCriteriaId" : "D96FE337-9A49-4BED-8664-0E3F0D9D29BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2915ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4318B8A-B94C-4207-9731-76D35DE85034"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2866_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1.1",
            "matchCriteriaId" : "90CD3735-6EA7-409E-BD92-8953EE02EAB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2866:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0D2760-739F-4C79-AEDC-8B2CCCA2FF53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2866ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1.1",
            "matchCriteriaId" : "CA6251A2-FC48-4D39-9DEF-8C788B1A85C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2866ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F84DE3D-5FFD-4D6F-877A-A656287BDD7B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2866ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1.1",
            "matchCriteriaId" : "8864B388-393D-4E13-958B-25A1E242A90E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2866ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E82803D-B1DE-4541-913C-9128B313AC0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2866vac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1.1",
            "matchCriteriaId" : "7CD208FE-5FBF-41F5-81C7-E4F0540A4AAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2866vac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5295B4DF-DE6C-4725-A22B-1186D5AB1325"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2866l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1.1",
            "matchCriteriaId" : "7CFE805D-2693-4368-B364-B199ABBD838F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2866l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315CA850-DA5C-46E8-90A1-457320A52AA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2866lac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1.1",
            "matchCriteriaId" : "717D6ECA-661C-41A1-8B00-728D19B1C762"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2866lac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4504923B-C903-432D-B4D2-287BD0145F3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2865_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1.1",
            "matchCriteriaId" : "7181501C-950D-4786-BAB3-22E01FF8E75F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871448C6-9183-4828-A287-05F5EC6A44F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2865ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1.1",
            "matchCriteriaId" : "EF16212E-83F5-46C0-946B-EBAD2A65B347"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2865ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "699735FA-D33E-4F32-9584-B15938FB954E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2865ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1.1",
            "matchCriteriaId" : "1740C22B-3BC2-4005-A1DD-43EC6A28E38F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2865ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D62A63-1E53-469C-B06C-DB6D05C7BE2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2865vac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1.1",
            "matchCriteriaId" : "202C399F-C2D0-448A-A79B-9425A72C40AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2865vac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C40B478-C28F-430A-A690-5EF9FFB4812E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2865l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1.1",
            "matchCriteriaId" : "EB198159-97A7-484E-A28D-700E180E4402"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2865l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F462E8-6427-4E42-902B-07E8A9366423"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2865lac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1.1",
            "matchCriteriaId" : "D94FF40D-B31F-4A75-BCC5-C1390CFE5832"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2865lac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B87FA44-4931-4DC4-89BE-72A591C7C355"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2862_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "B6CCFB9E-4CAA-4C14-9DF2-926A219E9BA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2862:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B01EDAE-BB9E-4431-BE8C-6505BA7CA42D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2862n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "93A67B50-D7F4-4DF2-B4DF-96674A6A1339"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2862n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF8ECCA-405E-4D60-92ED-7F29F36A985F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2862ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "0612E16B-5478-44B0-BB32-7646455E85A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2862ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB77A5C7-026C-4172-970A-28E0D1A6F2D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2862vac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "BC43F79E-C983-4497-B0F2-B237DA41EF8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2862vac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB96DDC-9961-47D4-81DF-4117A1B9C8F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2862b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "D9545545-8CE4-4677-ADC1-8DFE4A892FE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2862b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7469CB-2CDE-4D2D-988A-13A482A59B28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2862bn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "838B633F-CD17-4D0F-964B-51AB05D2F608"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2862bn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F97B4A-B323-4354-9CAC-60BCB02A44DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2862l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "6C63839A-D768-4C31-85D8-2A94C0E75DF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2862l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96B57263-4900-4F2E-AA5C-554B5163F489"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2862ln_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "329E2BCC-460F-4841-984E-960EFA5940A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2862ln:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1ADB5D-D2CF-464B-9F1C-45F31A032953"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2862lac_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.9.1",
            "matchCriteriaId" : "7D483171-44CC-4C4C-93C4-E8D022660C30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2862lac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A89BEEB-3F13-4C41-9133-788232DD229B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.draytek.com/about/security-advisory/cross-site-scripting-vulnerability-%28cve-2023-23313%29/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.horizonconsulting.com/advisories23-Multiple-XSS-Stored-in-DrayTek-routers-CVE-2023-23313",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.draytek.com/about/security-advisory/cross-site-scripting-vulnerability-%28cve-2023-23313%29/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.horizonconsulting.com/advisories23-Multiple-XSS-Stored-in-DrayTek-routers-CVE-2023-23313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23927",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-03T22:15:09.750",
      "lastModified" : "2024-11-21T07:47:07.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting (XSS) happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.7",
            "matchCriteriaId" : "F607C3F7-4D0F-48A1-899C-653D9B485D62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#437---2023-02-03",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-qcrj-6ffc-v7hq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://user-images.githubusercontent.com/53917092/215604129-d5b75608-5a24-4eb3-906f-55b192310298.mp4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#437---2023-02-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/craftcms/cms/security/advisories/GHSA-qcrj-6ffc-v7hq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://user-images.githubusercontent.com/53917092/215604129-d5b75608-5a24-4eb3-906f-55b192310298.mp4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-03T22:15:09.840",
      "lastModified" : "2025-03-07T16:15:37.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Barracuda CloudGen WAN Private Edge Gateway devices before 8 webui-sdwan-1089-8.3.1-174141891, an OS command injection vulnerability exists in /ajax/update_certificate - a crafted HTTP request allows an authenticated attacker to execute arbitrary commands. For example, a name field can contain :password and a password field can contain shell metacharacters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:barracuda:t100b_firmware:8.3.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "396AC132-60C1-4148-A751-5EB8CD95666F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:barracuda:t100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF643D7C-722D-4756-A170-B9B6CF8C3368"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:barracuda:t200c_firmware:8.3.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5165FF77-16A9-43E9-9F50-16F15858620D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:barracuda:t200c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7A1511-0858-40EA-869D-AD212B30BDF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:barracuda:t400c_firmware:8.3.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "95DA502F-971B-4F29-B41C-6AF16BAA3AF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:barracuda:t400c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA2099D-D1E5-4F3B-A207-3E1A886E911D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:barracuda:t600d_firmware:8.3.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "46C4BE5C-2F6F-44AE-A337-9D85C7FFCC17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:barracuda:t600d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0915A13-9562-4299-B7F0-F8FDD4B813D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:barracuda:t900b_firmware:8.3.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF3DFD7-57B7-4926-B146-8EF396E78DB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:barracuda:t900b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4321174A-F14C-490C-9B92-850FBAA7EABE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:barracuda:t93a_firmware:8.3.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7D833BB2-70BC-4EEC-8EEF-332E3CEE7387"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:barracuda:t93a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90093740-56A6-4E49-BFFC-5039CDE95877"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:barracuda:t193a_firmware:8.3.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "202C1DB3-9EDC-4560-AE26-62E0667AFA41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:barracuda:t193a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE8BBEB-FDA3-4616-A79E-989AD852F221"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://campus.barracuda.com/product/cloudgenwan/doc/96024723/release-notes-8-3-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/os-command-injection-in-barracuda-cloudgen-wan/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.barracuda.com/products/network-security/cloudgen-wan",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Mar/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://campus.barracuda.com/product/cloudgenwan/doc/96024723/release-notes-8-3-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/os-command-injection-in-barracuda-cloudgen-wan/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.barracuda.com/products/network-security/cloudgen-wan",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26488",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-03T22:15:09.897",
      "lastModified" : "2024-11-21T07:51:37.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenZeppelin Contracts is a library for secure smart contract development. The ERC721Consecutive contract designed for minting NFTs in batches does not update balances when a batch has size 1 and consists of a single token. Subsequent transfers from the receiver of that token may overflow the balance as reported by `balanceOf`. The issue exclusively presents with batches of size 1. The issue has been patched in 4.8.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openzeppelin:contracts:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.8.0",
            "versionEndExcluding" : "4.8.2",
            "matchCriteriaId" : "6743B0B0-5E6D-41CD-844E-6F3CED7E8299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openzeppelin:contracts_upgradeable:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.8.0",
            "versionEndExcluding" : "4.8.2",
            "matchCriteriaId" : "AEA6BAA3-A2E6-4634-B69F-19B335A46450"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/commit/167bf67ed3907f4a674043496019fa346cee7705",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-878m-3g6q-594q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/commit/167bf67ed3907f4a674043496019fa346cee7705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-878m-3g6q-594q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26492",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-03T22:15:09.987",
      "lastModified" : "2024-11-21T07:51:37.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directus is a real-time API and App dashboard for managing SQL database content. Directus is vulnerable to Server-Side Request Forgery (SSRF) when importing a file from a remote web server (POST to `/files/import`). An attacker can bypass the security controls by performing a DNS rebinding attack and view sensitive data from internal servers or perform a local port scan. An attacker can exploit this vulnerability to access highly sensitive internal server(s) and steal sensitive information. This issue was fixed in version 9.23.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "9.23.0",
            "matchCriteriaId" : "FE4E8128-9B99-485D-9968-DD5B99AFE9D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/directus/directus/commit/ff53d3e69a602d05342e15d9bb616884833ddbff",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/directus/directus/releases/tag/v9.23.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/directus/directus/security/advisories/GHSA-j3rg-3rgm-537h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/directus/directus/commit/ff53d3e69a602d05342e15d9bb616884833ddbff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/directus/directus/releases/tag/v9.23.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/directus/directus/security/advisories/GHSA-j3rg-3rgm-537h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-03T22:15:10.067",
      "lastModified" : "2025-03-06T17:15:17.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenBSD 7.2, a TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E6EC6AC-E2DE-4166-A762-AB6A88DF1C1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/013_tcp.patch.sig",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openbsd/src/commit/0a543725ccdd2a01669122ce79bb67e66ede77f2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230406-0001/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/013_tcp.patch.sig",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openbsd/src/commit/0a543725ccdd2a01669122ce79bb67e66ede77f2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230406-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-03T22:15:10.147",
      "lastModified" : "2025-03-06T17:15:17.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODE_SIGNING_INJECT_BASE_ENTITLEMENTS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadowsocks:shadowsocksx-ng:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67359EF4-FDEE-4856-B744-235EA30524B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shadowsocks/ShadowsocksX-NG/pull/1456",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://shadowsocks.org",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/shadowsocks/ShadowsocksX-NG/pull/1456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://shadowsocks.org",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1170",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-03T23:15:11.830",
      "lastModified" : "2024-11-21T07:38:36.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.1376",
            "matchCriteriaId" : "21A757F9-7748-487F-9880-7EA7BCBF68C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vim/vim/commit/1c73b65229c25e3c1fd8824ba958f7cc4d604f9c",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/286e0090-e654-46d2-ac60-29f81799d0a4",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/vim/vim/commit/1c73b65229c25e3c1fd8824ba958f7cc4d604f9c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/286e0090-e654-46d2-ac60-29f81799d0a4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-03T23:15:12.073",
      "lastModified" : "2025-03-06T21:15:13.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix of the uploaded file, resulting in any file upload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yf-exam_project:yf-exam:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9681-5722-40F8-8836-EB0BFED22182"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CleverStupidDog/yf-exam/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-25402",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/CleverStupidDog/yf-exam/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-25402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-03T23:15:12.140",
      "lastModified" : "2025-03-07T17:15:17.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass. The program uses a fixed JWT key, and the stored key uses username format characters. Any user who logged in within 24 hours. A token can be forged with his username to bypass authentication."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yf-exam_project:yf-exam:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9681-5722-40F8-8836-EB0BFED22182"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CleverStupidDog/yf-exam/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-25403",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/CleverStupidDog/yf-exam/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-25403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26047",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-03T23:15:12.203",
      "lastModified" : "2024-11-21T07:50:39.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version v0.2.0 is vulnerable to a bypass attack when a specific case-sensitive hex entities payload with special characters such as CR/LF and horizontal tab is used. This vulnerability allows an attacker to execute arbitrary JavaScript code on the victim's browser and compromise the security of the web application. An attacker can exploit this vulnerability to bypass common web attack threat rules in teler-waf and launch cross-site scripting (XSS) attacks. The attacker can execute arbitrary JavaScript code on the victim's browser and steal sensitive information, such as login credentials and session tokens, or take control of the victim's browser and perform malicious actions. This issue has been patched in version 0.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-80"
        }, {
          "lang" : "en",
          "value" : "CWE-692"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kitabisa:teler-waf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.0",
            "matchCriteriaId" : "17235BD2-7C6C-4E7D-98CF-9102991125D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dwisiswant0/cwa-filter-rules/commit/d818d1645832d1a02cd210c7680e692d2bf4313b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kitabisa/teler-waf/releases/tag/v0.2.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kitabisa/teler-waf/security/advisories/GHSA-p2pf-g8cq-3gq5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dwisiswant0/cwa-filter-rules/commit/d818d1645832d1a02cd210c7680e692d2bf4313b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kitabisa/teler-waf/releases/tag/v0.2.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kitabisa/teler-waf/security/advisories/GHSA-p2pf-g8cq-3gq5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26483",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-03T23:15:12.327",
      "lastModified" : "2024-11-21T07:51:36.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gosaml2 is a Pure Go implementation of SAML 2.0. SAML Service Providers using this library for SAML authentication support are likely susceptible to Denial of Service attacks. A bug in this library enables attackers to craft a `deflate`-compressed request which will consume significantly more memory during processing than the size of the original request. This may eventually lead to memory exhaustion and the process being killed. The maximum compression ratio achievable with `deflate` is 1032:1, so by limiting the size of bodies passed to gosaml2, limiting the rate and concurrency of calls, and ensuring that lots of memory is available to the process it _may_ be possible to help Go's garbage collector \"keep up\". Implementors are encouraged not to rely on this. This issue is fixed  in version 0.9.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-409"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gosaml2_project:gosaml2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.0",
            "matchCriteriaId" : "3952C468-2CAE-4F88-8183-38E1C1250141"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/russellhaering/gosaml2/commit/f9d66040241093e8702649baff50cc70d2c683c0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/russellhaering/gosaml2/releases/tag/v0.9.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/russellhaering/gosaml2/security/advisories/GHSA-6gc3-crp7-25w5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2023-1602",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/russellhaering/gosaml2/commit/f9d66040241093e8702649baff50cc70d2c683c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/russellhaering/gosaml2/releases/tag/v0.9.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/russellhaering/gosaml2/security/advisories/GHSA-6gc3-crp7-25w5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2023-1602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26491",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-03T23:15:12.427",
      "lastModified" : "2024-11-21T07:51:37.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RSSHub is an open source and extensible RSS feed generator. When the URL parameters contain certain special characters, it returns an error page that does not properly handle XSS vulnerabilities, allowing for the execution of arbitrary JavaScript code. Users who access the deliberately constructed URL are affected. This vulnerability was fixed in version c910c4d28717fb860fbe064736641f379fab2c91. Please upgrade to this or a later version, there are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsshub:rsshub:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2023-03-02",
            "matchCriteriaId" : "98548C91-26F9-4604-BCC4-EB1DEC380700"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DIYgod/RSSHub/commit/c910c4d28717fb860fbe064736641f379fab2c91",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/DIYgod/RSSHub/security/advisories/GHSA-32gr-4cq6-5w5q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/DIYgod/RSSHub/commit/c910c4d28717fb860fbe064736641f379fab2c91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/DIYgod/RSSHub/security/advisories/GHSA-32gr-4cq6-5w5q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-03T23:15:12.520",
      "lastModified" : "2025-03-06T21:15:13.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yf-exam_project:yf-exam:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CA9681-5722-40F8-8836-EB0BFED22182"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CleverStupidDog/yf-exam/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-26779",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/CleverStupidDog/yf-exam/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-26779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27290",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-03T23:15:12.580",
      "lastModified" : "2024-11-21T07:52:35.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 243-0) do not currently require authentication. Due to this, an attacker within the network could access the datastores with read/write access.  IBM X-Force ID:  248737."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:observability_with_instana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "239-0",
            "versionEndIncluding" : "239-2",
            "matchCriteriaId" : "08913E76-5106-4019-BE4B-3D0057F78D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:observability_with_instana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "241-0",
            "versionEndIncluding" : "241-2",
            "matchCriteriaId" : "C74D1F28-283C-4B67-995C-35FDC044DDA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:observability_with_instana:243-0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BA8B46-7606-4378-BAC5-DECE7A7F314B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171770/IBM-Instana-243-0-Missing-Authentication.html",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/248737",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6959969",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171770/IBM-Instana-243-0-Missing-Authentication.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/248737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6959969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23929",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-04T00:15:15.380",
      "lastModified" : "2024-11-21T07:47:07.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Currently, the refresh token is valid indefinitely. The refresh token should get a validity of 24-48 hours. A fix was released in version 3.8.0.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vantage6:vantage6:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.8.0",
            "matchCriteriaId" : "48327D5F-C4AD-4B29-9DA8-3661E5E2C91E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vantage6/vantage6/commit/48ebfca42359e9a6743e9598684585e2522cdce8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vantage6/vantage6/security/advisories/GHSA-4w59-c3gc-rrhp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vantage6/vantage6/commit/48ebfca42359e9a6743e9598684585e2522cdce8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vantage6/vantage6/security/advisories/GHSA-4w59-c3gc-rrhp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26486",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-04T00:15:15.473",
      "lastModified" : "2024-11-21T07:51:37.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. The Vega `scale` expression function has the ability to call arbitrary functions with a single controlled argument. The scale expression function passes a user supplied argument group to getScale, which is then used as if it were an internal context. The context.scales[name].value is accessed from group and called as a function back in scale. This can be exploited to escape the Vega expression sandbox in order to execute arbitrary JavaScript. This issue has been fixed in version 5.13.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vega-functions_project:vega-functions:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.13.1",
            "matchCriteriaId" : "573B200A-A938-460B-8B95-3F4E2B98E15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vega_project:vega:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.23.0",
            "matchCriteriaId" : "FDAFA09A-097A-45DB-9E8F-B8ED261D0550"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vega/vega/releases/tag/v5.23.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/vega/vega/security/advisories/GHSA-4vq7-882g-wcg4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.dev/vega/vega/blob/72b9b3bbf912212e7879b6acaccc84aff969ef1c/packages/vega-functions/src/functions/scale.js#L36-L37",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.dev/vega/vega/blob/72b9b3bbf912212e7879b6acaccc84aff969ef1c/packages/vega-functions/src/scales.js#L6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vega.github.io/editor/#/url/vega/N4IgJAzgxgFgpgWwIYgFwhgF0wBwqgegIDc4BzJAOjIEtMYBXAI0poHsDp5kTykSArJQBWENgDsQAGhAATJJhSoA2qHFIEcNCAAaAZT0ACAApsAwtJDEkAGwZwIaZQEYAujMwAnJOIgAzNk8EJ1BMAE8cLXQAoIYbFBkkR3QNNgZxTEs4AA8cT21oWzgACgByP3SoUqlDcTibGsNgKAlMHMxUJsKbB07gCvEoPus7OE7ukvLK6sNSuBHihTYmYoAdEABNAHVsmyhxAEU2AFk9AGsAdnWASmuZ5tb2von8JoGhppH7TuVXShbfF4GFBMIF-hIIECQYEAL5wmHXeEIkAw1yomFAA",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/vega/vega/releases/tag/v5.23.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/vega/vega/security/advisories/GHSA-4vq7-882g-wcg4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.dev/vega/vega/blob/72b9b3bbf912212e7879b6acaccc84aff969ef1c/packages/vega-functions/src/functions/scale.js#L36-L37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.dev/vega/vega/blob/72b9b3bbf912212e7879b6acaccc84aff969ef1c/packages/vega-functions/src/scales.js#L6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vega.github.io/editor/#/url/vega/N4IgJAzgxgFgpgWwIYgFwhgF0wBwqgegIDc4BzJAOjIEtMYBXAI0poHsDp5kTykSArJQBWENgDsQAGhAATJJhSoA2qHFIEcNCAAaAZT0ACAApsAwtJDEkAGwZwIaZQEYAujMwAnJOIgAzNk8EJ1BMAE8cLXQAoIYbFBkkR3QNNgZxTEs4AA8cT21oWzgACgByP3SoUqlDcTibGsNgKAlMHMxUJsKbB07gCvEoPus7OE7ukvLK6sNSuBHihTYmYoAdEABNAHVsmyhxAEU2AFk9AGsAdnWASmuZ5tb2von8JoGhppH7TuVXShbfF4GFBMIF-hIIECQYEAL5wmHXeEIkAw1yomFAA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26487",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-04T00:15:15.563",
      "lastModified" : "2024-11-21T07:51:37.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.`lassoAppend' function accepts 3 arguments and internally invokes `push` function on the 1st argument specifying array consisting of 2nd and 3rd arguments as `push` call argument. The type of the 1st argument is supposed to be an array, but it's not enforced. This makes it possible to specify any object with a `push` function as the 1st argument, `push` function can be set to any function that can be access via `event.view` (no all such functions can be exploited due to invalid context or signature, but some can, e.g. `console.log`). The issue is that`lassoAppend` doesn't enforce proper types of its arguments. This issue opens various XSS vectors, but exact impact and severity depends on the environment (e.g. Core JS `setImmediate` polyfill basically allows `eval`-like functionality). This issue was patched in 5.23.0.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vega-functions_project:vega-functions:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.13.1",
            "matchCriteriaId" : "573B200A-A938-460B-8B95-3F4E2B98E15A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vega_project:vega:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.23.0",
            "matchCriteriaId" : "FDAFA09A-097A-45DB-9E8F-B8ED261D0550"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vega/vega/commit/01adb034f24727d3bb321bbbb6696a7f4cd91689",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vega/vega/releases/tag/v5.23.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/vega/vega/security/advisories/GHSA-w5m3-xh75-mp55",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vega/vega/commit/01adb034f24727d3bb321bbbb6696a7f4cd91689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vega/vega/releases/tag/v5.23.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/vega/vega/security/advisories/GHSA-w5m3-xh75-mp55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26490",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-04T00:15:15.647",
      "lastModified" : "2024-11-21T07:51:37.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mailcow is a dockerized email package, with multiple containers linked in one bridged network. The Sync Job feature - which can be made available to standard users by assigning them the necessary permission - suffers from a shell command injection. A malicious user can abuse this vulnerability to obtain shell access to the Docker container running dovecot. The imapsync Perl script implements all the necessary functionality for this feature, including the XOAUTH2 authentication mechanism. This code path creates a shell command to call openssl. However, since different parts of the specified user password are included without any validation, one can simply execute additional shell commands. Notably, the default ACL for a newly-created mailcow account does not include the necessary permission. The Issue has been fixed within the 2023-03 Update (March 3rd 2023). As a temporary workaround the Syncjob ACL can be removed from all mailbox users, preventing from creating or changing existing Syncjobs."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailcow:mailcow\\:_dockerized:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03",
            "matchCriteriaId" : "5D365716-4310-4BBC-9A5B-73276F695F86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mailcow/mailcow-dockerized/releases/tag/2023-03",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-3j2f-wf52-cjg7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mailcow/mailcow-dockerized/releases/tag/2023-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-3j2f-wf52-cjg7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25819",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-04T01:15:10.227",
      "lastModified" : "2024-11-21T07:50:15.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source platform for community discussion. Tags that are normally private are showing in metadata. This affects any site running the `tests-passed` or `beta` branches >= 3.1.0.beta2. The issue is patched in the latest `beta` and `tests-passed` version of Discourse."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-359"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "D3608D4A-04A7-4EA4-B4CF-EDF6E2AB7E97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "888B8ECF-EBE0-4821-82F6-B0026E95E407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/a9f2c6db64e7d78b8e0f55e7bd77c5fe3459b831",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-xx2h-mwm7-hq6q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/a9f2c6db64e7d78b8e0f55e7bd77c5fe3459b831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-xx2h-mwm7-hq6q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26481",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-04T01:15:10.447",
      "lastModified" : "2024-11-21T07:51:36.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "authentik is an open-source Identity Provider. Due to an insufficient access check, a recovery flow link that is created by an admin (or sent via email by an admin) can be used to set the password for any arbitrary user. This attack is only possible if a recovery flow exists, which has both an Identification and an Email stage bound to it. If the flow has policies on the identification stage to skip it when the flow is restored (by checking `request.context['is_restored']`), the flow is not affected by this. With this flow in place, an administrator must create a recovery Link or send a recovery URL to the attacker, who can, due to the improper validation of the token create, set the password for any account. Regardless, for custom recovery flows it is recommended to add a policy that checks if the flow is restored, and skips the identification stage. This issue has been fixed in versions 2023.2.3, 2023.1.3 and 2022.12.2.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022.12.3",
            "matchCriteriaId" : "4B39B737-14DF-4B5D-938C-338BD68EAD5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "2023.1.0",
            "versionEndIncluding" : "2023.1.3",
            "matchCriteriaId" : "6F75C81B-6266-4AAB-9EF0-C557B5A9C6BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "2023.2.0",
            "versionEndIncluding" : "2023.2.3",
            "matchCriteriaId" : "6663DCB6-5163-4576-AAC1-EFCBE0CEE0CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/goauthentik/authentik/security/advisories/GHSA-3xf5-pqvf-rqq3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://goauthentik.io/docs/releases/2023.2#fixed-in-202323",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/goauthentik/authentik/security/advisories/GHSA-3xf5-pqvf-rqq3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://goauthentik.io/docs/releases/2023.2#fixed-in-202323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1175",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-04T16:15:09.533",
      "lastModified" : "2025-11-03T21:15:55.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.1378",
            "matchCriteriaId" : "110C15DA-D91B-4BD1-93EB-2822F5607158"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1179",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-05T10:15:09.273",
      "lastModified" : "2024-11-21T07:38:36.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add Supplier Handler. The manipulation of the argument company_name/province/city/phone_number leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222330 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:computer_parts_sales_and_inventory_system_project:computer_parts_sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA0F478-300D-4B7A-AD30-0965A74BE217"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Amat0eur/MyCve/blob/main/Computer-Parts-Sales-And-Inventory-System-Xss.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222330",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222330",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Amat0eur/MyCve/blob/main/Computer-Parts-Sales-And-Inventory-System-Xss.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1180",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-05T10:15:10.377",
      "lastModified" : "2024-11-21T07:38:37.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Health Center Patient Record Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file hematology_print.php. The manipulation of the argument hem_id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222331."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:health_center_patient_record_management_system_project:health_center_patient_record_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E023BA-9374-482C-BD41-6FDC328F1B1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Yuuuhd/bug_report/blob/main/vendors/razormist/Health%20Center%20Patient%20Record%20Management/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222331",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222331",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yuuuhd/bug_report/blob/main/vendors/razormist/Health%20Center%20Patient%20Record%20Management/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1181",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-05T17:15:09.757",
      "lastModified" : "2024-11-21T07:38:37.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyimages2.0_project:easyimages2.0:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.7",
            "matchCriteriaId" : "EC2CBEF0-3FAD-43D8-B255-11977DDFD54C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/icret/easyimages2.0/commit/95a6caf1c660a7342a8f11d70c2dbf7ebcbe2966",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f5cb8816-fc12-4282-9571-81f25670e04a",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/icret/easyimages2.0/commit/95a6caf1c660a7342a8f11d70c2dbf7ebcbe2966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f5cb8816-fc12-4282-9571-81f25670e04a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0734",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-05T21:15:10.027",
      "lastModified" : "2024-11-21T07:37:43.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wallabag:wallabag:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.4",
            "matchCriteriaId" : "D5F56D3B-7045-4633-9208-6605904F3584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wallabag/wallabag/commit/acd285dcbb71b595e6320bb1d0d3a44cdf646ac0",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a296324c-6925-4f5f-a729-39b0d73d5b8b",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wallabag/wallabag/commit/acd285dcbb71b595e6320bb1d0d3a44cdf646ac0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a296324c-6925-4f5f-a729-39b0d73d5b8b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26510",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-05T22:15:08.747",
      "lastModified" : "2024-11-21T07:51:38.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ghost 5.35.0 allows authorization bypass: contributors can view draft posts of other users, which is arguably inconsistent with a security policy in which a contributor's draft can only be read by editors until published by an editor. NOTE: the vendor's position is that this behavior has no security impact."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:5.35.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "64162013-6B6D-48AA-A3E1-320F290DD94C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ghost.org/docs/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/yurahod/2e11eabbe4b92ef1d44b08e37023ecfb",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/yurahod/828d5e6a077c12f3f74c6485d1c7f0e7",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ghost.org/docs/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/yurahod/2e11eabbe4b92ef1d44b08e37023ecfb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/yurahod/828d5e6a077c12f3f74c6485d1c7f0e7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-05T22:15:08.807",
      "lastModified" : "2024-11-21T07:53:18.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "debmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands (because of an eval call) via a crafted .deb file. (The path is shown to the user before execution.)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:debmany:0.88.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E92FC-B023-49BD-B39B-0809CBCDFAA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/1031267",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/1031267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-05T22:15:08.887",
      "lastModified" : "2024-11-21T07:53:19.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The REPORT (after z but before a) parameter in wa.exe in L-Soft LISTSERV 16.5 before 17 allows an attacker to conduct XSS attacks via a crafted URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lsoft:listserv:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.0",
            "matchCriteriaId" : "9074F155-9531-40DF-91B1-02BEEAF46130"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hosakauk/exploits/blob/master/listserv_report_xss.MD",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hosakauk/exploits/blob/master/listserv_report_xss.MD",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22335",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-03-06T00:15:10.350",
      "lastModified" : "2025-03-06T17:15:16.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to bypass access restriction and download an arbitrary file of the directory where the product runs. As a result of exploiting this vulnerability with CVE-2023-22336 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dos-osaka:rakuraku_pc_cloud_agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.8",
            "matchCriteriaId" : "F1C0358A-9CA9-47DA-B48F-9A31CBAEC56C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dos-osaka:ss1:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "13.0.0.40",
            "matchCriteriaId" : "95E59C81-2CAB-4969-BFC8-3C7EC22718B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN57224029/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dos-osaka.co.jp/news/2023/03/230301.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN57224029/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dos-osaka.co.jp/news/2023/03/230301.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22336",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-03-06T00:15:10.413",
      "lastModified" : "2024-11-21T07:44:35.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dos-osaka:rakuraku_pc_cloud_agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.8",
            "matchCriteriaId" : "F1C0358A-9CA9-47DA-B48F-9A31CBAEC56C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dos-osaka:ss1:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "13.0.0.40",
            "matchCriteriaId" : "95E59C81-2CAB-4969-BFC8-3C7EC22718B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN57224029/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dos-osaka.co.jp/news/2023/03/230301.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN57224029/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dos-osaka.co.jp/news/2023/03/230301.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22344",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-03-06T00:15:10.467",
      "lastModified" : "2024-11-21T07:44:36.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dos-osaka:rakuraku_pc_cloud_agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.8",
            "matchCriteriaId" : "F1C0358A-9CA9-47DA-B48F-9A31CBAEC56C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dos-osaka:ss1:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "13.0.0.40",
            "matchCriteriaId" : "95E59C81-2CAB-4969-BFC8-3C7EC22718B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN57224029/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dos-osaka.co.jp/news/2023/03/230301.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN57224029/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dos-osaka.co.jp/news/2023/03/230301.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22419",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-03-06T00:15:10.523",
      "lastModified" : "2024-11-21T07:44:46.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. When processing a comment block in stage information, the end of data cannot be verified and out-of-bounds read occurs. As a result, opening a specially crafted project file may lead to information disclosure and/or arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:kostac_plc_programming_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.9.0",
            "matchCriteriaId" : "EB48346C-6A6C-409A-A3E4-7A4DDB835FB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU94966432/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202303035258/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023030313639/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU94966432/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202303035258/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023030313639/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22421",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-03-06T00:15:10.580",
      "lastModified" : "2025-03-07T19:15:34.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. The insufficient buffer size for the PLC program instructions leads to out-of-bounds read. As a result, opening a specially crafted project file may lead to information disclosure and/or arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:kostac_plc_programming_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.9.0",
            "matchCriteriaId" : "EB48346C-6A6C-409A-A3E4-7A4DDB835FB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU94966432/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202303035258/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023030313639/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU94966432/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202303035258/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023030313639/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22424",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-03-06T00:15:10.640",
      "lastModified" : "2025-03-07T16:15:36.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use-after-free vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. With the abnormal value given as the maximum number of columns for the PLC program, the process accesses the freed memory. As a result, opening a specially crafted project file may lead to information disclosure and/or arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:kostac_plc_programming_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.9.0",
            "matchCriteriaId" : "EB48346C-6A6C-409A-A3E4-7A4DDB835FB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU94966432/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202303035258/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023030313639/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU94966432/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202303035258/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/jp/topics/2023030313639/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22432",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-03-06T00:15:10.700",
      "lastModified" : "2025-03-07T22:15:36.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web2py:web2py:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.23.1",
            "matchCriteriaId" : "B854AE06-484C-432A-A1EB-90BBFA1C1F36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://web2py.com/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://web2py.com/init/default/download",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN78253670/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://web2py.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://web2py.com/init/default/download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN78253670/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22438",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-03-06T00:15:10.767",
      "lastModified" : "2025-03-07T22:15:37.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Contents Management of EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0), EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p5), and EC-CUBE 2 series (EC-CUBE 2.11.0 to 2.11.5, EC-CUBE 2.12.0 to 2.12.6, EC-CUBE 2.13.0 to 2.13.5, and EC-CUBE 2.17.0 to 2.17.2) allows a remote authenticated attacker to inject an arbitrary script."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.11.0",
            "versionEndIncluding" : "2.11.5",
            "matchCriteriaId" : "04878955-7CDF-41E3-9D15-EB0C32897503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.12.0",
            "versionEndIncluding" : "2.12.6",
            "matchCriteriaId" : "829D5D2D-FC6C-409E-A172-FC5F3CF11313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.13.0",
            "versionEndIncluding" : "2.13.5",
            "matchCriteriaId" : "22BD79CE-BC60-4D68-9CA9-A907C6A0683D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.17.0",
            "versionEndIncluding" : "2.17.2",
            "matchCriteriaId" : "271FDC56-FD41-440F-9676-2B6814DEC48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.0.18",
            "matchCriteriaId" : "82CF44DC-7824-4C6E-BA58-1B5C929EA7FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.6",
            "matchCriteriaId" : "DD2386CF-AA07-447D-AEA2-7C8202844E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndIncluding" : "4.1.2",
            "matchCriteriaId" : "2482369B-5D65-4C5C-BABE-40AE3ADF2DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:3.0.18:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "10F6D9C1-B4F3-44D8-B266-787DA62228E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:3.0.18:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "B10AA450-F786-4AFD-9F26-9B2E2D57C5C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:3.0.18:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "8D30A28C-609A-4B6F-B257-7A577133A9FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:3.0.18:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "7530D411-D883-48E4-8D3F-6E6AEF7398E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:3.0.18:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC24B844-49C6-48EB-ADE1-4E8B2FA1B230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.0.6:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "56A84599-1C39-4B65-8256-CE5DE240CF61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.0.6:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC0D4970-06C7-49D7-B249-7ECA1FCF770E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.1.2:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "77DCDC1E-072D-4859-AD9D-1F1547A5C7BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899A469F-AECA-4B58-9287-1FBFBF663B87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN04785663/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ec-cube.net/info/weakness/20230214/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ec-cube.net/info/weakness/20230214/index_2.php",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ec-cube.net/info/weakness/20230214/index_3.php",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN04785663/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ec-cube.net/info/weakness/20230214/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ec-cube.net/info/weakness/20230214/index_2.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ec-cube.net/info/weakness/20230214/index_3.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22838",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-03-06T00:15:10.830",
      "lastModified" : "2024-11-21T07:45:29.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0 allows a remote authenticated attacker to inject an arbitrary script."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.6",
            "matchCriteriaId" : "DD2386CF-AA07-447D-AEA2-7C8202844E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndIncluding" : "4.1.2",
            "matchCriteriaId" : "2482369B-5D65-4C5C-BABE-40AE3ADF2DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.0.6:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "56A84599-1C39-4B65-8256-CE5DE240CF61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.0.6:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC0D4970-06C7-49D7-B249-7ECA1FCF770E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.1.2:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "77DCDC1E-072D-4859-AD9D-1F1547A5C7BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899A469F-AECA-4B58-9287-1FBFBF663B87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN04785663/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ec-cube.net/info/weakness/20230214/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN04785663/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ec-cube.net/info/weakness/20230214/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25077",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-03-06T00:15:10.900",
      "lastModified" : "2024-11-21T07:49:03.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Authentication Key Settings of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0 allows a remote authenticated attacker to inject an arbitrary script."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.6",
            "matchCriteriaId" : "DD2386CF-AA07-447D-AEA2-7C8202844E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndIncluding" : "4.1.2",
            "matchCriteriaId" : "2482369B-5D65-4C5C-BABE-40AE3ADF2DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.0.6:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "56A84599-1C39-4B65-8256-CE5DE240CF61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.0.6:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "EC0D4970-06C7-49D7-B249-7ECA1FCF770E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.1.2:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "77DCDC1E-072D-4859-AD9D-1F1547A5C7BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ec-cube:ec-cube:4.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899A469F-AECA-4B58-9287-1FBFBF663B87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN04785663/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ec-cube.net/info/weakness/20230214/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN04785663/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ec-cube.net/info/weakness/20230214/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26106",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-03-06T05:15:12.200",
      "lastModified" : "2025-03-05T21:15:17.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the package dot-lens are vulnerable to Prototype Pollution via the set() function in index.js file.\r\r"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dot-lens_project:dot-lens:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "0FFCD7B8-70D9-424E-8D66-3EBB0A37B84D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jb55/dot-lens/blob/465ef2088e4065b7be1c4372eedd2215c3820bc4/index.js%23L70",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-DOTLENS-3227646",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jb55/dot-lens/blob/465ef2088e4065b7be1c4372eedd2215c3820bc4/index.js%23L70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-DOTLENS-3227646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26107",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-03-06T05:15:12.470",
      "lastModified" : "2025-03-05T20:15:54.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string.\r\r"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ebay:sketchsvg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4663EF2-C8FB-4D82-87E9-1C0BD0EF5C44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eBay/SketchSVG/blob/dd1036648f0f320a3187ef79d506b676b9eb87a6/lib/index.js%23L115",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/eBay/SketchSVG/blob/dd1036648f0f320a3187ef79d506b676b9eb87a6/lib/index.js%23L64",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-SKETCHSVG-3167969",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eBay/SketchSVG/blob/dd1036648f0f320a3187ef79d506b676b9eb87a6/lib/index.js%23L115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/eBay/SketchSVG/blob/dd1036648f0f320a3187ef79d506b676b9eb87a6/lib/index.js%23L64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-SKETCHSVG-3167969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26108",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-03-06T05:15:12.690",
      "lastModified" : "2024-11-21T07:50:47.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nestjs:nest:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "9.0.5",
            "matchCriteriaId" : "96A6F6F5-707C-41A2-A4D9-7CBE98ACEB0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nestjs/nest/issues/9759",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nestjs/nest/pull/9819",
        "source" : "report@snyk.io",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/nestjs/nest/pull/9819/commits/f59cf5e81ca73bcdf1b5b36713550fd93918db41",
        "source" : "report@snyk.io",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-NESTJSCORE-2869127",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nestjs/nest/issues/9759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nestjs/nest/pull/9819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/nestjs/nest/pull/9819/commits/f59cf5e81ca73bcdf1b5b36713550fd93918db41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-NESTJSCORE-2869127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26111",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-03-06T05:15:12.920",
      "lastModified" : "2025-03-05T21:15:18.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the package @nubosoftware/node-static; all versions of the package node-static are vulnerable to Directory Traversal due to improper file path sanitization in the startsWith() method in the servePath function.\r\r"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:\\@nubosoftware\\/node-static_project:\\@nubosoftware\\/node-static:-:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A6C388A6-611C-43A6-9974-74E328554E18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-static_project:node-static:-:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "954E5123-26DC-4031-9A2E-BF7998864795"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/lirantal/c80b28e7bee148dc287339cb483e42bc",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cloudhead/node-static/blob/master/lib/node-static.js%23L160-L163",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-NODESTATIC-3149928",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-NUBOSOFTWARENODESTATIC-3149927",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/lirantal/c80b28e7bee148dc287339cb483e42bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cloudhead/node-static/blob/master/lib/node-static.js%23L160-L163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-NODESTATIC-3149928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-NUBOSOFTWARENODESTATIC-3149927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22856",
      "sourceIdentifier" : "vdp@themissinglink.com.au",
      "published" : "2023-03-06T07:15:11.363",
      "lastModified" : "2024-11-21T07:45:32.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "vdp@themissinglink.com.au",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "vdp@themissinglink.com.au",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blogengine:blogengine.net:3.3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C215046E-4B0C-44AD-B0C4-D055FE17A873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.themissinglink.com.au/security-advisories/cve-2023-22856",
        "source" : "vdp@themissinglink.com.au",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.themissinglink.com.au/security-advisories/cve-2023-22856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22857",
      "sourceIdentifier" : "vdp@themissinglink.com.au",
      "published" : "2023-03-06T07:15:11.757",
      "lastModified" : "2024-11-21T07:45:32.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an injection of a malicious payload into a blog post."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "vdp@themissinglink.com.au",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "vdp@themissinglink.com.au",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blogengine:blogengine.net:3.3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C215046E-4B0C-44AD-B0C4-D055FE17A873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.themissinglink.com.au/security-advisories/cve-2023-22857",
        "source" : "vdp@themissinglink.com.au",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.themissinglink.com.au/security-advisories/cve-2023-22857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22858",
      "sourceIdentifier" : "vdp@themissinglink.com.au",
      "published" : "2023-03-06T07:15:12.073",
      "lastModified" : "2024-11-21T07:45:32.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "vdp@themissinglink.com.au",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "vdp@themissinglink.com.au",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blogengine:blogengine.net:3.3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C215046E-4B0C-44AD-B0C4-D055FE17A873"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.themissinglink.com.au/security-advisories/cve-2023-22857",
        "source" : "vdp@themissinglink.com.au",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.themissinglink.com.au/security-advisories/cve-2023-22857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0839",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-06T08:15:08.330",
      "lastModified" : "2024-11-21T07:37:56.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ProMIS Process Co. InSCADA allows Account Footprinting.This issue affects inSCADA: before 20230115-1.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1320"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inscada_project:inscada:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20230115-1",
            "matchCriteriaId" : "3C8F91C8-9F7C-4EA4-ABA6-B603ED3BB904"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0127",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1184",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-06T08:15:08.513",
      "lastModified" : "2024-11-21T07:38:37.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8. Affected by this issue is some unknown functionality of the file admin/database.php of the component Backup Database Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222356."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopex:ecshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.8",
            "matchCriteriaId" : "3E53599B-7957-4D73-8B77-45213AB82475"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wjzdalao/ecshop4.1.8/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222356",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222356",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/wjzdalao/ecshop4.1.8/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1185",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-06T08:15:08.610",
      "lastModified" : "2024-11-21T07:38:37.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of the component New Product Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222357 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopex:ecshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.8",
            "matchCriteriaId" : "3E53599B-7957-4D73-8B77-45213AB82475"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wjzdalao/ecshop4.1.8/issues/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222357",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222357",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/wjzdalao/ecshop4.1.8/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1186",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-06T08:15:08.683",
      "lastModified" : "2024-11-21T07:38:37.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabulatech:webcam_for_remote_desktop:2.8.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB015C29-B478-4F45-8912-60311DFAD9FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1186",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222358",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222358",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1187",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-06T08:15:08.770",
      "lastModified" : "2024-11-21T07:38:37.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This issue affects some unknown processing in the library ftwebcam.sys of the component Global Variable Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222359."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabulatech:webcam_for_remote_desktop:2.8.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB015C29-B478-4F45-8912-60311DFAD9FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1187",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222359",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.222359",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.222359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1188",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-06T08:15:08.850",
      "lastModified" : "2024-11-21T07:38:38.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42. It has been classified as problematic. Affected is the function 0x222018 in the library ftwebcam.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222360."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabulatech:webcam_for_remote_desktop:2.8.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB015C29-B478-4F45-8912-60311DFAD9FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1_gVQtfbpywhh8Z6g4Y03Qg7UT3Aobz2e/view?usp=sharing",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1188",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222360",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222360",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1_gVQtfbpywhh8Z6g4Y03Qg7UT3Aobz2e/view?usp=sharing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1189",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-06T08:15:08.927",
      "lastModified" : "2024-11-21T07:38:38.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability is the function 0x222400/0x222404/0x222410 in the library WiseFs64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-222361 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wisecleaner:wise_folder_hider:4.4.3.202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C44B95-049F-4D31-B06C-EAF67109767A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1189",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222361",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222361",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1190",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-06T08:15:08.997",
      "lastModified" : "2024-11-21T07:38:38.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in xiaozhuai imageinfo up to 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file imageinfo.hpp. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. VDB-222362 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imageinfo_project:imageinfo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.3",
            "matchCriteriaId" : "906360E2-8A00-4C71-8A9C-1F0D7E74F637"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/imageinfo_poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaozhuai/imageinfo/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222362",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222362",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/imageinfo_poc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xiaozhuai/imageinfo/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1191",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-06T08:15:09.083",
      "lastModified" : "2024-11-21T07:38:38.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-222363."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xjd2020:fastcms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67A406E-2F4F-4CAB-81F0-69EC395551D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ha1yuYiqiyinHangzhouTechn0logy/fastcms/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/my-fastcms/fastcms/issues/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222363",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222363",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ha1yuYiqiyinHangzhouTechn0logy/fastcms/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/my-fastcms/fastcms/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0063",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-06T14:15:09.890",
      "lastModified" : "2025-03-06T15:15:12.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WordPress Shortcodes WordPress plugin through 1.6.36 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synved:wordpress_shortcodes:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.6.36",
            "matchCriteriaId" : "43E34D59-F37F-4DC2-A6E4-676113317292"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/2262f2fc-8122-46ed-8e67-8c34ee35fc97",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/2262f2fc-8122-46ed-8e67-8c34ee35fc97",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0064",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-06T14:15:09.960",
      "lastModified" : "2025-03-06T15:15:13.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The eVision Responsive Column Layout Shortcodes WordPress plugin through 2.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaglevisionit:evision_responsive_column_layout_shortcodes:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.3",
            "matchCriteriaId" : "366F342A-EB8F-49D0-875E-5188D4733C55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/97be5795-b5b8-40c7-80bf-7da95da7705a",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/97be5795-b5b8-40c7-80bf-7da95da7705a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0065",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-06T14:15:10.033",
      "lastModified" : "2024-11-21T07:36:29.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The i2 Pros & Cons WordPress plugin through 1.3.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i2_pros_\\&_cons_project:i2_pros_\\&_cons:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "2D591768-A8D2-4258-AB07-52DBA5B5D014"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/42c3ac68-4bbc-4d47-ad53-2c9ed48cd677",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/42c3ac68-4bbc-4d47-ad53-2c9ed48cd677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0068",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-06T14:15:10.107",
      "lastModified" : "2025-03-06T15:15:13.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Product GTIN (EAN, UPC, ISBN) for WooCommerce WordPress plugin through 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:product_gtin_\\(ean\\,_upc\\,_isbn\\)_for_woocommerce_project:product_gtin_\\(ean\\,_upc\\,_isbn\\)_for_woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "9BD82B7D-31C0-48F6-A0B9-5C5CC74035FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/4abd1454-380c-4c23-8474-d7da4b2f3b8e",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/4abd1454-380c-4c23-8474-d7da4b2f3b8e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0069",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-06T14:15:10.180",
      "lastModified" : "2025-03-05T20:15:39.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpaudio_mp3_player_project:wpaudio_mp3_player:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "F199A46B-BD08-4B3E-B597-0432D281D767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d9f00bcb-3746-4a9d-a222-4d532e84615f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d9f00bcb-3746-4a9d-a222-4d532e84615f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0076",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-06T14:15:10.260",
      "lastModified" : "2024-11-21T07:36:30.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Download Attachments WordPress plugin before 1.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dfactory:download_attachments:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.24",
            "matchCriteriaId" : "84FFE15F-57C3-47AE-8A25-E7BBA8D34446"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/a0a44f8a-877c-40df-a3ba-b9b806ffb772/",
        "source" : "contact@wpscan.com"
      }, {
        "url" : "https://wpscan.com/vulnerability/a0a44f8a-877c-40df-a3ba-b9b806ffb772/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0078",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-06T14:15:10.333",
      "lastModified" : "2025-05-05T16:15:23.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Resume Builder WordPress plugin through 3.1.1 does not sanitize and escape some parameters related to Resume, which could allow users with a role as low as subscriber to perform Stored XSS attacks against higher privilege users"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resumebuilder:resume_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.1.1",
            "matchCriteriaId" : "6A31E817-85D2-46C4-8F14-0409175F0FA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e667854f-56f8-4dbe-9573-6652a8aacc2c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e667854f-56f8-4dbe-9573-6652a8aacc2c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0165",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-06T14:15:10.407",
      "lastModified" : "2025-03-06T15:15:13.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cost Calculator WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nicdark:cost_calculator:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "E6EB288E-C786-4AEC-8433-C8B96A750185"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/f00b82f7-d8ad-4f6b-b791-81cc16b6336b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f00b82f7-d8ad-4f6b-b791-81cc16b6336b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0212",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-06T14:15:10.483",
      "lastModified" : "2025-03-06T15:15:13.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Advanced Recent Posts WordPress plugin through 0.6.14 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advanced_recent_posts_project:advanced_recent_posts:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.6.14",
            "matchCriteriaId" : "10679A1F-0AAC-4C18-878A-45625D1BEE9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5fdd44aa-7f3f-423a-9fb0-dc9dc36f33a3",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5fdd44aa-7f3f-423a-9fb0-dc9dc36f33a3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0328",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-06T14:15:10.573",
      "lastModified" : "2025-03-06T16:15:39.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WPCode WordPress plugin before 2.0.7 does not have adequate privilege checks in place for several AJAX actions, only checking the nonce. This may lead to allowing any authenticated user who can edit posts to call the endpoints related to WPCode Library authentication (such as update and delete the auth key)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpcode:wpcode:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.7",
            "matchCriteriaId" : "523B2EB0-A65B-4C57-8E1F-8FE3FE7BA07E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/3c4318a9-a3c5-409b-a52e-edd8583c3c43",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/3c4318a9-a3c5-409b-a52e-edd8583c3c43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0377",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-06T14:15:10.663",
      "lastModified" : "2024-11-21T07:37:04.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Scriptless Social Sharing WordPress plugin before 3.2.2 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:robincornett:scriptless_social_sharing:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "A68EA896-CBC6-42B6-881E-5B0CD183E2CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5b1aacd1-3f75-4a6f-8146-cbb98a713724",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5b1aacd1-3f75-4a6f-8146-cbb98a713724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0979",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-06T15:15:10.077",
      "lastModified" : "2024-11-21T07:38:13.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData MedDataPACS allows SQL Injection.This issue affects MedDataPACS : before 2023-03-03.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:meddatapacs:meddatapacs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022-03-03",
            "matchCriteriaId" : "9A26D1D6-4728-42D9-9E70-1B6D12F608C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0129",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1197",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-06T16:15:10.010",
      "lastModified" : "2024-11-21T07:38:39.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uvdesk:community-skeleton:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "AD42C7EC-F101-42EB-ADB7-08C43CDA053F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/uvdesk/community-skeleton/commit/6fae9442361c8a216611d3622bec26249a8c48a0",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/97d226ea-2cd8-4f4d-9360-aa46c37fdd26",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uvdesk/community-skeleton/commit/6fae9442361c8a216611d3622bec26249a8c48a0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/97d226ea-2cd8-4f4d-9360-aa46c37fdd26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1200",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-06T16:15:10.090",
      "lastModified" : "2024-11-21T07:38:39.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in ehuacui bbs. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-222388."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ehuacui-bbs_project:ehuacui-bbs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692FA4B7-DA8E-4481-A26C-34EFF01BD306"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/ehuacui/ehuacui-bbs/issues/I6GDCB",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222388",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222388",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/ehuacui/ehuacui-bbs/issues/I6GDCB",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-06T16:15:10.187",
      "lastModified" : "2025-03-05T21:15:16.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeecg:jeecg:3.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D5D7DD-38EF-48F6-8C18-F75891A91B66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jeecgboot/jeecg-boot/issues/4511",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jeecgboot/jeecg-boot/issues/4511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-06T17:15:10.677",
      "lastModified" : "2024-11-21T07:49:24.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prismlauncher:prism_launcher:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1",
            "matchCriteriaId" : "CA678AE0-AEA3-4542-9DFF-2779190C0320"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PrismLauncher/PrismLauncher/security/advisories/GHSA-wxgx-8v36-mj2m",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/PrismLauncher/PrismLauncher/security/advisories/GHSA-wxgx-8v36-mj2m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27474",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-06T17:15:10.740",
      "lastModified" : "2024-11-21T07:52:58.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directus is a real-time API and App dashboard for managing SQL database content. Instances relying on an allow-listed reset URL are vulnerable to an HTML injection attack through the use of query parameters in the reset URL. An attacker could exploit this to email users urls to the servers domain but which may contain malicious code. The problem has been resolved and released under version 9.23.0. People relying on a custom password reset URL should upgrade to 9.23.0 or later, or remove the custom reset url from the configured allow list. Users are advised to upgrade. Users unable to upgrade may disable the custom reset URL allow list as a workaround."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rangerstudio:directus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.23.0",
            "matchCriteriaId" : "BE5ECBFC-CE32-46AA-AD02-04D5C9C78DA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/directus/directus/issues/17119",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/directus/directus/pull/17120",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/directus/directus/security/advisories/GHSA-4hmq-ggrm-qfc6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/directus/directus/issues/17119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/directus/directus/pull/17120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/directus/directus/security/advisories/GHSA-4hmq-ggrm-qfc6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22481",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-06T18:15:10.357",
      "lastModified" : "2024-11-21T07:44:53.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FreshRSS is a self-hosted RSS feed aggregator. When using the greader API, the provided password is logged in clear in `users/_/log_api.txt` in the case where the authentication fails. The issues occurs in `authorizationToUser()` in `greader.php`. If there is an issue with the request or the credentials, `unauthorized()` or `badRequest()` is called. Both these functions are printing the return of `debugInfo()` in the logs.  `debugInfo()` will return the content of the request. By default, this will be saved in `users/_/log_api.txt` and if the const `COPY_LOG_TO_SYSLOG` is true, in syslogs as well. Exploiting this issue requires having access to logs produced by FreshRSS. Using the information from the logs, a malicious individual could get users' API keys (would be displayed if the users fills in a bad username) or passwords."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.4,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freshrss:freshrss:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndExcluding" : "1.21.0",
            "matchCriteriaId" : "744D12B2-7A0C-450A-8E1B-B608756A46C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreshRSS/FreshRSS/commit/075cf4c800063e3cc65c3d41a9c23222e8ebb554",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-8vvv-jxg6-8578",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/FreshRSS/FreshRSS/commit/075cf4c800063e3cc65c3d41a9c23222e8ebb554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-8vvv-jxg6-8578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25169",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-06T18:15:10.473",
      "lastModified" : "2024-11-21T07:49:14.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "discourse-yearly-review is a discourse plugin which publishes an automated Year in Review topic. In affected versions a user present in a yearly review topic that is then anonymised will still have some data linked to its original account. This issue has been patched in commit `b3ab33bbf7` which is included in the latest version of the Discourse Yearly Review plugin. Users are advised to upgrade. Users unable to upgrade may disable the `yearly_review_enabled` setting to fully mitigate the issue. Also, it's possible to edit the anonymised user's old data in the yearly review topics manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse_yearly_review:*:*:*:*:*:discourse:*:*",
            "versionEndExcluding" : "0.2",
            "matchCriteriaId" : "1C0B6C1E-A6EA-42E5-8DF9-85324D5BF5CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse-yearly-review/commit/b3ab33bbf7130fca54764cf0336395a8a1eeaf3c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse-yearly-review/security/advisories/GHSA-x2r8-v85c-x3x7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse-yearly-review/commit/b3ab33bbf7130fca54764cf0336395a8a1eeaf3c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse-yearly-review/security/advisories/GHSA-x2r8-v85c-x3x7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23939",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-06T19:15:10.297",
      "lastModified" : "2024-11-21T07:47:08.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure/setup-kubectl is a GitHub Action for installing Kubectl. This vulnerability only impacts versions before version 3. An insecure temporary creation of a file allows other actors on the Actions runner to replace the Kubectl binary created by this action because it is world writable. This Kubectl tool installer runs `fs.chmodSync(kubectlPath, 777)` to set permissions on the Kubectl binary, however, this allows any local user to replace the Kubectl binary. This allows privilege escalation to the user that can also run kubectl, most likely root. This attack is only possible if an attacker somehow breached the GitHub actions runner or if a user is utilizing an Action that maliciously executes this attack. This has been fixed and released in all versions `v3` and later. 775 permissions are used instead. Users are advised to upgrade. There are no known workarounds for this issue.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 3.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_setup_kubectl:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "A349BC72-1763-4770-9D6F-F49509C0D780"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Azure/setup-kubectl/commit/d449d75495d2b9d1463555bb00ca3dca77a42ab6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Azure/setup-kubectl/security/advisories/GHSA-p756-rfxh-x63h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Azure/setup-kubectl/commit/d449d75495d2b9d1463555bb00ca3dca77a42ab6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Azure/setup-kubectl/security/advisories/GHSA-p756-rfxh-x63h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26054",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-06T19:15:10.390",
      "lastModified" : "2024-11-21T07:50:40.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In affected versions when the user sends a build request that contains a Git URL that contains credentials and the build creates a provenance attestation describing that build, these credentials could be visible from the provenance attestation. Git URL can be passed in two ways: 1) Invoking build directly from a URL with credentials. 2) If the client sends additional version control system (VCS) info hint parameters on builds from a local source. Usually, that would mean reading the origin URL from `.git/config` file. When a build is performed under specific conditions where credentials were passed to BuildKit they may be visible to everyone who has access to provenance attestation. Provenance attestations and VCS info hints were added in version v0.11.0. Previous versions are not vulnerable. In v0.10, when building directly from Git URL, the same URL could be visible in `BuildInfo` structure that is a predecessor of Provenance attestations. Previous versions are not vulnerable. This bug has been fixed in v0.11.4. Users are advised to upgrade. Users unable to upgrade may disable VCS info hints by setting `BUILDX_GIT_INFO=0`. `buildctl` does not set VCS hints based on `.git` directory, and values would need to be passed manually with `--opt`."
      }, {
        "lang" : "es",
        "value" : "BuildKit es un conjunto de herramientas para convertir código fuente para crear artefactos de manera eficiente, expresiva y repetible. En las versiones afectadas, cuando el usuario envía una solicitud de compilación que contiene una URL de Git que contiene credenciales y la compilación crea una atestación de procedencia que describe esa compilación, estas credenciales podrían ser visibles desde la atestación de procedencia. La URL de Git se puede pasar de dos maneras: 1) Invocando la compilación directamente desde una URL con credenciales. 2) Si el cliente envía parámetros de sugerencias de información del sistema de control de versiones (VCS) adicionales en compilaciones desde una fuente local. Por lo general, eso significaría leer la URL de origen del archivo `.git/config`. Cuando se realiza una compilación en condiciones específicas en las que se pasaron credenciales a BuildKit, es posible que sean visibles para todos los que tengan acceso a la certificación de procedencia. En la versión v0.11.0 se agregaron certificaciones de procedencia y sugerencias de información de VCS. Las versiones anteriores no son vulnerables. En la versión 0.10, al compilar directamente desde la URL de Git, la misma URL podría ser visible en la estructura `BuildInfo` que es una predecesora de las certificaciones de procedencia. Las versiones anteriores no son vulnerables. Este error se ha solucionado en v0.11.4. Se recomienda a los usuarios que actualicen. Los usuarios que no puedan actualizar pueden desactivar las sugerencias de información de VCS configurando `BUILDX_GIT_INFO=0`. `buildctl` no establece sugerencias de VCS basadas en el directorio `.git` y los valores deberían pasarse manualmente con `--opt`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobyproject:buildkit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.10.0",
            "versionEndExcluding" : "0.11.4",
            "matchCriteriaId" : "B20CBA03-7DD3-4756-AE19-BE0B45272C1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/moby/buildkit/commit/75123c696506bdbca1ed69906479e200f1b62604",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/moby/buildkit/commit/75123c696506bdbca1ed69906479e200f1b62604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27472",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-06T19:15:10.483",
      "lastModified" : "2024-11-21T07:52:58.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : " quickentity-editor-next is an open source, system local, video game asset editor. In affected versions HTML tags in entity names are not sanitised (XSS vulnerability). Allows arbitrary code execution within the browser sandbox, among other things, simply from loading a file containing a script tag in any entity name. This issue has been patched in version 1.28.1 of the application. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quickentity_editor_project:quickentity_editor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "019C7AFC-D59B-448A-8DCF-DC7075567F1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/atampy25/quickentity-editor-next/commit/5303b45a20a6e4e9318729b8dd7bbf09b37b369d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/atampy25/quickentity-editor-next/security/advisories/GHSA-22gc-rq5x-fxpw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/atampy25/quickentity-editor-next/commit/5303b45a20a6e4e9318729b8dd7bbf09b37b369d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/atampy25/quickentity-editor-next/security/advisories/GHSA-22gc-rq5x-fxpw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-06T20:15:09.797",
      "lastModified" : "2025-03-07T17:15:17.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the module \"Xen Forum\" (xenforum) for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:xen_forum:*:*:*:*:*:prestashop:*:*",
            "versionEndExcluding" : "2.13.0",
            "matchCriteriaId" : "418528FD-EDB5-4FAE-8CD2-93C8590B81C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://addons.prestashop.com/en/blog-forum-new/19299-xen-forum.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/03/06/xenforum.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://addons.prestashop.com/en/blog-forum-new/19299-xen-forum.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/03/06/xenforum.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-06T20:15:09.857",
      "lastModified" : "2025-03-06T16:15:40.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \\controller\\Addon.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC800090-6420-4971-831D-1E77A18BD45E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/funadmin/funadmin/issues/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/funadmin/funadmin/issues/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26600",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-06T20:15:09.913",
      "lastModified" : "2025-03-06T16:15:40.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9",
            "matchCriteriaId" : "A6DEEF51-0977-4061-9919-803DFD144E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "258BF334-DE00-472D-BD94-C0DF8CDAF53C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6900:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0754D0-5B28-4851-89A2-DC5B20CFF3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6901:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0CAA5B-16A1-4637-B90A-BFAF7381CCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6902:*:*:*:*:*:*",
            "matchCriteriaId" : "48A960D7-7AB2-43F4-99FC-5B1FE69BFDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6903:*:*:*:*:*:*",
            "matchCriteriaId" : "B293513C-9ECB-4512-B1B8-A470C6115458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6904:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9B89EB-C51F-4A70-A6DF-1BD326308DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6905:*:*:*:*:*:*",
            "matchCriteriaId" : "9B708143-01B3-45D0-A769-E1D8E99237B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6906:*:*:*:*:*:*",
            "matchCriteriaId" : "F1837C80-7D1F-4AF5-BF4B-932DF03D6A30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6907:*:*:*:*:*:*",
            "matchCriteriaId" : "4E528B83-1539-4516-9ACF-A05E853014DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6908:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFB65BC-5B94-4075-BBB1-4CD8B5B216C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6909:*:*:*:*:*:*",
            "matchCriteriaId" : "7FAF3DFA-78FB-417C-808A-507F66889913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6950:*:*:*:*:*:*",
            "matchCriteriaId" : "E9506197-CDDA-451B-9FE3-72B3C3BA19EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6951:*:*:*:*:*:*",
            "matchCriteriaId" : "691DF8EC-6A7A-4449-8A4C-79F76726D685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6952:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3E2B0A-EB1E-45C3-BC2C-9E32268A0867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6953:*:*:*:*:*:*",
            "matchCriteriaId" : "E1BD2753-52B8-4EB0-8332-C67935FB8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6954:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BD08BF-4E5D-4DE4-A499-B0296C126599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6955:*:*:*:*:*:*",
            "matchCriteriaId" : "F13CB227-496C-4777-BE76-27AFF5ED15C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6956:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB1DF8F-3385-40C6-92C5-10724F8A6911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6957:*:*:*:*:*:*",
            "matchCriteriaId" : "C1997DE8-8CFA-4882-9107-741B88339A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6970:*:*:*:*:*:*",
            "matchCriteriaId" : "148F6458-136D-4612-9619-F51AEEC11AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6971:*:*:*:*:*:*",
            "matchCriteriaId" : "8B189696-D6BC-475B-90CA-AF122224FEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6972:*:*:*:*:*:*",
            "matchCriteriaId" : "477C97EC-A497-4C7C-973B-2C057A9242AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6973:*:*:*:*:*:*",
            "matchCriteriaId" : "284F5D9D-F23F-4936-B461-10701CC3AB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6974:*:*:*:*:*:*",
            "matchCriteriaId" : "74CE0145-F165-4FB4-A819-01B30641196A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6975:*:*:*:*:*:*",
            "matchCriteriaId" : "CA291C44-616B-45D9-9709-61CD33E8B135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6976:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7492E-5D5B-419D-9749-7CC6EE5BC0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6977:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF1B243-DA58-42CD-9DF4-6D4A010796D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6978:*:*:*:*:*:*",
            "matchCriteriaId" : "2B73FD0F-6B48-406E-AB29-606CC07C81C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6979:*:*:*:*:*:*",
            "matchCriteriaId" : "CED2C49D-DB96-4495-BD6F-460871D94EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6980:*:*:*:*:*:*",
            "matchCriteriaId" : "C9AAC638-1379-4F87-9BA3-07CE16CAB98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6981:*:*:*:*:*:*",
            "matchCriteriaId" : "B3470B5B-B8BC-41B9-8CA5-5E7A0EB9934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6982:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2D9355-B1D5-4B14-8900-42E7C8DC5E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6983:*:*:*:*:*:*",
            "matchCriteriaId" : "03A34ED3-EC89-4BE3-8A99-A5727A154672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6984:*:*:*:*:*:*",
            "matchCriteriaId" : "4E84EF2B-37A5-4499-8C16-877E8AB8A731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6985:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDA22C3-8F1E-45C9-BC8D-C3A49EFA348C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6986:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA5504A-8BD9-4C0D-AD5A-4CB188A99563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6987:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4E1A50-A366-4D5E-9DDB-B33D1D1770E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1",
            "matchCriteriaId" : "0F8049D8-8FE3-43CA-9568-AEA659776436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDE81A3-95A1-42FC-A526-5F343E73ABD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:14100:*:*:*:*:*:*",
            "matchCriteriaId" : "0575CC86-9321-4502-83C0-348DCE175EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:14101:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B60D55-DE84-4BE8-A42D-98D133D3D228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:14102:*:*:*:*:*:*",
            "matchCriteriaId" : "B79CA06A-17DE-429A-A3C9-4FC28E907318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:14103:*:*:*:*:*:*",
            "matchCriteriaId" : "19C86206-29CB-4ABA-8979-19DF52B8CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.0",
            "matchCriteriaId" : "969E1FCF-76A0-40BC-A38F-56FCB713419F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79342FBF-8F53-4A9D-A021-6748FC42D777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13000:*:*:*:*:*:*",
            "matchCriteriaId" : "298E6401-A9A9-43B6-901F-327944E0AF94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13001:*:*:*:*:*:*",
            "matchCriteriaId" : "0998F749-27E4-4C98-A027-939427640F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13002:*:*:*:*:*:*",
            "matchCriteriaId" : "05694BAB-3210-47A6-8FAD-5AC84FBAD240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13003:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0F5553-E56E-4DFC-BEE1-62872D078886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13004:*:*:*:*:*:*",
            "matchCriteriaId" : "AE037B8B-AF47-454F-B8AC-F5E0E095E304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0",
            "matchCriteriaId" : "791D8E77-1A6B-4739-A6E6-BF91E978144E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3AE43EA7-9AA1-4EA7-8840-22BD543A093C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11000:*:*:*:*:*:*",
            "matchCriteriaId" : "D788203D-B169-4C98-B090-B070630750DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11001:*:*:*:*:*:*",
            "matchCriteriaId" : "846EA6AB-9588-4D9F-AEBD-83B018BE7362"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11002:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD540F2-C964-40DE-91AB-DE726AAA82A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11003:*:*:*:*:*:*",
            "matchCriteriaId" : "AB196A6F-FBD8-4573-B1B2-BE2B06BD1AC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11004:*:*:*:*:*:*",
            "matchCriteriaId" : "685783DB-DD06-4D9C-9E83-63449D5B60D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11005:*:*:*:*:*:*",
            "matchCriteriaId" : "C371F2CD-A1F8-4EC7-8096-D61DEA337D44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11006:*:*:*:*:*:*",
            "matchCriteriaId" : "B980A72F-53E2-4FC1-AA25-743AE8650641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11007:*:*:*:*:*:*",
            "matchCriteriaId" : "68289AE6-F348-401A-BE49-08889492B23B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11008:*:*:*:*:*:*",
            "matchCriteriaId" : "A0667DC3-8315-4F2B-BAB7-D1F1CA476D68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11009:*:*:*:*:*:*",
            "matchCriteriaId" : "34C768E0-FF5B-413D-87B2-9D09F28F95DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11010:*:*:*:*:*:*",
            "matchCriteriaId" : "5570C5A9-A79B-48CF-B95D-3513F7B9BAF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11011:*:*:*:*:*:*",
            "matchCriteriaId" : "B77031F5-E097-4549-BF5E-1D0718AB52B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11012:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9C0879-8AE5-4E6E-998C-E79FC418C68A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11013:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1F21D7-08E8-4637-903B-4277399C0BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11014:*:*:*:*:*:*",
            "matchCriteriaId" : "97920D1C-62BA-4B10-9912-C2ED1C1B0313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11015:*:*:*:*:*:*",
            "matchCriteriaId" : "023C6278-1FF9-4E79-8D95-32BE71701D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11016:*:*:*:*:*:*",
            "matchCriteriaId" : "34EFB9EF-269E-4A72-8357-2A54E8B78C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11017:*:*:*:*:*:*",
            "matchCriteriaId" : "35366F60-D6E2-4B29-B593-D24079CE6831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11018:*:*:*:*:*:*",
            "matchCriteriaId" : "CB60E016-82DD-41EC-85F9-D4F37AF1F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11019:*:*:*:*:*:*",
            "matchCriteriaId" : "9B83E37C-B1F6-4CEB-8A8E-39E24BE8B59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11020:*:*:*:*:*:*",
            "matchCriteriaId" : "80B62BA0-2CF1-4828-99A9-7DD13CFCB9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11021:*:*:*:*:*:*",
            "matchCriteriaId" : "7F529DB6-4D30-49F8-BFE2-C10C1A899917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11022:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA25296-8163-4C98-A8CD-35834240308E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11024:*:*:*:*:*:*",
            "matchCriteriaId" : "33D51403-A976-4EA3-AA23-C699E03239E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11025:*:*:*:*:*:*",
            "matchCriteriaId" : "D86A2E8A-1689-4E6E-B50B-E16CBCEB0C23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11026:*:*:*:*:*:*",
            "matchCriteriaId" : "C83DD7D3-C3AF-4E56-B38E-B1C5F3EABCD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11027:*:*:*:*:*:*",
            "matchCriteriaId" : "A940CD15-8270-4935-9C46-9684E7735C99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk/CVE-2023-26600.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk/CVE-2023-26600.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0093",
      "sourceIdentifier" : "psirt@okta.com",
      "published" : "2023-03-06T21:15:10.933",
      "lastModified" : "2025-03-06T20:15:37.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser. An outdated library, webbrowser, used by the ASA client was found to be vulnerable to command injection. To exploit this issue, an attacker would need to phish the user to enter an attacker controlled server URL during enrollment."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:okta:advanced_server_access:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.13.1",
            "versionEndExcluding" : "1.68.2",
            "matchCriteriaId" : "8246431D-FAFE-428E-BBC0-8AEBDEE2F1D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://trust.okta.com/security-advisories/okta-advanced-server-access-client-cve-2023-0093/",
        "source" : "psirt@okta.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://trust.okta.com/security-advisories/okta-advanced-server-access-client-cve-2023-0093/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1161",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-03-06T21:15:10.990",
      "lastModified" : "2025-11-03T22:16:03.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file"
      }, {
        "lang" : "es",
        "value" : "El fallo del disector ISO 15765 e ISO 10681 en Wireshark 4.0.0 a 4.0.3 y 3.6.0 a 3.6.11 permite la denegación de servicio mediante la inyección de paquetes o un archivo de captura manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.12",
            "matchCriteriaId" : "5F7FFE8E-2DCE-405E-AEF3-7FF92FCBAC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "367479CF-5177-4907-8952-533FDDBC17E6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1161.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18839",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-02",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5429",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-08.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1161.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-06T21:15:11.080",
      "lastModified" : "2024-11-21T07:48:20.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /admin/convert/export_z3950_new.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sigb:pmb:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6BCC12-4630-4A28-BF91-35DB0393B131"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AetherBlack/CVE/tree/main/PMB",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/AetherBlack/CVE/tree/main/PMB",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-06T21:15:11.130",
      "lastModified" : "2024-11-21T07:48:21.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sigb:pmb:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6BCC12-4630-4A28-BF91-35DB0393B131"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AetherBlack/CVE/tree/main/PMB",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/AetherBlack/CVE/tree/main/PMB",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-06T21:15:11.183",
      "lastModified" : "2024-11-21T07:48:21.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css/pmb.php. This vulnerability allows attackers to redirect victim users to an external domain via a crafted URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sigb:pmb:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6BCC12-4630-4A28-BF91-35DB0393B131"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AetherBlack/CVE/tree/main/PMB",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/AetherBlack/CVE/tree/main/PMB",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-06T21:15:11.237",
      "lastModified" : "2024-11-21T07:48:21.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PMB v7.4.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /sauvegarde/restaure_act.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sigb:pmb:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6BCC12-4630-4A28-BF91-35DB0393B131"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AetherBlack/CVE/tree/main/PMB",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/AetherBlack/CVE/tree/main/PMB",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-06T21:15:11.290",
      "lastModified" : "2024-11-21T07:48:21.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /admin/convert/export_z3950.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sigb:pmb:7.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6BCC12-4630-4A28-BF91-35DB0393B131"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AetherBlack/CVE/tree/main/PMB",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/AetherBlack/CVE/tree/main/PMB",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-06T21:15:11.343",
      "lastModified" : "2024-11-21T07:52:05.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onekeyadmin:onekeyadmin:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308108A9-2A64-4A1D-A631-8E0D4820E7C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keheying/onekeyadmin/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/keheying/onekeyadmin/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-06T22:15:09.820",
      "lastModified" : "2025-03-06T22:15:34.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-98"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agilebio:electronic_lab_notebook:4.234:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E1E291D-A4A1-4651-A1C0-AB6E211EDC90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171252/Agilebio-Lab-Collector-4.234-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://labcollector.com/labcollector-lims/add-ons/eln-electronic-lab-notebook/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171252/Agilebio-Lab-Collector-4.234-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://labcollector.com/labcollector-lims/add-ons/eln-electronic-lab-notebook/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26601",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-06T22:15:09.877",
      "lastModified" : "2024-11-21T07:51:50.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9",
            "matchCriteriaId" : "A6DEEF51-0977-4061-9919-803DFD144E10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "258BF334-DE00-472D-BD94-C0DF8CDAF53C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6900:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0754D0-5B28-4851-89A2-DC5B20CFF3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6901:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0CAA5B-16A1-4637-B90A-BFAF7381CCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6902:*:*:*:*:*:*",
            "matchCriteriaId" : "48A960D7-7AB2-43F4-99FC-5B1FE69BFDB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6903:*:*:*:*:*:*",
            "matchCriteriaId" : "B293513C-9ECB-4512-B1B8-A470C6115458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6904:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9B89EB-C51F-4A70-A6DF-1BD326308DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6905:*:*:*:*:*:*",
            "matchCriteriaId" : "9B708143-01B3-45D0-A769-E1D8E99237B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6906:*:*:*:*:*:*",
            "matchCriteriaId" : "F1837C80-7D1F-4AF5-BF4B-932DF03D6A30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6907:*:*:*:*:*:*",
            "matchCriteriaId" : "4E528B83-1539-4516-9ACF-A05E853014DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6908:*:*:*:*:*:*",
            "matchCriteriaId" : "CBFB65BC-5B94-4075-BBB1-4CD8B5B216C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6909:*:*:*:*:*:*",
            "matchCriteriaId" : "7FAF3DFA-78FB-417C-808A-507F66889913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6950:*:*:*:*:*:*",
            "matchCriteriaId" : "E9506197-CDDA-451B-9FE3-72B3C3BA19EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6951:*:*:*:*:*:*",
            "matchCriteriaId" : "691DF8EC-6A7A-4449-8A4C-79F76726D685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6952:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3E2B0A-EB1E-45C3-BC2C-9E32268A0867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6953:*:*:*:*:*:*",
            "matchCriteriaId" : "E1BD2753-52B8-4EB0-8332-C67935FB8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6954:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BD08BF-4E5D-4DE4-A499-B0296C126599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6955:*:*:*:*:*:*",
            "matchCriteriaId" : "F13CB227-496C-4777-BE76-27AFF5ED15C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6956:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB1DF8F-3385-40C6-92C5-10724F8A6911"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6957:*:*:*:*:*:*",
            "matchCriteriaId" : "C1997DE8-8CFA-4882-9107-741B88339A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6970:*:*:*:*:*:*",
            "matchCriteriaId" : "148F6458-136D-4612-9619-F51AEEC11AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6971:*:*:*:*:*:*",
            "matchCriteriaId" : "8B189696-D6BC-475B-90CA-AF122224FEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6972:*:*:*:*:*:*",
            "matchCriteriaId" : "477C97EC-A497-4C7C-973B-2C057A9242AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6973:*:*:*:*:*:*",
            "matchCriteriaId" : "284F5D9D-F23F-4936-B461-10701CC3AB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6974:*:*:*:*:*:*",
            "matchCriteriaId" : "74CE0145-F165-4FB4-A819-01B30641196A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6975:*:*:*:*:*:*",
            "matchCriteriaId" : "CA291C44-616B-45D9-9709-61CD33E8B135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6976:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C7492E-5D5B-419D-9749-7CC6EE5BC0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6977:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF1B243-DA58-42CD-9DF4-6D4A010796D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6978:*:*:*:*:*:*",
            "matchCriteriaId" : "2B73FD0F-6B48-406E-AB29-606CC07C81C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6979:*:*:*:*:*:*",
            "matchCriteriaId" : "CED2C49D-DB96-4495-BD6F-460871D94EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6980:*:*:*:*:*:*",
            "matchCriteriaId" : "C9AAC638-1379-4F87-9BA3-07CE16CAB98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6981:*:*:*:*:*:*",
            "matchCriteriaId" : "B3470B5B-B8BC-41B9-8CA5-5E7A0EB9934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6982:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2D9355-B1D5-4B14-8900-42E7C8DC5E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6983:*:*:*:*:*:*",
            "matchCriteriaId" : "03A34ED3-EC89-4BE3-8A99-A5727A154672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6984:*:*:*:*:*:*",
            "matchCriteriaId" : "4E84EF2B-37A5-4499-8C16-877E8AB8A731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6985:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDA22C3-8F1E-45C9-BC8D-C3A49EFA348C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6986:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA5504A-8BD9-4C0D-AD5A-4CB188A99563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6987:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4E1A50-A366-4D5E-9DDB-B33D1D1770E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1",
            "matchCriteriaId" : "0F8049D8-8FE3-43CA-9568-AEA659776436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDE81A3-95A1-42FC-A526-5F343E73ABD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:14100:*:*:*:*:*:*",
            "matchCriteriaId" : "0575CC86-9321-4502-83C0-348DCE175EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:14101:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B60D55-DE84-4BE8-A42D-98D133D3D228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:14102:*:*:*:*:*:*",
            "matchCriteriaId" : "B79CA06A-17DE-429A-A3C9-4FC28E907318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:14103:*:*:*:*:*:*",
            "matchCriteriaId" : "19C86206-29CB-4ABA-8979-19DF52B8CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.0",
            "matchCriteriaId" : "E427ED35-3804-4448-BADE-6DD1E80D093F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.0:14000:*:*:*:*:*:*",
            "matchCriteriaId" : "6E368AC5-E3A5-44CE-8B6E-2454493764E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.0",
            "matchCriteriaId" : "5563D0F3-ACFD-4F79-8428-12EF982E0F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:14.0:14000:*:*:*:*:*:*",
            "matchCriteriaId" : "B46588F2-4258-44C7-BCBE-40975D4CE27D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk/CVE-2023-26601.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk/CVE-2023-26601.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0330",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-03-06T23:15:11.457",
      "lastModified" : "2024-11-21T07:36:59.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "patrick@puiterwijk.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.3",
            "matchCriteriaId" : "72474BA6-A129-4FF4-AFC2-4FA8E2C41522"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:8.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A4811446-5D11-4E60-ACF6-13032588117D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:8.0.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "FEDCD75C-FA8E-4128-955B-E1492B0C384A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:8.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E291F3-5469-433B-A725-A1A4C421C55E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:8.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "73834774-A560-43C5-B1D5-F9F37B81B423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:8.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "71FAF71E-3DE5-4B90-92B4-12CCF74A4D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:8.0.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "0561171B-A1FB-4E6D-B6BE-DF61F7F2254E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-0330",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2160151",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00006.html",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.nongnu.org/archive/html/qemu-devel/2023-01/msg03411.html",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-0330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2160151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.nongnu.org/archive/html/qemu-devel/2023-01/msg03411.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-06T23:15:11.537",
      "lastModified" : "2024-11-21T07:53:38.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rami:pretix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.16.0",
            "versionEndExcluding" : "4.15.1",
            "matchCriteriaId" : "5740E497-5190-42B1-B835-B00B1F1B03FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rami:pretix:4.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9B7C91-9CBD-497C-8B09-D6ED2FE1DFFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rami:pretix:4.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "285116B7-9350-4FEC-87B5-53FD9B592BEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pretix.eu/about/en/blog/20230306-release-4171/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://pretix.eu/about/en/blog/20230306-release-4171/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1211",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-07T00:15:09.220",
      "lastModified" : "2026-02-16T15:18:33.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.2",
            "matchCriteriaId" : "46DA6678-DF2A-4E72-8CC6-C70CA607810B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/phpipam/phpipam/commit/16e7a94fb69412e569ccf6f2fe0a1f847309c922",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ed569124-2aeb-4b0d-a312-435460892afd",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2023-1211.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/phpipam/phpipam/commit/16e7a94fb69412e569ccf6f2fe0a1f847309c922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ed569124-2aeb-4b0d-a312-435460892afd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1212",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-07T00:15:09.300",
      "lastModified" : "2024-11-21T07:38:40.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.2",
            "matchCriteriaId" : "46DA6678-DF2A-4E72-8CC6-C70CA607810B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/phpipam/phpipam/commit/78e0470100a6cb143fe9af2e336dce80e4620960",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3d5199d6-9bb2-4f7b-bd81-bded704da499",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phpipam/phpipam/commit/78e0470100a6cb143fe9af2e336dce80e4620960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3d5199d6-9bb2-4f7b-bd81-bded704da499",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22847",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-03-07T01:15:10.300",
      "lastModified" : "2025-03-06T17:15:16.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information disclosure vulnerability exists in pg_ivm versions prior to 1.5.1. An Incrementally Maintainable Materialized View (IMMV) created by pg_ivm may reflect rows with Row-Level Security that the owner of the IMMV should not have access to. As a result, information in tables protected by Row-Level Security may be retrieved by a user who is not authorized to access it."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sraoss:pg_ivm:*:*:*:*:*:postgresql:*:*",
            "versionEndExcluding" : "1.5.1",
            "matchCriteriaId" : "F63AF103-5E29-464C-AA20-A9063C05FDA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sraoss/pg_ivm",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/sraoss/pg_ivm/releases/tag/v1.5.1",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN19872280/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sraoss/pg_ivm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/sraoss/pg_ivm/releases/tag/v1.5.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN19872280/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23554",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-03-07T01:15:10.363",
      "lastModified" : "2025-03-06T17:15:16.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uncontrolled search path element vulnerability exists in pg_ivm versions prior to 1.5.1. When refreshing an IMMV, pg_ivm executes functions without specifying schema names. Under certain conditions, pg_ivm may be tricked to execute unexpected functions from other schemas with the IMMV owner's privilege. If this vulnerability is exploited, an unexpected function provided by an attacker may be executed with the privilege of the materialized view owner."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sraoss:pg_ivm:*:*:*:*:*:postgresql:*:*",
            "versionEndExcluding" : "1.5.1",
            "matchCriteriaId" : "F63AF103-5E29-464C-AA20-A9063C05FDA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sraoss/pg_ivm",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/sraoss/pg_ivm/releases/tag/v1.5.1",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN19872280/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sraoss/pg_ivm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/sraoss/pg_ivm/releases/tag/v1.5.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN19872280/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1237",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-07T08:15:08.680",
      "lastModified" : "2024-11-21T07:38:44.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 3.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/0566894a2c0e13cf07d877f41467e2e21529fee8",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/cc2aa618-05da-495d-a5cd-51c40557d481",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/0566894a2c0e13cf07d877f41467e2e21529fee8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/cc2aa618-05da-495d-a5cd-51c40557d481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1238",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-07T08:15:09.407",
      "lastModified" : "2024-11-21T07:38:44.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/0566894a2c0e13cf07d877f41467e2e21529fee8",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/52f97267-1439-4bb6-862b-89b8fafce50d",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/0566894a2c0e13cf07d877f41467e2e21529fee8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/52f97267-1439-4bb6-862b-89b8fafce50d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1239",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-07T08:15:09.500",
      "lastModified" : "2024-11-21T07:38:44.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/9870ed87fb24ed468aaf1e169c2d028e0f375106",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3a22c609-d2d8-4613-815d-58f5990b8bd8",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/9870ed87fb24ed468aaf1e169c2d028e0f375106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3a22c609-d2d8-4613-815d-58f5990b8bd8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1240",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-07T08:15:09.580",
      "lastModified" : "2024-11-21T07:38:44.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/90bfa0dcc7b49482f1d1e31aee3ab073f3c13dd9",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a24f57a4-22e3-4a17-8227-6a410a11498a",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/90bfa0dcc7b49482f1d1e31aee3ab073f3c13dd9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a24f57a4-22e3-4a17-8227-6a410a11498a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1241",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-07T08:15:09.673",
      "lastModified" : "2024-11-21T07:38:44.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/90bfa0dcc7b49482f1d1e31aee3ab073f3c13dd9",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e0e9b1bb-3025-4b9f-acb4-16a5da28aa3c",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/90bfa0dcc7b49482f1d1e31aee3ab073f3c13dd9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e0e9b1bb-3025-4b9f-acb4-16a5da28aa3c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1242",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-07T08:15:09.767",
      "lastModified" : "2024-11-21T07:38:44.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/90bfa0dcc7b49482f1d1e31aee3ab073f3c13dd9",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/71c24c5e-ceb2-45cf-bda7-fa195d37e289",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/90bfa0dcc7b49482f1d1e31aee3ab073f3c13dd9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/71c24c5e-ceb2-45cf-bda7-fa195d37e289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1243",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-07T08:15:09.860",
      "lastModified" : "2024-11-21T07:38:45.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/9870ed87fb24ed468aaf1e169c2d028e0f375106",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/1d62d35a-b096-4b76-a021-347c3f1c570c",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/9870ed87fb24ed468aaf1e169c2d028e0f375106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/1d62d35a-b096-4b76-a021-347c3f1c570c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1244",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-07T08:15:09.937",
      "lastModified" : "2024-11-21T07:38:45.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/9870ed87fb24ed468aaf1e169c2d028e0f375106",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/bcab9555-8a35-42b2-a7de-0a79fd710b52",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/9870ed87fb24ed468aaf1e169c2d028e0f375106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/bcab9555-8a35-42b2-a7de-0a79fd710b52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1245",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-07T08:15:10.013",
      "lastModified" : "2024-11-21T07:38:45.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/71a4cdac81112975969129d308899edd155c0e80",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f8011bb3-8212-4937-aa58-79f4b73be004",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/71a4cdac81112975969129d308899edd155c0e80",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f8011bb3-8212-4937-aa58-79f4b73be004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1247",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-07T10:15:09.273",
      "lastModified" : "2023-11-07T04:02:53.457",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-07T13:15:10.257",
      "lastModified" : "2025-03-06T18:15:40.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Group module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onekeyadmin_project:onekeyadmin:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA64EBFB-B0D9-4CBB-9CE4-3D2F648D5558"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keheying/onekeyadmin/issues/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keheying/onekeyadmin/issues/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-07T13:15:10.323",
      "lastModified" : "2024-11-21T07:52:06.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Admin Group module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onekeyadmin_project:onekeyadmin:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA64EBFB-B0D9-4CBB-9CE4-3D2F648D5558"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keheying/onekeyadmin/issues/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keheying/onekeyadmin/issues/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1253",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-07T15:15:11.067",
      "lastModified" : "2024-11-21T07:38:46.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Health Center Patient Record Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222483."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:health_center_patient_record_management_system_project:health_center_patient_record_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E023BA-9374-482C-BD41-6FDC328F1B1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2689469248/bug_report/blob/main/vendors/razormist/Health%20Center%20Patient%20Record%20Management/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222483",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222483",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2689469248/bug_report/blob/main/vendors/razormist/Health%20Center%20Patient%20Record%20Management/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1254",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-07T15:15:11.150",
      "lastModified" : "2024-11-21T07:38:46.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Health Center Patient Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file birthing_print.php. The manipulation of the argument birth_id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222484."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:health_center_patient_record_management_system_project:health_center_patient_record_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E023BA-9374-482C-BD41-6FDC328F1B1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2689469248/bug_report/blob/main/vendors/razormist/Health%20Center%20Patient%20Record%20Management/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222484",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222484",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2689469248/bug_report/blob/main/vendors/razormist/Health%20Center%20Patient%20Record%20Management/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-07T15:15:11.247",
      "lastModified" : "2025-03-06T18:15:40.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \\member\\MemberLevel.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC800090-6420-4971-831D-1E77A18BD45E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/funadmin/funadmin/issues/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/funadmin/funadmin/issues/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-07T15:15:11.300",
      "lastModified" : "2025-03-04T20:15:36.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onekeyadmin:onekeyadmin:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308108A9-2A64-4A1D-A631-8E0D4820E7C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keheying/onekeyadmin/issues/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/keheying/onekeyadmin/issues/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25690",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-07T16:15:09.477",
      "lastModified" : "2025-12-18T16:15:49.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack.\n\n\n\n\nConfigurations are affected when mod_proxy is enabled along with some form of RewriteRule\n or ProxyPassMatch in which a non-specific pattern matches\n some portion of the user-supplied request-target (URL) data and is then\n re-inserted into the proxied request-target using variable \nsubstitution. For example, something like:\n\n\n\n\nRewriteEngine on\nRewriteRule \"^/here/(.*)\" \"http://example.com:8080/elsewhere?$1\"; [P]\nProxyPassReverse /here/ http://example.com:8080/\n\n\nRequest splitting/smuggling could result in bypass of access controls in the proxy server, proxying unintended URLs to existing origin servers, and cache poisoning. Users are recommended to update to at least version 2.4.56 of Apache HTTP Server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndIncluding" : "2.4.55",
            "matchCriteriaId" : "3C9A570C-537D-4D4C-AF79-28DFB302B221"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/176334/Apache-2.4.55-mod_proxy-HTTP-Request-Smuggling.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00028.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-01",
        "source" : "security@apache.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/176334/Apache-2.4.55-mod_proxy-HTTP-Request-Smuggling.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27522",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-07T16:15:09.613",
      "lastModified" : "2025-05-01T15:34:19.177",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55.\n\nSpecial characters in the origin response header can truncate/split the response forwarded to the client."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.30",
            "versionEndExcluding" : "2.4.56",
            "matchCriteriaId" : "A9FFD9C1-FDDD-4CA9-8FFC-C52B96C53F18"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unbit:uwsgi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.22",
            "matchCriteriaId" : "6E6426EB-867D-4727-AE12-917B2BDA35D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00028.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-01",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1257",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-07T17:15:12.527",
      "lastModified" : "2024-11-21T07:38:46.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication files to create a new user and gain full access to the system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2101-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "9476FEEA-D608-40B7-BAD8-D85E3A433114"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2101-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA09978A-2E63-4E29-A693-F0361951FCFF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2102-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "B3786680-F178-4ADC-8085-7DC198A7BDE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2102-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053D848E-1BB1-4B91-A205-84F83FE57E8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2102-t-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "5455BBF9-75C8-4D21-B32E-3CD3C036E001"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2102-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D45B4C7D-A4D9-420D-A878-8ADB724AF24B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2104-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "7D451BCD-8067-4AA1-9ED4-FFFD37BB0B52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2104-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C374EE-E4C8-469F-BC45-E43F739D3D23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2111-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "B8EFDF2E-D2B0-4FA5-9060-BC63A8792853"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2111-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85BA8C3-A65F-4B61-8A94-7B67D236919F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2112-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "18404A5F-EF72-4236-B9E0-3BF3EE861B3E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2112-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C653CF9A-080A-48B1-81F2-B72D2B4A1504"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2114-t-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "CDCA0FFC-B0DD-4BED-A39C-6C579F3648A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2114-t-lx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0538BE2C-D4F4-4C26-A2E6-50CF7AFB3E54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2114-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9862617F-C1E4-4437-98E5-3A9322572C2E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-2116-t-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "49F8203C-B1C6-4175-90B0-C3589DB36C25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-2116-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC3535DE-C643-4BB0-A9A4-6B7641570BC1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3101-t-ap-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "CCCA2B92-FEC5-4B32-8FE6-EBEC9FAE791A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3101-t-ap-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3549908-B58E-4053-B3B6-709CAEF2E383"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3101-t-eu-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "07048618-0EC6-407B-AEF0-F44ED5229F2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3101-t-eu-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F011C44-45F4-4147-9237-793C81EDE740"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3101-t-us-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "A1D9A016-00F0-4488-BCE7-A3BC89C7EE51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3101-t-us-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C1ECFC-BFAE-41FD-A281-CDF7D4F50308"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3111-t-ap-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "E030D12F-012D-4CB3-999F-5BB869A4CFE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3111-t-ap-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4969D5B4-7704-48C2-B6C6-43AAB4FD4609"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3111-t-ap-lx-nw_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "1E80201F-7EF4-43BC-8D43-49C3B5E0CD40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3111-t-ap-lx-nw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B63A3ADE-DFA0-4579-B3CA-4CCDADE0A00D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3111-t-eu-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "3E16F237-70FA-4856-882C-D5394BD9AA4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3111-t-eu-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3827809F-C307-46E7-AE94-D108407B81FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3111-t-eu-lx-nw_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "20A7D0F9-ADF9-4598-A47D-AD0151B7C041"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3111-t-eu-lx-nw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C400E9A7-C51B-476F-97B4-5B269A922231"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3111-t-us-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "0CA63341-F990-4A60-AD4B-538C2CC9E046"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3111-t-us-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5EF2E7B-586A-42DD-A202-068CE7B3495E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3111-t-us-lx-nw_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "FD3A8DEA-536F-4F85-B686-2201CCF3B16A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3111-t-us-lx-nw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BBEAAB-C051-46CC-A7B8-D48BA272775A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3121-t-ap-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "A0DBB564-6A91-471F-8494-ABEF4B997180"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3121-t-ap-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B57685-91FC-4125-9C30-5FDD8A049381"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3121-t-eu-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "E5A011FC-7361-4D20-96E7-5AD06EB76960"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3121-t-eu-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B249A63B-AC3E-4342-A7B8-4FF05B0ACC33"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-3121-t-us-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "3661F92D-3F5A-43E6-A7FA-57E25283CCCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-3121-t-us-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22B234A-8AA0-4CB5-AF97-74320919DCF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-5101-lx_firmware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60187707-601B-4C5F-A650-4622A8377917"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-5101-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB51C37-B6B7-4D1B-B4A5-5A5CBC1DC0DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-5101-t-lx_firmware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48FAD68E-A7ED-4217-ABAD-5B2311B47995"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-5101-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03DAAE8E-16DF-4046-9867-86105DB279AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-5102-lx_firmware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E59C5D5-0000-460C-BDEC-33A03414BAD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-5102-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C156071-5FA1-43EF-97CF-98385375D8B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-5102-t-lx_firmware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D2831E-83C3-4B34-9611-41562214435C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-5102-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "286A88C3-FD36-4241-8C48-A54332302050"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-5111-lx_firmware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98092E25-C6F3-4B4D-813C-9DAE24847B2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-5111-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E555662F-D557-4337-B490-C53AF0B2A8C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-5111-t-lx_firmware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE66A6B2-1C39-4142-A844-F9498C517E29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-5111-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACA16B7-CAD0-4362-916A-A3A85F09B3F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-5112-lx_firmware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9EABBB-B08E-405A-AC9F-40B4F9A0B252"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-5112-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF9A229-827B-471B-859A-CF51BD469A64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-5112-t-lx_firmware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9636961-2636-4894-8F0F-67DB2532A0DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-5112-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F055724-0BEA-47A7-B8D3-5C5A7AFA5972"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8112-lx_firmware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "266939EB-1BAF-4956-9E80-AE3E8D33079F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8112-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7129CF3-628A-46C5-865B-9ADCC0658C03"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8131-lx_firmware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A0029F-3F54-45E8-A692-C4359D32C638"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8131-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10928A2-9245-40DC-B8FD-41CCB35D22C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8132-lx_firmware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4363C3E4-490D-4B7A-ACBE-69D30C1BB632"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8132-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14FDB09-7888-4648-8E35-C1FA14EE7541"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8162-lx_firmware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B08DFFC-C86F-45CD-B42B-472DEE477FDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8162-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "732AEFCC-7231-4788-869B-25B9247E52FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8112-me-t-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "0BBD4A9F-D4FB-4FD1-B55E-0D1A3B1C94AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8112-me-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6845A55-EE87-4A16-851A-9811D895ED3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8112-me-t-lx1_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "67EB6C4F-3C33-4482-AE39-3961C136C44C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8112-me-t-lx1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BEEE468-A757-47A2-A7D4-E1C1C156D5A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8112a-me-t-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "AEAD531B-D5EA-4C97-B928-2C2E133C3D32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8112a-me-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC2F0871-28EA-4625-8389-E89A8D023A15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8210-t-lx-s_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "932D7E88-2240-4911-AB0A-DEC2EDF7E4A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8210-t-lx-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53104CD8-0DF4-46E5-87F1-B5810EB1B79E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8220-t-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "AA04BED1-4FEB-462D-A5C7-E2019EC9B09D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8220-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D65808DD-2672-42D7-8544-8A9E0D1519E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8220-t-lx-ap-s_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "0E8FFABB-6B68-43D6-8A96-83E0C6272148"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8220-t-lx-ap-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC404D8-D558-462F-898F-9CFE54330FD2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8220-t-lx-eu-s_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "2D62E4E9-6B28-4EF4-9628-F64CAF29676B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8220-t-lx-eu-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D493C8-E0E4-4C2B-8A95-66DB61BD7035"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8220-t-lx-s_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "84E1A143-3118-4BAC-A19C-7743B3161349"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8220-t-lx-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA15CCF-BFF5-4902-9654-195E0C67FC65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8220-t-lx-us-s_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "2.4",
            "matchCriteriaId" : "9330358B-65D2-4688-B515-306E64B8712C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8220-t-lx-us-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "726EC056-8BC7-4ACC-A6FF-7E7664859B03"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8410a-lx_firmware:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F0611D-16FB-4D67-BF72-8A699B74A122"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8410a-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08B660E3-EDC3-46F1-9B7C-27DF6C9361F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8410a-nw-lx_firmware:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8109CE-4B8B-4F18-9391-E0A41E043DD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8410a-nw-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6C0056-578C-4429-8A1E-7638D5C1CCEB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8410a-nw-t-lx_firmware:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13B14B96-CD23-4C02-8930-B1E0B630A06F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8410a-nw-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D38C84-9329-4320-B435-9F29A48EA06D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8410a-t-lx_firmware:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6BA840-B9E6-43FA-AB37-292D41DA6828"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8410a-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC2B1263-2F49-43BF-AE2A-631F252E2820"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8540-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "57F35CCC-B7C4-4707-A743-C744D2CC70BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8540-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9297DE42-0B5E-4BE4-9773-0583DA4CAB2D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8540-t-ct-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "7AED57E6-C50B-4C29-B780-C87ECE75D885"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8540-t-ct-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848FF5D2-6EC9-43E4-8CDF-2EEAA20AEB3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8540-t-lx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "9F818E8C-445E-409D-9ECC-FE0E25078D51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8540-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F11CDF-4D2A-4A85-B50D-A7754279BDD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8580-lx_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A3DD9BB-5D69-4CDB-A942-5E81983EF6ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8580-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A766734-2683-439D-8814-C0989B082CEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8580-q-lx_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD5C0D4-F18D-4AC8-B9E4-30E512D0BD78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8580-q-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36C4FE9E-9767-45A8-A585-F1641746BFBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8580-t-ct-lx_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52447718-73AB-40DB-B576-FFBC31F0FAB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8580-t-ct-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B306C0E-4807-4870-B836-7250F0A9F036"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8580-t-ct-q-lx_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BA48C0-B99D-41BF-BDDE-AFC366884A2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8580-t-ct-q-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBC0E20-0DA0-4724-B515-7FFBAF3FA2EC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8580-t-lx_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6EF904-345E-43FB-BBA7-B4BAA4214A46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8580-t-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10983BA-E998-481E-A994-6D48DB986089"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:uc-8580-t-q-lx_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F0D7D9-FDE5-4EB4-9C21-2ECF89591320"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:uc-8580-t-q-lx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F238A13-893F-426F-BF29-48DDE9AFE2BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/uscert/ics/advisories/icsa-22-333-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23776",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-03-07T17:15:12.630",
      "lastModified" : "2024-11-21T07:46:48.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4 and 6.4.0 through 6.4.10 may allow a remote authenticated  attacker to read the client machine password in plain text in a heartbeat response when a log-fetch request is made from the FortiAnalyzer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "6.4.11",
            "matchCriteriaId" : "5E874113-99A5-4D9B-9F0E-CC6D39860A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.5",
            "matchCriteriaId" : "930919B2-1DF9-4216-8245-8C0F3F137C45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.2",
            "matchCriteriaId" : "12767150-C085-41ED-A645-83BFE7E846E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-447",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-07T17:15:12.703",
      "lastModified" : "2025-03-05T16:15:36.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CRMEB <=1.3.4 is vulnerable to SQL Injection via /api/admin/user/list."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crmeb:crmeb_java:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.4",
            "matchCriteriaId" : "6B0CB136-8432-4A7D-ADED-3C0E15826090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/crmeb/crmeb_java/issues/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/crmeb/crmeb_java/issues/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-07T17:15:12.757",
      "lastModified" : "2024-11-21T07:49:20.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Server-Side Request Forgery (SSRF) in loonflow r2.0.14 allows attackers to force the application to make arbitrary requests via manipulation of the hook_url parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:loonflow_project:loonflow:r2.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6669BFE8-2FBE-4FC0-A983-4A0627ED9E52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/blackholll/loonflow/issues/402",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/blackholll/loonflow/issues/402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25605",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-03-07T17:15:12.810",
      "lastModified" : "2024-11-21T07:49:49.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the administrative interface to perform unauthorized actions via crafted HTTP requests."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.3.2",
            "matchCriteriaId" : "E640925A-832A-4458-9322-F8753C66A1F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-23-050",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-23-050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25611",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-03-07T17:15:12.877",
      "lastModified" : "2024-11-21T07:49:49.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0 - 7.0.5, and 7.2.0 - 7.2.1 allows local attacker to execute unauthorized code or commands via inserting spreadsheet formulas in macro names."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "7.0.6",
            "matchCriteriaId" : "89B689BE-2A20-45B3-9BD0-6AEE64140673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.2",
            "matchCriteriaId" : "12767150-C085-41ED-A645-83BFE7E846E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-488",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-07T18:15:09.117",
      "lastModified" : "2025-03-05T15:15:12.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \\member\\Member.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC800090-6420-4971-831D-1E77A18BD45E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/funadmin/funadmin/issues/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/funadmin/funadmin/issues/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27475",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-07T18:15:09.170",
      "lastModified" : "2024-11-21T07:52:58.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsutil.Unzip to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. This vulnerability is known as a ZipSlip. This issue has been fixed in version 0.6.0, users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goutil_project:goutil:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "0.6.0",
            "matchCriteriaId" : "1CC7D2F2-6B6B-43DC-9044-B5C85025519B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gookit/goutil/commit/d7b94fede71f018f129f7d21feb58c895d28dadc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gookit/goutil/security/advisories/GHSA-fx2v-qfhr-4chv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0003/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/gookit/goutil/commit/d7b94fede71f018f129f7d21feb58c895d28dadc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gookit/goutil/security/advisories/GHSA-fx2v-qfhr-4chv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27478",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-07T18:15:09.247",
      "lastModified" : "2024-11-21T07:52:59.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could return data for a previously requested key, if that previous request timed out due to a low `POLL_TIMEOUT`. This issue has been addressed in version 1.1.4. Users are advised to upgrade. There are several ways to workaround or lower the probability of this bug affecting a given deployment. 1: use a reasonably high `POLL_TIMEOUT` setting, like the default. 2: use separate libmemcached connections for unrelated data. 3: do not re-use libmemcached connections in an unknown state."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awesome:libmemcached:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.18",
            "versionEndExcluding" : "1.1.4",
            "matchCriteriaId" : "BF53F985-00CD-43AB-B56F-A9764400C86A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/awesomized/libmemcached/commit/48dcc61a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/awesomized/libmemcached/releases/tag/1.1.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-fx59",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/php-memcached-dev/php-memcached/issues/531",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/awesomized/libmemcached/commit/48dcc61a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/awesomized/libmemcached/releases/tag/1.1.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-fx59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/php-memcached-dev/php-memcached/issues/531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27479",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-07T19:15:12.577",
      "lastModified" : "2024-11-21T07:52:59.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with view rights can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of UIX parameters. A proof of concept exploit is to log in, add an `XWiki.UIExtensionClass` xobject to the user profile page, with an Extension Parameters content containing `label={{/html}} {{async async=\"true\" cached=\"false\" context=\"doc.reference\"}}{{groovy}}println(\"Hello \" + \"from groovy!\"){{/groovy}}{{/async}}`. Then, navigating to `PanelsCode.ApplicationsPanelConfigurationSheet` (i.e., `<xwiki-host>/xwiki/bin/view/PanelsCode/ApplicationsPanelConfigurationSheet` where `<xwiki-host>` is the URL of your XWiki installation) should not execute the Groovy script. If it does, you will see `Hello from groovy!` displayed on the screen. This vulnerability has been patched in XWiki 13.10.11, 14.4.7 and 14.10-rc-1. Users are advised to upgrade. For users unable to upgrade the issue can be fixed by editing the `PanelsCode.ApplicationsPanelConfigurationSheet` wiki page and making the same modifications  as shown in commit `6de5442f3c`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "6.3",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "DD6E852A-AEF3-4202-94F3-35D01894F6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FA3A5151-58FB-48CF-BFFB-5688608200C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10",
            "matchCriteriaId" : "569EE28C-5C86-467F-A153-DD4B9BF0053D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:6.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "939A1216-3065-4637-B747-CE8A5E194EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:6.3:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "66AA1260-807B-4ED6-99D0-28C869A49D75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:6.3:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "6387A0C9-03A5-43B5-81CB-034A745FF4A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/6de5442f3c91c3634a66c7b458d5b142e1c2a2dc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-qxjg-jhgw-qhrv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20294",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/6de5442f3c91c3634a66c7b458d5b142e1c2a2dc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-qxjg-jhgw-qhrv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27480",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-07T19:15:12.663",
      "lastModified" : "2024-11-21T07:52:59.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit rights on a document can trigger an XAR import on a forged XAR file, leading to the ability to display the content of any file on the XWiki server host. This vulnerability has been patched in XWiki 13.10.11, 14.4.7 and 14.10-rc-1. Users are advised to upgrade. Users unable to upgrade may apply the patch `e3527b98fd` manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "1.1",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "C8664072-FDBA-4714-8B9B-2B1E4DA8DE11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FA3A5151-58FB-48CF-BFFB-5688608200C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10",
            "matchCriteriaId" : "569EE28C-5C86-467F-A153-DD4B9BF0053D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:1.1:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "1C11FD2B-E7B0-429B-8F7C-91227BED4913"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:1.1:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0AF2D9-374A-4760-ACC3-CA04A332BAE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/e3527b98fdd8dc8179c24dc55e662b2c55199434",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-gx4f-976g-7g6v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20320",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/e3527b98fdd8dc8179c24dc55e662b2c55199434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-gx4f-976g-7g6v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27481",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-07T19:15:12.750",
      "lastModified" : "2024-11-21T07:52:59.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directus is a real-time API and App dashboard for managing SQL database content. In versions prior to 9.16.0 users with read access to the `password` field in `directus_users` can extract the argon2 password hashes by brute forcing the export functionality combined with a `_starts_with` filter. This allows the user to enumerate the password hashes. Accounts cannot be taken over unless the hashes can be reversed which is unlikely with current hardware. This problem has been patched by preventing any hashed/concealed field to be filtered against with the `_starts_with` or other string operator in version 9.16.0. Users are advised to upgrade. Users unable to upgrade may mitigate this issue by ensuring that no user has `read` access to the `password` field in `directus_users`. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "9.16.0",
            "matchCriteriaId" : "4D14A281-6415-447C-9B5F-7B9CF40784E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/directus/directus/pull/14829",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/directus/directus/pull/15010",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/directus/directus/security/advisories/GHSA-m5q3-8wgf-x8xf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/directus/directus/pull/14829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/directus/directus/pull/15010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/directus/directus/security/advisories/GHSA-m5q3-8wgf-x8xf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27485",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-07T19:15:12.833",
      "lastModified" : "2024-11-21T07:53:00.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "thmmniii/fbs-core is an open source feedback system for students. In versions prior to 1.5.3 when querying `subresults`, it is possible to query `subresults` from other users due to insufficient authorisation. This is only possible for logged-in users and it is not possible to associate the subresults with a specific user. This bug was fixed in commit `f1ae67d8bb2`and released with version 1.5.3. Users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thm:feedbacksystem:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.3",
            "matchCriteriaId" : "6C4ACDAC-3751-4E9C-A323-AB0327721F9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thm-mni-ii/feedbacksystem/commit/f1ae67d8bb2286a8eb15949038473d41b1358493",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/thm-mni-ii/feedbacksystem/releases/tag/v1.5.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/thm-mni-ii/feedbacksystem/security/advisories/GHSA-fhq8-p3w6-mmgr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://thm-mni-ii.github.io/feedbacksystem/api-docs/#tag/Submission/operation/getCourseTaskSubmissionSubresults",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/thm-mni-ii/feedbacksystem/commit/f1ae67d8bb2286a8eb15949038473d41b1358493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/thm-mni-ii/feedbacksystem/releases/tag/v1.5.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/thm-mni-ii/feedbacksystem/security/advisories/GHSA-fhq8-p3w6-mmgr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://thm-mni-ii.github.io/feedbacksystem/api-docs/#tag/Submission/operation/getCourseTaskSubmissionSubresults",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1003",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-07T20:15:09.010",
      "lastModified" : "2024-11-21T07:38:16.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown function of the component WSH JScript Handler. The manipulation leads to code injection. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.8 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-221736."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typora:typora:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.5",
            "matchCriteriaId" : "D65201A0-91A0-43DA-A36F-56146438135D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/typora/typora-issues/issues/5623",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221736",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221736",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/typora/typora-issues/issues/5623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.221736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.221736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20620",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:10.320",
      "lastModified" : "2024-11-21T07:41:14.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07554558; Issue ID: ALPS07554558."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20621",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:10.387",
      "lastModified" : "2024-11-21T07:41:14.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In tinysys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664755; Issue ID: ALPS07664755."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20623",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:10.447",
      "lastModified" : "2025-03-06T17:15:15.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07559778; Issue ID: ALPS07559778."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C27948-65A7-4B1E-9F10-6744D176A5C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D808EF4D-0A54-4324-8341-240F7AFABC40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757cd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EDB89E-8140-4202-97B3-9D7337E90FDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757ch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C5CC4F-DA66-4980-A4BB-693987431A38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4452EFCF-5733-40A0-8726-F8E33E569411"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE18D5C2-0423-4CE5-86E7-69E7BB131BBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987749DE-6EE9-401A-B2D4-B1680CAD0376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC506285-78EF-47B7-A990-FB7D2ED20885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D1586A-C49F-4655-8AC4-F4096B679869"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C27948-65A7-4B1E-9F10-6744D176A5C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D808EF4D-0A54-4324-8341-240F7AFABC40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757cd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EDB89E-8140-4202-97B3-9D7337E90FDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757ch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C5CC4F-DA66-4980-A4BB-693987431A38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4452EFCF-5733-40A0-8726-F8E33E569411"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE18D5C2-0423-4CE5-86E7-69E7BB131BBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20624",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:10.503",
      "lastModified" : "2025-03-06T17:15:15.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628530; Issue ID: ALPS07628530."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20625",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:10.560",
      "lastModified" : "2025-03-06T17:15:15.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628532; Issue ID: ALPS07628532."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-662"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-662"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20626",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:10.617",
      "lastModified" : "2025-03-06T17:15:15.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07405223; Issue ID: ALPS07405223."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "584F2DD7-F353-4156-BFAB-AE6DF5BB9251"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20627",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:10.673",
      "lastModified" : "2025-03-06T17:15:15.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629585; Issue ID: ALPS07629585."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5FE245-6346-4078-A3D0-E5F79BB636B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20628",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:10.730",
      "lastModified" : "2025-03-05T22:15:35.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494460; Issue ID: ALPS07494460."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5FE245-6346-4078-A3D0-E5F79BB636B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639C5BDE-2E83-427A-BAB7-85EA9348AC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582F1041-CD84-4763-AD6F-E08DD11F689F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20630",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:10.787",
      "lastModified" : "2025-03-05T21:15:16.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628505; Issue ID: ALPS07628505."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5FE245-6346-4078-A3D0-E5F79BB636B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/bulletins/sb23-072",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20632",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:10.847",
      "lastModified" : "2025-03-05T21:15:16.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628506; Issue ID: ALPS07628506."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5FE245-6346-4078-A3D0-E5F79BB636B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/bulletins/sb23-072",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20633",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:10.907",
      "lastModified" : "2025-03-06T18:15:34.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628508; Issue ID: ALPS07628508."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5FE245-6346-4078-A3D0-E5F79BB636B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20634",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:10.963",
      "lastModified" : "2025-03-06T18:15:36.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In widevine, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07635697; Issue ID: ALPS07635697."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20635",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.020",
      "lastModified" : "2025-03-05T19:15:27.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07563028."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6731:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF784DB-3560-4045-BB32-F12DCF4C43B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C27948-65A7-4B1E-9F10-6744D176A5C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D808EF4D-0A54-4324-8341-240F7AFABC40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757cd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EDB89E-8140-4202-97B3-9D7337E90FDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757ch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C5CC4F-DA66-4980-A4BB-693987431A38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20636",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.080",
      "lastModified" : "2025-03-06T18:15:36.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07292593; Issue ID: ALPS07292593."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20637",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.137",
      "lastModified" : "2025-03-06T18:15:36.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628588; Issue ID: ALPS07628588."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20638",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.200",
      "lastModified" : "2025-03-06T18:15:36.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628537; Issue ID: ALPS07628537."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20639",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.270",
      "lastModified" : "2025-03-06T18:15:37.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628587; Issue ID: ALPS07628587."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20640",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.337",
      "lastModified" : "2025-03-06T18:15:37.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629573; Issue ID: ALPS07629573."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20641",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.397",
      "lastModified" : "2025-03-06T18:15:38.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629574; Issue ID: ALPS07629574."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20642",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.457",
      "lastModified" : "2025-03-06T18:15:38.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628586; Issue ID: ALPS07628586."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20643",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.513",
      "lastModified" : "2025-03-06T18:15:39.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628584; Issue ID: ALPS07628584."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20644",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.570",
      "lastModified" : "2025-03-06T18:15:40.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628603; Issue ID: ALPS07628603."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20645",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.627",
      "lastModified" : "2025-03-05T20:15:42.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628609; Issue ID: ALPS07628609."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20646",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.687",
      "lastModified" : "2025-03-05T20:15:43.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628536; Issue ID: ALPS07628536."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C27948-65A7-4B1E-9F10-6744D176A5C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D808EF4D-0A54-4324-8341-240F7AFABC40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757cd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EDB89E-8140-4202-97B3-9D7337E90FDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757ch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C5CC4F-DA66-4980-A4BB-693987431A38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20647",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.740",
      "lastModified" : "2025-03-05T19:15:27.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628547; Issue ID: ALPS07628547."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20648",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.797",
      "lastModified" : "2025-03-05T19:15:28.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628612; Issue ID: ALPS07628612."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20649",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.853",
      "lastModified" : "2025-03-05T19:15:28.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628607; Issue ID: ALPS07628607."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20650",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.907",
      "lastModified" : "2025-03-05T19:15:28.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629577; Issue ID: ALPS07629577."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20651",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-03-07T21:15:11.957",
      "lastModified" : "2025-03-06T17:15:16.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629576; Issue ID: ALPS07629576."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8195z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3A37B9-F500-4B3C-B77C-B2BD7B015154"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/March-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1213",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:09.277",
      "lastModified" : "2024-11-21T07:38:40.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1411210",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1411210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1214",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:09.333",
      "lastModified" : "2024-11-21T07:38:41.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1412487",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1412487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1215",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:09.397",
      "lastModified" : "2024-11-21T07:38:41.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1417176",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1417176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1216",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:09.453",
      "lastModified" : "2024-11-21T07:38:41.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1417649",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1417649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1217",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:09.517",
      "lastModified" : "2024-11-21T07:38:41.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1412658",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1412658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1218",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:09.573",
      "lastModified" : "2024-11-21T07:38:41.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1413628",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1413628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1219",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:09.627",
      "lastModified" : "2024-11-21T07:38:41.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171795/Chrome-base-debug-ActivityUserData-ActivityUserData-Heap-Buffer-Overflow.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1415328",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171795/Chrome-base-debug-ActivityUserData-ActivityUserData-Heap-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1415328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1220",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:09.680",
      "lastModified" : "2024-11-21T07:38:42.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171796/Chrome-base-SampleVectorBase-MoveSingleSampleToCounts-Heap-Buffer-Overflow.html",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1417185",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171796/Chrome-base-SampleVectorBase-MoveSingleSampleToCounts-Heap-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1417185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1221",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:09.737",
      "lastModified" : "2024-11-21T07:38:42.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1385343",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1385343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1222",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:09.787",
      "lastModified" : "2024-11-21T07:38:42.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1403515",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1403515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1223",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:09.847",
      "lastModified" : "2024-11-21T07:38:42.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1398579",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1398579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1224",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:09.903",
      "lastModified" : "2024-11-21T07:38:42.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1403539",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1403539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1225",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:09.957",
      "lastModified" : "2024-11-21T07:38:42.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1408799",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1408799",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1226",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:10.020",
      "lastModified" : "2024-11-21T07:38:43.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1013080",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1013080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1227",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:10.087",
      "lastModified" : "2024-11-21T07:38:43.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:linux_and_chrome_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F389932-DD58-4EDB-BFCC-C85A0FCF90CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1348791",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1348791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1228",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:10.147",
      "lastModified" : "2024-11-21T07:38:43.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1365100",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1365100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1229",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:10.197",
      "lastModified" : "2024-11-21T07:38:43.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1160485",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1160485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1230",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:10.253",
      "lastModified" : "2024-11-21T07:38:43.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious WebApp to spoof the contents of the PWA installer via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1404230",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1404230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1231",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:10.310",
      "lastModified" : "2024-11-21T07:38:43.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the omnibox via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1274887",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1274887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1232",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:10.363",
      "lastModified" : "2024-11-21T07:38:43.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive information from API via a crafted HTML page. (Chromium security severity: Low)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1346924",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1346924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1233",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:10.423",
      "lastModified" : "2024-11-21T07:38:43.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from API via a crafted Chrome Extension. (Chromium security severity: Low)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1045681",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1045681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1234",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:10.480",
      "lastModified" : "2024-11-21T07:38:44.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1404621",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1404621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1235",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:10.537",
      "lastModified" : "2024-11-21T07:38:44.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. (Chromium security severity: Low)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1404704",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1404704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1236",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-07T22:15:10.590",
      "lastModified" : "2024-11-21T07:38:44.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. (Chromium security severity: Low)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.64",
            "matchCriteriaId" : "5BA46AD2-CDE2-4A77-83A9-90E1F34ABF55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1374518",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1374518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1263",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-07T22:15:10.647",
      "lastModified" : "2026-04-08T19:18:04.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 4.1.6  via the cmp_get_post_detail function. This can allow unauthenticated individuals to obtain the contents of any non-password-protected, published post or page even when maintenance mode is enabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:niteothemes:coming_soon_\\&_maintenance:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.1.6",
            "matchCriteriaId" : "07471B89-8C52-4316-9ABF-837FCE42A558"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/cmp-coming-soon-maintenance/tags/4.1.6/niteo-cmp.php#L2759",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e01b4259-ed8d-44a4-9771-470de45b14a8?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/cmp-coming-soon-maintenance/tags/4.1.6/niteo-cmp.php#L2759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e01b4259-ed8d-44a4-9771-470de45b14a8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1264",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-07T22:15:10.723",
      "lastModified" : "2024-11-21T07:38:47.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.1392",
            "matchCriteriaId" : "4B617E9D-94A8-48C9-8C86-8022B1E8F813"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vim/vim/commit/7ac5023a5f1a37baafbe1043645f97ba3443d9f6",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/b2989095-88f3-413a-9a39-c1c58a6e6815",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/vim/vim/commit/7ac5023a5f1a37baafbe1043645f97ba3443d9f6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/b2989095-88f3-413a-9a39-c1c58a6e6815",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26823",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-07T22:15:10.817",
      "lastModified" : "2023-11-07T04:09:42.597",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-0783. Reason: This record is a duplicate of CVE-2023-0783. Notes: All CVE users should reference CVE-2023-0783 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T00:15:08.937",
      "lastModified" : "2025-03-06T18:15:40.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC800090-6420-4971-831D-1E77A18BD45E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/funadmin/funadmin/issues/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/funadmin/funadmin/issues/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27476",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-08T00:15:08.997",
      "lastModified" : "2024-11-21T07:52:58.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) web service interface standards, and their related content models. OWSLib's XML parser (which supports both `lxml` and `xml.etree`) does not disable entity resolution, and could lead to arbitrary file reads from an attacker-controlled XML payload. This affects all XML parsing in the codebase. This issue has been addressed in version 0.28.1. All users are advised to upgrade. The only known workaround is to patch the library manually. See `GHSA-8h9c-r582-mggc` for details."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:owslib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.28.1",
            "matchCriteriaId" : "672ECD0F-89F8-4062-BBD2-D4B5CF0CA325"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/geopython/OWSLib/pull/863/commits/b92687702be9576c0681bb11cad21eb631b9122f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/geopython/OWSLib/security/advisories/GHSA-8h9c-r582-mggc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00032.html",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2022-131_owslib/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5426",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/geopython/OWSLib/pull/863/commits/b92687702be9576c0681bb11cad21eb631b9122f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/geopython/OWSLib/security/advisories/GHSA-8h9c-r582-mggc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2022-131_owslib/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0089",
      "sourceIdentifier" : "security@proofpoint.com",
      "published" : "2023-03-08T01:15:10.240",
      "lastModified" : "2024-11-21T07:36:31.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nThe webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'.\n\nThis affects all versions 8.20.0 and below. \n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@proofpoint.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@proofpoint.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:enterprise_protection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.13.22",
            "matchCriteriaId" : "5F25CC84-3AA4-4B66-8206-F26C14443A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:enterprise_protection:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.18.0",
            "versionEndExcluding" : "8.18.4",
            "matchCriteriaId" : "202B7803-2398-41E7-B88B-2D64384ADC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:enterprise_protection:8.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E481ED5-1AC8-4FEA-9169-17CDE7AB93DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:enterprise_protection:8.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C899EC-C3E7-4D34-8362-DEB40F16AD09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.proofpoint.com/security/security-advisories/pfpt-sa-2023-0001",
        "source" : "security@proofpoint.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.proofpoint.com/security/security-advisories/pfpt-sa-2023-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0090",
      "sourceIdentifier" : "security@proofpoint.com",
      "published" : "2023-03-08T01:15:10.343",
      "lastModified" : "2024-11-21T07:36:32.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval injection'.  Exploitation requires network access to the webservices API, but such access is a non-standard configuration.  This affects all versions 8.20.0 and below.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@proofpoint.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@proofpoint.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:enterprise_protection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.13.22",
            "matchCriteriaId" : "5F25CC84-3AA4-4B66-8206-F26C14443A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:enterprise_protection:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.18.0",
            "versionEndExcluding" : "8.18.4",
            "matchCriteriaId" : "202B7803-2398-41E7-B88B-2D64384ADC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:enterprise_protection:8.18.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E481ED5-1AC8-4FEA-9169-17CDE7AB93DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:enterprise_protection:8.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C899EC-C3E7-4D34-8362-DEB40F16AD09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.proofpoint.com/security/security-advisories/pfpt-sa-2023-0001",
        "source" : "security@proofpoint.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.proofpoint.com/security/security-advisories/pfpt-sa-2023-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24657",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T06:15:44.490",
      "lastModified" : "2025-03-05T19:15:29.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/popup.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpipam:phpipam:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76AB84E7-3B77-4A35-B047-7DE3D2D77950"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/phpipam/phpipam/issues/3738",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/phpipam/phpipam/issues/3738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1269",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-08T11:15:09.883",
      "lastModified" : "2024-11-21T07:38:47.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyappointments:easyappointments:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "063BC3E9-AA71-49D6-9CEE-F2E7E7B9D687"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alextselegidis/easyappointments/commit/2731d2f17c5140c562426b857e9f5d63da5c4593",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/91c31eb6-024d-4ad3-88fe-f15b03fd20f5",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alextselegidis/easyappointments/commit/2731d2f17c5140c562426b857e9f5d63da5c4593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/91c31eb6-024d-4ad3-88fe-f15b03fd20f5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23638",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-08T11:15:10.390",
      "lastModified" : "2024-11-21T07:46:35.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A deserialization vulnerability existed when dubbo generic invoke, which could lead to malicious code execution. \n\nThis issue affects Apache Dubbo 2.7.x version 2.7.21 and prior versions; Apache Dubbo 3.0.x version 3.0.13 and prior versions; Apache Dubbo 3.1.x version 3.1.5 and prior versions. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:dubbo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndIncluding" : "2.7.21",
            "matchCriteriaId" : "A275DC61-7FD6-4908-8213-2925FCA7ACDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:dubbo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.0.13",
            "matchCriteriaId" : "630DC28C-2AD7-4730-83F3-048D7B75F847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:dubbo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndIncluding" : "3.1.5",
            "matchCriteriaId" : "7F75BA1E-C9C7-4462-A4FE-A6C5F8128796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/8h6zscfzj482z512d2v5ft63hdhzm0cb",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/8h6zscfzj482z512d2v5ft63hdhzm0cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1267",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-08T12:15:09.267",
      "lastModified" : "2024-11-21T07:38:47.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ulkem Company PtteM Kart.This issue affects PtteM Kart: before 2.1.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pttemkart:pttem_kart:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1",
            "matchCriteriaId" : "482AB3A5-233C-422E-8F55-C1A5830A4710"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0133",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T13:15:10.130",
      "lastModified" : "2025-03-05T19:15:31.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Categories module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onekeyadmin:onekeyadmin:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308108A9-2A64-4A1D-A631-8E0D4820E7C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keheying/onekeyadmin/issues/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keheying/onekeyadmin/issues/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1270",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-08T14:15:09.637",
      "lastModified" : "2024-11-21T07:38:48.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btcpayserver:btcpayserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.3",
            "matchCriteriaId" : "AF54ED61-1DC6-4636-89E0-CAB74F81BECD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/btcpayserver/btcpayserver/commit/7b5ce8f70c060b01990d3f7109e97e0144d878a4",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ad1f917f-2b25-40ef-9215-c805354c683b",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/commit/7b5ce8f70c060b01990d3f7109e97e0144d878a4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ad1f917f-2b25-40ef-9215-c805354c683b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T14:15:09.760",
      "lastModified" : "2024-11-21T07:49:28.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticDhcpRules."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7100ru_firmware:7.4cu.2313_b20191024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C47206-6608-4258-A2FE-D15C5637192D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7100ru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DD0831-0EB3-4F09-B4E4-6165E53AB6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/22",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T14:15:09.823",
      "lastModified" : "2025-03-03T16:15:37.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onekeyadmin:onekeyadmin:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308108A9-2A64-4A1D-A631-8E0D4820E7C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keheying/onekeyadmin/issues/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keheying/onekeyadmin/issues/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T15:15:10.473",
      "lastModified" : "2025-03-05T19:15:30.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubikasec:waap_cloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.11.0",
            "matchCriteriaId" : "A1C6B01B-3D44-4BB3-9010-771136293679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubikasec:waap_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.11.0",
            "matchCriteriaId" : "1E6E0F7D-E777-4FA1-9A4B-60F0A57ACABC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubikasec:waap_cloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.6",
            "matchCriteriaId" : "59F28F7D-10C7-4ABE-A85B-A29871367AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubikasec:waap_cloud:6.5.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6510D7DC-E1BD-4B72-8B41-AE7B80146A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubikasec:waap_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.6",
            "matchCriteriaId" : "796AFA72-D4A2-4D91-A01F-E8B1EE0CDF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubikasec:waap_gateway:6.5.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2D213D-404D-4C9E-95CB-692EB88ADF27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.ubikasec.com/x/CQDAAw",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/Jakick/7d1635b886654ddd0e476b3c79a7ba9f",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://documentation.ubikasec.com/x/CQDAAw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/Jakick/7d1635b886654ddd0e476b3c79a7ba9f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T16:15:09.403",
      "lastModified" : "2025-03-05T19:15:29.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC800090-6420-4971-831D-1E77A18BD45E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/funadmin/funadmin/issues/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/funadmin/funadmin/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T16:15:09.470",
      "lastModified" : "2025-03-04T15:15:17.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via the shell_exect parameter to the \\www\\pages\\matrix-gui-2.0 endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:variscite:matrix-gui:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8935ED0-EBA2-434A-92E9-09665E5DD12D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/varigit/matrix-gui-v2/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/varigit/matrix-gui-v2/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T16:15:09.527",
      "lastModified" : "2025-03-05T19:15:32.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "feiqu-opensource Background Vertical authorization vulnerability exists in IndexController.java. demo users with low permission can perform operations within the permission of the admin super administrator and can use this vulnerability to change the blacklist IP address in the system at will."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:feiqu-opensource_project:feiqu-opensource:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F13408-94A5-4253-9BFF-02F1D503C0F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chen87548081/feiqu-opensource/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chen87548081/feiqu-opensource/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1275",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-08T18:15:11.667",
      "lastModified" : "2024-11-21T07:38:48.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in SourceCodester Phone Shop Sales Managements System 1.0. This vulnerability affects unknown code of the file /osms/assets/plugins/jquery-validation-1.11.1/demo/captcha/index.php of the component CAPTCHA Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222598 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phone_shop_sales_managements_system_project:phone_shop_sales_managements_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B162D4F-2C8F-44FA-942E-4EA7A1859C41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/blairting/bug_report/blob/main/vendors/Roo/Phone%20Shop%20Sales%20Managements%20System/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222598",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222598",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/blairting/bug_report/blob/main/vendors/Roo/Phone%20Shop%20Sales%20Managements%20System/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27482",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-08T18:15:11.783",
      "lastModified" : "2024-11-21T07:52:59.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for accessing the Supervisor API through Home Assistant has been discovered. This impacts all Home Assistant installation types that use the Supervisor 2023.01.1 or older. Installation types, like Home Assistant Container (for example Docker), or Home Assistant Core manually in a Python environment, are not affected. The issue has been mitigated and closed in Supervisor version 2023.03.1, which has been rolled out to all affected installations via the auto-update feature of the Supervisor. This rollout has been completed at the time of publication of this advisory. Home Assistant Core 2023.3.0 included mitigation for this vulnerability. Upgrading to at least that version is thus advised. In case one is not able to upgrade the Home Assistant Supervisor or the Home Assistant Core application at this time, it is advised to not expose your Home Assistant instance to the internet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:home-assistant:home-assistant:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.3.0",
            "matchCriteriaId" : "E7A33FB1-F4E8-418E-AFAE-93FC6F67704C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:home-assistant:supervisor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.03.1",
            "matchCriteriaId" : "FB81B81A-1E9C-4961-B4B7-B8C3FF160678"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/elttam/publications/blob/master/writeups/home-assistant/supervisor-authentication-bypass-advisory.md",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/home-assistant/core/security/advisories/GHSA-2j8f-h4mr-qr25",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elttam.com/blog/pwnassistant/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.home-assistant.io/blog/2023/03/08/supervisor-security-disclosure/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/elttam/publications/blob/master/writeups/home-assistant/supervisor-authentication-bypass-advisory.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/home-assistant/core/security/advisories/GHSA-2j8f-h4mr-qr25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.elttam.com/blog/pwnassistant/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.home-assistant.io/blog/2023/03/08/supervisor-security-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1276",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-08T19:15:10.677",
      "lastModified" : "2024-11-21T07:38:48.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SUL1SS_shop. This issue affects some unknown processing of the file application\\merch\\controller\\Order.php. The manipulation of the argument keyword leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-222599."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sul1ss_shop_project:sul1ss_shop:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "445240BE-B86B-4354-A236-03D7E5EF5E5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tib36.github.io/2023/03/04/SUL1SS-shop-SQLi/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222599",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222599",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tib36.github.io/2023/03/04/SUL1SS-shop-SQLi/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1277",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-08T19:15:10.760",
      "lastModified" : "2024-11-21T07:38:48.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in kylin-system-updater up to 1.4.20kord on Ubuntu Kylin. Affected is the function InstallSnap of the component Update Handler. The manipulation leads to command injection. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222600."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ubuntukylin:kylin-system-updater:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.20kord",
            "matchCriteriaId" : "8646782C-9377-44DA-B873-FA1818E573F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cn-lwj/vuldb/blob/master/kylin-system-updater_vuln.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222600",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222600",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cn-lwj/vuldb/blob/master/kylin-system-updater_vuln.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1278",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-08T19:15:10.847",
      "lastModified" : "2024-11-21T07:38:48.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-222608."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibos:ibos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.5",
            "matchCriteriaId" : "C1431BD2-EA6E-4B1C-9286-B34E91329054"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/ibos/IBOS/issues/I6G5IJ",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222608",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222608",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/ibos/IBOS/issues/I6G5IJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23760",
      "sourceIdentifier" : "product-cna@github.com",
      "published" : "2023-03-08T19:15:10.933",
      "lastModified" : "2024-11-21T07:46:46.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to versions 3.8 and was fixed in versions 3.7.7, 3.6.10, 3.5.14, and 3.4.17. This vulnerability was reported via the GitHub Bug Bounty program.\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-cna@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-cna@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.17",
            "matchCriteriaId" : "37DA2D24-3C3C-445D-8463-4AD5C0D12D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.14",
            "matchCriteriaId" : "FDE4BA6A-247B-40C4-B5F4-42611852C30A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.10",
            "matchCriteriaId" : "2FC14B50-F2DE-4307-993C-A5CF4537BD1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.7",
            "matchCriteriaId" : "C533A3C5-21AE-46E4-A973-E9EDB3D9637E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.17",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.14",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.10",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.7",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T19:15:11.020",
      "lastModified" : "2025-03-05T19:15:32.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onekeyadmin:onekeyadmin:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308108A9-2A64-4A1D-A631-8E0D4820E7C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keheying/onekeyadmin/issues/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keheying/onekeyadmin/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27486",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-08T19:15:11.073",
      "lastModified" : "2024-11-21T07:53:00.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xCAT is a toolkit for deployment and administration of computer clusters. In versions prior to 2.16.5 if zones are configured as a mechanism to secure clusters in XCAT, it is possible for a local root user from one node to obtain credentials to SSH to any node in any zone, except the management node of the default zone. XCAT zones are not enabled by default. Only users that use the optional zone feature are impacted. All versions of xCAT prior to xCAT 2.16.5 are vulnerable. This problem has been fixed in xCAT 2.16.5. Users making use of zones should upgrade to 2.16.5. Users unable to upgrade may mitigate the issue by disabling zones or patching the management node with the fix contained in commit `85149c37f49`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xcat_project:xcat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.5",
            "matchCriteriaId" : "B1E99110-D3F9-49CA-84F9-DB7E457AEE59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xcat2/xcat-core/issues/7246",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xcat2/xcat-core/pull/7247",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/xcat2/xcat-core/pull/7247/commits/85149c37f49dbca7bd85f1f586960315604fc024",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xcat2/xcat-core/security/advisories/GHSA-hpxg-7428-6jvv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xcat2/xcat-core/issues/7246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xcat2/xcat-core/pull/7247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/xcat2/xcat-core/pull/7247/commits/85149c37f49dbca7bd85f1f586960315604fc024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xcat2/xcat-core/security/advisories/GHSA-hpxg-7428-6jvv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24532",
      "sourceIdentifier" : "security@golang.org",
      "published" : "2023-03-08T20:15:09.413",
      "lastModified" : "2024-11-21T07:48:04.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.7",
            "matchCriteriaId" : "15520F70-C473-425F-8B9F-FAD4804D32E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.20.0",
            "versionEndExcluding" : "1.20.2",
            "matchCriteriaId" : "EFE15B38-D5B0-4231-BB31-228BAF815F72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://go.dev/cl/471255",
        "source" : "security@golang.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://go.dev/issue/58647",
        "source" : "security@golang.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/3-TpUx48iQY",
        "source" : "security@golang.org",
        "tags" : [ "Mailing List", "Release Notes" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2023-1621",
        "source" : "security@golang.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://go.dev/cl/471255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://go.dev/issue/58647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/3-TpUx48iQY",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2023-1621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230331-0011/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24533",
      "sourceIdentifier" : "security@golang.org",
      "published" : "2023-03-08T20:15:09.497",
      "lastModified" : "2025-02-28T20:15:40.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time that can be attacked due to this."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nistec_project:nistec:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "0.0.2",
            "matchCriteriaId" : "977207C5-A6D3-4511-A6C2-9758580B2F13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FiloSottile/nistec/commit/c58aa1223ccf3943513e1e661cebce95af137244",
        "source" : "security@golang.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://go.dev/issue/58647",
        "source" : "security@golang.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2023-1595",
        "source" : "security@golang.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FiloSottile/nistec/commit/c58aa1223ccf3943513e1e661cebce95af137244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://go.dev/issue/58647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2023-1595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26489",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-08T20:15:09.583",
      "lastModified" : "2024-11-21T07:51:37.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x86_64 targets where address-mode computation mistakenly would calculate a 35-bit effective address instead of WebAssembly's defined 33-bit effective address. This bug means that, with default codegen settings, a wasm-controlled load/store operation could read/write addresses up to 35 bits away from the base of linear memory. Due to this bug, however, addresses up to `0xffffffff * 8 + 0x7ffffffc = 36507222004 = ~34G` bytes away from the base of linear memory are possible from guest code. This means that the virtual memory 6G away from the base of linear memory up to ~34G away can be read/written by a malicious module. A guest module can, without the knowledge of the embedder, read/write memory in this region. The memory may belong to other WebAssembly instances when using the pooling allocator, for example. Affected embedders are recommended to analyze preexisting wasm modules to see if they're affected by the incorrect codegen rules and possibly correlate that with an anomalous number of traps during historical execution to locate possibly suspicious modules. The specific bug in Cranelift's x86_64 backend is that a WebAssembly address which is left-shifted by a constant amount from 1 to 3 will get folded into x86_64's addressing modes which perform shifts. For example `(i32.load (i32.shl (local.get 0) (i32.const 3)))` loads from the WebAssembly address `$local0 << 3`. When translated to Cranelift the `$local0 << 3` computation, a 32-bit value, is zero-extended to a 64-bit value and then added to the base address of linear memory. Cranelift would generate an instruction of the form `movl (%base, %local0, 8), %dst` which calculates `%base + %local0 << 3`. The bug here, however, is that the address computation happens with 64-bit values, where the `$local0 << 3` computation was supposed to be truncated to a a 32-bit value. This means that `%local0`, which can use up to 32-bits for an address, gets 3 extra bits of address space to be accessible via this `movl` instruction. The fix in Cranelift is to remove the erroneous lowering rules in the backend which handle these zero-extended expression. The above example is then translated to `movl %local0, %temp; shl $3, %temp; movl (%base, %temp), %dst` which correctly truncates the intermediate computation of `%local0 << 3` to 32-bits inside the `%temp` register which is then added to the `%base` value. Wasmtime version 4.0.1, 5.0.1, and 6.0.1 have been released and have all been patched to no longer contain the erroneous lowering rules. While updating Wasmtime is recommended, there are a number of possible workarounds that embedders can employ to mitigate this issue if updating is not possible. Note that none of these workarounds are on-by-default and require explicit configuration: 1. The `Config::static_memory_maximum_size(0)` option can be used to force all accesses to linear memory to be explicitly bounds-checked. This will perform a bounds check separately from the address-mode computation which correctly calculates the effective address of a load/store. Note that this can have a large impact on the execution performance of WebAssembly modules. 2. The `Config::static_memory_guard_size(1 << 36)` option can be used to greatly increase the guard pages placed after linear memory. This will guarantee that memory accesses up-to-34G away are guaranteed to be semantically correct by reserving unmapped memory for the instance. Note that this reserves a very large amount of virtual memory per-instances and can greatly reduce the maximum number of concurrent instances being run. 3. If using a non-x86_64 host is possible, then that will also work around this bug. This bug does not affect Wasmtime's or Cranelift's AArch64 backend, for example.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:cranelift-codegen:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.84.0",
            "versionEndExcluding" : "0.91.1",
            "matchCriteriaId" : "DBCFE132-FEDA-4A43-AE02-08E150E411D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:cranelift-codegen:0.92.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "7D7B0DE4-0071-4056-A243-D0BB71963F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:cranelift-codegen:0.93.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "0EC7D2FC-6423-45AE-8F82-A37F93C17285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.37.0",
            "versionEndExcluding" : "4.0.1",
            "matchCriteriaId" : "DD965E87-91DE-4FD2-8AED-37274050D01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:5.0.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "87B4AC93-F648-4E7B-9FC7-53D885110E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:6.0.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "A21E7233-1DAD-449F-A48F-05BE3DE8E2E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.static_memory_guard_size",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.static_memory_maximum_size",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/commit/63fb30e4b4415455d47b3da5a19d79c12f4f2d1f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-ff4p-7xrq-q5r8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/a/bytecodealliance.org/g/sec-announce/c/Mov-ItrNJsQ",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.static_memory_guard_size",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.static_memory_maximum_size",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/commit/63fb30e4b4415455d47b3da5a19d79c12f4f2d1f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-ff4p-7xrq-q5r8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/a/bytecodealliance.org/g/sec-announce/c/Mov-ItrNJsQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T21:15:10.643",
      "lastModified" : "2025-03-05T21:15:16.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to remote code execution by unauthenticated users."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartbear:zephyr_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.15",
            "matchCriteriaId" : "2F7FA868-8BF8-4D28-9442-A315F16C7225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://smartbear.com/security/cve/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://smartbear.com/security/cve/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T21:15:10.703",
      "lastModified" : "2025-03-05T15:15:11.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files, which could exhaust the local drive space, causing a denial of service condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartbear:zephyr_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.15",
            "matchCriteriaId" : "2F7FA868-8BF8-4D28-9442-A315F16C7225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://smartbear.com/security/cve/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://smartbear.com/security/cve/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T21:15:10.760",
      "lastModified" : "2025-03-05T21:15:16.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There exists a privilege escalation vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by authorized users to reset passwords for other accounts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartbear:zephyr_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.15",
            "matchCriteriaId" : "2F7FA868-8BF8-4D28-9442-A315F16C7225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://smartbear.com/security/cve/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://smartbear.com/security/cve/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T21:15:10.820",
      "lastModified" : "2025-03-04T21:15:11.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by unauthenticated users to read arbitrary files from Zephyr instances."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartbear:zephyr_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.15",
            "matchCriteriaId" : "2F7FA868-8BF8-4D28-9442-A315F16C7225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://smartbear.com/security/cve/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://smartbear.com/security/cve/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T21:15:10.880",
      "lastModified" : "2025-03-05T19:15:29.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:poly:trio_8800_firmware:7.2.2.1094:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BAFCDB-6B03-4E0B-96BD-3F38589D7650"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:poly:trio_8800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39862A32-5AF6-41F9-9C25-9D68EB3784DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://polycom.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cryptnetix.com/blog/2023/01/19/Polycom-Trio-Vulnerability-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://polycom.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cryptnetix.com/blog/2023/01/19/Polycom-Trio-Vulnerability-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T21:15:10.943",
      "lastModified" : "2025-03-05T19:15:29.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC800090-6420-4971-831D-1E77A18BD45E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/funadmin/funadmin/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/funadmin/funadmin/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27477",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-08T21:15:11.010",
      "lastModified" : "2024-11-21T07:52:58.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the WebAssembly `i8x16.select` instruction which will produce the wrong results when the same operand is provided to the instruction and some of the selected indices are greater than 16. There is an off-by-one error in the calculation of the mask to the `pshufb` instruction which causes incorrect results to be returned if lanes are selected from the second vector. This codegen bug has been fixed in Wasmtiem 6.0.1, 5.0.1, and 4.0.1. Users are recommended to upgrade to these updated versions. If upgrading is not an option for you at this time, you can avoid this miscompilation by disabling the Wasm simd proposal. Additionally the bug is only present on x86_64 hosts. Other platforms such as AArch64 and s390x are not affected."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:cranelift-codegen:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.84.0",
            "versionEndExcluding" : "0.91.1",
            "matchCriteriaId" : "DBCFE132-FEDA-4A43-AE02-08E150E411D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:cranelift-codegen:0.92.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "7D7B0DE4-0071-4056-A243-D0BB71963F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:cranelift-codegen:0.93.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "0EC7D2FC-6423-45AE-8F82-A37F93C17285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.37.0",
            "versionEndExcluding" : "4.0.1",
            "matchCriteriaId" : "DD965E87-91DE-4FD2-8AED-37274050D01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:5.0.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "87B4AC93-F648-4E7B-9FC7-53D885110E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:6.0.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "A21E7233-1DAD-449F-A48F-05BE3DE8E2E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.wasm_simd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/commit/5dc2bbccbb363e474d2c9a1b8e38a89a43bbd5d1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-xm67-587q-r2vw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/webassembly/simd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://groups.google.com/a/bytecodealliance.org/g/sec-announce/c/Mov-ItrNJsQ",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.wasm_simd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/commit/5dc2bbccbb363e474d2c9a1b8e38a89a43bbd5d1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-xm67-587q-r2vw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/webassembly/simd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://groups.google.com/a/bytecodealliance.org/g/sec-announce/c/Mov-ItrNJsQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1283",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-08T22:15:09.683",
      "lastModified" : "2026-03-13T19:21:14.227",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code Injection in GitHub repository builderio/qwik prior to 0.21.0.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qwik:qwik:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.21.0",
            "matchCriteriaId" : "48EC7185-7D9D-4EF3-8A0F-362AB3F269EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BuilderIO/qwik/pull/3249/commits/4d9ba6e098ae6e537aa55abb6b8369bb670ffe66",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/63f1ff91-48f3-4886-a179-103f1ddd8ff8",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BuilderIO/qwik/pull/3249/commits/4d9ba6e098ae6e537aa55abb6b8369bb670ffe66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/63f1ff91-48f3-4886-a179-103f1ddd8ff8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-08T22:15:09.797",
      "lastModified" : "2025-03-05T19:15:29.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC800090-6420-4971-831D-1E77A18BD45E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/funadmin/funadmin/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/funadmin/funadmin/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0030",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-08T23:15:10.963",
      "lastModified" : "2025-03-05T21:15:15.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0",
            "matchCriteriaId" : "D1C581ED-7982-4D97-89D0-9DD8E7B66D0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2157270",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0010/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2157270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2157270",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T00:15:09.930",
      "lastModified" : "2024-11-21T07:53:50.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain matches, e.g., a password stored for an example.com hosting provider when customer-website.example.com is visited. NOTE: the vendor's position is that \"Auto-fill on page load\" is not enabled by default."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitwarden:bitwarden:*:*:*:*:browser:*:*:*",
            "versionEndIncluding" : "2023.2.1",
            "matchCriteriaId" : "DD0B72A2-002C-4249-BE4D-6B6A6C83BFDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://flashpoint.io/blog/bitwarden-password-pilfering/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bitwarden/clients/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=35075861",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://flashpoint.io/blog/bitwarden-password-pilfering/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bitwarden/clients/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=35075861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T01:15:10.383",
      "lastModified" : "2025-02-28T17:15:14.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onekeyadmin:onekeyadmin:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308108A9-2A64-4A1D-A631-8E0D4820E7C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keheying/onekeyadmin/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/keheying/onekeyadmin/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26109",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-03-09T05:15:56.490",
      "lastModified" : "2024-11-21T07:50:47.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation.\r\r"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-bluetooth-serial-port_project:node-bluetooth-serial-port:-:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "14F76107-0B43-4E8F-8C86-185F8CA053B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-NODEBLUETOOTHSERIALPORT-3311820",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-NODEBLUETOOTHSERIALPORT-3311820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26110",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-03-09T05:15:56.947",
      "lastModified" : "2024-11-21T07:50:47.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the package node-bluetooth are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation.\r\r\r"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-bluetooth_project:node-bluetooth:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.2.6",
            "matchCriteriaId" : "F7C4952D-6E42-472B-99B0-FA136BE04466"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-NODEBLUETOOTH-3311821",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-NODEBLUETOOTH-3311821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T06:15:32.987",
      "lastModified" : "2025-03-05T17:15:12.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "28.1",
            "versionEndIncluding" : "28.2",
            "matchCriteriaId" : "63E864C7-D01F-468E-B57F-01BB09C275EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=d32091199ae5de590a83f1542a01d75fba000467",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/03/09/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=60204",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.gabriel.urdhr.fr/2023/06/08/emacsclient-mail-shell-elisp-injections/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/08/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=d32091199ae5de590a83f1542a01d75fba000467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/03/09/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=60204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://www.gabriel.urdhr.fr/2023/06/08/emacsclient-mail-shell-elisp-injections/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/08/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T06:15:33.187",
      "lastModified" : "2025-03-05T18:15:35.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailto: URI with unescaped double-quote characters. It is fixed in 29.0.90."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "28.1",
            "versionEndIncluding" : "28.2",
            "matchCriteriaId" : "63E864C7-D01F-468E-B57F-01BB09C275EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=3c1693d08b0a71d40a77e7b40c0ebc42dca2d2cc",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/03/09/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://www.gabriel.urdhr.fr/2023/06/08/emacsclient-mail-shell-elisp-injections/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/08/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=3c1693d08b0a71d40a77e7b40c0ebc42dca2d2cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/03/09/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://www.gabriel.urdhr.fr/2023/06/08/emacsclient-mail-shell-elisp-injections/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/08/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1251",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-09T08:15:08.553",
      "lastModified" : "2024-11-21T07:38:45.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akinsoft Wolvox. This issue affects Wolvox: before 8.02.03."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akinsoft:wolvox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.02.03",
            "matchCriteriaId" : "D94E3DDF-5087-4D22-BE44-71E3825ADC6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0136",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1286",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-09T11:15:10.147",
      "lastModified" : "2024-11-21T07:38:49.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.19",
            "matchCriteriaId" : "9F355AEC-329F-43D1-A3D7-44C2481A1999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/82cca7f4a7560b160336cce2610481098ca52c18",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/31d97442-3f87-439f-83f0-1c7862ef0c7c",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/82cca7f4a7560b160336cce2610481098ca52c18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/31d97442-3f87-439f-83f0-1c7862ef0c7c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1290",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-09T15:15:09.117",
      "lastModified" : "2024-11-21T07:38:51.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Sales Tracker Management System 1.0. Affected by this issue is some unknown functionality of the file admin/clients/view_client.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222644."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sales_tracker_management_system_project:sales_tracker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF52C94E-14A2-48E2-930E-56E6375C4846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Mart1nD0t/vul-test/blob/main/sts-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222644",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222644",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Mart1nD0t/vul-test/blob/main/sts-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1291",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-09T15:15:09.217",
      "lastModified" : "2024-11-21T07:38:51.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Sales Tracker Management System 1.0. This affects an unknown part of the file admin/clients/manage_client.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222645 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sales_tracker_management_system_project:sales_tracker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF52C94E-14A2-48E2-930E-56E6375C4846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Mart1nD0t/vul-test/blob/main/sts-2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222645",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222645",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Mart1nD0t/vul-test/blob/main/sts-2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1292",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-09T15:15:09.307",
      "lastModified" : "2024-11-21T07:38:51.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Sales Tracker Management System 1.0 and classified as critical. This vulnerability affects the function delete_client of the file classes/Master.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222646 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sales_tracker_management_system_project:sales_tracker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF52C94E-14A2-48E2-930E-56E6375C4846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Mart1nD0t/vul-test/blob/main/sts-3.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222646",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222646",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Mart1nD0t/vul-test/blob/main/sts-3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1293",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-09T15:15:09.403",
      "lastModified" : "2024-11-21T07:38:51.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects the function mysqli_query of the file admin_cs.php. The manipulation leads to sql injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222647."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_graduate_tracer_system_project:online_graduate_tracer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9A6FC0-9440-489D-AD8D-3FF732389484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/129418770",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222647",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222647",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/129418770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1294",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-09T15:15:09.517",
      "lastModified" : "2024-11-21T07:38:51.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester File Tracker Manager System 1.0. It has been classified as critical. Affected is an unknown function of the file /file_manager/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222648."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:file_tracker_manager_system_project:file_tracker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79D663CC-270E-40FE-8823-BED16538A013"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/godownio/bug_report/blob/main/vendors/hemedy99/File%20Tracker%20Manager%20System/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222648",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222648",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/godownio/bug_report/blob/main/vendors/hemedy99/File%20Tracker%20Manager%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26208",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-03-09T15:15:09.637",
      "lastModified" : "2024-11-21T07:50:55.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x and before allows  a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndExcluding" : "6.5.0",
            "matchCriteriaId" : "3920D43C-F957-488D-819F-D3001ED216AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-20-078",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-20-078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26209",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-03-09T15:15:09.720",
      "lastModified" : "2024-11-21T07:50:55.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x and before allows  a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "3.2.0",
            "matchCriteriaId" : "3552EB07-FD6F-499D-BF18-DB4365FAAF57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-20-078",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-20-078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0845",
      "sourceIdentifier" : "security@hashicorp.com",
      "published" : "2023-03-09T16:15:09.657",
      "lastModified" : "2024-11-21T07:37:56.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5."
      }, {
        "lang" : "es",
        "value" : "Consul y Consul Enterprise permitieron que un usuario autenticado con servicio:permisos de escritura desencadenara un flujo de trabajo que provoca que el servidor de Consul y los agentes del cliente colapsen en determinadas circunstancias. Esta vulnerabilidad se solucionó en Consul 1.14.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hashicorp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hashicorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:consul:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "1.14.5",
            "matchCriteriaId" : "D8C3D37E-19AF-4262-8BF8-D5C6CB0F7F64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-06-consul-server-panic-when-ingress-and-api-gateways-configured-with-peering-connections/51197",
        "source" : "security@hashicorp.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/",
        "source" : "security@hashicorp.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/",
        "source" : "security@hashicorp.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/",
        "source" : "security@hashicorp.com"
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-06-consul-server-panic-when-ingress-and-api-gateways-configured-with-peering-connections/51197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1287",
      "sourceIdentifier" : "3DS.Information-Security@3ds.com",
      "published" : "2023-03-09T17:15:10.240",
      "lastModified" : "2024-11-21T07:38:49.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nAn XSL template vulnerability in\nENOVIA Live Collaboration V6R2013xE allows Remote Code Execution.\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3DS.Information-Security@3ds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "3DS.Information-Security@3ds.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:enovia_live_collaboration:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "v6r2013xe",
            "versionEndExcluding" : "v6r2013xe_fp.cfa.2240",
            "matchCriteriaId" : "33D1DC31-D657-41EB-8247-12C38EBE4748"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.3ds.com/vulnerability/advisories",
        "source" : "3DS.Information-Security@3ds.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.3ds.com/vulnerability/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1288",
      "sourceIdentifier" : "3DS.Information-Security@3ds.com",
      "published" : "2023-03-09T17:15:10.343",
      "lastModified" : "2024-11-21T07:38:50.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\n\n\n\n\n\nAn XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3DS.Information-Security@3ds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "3DS.Information-Security@3ds.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:enovia_live_collaboration:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "v6r2013xe",
            "versionEndExcluding" : "v6r2013xe_fp.cfa.2240",
            "matchCriteriaId" : "33D1DC31-D657-41EB-8247-12C38EBE4748"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.3ds.com/vulnerability/advisories",
        "source" : "3DS.Information-Security@3ds.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.3ds.com/vulnerability/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25573",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-09T17:15:10.600",
      "lastModified" : "2024-11-21T07:49:45.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability exists in `/api/jmeter/download/files`, which allows any user to download any file without authentication. This issue may expose all files available to the running process. This issue has been addressed in version 1.20.20 lts and 2.7.1. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metersphere:metersphere:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.20.19",
            "matchCriteriaId" : "E2A3BB9F-DE19-41DC-8982-4DA6A494A3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metersphere:metersphere:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.6.2",
            "matchCriteriaId" : "3BA3266B-79B5-47A5-8782-E85441E5F42E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/metersphere/metersphere/security/advisories/GHSA-mcwr-j9vm-5g8h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/metersphere/metersphere/security/advisories/GHSA-mcwr-j9vm-5g8h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25814",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-09T18:15:09.343",
      "lastModified" : "2024-11-21T07:50:15.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "metersphere is an open source continuous testing platform. In versions prior to 2.7.1 a user who has permission to create a resource file through UI operations is able to append a path to their submission query which will be read by the system and displayed to the user. This allows a users of the system to read arbitrary files on the filesystem of the server so long as the server process itself has permission to read the requested files. This issue has been addressed in version 2.7.1. All users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metersphere:metersphere:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.1",
            "matchCriteriaId" : "F5207187-0598-4D8C-A648-58CF1657AFC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/metersphere/metersphere/security/advisories/GHSA-fwc3-5h55-mh2j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/metersphere/metersphere/security/advisories/GHSA-fwc3-5h55-mh2j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0483",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-03-09T20:15:09.427",
      "lastModified" : "2024-11-21T07:37:16.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible for a project maintainer to extract a Datadog integration API key by modifying the site."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "15.7.8",
            "matchCriteriaId" : "12FB01B7-042A-4EED-A591-04263172A7BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "15.7.8",
            "matchCriteriaId" : "C1CD74A0-FF1D-4904-9BD1-492FF77A70DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.8.0",
            "versionEndExcluding" : "15.8.4",
            "matchCriteriaId" : "FE6EB324-C51D-4653-9CD4-6BB5100F0BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.8.0",
            "versionEndExcluding" : "15.8.4",
            "matchCriteriaId" : "DB9FE3DB-595E-413B-BE25-2181038A6B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.2",
            "matchCriteriaId" : "22AC1EB0-2D0F-4839-934F-847C5265F469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.2",
            "matchCriteriaId" : "3FD1CDF6-AD2F-462B-B9DB-3071F4B61396"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0483.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/389188",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1836466",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0483.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/389188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1836466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1084",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-03-09T20:15:09.497",
      "lastModified" : "2024-11-21T07:38:25.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A malicious project Maintainer may create a Project Access Token with Owner level privileges using a crafted request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "15.7.8",
            "matchCriteriaId" : "AD9730B5-0E23-428F-9338-01B8E8DADCAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "15.7.8",
            "matchCriteriaId" : "8CD22E6C-1ACA-4232-A35E-56010B267778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.8.0",
            "versionEndExcluding" : "15.8.4",
            "matchCriteriaId" : "FE6EB324-C51D-4653-9CD4-6BB5100F0BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.8.0",
            "versionEndExcluding" : "15.8.4",
            "matchCriteriaId" : "DB9FE3DB-595E-413B-BE25-2181038A6B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.2",
            "matchCriteriaId" : "22AC1EB0-2D0F-4839-934F-847C5265F469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.2",
            "matchCriteriaId" : "3FD1CDF6-AD2F-462B-B9DB-3071F4B61396"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1084.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/390696",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1805549",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1084.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/390696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1805549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0223",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-03-09T21:15:10.860",
      "lastModified" : "2024-11-21T07:36:46.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. Non-project members could retrieve release descriptions via the API, even if the release visibility is restricted to project members only in the project settings."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.5.0",
            "versionEndExcluding" : "15.7.8",
            "matchCriteriaId" : "8C8F9224-14CF-43FF-B0FB-4803FBF05EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.5.0",
            "versionEndExcluding" : "15.7.8",
            "matchCriteriaId" : "FBFE78E3-83FE-401D-B556-B9F6690E3B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.8.0",
            "versionEndExcluding" : "15.8.4",
            "matchCriteriaId" : "FE6EB324-C51D-4653-9CD4-6BB5100F0BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.8.0",
            "versionEndExcluding" : "15.8.4",
            "matchCriteriaId" : "DB9FE3DB-595E-413B-BE25-2181038A6B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.2",
            "matchCriteriaId" : "22AC1EB0-2D0F-4839-934F-847C5265F469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.2",
            "matchCriteriaId" : "3FD1CDF6-AD2F-462B-B9DB-3071F4B61396"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0223.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/387870",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1824226",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0223.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/387870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1824226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T21:15:10.963",
      "lastModified" : "2025-03-05T19:15:32.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \\admin\\controller\\plugins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onekeyadmin:onekeyadmin:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308108A9-2A64-4A1D-A631-8E0D4820E7C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keheying/onekeyadmin/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/keheying/onekeyadmin/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27202",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T21:15:11.027",
      "lastModified" : "2025-03-05T18:15:34.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:best_pos_management_system_project:best_pos_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B85DBCB-A5E2-4203-8FB3-A511653BF5D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/sql%20in%20receipt.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/sql%20in%20receipt.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T21:15:11.080",
      "lastModified" : "2025-03-05T18:15:35.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:best_pos_management_system_project:best_pos_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B85DBCB-A5E2-4203-8FB3-A511653BF5D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/sql%20in%20home.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/sql%20in%20home.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T21:15:11.140",
      "lastModified" : "2024-11-21T07:52:27.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manage_user.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:best_pos_management_system_project:best_pos_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B85DBCB-A5E2-4203-8FB3-A511653BF5D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/sql%20in%20manage_user.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/sql%20in%20manage_user.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T21:15:11.197",
      "lastModified" : "2024-11-21T07:52:27.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/sales_report.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:best_pos_management_system_project:best_pos_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B85DBCB-A5E2-4203-8FB3-A511653BF5D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/sql%20in%20sales_report.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/sql%20in%20sales_report.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T21:15:11.260",
      "lastModified" : "2024-11-21T07:52:27.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:best_pos_management_system_project:best_pos_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B85DBCB-A5E2-4203-8FB3-A511653BF5D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/xss%20in%20navbar.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/xss%20in%20navbar.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T21:15:11.317",
      "lastModified" : "2024-11-21T07:52:27.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage_user.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/sql%20in%20manage_user.php%20.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/sql%20in%20manage_user.php%20.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T21:15:11.377",
      "lastModified" : "2024-11-21T07:52:27.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/xss%20in%20login.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/xss%20in%20login.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T21:15:11.437",
      "lastModified" : "2024-11-21T07:52:28.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/view_order.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/sql%20in%20view_order.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/sql%20in%20view_order.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T21:15:11.490",
      "lastModified" : "2024-11-21T07:52:28.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/xss%20in%20navbar.php%20.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/xss%20in%20navbar.php%20.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T21:15:11.547",
      "lastModified" : "2024-11-21T07:52:28.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/xss%20in%20signup.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/xss%20in%20signup.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T21:15:11.607",
      "lastModified" : "2024-11-21T07:52:28.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Student Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /eduauth/student/search.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_student_management_system_project:online_student_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422F2579-A688-4D6E-97D2-873C5BCABFD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/online%20student%20management%20system%20v1.0/sql%20in%20search.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16137/online-student-management-system-php-free-download.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/online%20student%20management%20system%20v1.0/sql%20in%20search.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16137/online-student-management-system-php-free-download.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-09T21:15:11.663",
      "lastModified" : "2024-11-21T07:52:28.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_student_management_system_project:online_student_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422F2579-A688-4D6E-97D2-873C5BCABFD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xiumulty/CVE/blob/main/online%20student%20management%20system%20v1.0/sql%20in%20between-date-reprtsdetails.php.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16137/online-student-management-system-php-free-download.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xiumulty/CVE/blob/main/online%20student%20management%20system%20v1.0/sql%20in%20between-date-reprtsdetails.php.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16137/online-student-management-system-php-free-download.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27483",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-09T21:15:11.720",
      "lastModified" : "2024-11-21T07:52:59.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. An out of memory panic vulnerability has been discovered in affected versions. Applications that use the `Paved` type's `SetValue` method with user provided input without proper validation might use excessive amounts of memory and cause an out of memory panic. In the fieldpath package, the Paved.SetValue method sets a value on the Paved object according to the provided path, without any validation. This allows setting values in slices at any provided index, which grows the target array up to the requested index, the index is currently capped at max uint32 (4294967295) given how indexes are parsed,  but that is still an unnecessarily large value. If callers are not validating paths' indexes on their own, which most probably are not going to do, given that the input is parsed directly in the SetValue method, this could allow users to consume arbitrary amounts of memory. Applications that do not use the `Paved` type's `SetValue` method are not affected. This issue has been addressed in versions 0.16.1 and 0.19.2. Users are advised to upgrade. Users unable to upgrade can parse and validate the path before passing it to the `SetValue` method of the `Paved` type, constraining the index size as deemed appropriate."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crossplane:crossplane-runtime:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.19.0",
            "versionEndExcluding" : "0.19.2",
            "matchCriteriaId" : "E12C35E6-F04C-408B-88A3-B56D0012BCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crossplane:crossplane-runtime:0.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4B04C9A-761E-42F9-AEF6-2E8AE06CB776"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/crossplane/crossplane-runtime/commit/53508a9f4374604db140dd8ab2fa52276441e738",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/crossplane/crossplane-runtime/security/advisories/GHSA-vfvj-3m3g-m532",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/crossplane/crossplane-runtime/commit/53508a9f4374604db140dd8ab2fa52276441e738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/crossplane/crossplane-runtime/security/advisories/GHSA-vfvj-3m3g-m532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27484",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-09T21:15:11.813",
      "lastModified" : "2024-11-21T07:52:59.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. In affected versions an already highly privileged user able to create or update Compositions can specify an arbitrarily high index in a patch's `ToFieldPath`, which could lead to excessive memory usage once such Composition is selected for a Composite resource. Compositions allow users to specify patches inserting elements into arrays at an arbitrary index. When a Composition is selected for a Composite Resource, patches are evaluated and if a specified index is greater than the current size of the target slice, Crossplane will grow that slice up to the specified index, which could lead to an excessive amount of memory usage and therefore the Pod being OOM-Killed. The index is already capped to the maximum value for a uint32 (4294967295) when parsed, but that is still an unnecessarily large value. This issue has been addressed in versions 1.11.2, 1.10.3, and 1.9.2. Users are advised to upgrade. Users unable to upgrade can restrict write privileges on Compositions to only admin users as a workaround."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crossplane:crossplane:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndExcluding" : "1.9.2",
            "matchCriteriaId" : "AC43D1CC-798A-4254-B18F-408F3B08C798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crossplane:crossplane:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.10.0",
            "versionEndExcluding" : "1.10.3",
            "matchCriteriaId" : "16F2F51C-A18F-47A2-8611-982B1DD06B16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crossplane:crossplane:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.11.0",
            "versionEndExcluding" : "1.11.2",
            "matchCriteriaId" : "6E4E17AD-3F4D-4312-A63C-78EBC0134A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/crossplane/crossplane/security/advisories/GHSA-v829-x6hh-cqfq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/crossplane/crossplane/security/advisories/GHSA-v829-x6hh-cqfq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27490",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-09T21:15:11.913",
      "lastModified" : "2024-11-21T07:53:00.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NextAuth.js is an open source authentication solution for Next.js applications. `next-auth` applications using OAuth provider versions before `v4.20.1` have been found to be subject to an authentication vulnerability. A bad actor who can read traffic on the victim's network or who is able to social engineer the victim to click a manipulated login link could intercept and tamper with the authorization URL to **log in as the victim**, bypassing the CSRF protection. This is due to a partial failure during a compromised OAuth session where a session code is erroneously generated. This issue has been addressed in version 4.20.1. Users are advised to upgrade. Users unable to upgrade may using Advanced Initialization, manually check the callback request for state, pkce, and nonce against the provider configuration to prevent this issue. See the linked GHSA for details."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextauth.js:next-auth:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.20.1",
            "matchCriteriaId" : "D58C0028-EA90-4BFA-BD7B-03775AE4FC42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://authjs.dev/reference/core/providers#checks",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://danielfett.de/2020/05/16/pkce-vs-nonce-equivalent-or-not/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/nextauthjs/next-auth/security/advisories/GHSA-7r7x-4c4q-c4qf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://next-auth.js.org/configuration/initialization#advanced-initialization",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://next-auth.js.org/configuration/providers/oauth",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0006/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.rfc-editor.org/rfc/rfc6749#section-10.12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://authjs.dev/reference/core/providers#checks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://danielfett.de/2020/05/16/pkce-vs-nonce-equivalent-or-not/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/nextauthjs/next-auth/security/advisories/GHSA-7r7x-4c4q-c4qf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://next-auth.js.org/configuration/initialization#advanced-initialization",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://next-auth.js.org/configuration/providers/oauth",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.rfc-editor.org/rfc/rfc6749#section-10.12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0050",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-03-09T22:15:51.523",
      "lastModified" : "2024-11-21T07:36:27.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A specially crafted Kroki diagram could lead to a stored XSS on the client side which allows attackers to perform arbitrary actions on behalf of victims."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7",
            "versionEndExcluding" : "15.7.8",
            "matchCriteriaId" : "41C5C799-40FF-443C-9196-ED79CC776A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7",
            "versionEndExcluding" : "15.7.8",
            "matchCriteriaId" : "01D35134-830D-43A0-923E-EB53FF19984D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.8",
            "versionEndExcluding" : "15.8.4",
            "matchCriteriaId" : "89B81A26-8FF6-4745-A9F4-3F7A3CFCB943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.8",
            "versionEndExcluding" : "15.8.4",
            "matchCriteriaId" : "124D53C4-ACD0-4C2A-9E95-5E7E7B1BACF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9",
            "versionEndExcluding" : "15.9.2",
            "matchCriteriaId" : "3D2A72D7-C712-440D-91F9-D7EBF93EA1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9",
            "versionEndExcluding" : "15.9.2",
            "matchCriteriaId" : "57BB437C-433D-430B-8B1B-3C3B053C9360"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0050.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/387023",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1731349",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0050.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/387023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1731349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0621",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-09T22:15:51.597",
      "lastModified" : "2025-01-17T22:15:27.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in reads past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hornerautomation:cscape_envision_rv:4.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7340C19B-2D32-44A3-BBBB-C7ECFFDC0B61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-040-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-040-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0622",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-09T22:15:51.667",
      "lastModified" : "2025-01-17T22:15:27.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hornerautomation:cscape_envision_rv:4.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7340C19B-2D32-44A3-BBBB-C7ECFFDC0B61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-040-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-040-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0623",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-09T22:15:51.737",
      "lastModified" : "2025-01-17T22:15:27.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hornerautomation:cscape_envision_rv:4.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7340C19B-2D32-44A3-BBBB-C7ECFFDC0B61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-040-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-040-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1072",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-03-09T22:15:51.810",
      "lastModified" : "2024-11-21T07:38:24.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible to trigger a resource depletion attack due to improper filtering for number of requests to read commits details."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "15.7.8",
            "matchCriteriaId" : "AD2F3C70-9E35-48BA-917E-4AE3E30114C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "15.7.8",
            "matchCriteriaId" : "B860F565-7D1F-4FFC-A5D8-0015807F1DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.8",
            "versionEndExcluding" : "15.8.4",
            "matchCriteriaId" : "89B81A26-8FF6-4745-A9F4-3F7A3CFCB943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.8",
            "versionEndExcluding" : "15.8.4",
            "matchCriteriaId" : "124D53C4-ACD0-4C2A-9E95-5E7E7B1BACF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9",
            "versionEndExcluding" : "15.9.2",
            "matchCriteriaId" : "3D2A72D7-C712-440D-91F9-D7EBF93EA1F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9",
            "versionEndExcluding" : "15.9.2",
            "matchCriteriaId" : "57BB437C-433D-430B-8B1B-3C3B053C9360"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1072.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/219619",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1072.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/219619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1300",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-09T22:15:51.880",
      "lastModified" : "2024-11-21T07:38:52.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file patient-report.php of the component POST Parameter Handler. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222661 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:covid_19_testing_management_system_project:covid_19_testing_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E31F2358-9DC3-4D46-8879-7489C133D59E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mhz2846415362/bug_report/blob/main/vendors/unyasoft/COVID%2019%20Testing%20Management%20System/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222661",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222661",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mhz2846415362/bug_report/blob/main/vendors/unyasoft/COVID%2019%20Testing%20Management%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1301",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-09T22:15:51.957",
      "lastModified" : "2024-11-21T07:38:52.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this issue is some unknown functionality of the file deleteorder.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222662 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:friendly_island_pizza_website_and_ordering_system_project:friendly_island_pizza_website_and_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FBF1DB-7E39-44AE-AF31-ED03B401CC3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/a-xsg/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222662",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222662",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/a-xsg/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1302",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-09T22:15:52.040",
      "lastModified" : "2024-11-21T07:38:52.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in SourceCodester File Tracker Manager System 1.0. This affects an unknown part of the file normal/borrow1.php. The manipulation of the argument id with the input 1\"><script>alert(1111)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222663."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:file_tracker_manager_system_project:file_tracker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79D663CC-270E-40FE-8823-BED16538A013"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/godownio/bug_report/blob/main/vendors/hemedy99/File%20Tracker%20Manager%20System/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222663",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222663",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/godownio/bug_report/blob/main/vendors/hemedy99/File%20Tracker%20Manager%20System/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1303",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-09T22:15:52.120",
      "lastModified" : "2024-11-21T07:38:52.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-222683."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ucms_project:ucms:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED914EC-C479-4D5F-8322-2241E409AECC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yztale/taley/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222683",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222683",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/yztale/taley/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20049",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-09T22:15:52.200",
      "lastModified" : "2024-11-21T07:40:26.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause a line card to reset, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of malformed BFD packets that are received on line cards where the BFD hardware offload feature is enabled. An attacker could exploit this vulnerability by sending a crafted IPv4 BFD packet to an affected device. A successful exploit could allow the attacker to cause line card exceptions or a hard reset, resulting in loss of traffic over that line card while the line card reloads."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-805"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.5.3",
            "matchCriteriaId" : "873225C3-D2D1-41C0-9C75-016E53A7BBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6",
            "versionEndExcluding" : "7.6.2",
            "matchCriteriaId" : "864E90A6-B93D-4213-85D8-A2D847848A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C8039EF-44D6-4C19-A3B3-37B75FB8D640"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000v-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB91BE23-C710-473F-8E43-0E0DE760F8AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324C97E6-1810-404F-9F45-6240F99FF039"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EB55BB-41B7-40A1-B6F5-142FE8AB4C16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433F4A82-04A4-4EAA-8C19-F7581DCD8D29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9901:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5E60AB-94FF-448A-89D8-5D2197E21C74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91474DBC-FB31-4DDF-96C5-311FA1D53A74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9903:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA241214-2F05-4360-9B50-385355E29CF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9904:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93212A4-50AB-42E7-89A4-5FBBAEA050C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9906:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA53A61-98B3-458C-8893-61CD7D6B1E48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F396564E-B477-4A27-A189-CEB737552E25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9912:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5445CC54-ACFB-4070-AF26-F91FEAA85181"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7AA58E5-D7E1-48CF-93FF-C60EB85B2BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bfd-XmRescbT",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bfd-XmRescbT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20064",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-09T22:15:52.277",
      "lastModified" : "2024-11-21T07:40:28.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the GRand Unified Bootloader (GRUB) for Cisco IOS XR Software could allow an unauthenticated attacker with physical access to the device to view sensitive files on the console using the GRUB bootloader command line. This vulnerability is due to the inclusion of unnecessary commands within the GRUB environment that allow sensitive files to be viewed. An attacker could exploit this vulnerability by being connected to the console port of the Cisco IOS XR device when the device is power-cycled. A successful exploit could allow the attacker to view sensitive files that could be used to conduct additional attacks against the device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.9.1",
            "matchCriteriaId" : "A8E6CEEB-0908-4884-A51E-000000DE5E92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000v-v2:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "FAE7AE4D-73A6-4179-80DA-2219563928E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "E9B8E1A6-A438-441D-ADA2-BE2BF837EAA9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "BB7DD32E-B22D-4392-B255-5C3F9CD39F3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "915D9708-E3AC-447A-A67C-815A8E282A42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9901:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "E7D9C475-6E5D-4AE9-A8D4-5B023C128A46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9902:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0FF7BDEE-8351-4CE3-BEAD-42C8767E0BF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9903:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "A5266F35-6886-4CF1-81DB-25626A0A26A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9904:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "0FB63566-D9F5-4A36-87E2-AC87ADB9DE6C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9906:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "910A1686-5B13-4D37-9C1F-2F0073D57E5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9910:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "430F0546-C2E9-41EE-8A8E-1C63945160F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9912:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "E1D3885B-7BEC-49DA-AE56-0DA18117C9E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9922:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "1496BE0A-B0BA-48BC-A476-A85A6D62EA50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ios_xrv_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE98C3E-67E2-43A3-AEA9-1575F2B93A78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_1001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6E0FBE-70B7-413C-8943-39BEFE050298"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_1002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AE5FB0-D9A6-4EBE-9F7F-243299AE918B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_1004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C9AAF8-4C5B-4EF5-B575-8235F3C54BCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.6.1",
            "matchCriteriaId" : "B25F4932-6940-4934-B110-577417B93948"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nc57-18dd-se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98728BD8-C11B-413D-8C8A-052661A608AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nc57-24dd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B61EB0-E121-4899-9504-269CE4E7E3EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nc57-36h-se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6811F99A-F96F-4B26-AF68-DC1A8C3B65E0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nc57-36h6d-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560B88A5-3716-43AB-A094-063293EF6509"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7AE6C1-B7C6-4056-9719-B5CFF71970AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_540_fronthaul:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C17E4B-1B14-42F2-BCE6-2D5020625382"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5501:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A972EFE-4F7E-4BFC-8631-66A2D16B74A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5501-se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B254955-C485-45D7-A19B-E78CE1D997AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5502:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F72AEF0-EE70-40F8-B52B-1390820B87BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5502-se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C7B71A-2559-4E90-BAAA-C6FAAFE35FC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D21B01-A754-474F-8E46-14D733AB307E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5516:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D6424C-972F-459C-B8F7-04FFD9F541BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_560-4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB01E968-E838-4D3C-B603-BF7E4E0F8A2C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_560-7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08864A59-0840-4407-8D30-9CE34BAF05E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_57b1-5dse-sys:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13EEDD1C-25BC-4AFA-AF60-66DE36927528"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_57b1-6d24-sys:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD3B06B-864E-4A35-B0C3-1654390022D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_57c1-48q6-sys:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1B4F37-5AAA-4F40-8865-226289CB5CEB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_57c3-mod-sys:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355F78C3-C07F-48C3-9B6E-55714EAA7331"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_57c3-mods-sys:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98F06B5D-6CE8-42C3-8760-89B4EF1FFC21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.7.1",
            "matchCriteriaId" : "C3FBC1F6-F523-485A-A466-B6DBA15E6537"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A8C028-107B-4410-BCC6-5BCB8DB63603"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA13FE67-F4AE-46DF-921B-3FB91BDF742B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5011:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98622F14-CC47-45E0-85E4-A7243309487C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C15E168-11DA-4219-B689-78BC48935263"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "523058BF-DE14-4FAD-8A67-C8CA795032D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-load-infodisc-9rdOr5Fq",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-load-infodisc-9rdOr5Fq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1307",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-10T01:15:11.927",
      "lastModified" : "2024-11-21T07:38:53.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.13",
            "matchCriteriaId" : "8DC712DE-241F-47E2-A4C3-CF2A94C11049"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e186548391219ab23",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e186548391219ab23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-10T02:15:58.403",
      "lastModified" : "2025-02-28T17:15:14.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:5.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E5C30E-2343-42D6-B6FA-C50BCFA549AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/radareorg/radare2/commit/a15067a8eaa836bcc24b0882712c14d1baa66509",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/radareorg/radare2/issues/21363",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/radareorg/radare2/commit/a15067a8eaa836bcc24b0882712c14d1baa66509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/radareorg/radare2/issues/21363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-10T02:15:58.457",
      "lastModified" : "2025-02-28T17:15:14.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webassembly:webassembly:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E65BCD25-B1DD-43CE-9198-810D9F62B81C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WebAssembly/wabt/issues/1938",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/WebAssembly/wabt/issues/1992",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/WebAssembly/wabt/issues/1938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/WebAssembly/wabt/issues/1992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-10T02:15:58.507",
      "lastModified" : "2024-11-21T07:52:21.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webassembly:webassembly:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E65BCD25-B1DD-43CE-9198-810D9F62B81C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WebAssembly/wabt/issues/1984",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OSFFCKXUQ5PAC5UVXY7N6HEHVQ3AC2RG/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/WebAssembly/wabt/issues/1984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OSFFCKXUQ5PAC5UVXY7N6HEHVQ3AC2RG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-10T02:15:58.553",
      "lastModified" : "2024-11-21T07:52:21.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webassembly:webassembly:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E65BCD25-B1DD-43CE-9198-810D9F62B81C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WebAssembly/wabt/issues/1989",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/WebAssembly/wabt/issues/1989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-10T02:15:58.600",
      "lastModified" : "2025-02-28T22:15:38.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webassembly:wabt:1.0.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C524E018-FAA2-4A8D-B861-6ACE6A675FEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WebAssembly/wabt/issues/1990",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/WebAssembly/wabt/issues/1990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1091",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-10T08:15:09.610",
      "lastModified" : "2024-11-21T07:38:26.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection.This issue affects Licensed Warehousing Automation System: through 2023.1.01.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alpatateknoloji:licensed_warehousing_automation_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2023.1.01",
            "matchCriteriaId" : "CC8AF88B-9181-49BD-9B41-DB1DFC170984"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0139",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1308",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-10T08:15:09.997",
      "lastModified" : "2024-11-21T07:38:53.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/adminlog.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222696."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_graduate_tracer_system_project:online_graduate_tracer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9A6FC0-9440-489D-AD8D-3FF732389484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gtest1112/111/blob/main/sqli-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222696",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222696",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gtest1112/111/blob/main/sqli-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1309",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-10T08:15:10.123",
      "lastModified" : "2024-11-21T07:38:53.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Online Graduate Tracer System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/search_it.php. The manipulation of the argument input leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222697 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_graduate_tracer_system_project:online_graduate_tracer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9A6FC0-9440-489D-AD8D-3FF732389484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gtest1112/111/blob/main/sqli-2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222697",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222697",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gtest1112/111/blob/main/sqli-2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1310",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-10T08:15:10.300",
      "lastModified" : "2024-11-21T07:38:53.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file admin/prof.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222698 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_graduate_tracer_system_project:online_graduate_tracer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9A6FC0-9440-489D-AD8D-3FF732389484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gtest1112/111/blob/main/sqli-3.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222698",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222698",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gtest1112/111/blob/main/sqli-3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1311",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-10T08:15:10.407",
      "lastModified" : "2024-11-21T07:38:53.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. This affects an unknown part of the file large.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222699."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:friendly_island_pizza_website_and_ordering_system_project:friendly_island_pizza_website_and_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FBF1DB-7E39-44AE-AF31-ED03B401CC3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tangtangtang123456/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222699",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222699",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tangtangtang123456/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0083",
      "sourceIdentifier" : "scy@openharmony.io",
      "published" : "2023-03-10T11:15:11.117",
      "lastModified" : "2024-11-21T07:36:31.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, \n\nOpenHarmony-v3.0.7 and prior versions\n\nhas an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "scy@openharmony.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "scy@openharmony.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openatom:openharmony:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndIncluding" : "3.0.7",
            "matchCriteriaId" : "A6890018-CA05-41A8-B061-19B45BFD5281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndIncluding" : "3.1.5",
            "matchCriteriaId" : "CD89B217-1A7D-485D-B647-5C666FBA5D46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md",
        "source" : "scy@openharmony.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1312",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-10T11:15:12.017",
      "lastModified" : "2024-11-21T07:38:54.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.19",
            "matchCriteriaId" : "9F355AEC-329F-43D1-A3D7-44C2481A1999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/d35d0712858f24d0ec96ddfd4cbe82ff4b5a5fbb",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/2a64a32d-b1cc-4def-91da-18040d59f356",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/d35d0712858f24d0ec96ddfd4cbe82ff4b5a5fbb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/2a64a32d-b1cc-4def-91da-18040d59f356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22301",
      "sourceIdentifier" : "scy@openharmony.io",
      "published" : "2023-03-10T11:15:12.127",
      "lastModified" : "2024-11-21T07:44:29.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel subsystem hmdfs within OpenHarmony-v3.1.5 and prior versions has an \n\narbitrary memory accessing vulnerability which network attackers can launch a remote attack to obtain kernel memory data of the target system.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "scy@openharmony.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "scy@openharmony.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndIncluding" : "3.1.5",
            "matchCriteriaId" : "CD89B217-1A7D-485D-B647-5C666FBA5D46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md",
        "source" : "scy@openharmony.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22436",
      "sourceIdentifier" : "scy@openharmony.io",
      "published" : "2023-03-10T11:15:12.220",
      "lastModified" : "2024-11-21T07:44:48.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an \n\nUAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "scy@openharmony.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "scy@openharmony.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndIncluding" : "3.1.5",
            "matchCriteriaId" : "CD89B217-1A7D-485D-B647-5C666FBA5D46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md",
        "source" : "scy@openharmony.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24465",
      "sourceIdentifier" : "scy@openharmony.io",
      "published" : "2023-03-10T11:15:12.300",
      "lastModified" : "2024-11-21T07:47:54.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions\n\nhas a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause the current application to crash.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "scy@openharmony.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "scy@openharmony.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openatom:openharmony:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndIncluding" : "3.0.7",
            "matchCriteriaId" : "A6890018-CA05-41A8-B061-19B45BFD5281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndIncluding" : "3.1.4",
            "matchCriteriaId" : "9346515D-01CC-45A7-8230-E40B8EA89ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md",
        "source" : "scy@openharmony.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25947",
      "sourceIdentifier" : "scy@openharmony.io",
      "published" : "2023-03-10T11:15:12.377",
      "lastModified" : "2024-11-21T07:50:29.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when installing a malicious HAP package.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "scy@openharmony.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "scy@openharmony.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndIncluding" : "3.1.4",
            "matchCriteriaId" : "9346515D-01CC-45A7-8230-E40B8EA89ADF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md",
        "source" : "scy@openharmony.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1015",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-10T12:15:21.577",
      "lastModified" : "2023-11-07T04:02:13.537",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1313",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-10T12:15:21.633",
      "lastModified" : "2024-11-21T07:38:54.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:agentejo:cockpit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "481FCD50-ECE6-4DCF-8BD2-7BF0AF8D692C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cockpit-hq/cockpit/commit/becca806c7071ecc732521bb5ad0bb9c64299592",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f73eef49-004f-4b3b-9717-90525e65ba61",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cockpit-hq/cockpit/commit/becca806c7071ecc732521bb5ad0bb9c64299592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f73eef49-004f-4b3b-9717-90525e65ba61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-10T13:15:11.033",
      "lastModified" : "2025-02-28T16:15:36.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \\controller\\auth\\Auth.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:funadmin:funadmin:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC800090-6420-4971-831D-1E77A18BD45E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/funadmin/funadmin/issues/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/funadmin/funadmin/issues/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26464",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-10T14:15:10.453",
      "lastModified" : "2025-02-13T17:16:12.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNSUPPORTED WHEN ASSIGNED **\n\nWhen using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a logging entry involving a specially-crafted (ie, deeply nested) \nhashmap or hashtable (depending on which logging component is in use) to be processed could exhaust the available memory in the virtual machine and achieve Denial of Service when the object is deserialized.\n\nThis issue affects Apache Log4j before 2. Affected users are recommended to update to Log4j 2.x.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.4",
            "versionEndExcluding" : "2.0",
            "matchCriteriaId" : "CA680396-534B-4D0E-8F7F-F504B3E032A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/wkx6grrcjkh86crr49p4blc1v1nflj3t",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230505-0008/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread/wkx6grrcjkh86crr49p4blc1v1nflj3t",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230505-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0746",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2023-03-10T16:15:10.527",
      "lastModified" : "2024-11-21T07:37:44.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gigamon:gigavue-os:5.0.202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3072EF66-FA32-4E00-9E75-AFDA86105603"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe-cert.es/en/early-warning/ics-advisories/xss-vulnerability-gigavue-fm",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.incibe-cert.es/en/early-warning/ics-advisories/xss-vulnerability-gigavue-fm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1315",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-10T16:15:10.623",
      "lastModified" : "2024-11-21T07:38:54.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enhancesoft:osticket:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.6",
            "matchCriteriaId" : "2B613AD0-4A4B-4AE9-8971-66464AEE67B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/osticket/osticket/commit/ec6043935b4e30b5c0dfa544e256717182808a2e",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/70a7fd8c-7e6f-4a43-9f8c-163b8967b16e",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/osticket/osticket/commit/ec6043935b4e30b5c0dfa544e256717182808a2e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/70a7fd8c-7e6f-4a43-9f8c-163b8967b16e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1316",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-10T16:15:10.697",
      "lastModified" : "2024-11-21T07:38:54.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enhancesoft:osticket:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.6",
            "matchCriteriaId" : "2B613AD0-4A4B-4AE9-8971-66464AEE67B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/osticket/osticket/commit/091ddba965132d26bdbeb004fcc44bd8fd056b71",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/c6353bab-c382-47f6-937b-56d253f2e8d3",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/osticket/osticket/commit/091ddba965132d26bdbeb004fcc44bd8fd056b71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/c6353bab-c382-47f6-937b-56d253f2e8d3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1317",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-10T16:15:10.777",
      "lastModified" : "2024-11-21T07:38:54.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enhancesoft:osticket:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.6",
            "matchCriteriaId" : "2B613AD0-4A4B-4AE9-8971-66464AEE67B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/osticket/osticket/commit/daee20fdd8ac926d9aee700b201ac2cb35d448ca",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/c3e27af2-358b-490b-9baf-e451663e4e5f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/osticket/osticket/commit/daee20fdd8ac926d9aee700b201ac2cb35d448ca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/c3e27af2-358b-490b-9baf-e451663e4e5f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1318",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-10T16:15:10.850",
      "lastModified" : "2024-11-21T07:38:54.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enhancesoft:osticket:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.6",
            "matchCriteriaId" : "2B613AD0-4A4B-4AE9-8971-66464AEE67B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/osticket/osticket/commit/343a2b47e164dd9090a3c9477ef273f0efa16a7d",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e58b38e0-4897-4bb0-84e8-a7ad8efab338",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/osticket/osticket/commit/343a2b47e164dd9090a3c9477ef273f0efa16a7d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e58b38e0-4897-4bb0-84e8-a7ad8efab338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1319",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-10T16:15:10.927",
      "lastModified" : "2024-11-21T07:38:54.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enhancesoft:osticket:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.6",
            "matchCriteriaId" : "2B613AD0-4A4B-4AE9-8971-66464AEE67B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/osticket/osticket/commit/9fb01bc12fbae06aa2c2b4d1bc9b4a08db4bb3e0",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a822067a-d90d-4c3e-b9ef-9b2a5c2bc97f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/osticket/osticket/commit/9fb01bc12fbae06aa2c2b4d1bc9b4a08db4bb3e0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a822067a-d90d-4c3e-b9ef-9b2a5c2bc97f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1320",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-10T16:15:11.010",
      "lastModified" : "2024-11-21T07:38:55.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enhancesoft:osticket:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.6",
            "matchCriteriaId" : "2B613AD0-4A4B-4AE9-8971-66464AEE67B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/osticket/osticket/commit/86f9693dc64ed54220ed6c10e13e824ca4f6aacf",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/c2bb34ac-452d-4624-a1b9-c5b54f52f0cd",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/osticket/osticket/commit/86f9693dc64ed54220ed6c10e13e824ca4f6aacf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/c2bb34ac-452d-4624-a1b9-c5b54f52f0cd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1321",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-10T16:15:11.090",
      "lastModified" : "2024-11-21T07:38:55.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in lmxcms 1.41 and classified as critical. Affected by this vulnerability is the function update of the file AcquisiAction.class.php. The manipulation of the argument id with the input -1 and updatexml(0,concat(0x7e,user()),1)# leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222727."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lmxcms:lmxcms:1.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD77AA-E05B-4141-AF77-E5F1AAA215EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.222727",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222727",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1322",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-10T16:15:11.173",
      "lastModified" : "2024-11-21T07:38:55.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in lmxcms 1.41 and classified as critical. Affected by this issue is the function reply of the file BookAction.class.php. The manipulation of the argument id with the input 1) and updatexml(0,concat(0x7e,user()),1)# leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222728."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lmxcms:lmxcms:1.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBD77AA-E05B-4141-AF77-E5F1AAA215EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.222728",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222728",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-10T16:15:11.277",
      "lastModified" : "2025-02-28T22:15:38.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jellyfin:jellyfin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.7.7",
            "matchCriteriaId" : "185BA153-EC02-4114-BE54-12D425BB6F75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jellyfin.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/5c067e0538a0b712dc3d59bd4b9a5952",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/jellyfin/jellyfin",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://notes.sjtu.edu.cn/s/yJ9lPk09a",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://jellyfin.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/5c067e0538a0b712dc3d59bd4b9a5952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/jellyfin/jellyfin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://notes.sjtu.edu.cn/s/yJ9lPk09a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-10T16:15:11.343",
      "lastModified" : "2024-11-21T07:52:24.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:halo:halo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "E45B38FE-B839-42E1-A02A-635E6AC8F1D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://halo.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/a1a0d81b1173d0d00de8f4e7958dd867",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/halo-dev/halo",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://notes.sjtu.edu.cn/s/s5oEvs-p5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://halo.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/a1a0d81b1173d0d00de8f4e7958dd867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/halo-dev/halo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://notes.sjtu.edu.cn/s/s5oEvs-p5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1328",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-10T17:15:09.973",
      "lastModified" : "2024-11-21T07:38:55.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Guizhou 115cms 4.2. It has been classified as problematic. Affected is an unknown function of the file /admin/content/index. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222738 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:115cms:115cms:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C151036-4780-49DF-9D04-08B99EB9BB3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/niukongkong/asdasd/blob/master/115cmsArbitrary%20file%20upload%20vulnerability.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222738",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222738",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/niukongkong/asdasd/blob/master/115cmsArbitrary%20file%20upload%20vulnerability.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-10T17:15:10.160",
      "lastModified" : "2025-02-27T21:15:18.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding the Service Area List."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1928760C-4FC4-45B0-84FF-C1105CD1DD2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB410A6D-642B-49AE-8B1C-EADA953A84DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1A7B09-9031-4E54-A24F-3237C054166B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC68046-2F08-40D1-B158-89D8D9263541"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C0D9AC-BD23-48C9-83E7-301DEC06E583"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72ADEBB-ED72-4A5B-BB27-95EDE43F8116"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B60F97-1320-44F5-970C-BBA29F375524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72419735-076A-4E72-869F-0C7D801371C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F66A096-7BA3-47D6-98F4-879C3A4C1FFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE202894-D48A-4B9E-B3BD-28529967A0B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_w920_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ADED27-EDAF-4FB3-8CB2-AE5F59B93641"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_w920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF79654-E5C6-4DFF-B33A-A78571CD300C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171387/Shannon-Baseband-NrmmMsgCodec-Intra-Object-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=2398",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171387/Shannon-Baseband-NrmmMsgCodec-Intra-Object-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=2398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://project-zero.issues.chromium.org/issues/42451537",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1205",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-10T18:15:16.623",
      "lastModified" : "2025-02-28T17:15:13.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.10.94",
            "matchCriteriaId" : "94C6B573-5355-47EE-A262-E15AE88F8DDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC92B49-60E0-4554-BE7F-D2B5D6EF6454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tenable.com/security/research/tra-2023-9",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tenable.com/security/research/tra-2023-9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27850",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-10T18:15:16.900",
      "lastModified" : "2025-02-28T17:15:15.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that allows users with access to this feature to access arbitrary files on the device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.10.94",
            "matchCriteriaId" : "94C6B573-5355-47EE-A262-E15AE88F8DDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC92B49-60E0-4554-BE7F-D2B5D6EF6454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tenable.com/security/research/tra-2023-9",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tenable.com/security/research/tra-2023-9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27851",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-10T18:15:17.080",
      "lastModified" : "2025-02-27T22:15:36.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute arbitrary code on the device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.10.94",
            "matchCriteriaId" : "94C6B573-5355-47EE-A262-E15AE88F8DDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC92B49-60E0-4554-BE7F-D2B5D6EF6454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tenable.com/security/research/tra-2023-9",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tenable.com/security/research/tra-2023-9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27852",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-10T18:15:17.210",
      "lastModified" : "2025-02-27T21:15:20.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to execute arbitrary code on the device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.10.94",
            "matchCriteriaId" : "94C6B573-5355-47EE-A262-E15AE88F8DDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC92B49-60E0-4554-BE7F-D2B5D6EF6454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tenable.com/security/research/tra-2023-9",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tenable.com/security/research/tra-2023-9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27853",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-10T18:15:17.383",
      "lastModified" : "2025-02-27T22:15:36.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.10.94",
            "matchCriteriaId" : "94C6B573-5355-47EE-A262-E15AE88F8DDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC92B49-60E0-4554-BE7F-D2B5D6EF6454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tenable.com/security/research/tra-2023-9",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tenable.com/security/research/tra-2023-9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1333",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-10T20:15:10.060",
      "lastModified" : "2026-04-08T17:16:51.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the clear_page_cache function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to delete the plugin's cache."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "4F983CE2-3C45-44D6-9682-5F145C0089EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2cba74f7-7183-4297-8f04-4818c01358ef?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/2cba74f7-7183-4297-8f04-4818c01358ef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1334",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-10T20:15:10.157",
      "lastModified" : "2026-04-08T19:18:05.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized cache modification due to a missing capability check on the queue_posts function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to modify the plugin's cache."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "4F983CE2-3C45-44D6-9682-5F145C0089EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f3108ef4-f889-4ae1-b86f-cedf46dcea19?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f3108ef4-f889-4ae1-b86f-cedf46dcea19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1335",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-10T20:15:10.247",
      "lastModified" : "2026-04-08T19:18:05.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the ucss_connect function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to connect a new license key to the site."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "4F983CE2-3C45-44D6-9682-5F145C0089EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/eba48c51-87d9-4e7e-b4c1-0205cd96d033?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/eba48c51-87d9-4e7e-b4c1-0205cd96d033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1336",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-10T20:15:10.333",
      "lastModified" : "2026-04-08T19:18:05.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check on the ajax_deactivate function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to disable caching."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "4F983CE2-3C45-44D6-9682-5F145C0089EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b2296800-93d6-48fa-aa09-3d28fa6371d7?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b2296800-93d6-48fa-aa09-3d28fa6371d7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1337",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-10T20:15:10.420",
      "lastModified" : "2026-04-08T19:18:05.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the clear_uucss_logs function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to delete plugin log files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "4F983CE2-3C45-44D6-9682-5F145C0089EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a52325f9-51b5-469c-865e-73a22002d46f?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a52325f9-51b5-469c-865e-73a22002d46f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1338",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-10T20:15:10.503",
      "lastModified" : "2026-04-08T17:16:52.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized cache modification due to a missing capability check on the attach_rule function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to modify cache rules."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "4F983CE2-3C45-44D6-9682-5F145C0089EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1bb55b22-a0d0-424f-8e4f-57d3f239c149?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1bb55b22-a0d0-424f-8e4f-57d3f239c149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1339",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-10T20:15:10.587",
      "lastModified" : "2026-04-08T17:16:52.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check on the uucss_update_rule function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to update caching rules."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "4F983CE2-3C45-44D6-9682-5F145C0089EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/19f126f8-1d59-44b5-8e0e-c37f1fbedf5a?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/19f126f8-1d59-44b5-8e0e-c37f1fbedf5a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1340",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-10T20:15:10.677",
      "lastModified" : "2026-04-08T18:17:53.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the clear_uucss_logs function. This makes it possible for unauthenticated attackers to clear plugin logs via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "4F983CE2-3C45-44D6-9682-5F145C0089EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/488e26e2-d4d7-4036-a672-53c2d4c9d39b?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/488e26e2-d4d7-4036-a672-53c2d4c9d39b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1341",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-10T20:15:10.760",
      "lastModified" : "2026-04-08T19:18:05.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the ajax_deactivate function. This makes it possible for unauthenticated attackers to turn off caching via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "4F983CE2-3C45-44D6-9682-5F145C0089EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d95b01c3-5db4-40ac-8787-0db58a9cc3a6?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d95b01c3-5db4-40ac-8787-0db58a9cc3a6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1342",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-10T20:15:10.853",
      "lastModified" : "2026-04-08T18:17:53.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the ucss_connect function. This makes it possible for unauthenticated attackers to connect the site to a new license key via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "4F983CE2-3C45-44D6-9682-5F145C0089EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7c66894a-8d0f-4946-ae4d-bffd35f3ffb7?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/7c66894a-8d0f-4946-ae4d-bffd35f3ffb7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1343",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-10T20:15:10.947",
      "lastModified" : "2026-04-08T17:16:53.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the attach_rule function. This makes it possible for unauthenticated attackers to modify the plugin's cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "4F983CE2-3C45-44D6-9682-5F145C0089EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/11f74b86-a050-4247-b310-045bf48fd4bd?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/11f74b86-a050-4247-b310-045bf48fd4bd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1344",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-10T20:15:11.037",
      "lastModified" : "2026-04-08T17:16:53.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the uucss_update_rule function. This makes it possible for unauthenticated attackers to modify the plugin's cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "4F983CE2-3C45-44D6-9682-5F145C0089EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/263153c9-61c5-4df4-803b-8d274e2a5e35?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/263153c9-61c5-4df4-803b-8d274e2a5e35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1345",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-10T20:15:11.120",
      "lastModified" : "2026-04-08T19:18:06.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the queue_posts function. This makes it possible for unauthenticated attackers to modify the plugin's cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "4F983CE2-3C45-44D6-9682-5F145C0089EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d16fa590-1409-4f04-b8b7-0cce17412a5f?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/d16fa590-1409-4f04-b8b7-0cce17412a5f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1346",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-10T20:15:11.203",
      "lastModified" : "2026-04-08T19:18:06.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the clear_page_cache function. This makes it possible for unauthenticated attackers to clear the plugin's cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "4F983CE2-3C45-44D6-9682-5F145C0089EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b228f8b1-dd68-41ee-bc49-6a62e5267233?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2877726/unusedcss/trunk/includes/modules/unused-css/UnusedCSS_Admin.php?contextall=1&old=2847136&old_path=%2Funusedcss%2Ftrunk%2Fincludes%2Fmodules%2Funused-css%2FUnusedCSS_Admin.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b228f8b1-dd68-41ee-bc49-6a62e5267233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0193",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-03-10T21:15:14.410",
      "lastModified" : "2024-11-21T07:36:43.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nNVIDIA CUDA Toolkit SDK contains a vulnerability in cuobjdump, where a local user running the tool against a malicious binary may cause an out-of-bounds read, which may result in a limited denial of service and limited information disclosure.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1",
            "matchCriteriaId" : "89540470-585C-46D3-A345-A92D145F870F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA79AC0-A0CC-4EE6-AEF5-9B8C8EA2C9F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5446",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1173",
      "sourceIdentifier" : "psirt@servicenow.com",
      "published" : "2023-03-10T21:15:14.497",
      "lastModified" : "2023-11-07T04:02:44.153",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1198",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-10T21:15:14.550",
      "lastModified" : "2024-11-21T07:38:39.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saysis Starcities allows SQL Injection.This issue affects Starcities: through 1.3.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saysis:starcities:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "3FCCB7DB-20F6-4DB0-AF7A-C6A5A28C364E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0140",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1201",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-03-10T21:15:14.627",
      "lastModified" : "2024-11-21T07:38:39.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the data it contains.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022.3.13",
            "matchCriteriaId" : "37456569-4E43-4C88-A658-E2B0E3C7A241"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0005",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1203",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-03-10T21:15:14.680",
      "lastModified" : "2025-03-06T15:15:13.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Module 2022.3.1.5 and earlier allows an authenticated user to access sensitive data on entries that were edited using the affected submodule.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022.3.1.6",
            "matchCriteriaId" : "F4785D08-0B8C-4D69-8B37-8DB6C11D5CF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0004",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1246",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-10T21:15:14.737",
      "lastModified" : "2024-11-21T07:38:45.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations.This issue affects Starcities: through 1.3.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saysis:starcities:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "3FCCB7DB-20F6-4DB0-AF7A-C6A5A28C364E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0140",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24975",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-10T21:15:14.817",
      "lastModified" : "2024-11-21T07:48:51.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nIBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 247030.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_symphony:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E5C3DF-AA29-4E66-8C36-13942F51AB11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247030",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6959369",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6959369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25143",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2023-03-10T21:15:14.883",
      "lastModified" : "2025-03-05T15:15:12.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state on affected products."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:*:*:*",
            "versionEndExcluding" : "14.0.11960",
            "matchCriteriaId" : "A8E79EB0-CB74-483B-BC92-7FBAFF53F840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:-:*:*:*:*:*:*",
            "matchCriteriaId" : "219071B9-2D31-4E7F-A0AD-769FE0243B35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000292209",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000292209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25144",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2023-03-10T21:15:14.943",
      "lastModified" : "2025-03-06T16:15:40.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary directories with arbitrary ownership."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:*:*:*",
            "versionEndExcluding" : "14.0.11960",
            "matchCriteriaId" : "A8E79EB0-CB74-483B-BC92-7FBAFF53F840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:-:*:*:*:*:*:*",
            "matchCriteriaId" : "219071B9-2D31-4E7F-A0AD-769FE0243B35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000292209",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-171/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000292209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-171/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25145",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2023-03-10T21:15:15.010",
      "lastModified" : "2025-03-05T21:15:16.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations.\r\n\r\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:*:*:*",
            "versionEndExcluding" : "14.0.11960",
            "matchCriteriaId" : "A8E79EB0-CB74-483B-BC92-7FBAFF53F840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:-:*:*:*:*:*:*",
            "matchCriteriaId" : "219071B9-2D31-4E7F-A0AD-769FE0243B35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000292209",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-174/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000292209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-174/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25146",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2023-03-10T21:15:15.140",
      "lastModified" : "2025-03-05T21:15:17.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete the original folder and replace with a junction to an arbitrary location, ultimately leading to an arbitrary file dropped to an arbitrary location.\r\n\r\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:*:*:*",
            "versionEndExcluding" : "14.0.11960",
            "matchCriteriaId" : "A8E79EB0-CB74-483B-BC92-7FBAFF53F840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:-:*:*:*:*:*:*",
            "matchCriteriaId" : "219071B9-2D31-4E7F-A0AD-769FE0243B35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000292209",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-172/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000292209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-172/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25147",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2023-03-10T21:15:15.203",
      "lastModified" : "2025-03-05T21:15:17.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypass the protection by using a specifically crafted DLL during a specific update process.\r\n\r\nPlease note: an attacker must first obtain administrative access on the target system via another method in order to exploit this."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:*:*:*",
            "versionEndExcluding" : "14.0.11960",
            "matchCriteriaId" : "A8E79EB0-CB74-483B-BC92-7FBAFF53F840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:-:*:*:*:*:*:*",
            "matchCriteriaId" : "219071B9-2D31-4E7F-A0AD-769FE0243B35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000292209",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000292209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25148",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2023-03-10T21:15:15.257",
      "lastModified" : "2025-03-05T21:15:17.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file into a pseudo-symlink, allowing privilege escalation on affected installations.\r\n\r\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:*:*:*",
            "versionEndExcluding" : "14.0.11960",
            "matchCriteriaId" : "A8E79EB0-CB74-483B-BC92-7FBAFF53F840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:-:*:*:*:*:*:*",
            "matchCriteriaId" : "219071B9-2D31-4E7F-A0AD-769FE0243B35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000292209",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-173/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000292209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-173/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27577",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-10T21:15:15.310",
      "lastModified" : "2024-11-21T07:53:11.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "flarum is a forum software package for building communities. In versions prior to 1.7.0 an admin account which has already been compromised by an attacker may use a vulnerability in the `LESS` parser which can be exploited to read sensitive files on the server through the use of path traversal techniques. An attacker can achieve this by providing an absolute path to a sensitive file in the custom `LESS` setting, which the `LESS` parser will then read. For example, an attacker could use the following code to read the contents of the `/etc/passwd` file on a linux machine. The scope of what files are vulnerable will depend on the permissions given to the running flarum process. The vulnerability has been addressed in version `1.7`. Users should upgrade to this version to mitigate the vulnerability. Users unable to upgrade may mitigate the vulnerability by ensuring that their admin accounts are secured with strong passwords and follow other best practices for account security. Additionally, users can limit the exposure of sensitive files on the server by implementing appropriate file permissions and access controls at the operating system level.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flarum:flarum:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.0",
            "matchCriteriaId" : "87988D96-AAF1-482C-8E83-8D15504CF1E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flarum/framework/commit/1761660c98ea5a3e9665fb8e6041d1f2ee62a444",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flarum/framework/security/advisories/GHSA-vhm8-wwrf-3gcw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/flarum/framework/commit/1761660c98ea5a3e9665fb8e6041d1f2ee62a444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flarum/framework/security/advisories/GHSA-vhm8-wwrf-3gcw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27898",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-03-10T21:15:15.403",
      "lastModified" : "2025-02-28T19:15:34.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.270 through 2.393 (both inclusive), LTS 2.277.1 through 2.375.3 (both inclusive) does not escape the Jenkins version a plugin depends on when rendering the error message stating its incompatibility with the current version of Jenkins, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide plugins to the configured update sites and have this message shown by Jenkins instances."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "2.270",
            "versionEndExcluding" : "2.394",
            "matchCriteriaId" : "C866B7BB-0E83-4962-BA8A-26132E657778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "2.277.1",
            "versionEndExcluding" : "2.375.4",
            "matchCriteriaId" : "FE2DDC0F-D71A-4825-A72E-CE59553415AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3037",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27899",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-03-10T21:15:15.460",
      "lastModified" : "2025-02-28T19:15:35.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a plugin for installation, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used, potentially resulting in arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.375.4",
            "matchCriteriaId" : "60A98B86-E66C-4703-9DDD-7BB66247067C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "2.394",
            "matchCriteriaId" : "57EF4F3C-05BE-4979-A92D-6B56EE5CD3FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2823",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27900",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-03-10T21:15:15.517",
      "lastModified" : "2025-02-28T19:15:35.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in hudson.util.MultipartFormDataParser, allowing attackers to trigger a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.375.4",
            "matchCriteriaId" : "60A98B86-E66C-4703-9DDD-7BB66247067C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "2.394",
            "matchCriteriaId" : "57EF4F3C-05BE-4979-A92D-6B56EE5CD3FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3030",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27901",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-03-10T21:15:15.573",
      "lastModified" : "2025-02-28T19:15:35.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in org.kohsuke.stapler.RequestImpl, allowing attackers to trigger a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.375.4",
            "matchCriteriaId" : "60A98B86-E66C-4703-9DDD-7BB66247067C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "2.394",
            "matchCriteriaId" : "57EF4F3C-05BE-4979-A92D-6B56EE5CD3FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3030",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27902",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-03-10T21:15:15.627",
      "lastModified" : "2025-02-28T19:15:35.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.393 and earlier, LTS 2.375.3 and earlier shows temporary directories related to job workspaces, which allows attackers with Item/Workspace permission to access their contents."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.375.4",
            "matchCriteriaId" : "60A98B86-E66C-4703-9DDD-7BB66247067C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "2.394",
            "matchCriteriaId" : "57EF4F3C-05BE-4979-A92D-6B56EE5CD3FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-1807",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-1807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27903",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-03-10T21:15:15.677",
      "lastModified" : "2025-02-28T19:15:35.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a file parameter through the CLI, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.375.4",
            "matchCriteriaId" : "60A98B86-E66C-4703-9DDD-7BB66247067C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "2.394",
            "matchCriteriaId" : "57EF4F3C-05BE-4979-A92D-6B56EE5CD3FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3058",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27904",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-03-10T21:15:15.733",
      "lastModified" : "2025-02-28T19:15:35.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.375.4",
            "matchCriteriaId" : "60A98B86-E66C-4703-9DDD-7BB66247067C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "2.394",
            "matchCriteriaId" : "57EF4F3C-05BE-4979-A92D-6B56EE5CD3FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2120",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27905",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-03-10T21:15:15.790",
      "lastModified" : "2025-02-28T19:15:36.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a plugin for hosting."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:update-center2:3.13:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "48A5CCD4-BC9A-4B7D-A8DE-19E4080D1369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:update-center2:3.14:*:*:*:*:jenkins:*:*",
            "matchCriteriaId" : "2E811E09-BC60-44DE-A84C-B2A76E2870ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3063",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-10T22:15:10.277",
      "lastModified" : "2025-02-27T19:15:47.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stored Cross-Site Scripting (XSS) vulnerability exists in AvantFAX 3.3.7. An authenticated low privilege user can inject arbitrary Javascript into their e-mail address which is executed when an administrator logs into AvantFAX to view the admin dashboard. This may result in stealing an administrator's session cookie and hijacking their session."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avantfax:avantfax:3.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93D621B-999D-4942-96F8-686531501233"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://avantfax.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/superkojiman/vulnerabilities/blob/master/AvantFAX-3.3.7/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://avantfax.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/superkojiman/vulnerabilities/blob/master/AvantFAX-3.3.7/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-10T22:15:10.327",
      "lastModified" : "2025-03-05T17:15:12.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Information Disclosure vulnerability exists in AvantFAX 3.3.7. Backups of the AvantFAX sent/received faxes, and database backups are stored using the current date as the filename and hosted on the web server without access controls."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avantfax:avantfax:3.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93D621B-999D-4942-96F8-686531501233"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://avantfax.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/superkojiman/vulnerabilities/blob/master/AvantFAX-3.3.7/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://avantfax.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/superkojiman/vulnerabilities/blob/master/AvantFAX-3.3.7/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/superkojiman/vulnerabilities/blob/master/AvantFAX-3.3.7/README.md",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-10T22:15:10.377",
      "lastModified" : "2025-03-04T22:15:35.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploading a specially crafted PHP file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avantfax:avantfax:3.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93D621B-999D-4942-96F8-686531501233"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://avantfax.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/superkojiman/vulnerabilities/blob/master/AvantFAX-3.3.7/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://avantfax.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/superkojiman/vulnerabilities/blob/master/AvantFAX-3.3.7/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23911",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-03-10T22:15:10.427",
      "lastModified" : "2024-11-21T07:47:05.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.0",
            "matchCriteriaId" : "2B1141C6-65B5-4FC0-8E0C-C8162E3FDD73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/1757663",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1757663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27530",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-03-10T22:15:10.497",
      "lastModified" : "2025-02-13T15:37:40.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "2.0.9.3",
            "matchCriteriaId" : "C1EDB027-19EA-4F3A-A3A1-46E03D679C7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "2.1.0",
            "versionEndExcluding" : "2.1.4.3",
            "matchCriteriaId" : "8ECC0192-9B71-4425-AE18-EDE8A7488392"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.6.3",
            "matchCriteriaId" : "FCBE71F2-9736-4E4D-8A71-2D1FF559A9F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.4.2",
            "matchCriteriaId" : "33317DE1-F0A7-4DB2-9F7C-20084C9035BD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.rubyonrails.org/t/cve-2023-27530-possible-dos-vulnerability-in-multipart-mime-parsing/82388",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00017.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20231208-0015/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5530",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://discuss.rubyonrails.org/t/cve-2023-27530-possible-dos-vulnerability-in-multipart-mime-parsing/82388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20231208-0015/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27532",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-03-10T22:15:10.557",
      "lastModified" : "2025-11-03T18:06:27.833",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "cisaExploitAdd" : "2023-08-22",
      "cisaActionDue" : "2023-09-12",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability",
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veeam:veeam_backup_\\&_replication:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1.1261",
            "matchCriteriaId" : "FCD9FAE2-4E62-41AC-85EC-5793FD30A3AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EC28D606-0A9B-46E5-A88C-8041357979DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:p20211123:*:*:*:*:*:*",
            "matchCriteriaId" : "8158D6BC-2041-4600-B935-AD928621D987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:p20211211:*:*:*:*:*:*",
            "matchCriteriaId" : "54A5147A-341A-4790-AAA8-DF2648423C50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veeam:veeam_backup_\\&_replication:11.0.1.1261:p20220302:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5A2E58-F9C3-4A65-A83B-C86C970A01D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veeam:veeam_backup_\\&_replication:12.0.0.1420:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CA570EC1-4A95-4AD3-8E8C-087769F95F02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.veeam.com/kb4424",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.veeam.com/kb4424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27532",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24999",
      "sourceIdentifier" : "security@hashicorp.com",
      "published" : "2023-03-11T00:15:09.410",
      "lastModified" : "2024-11-21T07:48:54.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle destroy endpoint to destroy the secret ID of any other role by providing the secret ID accessor. This vulnerability is fixed in Vault 1.13.0, 1.12.4, 1.11.8, 1.10.11 and above."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hashicorp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hashicorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "1.10.11",
            "matchCriteriaId" : "9F8302EA-93E3-4181-8616-04598ED0C598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "1.10.11",
            "matchCriteriaId" : "7C538086-CAAD-4E99-A250-2B51F7D4FA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.11.0",
            "versionEndExcluding" : "1.11.8",
            "matchCriteriaId" : "6B9B93DD-17A5-4230-AD7D-C1D96046A73D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.11.0",
            "versionEndExcluding" : "1.11.8",
            "matchCriteriaId" : "FC94042C-B42F-4F60-92E7-5ECF0F0ABFD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.4",
            "matchCriteriaId" : "90C9579E-35EE-4DCE-96F6-DF64B52BBDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.4",
            "matchCriteriaId" : "DE915EDC-95E7-4D29-AA3E-7D41108275F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-07-vault-fails-to-verify-if-approle-secretid-belongs-to-role-during-a-destroy-operation/51305",
        "source" : "security@hashicorp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230505-0001/",
        "source" : "security@hashicorp.com"
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-07-vault-fails-to-verify-if-approle-secretid-belongs-to-role-during-a-destroy-operation/51305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230505-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1349",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-11T09:15:09.910",
      "lastModified" : "2024-11-21T07:39:00.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in Hsycms 3.1. Affected by this issue is some unknown functionality of the file controller\\cate.php of the component Add Category Module. The manipulation of the argument title leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222842 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hsycms:hsycms:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "062A9465-2667-4A2D-99B7-8F312C751A70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yztale/hsycms/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222842",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222842",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/yztale/hsycms/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1350",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-11T09:15:10.197",
      "lastModified" : "2024-11-21T07:39:00.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_run of the file src/update.c of the component Feed Enrichment. The manipulation of the argument source with the input |date &gt;/tmp/bad-item-link.txt leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 8d8b5b963fa64c7a2122d1bbfbb0bed46e813e59. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-222848."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liferea_project:liferea:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.14.1",
            "matchCriteriaId" : "A6DAF5E1-033A-45DE-AEAB-2A72AFDC7814"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lwindolf/liferea/commit/8d8b5b963fa64c7a2122d1bbfbb0bed46e813e59",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222848",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222848",
        "source" : "cna@vuldb.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://github.com/lwindolf/liferea/commit/8d8b5b963fa64c7a2122d1bbfbb0bed46e813e59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1351",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-11T12:15:16.253",
      "lastModified" : "2024-11-21T07:39:00.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file cust_transac.php. The manipulation of the argument phonenumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222849 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:computer_parts_sales_and_inventory_system_project:computer_parts_sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA0F478-300D-4B7A-AD30-0965A74BE217"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chenxing0903/CveHub/blob/main/Computer-Parts-Sales-And-Inventory-System-Sql-Vulnerability.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222849",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222849",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chenxing0903/CveHub/blob/main/Computer-Parts-Sales-And-Inventory-System-Sql-Vulnerability.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1352",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-11T18:15:43.603",
      "lastModified" : "2024-11-21T07:39:00.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. This issue affects some unknown processing of the file /admin/login.php. The manipulation of the argument txtusername/txtpassword leads to sql injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222851."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:design_and_implementation_of_covid-19_directory_on_vaccination_system_project:design_and_implementation_of_covid-19_directory_on_vaccination_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49457C62-1FAA-4233-93C9-FC16C2A5F3C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20sql(6).pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222851",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222851",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20sql(6).pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.222851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1353",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-11T18:15:43.727",
      "lastModified" : "2024-11-21T07:39:00.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. Affected is an unknown function of the file verification.php. The manipulation of the argument txtvaccinationID leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222852."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:design_and_implementation_of_covid-19_directory_on_vaccination_system_project:design_and_implementation_of_covid-19_directory_on_vaccination_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49457C62-1FAA-4233-93C9-FC16C2A5F3C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20xss(1).pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222852",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.222852",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20xss(1).pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.222852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1354",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-11T18:15:43.817",
      "lastModified" : "2024-11-21T07:39:00.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file register.php. The manipulation of the argument txtfullname/txtage/txtaddress/txtphone leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222853 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:design_and_implementation_of_covid-19_directory_on_vaccination_system_project:design_and_implementation_of_covid-19_directory_on_vaccination_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49457C62-1FAA-4233-93C9-FC16C2A5F3C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20xss(2).pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222853",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.222853",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20xss(2).pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.222853",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1355",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-11T22:15:10.133",
      "lastModified" : "2024-11-21T07:39:01.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.1402",
            "matchCriteriaId" : "393C0746-487F-4B80-B53D-C28B95737769"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vim/vim/commit/d13dd30240e32071210f55b587182ff48757ea46",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/4d0a9615-d438-4f5c-8dd6-aa22f4b716d9",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/vim/vim/commit/d13dd30240e32071210f55b587182ff48757ea46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/4d0a9615-d438-4f5c-8dd6-aa22f4b716d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1357",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-12T08:15:09.597",
      "lastModified" : "2024-11-21T07:39:01.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation of the argument username/password with the input admin' or 1=1 -- leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222860."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_bakery_shop_management_system_project:simple_bakery_shop_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE3404F-FB56-4984-B018-3870C038612D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.222860",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222860",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1358",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-12T08:15:10.170",
      "lastModified" : "2024-11-21T07:39:01.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0. This affects an unknown part of the file /philosophy/admin/login.php of the component POST Parameter Handler. The manipulation of the argument user_email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222861 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gadget_works_online_ordering_system_project:gadget_works_online_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFA006A-2A38-4948-9F6E-487523293F52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/heitaoa999/bug_report/blob/main/vendors/janobe/Gadget%20Works%20Online%20Ordering%20System/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222861",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222861",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/heitaoa999/bug_report/blob/main/vendors/janobe/Gadget%20Works%20Online%20Ordering%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1359",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-12T08:15:10.273",
      "lastModified" : "2024-11-21T07:39:01.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Gadget Works Online Ordering System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /philosophy/admin/user/controller.php?action=add of the component Add New User. The manipulation of the argument U_NAME leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222862 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gadget_works_online_ordering_system_project:gadget_works_online_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFA006A-2A38-4948-9F6E-487523293F52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/heitaoa999/bug_report/blob/main/vendors/janobe/Gadget%20Works%20Online%20Ordering%20System/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222862",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222862",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/heitaoa999/bug_report/blob/main/vendors/janobe/Gadget%20Works%20Online%20Ordering%20System/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1360",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-12T09:15:10.183",
      "lastModified" : "2024-11-21T07:39:01.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Employee Payslip Generator with Sending Mail 1.2.0 and classified as critical. This issue affects some unknown processing of the file classes/Users.php?f=save of the component New User Creation. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222863."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:employee_payslip_generator_system_project:employee_payslip_generator_system:1.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF95621-CC8B-4BC7-AEBD-B3E43BBF25F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.0xgabe.com/?p=90",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222863",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222863",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.0xgabe.com/?p=90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T01:15:10.053",
      "lastModified" : "2025-02-27T20:15:37.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webpack.js:webpack:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.76.0",
            "matchCriteriaId" : "80CDA89B-B472-4603-9087-2047BD150025"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/webpack/webpack/compare/v5.75.0...v5.76.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://github.com/webpack/webpack/pull/16500",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AU7BOXTBK3KDYSWH67ASZ22TUIOZ3X5G/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PPSAXUTXBCCTAHTCX5BUR4YVP25XALQ3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2AFCM6FFE3LRYI6KNEQWKMXMQOBZQ2D/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/webpack/webpack/compare/v5.75.0...v5.76.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Product" ]
      }, {
        "url" : "https://github.com/webpack/webpack/pull/16500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AU7BOXTBK3KDYSWH67ASZ22TUIOZ3X5G/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PPSAXUTXBCCTAHTCX5BUR4YVP25XALQ3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2AFCM6FFE3LRYI6KNEQWKMXMQOBZQ2D/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1361",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-13T05:15:11.827",
      "lastModified" : "2024-11-21T07:39:01.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bumsys_project:bumsys:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.2",
            "matchCriteriaId" : "B44DC2F2-8FA2-4A56-A735-72441B7B688F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/unilogies/bumsys/commit/6a328eb5bf9dbb44329a3df82e95683b77c4730d",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/1b1dbc5a-df16-421f-9a0d-de83e43146c4",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/unilogies/bumsys/commit/6a328eb5bf9dbb44329a3df82e95683b77c4730d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/1b1dbc5a-df16-421f-9a0d-de83e43146c4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1362",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-13T05:15:11.933",
      "lastModified" : "2024-11-21T07:39:01.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bumsys_project:bumsys:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.2",
            "matchCriteriaId" : "B44DC2F2-8FA2-4A56-A735-72441B7B688F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/unilogies/bumsys/commit/8c5b27d54707f9805b27ef26ad741f2801e30e1f",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e5959166-c8ef-4ada-9bb1-0ff5a9693bac",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/unilogies/bumsys/commit/8c5b27d54707f9805b27ef26ad741f2801e30e1f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e5959166-c8ef-4ada-9bb1-0ff5a9693bac",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1363",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-13T06:15:17.767",
      "lastModified" : "2024-11-21T07:39:02.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add User Account. The manipulation of the argument username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222870 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:computer_parts_sales_and_inventory_system_project:computer_parts_sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA0F478-300D-4B7A-AD30-0965A74BE217"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Songs-YZS/CveList/blob/main/Computer-Parts-Sales-and-Inventory-System-has-Cross-Site-Scriptin-vulnerability.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222870",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222870",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Songs-YZS/CveList/blob/main/Computer-Parts-Sales-and-Inventory-System-has-Cross-Site-Scriptin-vulnerability.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1364",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-13T08:15:09.933",
      "lastModified" : "2024-11-21T07:39:02.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file category.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222871."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Pizza%20Ordering%20System/Online%20Pizza%20Ordering%20System%20sql%20vlun(1).pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222871",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222871",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Pizza%20Ordering%20System/Online%20Pizza%20Ordering%20System%20sql%20vlun(1).pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1365",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-13T08:15:10.140",
      "lastModified" : "2024-11-21T07:39:02.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222872."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Pizza%20Ordering%20System/Online%20Pizza%20Ordering%20System%20sql%20vlun(3).pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222872",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222872",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Pizza%20Ordering%20System/Online%20Pizza%20Ordering%20System%20sql%20vlun(3).pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0888",
      "sourceIdentifier" : "productsecurity@bbraun.com",
      "published" : "2023-03-13T09:15:10.013",
      "lastModified" : "2024-11-21T07:38:02.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web server in versions L90/U70 and L92/U92 can be used to gain administrative access to the WiFi communication module. An authenticated user, having access to both the medical device WiFi network (such as a biomedical engineering staff member) and the specific B.Braun Battery Pack SP with WiFi web server credentials, could get administrative (root) access on the infusion pump communication module. This could be used as a vector to start further attacks\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productsecurity@bbraun.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productsecurity@bbraun.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bbraun:battery-pack_sp_with_wifi_firmware:*:*:*:*:global:*:*:*",
            "versionEndIncluding" : "053l000092",
            "matchCriteriaId" : "8B1E3BFE-FA53-455B-8123-5832752563D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:bbraun:battery-pack_sp_with_wifi_firmware:*:*:*:*:us:*:*:*",
            "versionEndIncluding" : "054u000092",
            "matchCriteriaId" : "52E526B0-39B2-42DB-B00C-5FC80351A082"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:bbraun:battery-pack_sp_with_wifi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62C8A903-575E-42A3-8980-ABE788309AD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.bbraun.com/productsecurity",
        "source" : "productsecurity@bbraun.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.bbraunusa.com/productsecurity",
        "source" : "productsecurity@bbraun.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.bbraun.com/productsecurity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.bbraunusa.com/productsecurity",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1366",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-13T09:15:10.600",
      "lastModified" : "2024-11-21T07:39:02.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. This affects the function query of the file admin/categories/manage_category.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222873 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoga_class_registration_system_project:yoga_class_registration_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC6CA18-C062-4016-BFD9-45A66C7AEEA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.csdn.net/Dwayne_Wade/article/details/129493110",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222873",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222873",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.csdn.net/Dwayne_Wade/article/details/129493110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1367",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-13T09:15:10.717",
      "lastModified" : "2024-11-21T07:39:02.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code Injection in GitHub repository alextselegidis/easyappointments prior to 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyappointments:easyappointments:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "063BC3E9-AA71-49D6-9CEE-F2E7E7B9D687"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alextselegidis/easyappointments/commit/453c6e130229718680c91bef450db643a0f263e4",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/16bc74e2-1825-451f-bff7-bfdc1ea75cc2",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alextselegidis/easyappointments/commit/453c6e130229718680c91bef450db643a0f263e4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/16bc74e2-1825-451f-bff7-bfdc1ea75cc2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1368",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-13T09:15:10.807",
      "lastModified" : "2024-11-21T07:39:02.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in XHCMS 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component POST Parameter Handler. The manipulation of the argument user leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222874 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xhcms_project:xhcms:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C05826B-592E-4441-A616-2BDB10E9BD4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wswokao/wswoako.github.io/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222874",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222874",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wswokao/wswoako.github.io/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1369",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-13T09:15:10.903",
      "lastModified" : "2024-11-21T07:39:02.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in TG Soft Vir.IT eXplorer 9.4.86.0. It has been rated as problematic. This issue affects the function 0x82730088 in the library VIRAGTLT.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 9.5 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-222875."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:vir.it_explorer:9.4.86.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "337CBCC6-8DAE-4267-AB63-E4FAA3F7DAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tgsoft:viragtlt.sys:1.86.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E444B6-6B36-4197-877E-179F85D97D95"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1xqJUMsAWnXx4JmlbT0D0yMBJiMy484QS/view?usp=sharing",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1369",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222875",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222875",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tgsoft.it/scripts/getfile.asp?lang=ITA",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://drive.google.com/file/d/1xqJUMsAWnXx4JmlbT0D0yMBJiMy484QS/view?usp=sharing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tgsoft.it/scripts/getfile.asp?lang=ITA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0628",
      "sourceIdentifier" : "security@docker.com",
      "published" : "2023-03-13T12:15:10.953",
      "lastModified" : "2024-11-21T07:37:30.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@docker.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@docker.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker_desktop:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.17.0",
            "matchCriteriaId" : "871D6229-F9DE-43E1-BD09-24D592620DB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.docker.com/desktop/release-notes/#4170",
        "source" : "security@docker.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.docker.com/desktop/release-notes/#4170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0629",
      "sourceIdentifier" : "security@docker.com",
      "published" : "2023-03-13T12:15:11.060",
      "lastModified" : "2024-11-21T07:37:30.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.sock, or npipe:////.pipe/docker_engine_linux on Windows, via the -H (--host) CLI flag or the DOCKER_HOST environment variable and launch containers without the additional hardening features provided by ECI. This would not affect already running containers, nor containers launched through the usual approach (without Docker's raw socket).\n\nThe affected functionality is available for Docker Business customers only and assumes an environment where users are not granted local root or Administrator privileges.\nThis issue has been fixed in Docker Desktop 4.17.0. \n\nAffected Docker Desktop versions: from 4.13.0 before 4.17.0.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@docker.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@docker.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-424"
        }, {
          "lang" : "en",
          "value" : "CWE-501"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker_desktop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.13.0",
            "versionEndExcluding" : "4.17.0",
            "matchCriteriaId" : "869E273A-ED82-4809-979C-CA9971A0DA1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.docker.com/desktop/release-notes/#4170",
        "source" : "security@docker.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.docker.com/desktop/release-notes/#4170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T12:15:11.160",
      "lastModified" : "2025-03-03T21:15:13.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types specified by the Session Description Protocol (SDP) module, which can lead to a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F66A096-7BA3-47D6-98F4-879C3A4C1FFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE202894-D48A-4B9E-B3BD-28529967A0B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B60F97-1320-44F5-970C-BBA29F375524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72419735-076A-4E72-869F-0C7D801371C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172137/Shannon-Baseband-accept-type-SDP-Attribute-Memory-Corruption.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172137/Shannon-Baseband-accept-type-SDP-Attribute-Memory-Corruption.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T12:15:11.247",
      "lastModified" : "2025-02-27T20:15:36.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the reserveDHCP_HostName_1.1.1.0 parameter to lan.asp."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-820l_firmware:1.06b02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1243EBC-E270-4CC6-91A2-3ED0C76AD9B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-820l:a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511F49A1-F777-4F89-B050-CB031948F8D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/migraine-sudo/D_Link_Vuln/tree/main/stackoverflow%20%20in%20reserveDHCP_HostName_1.1.1.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/migraine-sudo/D_Link_Vuln/tree/main/stackoverflow%20%20in%20reserveDHCP_HostName_1.1.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T12:15:11.307",
      "lastModified" : "2025-03-03T20:15:38.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. A heap-based buffer overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding the Emergency number list."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1928760C-4FC4-45B0-84FF-C1105CD1DD2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB410A6D-642B-49AE-8B1C-EADA953A84DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1A7B09-9031-4E54-A24F-3237C054166B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC68046-2F08-40D1-B158-89D8D9263541"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C0D9AC-BD23-48C9-83E7-301DEC06E583"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72ADEBB-ED72-4A5B-BB27-95EDE43F8116"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B60F97-1320-44F5-970C-BBA29F375524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72419735-076A-4E72-869F-0C7D801371C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F66A096-7BA3-47D6-98F4-879C3A4C1FFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE202894-D48A-4B9E-B3BD-28529967A0B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_w920_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ADED27-EDAF-4FB3-8CB2-AE5F59B93641"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_w920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF79654-E5C6-4DFF-B33A-A78571CD300C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171378/Shannon-Baseband-NrmmMsgCodec-Emergency-Number-List-Heap-Buffer-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=2395",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171378/Shannon-Baseband-NrmmMsgCodec-Emergency-Number-List-Heap-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=2395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://project-zero.issues.chromium.org/issues/42451534",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1372",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-13T13:15:11.503",
      "lastModified" : "2026-04-08T19:18:06.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WH Testimonials  plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters such as wh_homepage, wh_text_short, wh_text_full and in versions up to, and including, 3.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webhostings:wh_testimonials:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.0.0",
            "matchCriteriaId" : "321A98D4-E013-4342-948C-F7DDA83C88DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://danielkelley.me/wh-testimonials-reflected-xss-vulnerability-via-wh-homepage-parameter-in-version-3-0-0-and-below/",
        "source" : "security@wordfence.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wh-testimonials/trunk/wh-testimonials.php#L177",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b6fe5f1a-787e-4662-915f-c6f04961e194?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://danielkelley.me/wh-testimonials-reflected-xss-vulnerability-via-wh-homepage-parameter-in-version-3-0-0-and-below/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wh-testimonials/trunk/wh-testimonials.php#L177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b6fe5f1a-787e-4662-915f-c6f04961e194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1374",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-13T13:15:11.610",
      "lastModified" : "2026-04-08T19:18:06.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Solidres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'currency_name' parameter in versions up to, and including, 0.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator privileges to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solidres:solidres:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.9.4",
            "matchCriteriaId" : "C1E08361-4D85-46DD-BBAE-627FDFE21E59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://danielkelley.me/solidres-hotel-booking-plugin-for-wordpress-post-based-xss-vulnerability-in-add-new-currency-feature/",
        "source" : "security@wordfence.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/solidres/trunk/admin/currencies/edit.php#L15",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b13ee51b-9f23-428f-9cef-4a9b9b06b0c4?source=cve",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://danielkelley.me/solidres-hotel-booking-plugin-for-wordpress-post-based-xss-vulnerability-in-add-new-currency-feature/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/solidres/trunk/admin/currencies/edit.php#L15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b13ee51b-9f23-428f-9cef-4a9b9b06b0c4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24577",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T13:15:11.703",
      "lastModified" : "2025-03-03T20:15:37.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileges to execute unauthorized tasks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:total_protection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.50",
            "matchCriteriaId" : "4D9A573D-CB3B-4269-B893-6D682F86865F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/support/?articleId=TS103397&page=shell&shell=article-view",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/support/?articleId=TS103397&page=shell&shell=article-view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T13:15:11.787",
      "lastModified" : "2025-02-27T21:15:18.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:total_protection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.49",
            "matchCriteriaId" : "2FE4DFD8-8A19-4552-8071-755F9598134D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/support/?articleId=TS103397&page=shell&shell=article-view",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/support/?articleId=TS103397&page=shell&shell=article-view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T13:15:11.847",
      "lastModified" : "2025-03-03T20:15:37.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "McAfee Total Protection prior to 16.0.51 allows attackers to trick a victim into uninstalling the application via the command prompt."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:total_protection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.51",
            "matchCriteriaId" : "45CA062C-DDCD-49CA-B7B8-AFE76AC4BC37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/support/?articleId=TS103397&page=shell&shell=article-view",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/support/?articleId=TS103397&page=shell&shell=article-view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T13:15:11.903",
      "lastModified" : "2025-03-03T20:15:39.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123.. A heap-based buffer overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding operator-defined access category definitions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1928760C-4FC4-45B0-84FF-C1105CD1DD2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB410A6D-642B-49AE-8B1C-EADA953A84DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1A7B09-9031-4E54-A24F-3237C054166B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC68046-2F08-40D1-B158-89D8D9263541"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C0D9AC-BD23-48C9-83E7-301DEC06E583"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72ADEBB-ED72-4A5B-BB27-95EDE43F8116"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B60F97-1320-44F5-970C-BBA29F375524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72419735-076A-4E72-869F-0C7D801371C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F66A096-7BA3-47D6-98F4-879C3A4C1FFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE202894-D48A-4B9E-B3BD-28529967A0B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_w920_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ADED27-EDAF-4FB3-8CB2-AE5F59B93641"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_w920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF79654-E5C6-4DFF-B33A-A78571CD300C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171383/Shannon-Baseband-NrmmMsgCodec-Access-Category-Definitions-Heap-Buffer-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=2397",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171383/Shannon-Baseband-NrmmMsgCodec-Access-Category-Definitions-Heap-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=2397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://project-zero.issues.chromium.org/issues/42451536",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0978",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2023-03-13T14:15:12.727",
      "lastModified" : "2024-11-21T07:38:13.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute arbitrary operating system commands using specially crafted strings. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI command. The vulnerability allows the attack\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:advanced_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.14.2",
            "matchCriteriaId" : "919A0505-167D-44E5-AF00-6C8C8742F2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trellix:intelligent_sandbox:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B53C628-EE8D-494C-81FA-D387BDC76972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trellix:intelligent_sandbox:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE6B24B-6343-4F97-A363-6FEA58D4F8E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kcm.trellix.com/corporate/index?page=content&id=SB10397",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kcm.trellix.com/corporate/index?page=content&id=SB10397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T14:15:12.820",
      "lastModified" : "2025-03-03T20:15:38.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-867_firmware:1.30b07:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D97D1B-02AC-46A2-AABC-6336B606C131"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-867:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94CB6320-D2FB-4405-8C2D-BB59798A0670"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%40uuXne2y3RjOdpWM87fw6_A/HyPK04zho",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://hackmd.io/%40uuXne2y3RjOdpWM87fw6_A/HyPK04zho",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25991",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-13T14:15:12.883",
      "lastModified" : "2024-11-21T07:50:35.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in RegistrationMagic plugin <= 5.1.9.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metagauss:registrationmagic:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.1.9.3",
            "matchCriteriaId" : "FEE5ED47-D315-4739-B995-C4812AD9AEE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/custom-registration-form-builder-with-submission-manager/wordpress-registrationmagic-custom-registration-forms-user-registration-and-user-login-plugin-plugin-5-1-9-2-multiple-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/custom-registration-form-builder-with-submission-manager/wordpress-registrationmagic-custom-registration-forms-user-registration-and-user-login-plugin-plugin-5-1-9-2-multiple-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T14:15:12.973",
      "lastModified" : "2025-03-03T20:15:39.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. A heap-based buffer overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding the extended emergency number list."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1928760C-4FC4-45B0-84FF-C1105CD1DD2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB410A6D-642B-49AE-8B1C-EADA953A84DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1A7B09-9031-4E54-A24F-3237C054166B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC68046-2F08-40D1-B158-89D8D9263541"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C0D9AC-BD23-48C9-83E7-301DEC06E583"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72ADEBB-ED72-4A5B-BB27-95EDE43F8116"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B60F97-1320-44F5-970C-BBA29F375524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72419735-076A-4E72-869F-0C7D801371C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F66A096-7BA3-47D6-98F4-879C3A4C1FFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE202894-D48A-4B9E-B3BD-28529967A0B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_w920_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ADED27-EDAF-4FB3-8CB2-AE5F59B93641"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_w920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF79654-E5C6-4DFF-B33A-A78571CD300C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171380/Shannon-Baseband-NrmmMsgCodec-Extended-Emergency-Number-List-Heap-Buffer-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=2396",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171380/Shannon-Baseband-NrmmMsgCodec-Extended-Emergency-Number-List-Heap-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=2396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://project-zero.issues.chromium.org/issues/42451535",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T14:15:13.047",
      "lastModified" : "2025-02-27T21:15:19.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the wifiFilterListRemark parameter in the modifyWifiFilterRules function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w15e_firmware:15.11.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEDB6F7-0043-491C-919E-23C8DA89256A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w15e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248A1A83-1288-42D8-A9BC-13D3AA7A2881"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formWifiFilterRulesModify.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formWifiFilterRulesModify.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T14:15:13.103",
      "lastModified" : "2025-02-27T21:15:19.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w15e_firmware:15.11.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEDB6F7-0043-491C-919E-23C8DA89256A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w15e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248A1A83-1288-42D8-A9BC-13D3AA7A2881"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formPortalAuth.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formPortalAuth.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T14:15:13.167",
      "lastModified" : "2025-02-27T21:15:19.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in the formModifyDnsForward function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w15e_firmware:15.11.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEDB6F7-0043-491C-919E-23C8DA89256A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w15e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248A1A83-1288-42D8-A9BC-13D3AA7A2881"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formModifyDnsForward.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formModifyDnsForward.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T14:15:13.227",
      "lastModified" : "2025-02-27T21:15:19.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parameter in the formDelDnsForward function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w15e_firmware:15.11.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEDB6F7-0043-491C-919E-23C8DA89256A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w15e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248A1A83-1288-42D8-A9BC-13D3AA7A2881"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formDelDnsForward.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formDelDnsForward.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T14:15:13.287",
      "lastModified" : "2025-02-27T21:15:19.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName parameter in the formDelWewifiPi function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w15e_firmware:15.11.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEDB6F7-0043-491C-919E-23C8DA89256A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w15e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248A1A83-1288-42D8-A9BC-13D3AA7A2881"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formDelWewifiPic.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formDelWewifiPic.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22700",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-13T15:15:11.867",
      "lastModified" : "2024-11-21T07:45:14.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 9.3.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixelyoursite:pixelyoursite:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "9.3.1",
            "matchCriteriaId" : "EE5BBD11-DA21-4682-AD31-B3B3F765CF33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/pixelyoursite/wordpress-pixelyoursite-your-smart-pixel-tag-manager-plugin-9-3-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/pixelyoursite/wordpress-pixelyoursite-your-smart-pixel-tag-manager-plugin-9-3-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23711",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-13T15:15:12.183",
      "lastModified" : "2024-11-21T07:46:42.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in A2 Hosting A2 Optimized WP plugin <= 3.0.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:a2hosting:a2_optimized:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.0.5",
            "matchCriteriaId" : "D153D189-3C7C-43ED-A443-60BC30E73A1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/a2-optimized-wp/wordpress-a2-optimized-wp-plugin-3-0-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/a2-optimized-wp/wordpress-a2-optimized-wp-plugin-3-0-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25973",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-13T15:15:12.447",
      "lastModified" : "2025-03-20T13:40:53.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Lucian Apostol Auto Affiliate Links plugin <= 6.3.0.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flamescorpion:auto_affiliate_links:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "6.3.0.3",
            "matchCriteriaId" : "74C5735F-9B57-4476-B04B-A18673AF2D7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-auto-affiliate-links/wordpress-auto-affiliate-links-plugin-6-3-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-auto-affiliate-links/wordpress-auto-affiliate-links-plugin-6-3-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T15:15:12.720",
      "lastModified" : "2025-03-03T18:15:27.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G SM message codec can occur due to insufficient parameter validation when decoding reserved options."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1A7B09-9031-4E54-A24F-3237C054166B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC68046-2F08-40D1-B158-89D8D9263541"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C0D9AC-BD23-48C9-83E7-301DEC06E583"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72ADEBB-ED72-4A5B-BB27-95EDE43F8116"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B60F97-1320-44F5-970C-BBA29F375524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72419735-076A-4E72-869F-0C7D801371C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F66A096-7BA3-47D6-98F4-879C3A4C1FFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE202894-D48A-4B9E-B3BD-28529967A0B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171400/Shannon-Baseband-NrSmPcoCodec-Intra-Object-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171400/Shannon-Baseband-NrSmPcoCodec-Intra-Object-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T15:15:12.957",
      "lastModified" : "2025-02-27T22:15:36.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting vulnerability found in My-Blog allows attackers to cause a denial of service via the Post function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:my-blog_project:my-blog:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC9633D-2C42-4B66-8777-8E6A211EB74E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/zhenfeng13/My-Blog/issues/I6GDTU",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/zhenfeng13/My-Blog/issues/I6GDTU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0037",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-13T17:15:12.087",
      "lastModified" : "2025-02-27T21:15:16.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:10web:map_builder_for_google_maps:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.73",
            "matchCriteriaId" : "9842C196-76F8-4A79-B68C-43DE9DB76E6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bulletin.iese.de/post/wd-google-maps_1-0-72_1",
        "source" : "contact@wpscan.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/33ab1fe2-6611-4f43-91ba-52c56f02ed56",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bulletin.iese.de/post/wd-google-maps_1-0-72_1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/33ab1fe2-6611-4f43-91ba-52c56f02ed56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0066",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-13T17:15:12.163",
      "lastModified" : "2025-02-27T21:15:16.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeermeneer:companion_sitemap_generator:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.5.1.1",
            "matchCriteriaId" : "35079211-5D99-4D97-B5C4-1D27C04E099E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/545c9e2f-bacd-4f30-ae01-de1583e26d32",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/545c9e2f-bacd-4f30-ae01-de1583e26d32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0073",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-13T17:15:12.233",
      "lastModified" : "2025-02-27T16:15:35.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Client Logo Carousel WordPress plugin through 3.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:client_logo_carousel_project:client_logo_carousel:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.0.0",
            "matchCriteriaId" : "3EFF5AF3-7529-4B8A-97A9-E21BB177D9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e5599968-a435-405a-8829-9840a2144987",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e5599968-a435-405a-8829-9840a2144987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0172",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-13T17:15:12.327",
      "lastModified" : "2025-02-27T16:15:35.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Juicer WordPress plugin before 1.11 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saas.group:juicer:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.11",
            "matchCriteriaId" : "25996380-6DE2-46B0-9049-E71BFC87661E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c8982b8d-985f-4a5d-840d-e8be7c3405bd",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c8982b8d-985f-4a5d-840d-e8be7c3405bd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0219",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-13T17:15:12.400",
      "lastModified" : "2024-11-21T07:36:46.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FluentSMTP WordPress plugin before 2.2.3 does not sanitize or escape email content, making it vulnerable to stored cross-site scripting attacks (XSS) when an administrator views the email logs. This exploit requires other plugins to enable users to send emails with unfiltered HTML."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpmanageninja:fluentsmtp:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.2.3",
            "matchCriteriaId" : "8BE948B6-3A4D-42C7-AE6F-4E6DACD2E88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/71662b72-311c-42db-86c5-a0276d25535c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/71662b72-311c-42db-86c5-a0276d25535c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0477",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-13T17:15:12.480",
      "lastModified" : "2024-11-21T07:37:15.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Auto Featured Image (Auto Post Thumbnail) WordPress plugin before 3.9.16 includes an AJAX endpoint that allows any user with at least Author privileges to upload arbitrary files, such as PHP files. This is caused by incorrect file extension validation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cm-wp:auto_featured_image:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.9.16",
            "matchCriteriaId" : "8B25FC41-49AB-4514-B638-5B23C835C2E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e5ef74a2-e04a-4a14-bd0e-d6910cd1c4b4",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e5ef74a2-e04a-4a14-bd0e-d6910cd1c4b4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0538",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-13T17:15:12.583",
      "lastModified" : "2025-02-27T16:15:35.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Campaign URL Builder WordPress plugin before 1.8.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campaign_url_builder_project:campaign_url_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.2",
            "matchCriteriaId" : "C1B4BC6F-88DC-4C21-959A-F7E90C73AA4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/4869fdc7-4fc7-4917-bc00-b6ced9ccc871",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/4869fdc7-4fc7-4917-bc00-b6ced9ccc871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0749",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-13T17:15:12.687",
      "lastModified" : "2025-02-27T21:15:16.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ocean Extra WordPress plugin before 2.1.3 does not ensure that the template to be loaded via a shortcode is actually a template, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, such as draft, private or even password protected ones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oceanwp:ocean_extra:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "86A268FA-36E7-496E-BF5C-4B5FFD45C516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/9caa8d2e-383b-47d7-8d21-d2ed6b1664cb",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/9caa8d2e-383b-47d7-8d21-d2ed6b1664cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0772",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-13T17:15:12.767",
      "lastModified" : "2025-02-27T22:15:35.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Popup Builder by OptinMonster WordPress plugin before 2.12.2 does not ensure that the campaign to be loaded via some shortcodes is actually a campaign, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, like draft, private or even password protected ones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:optinmonster:optinmonster:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.12.2",
            "matchCriteriaId" : "D042A145-9E96-4626-9BB4-C64D0B510B09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/28754886-b7b4-44f7-9042-b81c542d3c9c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/28754886-b7b4-44f7-9042-b81c542d3c9c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0844",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-13T17:15:12.850",
      "lastModified" : "2025-02-27T16:15:35.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Namaste! LMS WordPress plugin before 2.6 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kibokolabs:namaste\\!_lms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.6",
            "matchCriteriaId" : "EF6BCDF5-F06B-4A89-81FC-3AC421122FB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/8d8e5852-3787-47f9-9931-8308bb81beb1",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8d8e5852-3787-47f9-9931-8308bb81beb1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25170",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-13T17:15:12.993",
      "lastModified" : "2024-11-21T07:49:14.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrestaShop is an open source e-commerce web application that, prior to version 8.0.1, is vulnerable to cross-site request forgery (CSRF). When authenticating users, PrestaShop preserves session attributes. Because this does not clear CSRF tokens upon login, this might enable same-site attackers to bypass the CSRF protection mechanism by performing an attack similar to a session-fixation. The problem is fixed in version 8.0.1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.1",
            "matchCriteriaId" : "4BCB0C93-6428-4959-A0DD-FF2421A68D7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-3g43-x7qr-96ph",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-3g43-x7qr-96ph",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0973",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-13T18:15:12.683",
      "lastModified" : "2024-11-21T07:38:12.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nSTEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructed file, resulting in an application crash.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:steptools:ifcmesh_library:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.102",
            "matchCriteriaId" : "0E0C5F07-1C04-4609-A5D0-264701A7C451"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1378",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-13T18:15:12.867",
      "lastModified" : "2024-11-21T07:39:03.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. This vulnerability affects unknown code of the file paypalsuccess.php of the component POST Parameter Handler. The manipulation of the argument cusid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222904."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:friendly_island_pizza_website_and_ordering_system_project:friendly_island_pizza_website_and_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FBF1DB-7E39-44AE-AF31-ED03B401CC3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ATW-BlockN/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222904",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222904",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ATW-BlockN/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27580",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-13T18:15:12.970",
      "lastModified" : "2024-11-21T07:53:11.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CodeIgniter Shield provides authentication and authorization for the CodeIgniter 4 PHP framework. An improper implementation was found in the password storage process. All hashed passwords stored in Shield v1.0.0-beta.3 or earlier are easier to crack than expected due to the vulnerability. Therefore, they should be removed as soon as possible. If an attacker gets (1) the user's hashed password by Shield, and (2) the hashed password (SHA-384 hash without salt) from somewhere, the attacker may easily crack the user's password. Upgrade to Shield v1.0.0-beta.4 or later to fix this issue. After upgrading, all users’ hashed passwords should be updated (saved to the database). There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-916"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeigniter:shield:1.0.0:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E3F1E0-C2D7-4EC5-AD04-AEB414A3D71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeigniter:shield:1.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDA8B62-EE63-40C0-9F2C-23F56B225F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeigniter:shield:1.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "4F37B4E1-D641-4D55-9D3F-FB3B18934FE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.ircmaxell.com/2015/03/security-issue-combining-bcrypt-with.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pre-hashing-passwords",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/codeigniter4/shield/blob/develop/UPGRADING.md",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/codeigniter4/shield/commit/ea9688dd01d100193d834117dbfc2cfabcf9ea0b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/codeigniter4/shield/security/advisories/GHSA-c5vj-f36q-p9vg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.scottbrady91.com/authentication/beware-of-password-shucking",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.ircmaxell.com/2015/03/security-issue-combining-bcrypt-with.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pre-hashing-passwords",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/codeigniter4/shield/blob/develop/UPGRADING.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/codeigniter4/shield/commit/ea9688dd01d100193d834117dbfc2cfabcf9ea0b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/codeigniter4/shield/security/advisories/GHSA-c5vj-f36q-p9vg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.scottbrady91.com/authentication/beware-of-password-shucking",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T19:15:22.550",
      "lastModified" : "2025-11-03T19:00:00.620",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-820l_firmware:1.05b03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5195E86A-22A4-412B-B22C-614A68942FB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-820l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE60CD-DCDA-43E0-80A9-257557EDBC29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/migraine-sudo/D_Link_Vuln/tree/main/cmd%20Inject%20In%20tools_AccountName",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/migraine-sudo/D_Link_Vuln/tree/main/cmd%20Inject%20In%20tools_AccountName",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T19:15:22.617",
      "lastModified" : "2025-03-03T17:15:10.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service WsDrvInst. This vulnerability allows attackers to escalate privileges via modifying or overwriting the executable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:dr.fone:12.9.6:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "C2C2D87E-8A0C-4686-BA5A-C8DB098ED33F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cwe.mitre.org/data/definitions/250.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/171301/Wondershare-Dr-Fone-12.9.6-Weak-Permissions-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cwe.mitre.org/data/definitions/250.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/171301/Wondershare-Dr-Fone-12.9.6-Weak-Permissions-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0355",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-13T20:15:14.810",
      "lastModified" : "2024-11-21T07:37:02.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Akuvox E11 uses a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:akuvox:e11_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB9ACE6-0CE7-4237-8CF5-06C46500C329"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:akuvox:e11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2632D9FC-4B1E-4B2F-B06B-55EAEFA6D6D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25207",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T20:15:14.907",
      "lastModified" : "2025-03-03T20:15:38.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:dpd_france:*:*:*:*:*:prestashop:*:*",
            "versionEndExcluding" : "6.1.3",
            "matchCriteriaId" : "64818A63-4D08-435B-ABF3-B0FBD20AFF41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://addons.prestashop.com/fr/transporteurs/19414-dpd-france.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/03/09/dpdfrance.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://addons.prestashop.com/fr/transporteurs/19414-dpd-france.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/03/09/dpdfrance.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25802",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-13T20:15:14.967",
      "lastModified" : "2024-11-21T07:50:13.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.6.0 don't correctly neutralize `dir/../filename` sequences, such as `/etc/nginx/../passwd`, allowing an actor to gain information about a server. Version 6.3.6.0 has a patch for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-26"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roxy-wi:roxy-wi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.6.0",
            "matchCriteriaId" : "E0F41D8E-6DDD-453A-93CF-314987A518EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hap-wi/roxy-wi/commit/0054f25da7cf8c7480452f48e39308b5e392dc67",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-qcmp-q5h3-784m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hap-wi/roxy-wi/commit/0054f25da7cf8c7480452f48e39308b5e392dc67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-qcmp-q5h3-784m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25803",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-13T20:15:15.057",
      "lastModified" : "2024-11-21T07:50:13.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a directory traversal vulnerability that allows the inclusion of server-side files. This issue is fixed in version 6.3.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roxy-wi:roxy-wi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.5.0",
            "matchCriteriaId" : "F7E0F151-B465-4854-A875-9C3ADAA64B59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-cv9w-j9gh-5j3w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-cv9w-j9gh-5j3w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0345",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-13T21:15:13.010",
      "lastModified" : "2024-11-21T07:37:00.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Akuvox E11 secure shell (SSH) server is enabled by default and can be accessed by the root user. This password cannot be changed by the user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:akuvox:e11_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB9ACE6-0CE7-4237-8CF5-06C46500C329"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:akuvox:e11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2632D9FC-4B1E-4B2F-B06B-55EAEFA6D6D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0346",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-13T21:15:13.137",
      "lastModified" : "2024-11-21T07:37:01.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Akuvox E11 cloud login is performed through an unencrypted HTTP connection. An attacker could gain access to the Akuvox cloud and device if the MAC address of a device if known."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:akuvox:e11_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB9ACE6-0CE7-4237-8CF5-06C46500C329"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:akuvox:e11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2632D9FC-4B1E-4B2F-B06B-55EAEFA6D6D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0347",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-13T21:15:13.220",
      "lastModified" : "2024-11-21T07:37:01.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Akuvox E11 Media Access Control (MAC) address, a primary identifier, combined with the Akuvox E11 IP address, could allow an attacker to identify the device on the Akuvox cloud."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:akuvox:e11_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB9ACE6-0CE7-4237-8CF5-06C46500C329"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:akuvox:e11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2632D9FC-4B1E-4B2F-B06B-55EAEFA6D6D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0348",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-13T21:15:13.303",
      "lastModified" : "2024-11-21T07:37:01.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Akuvox E11 allows direct SIP calls. No access control is enforced by the SIP servers, which could allow an attacker to contact any device within Akuvox to call any other device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:akuvox:e11_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB9ACE6-0CE7-4237-8CF5-06C46500C329"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:akuvox:e11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2632D9FC-4B1E-4B2F-B06B-55EAEFA6D6D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0349",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-13T21:15:13.393",
      "lastModified" : "2024-11-21T07:37:01.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could allow an attacker to view and record image and video from the camera."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:akuvox:e11_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB9ACE6-0CE7-4237-8CF5-06C46500C329"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:akuvox:e11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2632D9FC-4B1E-4B2F-B06B-55EAEFA6D6D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0350",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-13T21:15:13.477",
      "lastModified" : "2024-11-21T07:37:01.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Akuvox E11 does not ensure that a file extension is associated with the file provided. This could allow an attacker to upload a file to the device by changing the extension of a malicious file to an accepted file type."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:akuvox:e11_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB9ACE6-0CE7-4237-8CF5-06C46500C329"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:akuvox:e11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2632D9FC-4B1E-4B2F-B06B-55EAEFA6D6D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0351",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-13T21:15:13.563",
      "lastModified" : "2024-11-21T07:37:01.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:akuvox:e11_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB9ACE6-0CE7-4237-8CF5-06C46500C329"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:akuvox:e11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2632D9FC-4B1E-4B2F-B06B-55EAEFA6D6D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0352",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-13T21:15:13.653",
      "lastModified" : "2024-11-21T07:37:01.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the device key file. An attacker could then use this page to reset the password back to the default."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:akuvox:e11_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB9ACE6-0CE7-4237-8CF5-06C46500C329"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:akuvox:e11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2632D9FC-4B1E-4B2F-B06B-55EAEFA6D6D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0353",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-13T21:15:13.807",
      "lastModified" : "2024-11-21T07:37:01.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypted passwords to be decrypted from the configuration file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:akuvox:e11_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB9ACE6-0CE7-4237-8CF5-06C46500C329"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:akuvox:e11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2632D9FC-4B1E-4B2F-B06B-55EAEFA6D6D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0354",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-13T21:15:13.893",
      "lastModified" : "2024-11-21T07:37:02.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Akuvox E11 web server can be accessed without any user authentication, and this could allow an attacker to access sensitive information, as well as create and download packet captures with known default URLs."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:akuvox:e11_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB9ACE6-0CE7-4237-8CF5-06C46500C329"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:akuvox:e11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2632D9FC-4B1E-4B2F-B06B-55EAEFA6D6D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T21:15:13.983",
      "lastModified" : "2023-11-07T04:08:26.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27581",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-13T21:15:14.037",
      "lastModified" : "2024-11-21T07:53:11.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "github-slug-action is a GitHub Action to expose slug value of GitHub environment variables inside of one's GitHub workflow. Starting in version 4.0.0` and prior to version 4.4.1, this action uses the `github.head_ref` parameter in an insecure way. This vulnerability can be triggered by any user on GitHub on any workflow using the action on pull requests. They just need to create a pull request with a branch name, which can contain the attack payload. This can be used to execute code on the GitHub runners and to exfiltrate any secrets one uses in the CI pipeline. A patched action is available in version 4.4.1. No workaround is available."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github-slug-action_project:github-slug-action:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.4.1",
            "matchCriteriaId" : "3A0A3629-2003-4230-8082-FD1FB2E171BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rlespinasse/github-slug-action/commit/102b1a064a9b145e56556e22b18b19c624538d94",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rlespinasse/github-slug-action/releases/tag/v4.4.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/rlespinasse/github-slug-action/security/advisories/GHSA-6q4m-7476-932w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://securitylab.github.com/research/github-actions-untrusted-input/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rlespinasse/github-slug-action/commit/102b1a064a9b145e56556e22b18b19c624538d94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rlespinasse/github-slug-action/releases/tag/v4.4.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/rlespinasse/github-slug-action/security/advisories/GHSA-6q4m-7476-932w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://securitylab.github.com/research/github-actions-untrusted-input/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27583",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-13T21:15:14.130",
      "lastModified" : "2024-11-21T07:53:11.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PanIndex is a network disk directory index. In Panindex prior to version 3.1.3,  a hard-coded JWT key `PanIndex` is used. An attacker can use the hard-coded JWT key to sign JWT token and perform any actions as a user with admin privileges. Version 3.1.3 has a patch for the issue. As a workaround, one may change the JWT key in the source code before compiling the project.\n  \n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panindex_project:panindex:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.3",
            "matchCriteriaId" : "7D580FA1-B0E8-4B6E-A566-3A8D679897D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/px-org/PanIndex/commit/f7ec0c5739af055ad3a825a20294a5c01ada3302",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/px-org/PanIndex/releases/tag/v3.1.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/px-org/PanIndex/security/advisories/GHSA-82wq-gmw8-g87v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/px-org/PanIndex/commit/f7ec0c5739af055ad3a825a20294a5c01ada3302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/px-org/PanIndex/releases/tag/v3.1.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/px-org/PanIndex/security/advisories/GHSA-82wq-gmw8-g87v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-13T22:15:12.297",
      "lastModified" : "2025-02-27T21:15:19.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "E-Commerce System v1.0 ws discovered to contain a SQL injection vulnerability via the id parameter at /admin/delete_user.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moosikay_project:moosikay:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "888ABAA1-B3F3-4CAD-A15A-C3982958D90D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lcg-22266/bug_report/blob/main/vendors/razormist/Moosikay%20-%20E-Commerce%20System/SQLi-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lcg-22266/bug_report/blob/main/vendors/razormist/Moosikay%20-%20E-Commerce%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27582",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-13T22:15:12.387",
      "lastModified" : "2024-11-21T07:53:11.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "maddy is a composable, all-in-one mail server. Starting with version 0.2.0 and prior to version 0.6.3, maddy allows a full authentication bypass if SASL authorization username is specified when using the PLAIN authentication mechanisms. Instead of validating the specified username, it is accepted as is after checking the credentials for the authentication username. maddy 0.6.3 includes the fix for the bug. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maddy_project:maddy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2.0",
            "versionEndExcluding" : "0.6.3",
            "matchCriteriaId" : "D2F03EBF-CA84-4DFE-B16F-A5C32741D9EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/foxcpp/maddy/commit/55a91a37b71210f34f98f4d327c30308fe24399a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/foxcpp/maddy/commit/9f58cb64b39cdc01928ec463bdb198c4c2313a9c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/foxcpp/maddy/releases/tag/v0.6.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/foxcpp/maddy/security/advisories/GHSA-4g76-w3xw-2x6w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/foxcpp/maddy/commit/55a91a37b71210f34f98f4d327c30308fe24399a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/foxcpp/maddy/commit/9f58cb64b39cdc01928ec463bdb198c4c2313a9c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/foxcpp/maddy/releases/tag/v0.6.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/foxcpp/maddy/security/advisories/GHSA-4g76-w3xw-2x6w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27587",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-13T22:15:12.483",
      "lastModified" : "2024-11-21T07:53:12.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ReadtoMyShoe, a web app that lets users upload articles and listen to them later, generates an error message containing sensitive information prior to commit 8533b01. If an error occurs when adding an article, the website shows the user an error message. If the error originates from the Google Cloud TTS request, then it will include the full URL of the request. The request URL contains the Google Cloud API key. This has been patched in commit 8533b01. Upgrading should be accompanied by deleting the current GCP API key and issuing a new one. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:readtomyshoe_project:readtomyshoe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03-13",
            "matchCriteriaId" : "4D49C440-C74D-454C-92D7-F0D8C2B203AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rozbb/readtomyshoe/commit/8533b01c818939a0fa919c7244d8dbf5daf032af",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rozbb/readtomyshoe/security/advisories/GHSA-23g5-r34j-mr8g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rozbb/readtomyshoe/commit/8533b01c818939a0fa919c7244d8dbf5daf032af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rozbb/readtomyshoe/security/advisories/GHSA-23g5-r34j-mr8g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-14T01:15:12.967",
      "lastModified" : "2024-11-21T07:47:39.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennetworking:onos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndIncluding" : "2.7.0",
            "matchCriteriaId" : "17CC430B-1FB5-4269-B9A8-F3229FAE8821"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.edoardoottavianelli.it/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.edoardoottavianelli.it/CVE-2023-24279",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.youtube.com/watch?v=1mSXzzwcGMM",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.edoardoottavianelli.it/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.edoardoottavianelli.it/CVE-2023-24279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.youtube.com/watch?v=1mSXzzwcGMM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0021",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T05:15:28.367",
      "lastModified" : "2024-11-21T07:36:24.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to insufficient encoding of user input, SAP NetWeaver - versions 700, 701, 702, 731, 740, 750, allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password, which could lead to reflected Cross-Site scripting. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FED49E-6F9A-494A-9226-1059249960A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4836C36D-242F-4818-81B4-C170959D02F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A503ABF-8655-40D7-96AD-2D7F19A673AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9D5C5A-6963-438B-B0EA-2A621A34D8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFA1591-0304-4FAE-A6A7-72D04D1F41A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7940A9AF-308E-4CE5-BA19-7A3DCF49F644"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3274920",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3274920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23857",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T05:15:29.227",
      "lastModified" : "2024-11-21T07:46:58.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and services across systems. On a successful exploitation, the attacker can read and modify some sensitive information but can also be used to lock up any element or operation of the system making that it unresponsive or unavailable.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_for_java:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A80232-F2C2-4B40-A00C-25611D3409AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3252433",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3252433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24526",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T05:15:29.347",
      "lastModified" : "2024-11-21T07:48:03.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure has a low impact on confidentiality of the data such that an unassigned user can read non-sensitive server data.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C506445-3787-4BFF-A98B-7502A0F7CF80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3288394",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3288394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25615",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T05:15:29.673",
      "lastModified" : "2024-11-21T07:49:50.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to insufficient input sanitization, SAP ABAP - versions 751, 753, 753, 754, 756, 757, 791, allows an authenticated high privileged user to alter the current session of the user by injecting the malicious database queries over the network and gain access to the unintended data. This may lead to a high impact on the confidentiality and no impact on the availability and integrity of the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65320F25-669B-40D8-A246-07B0202C00A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C86F45-445E-4970-A378-199A35B23F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74901A8A-A556-478F-ABCD-7DCFD471210A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623B6391-B1E3-4C2A-93C9-AB264377BACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A11684D-9F45-4EE6-92B4-55050A0D8715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform:791:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D006CEB-0A2F-4D25-804F-4EB78C317ECF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3289844",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3289844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25616",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T05:15:29.773",
      "lastModified" : "2024-11-21T07:49:50.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_objects_business_intelligence_platform:420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F7F8064-45BC-4A01-897A-0A2893BBBEC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_objects_business_intelligence_platform:430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB0EFA3-8AD2-42F2-86E1-A62ECF8340E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3245526",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3245526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25617",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T05:15:29.877",
      "lastModified" : "2024-11-21T07:49:50.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling rights, using the BI Launchpad, Central Management Console or a custom application based on the public java SDK. Programs could impact the confidentiality, integrity and availability of the system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_objects_business_intelligence_platform:420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F7F8064-45BC-4A01-897A-0A2893BBBEC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_objects_business_intelligence_platform:430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB0EFA3-8AD2-42F2-86E1-A62ECF8340E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3283438",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3283438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25618",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T05:15:29.967",
      "lastModified" : "2024-11-21T07:49:50.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in an unused class for error handling in which an attacker authenticated as a non-administrative user can craft a request with certain parameters which will consume the server's resources sufficiently to make it unavailable. There is no ability to view or modify any information.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B2522A-B850-4EC2-B2F2-5EBF36801B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706FEB9E-3EE9-405E-A8C9-733DAF68AC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC29738-CF17-4E6B-9C9E-879B17F7E001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416C064-BB8A-4230-A761-84A93E017F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72491771-4492-4902-9F0C-CE6A60BAA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421A5354-F764-402B-A3A4-2D746EACEB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:791:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312DBCA5-D3F6-4F42-B632-34759D799856"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3296346",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3296346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26457",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T05:15:30.070",
      "lastModified" : "2024-11-21T07:51:30.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:content_server:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02FB973-7FA0-4881-B912-27F4CFBDC673"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3281484",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3281484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26459",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T05:15:30.160",
      "lastModified" : "2024-11-21T07:51:31.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to improper input controls In SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, an attacker authenticated as a non-administrative user can craft a request which will trigger the application server to send a request to an arbitrary URL which can reveal, modify or make unavailable non-sensitive information, leading to low impact on Confidentiality, Integrity and Availability.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B2522A-B850-4EC2-B2F2-5EBF36801B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706FEB9E-3EE9-405E-A8C9-733DAF68AC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC29738-CF17-4E6B-9C9E-879B17F7E001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416C064-BB8A-4230-A761-84A93E017F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72491771-4492-4902-9F0C-CE6A60BAA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421A5354-F764-402B-A3A4-2D746EACEB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:791:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312DBCA5-D3F6-4F42-B632-34759D799856"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3296346",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3296346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26460",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T05:15:30.247",
      "lastModified" : "2024-11-21T07:51:31.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cache Management Service in SAP NetWeaver Application Server for Java - version 7.50, does not perform any authentication checks for functionalities that require user identity\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_for_java:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A80232-F2C2-4B40-A00C-25611D3409AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3288096",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3288096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26461",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T05:15:30.333",
      "lastModified" : "2024-11-21T07:51:32.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver allows (SAP Enterprise Portal) - version 7.50, allows an authenticated attacker with sufficient privileges to access the XML parser which can submit a crafted XML file which when parsed will enable them to access but not modify sensitive files and data. It allows the attacker to view sensitive data which is owned by certain privileges.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_enterprise_portal:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9D76-39D6-4D5E-BFAE-892CB8C30A79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3284550",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3284550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27268",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T05:15:30.423",
      "lastModified" : "2024-11-21T07:52:34.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver AS Java (Object Analyzing Service) - version 7.50, does not perform necessary authorization checks, allowing an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will enable them to access but not modify server settings and data with no effect on availability., resulting in escalation of privileges.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_for_java:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A80232-F2C2-4B40-A00C-25611D3409AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3288480",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3288480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27269",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T05:15:30.507",
      "lastModified" : "2024-11-21T07:52:34.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker with non-administrative authorizations to exploit a directory traversal flaw in an available service to overwrite the system files.  In this attack, no data can be read but potentially critical OS files can be overwritten making the system unavailable.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B2522A-B850-4EC2-B2F2-5EBF36801B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706FEB9E-3EE9-405E-A8C9-733DAF68AC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC29738-CF17-4E6B-9C9E-879B17F7E001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416C064-BB8A-4230-A761-84A93E017F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72491771-4492-4902-9F0C-CE6A60BAA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421A5354-F764-402B-A3A4-2D746EACEB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:791:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312DBCA5-D3F6-4F42-B632-34759D799856"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3294595",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3294595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27270",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T05:15:30.593",
      "lastModified" : "2024-11-21T07:52:34.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in a class for test purposes in which an attacker authenticated as a non-administrative user can craft a request with certain parameters, which will consume the server's resources sufficiently to make it unavailable. There is no ability to view or modify any information.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B2522A-B850-4EC2-B2F2-5EBF36801B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706FEB9E-3EE9-405E-A8C9-733DAF68AC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC29738-CF17-4E6B-9C9E-879B17F7E001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416C064-BB8A-4230-A761-84A93E017F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72491771-4492-4902-9F0C-CE6A60BAA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421A5354-F764-402B-A3A4-2D746EACEB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:791:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312DBCA5-D3F6-4F42-B632-34759D799856"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3296328",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3296328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27271",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T06:15:11.737",
      "lastModified" : "2024-11-21T07:52:34.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SAP BusinessObjects Business Intelligence Platform (Web Services) - versions 420, 430, an attacker can control a malicious BOE server, forcing the application server to connect to its own admintools, leading to a high impact on availability.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2909B78-C7F9-4267-B9A0-B6A1F776EB73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3DF21A-C043-4F60-944D-7ADD6BDDDF51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3287120",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3287120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27498",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T06:15:11.973",
      "lastModified" : "2024-11-21T07:53:01.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request which results in a memory corruption error. This error can be used to reveal but not modify any technical information about the server. It can also make a particular service temporarily unavailable\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:host_agent:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E135017-1492-49F5-B3ED-F69D5476FB46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3275727",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3275727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27500",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T06:15:12.100",
      "lastModified" : "2024-11-21T07:53:02.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-write system files. In this attack, no data can be read but potentially critical OS files can be over-written making the system unavailable.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B2522A-B850-4EC2-B2F2-5EBF36801B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706FEB9E-3EE9-405E-A8C9-733DAF68AC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC29738-CF17-4E6B-9C9E-879B17F7E001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416C064-BB8A-4230-A761-84A93E017F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72491771-4492-4902-9F0C-CE6A60BAA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421A5354-F764-402B-A3A4-2D746EACEB46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3302162",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3302162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27501",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T06:15:12.213",
      "lastModified" : "2024-11-21T07:53:02.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker to exploit insufficient validation of path information provided by users, thus exploiting a directory traversal flaw in an available service to delete system files. In this attack, no data can be read but potentially critical OS files can be deleted making the system unavailable, causing significant impact on both availability and integrity\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B2522A-B850-4EC2-B2F2-5EBF36801B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "706FEB9E-3EE9-405E-A8C9-733DAF68AC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC29738-CF17-4E6B-9C9E-879B17F7E001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416C064-BB8A-4230-A761-84A93E017F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72491771-4492-4902-9F0C-CE6A60BAA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421A5354-F764-402B-A3A4-2D746EACEB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:791:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312DBCA5-D3F6-4F42-B632-34759D799856"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3294954",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3294954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27893",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T06:15:12.333",
      "lastModified" : "2024-11-21T07:53:38.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker authenticated as a user with a non-administrative role and a common remote execution authorization in SAP Solution Manager and ABAP managed systems (ST-PI) - versions 2088_1_700, 2008_1_710, 740, can use a vulnerable interface to execute an application function to perform actions which they would not normally be permitted to perform.  Depending on the function executed, the attack can read or modify any user or application data and can make the application unavailable.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_manager:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F6260A-D105-40B6-A851-B64FEDA2B714"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3296476",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3296476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27894",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T06:15:12.443",
      "lastModified" : "2024-11-21T07:53:39.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP BusinessObjects Business Intelligence Platform (Web Services) - versions 420, 430, allows an attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. On successful exploitation, attacker can scan internal network to determine internal infrastructure for further attacks like remote file inclusion, retrieve server files, bypass firewall and force the vulnerable server to execute malicious requests, resulting in sensitive information disclosure. This causes limited impact on confidentiality of data.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence:420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BA0DF9-D893-4AF9-923E-E47EA5C02C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence:430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CBCF48-5478-4EE5-8F69-6E59EFDB707D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3287120",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3287120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27895",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T06:15:12.553",
      "lastModified" : "2024-11-21T07:53:39.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Authenticator for Android - version 1.3.0, allows the screen to be captured, if an authorized attacker installs a malicious app on the mobile device. The attacker could extract the currently views of the OTP and the secret OTP alphanumeric token during the token setup. On successful exploitation, an attacker can read some sensitive information but cannot modify and delete the data.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-267"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:authenticator:1.3.0:*:*:*:*:android:*:*",
            "matchCriteriaId" : "A74D4A7A-EF97-4D3D-A043-CB12AAB489D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3302710",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3302710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27896",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-03-14T06:15:12.670",
      "lastModified" : "2024-11-21T07:53:39.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SAP BusinessObjects Business Intelligence Platform - version 420, 430, an attacker can control a malicious BOE server, forcing the application server to connect to its own CMS, leading to a high impact on availability.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence:420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BA0DF9-D893-4AF9-923E-E47EA5C02C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence:430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CBCF48-5478-4EE5-8F69-6E59EFDB707D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3287120",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3287120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25957",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-03-14T10:15:28.577",
      "lastModified" : "2024-11-21T07:50:31.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versions >= V2.2.0 < V2.3.0), Mendix SAML (Mendix 9 latest compatible, New Track) (All versions >= V3.1.9 < V3.3.1), Mendix SAML (Mendix 9 latest compatible, Upgrade Track) (All versions >= V3.1.8 < V3.3.0), Mendix SAML (Mendix 9.6 compatible, New Track) (All versions >= V3.1.9 < V3.2.7), Mendix SAML (Mendix 9.6 compatible, Upgrade Track) (All versions >= V3.1.8 < V3.2.6). The affected versions of the module insufficiently verify the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application.\r\n\r\nFor compatibility reasons, fix versions still contain this issue, but only when the recommended, default configuration option `'Use Encryption'` is disabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-303"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:saml:*:*:*:*:*:mendix:*:*",
            "versionStartIncluding" : "1.16.4",
            "versionEndExcluding" : "1.17.2",
            "matchCriteriaId" : "E78110E3-955F-480D-B613-1DCFA65C4314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:saml:*:*:*:*:*:mendix:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.3",
            "matchCriteriaId" : "F19D5A0C-D480-4F6E-B965-E0137F72F6B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:saml:*:*:*:*:*:mendix:*:*",
            "versionStartIncluding" : "3.1.9",
            "versionEndExcluding" : "3.2.5",
            "matchCriteriaId" : "D99EF1F1-27A1-4032-ACD9-DBBBD3A9733A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-851884.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-851884.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27309",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-03-14T10:15:28.677",
      "lastModified" : "2024-11-21T07:52:37.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions for specific write queries. This could allow an authenticated remote attacker to perform unauthorized actions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:ruggedcom_crossbow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2",
            "matchCriteriaId" : "C0C5F255-C56D-4F50-BFA1-5FAA4A3856F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-260625.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-260625.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27310",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-03-14T10:15:28.777",
      "lastModified" : "2024-11-21T07:52:37.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions when assigning groups to user accounts. This could allow an authenticated remote attacker to assign administrative groups to otherwise non-privileged user accounts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:ruggedcom_crossbow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2",
            "matchCriteriaId" : "C0C5F255-C56D-4F50-BFA1-5FAA4A3856F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-260625.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-260625.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27398",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-03-14T10:15:28.873",
      "lastModified" : "2024-11-21T07:52:50.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20304)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27399",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-03-14T10:15:28.963",
      "lastModified" : "2024-11-21T07:52:50.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20299, ZDI-CAN-20346)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27400",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-03-14T10:15:29.050",
      "lastModified" : "2024-11-21T07:52:50.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20300)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27401",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-03-14T10:15:29.143",
      "lastModified" : "2024-11-21T07:52:50.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20308, ZDI-CAN-20345)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27402",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-03-14T10:15:29.240",
      "lastModified" : "2024-11-21T07:52:50.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20334)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27403",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-03-14T10:15:29.337",
      "lastModified" : "2024-11-21T07:52:50.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains a memory corruption vulnerability while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process.  (ZDI-CAN-20303, ZDI-CAN-20348)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27404",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-03-14T10:15:29.427",
      "lastModified" : "2024-11-21T07:52:50.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-20433)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27405",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-03-14T10:15:29.513",
      "lastModified" : "2024-11-21T07:52:50.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20432)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27406",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-03-14T10:15:29.597",
      "lastModified" : "2024-11-21T07:52:50.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-20449)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2201.0006",
            "matchCriteriaId" : "149B6D61-2362-4E99-944C-54F47658992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27462",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-03-14T10:15:29.677",
      "lastModified" : "2024-11-21T07:52:57.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affected application fails to check for proper permissions for specific read queries. This could allow authenticated remote attackers to access data they are not authorized for."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:ruggedcom_crossbow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.3",
            "matchCriteriaId" : "C2CBB4F0-C72F-4816-94A2-782AFEEE8AD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-320629.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-320629.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27463",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-03-14T10:15:29.757",
      "lastModified" : "2024-11-21T07:52:57.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary SQL queries on the server database."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:ruggedcom_crossbow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.3",
            "matchCriteriaId" : "C2CBB4F0-C72F-4816-94A2-782AFEEE8AD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-320629.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-320629.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-14T14:15:13.217",
      "lastModified" : "2024-11-21T07:47:32.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Libelfin v0.3 was discovered to contain an integer overflow in the load function at elf/mmap_loader.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted elf file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libelfin_project:libelfin:0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18704CF-84AF-4699-BA52-8974DFE68BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aclements/libelfin/issues/75",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aclements/libelfin/issues/75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1296",
      "sourceIdentifier" : "security@hashicorp.com",
      "published" : "2023-03-14T15:15:11.503",
      "lastModified" : "2024-11-21T07:38:51.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correctly enforce deny policies applied to a workload’s variables. Fixed in 1.4.6 and 1.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hashicorp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hashicorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.4.6",
            "matchCriteriaId" : "66AF76A0-3EA9-40FC-8982-32D525093F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.4.6",
            "matchCriteriaId" : "0ACECC89-A939-481B-AB7D-B9A67E2F411C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:1.5.0:*:*:*:-:*:*:*",
            "matchCriteriaId" : "0960C128-2805-4D14-863C-F104372A7CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:1.5.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C938E1F7-B4A9-4556-B9EE-F38A008823F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-09-nomad-acls-can-not-deny-access-to-workloads-own-variables/51390",
        "source" : "security@hashicorp.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-09-nomad-acls-can-not-deny-access-to-workloads-own-variables/51390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1299",
      "sourceIdentifier" : "security@hashicorp.com",
      "published" : "2023-03-14T15:15:11.593",
      "lastModified" : "2024-11-21T07:38:52.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hashicorp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hashicorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:1.5.0:*:*:*:-:*:*:*",
            "matchCriteriaId" : "0960C128-2805-4D14-863C-F104372A7CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:1.5.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C938E1F7-B4A9-4556-B9EE-F38A008823F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-08-nomad-job-submitter-privilege-escalation-using-workload-identity/51389",
        "source" : "security@hashicorp.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-08-nomad-job-submitter-privilege-escalation-using-workload-identity/51389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1391",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-14T15:15:11.677",
      "lastModified" : "2024-11-21T07:39:05.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file admin/ab.php. The manipulation of the argument img leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222978 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.csdn.net/Dwayne_Wade/article/details/129526901",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222978",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222978",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.csdn.net/Dwayne_Wade/article/details/129526901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1392",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-14T15:15:11.770",
      "lastModified" : "2024-11-21T07:39:05.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is the function save_menu. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222979."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Fchen-xcu/Vulnerability-Set/blob/main/The%20online%20pizza%20ordering%20system%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222979",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222979",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Fchen-xcu/Vulnerability-Set/blob/main/The%20online%20pizza%20ordering%20system%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1394",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-14T15:15:11.867",
      "lastModified" : "2024-11-21T07:39:06.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been classified as critical. This affects the function mysqli_query of the file bsitemp.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222981 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_graduate_tracer_system_project:online_graduate_tracer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9A6FC0-9440-489D-AD8D-3FF732389484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.csdn.net/Dwayne_Wade/article/details/129522869",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222981",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222981",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.csdn.net/Dwayne_Wade/article/details/129522869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1395",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-14T15:15:11.947",
      "lastModified" : "2024-11-21T07:39:06.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. This vulnerability affects the function query of the file admin/user/list.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222982 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoga_class_registration_system_project:yoga_class_registration_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC6CA18-C062-4016-BFD9-45A66C7AEEA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.csdn.net/Dwayne_Wade/article/details/129496689",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222982",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222982",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.csdn.net/Dwayne_Wade/article/details/129496689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1396",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-14T15:15:12.037",
      "lastModified" : "2024-11-21T07:39:06.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file admin/traveller_details.php. The manipulation of the argument address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222983."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.csdn.net/Dwayne_Wade/article/details/129524104",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222983",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222983",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.csdn.net/Dwayne_Wade/article/details/129524104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1397",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-14T15:15:12.120",
      "lastModified" : "2024-11-21T07:39:06.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in SourceCodester Online Student Management System 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222984."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_student_management_system_project:online_student_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422F2579-A688-4D6E-97D2-873C5BCABFD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20student%20management%20system%20pdf/Online%20student%20management%20system%20xss%20vlun%203.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222984",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222984",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20student%20management%20system%20pdf/Online%20student%20management%20system%20xss%20vlun%203.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1398",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-14T15:15:12.210",
      "lastModified" : "2024-11-21T07:39:06.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/upload. The manipulation leads to path traversal: '../filedir'. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222985 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-24"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teacms_project:teacms:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682B4EF7-D26D-4339-84B8-928661F6F2C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/xiaobingby/TeaCMS/issues/I6IIYV",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222985",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222985",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/xiaobingby/TeaCMS/issues/I6IIYV",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.222985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.222985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-14T15:15:12.313",
      "lastModified" : "2026-03-30T18:15:59.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Request Forgery (CSRF) in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_food_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FAA9C4A-10ED-4AA4-8295-F4324DD2F879"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bhaveshkush007/CVEs/blob/main/CVE-2023-27073.txt",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://projectworlds.in/free-projects/php-projects/food-ordering-system-project-in-php/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bhaveshkush007/CVEs/blob/main/CVE-2023-27073.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://projectworlds.in/free-projects/php-projects/food-ordering-system-project-in-php/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bhaveshkush007/CVEs/blob/main/CVE-2023-27073.txt",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-14T15:15:12.377",
      "lastModified" : "2024-11-21T07:52:16.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter in the login page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:bp_monitoring_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F493132-4599-4574-81E9-346781DC55F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bhaveshkush007/CVEs/blob/main/CVE-2023-27074.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/bp-monitoring-management-system-using-php-and-mysql/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bhaveshkush007/CVEs/blob/main/CVE-2023-27074.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/bp-monitoring-management-system-using-php-and-mysql/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-14T16:15:10.493",
      "lastModified" : "2025-02-27T21:15:20.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the account name field."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:totaljs:openplatform:2023-02-16:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D313B0AF-B179-462A-B6FD-E006FA2676DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/totaljs/openplatform/issues/52",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.edoardoottavianelli.it/CVE-2023-27069/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.youtube.com/watch?v=Ryuz1gymiw8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/totaljs/openplatform/issues/52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.edoardoottavianelli.it/CVE-2023-27069/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.youtube.com/watch?v=Ryuz1gymiw8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-14T16:15:10.553",
      "lastModified" : "2025-02-27T20:15:36.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:totaljs:openplatform:2023-02-16:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D313B0AF-B179-462A-B6FD-E006FA2676DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/totaljs/openplatform/issues/53",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.edoardoottavianelli.it/CVE-2023-27070/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.youtube.com/watch?v=4WJqcseH5qk",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/totaljs/openplatform/issues/53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.edoardoottavianelli.it/CVE-2023-27070/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.youtube.com/watch?v=4WJqcseH5qk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21708",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:11.933",
      "lastModified" : "2024-11-21T07:43:28.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21708",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23383",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:12.317",
      "lastModified" : "2024-11-21T07:46:04.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Service Fabric Explorer Spoofing Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_service_fabric:9.1:-:*:*:*:ubuntu:*:*",
            "matchCriteriaId" : "01728BEC-97B4-469B-94A0-9A1FA23CBFAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_service_fabric:9.1:-:*:*:*:windows:*:*",
            "matchCriteriaId" : "0374FB38-CD1F-48EC-BD7C-81AD398196D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23383",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23385",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:12.440",
      "lastModified" : "2024-11-21T07:46:04.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23385",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23388",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:12.530",
      "lastModified" : "2024-11-21T07:46:05.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Bluetooth Driver Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23388",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23389",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:12.613",
      "lastModified" : "2024-11-21T07:46:05.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Defender Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:malware_protection_engine:1.1.20000.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5231B7F3-9699-42F1-B0D7-5D6DD9034E39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23389",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23391",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:12.707",
      "lastModified" : "2024-11-21T07:46:05.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Office for Android Spoofing Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:16.0.16026.20172:*:*:*:*:android:*:*",
            "matchCriteriaId" : "E879B70D-8BAA-4943-8683-7998DDD4B03E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23391",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23392",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:12.793",
      "lastModified" : "2024-11-21T07:46:05.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP Protocol Stack Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23392",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23393",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:12.883",
      "lastModified" : "2024-11-21T07:46:05.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23393",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23394",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:12.977",
      "lastModified" : "2024-11-21T07:46:05.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23394",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23395",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:13.083",
      "lastModified" : "2024-11-21T07:46:06.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Spoofing Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:-:*:*:*:subscription:*:*:*",
            "matchCriteriaId" : "AC8BB33F-44C4-41FE-8B17-68E3C4B38142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "157CBD57-8A1B-4B57-8371-88EF4254A663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23395",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23396",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:13.177",
      "lastModified" : "2024-11-21T07:46:06.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23396",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23397",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:13.263",
      "lastModified" : "2025-10-27T17:14:31.953",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Outlook Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-03-14",
      "cisaActionDue" : "2023-04-04",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Office Outlook Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF177984-A906-43FA-BF60-298133FBBD6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B3EF1E5-4757-4CFA-AE72-6BA876D3C9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:-:*:*:*",
            "matchCriteriaId" : "8D513A61-6427-4F85-AADF-99D6F223AF2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "DDA98A76-D0D1-4BFA-BEAC-1C2313F7B859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B1657C-0FF4-461A-BE2A-641275C4B0A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23397",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23398",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:13.350",
      "lastModified" : "2025-02-28T21:15:20.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Spoofing Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "CF5DDD09-902E-4881-98D0-CB896333B4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "26A3B226-5D7C-4556-9350-5222DC8EFC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:*:x64:*",
            "matchCriteriaId" : "1AC0C23F-FC55-4DA1-8527-EB4432038FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:*:x86:*",
            "matchCriteriaId" : "A719B461-7869-46D0-9300-D0A348DC26A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23398",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23399",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:13.430",
      "lastModified" : "2024-11-21T07:46:06.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:-:*:*:*",
            "matchCriteriaId" : "BF89FEC4-936E-4226-94F9-2BD0CB0CA09F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:-:*:*:*",
            "matchCriteriaId" : "552E1557-D6FA-45DD-9B52-E13ACDBB8A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "F7DDFFB8-2337-4DD7-8120-56CC8EF134B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:*:*",
            "matchCriteriaId" : "6C9D7C93-E8CB-4A8A-BA15-093B03ACC62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23399",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23400",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:13.517",
      "lastModified" : "2024-11-21T07:46:06.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23400",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23401",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:13.610",
      "lastModified" : "2024-11-21T07:46:06.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Media Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23401",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23402",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:13.700",
      "lastModified" : "2024-11-21T07:46:07.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Media Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23402",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23403",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:13.787",
      "lastModified" : "2024-11-21T07:46:07.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23403",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23404",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:13.870",
      "lastModified" : "2024-11-21T07:46:07.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23404",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23405",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:13.963",
      "lastModified" : "2024-11-21T07:46:07.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23405",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23406",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:14.050",
      "lastModified" : "2024-11-21T07:46:07.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23406",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23407",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:14.130",
      "lastModified" : "2024-11-21T07:46:07.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23407",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23408",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:14.220",
      "lastModified" : "2026-02-11T18:49:19.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure Apache Ambari Spoofing Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_hdinsight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "834EC53E-CCCE-4BE1-8B30-9D4C847D2E81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23408",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173134/Azure-Apache-Ambari-2302250400-Spoofing.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23409",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:14.317",
      "lastModified" : "2024-11-21T07:46:08.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23409",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23410",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:14.407",
      "lastModified" : "2024-11-21T07:46:08.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows HTTP.sys Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23410",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23411",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:14.500",
      "lastModified" : "2024-11-21T07:46:08.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Hyper-V Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "3FE6559F-B4C0-4188-86CB-4DB6FBB85A5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "93CEF0C6-6B6E-4157-A763-89F570FE0AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "3001E324-7A3C-4EEB-86DC-E79471F752BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "579AE0F1-E226-4504-9BF8-05E7BAE682D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "D41F5E5B-D344-41B1-A160-8118DDB623C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "BA59AB71-F8C7-49B0-AD2F-F9C00D82C85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23411",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23412",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:14.593",
      "lastModified" : "2024-11-21T07:46:08.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Accounts Picture Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23412",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23413",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:14.680",
      "lastModified" : "2024-11-21T07:46:08.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23413",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23414",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:14.767",
      "lastModified" : "2024-11-21T07:46:08.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23414",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23415",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:14.857",
      "lastModified" : "2024-11-21T07:46:08.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23415",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23416",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:14.967",
      "lastModified" : "2024-11-21T07:46:09.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Cryptographic Services Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23416",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23417",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:15.110",
      "lastModified" : "2024-11-21T07:46:09.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Partition Management Driver Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23417",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23418",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:15.260",
      "lastModified" : "2024-11-21T07:46:09.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23418",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23419",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:15.370",
      "lastModified" : "2024-11-21T07:46:09.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23419",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23420",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:15.470",
      "lastModified" : "2024-11-21T07:46:09.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "2816023A-957D-47A3-859C-D23EBA4E19B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23420",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23420",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23421",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:15.563",
      "lastModified" : "2024-11-21T07:46:09.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "2816023A-957D-47A3-859C-D23EBA4E19B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23421",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23422",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:15.657",
      "lastModified" : "2024-11-21T07:46:09.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "2816023A-957D-47A3-859C-D23EBA4E19B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23422",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23423",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:15.747",
      "lastModified" : "2024-11-21T07:46:10.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "2816023A-957D-47A3-859C-D23EBA4E19B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23423",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24856",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:15.837",
      "lastModified" : "2024-11-21T07:48:34.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "2816023A-957D-47A3-859C-D23EBA4E19B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24856",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24857",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:15.930",
      "lastModified" : "2024-11-21T07:48:34.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "2816023A-957D-47A3-859C-D23EBA4E19B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24857",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24858",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:16.030",
      "lastModified" : "2024-11-21T07:48:34.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "2816023A-957D-47A3-859C-D23EBA4E19B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24858",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24859",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:16.123",
      "lastModified" : "2024-11-21T07:48:34.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "2816023A-957D-47A3-859C-D23EBA4E19B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24859",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24861",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:16.223",
      "lastModified" : "2024-11-21T07:48:40.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Graphics Component Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24861",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24862",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:16.327",
      "lastModified" : "2024-11-21T07:48:40.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Secure Channel Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24862",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24863",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:16.427",
      "lastModified" : "2024-11-21T07:48:40.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24863",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24864",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:16.520",
      "lastModified" : "2024-11-21T07:48:40.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24864",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24865",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:16.623",
      "lastModified" : "2024-11-21T07:48:40.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24865",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24866",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:16.720",
      "lastModified" : "2024-11-21T07:48:40.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24866",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24867",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:16.807",
      "lastModified" : "2024-11-21T07:48:41.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24867",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24868",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:16.900",
      "lastModified" : "2024-11-21T07:48:41.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24868",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24869",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:17.007",
      "lastModified" : "2024-11-21T07:48:41.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24869",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24870",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:17.113",
      "lastModified" : "2024-11-21T07:48:41.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24870",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24871",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:17.223",
      "lastModified" : "2024-11-21T07:48:41.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Bluetooth Service Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24871",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24872",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:17.337",
      "lastModified" : "2024-11-21T07:48:41.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24872",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24876",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:17.453",
      "lastModified" : "2024-11-21T07:48:41.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24876",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24879",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:17.557",
      "lastModified" : "2025-02-28T21:15:20.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.0.45.11",
            "matchCriteriaId" : "64675AEC-3E0C-4ED2-99C5-70221ACC372F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.16.20",
            "matchCriteriaId" : "49D80063-7C6B-466B-A0EA-BC24CE4F335A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24879",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24880",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:17.683",
      "lastModified" : "2025-10-27T17:14:18.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows SmartScreen Security Feature Bypass Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "cisaExploitAdd" : "2023-03-14",
      "cisaActionDue" : "2023-04-04",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows SmartScreen Security Feature Bypass Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "40EFB742-9414-4585-A71E-4316D488BFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "D19233CA-3830-499D-A4C0-2C023C8AD700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.20348.1602",
            "matchCriteriaId" : "29EAD8D3-9E42-40F9-8482-50891CA1EAD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24880",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-24880",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24882",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:17.860",
      "lastModified" : "2025-02-28T21:15:20.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft OneDrive for Android Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:onedrive:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "6.73",
            "matchCriteriaId" : "144ADFCD-D0F4-42D7-990E-84C572FB76C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24882",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24890",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:17.997",
      "lastModified" : "2024-11-21T07:48:43.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft OneDrive for iOS Security Feature Bypass Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1390"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:onedrive:*:*:*:*:*:iphone_os:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "14.2.2",
            "matchCriteriaId" : "C65A8D63-E5B1-494C-9FCD-B5152282887F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24890",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24891",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:18.093",
      "lastModified" : "2024-11-21T07:48:43.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.0.45.11",
            "matchCriteriaId" : "64675AEC-3E0C-4ED2-99C5-70221ACC372F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.16.20",
            "matchCriteriaId" : "49D80063-7C6B-466B-A0EA-BC24CE4F335A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24891",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24892",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:18.197",
      "lastModified" : "2025-02-28T20:15:41.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.1661.41",
            "matchCriteriaId" : "88DA2315-2BC1-48EB-8297-6A24C541CA71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24892",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24906",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:18.293",
      "lastModified" : "2024-11-21T07:48:44.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24906",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24907",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:18.400",
      "lastModified" : "2024-11-21T07:48:45.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24907",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24908",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:18.490",
      "lastModified" : "2024-11-21T07:48:45.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19805",
            "matchCriteriaId" : "6B55F645-F8BF-43E1-BE53-DC6580C2C3FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "85CF3A5A-B375-4937-89ED-77075F92EF55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "AB425562-C0A0-452E-AABE-F70522F15E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24908",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24909",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:18.577",
      "lastModified" : "2024-11-21T07:48:45.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "93CEF0C6-6B6E-4157-A763-89F570FE0AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "7AE86D7B-23AF-4321-B2CF-D0639229BCF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "A7B182E1-2798-49E1-9A4A-6D87DC992312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24909",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24910",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:18.670",
      "lastModified" : "2024-11-21T07:48:45.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Graphics Component Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "B68CC469-3ED9-41C5-998E-9E72D5270F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6AE930-8EFD-4EE5-AD18-A1205B80DE60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "93CEF0C6-6B6E-4157-A763-89F570FE0AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "7AE86D7B-23AF-4321-B2CF-D0639229BCF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "82F7C1F6-5823-4B07-B902-3B6A036F8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "3001E324-7A3C-4EEB-86DC-E79471F752BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "C05B8DB8-B818-49EE-A773-1A0DA0BC7038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "A41D89D0-974E-43E9-AE5C-401C15E83A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A4A06402-9C74-4A56-A51A-F89D0F050350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "B5427DEA-6837-4B25-8DAF-DC87BB50F071"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "94F80968-270E-481C-9EB7-9EFDBFC279BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "9F8FCBCC-4479-408B-8956-175A43EAF163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24910",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24911",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:18.760",
      "lastModified" : "2024-11-21T07:48:45.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "93CEF0C6-6B6E-4157-A763-89F570FE0AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "7AE86D7B-23AF-4321-B2CF-D0639229BCF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "82F7C1F6-5823-4B07-B902-3B6A036F8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "3001E324-7A3C-4EEB-86DC-E79471F752BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "C05B8DB8-B818-49EE-A773-1A0DA0BC7038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "55F0F0B1-D045-4683-A030-437EC0C180A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "579AE0F1-E226-4504-9BF8-05E7BAE682D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "C3A9CA30-CDCE-4B8B-A24C-7C29BD82DE43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A1ED9B58-845F-49F0-9DCE-3FF6E1495A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "D41F5E5B-D344-41B1-A160-8118DDB623C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "9368B665-D93C-4DCB-AAE1-CBC705CFF069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "9076DC5B-8155-4D11-BFDE-FADE8780598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "BA59AB71-F8C7-49B0-AD2F-F9C00D82C85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "1ADB5A42-1E00-4F4B-AADC-994E7D338C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "19902634-ED19-4679-9E88-72780DAE5534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "6D06089A-31F7-44C7-98CB-216ABAD280A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "E408AE1B-47F1-497D-AB1A-DA1A26755021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "897105B1-27E0-4D1D-907D-F4E48250E0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24911",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24913",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:18.850",
      "lastModified" : "2024-11-21T07:48:45.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "93CEF0C6-6B6E-4157-A763-89F570FE0AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.14393.5786",
            "matchCriteriaId" : "7AE86D7B-23AF-4321-B2CF-D0639229BCF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "82F7C1F6-5823-4B07-B902-3B6A036F8E09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "3001E324-7A3C-4EEB-86DC-E79471F752BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.17763.4131",
            "matchCriteriaId" : "C05B8DB8-B818-49EE-A773-1A0DA0BC7038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "55F0F0B1-D045-4683-A030-437EC0C180A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "579AE0F1-E226-4504-9BF8-05E7BAE682D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19042.2728",
            "matchCriteriaId" : "C3A9CA30-CDCE-4B8B-A24C-7C29BD82DE43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "A1ED9B58-845F-49F0-9DCE-3FF6E1495A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "D41F5E5B-D344-41B1-A160-8118DDB623C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19044.2728",
            "matchCriteriaId" : "9368B665-D93C-4DCB-AAE1-CBC705CFF069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "9076DC5B-8155-4D11-BFDE-FADE8780598C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "BA59AB71-F8C7-49B0-AD2F-F9C00D82C85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "versionEndExcluding" : "10.0.19045.2728",
            "matchCriteriaId" : "1ADB5A42-1E00-4F4B-AADC-994E7D338C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "19902634-ED19-4679-9E88-72780DAE5534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1696",
            "matchCriteriaId" : "6D06089A-31F7-44C7-98CB-216ABAD280A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "E408AE1B-47F1-497D-AB1A-DA1A26755021"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "10.0.22000.1413",
            "matchCriteriaId" : "897105B1-27E0-4D1D-907D-F4E48250E0BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24913",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24919",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:18.943",
      "lastModified" : "2024-11-21T07:48:46.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.0.45.11",
            "matchCriteriaId" : "64675AEC-3E0C-4ED2-99C5-70221ACC372F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.16.20",
            "matchCriteriaId" : "49D80063-7C6B-466B-A0EA-BC24CE4F335A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24919",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24920",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:19.040",
      "lastModified" : "2024-11-21T07:48:46.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.0.45.11",
            "matchCriteriaId" : "64675AEC-3E0C-4ED2-99C5-70221ACC372F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.16.20",
            "matchCriteriaId" : "49D80063-7C6B-466B-A0EA-BC24CE4F335A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24920",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24921",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:19.133",
      "lastModified" : "2024-11-21T07:48:46.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.0.45.11",
            "matchCriteriaId" : "64675AEC-3E0C-4ED2-99C5-70221ACC372F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.16.20",
            "matchCriteriaId" : "49D80063-7C6B-466B-A0EA-BC24CE4F335A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24921",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24922",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:19.233",
      "lastModified" : "2024-11-21T07:48:46.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-643"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.0.45.11",
            "matchCriteriaId" : "64675AEC-3E0C-4ED2-99C5-70221ACC372F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.16.20",
            "matchCriteriaId" : "49D80063-7C6B-466B-A0EA-BC24CE4F335A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24922",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24923",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:19.330",
      "lastModified" : "2025-02-28T21:15:21.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft OneDrive for Android Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:onedrive:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "6.73",
            "matchCriteriaId" : "4565D24B-669D-4429-BCF4-248958424061"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24923",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24930",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-03-14T17:15:19.427",
      "lastModified" : "2024-11-21T07:48:47.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:onedrive:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "22.0.0.0",
            "versionEndExcluding" : "23.020.0125.0002",
            "matchCriteriaId" : "A8FD6D00-5A79-4CB7-927F-93BB7EDB2D33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24930",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25206",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-14T17:15:19.517",
      "lastModified" : "2024-11-21T07:49:18.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrestaShop ws_productreviews < 3.6.2 is vulnerable to SQL Injection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:advanced_reviews:*:*:*:*:*:prestashop:*:*",
            "versionEndExcluding" : "3.6.2",
            "matchCriteriaId" : "7CD49624-5F57-4154-8279-1A0DCA41EE49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://addons.prestashop.com/en/customer-reviews/22373-advanced-reviews-photos-reminder-google-snippets.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/03/14/ws_productreviews.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://addons.prestashop.com/en/customer-reviews/22373-advanced-reviews-photos-reminder-google-snippets.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/03/14/ws_productreviews.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27585",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-14T17:15:19.587",
      "lastModified" : "2025-11-04T17:15:35.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to CVE-2022-24793. The difference is that this issue is in parsing the query record `parse_query()`, while the issue in CVE-2022-24793 is in `parse_rr()`. A patch is available as commit `d1c5e4d` in the `master` branch. A workaround is to disable DNS resolution in PJSIP config (by setting `nameserver_count` to zero) or use an external resolver implementation instead."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.13",
            "matchCriteriaId" : "544B7D78-BF3B-4EBA-800A-E7537199615A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pjsip/pjproject/commit/d1c5e4da5bae7f220bc30719888bb389c905c0c5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pjsip/pjproject/security/advisories/GHSA-p6g5-v97c-w5q4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pjsip/pjproject/security/advisories/GHSA-q9cp-8wcq-7pfr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00020.html",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/08/msg00038.html",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5438",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.pjsip.org/pjlib-util/docs/html/group__PJ__DNS__RESOLVER.htm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pjsip/pjproject/commit/d1c5e4da5bae7f220bc30719888bb389c905c0c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pjsip/pjproject/security/advisories/GHSA-p6g5-v97c-w5q4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pjsip/pjproject/security/advisories/GHSA-q9cp-8wcq-7pfr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/08/msg00038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.pjsip.org/pjlib-util/docs/html/group__PJ__DNS__RESOLVER.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27588",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-14T18:15:10.460",
      "lastModified" : "2024-11-21T07:53:12.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hasura is an open-source product that provides users GraphQL or REST APIs. A path traversal vulnerability has been discovered within Hasura GraphQL Engine prior to versions 1.3.4, 2.55.1, 2.20.1, and 2.21.0-beta1. Projects running on Hasura Cloud were not vulnerable. Self-hosted Hasura Projects with deployments that are publicly exposed and not protected by a WAF or other HTTP protection layer should be upgraded to version 1.3.4, 2.55.1, 2.20.1, or 2.21.0-beta1 to receive a patch."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-27"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasura:graphql_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.4",
            "matchCriteriaId" : "966F6E14-F5DC-4610-95F4-19221345A44A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasura:graphql_engine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.11.5",
            "matchCriteriaId" : "3E8B2A1F-26DF-4160-A1ED-6803FC345C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasura:graphql_engine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.12.0",
            "versionEndExcluding" : "2.20.1",
            "matchCriteriaId" : "9FCD45CF-6AE7-4EB5-B50F-2420E4167731"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hasura/graphql-engine/commit/dda54543ee1ecf647ca5d0971b140c3a7b9f4158",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hasura/graphql-engine/releases/tag/v1.3.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/hasura/graphql-engine/releases/tag/v2.11.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/hasura/graphql-engine/releases/tag/v2.20.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/hasura/graphql-engine/releases/tag/v2.21.0-beta.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/hasura/graphql-engine/security/advisories/GHSA-c9rw-rw2f-mj4x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hasura/graphql-engine/commit/dda54543ee1ecf647ca5d0971b140c3a7b9f4158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/hasura/graphql-engine/releases/tag/v1.3.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/hasura/graphql-engine/releases/tag/v2.11.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/hasura/graphql-engine/releases/tag/v2.20.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/hasura/graphql-engine/releases/tag/v2.21.0-beta.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/hasura/graphql-engine/security/advisories/GHSA-c9rw-rw2f-mj4x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27589",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-14T19:15:10.547",
      "lastModified" : "2024-11-21T07:53:12.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Minio is a Multi-Cloud Object Storage framework. Starting with RELEASE.2020-12-23T02-24-12Z and prior to RELEASE.2023-03-13T19-46-17Z, a user with `consoleAdmin` permissions can potentially create a user that matches the root credential `accessKey`. Once this user is created successfully, the root credential ceases to work appropriately. The issue is patched in RELEASE.2023-03-13T19-46-17Z. There are ways to work around this via adding higher privileges to the disabled root user via `mc admin policy set`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minio:minio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020-12-23t02-24-12z",
            "versionEndExcluding" : "2023-03-13t19-46-17z",
            "matchCriteriaId" : "9A9B7DC5-7425-4572-B5D8-5BAC663B315A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/minio/minio/pull/16803",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-9wfv-wmf7-6753",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/pull/16803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-9wfv-wmf7-6753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-14T19:15:10.643",
      "lastModified" : "2025-02-27T20:15:37.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks and elevate_perf_privileges.sh chown calls."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kdab:hotspot:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndIncluding" : "1.4.1",
            "matchCriteriaId" : "CACD56EF-9A2D-4506-9795-80631F6B9A18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/KDAB/hotspot/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/14/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/KDAB/hotspot/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/14/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-14T19:15:10.717",
      "lastModified" : "2025-02-27T20:15:37.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing a terminal with the original session. NOTE: TIOCSTI is unavailable in OpenBSD 6.0 and later, and can be made unavailable in the Linux kernel 6.2 and later."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendoas_project:opendoas:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.8.2",
            "matchCriteriaId" : "49F67D80-C707-4645-B019-A5AB2F56B445"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Duncaen/OpenDoas/issues/106",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Duncaen/OpenDoas/issues/106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Duncaen/OpenDoas/issues/106",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-14T20:15:10.123",
      "lastModified" : "2024-11-21T07:54:53.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, because of set_timezone in models/management_model.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apsystems:energy_communication_unit_firmware:c1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6A58A9-7602-43D7-B062-AEBED61CF0F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:apsystems:energy_communication_unit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FFFF6EC-8894-4437-BEBC-7D02516F8EB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171775/Altenergy-Power-Control-Software-C1.2.5-Command-Injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://apsystems.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ahmedalroky/Disclosures/blob/main/apesystems/os_command_injection.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171775/Altenergy-Power-Control-Software-C1.2.5-Command-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://apsystems.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ahmedalroky/Disclosures/blob/main/apesystems/os_command_injection.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-14T21:15:10.553",
      "lastModified" : "2025-02-27T21:15:18.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted language file upload vulnerability exists the can lead to direct code execution on the content management (CM) server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3",
            "matchCriteriaId" : "C596E04D-C177-4134-9E2C-8571014F5801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3",
            "matchCriteriaId" : "2703AEBB-B226-4D36-AAC4-30F08BB4A092"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/istern/CVE-2023-26262",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sitecore.com/trust",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/istern/CVE-2023-26262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sitecore.com/trust",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26511",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-14T21:15:10.613",
      "lastModified" : "2025-02-27T21:15:18.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Hard Coded Admin Credentials issue in the Web-UI Admin Panel in Propius MachineSelector 6.6.0 and 6.6.1 allows remote attackers to gain access to the admin panel Propiusadmin.php, which allows taking control of the affected system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:propius:machineselector:6.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B41B9064-57C9-4575-8FE1-E9B5BF0E39E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:propius:machineselector:6.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0807F4-F3A9-4D46-95D8-DF28FED38E4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.propius.de/ms_security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.propius.de/ms_security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27590",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-14T21:15:10.763",
      "lastModified" : "2024-11-21T07:53:12.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rizin is a UNIX-like reverse engineering framework and command-line toolset. In version 0.5.1 and prior, converting a GDB registers profile file into a Rizin register profile can result in a stack-based buffer overflow when the `name`, `type`, or `groups` fields have longer values than expected. Users opening untrusted GDB registers files (e.g. with the `drpg` or `arpg` commands) are affected by this flaw. Commit d6196703d89c84467b600ba2692534579dc25ed4 contains a patch for this issue. As a workaround, review the GDB register profiles before loading them with `drpg`/`arpg` commands."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        }, {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rizin:rizin:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.5.1",
            "matchCriteriaId" : "C26825BC-A697-45A5-9574-D88FE11A4319"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rizinorg/rizin/blob/3a7d5116244beb678ad9950bb9dd27d28ed2691f/librz/reg/profile.c#L514",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/rizinorg/rizin/blob/3a7d5116244beb678ad9950bb9dd27d28ed2691f/librz/reg/profile.c#L545",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rizinorg/rizin/commit/d6196703d89c84467b600ba2692534579dc25ed4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rizinorg/rizin/pull/3422",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/rizinorg/rizin/security/advisories/GHSA-rqcp-m8m2-jcqf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WW3JXI4TIJIR7PGFP74SN7GQYHW2F46Y/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/rizinorg/rizin/blob/3a7d5116244beb678ad9950bb9dd27d28ed2691f/librz/reg/profile.c#L514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/rizinorg/rizin/blob/3a7d5116244beb678ad9950bb9dd27d28ed2691f/librz/reg/profile.c#L545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rizinorg/rizin/commit/d6196703d89c84467b600ba2692534579dc25ed4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/rizinorg/rizin/pull/3422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/rizinorg/rizin/security/advisories/GHSA-rqcp-m8m2-jcqf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WW3JXI4TIJIR7PGFP74SN7GQYHW2F46Y/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1327",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-14T22:15:10.367",
      "lastModified" : "2024-11-21T07:38:55.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain administrative access to the device's web management interface by resetting the admin password."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6.74",
            "matchCriteriaId" : "5DA843E4-41CF-48B1-8AFD-4267BE3EEF40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC92B49-60E0-4554-BE7F-D2B5D6EF6454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drupal9.tenable.com/security/research/tra-2023-10",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-pvxx-rv48-qw5m",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drupal9.tenable.com/security/research/tra-2023-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T03:15:08.437",
      "lastModified" : "2024-11-21T07:53:25.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perfree:perfreeblog:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3CBCF1-FE8B-4C5F-B3F4-3FD93332221A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/perfree/PerfreeBlog/issues/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/perfree/PerfreeBlog/issues/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T04:15:11.603",
      "lastModified" : "2024-11-21T07:54:56.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stellarium:stellarium:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2",
            "matchCriteriaId" : "73EA0C2F-54BC-40D1-B0AA-4E0DA399B8A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Stellarium/stellarium/commit/1261f74dc4aa6bbd01ab514343424097f8cf46b7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Stellarium/stellarium/commit/787a894897b7872ae96e6f5804a182210edd5c78",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Stellarium/stellarium/commit/eba61df3b38605befcb43687a4c0a159dbc0c5cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KG6UNRAOYZJSMIUELY3MMJ5J6LIUZXLT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/REDZB5J7WDN2P3NYWFO2NNJXSTOFUUKM/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQ4ZGY5MDDHBEOQTD4IIA2RFID3ATPXA/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Stellarium/stellarium/commit/1261f74dc4aa6bbd01ab514343424097f8cf46b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Stellarium/stellarium/commit/787a894897b7872ae96e6f5804a182210edd5c78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Stellarium/stellarium/commit/eba61df3b38605befcb43687a4c0a159dbc0c5cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KG6UNRAOYZJSMIUELY3MMJ5J6LIUZXLT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/REDZB5J7WDN2P3NYWFO2NNJXSTOFUUKM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQ4ZGY5MDDHBEOQTD4IIA2RFID3ATPXA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T05:15:42.897",
      "lastModified" : "2025-02-27T20:15:37.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Request Forgery (CSRF) in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jizhicms:jizhicms:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B00EB2D-0404-461A-A787-2E7479F0E624"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Cherry-toto/jizhicms/issues/85",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Cherry-toto/jizhicms/issues/85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T05:15:43.007",
      "lastModified" : "2024-11-21T07:52:30.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in the \\admin\\c\\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code via a crafted phtml file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jizhicms:jizhicms:2.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B00EB2D-0404-461A-A787-2E7479F0E624"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Cherry-toto/jizhicms/issues/85",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/Cherry-toto/jizhicms/issues/85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T06:15:08.337",
      "lastModified" : "2025-02-27T15:15:37.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ax3_firmware:16.03.12.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD11D4-8E44-4156-9D8E-7094E36A2152"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ax3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A01F4C4-FFFF-48DD-90DB-4DD29FE57479"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yjzy00001/CVE/blob/main/vuln/WifiGuestSet/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yjzy00001/CVE/blob/main/vuln/WifiGuestSet/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T06:15:08.497",
      "lastModified" : "2024-11-21T07:52:30.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ax3_firmware:16.03.12.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD11D4-8E44-4156-9D8E-7094E36A2152"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ax3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A01F4C4-FFFF-48DD-90DB-4DD29FE57479"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yjzy00001/CVE/blob/main/vuln/rce/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yjzy00001/CVE/blob/main/vuln/rce/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1407",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-15T08:15:09.953",
      "lastModified" : "2024-11-21T07:39:07.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223111."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:student_study_center_desk_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD3233D-01A2-4779-9E48-F3495A5E56D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://s1.ax1x.com/2023/03/15/pp1gd8x.png",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223111",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223111",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://s1.ax1x.com/2023/03/15/pp1gd8x.png",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25695",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-15T10:15:09.940",
      "lastModified" : "2025-02-13T15:15:16.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.2",
            "matchCriteriaId" : "78C0034A-C809-4649-90AE-96AA327554AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apache/airflow/pull/29501",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread/z8w6ckzs61ql365tv4d19k82o67r15p2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/apache/airflow/pull/29501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.apache.org/thread/z8w6ckzs61ql365tv4d19k82o67r15p2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25708",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-15T11:15:09.393",
      "lastModified" : "2024-11-21T07:49:58.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Rextheme WP VR – 360 Panorama and Virtual Tour Builder For WordPress plugin <= 8.2.7 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rextheme:wp_vr:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "8.2.8",
            "matchCriteriaId" : "41C936D3-BD77-4889-97D6-12B7AA3EC0F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wpvr/wordpress-wp-vr-360-panorama-and-virtual-tour-builder-plugin-8-2-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wpvr/wordpress-wp-vr-360-panorama-and-virtual-tour-builder-plugin-8-2-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25709",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-15T11:15:09.473",
      "lastModified" : "2024-11-21T07:49:58.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Plainware Locatoraid Store Locator plugin <= 3.9.11 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plainware:locatoraid:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.9.11",
            "matchCriteriaId" : "8DE3D36A-5A5D-4066-9687-367CF72AD5A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/locatoraid/wordpress-locatoraid-store-locator-plugin-3-9-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/locatoraid/wordpress-locatoraid-store-locator-plugin-3-9-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25968",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-15T11:15:09.550",
      "lastModified" : "2024-11-21T07:50:32.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs, Madalin Ungureanu, Antohe Cristian Client Portal – Private user pages and login plugin <= 1.1.8 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cozmoslabs:client_portal:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.9",
            "matchCriteriaId" : "949248D3-E7C9-4C62-BDC0-6BE3A4C811BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/client-portal/wordpress-client-portal-plugin-1-1-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/client-portal/wordpress-client-portal-plugin-1-1-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0322",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-15T12:15:10.007",
      "lastModified" : "2024-11-21T07:36:58.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Talent Software UNIS allows Reflected XSS.This issue affects UNIS: before 28376.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:talentyazilim:unis:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "28376",
            "matchCriteriaId" : "ACFE0227-4ED1-46E2-8B33-34F003250664"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0147",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T14:15:11.563",
      "lastModified" : "2024-11-21T07:48:20.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:art_gallery_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7F7EC5-D077-4052-9013-D37C2F794796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24726/CVE-2023-24726.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24726/CVE-2023-24726.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T14:15:11.623",
      "lastModified" : "2025-06-27T19:05:16.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_customer_relationship_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1110BA8-AEB2-410C-983F-6EFEBECC8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24728/CVE-2023-24728.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24728/CVE-2023-24728.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T14:15:11.673",
      "lastModified" : "2025-06-27T19:05:16.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_customer_relationship_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1110BA8-AEB2-410C-983F-6EFEBECC8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24729/CVE-2023-24729.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24729/CVE-2023-24729.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T14:15:11.727",
      "lastModified" : "2025-06-27T19:05:16.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_customer_relationship_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1110BA8-AEB2-410C-983F-6EFEBECC8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24730/CVE-2023-24730.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24730/CVE-2023-24730.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T14:15:11.783",
      "lastModified" : "2025-06-27T19:05:16.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_customer_relationship_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1110BA8-AEB2-410C-983F-6EFEBECC8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24731/CVE-2023-24731.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24731/CVE-2023-24731.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24732",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T14:15:11.833",
      "lastModified" : "2025-06-27T19:05:16.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_customer_relationship_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1110BA8-AEB2-410C-983F-6EFEBECC8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24732/CVE-2023-24732.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-24732/CVE-2023-24732.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T14:15:11.890",
      "lastModified" : "2025-02-27T22:15:35.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The armv8_dec_aes_gcm_full() API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-in-the-middle attack. This occurs because of an improperly initialized variable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:aarch64cryptolib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-02-20",
            "matchCriteriaId" : "6200D748-93BA-4500-AB8F-AB987507AB3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ARM-software/AArch64cryptolib/security/advisories/GHSA-47c6-7x5x-r74g",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ARM-software/AArch64cryptolib/security/advisories/GHSA-47c6-7x5x-r74g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0100",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2023-03-15T15:15:09.533",
      "lastModified" : "2025-02-27T15:15:35.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the report parameter (e.g. __report=http://xyz.com/report.rptdesign). If the host indicated in the __report parameter matched the HTTP Host header value, the report would be retrieved. However, the Host header can be tampered with on some configurations where no virtual hosts are put in place (e.g. in the default configuration of Apache Tomcat) or when the default host points to the BIRT server. This vulnerability was patched on Eclipse BIRT 4.13."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:business_intelligence_and_reporting_tools:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.2",
            "versionEndExcluding" : "4.13.0",
            "matchCriteriaId" : "43A0EC40-A930-4409-8EE8-C37B2BA05E41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=580391",
        "source" : "emo@eclipse.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=580391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T15:15:09.617",
      "lastModified" : "2024-11-21T07:52:19.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Libde265 v1.0.11 was discovered to contain a segmentation violation via the function decoder_context::process_slice_segment_header at decctx.cc."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:struktur:libde265:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BAF096-8BC3-4430-930C-8F3E6266C21D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strukturag/libde265/issues/393",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/11/msg00032.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/strukturag/libde265/issues/393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/11/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T15:15:09.670",
      "lastModified" : "2024-11-21T07:52:19.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derive_collocated_motion_vectors at motion.cc."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:struktur:libde265:1.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BAF096-8BC3-4430-930C-8F3E6266C21D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strukturag/libde265/issues/394",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/11/msg00032.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/strukturag/libde265/issues/394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/11/msg00032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T15:15:09.733",
      "lastModified" : "2024-11-21T07:53:28.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jpegoptim_project:jpegoptim:1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99160EA4-AEE6-43CA-AE29-D2D133BB6B17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tjko/jpegoptim/issues/132",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66ZW65INCWSQYIT5E6N6I6PE5D7R6EK7/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/tjko/jpegoptim/issues/132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66ZW65INCWSQYIT5E6N6I6PE5D7R6EK7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1379",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-15T16:15:10.883",
      "lastModified" : "2024-11-21T07:39:04.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file addmem.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223127."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:friendly_island_pizza_website_and_ordering_system_project:friendly_island_pizza_website_and_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FBF1DB-7E39-44AE-AF31-ED03B401CC3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AureliusLia/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223127",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223127",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AureliusLia/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1415",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-15T16:15:10.977",
      "lastModified" : "2024-11-21T07:39:08.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-projects:simple_art_gallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48D55A88-8756-4324-B13D-BC959051ED32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/0xxtoby/Vuldb/blob/main/SIMPLE%20ART%20GALLERY%20system%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223126",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223126",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/0xxtoby/Vuldb/blob/main/SIMPLE%20ART%20GALLERY%20system%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1416",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-15T16:15:11.060",
      "lastModified" : "2024-11-21T07:39:08.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of the argument social_facebook leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223128."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-projects:simple_art_gallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48D55A88-8756-4324-B13D-BC959051ED32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Songs-YZS/CveList/blob/main/SIMPLE%20ART%20GALLERY%20system%20has%20Sql%20injection%20vulnerabilities.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223128",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223128",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Songs-YZS/CveList/blob/main/SIMPLE%20ART%20GALLERY%20system%20has%20Sql%20injection%20vulnerabilities.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1418",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-15T16:15:11.147",
      "lastModified" : "2024-11-21T07:39:09.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file cashconfirm.php of the component POST Parameter Handler. The manipulation of the argument transactioncode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223129 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:friendly_island_pizza_website_and_ordering_system_project:friendly_island_pizza_website_and_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FBF1DB-7E39-44AE-AF31-ED03B401CC3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2889436547/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223129",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223129",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2889436547/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T18:15:10.460",
      "lastModified" : "2024-11-21T07:47:36.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi 'parameter' parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:draytek:vigor2960_firmware:1.5.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "564753CE-A701-4D76-94D8-C452AF0C5E82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:draytek:vigor2960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDA3905-67DD-4F31-AFCF-014F1D7CCC1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sadwwcxz/Vul",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://web.archive.org/web/20230315181013/https://github.com/sadwwcxz/Vul",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.draytek.co.uk/support/guides/kb-remotemanagement",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.draytek.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.draytek.com/about/newsroom/2021/2021/end-of-life-notification-vigor2960",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.draytek.com/support/knowledge-base/5465",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/sadwwcxz/Vul",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://web.archive.org/web/20230315181013/https://github.com/sadwwcxz/Vul",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.draytek.co.uk/support/guides/kb-remotemanagement",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.draytek.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.draytek.com/about/newsroom/2021/2021/end-of-life-notification-vigor2960",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.draytek.com/support/knowledge-base/5465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25804",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-15T18:15:10.617",
      "lastModified" : "2024-11-21T07:50:14.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a limited path traversal vulnerability. An SSH key can be saved into an unintended location, for example the `/tmp` folder using a payload `../../../../../tmp/test111_dev`. This issue has been fixed in version 6.3.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roxy-wi:roxy-wi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.5.0",
            "matchCriteriaId" : "F7E0F151-B465-4854-A875-9C3ADAA64B59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-69j6-crq8-rrhv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-69j6-crq8-rrhv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26284",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-15T18:15:10.703",
      "lastModified" : "2024-11-21T07:51:03.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls.  IBM X-Force ID:  248417."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq_certified_container:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "9.3.0.1",
            "versionEndExcluding" : "9.3.0.4",
            "matchCriteriaId" : "6ABA6343-CBEA-423B-A067-7A0EFB0E3FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:mq_certified_container:*:*:*:*:continous_delivery:*:*:*",
            "versionStartIncluding" : "9.3.1.0",
            "versionEndExcluding" : "9.3.2.0",
            "matchCriteriaId" : "B9D1571A-EA86-4B53-8CEA-8DBEA2834EDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/248417",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6960201",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/248417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6960201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22876",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-15T19:15:24.740",
      "lastModified" : "2024-11-21T07:45:33.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.1 could allow a privileged user to obtain sensitive information that could aid in further attacks against the system.  IBM X-Force ID:  244364."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:standard:*:*:*",
            "versionStartIncluding" : "6.0.0.0",
            "versionEndExcluding" : "6.0.3.8",
            "matchCriteriaId" : "A9039940-B4BB-4341-B331-DE1E4B63BFF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:standard:*:*:*",
            "versionStartIncluding" : "6.1.0.0",
            "versionEndExcluding" : "6.1.2.2",
            "matchCriteriaId" : "4B6E003F-F948-45EA-86CF-4A5A1C516EC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244364",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6963093",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/244364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6963093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T19:15:24.827",
      "lastModified" : "2025-11-03T19:03:08.740",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the config.log_to_syslog and log_opt_dropPackets parameters to mydlink_api.ccp."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-820l_firmware:1.06b02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1243EBC-E270-4CC6-91A2-3ED0C76AD9B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-820l:a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511F49A1-F777-4F89-B050-CB031948F8D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/migraine-sudo/D_Link_Vuln/tree/main/Permanent%20DDOS%20vulnerability%20in%20emailInfo",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/migraine-sudo/D_Link_Vuln/tree/main/Permanent%20DDOS%20vulnerability%20in%20emailInfo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25344",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T20:15:10.480",
      "lastModified" : "2025-02-27T15:15:36.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swig-templates_project:swig-templates:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.4",
            "matchCriteriaId" : "CDF2B020-C983-43DB-83BA-1A5E2FF7DBA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swig_project:swig:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2",
            "matchCriteriaId" : "C1966097-7D59-4D16-92D5-DA88F6D426E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/node-swig/swig-templates/issues/89",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.gem-love.com/2023/02/01/Swig%E6%A8%A1%E6%9D%BF%E5%BC%95%E6%93%8E0day%E6%8C%96%E6%8E%98-%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E5%92%8C%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/node-swig/swig-templates/issues/89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://www.gem-love.com/2023/02/01/Swig%E6%A8%A1%E6%9D%BF%E5%BC%95%E6%93%8E0day%E6%8C%96%E6%8E%98-%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E5%92%8C%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T20:15:10.533",
      "lastModified" : "2025-02-27T19:15:48.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swig-templates_project:swig-templates:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.4",
            "matchCriteriaId" : "CDF2B020-C983-43DB-83BA-1A5E2FF7DBA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swig_project:swig:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.2",
            "matchCriteriaId" : "C1966097-7D59-4D16-92D5-DA88F6D426E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/node-swig/swig-templates/issues/88",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/node-swig/swig-templates/issues/88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25680",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-15T20:15:10.587",
      "lastModified" : "2024-11-21T07:49:55.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Robotic Process Automation 21.0.1 through 21.0.5 is vulnerable to insufficiently protecting credentials.   Queue Provider credentials are not obfuscated while editing queue provider details.  IBM X-Force ID:  247032."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.0.6",
            "matchCriteriaId" : "350AC935-4993-43E7-90B0-FA1EE6E0A7C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:robotic_process_automation_as_a_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.0.6",
            "matchCriteriaId" : "1CA67688-BD17-44A7-873A-ABCC0B93826D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0.1",
            "versionEndExcluding" : "21.0.6",
            "matchCriteriaId" : "D787BDBA-CA43-44FD-8710-6E4526F232D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247032",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962207",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T20:15:10.683",
      "lastModified" : "2025-02-27T20:15:36.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross site scripting (XSS) vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:s-mall-ssm_project:s-mall-ssm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020-02-17",
            "matchCriteriaId" : "8861040C-CF3F-4818-A8F4-D8E229E1F0CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xenv/S-mall-ssm/issues/37",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xenv/S-mall-ssm/issues/37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22591",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-15T21:15:08.747",
      "lastModified" : "2024-11-21T07:45:01.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to session tokens for not being invalidated after a password reset.  IBM X-Force ID:  243710."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 3.9,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0.1",
            "versionEndExcluding" : "21.0.7.1",
            "matchCriteriaId" : "25F35F65-8E99-471F-B847-5CF8732DF5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.2",
            "matchCriteriaId" : "D9E5DD9A-5C83-447C-B0C2-A631934B9D19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:robotic_process_automation_as_a_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.0.2",
            "matchCriteriaId" : "42BB5963-D963-4815-B041-19EDABA52931"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/243710",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962175",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/243710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26484",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-15T21:15:08.857",
      "lastModified" : "2024-11-21T07:51:36.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KubeVirt is a virtual machine management add-on for Kubernetes. In versions 0.59.0 and prior, if a malicious user has taken over a Kubernetes node where virt-handler (the KubeVirt node-daemon) is running, the virt-handler service account can be used to modify all node specs. This can be misused to lure-in system-level-privileged components which can, for instance, read all secrets on the cluster, or can exec into pods on other nodes. This way, a compromised node can be used to elevate privileges beyond the node until potentially having full privileged access to the whole cluster. The simplest way to exploit this, once a user could compromise a specific node, is to set with the virt-handler service account all other nodes to unschedulable and simply wait until system-critical components with high privileges appear on its node. No patches are available as of time of publication. As a workaround, gatekeeper users can add a webhook which will block the `virt-handler` service account to modify the spec of a node."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kubevirt:kubevirt:*:*:*:*:*:kubernetes:*:*",
            "versionEndIncluding" : "0.59.0",
            "matchCriteriaId" : "B0C470F6-1D95-437E-9A57-D0075ED16482"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kubevirt/kubevirt/issues/9109",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kubevirt/kubevirt/security/advisories/GHSA-cp96-jpmq-xrr2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kubevirt/kubevirt/issues/9109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kubevirt/kubevirt/security/advisories/GHSA-cp96-jpmq-xrr2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27596",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-15T21:15:08.953",
      "lastModified" : "2024-11-21T07:53:13.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.8 and 3.2.5, OpenSIPS crashes when a malformed SDP body is sent multiple times to an OpenSIPS configuration that makes use of the `stream_process` function. This issue was discovered during coverage guided fuzzing of the function `codec_delete_except_re`. By abusing this vulnerability, an attacker is able to crash the server. It affects configurations containing functions that rely on the affected code, such as the function `codec_delete_except_re`. This issue has been fixed in version 3.1.8 and 3.2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.8",
            "matchCriteriaId" : "BC3084E2-3D4E-4C9F-8830-213591FC1DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.5",
            "matchCriteriaId" : "272511B0-B141-4AD0-A4FC-51A5EEC59D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSIPS/opensips/commit/dd051f8ed5ae3347fb1d556ced3c97822c9d8450",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-3ghx-j39m-cw4f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/commit/dd051f8ed5ae3347fb1d556ced3c97822c9d8450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-3ghx-j39m-cw4f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27597",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-15T21:15:09.057",
      "lastModified" : "2024-11-21T07:53:13.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.8 and 3.2.5, when a specially crafted SIP message is processed by the function `rewrite_ruri`, a crash occurs due to a segmentation fault. This issue causes the server to crash. It affects configurations containing functions that make use of the affected code, such as the function `setport`. This issue has been fixed in version 3.1.8 and 3.2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.8",
            "matchCriteriaId" : "BC3084E2-3D4E-4C9F-8830-213591FC1DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.5",
            "matchCriteriaId" : "272511B0-B141-4AD0-A4FC-51A5EEC59D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSIPS/opensips/commit/b2dffe4b5cd81182c9c8eabb6c96aac96c7acfe3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-358f-935m-7p9c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/commit/b2dffe4b5cd81182c9c8eabb6c96aac96c7acfe3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-358f-935m-7p9c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27598",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-15T21:15:09.143",
      "lastModified" : "2024-11-21T07:53:13.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, sending a malformed `Via` header to OpenSIPS triggers a segmentation fault when the function `calc_tag_suffix` is called. A specially crafted `Via` header, which is deemed correct by the parser, will pass uninitialized strings to the function `MD5StringArray` which leads to the crash. Abuse of this vulnerability leads to Denial of Service due to a crash. Since the uninitialized string points to memory location `0x0`, no further exploitation appears to be possible. No special network privileges are required to perform this attack, as long as the OpenSIPS configuration makes use of functions such as `sl_send_reply` or `sl_gen_totag` that trigger the vulnerable code. This issue has been fixed in versions 3.1.7 and 3.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "8EF642AA-D786-40DF-801D-515888AF89BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.4",
            "matchCriteriaId" : "34713A76-CAED-43CF-A77C-73F1C36208AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSIPS/opensips/commit/ab611f74f69d9c42be5401c40d56ea06a58f5dd7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-wxfg-3gwh-rhvx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/commit/ab611f74f69d9c42be5401c40d56ea06a58f5dd7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-wxfg-3gwh-rhvx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27599",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-15T21:15:09.247",
      "lastModified" : "2024-11-21T07:53:14.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, when the function `append_hf` handles a SIP message with a malformed To header, a call to the function `abort()` is performed, resulting in a crash. This is due to the following check in `data_lump.c:399` in the function `anchor_lump`. An attacker abusing this vulnerability will crash OpenSIPS leading to Denial of Service. It affects configurations containing functions that make use of the affected code, such as the function `append_hf`. This issue has been fixed in versions 3.1.7 and 3.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "8EF642AA-D786-40DF-801D-515888AF89BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.4",
            "matchCriteriaId" : "34713A76-CAED-43CF-A77C-73F1C36208AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSIPS/opensips/commit/cb56694d290530ac308f44b453c18120b1c1109d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qvj2-vqrg-f5jx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/commit/cb56694d290530ac308f44b453c18120b1c1109d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qvj2-vqrg-f5jx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T21:15:09.333",
      "lastModified" : "2025-11-03T22:16:06.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.90",
            "matchCriteriaId" : "964796B3-BA45-4180-A8DA-64CF93CED122"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://capec.mitre.org/data/definitions/495.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6UQ6LKDTLSSD64TBIZ3XEKBM2SWC63VV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU2ZT4ITSEOOR2CFBAHK4Z67KXJIEWQA/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://thekelleys.org.uk/dnsmasq/doc.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=blob%3Bf=CHANGELOG",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://capec.mitre.org/data/definitions/495.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6UQ6LKDTLSSD64TBIZ3XEKBM2SWC63VV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OU2ZT4ITSEOOR2CFBAHK4Z67KXJIEWQA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://thekelleys.org.uk/dnsmasq/doc.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=blob%3Bf=CHANGELOG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T22:15:10.200",
      "lastModified" : "2024-11-21T07:49:22.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gfi:kerio_connect:9.4.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECAA2D8-7007-4C64-B1CC-19B90FE8A651"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Frycos/62fa664bacd19a85235be19c6e4d7599",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.kerioconnect.gfi.com/hc/en-us/articles/9044634878226-Kerio-Connect-10-0-0-Release-Notes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://gist.github.com/Frycos/62fa664bacd19a85235be19c6e4d7599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.kerioconnect.gfi.com/hc/en-us/articles/9044634878226-Kerio-Connect-10-0-0-Release-Notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27600",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-15T22:15:10.267",
      "lastModified" : "2024-11-21T07:53:14.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, OpenSIPS crashes when a malformed SDP body is received and is processed by the `delete_sdp_line` function in the sipmsgops module. This issue can be reproduced by calling the function with an SDP body that does not terminate by a line feed (i.e. `\\n`).\n\nThe vulnerability was found while performing black-box fuzzing against an OpenSIPS server running a configuration that made use of the functions `codec_delete_except_re` and `codec_delete_re`. The same issue was also discovered while performing coverage guided fuzzing on the function `codec_delete_except_re`. The crash happens because the function `delete_sdp_line` expects that an SDP line is terminated by a line feed (`\\n`).\n\nBy abusing this vulnerability, an attacker is able to crash the server. It affects configurations containing functions that rely on the affected code, such as the function `codec_delete_except_re`. Due to the sanity check that is performed in the `del_lump` function, exploitation of this issue will generate an `abort` in the lumps processing function, resulting in a Denial of Service. This issue is patched in versions 3.1.7 and 3.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "8EF642AA-D786-40DF-801D-515888AF89BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.4",
            "matchCriteriaId" : "34713A76-CAED-43CF-A77C-73F1C36208AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSIPS/opensips/commit/c6ab3bb406c447e30c7d33a1a8970048b4612100",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-67w7-g4j8-3wcx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/docs/modules/3.3.x/sipmsgops.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/commit/c6ab3bb406c447e30c7d33a1a8970048b4612100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-67w7-g4j8-3wcx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/docs/modules/3.3.x/sipmsgops.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27601",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-15T22:15:10.357",
      "lastModified" : "2024-11-21T07:53:14.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, OpenSIPS crashes when a malformed SDP body is received and is processed by the `delete_sdp_line` function in the sipmsgops module. This issue can be reproduced by calling the function with an SDP body that does not terminate by a line feed (i.e. `\\n`).\n\nThe vulnerability was found while performing black-box fuzzing against an OpenSIPS server running a configuration that made use of the functions `codec_delete_except_re` and `codec_delete_re`. The same issue was also discovered while performing coverage guided fuzzing on the function `codec_delete_except_re`. The crash happens because the function `delete_sdp_line` expects that an SDP line is terminated by a line feed (`\\n`):\n\nBy abusing this vulnerability, an attacker is able to crash the server. It affects configurations containing functions that rely on the affected code, such as the function `codec_delete_except_re`. Due to the sanity check that is performed in the `del_lump` function, exploitation of this issue will generate an `abort` in the lumps processing function, resulting in a Denial of Service. This issue has been fixed in versions 3.1.7 and 3.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "8EF642AA-D786-40DF-801D-515888AF89BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.4",
            "matchCriteriaId" : "34713A76-CAED-43CF-A77C-73F1C36208AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSIPS/opensips/commit/8f87c7c03da55f9c79bd92e67fa2c94b2a7ce5cf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-xj5x-g52f-548h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/docs/modules/3.3.x/sipmsgops.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/commit/8f87c7c03da55f9c79bd92e67fa2c94b2a7ce5cf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-xj5x-g52f-548h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/docs/modules/3.3.x/sipmsgops.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28095",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-15T22:15:10.440",
      "lastModified" : "2024-11-21T07:54:23.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.1.7 and 3.2.4 have a potential issue in `msg_translator.c:2628` which might lead to a server crash. This issue was found while fuzzing the function `build_res_buf_from_sip_req` but could not be reproduced against a running instance of OpenSIPS. This issue could not be exploited against a running instance of OpenSIPS since no public function was found to make use of this vulnerable code. Even in the case of exploitation through unknown vectors, it is highly unlikely that this issue would lead to anything other than Denial of Service. This issue has been fixed in versions 3.1.7 and 3.2.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "8EF642AA-D786-40DF-801D-515888AF89BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.4",
            "matchCriteriaId" : "34713A76-CAED-43CF-A77C-73F1C36208AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSIPS/opensips/commit/9cf3dd3398719dd91207495f76d7726701c5145c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-7pf3-24qg-8v9h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/commit/9cf3dd3398719dd91207495f76d7726701c5145c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-7pf3-24qg-8v9h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28096",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-15T22:15:10.527",
      "lastModified" : "2024-11-21T07:54:23.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSIPS, a Session Initiation Protocol (SIP) server implementation, has a memory leak starting in the 2.3 branch and priot to versions 3.1.8 and 3.2.5. The memory leak was detected in the function `parse_mi_request` while performing coverage-guided fuzzing. This issue can be reproduced by sending multiple requests of the form `{\"jsonrpc\": \"2.0\",\"method\": \"log_le`. This malformed message was tested against an instance of OpenSIPS via FIFO transport layer and was found to increase the memory consumption over time.\n\nTo abuse this memory leak, attackers need to reach the management interface (MI) which typically should only be exposed on trusted interfaces. In cases where the MI is exposed to the internet without authentication, abuse of this issue will lead to memory exhaustion which may affect the underlying system’s availability. No authentication is typically required to reproduce this issue. On the other hand, memory leaks may occur in other areas of OpenSIPS where the cJSON library is used for parsing JSON objects.\n\nThe issue has been fixed in versions 3.1.8 and 3.2.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.8",
            "matchCriteriaId" : "BC3084E2-3D4E-4C9F-8830-213591FC1DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.5",
            "matchCriteriaId" : "272511B0-B141-4AD0-A4FC-51A5EEC59D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSIPS/opensips/commit/417568707520af25ec5c5dd91da18e6db3649dcb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-2mg2-g46r-j4qr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/commit/417568707520af25ec5c5dd91da18e6db3649dcb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-2mg2-g46r-j4qr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1389",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-15T23:15:09.403",
      "lastModified" : "2025-11-03T18:58:55.867",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before being used in a call to popen(), allowing an unauthenticated attacker to inject commands, which would be run as root, with a simple POST request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-05-01",
      "cisaActionDue" : "2023-05-22",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "TP-Link Archer AX-21 Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_ax21_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.4",
            "matchCriteriaId" : "E2DBA0CE-1871-4B4E-BCBD-3693E61DF23E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_ax21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF5A235-4531-4F03-882C-C2A6B6D07A5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/174131/TP-Link-Archer-AX21-Command-Injection.html",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-11",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/174131/TP-Link-Archer-AX21-Command-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-1389",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1421",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2023-03-15T23:15:09.467",
      "lastModified" : "2024-11-21T07:39:09.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected cross-site scripting vulnerability in the OAuth flow completion endpoints in Mattermost allows an attacker to send AJAX requests on behalf of the victim via sharing a crafted link with a malicious state parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.32.0",
            "versionEndExcluding" : "7.7.0",
            "matchCriteriaId" : "F351E4FF-2CDE-47E5-931B-D64D5683F701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24468",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2023-03-15T23:15:09.563",
      "lastModified" : "2025-05-16T20:22:52.280",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3",
            "matchCriteriaId" : "7D8BAEC8-626A-4520-A89F-DB40CC774D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "689649F7-75D8-4D13-9A71-50C2908EACA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F82417-D88A-40C5-AD90-7AB826E29C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD98BB8-7A85-41D6-B1CB-7849D61F085A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "729C4860-8CAC-4D4B-8C68-00B1E84E700A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "FEFFEB38-B4CA-48ED-9149-073334346CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp4_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "B14AC9B7-9339-44BA-BF1B-1876DAFBCA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5CE16C-376A-40C1-83E9-2424AAAB668D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp5_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "B693A40C-E75F-4937-9500-7068947120A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp5_patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6F0324-EF27-4C0E-B737-5F7998A1D555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "3396CE81-7FB7-4354-B8C8-5206222F2D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp6_patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A25944E-674C-4D84-9F3E-F357DB784153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "D0BEF722-A582-400C-8696-0CA0A5ABCA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BB6165FC-DC61-4354-9769-5BE769BB5313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.4:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B35521A-8FD6-49D2-9BAD-CC2937C68F3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6372/data/advanced-authentication-releasenotes-6372.html",
        "source" : "security@opentext.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.netiq.com/documentation/advanced-authentication-64/advanced-authentication-releasenotes-6411/data/advanced-authentication-releasenotes-6411.html",
        "source" : "security@opentext.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6372/data/advanced-authentication-releasenotes-6372.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.netiq.com/documentation/advanced-authentication-64/advanced-authentication-releasenotes-6411/data/advanced-authentication-releasenotes-6411.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28097",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-15T23:15:09.627",
      "lastModified" : "2024-11-21T07:54:23.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.9 and 3.2.6, a malformed SIP message containing a large _Content-Length_ value and a specially crafted Request-URI causes a segmentation fault in OpenSIPS. This issue occurs when a large amount of shared memory using the `-m` flag was allocated to OpenSIPS, such as 10 GB of RAM. On the test system, this issue occurred when shared memory was set to `2362` or higher. This issue is fixed in versions 3.1.9 and 3.2.6. The only workaround is to guarantee that the Content-Length value of input messages is never larger than `2147483647`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.9",
            "matchCriteriaId" : "F318FB66-A6E9-4A16-996B-DD76A8C64A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.6",
            "matchCriteriaId" : "3C466525-94B6-4196-9CEA-CD72452FE22D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSIPS/opensips/commit/7cab422e2fc648f910abba34f3f0dbb3ae171ff5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-c6j5-f4h4-2xrq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/commit/7cab422e2fc648f910abba34f3f0dbb3ae171ff5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-c6j5-f4h4-2xrq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28098",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-15T23:15:09.717",
      "lastModified" : "2024-11-21T07:54:23.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, a specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected way due to a bug in the function `parse_param_name()` . This issue was discovered while performing coverage guided fuzzing of the function parse_msg. The AddressSanitizer identified that the issue occurred in the function `q_memchr()` which is being called by the function `parse_param_name()`. This issue may cause erratic program behaviour or a server crash. It affects configurations containing\nfunctions that make use of the affected code, such as the function `www_authorize()` . Versions 3.1.7 and 3.2.4 contain a fix."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "8EF642AA-D786-40DF-801D-515888AF89BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.4",
            "matchCriteriaId" : "34713A76-CAED-43CF-A77C-73F1C36208AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSIPS/opensips/commit/dd9141b6f67d7df4072f3430f628d4b73df5e102",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-jrqg-vppj-hr2h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/commit/dd9141b6f67d7df4072f3430f628d4b73df5e102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-jrqg-vppj-hr2h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28099",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-15T23:15:09.807",
      "lastModified" : "2024-11-21T07:54:24.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.9 and 3.2.6, if `ds_is_in_list()` is used with an invalid IP address string (`NULL` is illegal input), OpenSIPS will attempt to print a string from a random address (stack garbage), which could lead to a crash.  All users of `ds_is_in_list()` without the `$si` variable as 1st parameter could be affected by this vulnerability to a larger, lesser or no extent at all, depending if the data passed to the function is a valid IPv4 or IPv6 address string or not. Fixes will are available starting with the 3.1.9 and 3.2.6 minor releases. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.9",
            "matchCriteriaId" : "F318FB66-A6E9-4A16-996B-DD76A8C64A6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.6",
            "matchCriteriaId" : "3C466525-94B6-4196-9CEA-CD72452FE22D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenSIPS/opensips/commit/e2f13d374",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/issues/2780",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-pfm5-6vhv-3ff3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/commit/e2f13d374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/issues/2780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-pfm5-6vhv-3ff3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28337",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-15T23:15:09.897",
      "lastModified" : "2024-11-21T07:54:52.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden “forceFWUpdate” parameter may be provided to force the upgrade to complete and bypass certain validation checks. End users can use this to upload modified, unofficial, and potentially malicious firmware to the device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AD0D92-9ADB-40EC-8CBF-DCC993754DC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC92B49-60E0-4554-BE7F-D2B5D6EF6454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drupal9.tenable.com/security/research/tra-2023-12",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://drupal9.tenable.com/security/research/tra-2023-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28338",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-15T23:15:09.957",
      "lastModified" : "2024-11-21T07:54:52.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Any request send to a Netgear Nighthawk Wifi6 Router (RAX30)'s web service containing a “Content-Type” of “multipartboundary=” will result in the request body being written to “/tmp/mulipartFile” on the device itself. A sufficiently large file will cause device resources to be exhausted, resulting in the device becoming unusable until it is rebooted."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AD0D92-9ADB-40EC-8CBF-DCC993754DC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC92B49-60E0-4554-BE7F-D2B5D6EF6454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drupal9.tenable.com/security/research/tra-2023-12",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://drupal9.tenable.com/security/research/tra-2023-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28460",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T23:15:10.013",
      "lastModified" : "2024-11-21T07:55:07.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability was discovered in Array Networks APV products. A remote attacker can send a crafted packet after logging into the affected appliance as an administrator, resulting in arbitrary shell code execution. This is fixed in 8.6.1.262 or newer and 10.4.2.93 or newer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arraynetworks:array_os:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.6.1.243",
            "matchCriteriaId" : "B95D68DD-66E0-49E9-A629-CFC27B1B64AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arraynetworks:array_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.1.12",
            "versionEndIncluding" : "10.4.0.79",
            "matchCriteriaId" : "A495E881-FB00-4D4F-823B-74E09A8FFF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arraynetworks:array_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4.2.12",
            "versionEndIncluding" : "10.4.2.58",
            "matchCriteriaId" : "B21C2B5E-B719-405E-A440-8E696B1CE783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arraynetworks:array_os:10.4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2866A3C-911B-451E-8D1E-FB2D3FE44BD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv10650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B8896E1-0827-4DF6-A632-59E1C070BF04"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv11600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8B1A9F-751E-4DB9-89EB-26EDAD38D277"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv1600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D1CE39-AAE9-41E8-9EBE-52CE62F04A12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv1600t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B69124F-8796-41C8-AEDF-A78623777E04"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv1600v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5593430D-614C-41B7-BFDE-DC386B071E2D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv1800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A31B40DD-3C61-45E4-9A32-CAC257E28C4A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv2600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC12DCC-F257-4FF8-9AC3-F45F1AF1C3E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv2600v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC95ED6-D1DC-4E64-917F-36796B5B2492"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F54F2DE-889D-4036-AB92-74EE347FF689"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F1DC25-40C7-433C-A8A1-5BA0BF7B8203"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv3600v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "243C97F3-4440-4A7D-BF6A-59CDC5611001"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv3650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B5A8EA-7442-4F51-9A2B-1658A9918534"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0CEF16-7C68-4BA0-BD75-210DD155255F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3C0C3B-09EB-411D-90DF-69B0F90024C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7209BC0E-E55F-4071-923F-25DD4FA3C281"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv6600fips:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3025939-798D-4B63-A3FE-712E15D6CC3F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv7600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FF0EC72-8236-430B-B759-46ACFEF3E9CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "935D6EB4-2B2C-43E0-8FCF-01B559840DF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:apv800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D81145-DB70-4819-BA19-773102337AA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:vapv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E4F55-6CF4-40D8-954E-12640A4D5224"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_Command_Injection_Vulnerabilities_APV_ID-133258.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_Command_Injection_Vulnerabilities_APV_ID-133258.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28461",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-15T23:15:10.070",
      "lastModified" : "2025-11-03T18:14:11.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header without authentication. The product could then be exploited through a vulnerable URL. The 2023-03-09 vendor advisory stated \"a new Array AG release with the fix will be available soon.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2024-11-25",
      "cisaActionDue" : "2024-12-16",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arraynetworks:arrayos_ag:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.4.0.481",
            "matchCriteriaId" : "D704D079-D1AF-40EA-98E7-BE1E01371B11"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE11A77-8C2F-46CA-87BA-47624380FFC1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1000t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ED51E1F-3155-40C6-B61C-73D6A9F64987"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1000v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0BC33CF-FA0B-4556-B11E-61FF9B14880A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1100v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9C8C9AE-AF59-4E5A-93CD-A394F1A31FA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E025A9D-6B7C-42B6-95EA-0A5726A919F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0771D54C-15DF-403C-8CFA-B1E7D0136F50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1200v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9F6B87-E3D2-419A-B086-B981EF912F80"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D385DBD0-C4A9-4168-82C2-832E0E40F42D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1500fips:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01569AB3-736D-47FE-86DD-F08ACDDCD11E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1500v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E45185-071F-414A-AF78-4739F15A1D93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F0988E-5E75-486A-9229-956D38A51C35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:ag1600v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D09E2CC-C1B5-40DC-AD1A-7C6AB20525DC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arraynetworks:vxag:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E149796-E3D7-4FAF-AB64-8D273E701861"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28461",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28466",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T00:15:11.563",
      "lastModified" : "2025-05-05T16:15:34.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.13",
            "versionEndIncluding" : "5.4.240",
            "matchCriteriaId" : "D278AC00-7045-4EBB-91BC-A46C700CEC12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.177",
            "matchCriteriaId" : "9FED8369-E7A1-48C6-9700-6ADEDEC371F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.105",
            "matchCriteriaId" : "0888AE70-CB0A-45C0-B9BD-A5371244C8DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "B22D8949-72A1-4CED-8318-A040635DEEBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.2.7",
            "matchCriteriaId" : "EFEDDF17-189C-4901-BD6B-41752E80AAA4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=49c47cc21b5b7a3d8deb18fc57b0aa2ab1286962",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0006/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=49c47cc21b5b7a3d8deb18fc57b0aa2ab1286962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T01:15:46.780",
      "lastModified" : "2025-11-03T18:18:59.080",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2024-09-30",
      "cisaActionDue" : "2024-10-21",
      "cisaRequiredAction" : "The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.",
      "cisaVulnerabilityName" : "D-Link DIR-820 Router OS Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-820l_firmware:1.05b03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5195E86A-22A4-412B-B22C-614A68942FB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-820l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CE60CD-DCDA-43E0-80A9-257557EDBC29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/migraine-sudo/D_Link_Vuln/tree/main/cmd%20Inject%20in%20pingV4Msg",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/migraine-sudo/D_Link_Vuln/tree/main/cmd%20Inject%20in%20pingV4Msg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-25280",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T01:15:46.857",
      "lastModified" : "2025-11-03T18:45:07.500",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1_FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-820l_firmware:1.05b03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5195E86A-22A4-412B-B22C-614A68942FB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-820l:a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511F49A1-F777-4F89-B050-CB031948F8D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/migraine-sudo/D_Link_Vuln/tree/main/stackoverflow%20cancelPing",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/migraine-sudo/D_Link_Vuln/tree/main/stackoverflow%20cancelPing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T01:15:46.917",
      "lastModified" : "2024-11-21T07:52:06.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onekeyadmin:onekeyadmin:1.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308108A9-2A64-4A1D-A631-8E0D4820E7C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keheying/onekeyadmin/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/keheying/onekeyadmin/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T01:15:47.003",
      "lastModified" : "2024-11-21T07:55:12.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sudo before 1.9.13 does not escape control characters in log messages."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.13",
            "matchCriteriaId" : "5E60309C-D7D6-4036-94D8-2A947AFCC1F9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sudo-project/sudo/commit/334daf92b31b79ce68ed75e2ee14fca265f029ca",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_13",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sudo-project/sudo/commit/334daf92b31b79ce68ed75e2ee14fca265f029ca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T01:15:47.067",
      "lastModified" : "2024-11-21T07:55:12.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sudo before 1.9.13 does not escape control characters in sudoreplay output."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.13",
            "matchCriteriaId" : "5E60309C-D7D6-4036-94D8-2A947AFCC1F9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sudo-project/sudo/commit/334daf92b31b79ce68ed75e2ee14fca265f029ca",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_13",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sudo-project/sudo/commit/334daf92b31b79ce68ed75e2ee14fca265f029ca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T02:15:08.323",
      "lastModified" : "2025-02-26T21:15:15.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SA-WR915ND router firmware v17.35.1 was discovered to be vulnerable to code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lancombg:sa-wr915nd_firmware:17.35.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02E7C9E4-480E-49E7-AA4A-FDBD9959053B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lancombg:sa-wr915nd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEEA98B-284C-4332-A22E-7C9DBA425B8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/yinfei6/f7099835e9abbe16a29744430ea76a37#file-cve-2023-23150",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://reference14.example.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gist.github.com/yinfei6/f7099835e9abbe16a29744430ea76a37#file-cve-2023-23150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://reference14.example.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T02:15:08.387",
      "lastModified" : "2024-11-21T07:48:22.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Ofcms v.1.1.4 allows a remote attacker to to escalate privileges via the respwd method in SysUserController."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ofcms_project:ofcms:1.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BEC359-FBFB-4504-A489-ABB933E1DFEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/oufu/ofcms/issues/I6BD2Q",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitee.com/oufu/ofcms/issues/I6L75S",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gitee.com/oufu/ofcms/issues/I6BD2Q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitee.com/oufu/ofcms/issues/I6L75S",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T02:15:08.447",
      "lastModified" : "2025-02-26T17:15:18.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command execution vulnerability was discovered in JHR-N916R router firmware version<=21.11.1.1483."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jcgcn.com:jhr-n916r_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.11.1.1483",
            "matchCriteriaId" : "422228BF-1395-43B2-AE64-2B8AF680A45C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jcgcn.com:jhr-n916r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5E4252-82D5-40AA-A72A-CC3182BC0AAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/yinfei6/25b30ba88396408ff85200eaf3413f0c",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/yinfei6/25b30ba88396408ff85200eaf3413f0c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T02:15:08.497",
      "lastModified" : "2024-11-21T07:51:56.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection vulnerability found in Kirin Fortress Machine v.1.7-2020-0610 allows attackers to execute arbitrary code via the /admin.php?controller=admin_commonuser parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tosec:kirin_fortress_machine:1.7-2020-0610:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6495586-817F-4B1C-9F82-48D5311688E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/yinfei6/b13e7527887ac0eb809fa0b6f36305e1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tosec.com.cn",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/yinfei6/b13e7527887ac0eb809fa0b6f36305e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tosec.com.cn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T02:15:08.550",
      "lastModified" : "2025-04-04T15:15:06.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iteachyou:dreamer_cms:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FBBD01-A570-42CF-8FBE-E9F2BF0D040A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/isoftforce/dreamer_cms/issues/I6GCUN",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/iteachyou-wjn/dreamer_cms/issues/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/isoftforce/dreamer_cms/issues/I6GCUN",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/iteachyou-wjn/dreamer_cms/issues/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T02:15:08.603",
      "lastModified" : "2025-02-26T19:15:18.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker toescalate privileges via the AddUser method of the UserController function in Tenant Management module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoofy:hippo4j:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "ACB74483-2C0C-4789-B9DD-9CC387B18AAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opengoofy/hippo4j/issues/1061",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opengoofy/hippo4j/issues/1061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24571",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-03-16T10:15:09.803",
      "lastModified" : "2024-11-21T07:48:08.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with administrator privileges could potentially exploit this vulnerability to perform arbitrary code execution.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:embedded_box_pc_3000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.18.0",
            "matchCriteriaId" : "43559802-8144-41E2-A771-2448C1B9379F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:embedded_box_pc_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A103FC-917C-4C48-A7C5-1DFBD03D81F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000210955/dsa-2023-046",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000210955/dsa-2023-046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1429",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-16T12:15:11.187",
      "lastModified" : "2024-11-21T07:39:10.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.19",
            "matchCriteriaId" : "9F355AEC-329F-43D1-A3D7-44C2481A1999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/7588c336edb24050656111b89d69e69cc9feb5f5",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e0829fea-e458-47b8-84a3-a74476d9638f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/7588c336edb24050656111b89d69e69cc9feb5f5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e0829fea-e458-47b8-84a3-a74476d9638f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T12:15:11.270",
      "lastModified" : "2024-11-21T07:48:17.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vxsearch:vx_search:13.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BCF4562-3998-4D15-A90D-5D881533D0BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vxsearch:vx_search:14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7AB422-9CA7-43C0-BB95-12F74689E4DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40SumitVerma101/windows-privilege-escalation-part-1-unquoted-service-path-c7a011a8d8ae",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://packetstormsecurity.com/files/171300/VX-Search-13.8-Unquoted-Service-Path.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://medium.com/%40SumitVerma101/windows-privilege-escalation-part-1-unquoted-service-path-c7a011a8d8ae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://packetstormsecurity.com/files/171300/VX-Search-13.8-Unquoted-Service-Path.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1431",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-16T13:15:10.243",
      "lastModified" : "2024-11-21T07:39:10.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart data exports in a publicly accessible location (/wp-content/plugins/wordpress-simple-paypal-shopping-cart/includes/admin/). This makes it possible for unauthenticated attackers to view information that should be limited to administrators only and can include data like first name, last name, email, address, IP Address, and more."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.6.3",
            "matchCriteriaId" : "089561EB-85CE-4AD5-8E37-754AE14D31E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2878855%40wordpress-simple-paypal-shopping-cart&new=2878855%40wordpress-simple-paypal-shopping-cart&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ea4453bc-557b-4abf-85c6-4aecfd8f4012?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2878855%40wordpress-simple-paypal-shopping-cart&new=2878855%40wordpress-simple-paypal-shopping-cart&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/ea4453bc-557b-4abf-85c6-4aecfd8f4012?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1432",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-16T13:15:10.327",
      "lastModified" : "2026-03-30T18:15:59.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /fos/admin/ajax.php?action=save_settings of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be launched remotely. VDB-223214 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_food_ordering_system:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72B0380-7394-4DCF-BC93-3212CA3F4298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223214",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223214",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1433",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-16T13:15:10.407",
      "lastModified" : "2024-11-21T07:39:10.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/products/controller.php?action=add of the component Products Handler. The manipulation of the argument filename leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223215."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gadget_works_online_ordering_system_project:gadget_works_online_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFA006A-2A38-4948-9F6E-487523293F52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zhengjiashengbaba/bug_report/blob/main/UPLOAD.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223215",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223215",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zhengjiashengbaba/bug_report/blob/main/UPLOAD.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T13:15:10.493",
      "lastModified" : "2025-02-26T19:15:18.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_book_store_project_project:online_book_store_project:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59053137-B4BA-4E5A-B344-A74428248C10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/iknownt/bug_report/blob/main/vendors/itsourcecode.com/Online-Book-Store-Project/sql_injection.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/iknownt/bug_report/blob/main/vendors/itsourcecode.com/Online-Book-Store-Project/sql_injection.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27875",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-16T13:15:10.543",
      "lastModified" : "2025-02-26T15:15:19.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Aspera Faspex 5.0.4 could allow a user to change other user's credentials due to improper access controls.  IBM X-Force ID:  249847."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_faspex:5.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99D40A3-8AF9-4A89-A53C-CC5C3FC5E240"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249847",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6963662",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6963662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:10.233",
      "lastModified" : "2024-11-21T07:51:54.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liblouis:liblouis:3.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6125AA43-2A33-4526-B355-32D42F306CD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liblouis/liblouis/issues/1292",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/liblouis/liblouis/pull/1297",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/liblouis/liblouis/issues/1292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/liblouis/liblouis/pull/1297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:10.290",
      "lastModified" : "2025-02-26T16:15:12.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDataPath functions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liblouis:liblouis:3.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6125AA43-2A33-4526-B355-32D42F306CD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liblouis/liblouis/issues/1301",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/liblouis/liblouis/pull/1302",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/liblouis/liblouis/issues/1301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/liblouis/liblouis/pull/1302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:10.343",
      "lastModified" : "2024-11-21T07:51:54.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liblouis:liblouis:3.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6125AA43-2A33-4526-B355-32D42F306CD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://loutrace.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/liblouis/liblouis",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/liblouis/liblouis/pull/1300",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "http://loutrace.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/liblouis/liblouis",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/liblouis/liblouis/pull/1300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:10.407",
      "lastModified" : "2024-11-21T07:52:13.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Qibosoft QiboCMS v7 was discovered to contain a remote code execution (RCE) vulnerability via the Get_Title function at label_set_rs.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qibosoft:qibocms:v7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338D2C8A-B4DD-4039-9EC2-72D8125B2FEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dienamer/vul/blob/main/2023-01-14.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dienamer/vul/blob/main/2023-01-14.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:10.453",
      "lastModified" : "2025-03-03T19:15:33.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via an arbitrarily supplied URL parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typecho:typecho:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "6E76E682-FBFE-4F43-85E0-B59B7ACE52BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/typecho/typecho/commit/f9ede542c9052ba22a6096d8412e2f02d9de872b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/typecho/typecho/issues/1535",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/typecho/typecho/commit/f9ede542c9052ba22a6096d8412e2f02d9de872b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/typecho/typecho/issues/1535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:10.500",
      "lastModified" : "2025-02-26T16:15:13.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code viathe Post Editorparameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typecho:typecho:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "6E76E682-FBFE-4F43-85E0-B59B7ACE52BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/typecho/typecho/issues/1536",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/typecho/typecho/issues/1536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:10.557",
      "lastModified" : "2025-02-26T19:15:18.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dede/group_store.php endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.106",
            "matchCriteriaId" : "32FBA984-F927-4417-842F-4BEB8D0A4353"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://srpopty.github.io/2023/02/27/DedeCMS-V5.7.160-Backend-SQLi-group/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://srpopty.github.io/2023/02/27/DedeCMS-V5.7.160-Backend-SQLi-group/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:10.607",
      "lastModified" : "2025-02-26T19:15:18.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dedestory_catalog.php endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.106",
            "matchCriteriaId" : "32FBA984-F927-4417-842F-4BEB8D0A4353"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://srpopty.github.io/2023/02/27/DedeCMS-V5.7.160-Backend-SQLi-story/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://srpopty.github.io/2023/02/27/DedeCMS-V5.7.160-Backend-SQLi-story/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:10.663",
      "lastModified" : "2025-02-26T19:15:19.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via the Comment Manager /admin/manage-comments.php component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:L",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typecho:typecho:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "6E76E682-FBFE-4F43-85E0-B59B7ACE52BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/typecho/typecho/issues/1539",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://srpopty.github.io/2023/03/02/Typecho-V1.2.0-Backend-Reflected-XSS-cid/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/typecho/typecho/issues/1539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://srpopty.github.io/2023/03/02/Typecho-V1.2.0-Backend-Reflected-XSS-cid/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:10.717",
      "lastModified" : "2025-02-26T21:15:15.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:tcpreplay:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7272A798-456E-43CC-A8D2-33FF2AE16FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/appneta/tcpreplay/issues/780",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/appneta/tcpreplay/pull/781",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/appneta/tcpreplay/issues/780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/appneta/tcpreplay/pull/781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:10.767",
      "lastModified" : "2025-02-26T21:15:15.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:tcpreplay:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7272A798-456E-43CC-A8D2-33FF2AE16FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/appneta/tcpreplay/issues/787",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/appneta/tcpreplay/issues/787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27785",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:10.823",
      "lastModified" : "2025-02-26T21:15:16.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:tcpreplay:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7272A798-456E-43CC-A8D2-33FF2AE16FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/appneta/tcpreplay/issues/785",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/appneta/tcpreplay/issues/785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27786",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:10.877",
      "lastModified" : "2025-02-26T17:15:19.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:tcpreplay:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7272A798-456E-43CC-A8D2-33FF2AE16FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/appneta/tcpreplay/issues/782",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/appneta/tcpreplay/pull/783",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/appneta/tcpreplay/issues/782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/appneta/tcpreplay/pull/783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:10.940",
      "lastModified" : "2025-02-26T17:15:19.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:tcpreplay:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7272A798-456E-43CC-A8D2-33FF2AE16FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/appneta/tcpreplay/issues/788",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/appneta/tcpreplay/issues/788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:11.000",
      "lastModified" : "2025-02-26T17:15:20.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:tcpreplay:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7272A798-456E-43CC-A8D2-33FF2AE16FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/appneta/tcpreplay/issues/786",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/appneta/tcpreplay/issues/786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:11.057",
      "lastModified" : "2025-02-26T17:15:20.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:tcpreplay:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7272A798-456E-43CC-A8D2-33FF2AE16FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/appneta/tcpreplay/issues/784",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/appneta/tcpreplay/pull/783",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/appneta/tcpreplay/issues/784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/appneta/tcpreplay/pull/783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T15:15:11.107",
      "lastModified" : "2024-11-21T07:54:30.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:request_project:request:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "2.88.1",
            "matchCriteriaId" : "1F9F582D-5FBC-49BE-B2B3-9971CA676B17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://doyensec.com/resources/Doyensec_Advisory_RequestSSRF_Q12023.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/request/request/issues/3442",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/request/request/pull/3444",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0007/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://doyensec.com/resources/Doyensec_Advisory_RequestSSRF_Q12023.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/request/request/issues/3442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Technical Description", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/request/request/pull/3444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T16:15:12.487",
      "lastModified" : "2025-02-26T20:15:12.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_image_gallery_web_app_project:simple_image_gallery_web_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6A45BD-9C87-472B-89E2-CDEEF8C1C7AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/50214",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/50214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28100",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-16T16:15:12.553",
      "lastModified" : "2024-11-21T07:54:24.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but using the `TIOCLINUX` ioctl command instead of `TIOCSTI`. If a Flatpak app is run on a Linux virtual console such as `/dev/tty1`, it can copy text from the virtual console and paste it into the command buffer, from which the command might be run after the Flatpak app has exited. Ordinary graphical terminal emulators like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the Linux virtual consoles `/dev/tty1`, `/dev/tty2` and so on. A patch is available in versions 1.10.8, 1.12.8, 1.14.4, and 1.15.4. As a workaround, don't run Flatpak on a Linux virtual console. Flatpak is primarily designed to be used in a Wayland or X11 graphical environment."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.10.8",
            "matchCriteriaId" : "D7C3C072-DE21-4063-A561-44CA1E5AE584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.8",
            "matchCriteriaId" : "3572AF68-883F-44B3-95F8-5062ED29D5F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.14.0",
            "versionEndExcluding" : "1.14.4",
            "matchCriteriaId" : "50573059-1A6E-40DA-9D68-9D054DCC71BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.15.0",
            "versionEndExcluding" : "1.15.4",
            "matchCriteriaId" : "02CAAC00-232B-45A2-86ED-1EE9DC1F0128"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatpak/flatpak/commit/8e63de9a7d3124f91140fc74f8ca9ed73ed53be9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/security/advisories/GHSA-7qpw-3vjv-xrqp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://marc.info/?l=oss-security&m=167879021709955&w=2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-12",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/8e63de9a7d3124f91140fc74f8ca9ed73ed53be9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/security/advisories/GHSA-7qpw-3vjv-xrqp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://marc.info/?l=oss-security&m=167879021709955&w=2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28101",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-16T16:15:12.650",
      "lastModified" : "2024-11-21T07:54:24.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated permissions, they can hide those permissions from users of the `flatpak(1)` command-line interface by setting other permissions to crafted values that contain non-printable control characters such as `ESC`. A fix is available in versions 1.10.8, 1.12.8, 1.14.4, and 1.15.4. As a workaround, use a GUI like GNOME Software rather than the command-line interface, or only install apps whose maintainers you trust."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.10.8",
            "matchCriteriaId" : "D7C3C072-DE21-4063-A561-44CA1E5AE584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.8",
            "matchCriteriaId" : "3572AF68-883F-44B3-95F8-5062ED29D5F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.14.0",
            "versionEndExcluding" : "1.14.4",
            "matchCriteriaId" : "50573059-1A6E-40DA-9D68-9D054DCC71BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.15.0",
            "versionEndExcluding" : "1.15.4",
            "matchCriteriaId" : "02CAAC00-232B-45A2-86ED-1EE9DC1F0128"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatpak/flatpak/commit/409e34187de2b2b2c4ef34c79f417be698830f6c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/6cac99dafe6003c8a4bd5666341c217876536869",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/7fe63f2e8f1fd2dafc31d45154cf0b191ebec66c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/security/advisories/GHSA-h43h-fwqx-mpp8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-12",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/409e34187de2b2b2c4ef34c79f417be698830f6c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/6cac99dafe6003c8a4bd5666341c217876536869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/7fe63f2e8f1fd2dafc31d45154cf0b191ebec66c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/security/advisories/GHSA-h43h-fwqx-mpp8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28104",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-16T16:15:12.750",
      "lastModified" : "2024-11-21T07:54:24.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`silverstripe/graphql` serves Silverstripe data as GraphQL representations. In versions 4.2.2 and 4.1.1, an attacker could use a specially crafted graphql query to execute a denial of service attack against a website which has a publicly exposed graphql endpoint. This mostly affects websites with particularly large/complex graphql schemas. Users should upgrade to `silverstripe/graphql` 4.2.3 or 4.1.2 to remedy the vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:graphql:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF57E3F0-F64D-4656-8B9B-5299FCF2AEBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:graphql:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13FF549B-58BF-4074-BB38-BFF96093495B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/silverstripe/silverstripe-graphql/pull/526",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.1.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.2.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-graphql/security/advisories/GHSA-67g8-c724-8mp3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-graphql/pull/526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.1.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.2.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-graphql/security/advisories/GHSA-67g8-c724-8mp3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T17:15:09.423",
      "lastModified" : "2025-02-26T20:15:12.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "School Registration and Fee System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at/bilal final/edit_user.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:school_registration_and_fee_system_project:school_registration_and_fee_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F100A856-80A5-463B-945D-FB306E1F3300"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/forsean/bug_report/blob/main/vendors/hemedy99/School%20Registration%20and%20Fee%20System/SQLi-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/forsean/bug_report/blob/main/vendors/hemedy99/School%20Registration%20and%20Fee%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28105",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-16T17:15:09.483",
      "lastModified" : "2024-11-21T07:54:24.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "go-used-util has commonly used utility functions for Go. Versions prior to 0.0.34 have a ZipSlip issue when using fsutil package to unzip files. When users use `zip.Unzip` to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. The issue has been fixed in version 0.0.34. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go-huge-util_project:go-huge-util:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "0.0.34",
            "matchCriteriaId" : "58D7A018-81A2-441C-AAA7-220C71A59A01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dablelv/go-huge-util/commit/0e308b0fac8973e6fa251b0ab095cdc5c1c0956b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dablelv/go-huge-util/security/advisories/GHSA-5g39-ppwg-6xx8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dablelv/go-huge-util/commit/0e308b0fac8973e6fa251b0ab095cdc5c1c0956b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/dablelv/go-huge-util/security/advisories/GHSA-5g39-ppwg-6xx8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28106",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-16T17:15:09.573",
      "lastModified" : "2024-11-21T07:54:24.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malicious script to an unsuspecting user. Users may upgrade to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.19",
            "matchCriteriaId" : "9F355AEC-329F-43D1-A3D7-44C2481A1999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/c59d0bf1d03a5037b586fe06230694fa3818dbf2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14669.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-x5j3-mq9g-8jc8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/fa77d780-9b23-404b-8c44-12108881d11a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/c59d0bf1d03a5037b586fe06230694fa3818dbf2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14669.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-x5j3-mq9g-8jc8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/fa77d780-9b23-404b-8c44-12108881d11a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28108",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-16T17:15:09.663",
      "lastModified" : "2024-11-21T07:54:25.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore is an open source data and experience management platform. Prior to version 10.5.19, quoting is not done properly in UUID DAO model. There is the theoretical possibility to inject custom SQL if the developer is using this methods with input data and not doing proper input validation in advance and so relies on the auto-quoting being done by the DAO class. Users should update to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.19",
            "matchCriteriaId" : "9F355AEC-329F-43D1-A3D7-44C2481A1999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/08e7ba56ae983c3c67ec563b6989b16ef8f35275.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14633",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-xc9p-r5qj-8xm9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/08e7ba56ae983c3c67ec563b6989b16ef8f35275.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-xc9p-r5qj-8xm9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28109",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-16T17:15:09.763",
      "lastModified" : "2024-11-21T07:54:25.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Play With Docker is a browser-based Docker playground. Versions 0.0.2 and prior are vulnerable to domain hijacking.\nBecause CORS configuration was not correct, an attacker could use `play-with-docker.com` as an example and set the origin header in an http request as `evil-play-with-docker.com`. The domain would echo in response header, which successfully bypassed the CORS policy and retrieved basic user information. This issue has been fixed in commit ed82247c9ab7990ad76ec2bf1498c2b2830b6f1a. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:play-with-docker:play_with_docker:0.0.1:*:*:*:*:go:*:*",
            "matchCriteriaId" : "39F1E076-60E4-4945-950B-F37607615D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:play-with-docker:play_with_docker:0.0.2:*:*:*:*:go:*:*",
            "matchCriteriaId" : "9FAE59ED-5C29-48FB-80EB-56F66698D613"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/play-with-docker/play-with-docker/commit/ed82247c9ab7990ad76ec2bf1498c2b2830b6f1a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/play-with-docker/play-with-docker/security/advisories/GHSA-vq59-5x26-h639",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/play-with-docker/play-with-docker/commit/ed82247c9ab7990ad76ec2bf1498c2b2830b6f1a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/play-with-docker/play-with-docker/security/advisories/GHSA-vq59-5x26-h639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28110",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-16T17:15:09.850",
      "lastModified" : "2024-11-21T07:54:25.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, refactoring coco's SSH/SFTP service and Web Terminal service. Prior to version 2.28.8, using illegal tokens to connect to a Kubernetes cluster through Koko can result in the execution of dangerous commands that may disrupt the Koko container environment and affect normal usage. The vulnerability has been fixed in v2.28.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fit2cloud:jumpserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.28.8",
            "matchCriteriaId" : "3EAD9153-B643-42B7-A7B7-76E991B4893C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fit2cloud:koko:-:*:*:*:*:go:*:*",
            "matchCriteriaId" : "E876D749-E604-421D-B495-4FE2D9555411"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jumpserver/jumpserver/releases/tag/v2.28.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/jumpserver/jumpserver/security/advisories/GHSA-6x5p-jm59-jh29",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jumpserver/jumpserver/releases/tag/v2.28.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/jumpserver/jumpserver/security/advisories/GHSA-6x5p-jm59-jh29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0811",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-16T18:15:11.160",
      "lastModified" : "2024-11-21T07:37:52.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nOmron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program. \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2h-cpu64_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CEA3421-91F4-4F53-B13A-4FA5B014A635"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2h-cpu64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFEA3DDA-E62F-42F0-965B-2E9B16DB776A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2h-cpu64-eip_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88523EAF-E774-4AEE-B6CF-A9E458C21211"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2h-cpu64-eip:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "217C64FF-ED40-4BF4-9173-C7FB7C980B31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2h-cpu65_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD9E842-5282-41A1-B829-A7D564FF9DF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2h-cpu65:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EE3457-049C-4213-8BB0-45FA75EB3437"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2h-cpu65-eip_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12EC0FF9-EFBD-4076-9BFD-3DAB7BDB0556"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2h-cpu65-eip:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF9D440F-91E2-4EAE-9014-0B4C5CBF5BA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2h-cpu66_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4936F6FF-574D-409A-9373-F96F35F30E3E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2h-cpu66:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36ADF13A-5013-4D2C-A03D-1980CC89FBD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2h-cpu66-eip_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A61CDE9B-0594-4CC3-8303-C99014090ACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2h-cpu66-eip:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362B1B2D-2EDF-46DB-8910-9A7EAFB085B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2h-cpu67_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A834B2BA-B9A2-4918-9E27-95DCD63CB945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2h-cpu67:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD370FA-B783-40C1-9D81-120861D7EFDA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2h-cpu67-eip_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AC1B4F-A4AB-4E3E-B267-F1669FC4F138"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2h-cpu67-eip:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8137B2F0-4B17-473D-A26D-E85C8327FD95"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2h-cpu68_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD9741EE-11C1-420A-B29C-B62B218DBC5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2h-cpu68:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D887A60-47E0-42FD-A0E3-047F6D4968C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2h-cpu68-eip_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2957DBA4-8A61-4863-A84B-193395100E88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2h-cpu68-eip:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA17EF1D-53C4-49D7-A161-AA0441EEE23B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2m-cpu11_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701D7B0E-7E53-4392-A9B9-9C79540F7363"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2m-cpu11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5BD0D7-D424-4DE3-8D77-B1D11A2800AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2m-cpu12_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02962BAF-804A-445B-922B-95D671DD22F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2m-cpu12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4806CEF0-4D86-4BAE-A2BA-7E84FD568514"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2m-cpu13_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9022B43E-3ED9-4D61-9309-BB8E2FE23C82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2m-cpu13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAECE6DE-8A46-4878-869C-DE2C127D8662"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2m-cpu14_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE64022B-B3F0-43D7-A4EC-19194A888DF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2m-cpu14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E174038-B411-4A68-B3C1-E8DCCDCA3640"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2m-cpu15_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C448B5E-8294-4654-BE16-79AC53809AB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2m-cpu15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B1AF84-4CB8-4973-9097-EA61A2D29B87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2m-cpu31_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2F379C8-8458-44ED-B693-21886DEB0876"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2m-cpu31:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8827188B-1E99-408A-AFC1-B55F30E2B23F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2m-cpu32_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9BBCB32-5B16-4E92-8CA9-1B717005D2A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2m-cpu32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D2CB45D-986A-441F-9B12-2BC754F032D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2m-cpu33_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDA2235-075C-42E0-88E3-D4649E8DE2D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2m-cpu33:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE5F4A0B-88DC-4EFC-8F8E-30DE4288F926"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2m-cpu34_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2028144-16ED-4CEB-AA41-5E3D26949A07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2m-cpu34:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6A7652-0622-4D88-A375-EAE5CC47D12E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cj2m-cpu35_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56015D99-4A3C-4444-8953-2D96D56AF6DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cj2m-cpu35:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8CDF09-DC6A-4008-8E42-9CCABF5AEE4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e10dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1032AA62-CA57-44BA-B310-CAD68BED00DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e10dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492FDEF5-C968-49EA-A5E2-AC04F5E5E211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e10dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51D9BE0A-2AE6-4A6A-B829-E188FD6F257A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e10dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F66C9F-EAE8-4567-A335-B726FD6590C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e10dt-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23B0A989-9452-4B9F-A07A-568748619EFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e10dt-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D106D865-5956-4812-B28D-CFC127582382"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e10dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E92A18-91C4-43BD-B365-C92710551B6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e10dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB4C865-3309-42C0-A589-F8F2DE7E727B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e10dt1-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA821BD-514F-4455-B3FB-200493FA5E9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e10dt1-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78CC7437-6256-4B83-81A4-70433220E346"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e10dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112664AA-1547-41BC-866E-BA68B30D0910"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e10dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E93097A-DEF1-45C8-B8D5-91785FFF8FFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e14dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D5789E-B7ED-4E17-A23D-E94F0724ACC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e14dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2619C8-FFA4-4B20-94B8-D285DD10C959"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e14sdr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A0C247-54AE-4CF5-B026-ABE498732BAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e14sdr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8EBA46-35DE-468F-86D1-389C6E34E7F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e20dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55690CDB-237F-4653-BE76-383FEAD8F887"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e20dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E80ECB-6850-4CF8-B5D5-A3808493149F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e20sdr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "484108C8-DAD5-44F0-82B9-5343481BC150"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e20sdr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CF7CB5-14C5-4447-B1F8-007547678398"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e30dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60F75EFB-F49E-442A-874F-FC5A303E2E70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e30dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AE27B4-5D6D-4E9E-9073-9FB5DC641873"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e30sdr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303581EC-B95F-4DBC-86D9-326C19A17E0A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e30sdr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02FE2B2F-9479-44F4-8194-867863C0C537"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e40dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7B52E9-7E49-4B05-B857-F04C941D7D9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e40dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96887A7C-F9A0-42E4-9F21-2ABBBF6C254D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e40sdr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D2D2285-2C7F-450A-97DF-A223955B3708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e40sdr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BB2AF52-17C4-4737-9762-ABB24EA3B2EC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-e60sdr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4570BD7-14A7-4D7D-AC77-AD5C93B888BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-e60sdr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B23B671E-69BD-488C-8EF3-377201A09498"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-na20dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5337C2-D55B-480E-AAE0-BBC839620970"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-na20dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B3A11F-FE6E-4049-8CA2-6BF334A9F0C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-na20dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E3E11AE-A90A-47A2-BB45-F2A0A42272A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-na20dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0883426-BA4E-41D5-A4B6-0A39A52BE3AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1e-na20dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D5FBEC-85F0-4F60-9D26-ED53515F7978"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1e-na20dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7403B451-8583-4331-BB3D-CFF9F2B3D7BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1h-x40dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFAA6D3E-04EC-4D69-8E37-9016507A307F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1h-x40dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E0DEFF-B8E5-4335-9A2D-D84180607C0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1h-x40dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6B413F-772A-4D78-91CE-FABBA0B8443A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1h-x40dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685BC238-5E98-4DB1-AE02-6C481344E9E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1h-x40dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA31F39-6614-456D-B035-8DE68A026C9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1h-x40dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D92A8E-98CC-4BE9-88FE-F8C804CA7CC1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1h-xa40dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F49940A4-07FD-41B0-8744-5E975796F142"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1h-xa40dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC05354-20B2-4A6E-8306-D03C6E3AD309"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1h-xa40dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249311C3-A979-4522-BFF4-D4B38B4E16A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1h-xa40dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A0308F-5EAC-4B70-9A5F-C7CDA2DDF212"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1h-xa40dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81154F82-BCF7-42E5-B067-C451199F74D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1h-xa40dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F52486D2-2999-48D3-A339-BB741F53A363"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1h-y20dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39483BE5-8713-4254-B9EA-4BCE789AF712"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1h-y20dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97D103FC-4834-4685-973D-0F9CA2D7EA30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-el20dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C03E37-BC41-4715-8EDE-ECE651A37C29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-el20dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C4EF01-C4A7-4B39-BFE8-72D521C486C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-em30dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69234574-0E9C-4F77-8AC4-969E447A8F60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-em30dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E14C4F9-8FE4-4F43-8112-07D5378A84ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-em30dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32C4195-152A-4200-B344-C936753B96AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-em30dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0979F7-E29F-46B5-8F84-510EFC4634FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-em30dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7217F845-2872-4EEC-9937-CBB5F34023F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-em30dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6590630A-9C95-4EAD-9A61-250AFB6477F4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-em40dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F890EEFE-829E-4B5C-9DB9-7C74D55994E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-em40dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A182B49E-AEFD-4805-A0E3-B0537CF12E31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-em40dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28F305EA-B987-4772-88ED-A52958D3B716"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-em40dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C19DD450-0155-4BF0-9DDF-E4349780F2EC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-em40dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EFDFA9-F5B4-49FF-B3AB-89C544E569CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-em40dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34540E6-F51C-4110-BA0D-EED7064F5CBC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l10dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A745A3D-E83F-4E0D-81F7-52232924E592"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l10dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA55DA09-5E13-45B0-8710-B6B49A1A62D9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l10dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFD11AF5-3B45-4CE3-97C0-72BA7426C264"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l10dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C19292-938E-4983-A8AA-B36DF329094A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l10dt-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F094120-47EF-45DD-8580-E74D2D630B5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l10dt-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C7AFC6-60E0-4EBA-96E3-2685800B24ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l10dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC312F54-3222-4FDE-B9B1-164DA8D46706"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l10dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1088D577-2F55-4BD3-AA1D-1A6CF2D339D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l10dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209EECA1-1E38-411C-87F6-06CC36ABDC69"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l10dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70B0BDD4-2E30-4B7B-872B-06FFBA6053DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l14dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F03AC406-1DBC-4227-A92F-D591EF56AFFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l14dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5CB347-8BEC-4E84-A1F6-76BA35DFAC7B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l14dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7AC739-1AAD-4431-AF55-3C3E193671D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l14dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5068BFF1-F178-4D69-829F-945305F9B412"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l14dt-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD59A59-28AB-4011-A443-87114DA68D52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l14dt-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE9CBDF-E18D-489B-AF1B-6077931F46DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l14dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8AEC1E-D3A8-4DE2-AA7D-398506D6FF9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l14dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "182CF675-A32B-4993-8804-79BCE388923C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l14dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0BBB98-140D-486B-97B9-199092FD26A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l14dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814EDBAA-D59D-4C46-A957-9694D47483F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l20dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B5D6D86-D74C-4401-9110-DB0382227FDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l20dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A530D544-C783-4613-A3C8-B0C7EA300018"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l20dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B39D7CB-8E40-4487-A170-5EC5824B6105"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l20dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84631F87-0D7E-40C1-8289-CD1A2E207C4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l20dt-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7E817-284D-4D8B-9EA2-62223D4C7FC5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l20dt-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934C016E-15ED-430A-AEB3-44E4E62CC5D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l20dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA16DB99-169E-492E-B467-EE0C0638A3FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l20dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B62C8A-6EE4-47EE-9F37-E10C524E882A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-l20dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E3CBF3-57A9-42C7-BFB6-F9CEFFC7C62D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-l20dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05EA6077-9FA3-4809-A40A-4B74225B06FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m30dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B0C619-2CFD-4D16-9261-5C8889ECDF8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m30dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23E7635-E802-42A0-8576-A2DF1121ECBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m30dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31C506D-BA40-4957-BFD9-FF305E8C2FA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m30dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51CBF484-AC8F-4113-80AD-6DB4AA4CBC3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m30dt-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "486E3783-DF33-4C41-83DE-62DB1D4D4825"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m30dt-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5958CD35-41AE-4C9D-96BB-306D2666024C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m30dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D766B7B6-4D58-46E9-A9B9-1D7FAE9E98A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m30dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F461172-E6DA-406B-A804-FE65CA6346B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m30dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320D0CE7-AD50-40B6-B84F-BB1B6C61A8C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m30dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62E9B5C1-5399-4B15-BFBE-92C22D7A4171"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m40dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F95C7EB0-BFB7-44C6-B046-2322C8638453"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m40dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB30D6A9-AFC5-47B4-842E-FECF73248915"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m40dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E78083-4C8A-40CC-A7FF-AA93E5293643"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m40dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF03368-06FD-4E10-9830-4E042A746B2E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m40dt-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41030ACB-FD81-4A55-8C98-532D91FAA8BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m40dt-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4860BC-A3DF-47A7-B71F-816CE2230002"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m40dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8CF5D41-88F8-4D48-A482-F33E53780DE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m40dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "653BFE05-8CFD-474A-8847-2CE67ED15E6A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m40dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F30012-AF79-4BD3-9340-39AABE666C01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m40dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D912333-4723-427C-AA8A-A6F35F76F29D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m60dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D2EC55-3F76-4B4F-A206-07D30495DD7F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m60dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15E9EBA-55DA-4F5A-AF15-9A442DE6E36F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m60dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B694A9B-E712-4454-8032-22A34391CB93"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m60dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D98CAB-2557-4284-81EC-8BC91DB6FAA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m60dt-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC9F73F5-DE76-4E64-8E8E-D25998B2CE0A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m60dt-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "980C3430-CFA5-4AEE-A471-D25A3605B837"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m60dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0401C355-4750-4A79-AD26-E921353A26D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m60dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB576949-B564-438B-A133-722265395C8D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp1l-m60dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202CE32B-DFCF-4A1F-9B53-26102086CE3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp1l-m60dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9E24455-D717-404D-89FA-7264B9E46ED2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-e14dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220BF2F0-BE84-435E-8896-212FF9D77160"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-e14dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6174707B-826C-4345-8110-6B217DA52A26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-e20dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50496EB1-68D3-4EA9-B582-8C353F756CEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-e20dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0BD951E-44ED-4D82-B0C3-B9B1D46F3A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-e30dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CFC095-C2ED-41A3-B9AA-F2CAC3B981E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-e30dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6262CA25-49AA-4B70-9C0C-8BFAF131A3F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-e40dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188F11D6-A962-4376-8E36-1AD49D737402"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-e40dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D990A774-2297-4A97-8119-3EB702857933"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-e60dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568442DD-A3B4-46B4-9D2E-F74E6E443672"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-e60dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D769909-624F-4A0F-B5D3-BDCA50A80579"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n14dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B1B7AD1-536F-4E58-A75B-8BA3C3A23914"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n14dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD65352-3CA9-4100-A43C-E90B9A947C5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n14dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39D66F2-BC33-453F-8C99-BF3AEA9F761F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n14dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C24BCE2-52A1-4FEB-AAD3-41353CD84984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n14dt-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DA4071-0974-4771-A18B-279F0D6B2C35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n14dt-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BF7C527-D13F-4CB3-B82A-8D6A260691F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n14dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14EBA507-3AF8-4DE6-8409-F1B5ED1B9920"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n14dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A23E947-9164-4777-B1ED-2CCF2772CD0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n14dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE16330C-6750-439A-8048-19460ABE9110"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n14dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5154B29-C37C-434E-9561-01E7E21668FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n20dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72078549-7430-4B14-912F-2A0D65D53966"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n20dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "483CE206-38B1-4C80-B72F-E9C3BB617775"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n20dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46886B13-9CA8-4987-9F98-A9439F20567A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n20dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "254C508A-AF34-436A-ABCB-4B0F07C65A40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n20dt-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E9EB27A-40D9-4B78-AE6A-43AC2B5DF0D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n20dt-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D64F79-2318-456C-9A5C-010624449A41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n20dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "122A6D44-5B9B-4180-BB5A-A1D95881D000"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n20dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A29DE91-1AE1-4BB8-9EA8-3819A9527C55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n20dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE88574C-1EB9-44C7-AE48-13D1DED936D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n20dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E1DBABA-1D03-4F86-B282-85199F17641A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n30dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90201614-893A-4AEA-96DF-7A564256C5AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n30dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F0A232-C019-4FBF-8C39-9C84CC677A6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n30dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E25A3-303C-4254-9F0F-EED9C4A00E47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n30dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4967DD24-9FFF-412B-ABD4-D4B16061AD89"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n30dt-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B056FC-D637-44C8-9D13-5B74BB9DE415"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n30dt-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DADFCB-0EDA-4E70-99D1-A2F4940B6B2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n30dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D8041C-FE71-442F-BE2E-2B4BCF83D5FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n30dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3831E2D9-E95A-40B9-9847-669966599F8B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n30dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E08A380-63D8-4B4A-9BA7-D7808C8E09CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n30dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82405D43-247B-45BF-B120-F0F79DA6A2A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n40dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BCB07F-4A4F-43FB-8E06-D56536AE685E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n40dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9CE33DF-4B13-4536-9BA2-50C62D5FCDB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n40dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFF6536-CFE0-47B7-BF79-16385ECDA2CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n40dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4928D48-B787-44C6-9581-DC2A86842093"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n40dt-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6A7E217-8C70-4632-A743-9EB0F3E2539F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n40dt-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC24DC5-7AD3-4659-857A-833DF5A802EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n40dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A12C2C-1B92-4990-A8F6-081B7BC97551"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n40dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "020EB0FD-BAB0-472B-9B2D-7DAFDDE78B8E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n40dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E55159-3489-43DD-896D-C487C648AEAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n40dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3495F0BE-D5F3-4418-B62F-6DD881ED53BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n60dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF410A70-6C73-42C3-AF60-515097F8B0FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n60dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5C73C4-FA18-4157-84EF-3518B315F64B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n60dr-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13E1C9B-EF7D-4035-AE43-3520FBBE8DDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n60dr-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A5CCCCC-624C-4E83-9A2F-7F456CA96BB4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n60dt-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA5F70B-EA92-47C3-BAD5-32831F2456D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n60dt-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7664C99B-84D5-43D0-B84E-4B0903FA8491"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n60dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "928C3BE8-9D9F-4F11-B509-64A299909912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n60dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "507D9E91-5174-450D-9FE4-B8C30A78B1D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-n60dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B2B5C5-80D4-481E-A480-CED4AB131B25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-n60dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01C67DF1-97F2-4F79-B91E-3CD5075DFCF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-s30dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B62525F7-B0C1-42EC-B638-33051E4538CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-s30dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2D824C-E585-4628-8B3D-4E6B6BF6CE30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-s30dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB56006C-6503-481D-9B6B-1EEA87CB14A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-s30dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099A02E0-37B3-4E48-8B7C-078986C33DDA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-s30dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEBC603-1E4D-484E-B11B-7DF0D4695EED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-s30dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28397A9A-392B-4722-9B9C-13C0216690A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-s40dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C840A980-4C35-4743-8402-970DBDDC40BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-s40dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "708B1F9D-5AE9-4B44-B7AD-A75BA9A701EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-s40dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55639060-B748-4C88-8FD3-FCA5747EF16C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-s40dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF446D1-FED7-49E4-A263-9FECEFE7DC50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-s40dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F112CED-88DA-4A2E-B0B9-054C2297AC6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-s40dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E7FB20-E2EE-483B-88B7-221267DEFA92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-s60dr-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C75FEBE7-1C81-436A-95BB-456657AE6937"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-s60dr-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0349D213-BC83-4643-ACA1-65B3D7AEF65B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-s60dt-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DFC14DF-8E82-460F-8723-0CF10C78AE80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-s60dt-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CDB1EF9-E2EC-4C08-AD60-B6B77C627682"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cp2e-s60dt1-d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F36FEA-BE00-4E26-8463-69F875DD9E16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cp2e-s60dt1-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5CFB6B1-99BA-422B-AEBA-49562808CFCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cs1w-drm21-v1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D8E6149-709E-454A-8EAF-652FE154FE47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cs1w-drm21-v1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0262007B-4FBA-40EF-90AB-48C1026E9057"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cs1w-eip21_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5399F298-287F-449F-830D-D1361A5D48C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cs1w-eip21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4535257F-8735-493B-B4E3-BC019E11F9C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cs1w-etn21_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE56257F-D1BC-4B7E-9B10-94CCA6320D0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cs1w-etn21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAA10E43-9054-4F5A-8591-F1B3E0D5D3A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cs1w-fln22_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03186989-B410-46DB-B693-391A4BD8F916"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cs1w-fln22:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54F3460E-C8A3-4F8C-8C2C-D06A5A946E64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cs1w-nc\\[\\]71_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F542C1-BE74-4137-BFFE-C7DDCF6711B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cs1w-nc\\[\\]71:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EE3D98A-1F13-4783-A740-DE3A63A166CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cs1w-spu01-v2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D66E30B-B3CB-4D3C-8893-39C6BC4B5923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cs1w-spu01-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "731B32F1-94A6-4BD5-BD68-0AD0282CB60E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:omron:sysmac_cs1w-spu02-v2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23151E6F-1945-4921-B08A-2FFCD0508BBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:omron:sysmac_cs1w-spu02-v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B5A3D5-B9FA-472A-90EF-2BA62A37C736"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.ia.omron.com/product/vulnerability/OMSR-2023-001_en.pdf",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.ia.omron.com/product/vulnerability/OMSR-2023-001_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1256",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-16T19:15:18.227",
      "lastModified" : "2024-11-21T07:38:46.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aveva:aveva_plant_scada:2020r2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AC5A74A3-B5E5-4E0A-A9C9-E0EE74E84000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aveva:aveva_plant_scada:2020r2:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6D6F35-C5A4-4C5B-AF6D-E977CEC7456E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aveva:aveva_plant_scada:2023:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D19168D6-A186-4266-A12C-196CA438CF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aveva:aveva_plant_scada:2023:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "03FE6538-371E-45BE-BD72-4C41F37B0A71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aveva:telemetry_server:2020r2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "12AD341A-07AE-4837-A1DC-471FFF0926DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aveva:telemetry_server:2020r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "62A91A30-CB69-4E14-9C32-BF848E740944"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0598",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-16T20:15:11.327",
      "lastModified" : "2024-11-21T07:37:27.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nGE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to insert malicious configuration files in the expected web server execution path and gain full control of the HMI software. \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:ifix:6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B27A2AD-28E2-4408-83AC-5E4A822E36B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:ifix:6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA175762-BC1D-4E0F-8BCC-7B3F746D30A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:ifix:2022:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBACBA0A-91D6-466D-B83B-4C7173ECB4B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://digitalsupport.ge.com/s/article/iFIX-Secure-Deployment-Guide?language=en_US",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://digitalsupport.ge.com/s/article/iFIX-Secure-Deployment-Guide?language=en_US",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1390",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-16T21:15:11.447",
      "lastModified" : "2025-04-23T17:16:25.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1050"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3",
            "versionEndExcluding" : "4.9.253",
            "matchCriteriaId" : "AF22C9B4-BCE0-4E42-8C4C-5DAE22C582DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.217",
            "matchCriteriaId" : "D777E229-ADCF-4C7F-A9F7-B2382137F407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.170",
            "matchCriteriaId" : "671B1493-DB61-421B-B0A9-893B3A862EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.92",
            "matchCriteriaId" : "2F6DB7A0-9052-479E-894D-15F862F4D3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.10",
            "matchCriteriaId" : "AAA1C6A6-3B03-4EC3-935C-C9FA0B50DB70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.11:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1C9CE-F7E4-426B-A770-79F86AB5CC38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.11:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7A70E596-2EF7-4651-B2EF-2CEE31DB6893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.11:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "18C82C96-2853-4DFE-93AD-F6E59B4129CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/netspooky/bee2d07022f6350bb88eaa48e571d9b5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b77413446408fdd256599daf00d5be72b5f3e7c6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://infosec.exchange/%40_mattata/109427999461122360",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0001/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/netspooky/bee2d07022f6350bb88eaa48e571d9b5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b77413446408fdd256599daf00d5be72b5f3e7c6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://infosec.exchange/%40_mattata/109427999461122360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21449",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:11.533",
      "lastModified" : "2024-11-21T07:42:53.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B894D0C1-E66E-44B0-8FCA-2EE4290C4173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "644444DC-1247-45FC-A2B9-223D9ED55AB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "02600CDD-6862-4146-88E8-A2E73B7ED534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5B44E9-BA5B-4CFB-8452-B52B6CC833F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21452",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:11.647",
      "lastModified" : "2024-11-21T07:42:53.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper usage of implicit intent in Bluetooth prior to SMR Mar-2023 Release 1 allows attacker to get MAC address of connected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21453",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:11.743",
      "lastModified" : "2024-11-21T07:42:54.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to protected data."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38B7AB56-AB65-4557-A91C-40CA2FD12351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21454",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:11.853",
      "lastModified" : "2024-11-21T07:42:54.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text history on the lockscreen."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21455",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:11.967",
      "lastModified" : "2024-11-21T07:42:54.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFC5A98-2B10-4074-A505-ECD84EA1041B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04D5D21-1755-4766-8302-A0BE61EE9F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21456",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:12.050",
      "lastModified" : "2024-11-21T07:42:54.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21457",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:12.127",
      "lastModified" : "2024-11-21T07:42:54.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows attackers to send file via Bluetooth without related permission."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21458",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:12.223",
      "lastModified" : "2024-11-21T07:42:54.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21459",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:12.347",
      "lastModified" : "2024-11-21T07:42:54.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B894D0C1-E66E-44B0-8FCA-2EE4290C4173"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "02600CDD-6862-4146-88E8-A2E73B7ED534"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3D30C02C-91FB-4D29-AF49-7903158E8FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9385885D-654A-496E-8029-7C6D9B077193"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21460",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:12.447",
      "lastModified" : "2024-11-21T07:42:55.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21461",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:12.523",
      "lastModified" : "2024-11-21T07:42:55.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3806E2-A780-4BB5-B4DC-D015D841E4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0332BF16-0F1F-4733-ABCE-A1EA1366A5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E55E09-C2C9-43D1-8A1A-6D02F544E34A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6114C5-C175-45E7-821E-6BA218F923DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BA232B-8D39-473A-91D0-D3AC03FDE8FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2EADA0-5976-4711-A7A5-61594F3E2FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B59145B-5506-477C-8F9C-ABB0CE2CF631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "655BEA94-9A83-4A56-8DDE-79ADC821C707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "899F6BD2-47AF-4ADA-935D-90AB069E9BA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "40A783AA-91E7-426B-8A78-4EBE5D69A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "53968A3C-6E71-42B8-8671-6730D8C85603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B35EB1D3-2F29-4A5C-AC9A-6ED72A2E22D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD8E899-427B-47D2-9168-446B0249868F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E923AF0F-34BA-40FE-AA20-B01366263B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "78B14D1F-C536-4816-A076-B074E41EB0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2D00F4-B521-4D8F-84F8-DCE45B6349A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "548BCC15-C6D8-4AE7-B167-4DD74382097B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C2B6E53-CC07-4590-ADFA-CEF7DB0F4EB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D757450C-270E-4FB2-A50C-7F769FED558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0ABFBBDB-E935-4C54-865A-0E607497DA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3899E3E7-1284-4223-A258-DA691F5D62FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD961EA-6881-4A14-83DE-C6972F6F681C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "13E145E2-CE11-4EE5-9085-B4960FE4F52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "35F40D59-034B-44FB-8DCD-D469B50DE7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3F8572-578B-4D19-9453-1D03DA55EF70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9137C66C-4966-4C90-ABE9-7E22F7E29BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18CD523B-530E-4187-8BFF-729CDAC69282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A81C86D-F1FE-4166-8F37-D7170E6B30FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D80783-523A-455E-B1AD-0961086F79E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0329C50-B904-480D-8EBB-F2757049FC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "299284DA-85AB-4162-B858-E67E5C6C14F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D98F307E-3B01-4C17-86E5-1C6299919417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B24866-2B3A-4A1A-8B75-EF7A7541797A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EBB29F18-A929-432B-B20C-365401E6CA12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21462",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:12.597",
      "lastModified" : "2024-11-21T07:42:55.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-215"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:quick_share:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.14.18",
            "matchCriteriaId" : "8364FBCB-3C5D-47C7-A9C3-3013ABDFE23D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:quick_share:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.16.20",
            "matchCriteriaId" : "8492DE24-A20C-417B-A035-0AF10997CD73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21463",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:12.673",
      "lastModified" : "2024-11-21T07:42:55.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive information of secret mode in Samsung Internet application with specific conditions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:myfiles:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.2.09.0",
            "matchCriteriaId" : "A0474102-0758-44E9-AEA0-39EEBF07BA20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:myfiles:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.1.03.501",
            "matchCriteriaId" : "CD851584-4B9B-42D1-92AC-0A577AA6792F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:myfiles:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1.03.0",
            "matchCriteriaId" : "5D1DE463-92C3-44B8-A54B-836EC2487FE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21464",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:12.747",
      "lastModified" : "2024-11-21T07:42:55.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:calendar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.4.02.9000",
            "matchCriteriaId" : "E5467BCF-11CB-4AA0-9CB1-34AF46A0068E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:calendar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.3.08.2000",
            "matchCriteriaId" : "E30506C6-C0DA-4A86-B4DF-7D06751B8C5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21465",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2023-03-16T21:15:12.823",
      "lastModified" : "2024-11-21T07:42:55.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in BixbyTouch prior to version 3.2.02.5 in China models allows untrusted applications access local files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:bixbytouch:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.02.5",
            "matchCriteriaId" : "DDDED7F5-D30B-4779-A2B1-FC314CE37F6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22880",
      "sourceIdentifier" : "security@zoom.us",
      "published" : "2023-03-16T21:15:12.893",
      "lastModified" : "2024-11-21T07:45:34.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by the affected Zoom clients, transmitted text to Microsoft’s online Spellcheck service instead of the local Windows Spellcheck. Updating Zoom remediates this vulnerability by disabling the feature. Updating Microsoft Edge WebView2 Runtime to at least version 109.0.1481.0 and restarting Zoom remediates this vulnerability by updating Microsoft’s telemetry behavior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zoom.us",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zoom.us",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "5.13.3",
            "matchCriteriaId" : "4D678B4D-3E7B-4130-98C8-4776FB746AFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "5.13.1",
            "matchCriteriaId" : "E0A18B3A-9C99-4865-A353-47343CF7E6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "5.13.3",
            "matchCriteriaId" : "4603F137-E9B9-4F66-8431-8ABDF1DBFE0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://explore.zoom.us/en/trust/security/security-bulletin/",
        "source" : "security@zoom.us",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://explore.zoom.us/en/trust/security/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22881",
      "sourceIdentifier" : "security@zoom.us",
      "published" : "2023-03-16T21:15:12.970",
      "lastModified" : "2024-11-21T07:45:34.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zoom.us",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zoom.us",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:zoom:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.13.5",
            "matchCriteriaId" : "98A563A0-DD3D-420D-8D3D-06F57E441F6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://explore.zoom.us/en/trust/security/security-bulletin/",
        "source" : "security@zoom.us",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://explore.zoom.us/en/trust/security/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22882",
      "sourceIdentifier" : "security@zoom.us",
      "published" : "2023-03-16T21:15:13.040",
      "lastModified" : "2024-11-21T07:45:34.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zoom.us",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zoom.us",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:zoom:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.13.5",
            "matchCriteriaId" : "98A563A0-DD3D-420D-8D3D-06F57E441F6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://explore.zoom.us/en/trust/security/security-bulletin/",
        "source" : "security@zoom.us",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://explore.zoom.us/en/trust/security/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22883",
      "sourceIdentifier" : "security@zoom.us",
      "published" : "2023-03-16T21:15:13.107",
      "lastModified" : "2024-11-21T07:45:34.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoom Client for IT Admin Windows installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain during the installation process to escalate their privileges to the SYSTEM user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zoom.us",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zoom.us",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:meetings:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "5.13.5",
            "matchCriteriaId" : "15DCCD9C-165B-4EE3-82E9-140BB59FDD98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://explore.zoom.us/en/trust/security/security-bulletin/",
        "source" : "security@zoom.us",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://explore.zoom.us/en/trust/security/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23935",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-16T21:15:13.183",
      "lastModified" : "2024-11-21T07:47:08.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open-source messaging platform. In versions 3.0.1 and prior on the `stable` branch and versions 3.1.0.beta2 and prior on the `beta` and `tests-passed` branches, the count of personal messages displayed for a tag is a count of all personal messages regardless of whether the personal message is visible to a given user. As a result, any users can technically poll a sensitive tag to determine if a new personal message is created even if the user does not have access to the personal message.\n\nIn the patched versions, the count of personal messages tagged with a given tag is hidden by default. To revert to the old behaviour of displaying the count of personal messages for a given tag, an admin may enable the `display_personal_messages_tag_counts` site setting."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "C19D7945-EB52-43C0-B9B7-8C250FEDC451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BF272688-1B08-4ABC-8002-66B59690F9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "A29A2465-B21D-4147-8292-DCF864D385B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBC3511E-3D68-42E2-B521-966FB429B640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "EC8B99C2-E267-4EC2-AF09-C9AD1EEE76D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "F21A22EE-081A-4489-A7F8-22E2DBC5B00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E6C8FB3-4B19-4510-B9A8-BCF9ED8ED7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6b:*:*:beta:*:*:*",
            "matchCriteriaId" : "5B827291-6483-4BB7-AF76-530B669B3ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "551E70ED-34FF-4989-91C9-6312DE4AB4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "204FB99A-8F11-4F04-9ED9-D94551790116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "46A8705C-0DF6-45D7-A38C-D2AB69194C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F59B0D8E-CFFB-4EBA-9D6A-526F9541BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D801A898-27D0-4076-8AF9-2B574FA11723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E7CBBD4A-4FDB-49E0-A5B6-22701C12BDF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9E7328DF-1924-4D0D-AC6B-1BA2D9CF1D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9421CE10-F226-4F2C-9DA7-EBB44B73C304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "1E71FBB6-ECAD-4581-9982-4C330D55FEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B631CCC-D456-49FF-B626-59C40BD4E167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE83F98D-F7AA-434B-8438-5B1FB96681B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB93F19B-9087-44CE-B884-45F434B7906F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5A88A5A3-EF1A-4E86-B074-CE0AC4325484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "0650B4C7-BCFE-4180-8FEF-4170A67E8BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "388F376E-46C9-4163-992D-95E3E4548D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D661090A-DA61-4BBE-85C3-6F48C053C84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "4A458242-D6DD-46E3-AF09-66BC87C5D7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8FACCBA-0D3B-4E6F-85A0-1CBD2B367F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F1D83D80-A0BE-4794-91A1-599AF558FB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "BD15B6B2-BFB3-4271-A507-48E9B827FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "E0003042-9B14-4E1B-800F-3D154FFE8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "E449EA29-81C8-4477-977E-746EACDBED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6FC6D4DF-8686-4054-A0C1-784E194171E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "C574C37D-3D99-4430-A3D5-199883556B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "F344E950-EFF9-4405-99D7-0B615C32873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "0A50DE1B-29EB-4014-B5B6-46CF493485F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "638B3E17-9F0A-4A96-B8D3-DDFEA518DBE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6D3E3AEB-8CD4-4EE7-9C81-2F74512071DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "254FF9D9-E696-41C8-B15B-DA089D2C6597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A5001E1-E716-43AA-8093-E0EED9E07909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "7FD16B13-516A-4D03-B1EF-A11156471A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E886D9EF-7FBD-4A24-A8B6-54E4B15403C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "369A83D1-AB7E-488D-9D74-26A69DFC1AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "3189CAC1-8970-4A33-B1E4-EB9EC3C19A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8733438-7625-400E-8237-BAE3D9F147AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "E87F1ED0-FD0D-4767-8E7C-325D920B79BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "97811266-A13C-4441-A1B5-BFA4B0862DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "3D09D157-4B19-4561-AB20-952F2EA9BA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "789087AF-0011-4E8F-A5AB-432A5F91BBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13b:*:*:beta:*:*:*",
            "matchCriteriaId" : "8EC9DC8C-56DC-482B-8847-BD0CFACA6F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "F63B3D13-24F6-4EFA-9528-DBF59D973A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F3A2388-18DE-46B0-BC13-7714E25D1B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "940B11CB-053F-4D60-8BC4-81CA659D2F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "83684DCB-B201-43B8-8B6E-6D0B13B7E437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "DF92E1FD-9B41-4A41-8B13-9D789C5729D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "351D224A-E67C-454C-AF43-8AD6CD44C685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E058CA6D-A295-4CAD-8C85-E8C83BAFEBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF99C114-1BCA-4400-BC7E-EDA1F55559CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBA1EFBA-5A26-46A0-B2A6-53B9924253BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE5B90B0-B6CC-4189-9C98-CF29017A47B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1818628-5F4E-4E5D-974A-0BEBCE821209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "14785840-3BC0-4030-AE44-E3013DF19AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "90444209-684C-4BF8-9BCF-6B29EA0A0593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "668E15DE-8CF2-4AF3-B13A-9080046B1E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "1191861C-1B2C-4762-805D-FCDC20F84D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "3CB518E5-CCC0-46B8-848E-C492BCF7E9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA1F68FE-67EA-4408-8E0F-558B0FAFFF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "66E9F05C-799A-43D3-9367-FCA86166BD65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "85DB4097-6EFC-4017-ADFD-56EE49BB2F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD283EA2-9026-497F-A7DE-E16CE0764ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "ED19DDDF-A29E-4C3F-A818-23D7E37B6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "508D0052-B7D7-4A08-8BB0-7D7A1EDAB96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "3E50BFB0-67D3-4EDE-93FE-85EAF605461E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "D7EE0134-6AD7-4695-B536-1959FE3A9672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "25DFFB5C-277F-4436-9BCE-643E98721C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "B8B80EB2-0B48-4AFA-8A09-26006CCDB022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AC8705E0-23ED-4817-8B69-21A4963C27F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "BAA156A9-A9FB-4D03-B0EE-4AA303D7A9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F733E585-075C-402A-9B34-1FE79DE4137E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "05C43439-C694-47AA-90AF-0AC2277E3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "B391F8A1-F102-4C88-864C-1386452CDAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC33C93-9947-4983-96A3-7DE223929817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B46DE141-1224-499E-AAE0-6CC0D5249B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "D8D07501-A07E-4743-A188-2E5BBC3C8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "64FD2A30-EE33-4680-9DCF-29283DBA3C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "B517F7A2-6FD1-4A7B-80E7-1167EC296591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "E6CA6EA5-DDAD-4882-AD1B-634C0CD741BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F14DCB07-9464-4DDE-98A1-FAE85DD60FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6EDFD679-4710-4A62-B254-E658EED4295B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1B81072-08A5-4EC6-B737-E35C505C1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A0748A9E-5737-48F9-BB66-6576AFE16198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "453E51D9-89A1-4A91-B218-05C45CC4E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "51542BA7-8151-4FC9-9C86-36CEB476B912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "5F95391C-0B75-47D2-9770-561E05414CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "10384675-B949-4B50-AF42-B5A3EE27250B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "7C0DB1C0-5749-4508-A265-C2138F7852E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA9977CF-575C-4A19-84C8-EBB68EBE88C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "87C525C5-E282-4EC6-956F-0C94DC11FC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F02A2A8-6312-4F6D-ABBF-952CA4C5E02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "DE54D1A3-FC2A-40DE-9177-50332208B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "170AE3DA-92C1-4D1D-9CAC-543C01FFF479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "2130C3C5-E4A5-41C3-89F0-C6FB4E47D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "74248527-B884-4134-95C8-DEAF3D774A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta17:*:*:beta:*:*:*",
            "matchCriteriaId" : "01A8AF9C-8BF6-4ADC-A85A-A5C1F9FFB2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "B4038D09-467C-4815-A429-F0E1E3E545E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6F273237-7223-4047-83B7-16A49B7E554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF26EE13-554C-4180-98A2-238D84E40927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "12688C9C-291D-4BF2-93F9-09AA323C52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "A7F7A437-D538-4B44-AC41-C95641A11A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "9BB61DCF-52DB-498D-8779-D565E548C285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "EE56BB77-B7F7-4BE7-AD9C-33888C5D01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "9DB49E1D-BCC8-4984-A81D-5DAC5E3DF168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "F775EA72-CCE3-4230-A666-EFDAA61F71FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E65BDEE-850A-41C6-8CFB-BD8B3A105CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "AF196429-FDED-4C3F-9F7D-0A2BF7DCAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "64B84326-5397-4C60-8007-F7E7D81DC661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "9A0A526A-9662-4E39-8BF6-E464BE1A2B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "712DACC2-A21E-429F-8A7B-86D8F7CE3468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E93F9F6-5B03-4F77-B8B4-AEC9E4011692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "C5B2B98E-804F-4525-B726-3F1DF2693F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "582E339F-678A-4377-8EE0-8F4208E3EF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "1BF1D945-6EAA-4FA7-8252-2FED079587F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9325DFF5-EA7B-4B8D-A227-4B1A59449CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0ECB28DA-3CA1-4011-9170-BFBF2ED3E091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A6399B0-471B-4B26-859C-3836F2A6B7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "131E2AE4-E35D-495D-8907-3B899BB8AC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "83601528-0DD9-4835-B6C0-0F341871CC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4AEB5AAF-73EB-4356-8C53-10E22B2F910E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EB199D6-E253-4EC2-BF0B-059F7B6662ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "94A586EB-B0E0-4190-88DF-3BCC04E5EF84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BF27B44-9AA7-4B91-9B4B-0E84418F5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "461744BD-3974-4C33-8514-0A917DC90C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A86FB2B-6915-49C0-B993-0711AAECA5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EF3DD36-2776-4CD2-A3F1-88872024D223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "D91D71ED-F08F-4DB5-B7DD-062E7C11435F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "62B5812A-FB52-4F4B-9A15-3AA5CD6562E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "83231EC0-E3F7-4E35-B165-487C2725B4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "A53AFFA6-7B98-47F2-9BD7-71C83A69CE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A42D3FB9-9197-4101-A729-876C490BD572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A5DE0C47-0C66-4EFE-AF82-1B22F4F54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "E587D10F-BEF8-4923-AF76-6DC3172880EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "155568EF-6A7E-423A-B5EA-D20E407B271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "7E94B119-8C75-43DF-A2DF-A5B3E04F0778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5348F94F-F6AE-4400-8AC7-036111EF43D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "57948A73-C9C5-4C24-947D-0A4659C7002E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "3532EE37-2D0F-496C-B5A8-F9315FFB4552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "2CAE7CC9-B91D-494C-B91A-497D6FE6B14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "623BBBF8-4121-466A-82C8-D179B02B3E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "648D010A-8B8D-42AA-8888-09E4E0FAA954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "8ADC7613-25E3-4CB8-A962-2775C20E4D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B0099F0-A275-4C65-9B79-041374F183DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE69800E-5CB5-4916-879C-51DE5E94489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "8C64EAFE-2B60-4D95-869F-4A2FC98B99C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "AB2045F1-AC39-4738-B3F0-33F00D23C921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E32589F8-2E87-40D2-BAD3-E6C1C088CA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "4868BAFD-BFE5-4361-855A-644B040E7233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4B6C25BF-5B2A-43C4-8918-E32BA9DD8A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB9917D3-D848-4D2B-8A44-B3723BA377DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "7046D95B-73CE-406B-ACC3-FD71F7DEC7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "D3BA5033-2C06-42FF-962E-48EBA2EBB469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "630D29DE-0FD7-4306-BA80-20D0791D334B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "08F94E42-07A1-480D-B6DD-D96AE38F1EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "FA4B3DE5-21DA-4185-AF74-AAA6DD89FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E602BEF9-E89D-40F7-BC6F-5C6F9F25BA97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "C06A8627-683D-4328-BE7A-4A33A4B736F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E3EF8240-D3F5-422C-B70A-90C6CBA4E622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "93CC792D-AE0B-498E-8374-5D09EF4E28FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "093D4EA8-B002-4AB4-97C9-CEE4D70BF3C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "4C778180-E7BF-4EF2-8B19-0388E23E1424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "0C0B2BC1-35F1-4A1D-B9B2-54426B4ADF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6BCAB620-465A-41FF-A064-FB638DD3A557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "6AFCB802-A275-444C-8245-D0397322125F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9F9B70E2-AAAD-4E61-AEB2-E5F635F6AAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6182074E-C467-448C-9299-B92CFE4EEBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "09EA8F36-7647-42D0-8675-34C002E0754D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "9CE2276A-9680-4B14-9636-806F7E4C1669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD150166-4C8D-47E3-989A-1A71A46C36A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF5CA6AD-FA4D-47DF-A684-5DAD7662EA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "B94F75B8-7C84-4727-9D18-114A815E1906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "4D94E03A-32EE-408F-81FA-4B9C25AA7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD495875-007C-4A90-B940-B62E6FA492CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F1B84E-8AF8-46E8-9DE9-00D1DE348C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BCCEFDFB-61E6-4846-8093-B5CEB0D8450C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC63647-B692-4BB9-9A3D-6F8DF19C3494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F0ED55-C8C6-47C1-859A-60046838B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A2D59BC-2EE8-4F9C-AB5B-B9D01B44F7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "933DFEBC-5568-431B-809D-AFAEFD08E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE920E80-C02B-4EC8-982F-ADE89C936684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CDAE3441-12BA-41F4-8A5A-B2EE844C86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "1443EA1B-D210-4219-8452-CBFD5FACBC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "948A4B4A-A11F-477E-BEC5-0D60C7E3570C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "98B2A052-5427-4B72-9F59-82F430836CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "CB6D636E-B51F-4648-A637-62B2603BA18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "3DA17871-7ED7-4D68-A46D-D15DC5B3235F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "705FE965-0415-4382-8CA1-A19DF3B5EF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "BC6EDCE3-D564-434F-9A7F-D4A6D579F8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "FB05E54B-9CF6-45A7-8D47-C98DB6D19E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "03CD1C5E-18F5-4C6D-B92C-C511C8C12D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF4ABB9D-69DF-42D5-AD60-F9CEEC1B6730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7B4DCCF5-E290-4BDA-AAB9-DF362A2EB7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "3AE1F3A2-8340-4ED7-B943-ACDA9617DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E033AB7-9987-4C30-849F-2495376CA4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "D87E9338-C7F6-43BA-886F-C30987ADBA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E24EB90F-FE81-4746-8741-8DC9346F79C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "D237956F-FC90-467E-A493-24EFDA1A9F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "F7AA9AB8-AB6F-43E2-B3E5-685EE9BFE7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "5BC240A1-431E-4A50-88DC-7AC9BC674254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "3F85AFD4-D397-4FDB-B762-521BD5FF14C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "D40CDCE1-3462-4D6C-A3C7-487F175264CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/f31f0b70f82c43d93220ce6fc0d4f57440452f37",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-rf8j-mf8c-82v7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/f31f0b70f82c43d93220ce6fc0d4f57440452f37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-rf8j-mf8c-82v7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27494",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-16T21:15:13.270",
      "lastModified" : "2024-11-21T07:53:01.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Streamlit, software for turning data scripts into web applications, had a cross-site scripting (XSS) vulnerability in versions 0.63.0 through 0.80.0. Users of hosted Streamlit app(s) were vulnerable to a reflected XSS vulnerability. An attacker could craft a malicious URL with Javascript payloads to a Streamlit app. The attacker could then trick the user into visiting the malicious URL and, if successful, the server would render the malicious javascript payload as-is, leading to XSS. Version 0.81.0 contains a patch for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snowflake:streamlit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.63.0",
            "versionEndExcluding" : "0.81.0",
            "matchCriteriaId" : "084DC2A4-F195-4A30-9D7F-C6094C326878"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/streamlit/streamlit/commit/afcf880c60e5d7538936cc2d9721b9e1bc02b075",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/streamlit/streamlit/security/advisories/GHSA-9c6g-qpgj-rvxw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/streamlit/streamlit/commit/afcf880c60e5d7538936cc2d9721b9e1bc02b075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/streamlit/streamlit/security/advisories/GHSA-9c6g-qpgj-rvxw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28113",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-16T21:15:13.360",
      "lastModified" : "2024-11-21T07:54:25.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "russh is a Rust SSH client and server library. Starting in version 0.34.0 and prior to versions 0.36.2 and 0.37.1, Diffie-Hellman key validation is insufficient, which can lead to insecure shared secrets and therefore breaks confidentiality. Connections between a russh client and server or those of a russh peer with some other misbehaving peer are most likely to be problematic. These may vulnerable to eavesdropping. Most other implementations reject such keys, so this is mainly an interoperability issue in such a case. This issue is fixed in versions 0.36.2 and 0.37.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:russh_project:russh:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.34.0",
            "versionEndExcluding" : "0.36.2",
            "matchCriteriaId" : "EDED086A-4529-4255-8DCF-CDEDB3E6BD68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:russh_project:russh:0.37.0:-:*:*:*:rust:*:*",
            "matchCriteriaId" : "9DB6C4E2-4FDD-401E-A0D2-87E5BA1091EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:russh_project:russh:0.37.0:beta1:*:*:*:rust:*:*",
            "matchCriteriaId" : "19B00BD6-5AAF-403A-AFE0-F9B0213016F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/warp-tech/russh/blob/master/russh/src/kex/dh/groups.rs#L72-L76",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/warp-tech/russh/blob/master/russh/src/kex/dh/groups.rs#L78-L81",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/warp-tech/russh/commit/d831a3716d3719dc76f091fcea9d94bd4ef97c6e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/warp-tech/russh/releases/tag/v0.36.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/warp-tech/russh/releases/tag/v0.37.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/warp-tech/russh/security/advisories/GHSA-cqvm-j2r2-hwpg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/warp-tech/russh/blob/master/russh/src/kex/dh/groups.rs#L72-L76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/warp-tech/russh/blob/master/russh/src/kex/dh/groups.rs#L78-L81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/warp-tech/russh/commit/d831a3716d3719dc76f091fcea9d94bd4ef97c6e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/warp-tech/russh/releases/tag/v0.36.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/warp-tech/russh/releases/tag/v0.37.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/warp-tech/russh/security/advisories/GHSA-cqvm-j2r2-hwpg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-16T22:15:11.453",
      "lastModified" : "2025-02-26T20:15:12.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in the Edit Group function of ChurchCRM v4.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Group Name text field."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A21E4C-1CE8-4C97-9374-DD8EBDB942D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ChurchCRM/CRM/issues/6450",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM/issues/6450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-17T04:15:14.553",
      "lastModified" : "2025-11-04T19:15:41.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.9",
            "versionEndExcluding" : "9.3",
            "matchCriteriaId" : "84F1ED1E-4AD0-4903-A9FD-F4BBC21328E4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:brocade_fabric_operating_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2119FFC-08F9-4C3F-881C-9C72916BC652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C767AA1-88B7-48F0-9F31-A89D16DCD52C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_element_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E379272-A79A-4A27-9861-71DCBD4B1FEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AN2UDTXEUSKFIOIYMV6JNI5VSBMYZOFT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202307-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0008/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/15/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AN2UDTXEUSKFIOIYMV6JNI5VSBMYZOFT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AN2UDTXEUSKFIOIYMV6JNI5VSBMYZOFT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202307-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/15/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1439",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:09.823",
      "lastModified" : "2024-11-21T07:39:11.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of the file medicines/view_details.php of the component GET Parameter Handler. The manipulation of the argument GET leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223283."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medicine_tracker_system_project:medicine_tracker_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313F1413-ACA3-49E9-9315-856D212D7DB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GodGua/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223283",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223283",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/GodGua/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1440",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:10.183",
      "lastModified" : "2024-11-21T07:39:11.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Automatic Question Paper Generator System 1.0. Affected is an unknown function of the file users/user/manage_user.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223284."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatic_question_paper_generator_system_project:automatic_question_paper_generator_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026B7C92-CE66-4285-9FD7-01207D0ABDFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gxu-yuan/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223284",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223284",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/gxu-yuan/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1441",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:10.393",
      "lastModified" : "2024-11-21T07:39:11.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/courses/view_course.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223285 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatic_question_paper_generator_system_project:automatic_question_paper_generator_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026B7C92-CE66-4285-9FD7-01207D0ABDFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SecurityYH/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223285",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223285",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/SecurityYH/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1442",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:10.630",
      "lastModified" : "2024-11-21T07:39:11.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Meizhou Qingyunke QYKCMS 4.3.0. It has been classified as problematic. This affects an unknown part of the file /admin_system/api.php of the component Update Handler. The manipulation of the argument downurl leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223287."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qykcms:qykcms:4.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89C129F4-7145-4137-A6EA-2959C1DABD1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/VG00000/-/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223287",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223287",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/VG00000/-/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1443",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:10.847",
      "lastModified" : "2024-11-21T07:39:11.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Filseclab Twister Antivirus 8. It has been declared as problematic. This vulnerability affects the function 0x80112053 in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223288."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filseclab:twister_antivirus:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E731869E-4FB3-4858-AAD7-996B106E0543"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1xwIyZ8RRdwsHshxhtFMELPv2DdbQ8hBD/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1443",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223288",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223288",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://drive.google.com/file/d/1xwIyZ8RRdwsHshxhtFMELPv2DdbQ8hBD/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1444",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:11.083",
      "lastModified" : "2024-11-21T07:39:11.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223289 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filseclab:twister_antivirus:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E731869E-4FB3-4858-AAD7-996B106E0543"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1KrkezTwgmt5CnhzlyyWVNLIAeiMvuDEr/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1444",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223289",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223289",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1KrkezTwgmt5CnhzlyyWVNLIAeiMvuDEr/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1445",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:11.280",
      "lastModified" : "2024-11-21T07:39:12.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in Filseclab Twister Antivirus 8. Affected is the function 0x80112053 in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-223290 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filseclab:twister_antivirus:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E731869E-4FB3-4858-AAD7-996B106E0543"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1VYsdzogyxAsGH-rhUU1Bo_EbgpSEEN_Q/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1445",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223290",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223290",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://drive.google.com/file/d/1VYsdzogyxAsGH-rhUU1Bo_EbgpSEEN_Q/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1446",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:11.727",
      "lastModified" : "2024-11-21T07:39:12.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is the function 0x80002004/0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223291."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:watchdog:anti-virus:1.4.214.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEF7DD2-2795-4056-80E0-8946D55A8E8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1zjK_DMjHz41RMpfa0iLQ4GXKQwEr4z2T/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1446",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223291",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223291",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://drive.google.com/file/d/1zjK_DMjHz41RMpfa0iLQ4GXKQwEr4z2T/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1447",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:11.867",
      "lastModified" : "2024-11-21T07:39:12.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in SourceCodester Medicine Tracker System 1.0. Affected by this issue is some unknown functionality of the file app/?page=medicines/manage_medicine. The manipulation of the argument name/description with the input <script>alert('2')</script> leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-223292."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medicine_tracker_system_project:medicine_tracker_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313F1413-ACA3-49E9-9315-856D212D7DB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223292",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223292",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1448",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:12.093",
      "lastModified" : "2024-11-21T07:39:12.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gf_m2ts_process_sdt of the file media_tools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier VDB-223293 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:2.3:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "0099B624-674B-4F45-9270-DD638617A1D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/issues/2388",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xxy1126/Vuln/blob/main/gpac/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223293",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223293",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/2388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xxy1126/Vuln/blob/main/gpac/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1449",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:12.347",
      "lastModified" : "2024-11-21T07:39:12.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gf_av1_reset_state of the file media_tools/av_parsers.c. The manipulation leads to double free. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-223294 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:2.3:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "0099B624-674B-4F45-9270-DD638617A1D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/issues/2387",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xxy1126/Vuln/blob/main/gpac/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223294",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223294",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/2387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xxy1126/Vuln/blob/main/gpac/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1450",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:12.560",
      "lastModified" : "2024-11-21T07:39:12.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in MP4v2 2.1.2 and classified as problematic. This issue affects the function DumpTrack of the file mp4trackdump.cpp. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223295."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp4v2_project:mp4v2:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9EA982-3885-417B-AB0C-061415A7F261"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc/blob/main/id_000005%2Csig_08%2Csrc_000166%2B000357%2Ctime_3137250%2Cexecs_3545598%2Cop_splice%2Crep_16",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223295",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223295",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc/blob/main/id_000005%2Csig_08%2Csrc_000166%2B000357%2Ctime_3137250%2Cexecs_3545598%2Cop_splice%2Crep_16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1451",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:12.747",
      "lastModified" : "2024-11-21T07:39:12.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in MP4v2 2.1.2. It has been classified as problematic. Affected is the function mp4v2::impl::MP4Track::GetSampleFileOffset of the file mp4track.cpp. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223296."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp4v2_project:mp4v2:2.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9EA982-3885-417B-AB0C-061415A7F261"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RichTrouble/mp4v2_mp4track_poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RichTrouble/mp4v2_mp4track_poc/blob/main/id_000000%2Csig_08%2Csrc_001076%2Ctime_147809374%2Cexecs_155756872%2Cop_havoc%2Crep_8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223296",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223296",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/RichTrouble/mp4v2_mp4track_poc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RichTrouble/mp4v2_mp4track_poc/blob/main/id_000000%2Csig_08%2Csrc_001076%2Ctime_147809374%2Cexecs_155756872%2Cop_havoc%2Crep_8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1452",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:12.947",
      "lastModified" : "2024-11-21T07:39:13.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file filters/load_text.c. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier VDB-223297 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:2.3:dev:*:*:*:*:*:*",
            "matchCriteriaId" : "0099B624-674B-4F45-9270-DD638617A1D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/issues/2386",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xxy1126/Vuln/blob/main/gpac/1.mp4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223297",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223297",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/2386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xxy1126/Vuln/blob/main/gpac/1.mp4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1453",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:13.213",
      "lastModified" : "2024-11-21T07:39:13.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Watchdog Anti-Virus 1.4.214.0. It has been rated as critical. Affected by this issue is the function 0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-223298 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 3.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:watchdog:anti-virus:1.4.214.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EEF7DD2-2795-4056-80E0-8946D55A8E8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1ivMk1uVAvPCCAxqiD2BW9gD1TsktQkpi/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1453",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223298",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223298",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://drive.google.com/file/d/1ivMk1uVAvPCCAxqiD2BW9gD1TsktQkpi/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1454",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:13.573",
      "lastModified" : "2026-01-02T19:31:16.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223299."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeecg:jeecg_boot:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEDFF952-7B1F-44EB-98BA-265CB22D6FB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/J0hnWalker/jeecg-boot-sqli",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223299",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223299",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/J0hnWalker/jeecg-boot-sqli",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1455",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T07:15:13.767",
      "lastModified" : "2024-11-21T07:39:13.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file admin/ajax.php?action=login2 of the component Login Page. The manipulation of the argument email with the input abc%40qq.com' AND (SELECT 9110 FROM (SELECT(SLEEP(5)))XSlc) AND 'jFNl'='jFNl leads to sql injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223300."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223300",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223300",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1459",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T08:15:09.900",
      "lastModified" : "2024-11-21T07:39:14.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Canteen Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file changeUsername.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223304."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canteen_management_system_project:canteen_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1475853-D5FD-4C3B-B1D0-67131503A745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/129621725",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223304",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223304",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/129621725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1460",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T08:15:10.037",
      "lastModified" : "2024-11-21T07:39:14.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=save_user of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The identifier VDB-223305 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223305",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223305",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1152",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-17T09:15:12.533",
      "lastModified" : "2025-02-26T17:15:14.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies Persolus allows SQL Injection. This issue affects Persolus: before 2.03.93."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:utarit:persolus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.03.93",
            "matchCriteriaId" : "006D7605-817A-4E41-A8AF-AF2DD1CCFB46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0154-2",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0154-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1461",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T09:15:12.663",
      "lastModified" : "2024-11-21T07:39:14.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects the function query of the file createCategories.php. The manipulation of the argument categoriesStatus leads to sql injection. The attack can be initiated remotely. VDB-223306 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canteen_management_system_project:canteen_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1475853-D5FD-4C3B-B1D0-67131503A745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/129622219",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223306",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223306",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/129622219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1463",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-17T12:15:11.907",
      "lastModified" : "2024-11-21T07:39:14.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.23",
            "matchCriteriaId" : "764C6217-B0DC-46BE-8785-63C62947781F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nilsteampassnet/teampass/commit/4e06fbaf2b78c3615d0599855a72ba7e31157516",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f6683c3b-a0f2-4615-b639-1920c8ae12e6",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/teampass/commit/4e06fbaf2b78c3615d0599855a72ba7e31157516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f6683c3b-a0f2-4615-b639-1920c8ae12e6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1464",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T12:15:11.987",
      "lastModified" : "2024-11-21T07:39:14.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=save_user. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-223311."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medicine_tracker_system_project:medicine_tracker_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313F1413-ACA3-49E9-9315-856D212D7DB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223311",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223311",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1466",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T12:15:12.067",
      "lastModified" : "2025-02-26T18:15:11.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as critical. This issue affects the function view_student of the file admin/?page=students/view_student. The manipulation of the argument id with the input 3' AND (SELECT 2100 FROM (SELECT(SLEEP(5)))FWlC) AND 'butz'='butz leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223325 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:student_study_center_desk_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD3233D-01A2-4779-9E48-F3495A5E56D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223325",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223325",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1467",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T12:15:12.140",
      "lastModified" : "2024-11-21T07:39:14.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file Master.php?f=delete_img of the component POST Parameter Handler. The manipulation of the argument path with the input C%3A%2Ffoo.txt leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223326 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:student_study_center_desk_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD3233D-01A2-4779-9E48-F3495A5E56D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223326",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223326",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1468",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T12:15:12.223",
      "lastModified" : "2024-11-21T07:39:15.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&date_from=2023-02-17&date_to=2023-03-17 of the component Report Handler. The manipulation of the argument date_from/date_to leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-223327."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:student_study_center_desk_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD3233D-01A2-4779-9E48-F3495A5E56D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223327",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223327",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1172",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-17T13:15:10.463",
      "lastModified" : "2024-11-21T07:38:36.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:booking-wp-plugin:bookly:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "21.5.1",
            "matchCriteriaId" : "FB570ECB-2C2C-4278-A152-BAA89D648D3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2876981%40bookly-responsive-appointment-booking-tool&new=2876981%40bookly-responsive-appointment-booking-tool&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c3efbd9d-e2b5-4915-a964-29a49c7fba86?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2876981%40bookly-responsive-appointment-booking-tool&new=2876981%40bookly-responsive-appointment-booking-tool&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c3efbd9d-e2b5-4915-a964-29a49c7fba86?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1469",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-17T13:15:10.570",
      "lastModified" : "2024-11-21T07:39:15.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pec_coupon[code]’ parameter in versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator-level access to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note: This can potentially be exploited by lower-privileged users if the `Admin Dashboard Access Permission` setting it set for those users to access the dashboard."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tipsandtricks-hq:wp_express_checkout:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.2.9",
            "matchCriteriaId" : "44E0F3E7-7CBF-4BEE-9756-5051887CF943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2879453%40wp-express-checkout&new=2879453%40wp-express-checkout&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b35ee801-f04d-4b22-8238-053b02a6ee0c?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2879453%40wp-express-checkout&new=2879453%40wp-express-checkout&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b35ee801-f04d-4b22-8238-053b02a6ee0c?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1470",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-17T14:15:12.263",
      "lastModified" : "2026-04-08T17:16:53.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 3.3.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:implecode:ecommerce_product_catalog:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.3.9",
            "matchCriteriaId" : "756920AB-A050-4E23-9640-BA69E88B08F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2881773/ecommerce-product-catalog/trunk/modules/price/price-settings.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/26b7438e-438b-41eb-9458-2fba8ab1964d?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2881773/ecommerce-product-catalog/trunk/modules/price/price-settings.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/26b7438e-438b-41eb-9458-2fba8ab1964d?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1471",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-17T14:15:12.347",
      "lastModified" : "2026-04-08T18:17:54.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Popup Banners plugin for WordPress is vulnerable to SQL Injection via the 'banner_id' parameter in versions up to, and including, 1.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers with minimal permissions, such as a subscriber, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp_popup_banners_project:wp_popup_banners:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.5",
            "matchCriteriaId" : "E467285C-9616-45C0-A3CA-B4784AB064C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-popup-banners/trunk/wp-popup-banners.php#L243",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-popup-banners/trunk/wp-popup-banners.php#L246",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8281cb20-73d3-4ab5-910e-d353b2a5cbd8?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-popup-banners/trunk/wp-popup-banners.php#L243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-popup-banners/trunk/wp-popup-banners.php#L246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8281cb20-73d3-4ab5-910e-d353b2a5cbd8?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1472",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-17T15:15:11.880",
      "lastModified" : "2026-04-08T18:17:54.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on its AJAX actions. This makes it possible for unauthenticated attackers to invoke those functions, via forged request granted they can trick a site administrator into performing an action such as clicking on a link. Actions include resetting the API key, accessing or deleting log files, and deleting cache among others."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapidload:rapidload_power-up_for_autoptimize:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "9B5F1191-AC53-490D-9B8E-77F25767AC14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/unusedcss/tags/1.7.1/includes/modules/unused-css/UnusedCSS_Admin.php#L70",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8f9ee168-82b1-4d13-a84e-379f16dcb283?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/unusedcss/tags/1.7.1/includes/modules/unused-css/UnusedCSS_Admin.php#L70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8f9ee168-82b1-4d13-a84e-379f16dcb283?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1474",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T15:15:11.977",
      "lastModified" : "2024-11-21T07:39:15.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file users/question_papers/manage_question_paper.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223336."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatic_question_paper_generator_system_project:automatic_question_paper_generator_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026B7C92-CE66-4285-9FD7-01207D0ABDFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/19FF/bug_report/blob/main/SQLi.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223336",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223336",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/19FF/bug_report/blob/main/SQLi.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1475",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-17T15:15:12.057",
      "lastModified" : "2024-11-21T07:39:15.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Canteen Management System 1.0. This issue affects the function query of the file createuser.php. The manipulation of the argument uemail leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223337 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canteen_management_system_project:canteen_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1475853-D5FD-4C3B-B1D0-67131503A745"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/129623847",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223337",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223337",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/129623847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23622",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-17T15:15:12.147",
      "lastModified" : "2024-11-21T07:46:33.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, the count of topics displayed for a tag is a count of all regular topics regardless of whether the topic is in a read restricted category or not. As a result, any users can technically poll a sensitive tag to determine if a new topic is created in a category which the user does not have excess to. \n\nIn version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, the count of topics displayed for a tag defaults to only counting regular topics which are not in read restricted categories. Staff users will continue to see a count of all topics regardless of the topic's category read restrictions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "73E3B1B2-6F62-4A60-8C75-C9ADD81AC748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BF272688-1B08-4ABC-8002-66B59690F9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "A29A2465-B21D-4147-8292-DCF864D385B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBC3511E-3D68-42E2-B521-966FB429B640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "EC8B99C2-E267-4EC2-AF09-C9AD1EEE76D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "F21A22EE-081A-4489-A7F8-22E2DBC5B00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E6C8FB3-4B19-4510-B9A8-BCF9ED8ED7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6b:*:*:beta:*:*:*",
            "matchCriteriaId" : "5B827291-6483-4BB7-AF76-530B669B3ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "551E70ED-34FF-4989-91C9-6312DE4AB4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "204FB99A-8F11-4F04-9ED9-D94551790116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "46A8705C-0DF6-45D7-A38C-D2AB69194C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F59B0D8E-CFFB-4EBA-9D6A-526F9541BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D801A898-27D0-4076-8AF9-2B574FA11723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E7CBBD4A-4FDB-49E0-A5B6-22701C12BDF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9E7328DF-1924-4D0D-AC6B-1BA2D9CF1D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9421CE10-F226-4F2C-9DA7-EBB44B73C304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "1E71FBB6-ECAD-4581-9982-4C330D55FEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B631CCC-D456-49FF-B626-59C40BD4E167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE83F98D-F7AA-434B-8438-5B1FB96681B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB93F19B-9087-44CE-B884-45F434B7906F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5A88A5A3-EF1A-4E86-B074-CE0AC4325484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "0650B4C7-BCFE-4180-8FEF-4170A67E8BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "388F376E-46C9-4163-992D-95E3E4548D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D661090A-DA61-4BBE-85C3-6F48C053C84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "4A458242-D6DD-46E3-AF09-66BC87C5D7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8FACCBA-0D3B-4E6F-85A0-1CBD2B367F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F1D83D80-A0BE-4794-91A1-599AF558FB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "BD15B6B2-BFB3-4271-A507-48E9B827FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "E0003042-9B14-4E1B-800F-3D154FFE8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "E449EA29-81C8-4477-977E-746EACDBED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6FC6D4DF-8686-4054-A0C1-784E194171E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "C574C37D-3D99-4430-A3D5-199883556B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "F344E950-EFF9-4405-99D7-0B615C32873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "0A50DE1B-29EB-4014-B5B6-46CF493485F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "638B3E17-9F0A-4A96-B8D3-DDFEA518DBE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6D3E3AEB-8CD4-4EE7-9C81-2F74512071DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "254FF9D9-E696-41C8-B15B-DA089D2C6597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A5001E1-E716-43AA-8093-E0EED9E07909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "7FD16B13-516A-4D03-B1EF-A11156471A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E886D9EF-7FBD-4A24-A8B6-54E4B15403C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "369A83D1-AB7E-488D-9D74-26A69DFC1AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "3189CAC1-8970-4A33-B1E4-EB9EC3C19A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8733438-7625-400E-8237-BAE3D9F147AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "E87F1ED0-FD0D-4767-8E7C-325D920B79BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "97811266-A13C-4441-A1B5-BFA4B0862DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "3D09D157-4B19-4561-AB20-952F2EA9BA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "789087AF-0011-4E8F-A5AB-432A5F91BBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13b:*:*:beta:*:*:*",
            "matchCriteriaId" : "8EC9DC8C-56DC-482B-8847-BD0CFACA6F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "F63B3D13-24F6-4EFA-9528-DBF59D973A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F3A2388-18DE-46B0-BC13-7714E25D1B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "940B11CB-053F-4D60-8BC4-81CA659D2F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "83684DCB-B201-43B8-8B6E-6D0B13B7E437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "DF92E1FD-9B41-4A41-8B13-9D789C5729D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "351D224A-E67C-454C-AF43-8AD6CD44C685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E058CA6D-A295-4CAD-8C85-E8C83BAFEBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF99C114-1BCA-4400-BC7E-EDA1F55559CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBA1EFBA-5A26-46A0-B2A6-53B9924253BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE5B90B0-B6CC-4189-9C98-CF29017A47B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1818628-5F4E-4E5D-974A-0BEBCE821209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "14785840-3BC0-4030-AE44-E3013DF19AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "90444209-684C-4BF8-9BCF-6B29EA0A0593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "668E15DE-8CF2-4AF3-B13A-9080046B1E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "1191861C-1B2C-4762-805D-FCDC20F84D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "3CB518E5-CCC0-46B8-848E-C492BCF7E9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA1F68FE-67EA-4408-8E0F-558B0FAFFF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "66E9F05C-799A-43D3-9367-FCA86166BD65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "85DB4097-6EFC-4017-ADFD-56EE49BB2F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD283EA2-9026-497F-A7DE-E16CE0764ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "ED19DDDF-A29E-4C3F-A818-23D7E37B6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "508D0052-B7D7-4A08-8BB0-7D7A1EDAB96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "3E50BFB0-67D3-4EDE-93FE-85EAF605461E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "D7EE0134-6AD7-4695-B536-1959FE3A9672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "25DFFB5C-277F-4436-9BCE-643E98721C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "B8B80EB2-0B48-4AFA-8A09-26006CCDB022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AC8705E0-23ED-4817-8B69-21A4963C27F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "BAA156A9-A9FB-4D03-B0EE-4AA303D7A9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F733E585-075C-402A-9B34-1FE79DE4137E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "05C43439-C694-47AA-90AF-0AC2277E3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "B391F8A1-F102-4C88-864C-1386452CDAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC33C93-9947-4983-96A3-7DE223929817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B46DE141-1224-499E-AAE0-6CC0D5249B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "D8D07501-A07E-4743-A188-2E5BBC3C8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "64FD2A30-EE33-4680-9DCF-29283DBA3C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "B517F7A2-6FD1-4A7B-80E7-1167EC296591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "E6CA6EA5-DDAD-4882-AD1B-634C0CD741BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F14DCB07-9464-4DDE-98A1-FAE85DD60FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6EDFD679-4710-4A62-B254-E658EED4295B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1B81072-08A5-4EC6-B737-E35C505C1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A0748A9E-5737-48F9-BB66-6576AFE16198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "453E51D9-89A1-4A91-B218-05C45CC4E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "51542BA7-8151-4FC9-9C86-36CEB476B912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "5F95391C-0B75-47D2-9770-561E05414CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "10384675-B949-4B50-AF42-B5A3EE27250B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "7C0DB1C0-5749-4508-A265-C2138F7852E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA9977CF-575C-4A19-84C8-EBB68EBE88C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "87C525C5-E282-4EC6-956F-0C94DC11FC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F02A2A8-6312-4F6D-ABBF-952CA4C5E02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "DE54D1A3-FC2A-40DE-9177-50332208B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "170AE3DA-92C1-4D1D-9CAC-543C01FFF479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "2130C3C5-E4A5-41C3-89F0-C6FB4E47D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "74248527-B884-4134-95C8-DEAF3D774A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta17:*:*:beta:*:*:*",
            "matchCriteriaId" : "01A8AF9C-8BF6-4ADC-A85A-A5C1F9FFB2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "B4038D09-467C-4815-A429-F0E1E3E545E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6F273237-7223-4047-83B7-16A49B7E554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF26EE13-554C-4180-98A2-238D84E40927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "12688C9C-291D-4BF2-93F9-09AA323C52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "A7F7A437-D538-4B44-AC41-C95641A11A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "9BB61DCF-52DB-498D-8779-D565E548C285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "EE56BB77-B7F7-4BE7-AD9C-33888C5D01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "9DB49E1D-BCC8-4984-A81D-5DAC5E3DF168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "F775EA72-CCE3-4230-A666-EFDAA61F71FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E65BDEE-850A-41C6-8CFB-BD8B3A105CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "AF196429-FDED-4C3F-9F7D-0A2BF7DCAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "64B84326-5397-4C60-8007-F7E7D81DC661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "9A0A526A-9662-4E39-8BF6-E464BE1A2B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "712DACC2-A21E-429F-8A7B-86D8F7CE3468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E93F9F6-5B03-4F77-B8B4-AEC9E4011692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "C5B2B98E-804F-4525-B726-3F1DF2693F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "582E339F-678A-4377-8EE0-8F4208E3EF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "1BF1D945-6EAA-4FA7-8252-2FED079587F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9325DFF5-EA7B-4B8D-A227-4B1A59449CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0ECB28DA-3CA1-4011-9170-BFBF2ED3E091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A6399B0-471B-4B26-859C-3836F2A6B7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "131E2AE4-E35D-495D-8907-3B899BB8AC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "83601528-0DD9-4835-B6C0-0F341871CC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4AEB5AAF-73EB-4356-8C53-10E22B2F910E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EB199D6-E253-4EC2-BF0B-059F7B6662ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "94A586EB-B0E0-4190-88DF-3BCC04E5EF84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BF27B44-9AA7-4B91-9B4B-0E84418F5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "461744BD-3974-4C33-8514-0A917DC90C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A86FB2B-6915-49C0-B993-0711AAECA5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EF3DD36-2776-4CD2-A3F1-88872024D223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "D91D71ED-F08F-4DB5-B7DD-062E7C11435F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "62B5812A-FB52-4F4B-9A15-3AA5CD6562E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "83231EC0-E3F7-4E35-B165-487C2725B4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "A53AFFA6-7B98-47F2-9BD7-71C83A69CE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A42D3FB9-9197-4101-A729-876C490BD572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A5DE0C47-0C66-4EFE-AF82-1B22F4F54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "E587D10F-BEF8-4923-AF76-6DC3172880EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "155568EF-6A7E-423A-B5EA-D20E407B271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "7E94B119-8C75-43DF-A2DF-A5B3E04F0778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5348F94F-F6AE-4400-8AC7-036111EF43D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "57948A73-C9C5-4C24-947D-0A4659C7002E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "3532EE37-2D0F-496C-B5A8-F9315FFB4552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "2CAE7CC9-B91D-494C-B91A-497D6FE6B14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "623BBBF8-4121-466A-82C8-D179B02B3E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "648D010A-8B8D-42AA-8888-09E4E0FAA954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "8ADC7613-25E3-4CB8-A962-2775C20E4D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B0099F0-A275-4C65-9B79-041374F183DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE69800E-5CB5-4916-879C-51DE5E94489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "8C64EAFE-2B60-4D95-869F-4A2FC98B99C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "AB2045F1-AC39-4738-B3F0-33F00D23C921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E32589F8-2E87-40D2-BAD3-E6C1C088CA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "4868BAFD-BFE5-4361-855A-644B040E7233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4B6C25BF-5B2A-43C4-8918-E32BA9DD8A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB9917D3-D848-4D2B-8A44-B3723BA377DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "7046D95B-73CE-406B-ACC3-FD71F7DEC7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "D3BA5033-2C06-42FF-962E-48EBA2EBB469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "630D29DE-0FD7-4306-BA80-20D0791D334B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "08F94E42-07A1-480D-B6DD-D96AE38F1EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "FA4B3DE5-21DA-4185-AF74-AAA6DD89FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E602BEF9-E89D-40F7-BC6F-5C6F9F25BA97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "C06A8627-683D-4328-BE7A-4A33A4B736F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E3EF8240-D3F5-422C-B70A-90C6CBA4E622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "93CC792D-AE0B-498E-8374-5D09EF4E28FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "093D4EA8-B002-4AB4-97C9-CEE4D70BF3C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "4C778180-E7BF-4EF2-8B19-0388E23E1424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "0C0B2BC1-35F1-4A1D-B9B2-54426B4ADF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6BCAB620-465A-41FF-A064-FB638DD3A557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "6AFCB802-A275-444C-8245-D0397322125F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9F9B70E2-AAAD-4E61-AEB2-E5F635F6AAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6182074E-C467-448C-9299-B92CFE4EEBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "09EA8F36-7647-42D0-8675-34C002E0754D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "9CE2276A-9680-4B14-9636-806F7E4C1669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD150166-4C8D-47E3-989A-1A71A46C36A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF5CA6AD-FA4D-47DF-A684-5DAD7662EA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "B94F75B8-7C84-4727-9D18-114A815E1906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "4D94E03A-32EE-408F-81FA-4B9C25AA7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD495875-007C-4A90-B940-B62E6FA492CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F1B84E-8AF8-46E8-9DE9-00D1DE348C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BCCEFDFB-61E6-4846-8093-B5CEB0D8450C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC63647-B692-4BB9-9A3D-6F8DF19C3494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F0ED55-C8C6-47C1-859A-60046838B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A2D59BC-2EE8-4F9C-AB5B-B9D01B44F7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "933DFEBC-5568-431B-809D-AFAEFD08E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE920E80-C02B-4EC8-982F-ADE89C936684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CDAE3441-12BA-41F4-8A5A-B2EE844C86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "1443EA1B-D210-4219-8452-CBFD5FACBC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "948A4B4A-A11F-477E-BEC5-0D60C7E3570C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "98B2A052-5427-4B72-9F59-82F430836CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "CB6D636E-B51F-4648-A637-62B2603BA18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "3DA17871-7ED7-4D68-A46D-D15DC5B3235F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "705FE965-0415-4382-8CA1-A19DF3B5EF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "BC6EDCE3-D564-434F-9A7F-D4A6D579F8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "FB05E54B-9CF6-45A7-8D47-C98DB6D19E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "03CD1C5E-18F5-4C6D-B92C-C511C8C12D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF4ABB9D-69DF-42D5-AD60-F9CEEC1B6730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7B4DCCF5-E290-4BDA-AAB9-DF362A2EB7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "3AE1F3A2-8340-4ED7-B943-ACDA9617DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E033AB7-9987-4C30-849F-2495376CA4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "D87E9338-C7F6-43BA-886F-C30987ADBA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E24EB90F-FE81-4746-8741-8DC9346F79C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "D237956F-FC90-467E-A493-24EFDA1A9F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "F7AA9AB8-AB6F-43E2-B3E5-685EE9BFE7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "5BC240A1-431E-4A50-88DC-7AC9BC674254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "3F85AFD4-D397-4FDB-B762-521BD5FF14C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "D40CDCE1-3462-4D6C-A3C7-487F175264CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/105fee978d73b0ec23ff814a09d1c0c9ace95164",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/ecb9aa5dba94741d9579f4f873f0675f48b4184f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20004",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20005",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-2wvr-4x7w-v795",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/105fee978d73b0ec23ff814a09d1c0c9ace95164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/ecb9aa5dba94741d9579f4f873f0675f48b4184f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-2wvr-4x7w-v795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26040",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-17T15:15:12.237",
      "lastModified" : "2024-11-21T07:50:38.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open-source discussion platform. Between versions 3.1.0.beta2 and 3.1.0.beta3 of the `tests-passed` branch, editing or responding to a chat message containing malicious content could lead to a cross-site scripting attack. This issue is patched in version 3.1.0.beta3 of the `tests-passed` branch. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "888B8ECF-EBE0-4821-82F6-B0026E95E407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/a373bf2a01488c206e7feb28a9d2361b22ce6e70",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-ccfc-qpmp-gq87",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/a373bf2a01488c206e7feb28a9d2361b22ce6e70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-ccfc-qpmp-gq87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0027",
      "sourceIdentifier" : "PSIRT@rockwellautomation.com",
      "published" : "2023-03-17T17:15:11.307",
      "lastModified" : "2024-11-21T07:36:25.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unauthorized user could read the connected device’s Modbus TCP Server AOI information.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "PSIRT@rockwellautomation.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@rockwellautomation.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:modbus_tcp_server_add_on_instructions:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.00.00",
            "versionEndExcluding" : "2.04.00",
            "matchCriteriaId" : "5D5053BE-2C68-4505-8B9D-D80A58C28952"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138766",
        "source" : "PSIRT@rockwellautomation.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25172",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-17T17:15:11.423",
      "lastModified" : "2024-11-21T07:49:14.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, a maliciously crafted URL can be included in a user's full name field to to carry out cross-site scripting attacks on sites with a disabled or overly permissive CSP (Content Security Policy). Discourse's default CSP prevents this vulnerability. The vulnerability is patched in version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches. As a workaround, enable and/or restore your site's CSP to the default one provided with Discourse."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "C19D7945-EB52-43C0-B9B7-8C250FEDC451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "D3C08972-822D-4657-9B6F-02BC692B7C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/1a5a6f66cb821ed29a737311d6fdc2eba5adc915",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/c186a46910431020e8efc425dec2133e7a99fa9a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20008",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20009",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-7pm2-prxw-wrvp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/1a5a6f66cb821ed29a737311d6fdc2eba5adc915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/c186a46910431020e8efc425dec2133e7a99fa9a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-7pm2-prxw-wrvp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28107",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-17T17:15:11.517",
      "lastModified" : "2024-11-21T07:54:25.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open-source discussion platform. Prior to version 3.0.2 of the `stable` branch and version 3.1.0.beta3 of the `beta` and `tests-passed` branches, a user logged as an administrator can request backups multiple times, which will eat up all the connections to the DB. If this is done on a site using multisite, then it can affect the whole cluster. The vulnerability is patched in version 3.0.2 of the `stable` branch and version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "618BD7ED-B602-46C3-AFDA-55544B4E6264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "D3C08972-822D-4657-9B6F-02BC692B7C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "888B8ECF-EBE0-4821-82F6-B0026E95E407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/0bd64788d2b4680c04fbef76314a24884d65fed9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/78a3efa7104eed6dd3ed7a06a71e2705337d9e61",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20700",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20701",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-cp7c-fm4c-6xxx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/0bd64788d2b4680c04fbef76314a24884d65fed9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/78a3efa7104eed6dd3ed7a06a71e2705337d9e61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-cp7c-fm4c-6xxx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28111",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-17T17:15:11.613",
      "lastModified" : "2024-11-21T07:54:25.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, attackers are able to bypass Discourse's server-side request forgery (SSRF) protection for private IPv4 addresses by using a IPv4-mapped IPv6 address. The issue is patched in the latest beta and tests-passed version of Discourse. version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "D3C08972-822D-4657-9B6F-02BC692B7C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "888B8ECF-EBE0-4821-82F6-B0026E95E407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/fd16eade7fcc6bba4b71e71106a2eb13cdfdae4a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20710",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-26h3-8ww8-v5fc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/fd16eade7fcc6bba4b71e71106a2eb13cdfdae4a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-26h3-8ww8-v5fc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28112",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-17T19:15:11.507",
      "lastModified" : "2024-11-21T07:54:25.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, some user provided URLs were being passed to FastImage without SSRF protection. Insufficient protections could enable attackers to trigger outbound network connections from the Discourse server to private IP addresses. This affects any site running the `tests-passed` or `beta` branches versions 3.1.0.beta2 and prior. This issue is patched in version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "D3C08972-822D-4657-9B6F-02BC692B7C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndIncluding" : "3.1.0",
            "matchCriteriaId" : "F59F801F-E7B5-4F37-A2E8-6024AD6DD7B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "888B8ECF-EBE0-4821-82F6-B0026E95E407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/commit/39c2f63b35d90ebaf67b9604cf1d424e5984203c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20710",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-9897-x229-55gh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/commit/39c2f63b35d90ebaf67b9604cf1d424e5984203c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/pull/20710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-9897-x229-55gh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27591",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-17T20:15:13.100",
      "lastModified" : "2024-11-21T07:53:12.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Miniflux is a feed reader. Prior to version 2.0.43, an unauthenticated user can retrieve Prometheus metrics from a publicly reachable Miniflux instance where the `METRICS_COLLECTOR` configuration option is enabled and `METRICS_ALLOWED_NETWORKS` is set to `127.0.0.1/8` (the default). A patch is available in Miniflux 2.0.43. As a workaround, set `METRICS_COLLECTOR` to `false` (default) or run Miniflux behind a trusted reverse-proxy."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-1220"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniflux_project:miniflux:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "2.0.43",
            "matchCriteriaId" : "880DF77F-1FF0-4342-8F6D-55733B37B1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/miniflux/v2/pull/1745",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/miniflux/v2/releases/tag/2.0.43",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/miniflux/v2/security/advisories/GHSA-3qjf-qh38-x73v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://miniflux.app/docs/configuration.html#metrics-collector",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/miniflux/v2/pull/1745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/miniflux/v2/releases/tag/2.0.43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/miniflux/v2/security/advisories/GHSA-3qjf-qh38-x73v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://miniflux.app/docs/configuration.html#metrics-collector",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27592",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-17T20:15:13.283",
      "lastModified" : "2024-11-21T07:53:13.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Miniflux is a feed reader. Since v2.0.25, Miniflux will automatically proxy images served over HTTP to prevent mixed content errors. \n\nWhen an outbound request made by the Go HTTP client fails, the `html.ServerError` is returned unescaped without the expected Content Security Policy header added to valid responses.\n\nBy creating an RSS feed item with the inline description containing an `<img>` tag with a `srcset` attribute pointing to an invalid URL like `http:a<script>alert(1)</script>`, we can coerce the proxy handler into an error condition where the invalid URL is returned unescaped and in full.\n\nThis results in JavaScript execution on the Miniflux instance as soon as the user is convinced (e.g. by a message in the alt text) to open the broken image.\n\nAn attacker can execute arbitrary JavaScript in the context of a victim Miniflux user when they open a broken image in a crafted RSS feed. This can be used to perform actions on the Miniflux instance as that user and gain administrative access to the Miniflux instance if it is reachable and the victim is an administrator.\n\nA patch is available in version 2.0.43. As a workaround sisable image proxy; default value is `http-only`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniflux_project:miniflux:*:*:*:*:*:go:*:*",
            "versionStartIncluding" : "2.0.25",
            "versionEndExcluding" : "2.0.43",
            "matchCriteriaId" : "B062B6C4-1B0B-484B-A5E0-B83367AD23D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/miniflux/v2/blob/b2fd84e0d376a3af6329b9bb2e772ce38a25c31c/ui/proxy.go#L76",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/miniflux/v2/blob/b2fd84e0d376a3af6329b9bb2e772ce38a25c31c/ui/proxy.go#L90",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/miniflux/v2/pull/1746",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/miniflux/v2/releases/tag/2.0.25",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/miniflux/v2/releases/tag/2.0.43",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/miniflux/v2/security/advisories/GHSA-mqqg-xjhj-wfgw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://miniflux.app/docs/configuration.html#proxy-images",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/miniflux/v2/blob/b2fd84e0d376a3af6329b9bb2e772ce38a25c31c/ui/proxy.go#L76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/miniflux/v2/blob/b2fd84e0d376a3af6329b9bb2e772ce38a25c31c/ui/proxy.go#L90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/miniflux/v2/pull/1746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/miniflux/v2/releases/tag/2.0.25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/miniflux/v2/releases/tag/2.0.43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/miniflux/v2/security/advisories/GHSA-mqqg-xjhj-wfgw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://miniflux.app/docs/configuration.html#proxy-images",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27593",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-17T20:15:13.430",
      "lastModified" : "2024-11-21T07:53:13.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, an attacker with access to a Cilium agent pod can write to `/opt/cni/bin` due to a `hostPath` mount of that directory in the agent pod. By replacing the CNI binary with their own malicious binary and waiting for the creation of a new pod on the node, the attacker can gain access to the underlying node.\n\nThe issue has been fixed and the fix is available on versions 1.11.15, 1.12.8, and 1.13.1. Some workarounds are available. Kubernetes RBAC should be used to deny users and service accounts `exec` access to Cilium agent pods. In cases where a user requires `exec` access to Cilium agent pods, but should not have access to the underlying node, no workaround is possible."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.15",
            "matchCriteriaId" : "7726ABC1-0140-46EA-ACDD-44B09826648E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.8",
            "matchCriteriaId" : "30E4F1B2-07F4-47AC-8535-553DFF9877C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndExcluding" : "1.13.1",
            "matchCriteriaId" : "C27C25C7-4E92-48FA-AD06-F4409E57431A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cilium/cilium/pull/24075",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.11.15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.12.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.13.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/security/advisories/GHSA-4hc4-pgfx-3mrx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kubernetes.io/docs/reference/access-authn-authz/rbac/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/pull/24075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.11.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.12.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.13.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/security/advisories/GHSA-4hc4-pgfx-3mrx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kubernetes.io/docs/reference/access-authn-authz/rbac/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27594",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-17T20:15:13.583",
      "lastModified" : "2024-11-21T07:53:13.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, under specific conditions, Cilium may misattribute the source IP address of traffic to a cluster, identifying external traffic as coming from the host on which Cilium is running. As a consequence, network policies for that cluster might be bypassed, depending on the specific network policies enabled.\n\nThis issue only manifests when Cilium is routing IPv6 traffic and NodePorts are used to route traffic to pods. IPv6 and endpoint routes are both disabled by default.\n\nThe problem has been fixed and is available on versions 1.11.15, 1.12.8, and 1.13.1. As a workaround, disable IPv6 routing."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11.15",
            "matchCriteriaId" : "7726ABC1-0140-46EA-ACDD-44B09826648E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.8",
            "matchCriteriaId" : "30E4F1B2-07F4-47AC-8535-553DFF9877C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndExcluding" : "1.13.1",
            "matchCriteriaId" : "C27C25C7-4E92-48FA-AD06-F4409E57431A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.11.15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.12.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.13.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/security/advisories/GHSA-8fg8-jh2h-f2hc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.11.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.12.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.13.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/security/advisories/GHSA-8fg8-jh2h-f2hc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-17T21:15:11.387",
      "lastModified" : "2025-05-05T16:15:30.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Centralite Pearl Thermostat 0x04075010 allows attackers to cause a Denial of Service (DoS) via a crafted Zigbee message."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:centralite:pearl_firmware:0x04075010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "782352E5-AC4E-41E4-A345-E8F96F86ED86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:centralite:pearl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E9EBA5-B81A-4CD6-9451-4DD38EC9A9AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/iot-sec23/IoT-CVE/blob/main/Centralite%20Pearl%20Thermostat%20Vulnerability%20Report.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.centralite.com/%3B",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/iot-sec23/IoT-CVE/blob/main/Centralite%20Pearl%20Thermostat%20Vulnerability%20Report.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.centralite.com/%3B",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27253",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-17T22:15:11.227",
      "lastModified" : "2024-11-21T07:52:31.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via manipulating the contents of an XML file supplied to the component config.xml."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgate:pfsense:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B0402C4-6897-44F9-A290-09A7A7E61683"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/173487/pfSense-Restore-RRD-Data-Command-Injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/pfsense/pfsense/commit/ca80d18493f8f91b21933ebd6b714215ae1e5e94",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://redmine.pfsense.org/issues/13935",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173487/pfSense-Restore-RRD-Data-Command-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/pfsense/pfsense/commit/ca80d18493f8f91b21933ebd6b714215ae1e5e94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://redmine.pfsense.org/issues/13935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27595",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-17T22:15:11.317",
      "lastModified" : "2024-11-21T07:53:13.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium's featureset. This can cause disruption to newly established connections during this period due to the lack of Load Balancing, or can cause Network Policy bypass due to the lack of Network Policy enforcement during the window. This vulnerability impacts any Cilium-managed endpoints on the node (such as Kubernetes Pods), as well as the host network namespace (including Host Firewall). This vulnerability is fixed in Cilium 1.13.1 or later. Cilium releases 1.12.x, 1.11.x, and earlier are not affected. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cilium:cilium:1.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98474F0A-829C-41BE-A549-A3E7E6636AA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cilium/cilium/pull/24336",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.13.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/security/advisories/GHSA-r5x6-w42p-jhpp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/pull/24336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/releases/tag/v1.13.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/security/advisories/GHSA-r5x6-w42p-jhpp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28115",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-17T22:15:11.437",
      "lastModified" : "2024-11-21T07:54:26.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.4.2, Snappy is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the `file_exists()` function. If an attacker can upload files of any type to the server he can pass in the phar:// protocol to unserialize the uploaded file and instantiate arbitrary PHP objects. This can lead to remote code execution especially when snappy is used with frameworks with documented POP chains like Laravel/Symfony vulnerable developer code. If a user can control the output file from the `generateFromHtml()` function, it will invoke deserialization. This vulnerability is capable of remote code execution if Snappy is used with frameworks or developer code with vulnerable POP chains. It has been fixed in version 1.4.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:knplabs:snappy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.2",
            "matchCriteriaId" : "63871084-34B8-4CD8-ACEC-3EEAE2CA2EFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/KnpLabs/snappy/blob/5126fb5b335ec929a226314d40cd8dad497c3d67/src/Knp/Snappy/AbstractGenerator.php#L670",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/KnpLabs/snappy/commit/1ee6360cbdbea5d09705909a150df7963a88efd6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/KnpLabs/snappy/commit/b66f79334421c26d9c244427963fa2d92980b5d3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/KnpLabs/snappy/pull/469",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/KnpLabs/snappy/releases/tag/v1.4.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/KnpLabs/snappy/security/advisories/GHSA-gq6w-q6wh-jggc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/KnpLabs/snappy/blob/5126fb5b335ec929a226314d40cd8dad497c3d67/src/Knp/Snappy/AbstractGenerator.php#L670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/KnpLabs/snappy/commit/1ee6360cbdbea5d09705909a150df7963a88efd6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/KnpLabs/snappy/commit/b66f79334421c26d9c244427963fa2d92980b5d3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/KnpLabs/snappy/pull/469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/KnpLabs/snappy/releases/tag/v1.4.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/KnpLabs/snappy/security/advisories/GHSA-gq6w-q6wh-jggc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28116",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-17T22:15:11.547",
      "lastModified" : "2024-11-21T07:54:26.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write can occur in the BLE L2CAP module of the Contiki-NG operating system.  The network stack of Contiki-NG uses a global buffer (packetbuf) for processing of packets, with the size of PACKETBUF_SIZE. In particular, when using the BLE L2CAP module with the default configuration, the PACKETBUF_SIZE value becomes larger then the actual size of the packetbuf.  When large packets are processed by the L2CAP module, a buffer overflow can therefore occur when copying the packet data to the packetbuf. The vulnerability has been patched in the \"develop\" branch of Contiki-NG, and will be included in release 4.9. The problem can be worked around by applying the patch manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contiki-ng:contiki-ng:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8",
            "matchCriteriaId" : "729B4607-C6BD-42DE-91BF-918A57D29A77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/contiki-ng/contiki-ng/pull/2398",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-m737-4vx6-pfqp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/contiki-ng/contiki-ng/pull/2398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-m737-4vx6-pfqp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-18T04:16:02.020",
      "lastModified" : "2025-02-26T19:15:16.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squidex.io:squidex:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4.0",
            "matchCriteriaId" : "1B5AA83C-C544-40BA-AAC6-A2D0A9E64895"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://census-labs.com/news/2023/03/16/reflected-xss-vulnerabilities-in-squidex-squidsvg-endpoint/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/16/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://census-labs.com/news/2023/03/16/reflected-xss-vulnerabilities-in-squidex-squidsvg-endpoint/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/16/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26113",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-03-18T05:15:52.937",
      "lastModified" : "2024-11-21T07:50:48.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/iterators/extend.js. \r\r"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collection.js_project:collection.js:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "6.8.1",
            "matchCriteriaId" : "27735FC6-ED7E-4FDD-8F74-1E22F837B8A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kobezzza/Collection/blob/be32c48e68f49d3be48a58e929d1ab8ff1d2d19c/dist/node/iterators/extend.js%23L324",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/kobezzza/Collection/commit/d3d937645f62f37d3115d6aa90bb510fd856e6a2",
        "source" : "report@snyk.io",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kobezzza/Collection/issues/27",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kobezzza/Collection/releases/tag/v6.8.1",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-COLLECTIONJS-3185148",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kobezzza/Collection/blob/be32c48e68f49d3be48a58e929d1ab8ff1d2d19c/dist/node/iterators/extend.js%23L324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/kobezzza/Collection/commit/d3d937645f62f37d3115d6aa90bb510fd856e6a2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kobezzza/Collection/issues/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kobezzza/Collection/releases/tag/v6.8.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-COLLECTIONJS-3185148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1479",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T09:15:11.253",
      "lastModified" : "2024-11-21T07:39:16.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Simple Music Player 1.0. Affected is an unknown function of the file save_music.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223362 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_music_player_project:simple_music_player:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B27BDB-A4DD-4FFC-8CCD-9B7ABB11444E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xyaly163/bug_report/blob/main/UPLOAD.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223362",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223362",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xyaly163/bug_report/blob/main/UPLOAD.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1480",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T09:15:11.770",
      "lastModified" : "2024-11-21T07:39:16.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Parameter Handler. The manipulation of the argument un leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223363."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monitoring_of_students_cyber_accounts_system_project:monitoring_of_students_cyber_accounts_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E242EE03-D2EC-4D92-B9F0-3258739039C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xyaly163/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223363",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223363",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xyaly163/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1481",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T09:15:11.867",
      "lastModified" : "2024-11-21T07:39:16.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this issue is some unknown functionality of the file modules/balance/index.php?view=balancelist of the component POST Parameter Handler. The manipulation of the argument id with the input \"><script>alert(111)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223364."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monitoring_of_students_cyber_accounts_system_project:monitoring_of_students_cyber_accounts_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E242EE03-D2EC-4D92-B9F0-3258739039C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xyaly163/bug_report/blob/main/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223364",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223364",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xyaly163/bug_report/blob/main/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1482",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T10:15:11.250",
      "lastModified" : "2024-11-21T07:39:16.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html?type=addon of the component External Plugin Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223365 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hkcms_project:hkcms:2.2.4.230206:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0CA438-F7E5-4561-AF8B-1F8A8E3C28D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/Hk_Cms/HkCms/issues/I6J7ZD",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223365",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223365",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/Hk_Cms/HkCms/issues/I6J7ZD",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1483",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T10:15:11.340",
      "lastModified" : "2024-11-21T07:39:16.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be initiated remotely. VDB-223366 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teacms_project:teacms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "66AD3593-AEFF-47BC-BA9B-F28EEF8CFF81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/xiaobingby/TeaCMS/issues/I6IJ0K",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223366",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223366",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/xiaobingby/TeaCMS/issues/I6IJ0K",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1484",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T10:15:11.417",
      "lastModified" : "2024-11-21T07:39:17.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in xzjie cms up to 1.0.3 and classified as critical. This issue affects some unknown processing of the file /api/upload. The manipulation of the argument uploadFile leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-223367."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xzjie_cms_project:xzjie_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "587211F4-08F0-4EE6-A354-EF83B1669986"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/xzjie/cms/issues/I6INIT",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223367",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223367",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/xzjie/cms/issues/I6INIT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28606",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-18T18:15:54.270",
      "lastModified" : "2025-02-26T19:15:19.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp-project:malware_information_sharing_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.169",
            "matchCriteriaId" : "3E5675A8-EDC0-493D-9A7F-DF05832BCFBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/30255b8d683df4ec54f856282b3bde9106d5ae1a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/MISP/MISP/compare/v2.4.168...v2.4.169",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/30255b8d683df4ec54f856282b3bde9106d5ae1a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/MISP/MISP/compare/v2.4.168...v2.4.169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-18T18:15:54.333",
      "lastModified" : "2025-02-26T21:15:16.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp-project:malware_information_sharing_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.169",
            "matchCriteriaId" : "3E5675A8-EDC0-493D-9A7F-DF05832BCFBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/78f423451a4c795991e739ee970bc5215c061591",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/MISP/MISP/compare/v2.4.168...v2.4.169",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/78f423451a4c795991e739ee970bc5215c061591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/MISP/MISP/compare/v2.4.168...v2.4.169",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1485",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T21:15:11.300",
      "lastModified" : "2024-11-21T07:39:17.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file /bsenordering/index.php of the component GET Parameter Handler. The manipulation of the argument category with the input <script>alert(222)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223371."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:young_entrepreneur_e-negosyo_system_project:young_entrepreneur_e-negosyo_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3637BBA5-1FD7-483B-83E8-98F27CA42C6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2714925725/bug_report/blob/main/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223371",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223371",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2714925725/bug_report/blob/main/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1486",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T21:15:11.377",
      "lastModified" : "2024-11-21T07:39:17.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerability affects the function 0x220004 in the library WiseUnlock64.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223372."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 3.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wisecleaner:wise_force_deleter:1.5.3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A456B6E-E9C7-4FC1-94CC-55B7DEBDAA4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1Ziu1Ut_-01mDpjdj2Z8rfiU7gtUd_WVU/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1486",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223372",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223372",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1Ziu1Ut_-01mDpjdj2Z8rfiU7gtUd_WVU/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1487",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T21:15:11.460",
      "lastModified" : "2024-11-21T07:39:17.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. This issue affects the function 0x9C40208C/0x9C402000/0x9C402084/0x9C402088/0x9C402004/0x9C4060C4/0x9C4060CC/0x9C4060D0/0x9C4060D4/0x9C40A0DC/0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223373 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wisecleaner:wise_system_monitor:1.5.3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D0B338-3A8E-4206-BAB6-F29D4286E0B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1zk_ErtD34TBnQu8VGTUZKQpGGVDaUR1y/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1487",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223373",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223373",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1zk_ErtD34TBnQu8VGTUZKQpGGVDaUR1y/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1488",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T21:15:11.550",
      "lastModified" : "2024-11-21T07:39:17.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. Affected is the function 0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-223374 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wisecleaner:wise_system_monitor:1.5.3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D0B338-3A8E-4206-BAB6-F29D4286E0B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1X4qH-BIww5jIdoYfg9WKvX5088cpMRHY/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1488",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223374",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223374",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1X4qH-BIww5jIdoYfg9WKvX5088cpMRHY/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223374",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28609",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-18T21:15:11.667",
      "lastModified" : "2025-02-26T21:15:16.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ansible-semaphore:ansible_semaphore:*:*:*:*:*:ansible:*:*",
            "versionEndExcluding" : "2.8.89",
            "matchCriteriaId" : "C931885D-6C2C-4AF6-8201-1D1857BC4D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ansible-semaphore/semaphore/commit/3e4a62b7f2b1ef0660c9fb839818a53c80a5a8b1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ansible-semaphore/semaphore/releases/tag/v2.8.89",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/ansible-semaphore/semaphore/commit/3e4a62b7f2b1ef0660c9fb839818a53c80a5a8b1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ansible-semaphore/semaphore/releases/tag/v2.8.89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1489",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T22:15:11.440",
      "lastModified" : "2024-11-21T07:39:17.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54 and classified as critical. Affected by this vulnerability is the function 0x9C402088 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to improper access controls. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223375."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wisecleaner:wise_system_monitor:1.5.3.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6D0B338-3A8E-4206-BAB6-F29D4286E0B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/15k4sO3qRWDORWjU2QyOVoT_DumX6LrWu/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1489",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223375",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223375",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/15k4sO3qRWDORWjU2QyOVoT_DumX6LrWu/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1490",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T22:15:11.527",
      "lastModified" : "2024-11-21T07:39:17.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1 and classified as critical. Affected by this issue is the function 0x220020 in the library SDActMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223376."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 3.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxpcsecure:anti_virus_plus:19.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17C2FF6-1CC4-4FE8-B9DA-716D08F5EDD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1PmzG42vFkqpwfgTG0KACzyH8oA7OddWG/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1490",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223376",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223376",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1PmzG42vFkqpwfgTG0KACzyH8oA7OddWG/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1491",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T22:15:11.610",
      "lastModified" : "2024-11-21T07:39:18.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been classified as critical. This affects the function 0x220020 in the library MaxCryptMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-223377 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 3.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxpcsecure:anti_virus_plus:19.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17C2FF6-1CC4-4FE8-B9DA-716D08F5EDD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1-h-6ijBvucNU-dYglWW5n4l2ys-MDAF9/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1491",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223377",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223377",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1-h-6ijBvucNU-dYglWW5n4l2ys-MDAF9/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1492",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T23:15:11.303",
      "lastModified" : "2024-11-21T07:39:18.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been declared as problematic. This vulnerability affects the function 0x220019 in the library MaxProc64.sys of the component IoControlCode Handler. The manipulation of the argument SystemBuffer leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-223378 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxpcsecure:anti_virus_plus:19.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17C2FF6-1CC4-4FE8-B9DA-716D08F5EDD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1G_Szy4kCrZU-whGbVcxpdE1yKf5Vxqq3/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1492",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223378",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223378",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1G_Szy4kCrZU-whGbVcxpdE1yKf5Vxqq3/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1493",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T23:15:11.393",
      "lastModified" : "2024-11-21T07:39:18.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been rated as problematic. This issue affects the function 0x220019 in the library MaxProctetor64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223379."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:maxpcsecure:anti_virus_plus:19.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17C2FF6-1CC4-4FE8-B9DA-716D08F5EDD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/109wWkX5FbYrKKqQBXBC1_uLyi02Y7sqF/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1493",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223379",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223379",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/109wWkX5FbYrKKqQBXBC1_uLyi02Y7sqF/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1494",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-18T23:15:11.493",
      "lastModified" : "2024-11-21T07:39:18.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the argument emailids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223380."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibos:ibos:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F678D76-48AA-4940-833F-5567D196DB7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/cui-yiwei/cve-number/blob/master/images/IBOS%20oa%20v4.5.5.md/1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223380",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223380",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/cui-yiwei/cve-number/blob/master/images/IBOS%20oa%20v4.5.5.md/1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1495",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-19T00:15:12.677",
      "lastModified" : "2024-11-21T07:39:18.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in Rebuild up to 3.2.3. Affected by this vulnerability is the function queryListOfConfig of the file /admin/robot/approval/list. The manipulation of the argument q leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is c9474f84e5f376dd2ade2078e3039961a9425da7. It is recommended to apply a patch to fix this issue. The identifier VDB-223381 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruifang-tech:rebuild:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "3055AC72-F415-4504-952E-1E891C67D61C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/getrebuild/rebuild/commit/c9474f84e5f376dd2ade2078e3039961a9425da7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/getrebuild/rebuild/issues/594",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223381",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223381",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/getrebuild/rebuild/commit/c9474f84e5f376dd2ade2078e3039961a9425da7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/getrebuild/rebuild/issues/594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-19T01:15:39.107",
      "lastModified" : "2025-02-27T17:15:15.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to Buffer Overflow via function formIPMacBindModify."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w20e_firmware:15.11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C1283D-8DCF-49C0-92FF-34CF842D00BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w20e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F04924-FB40-4330-B9D9-8597E06DF11B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Stevenbaga/fengsha/blob/main/W20E/formIPMacBindModify.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Stevenbaga/fengsha/blob/main/W20E/formIPMacBindModify.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-19T01:15:39.157",
      "lastModified" : "2025-02-27T17:15:15.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTime,"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:w20e_firmware:15.11.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C1283D-8DCF-49C0-92FF-34CF842D00BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:w20e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F04924-FB40-4330-B9D9-8597E06DF11B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Stevenbaga/fengsha/blob/main/W20E/SetSysTime.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Stevenbaga/fengsha/blob/main/W20E/SetSysTime.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-19T01:15:39.207",
      "lastModified" : "2025-02-27T17:15:15.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue instructions to the background database system via /alphaware/details.php?id."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphaware_-_simple_e-commerce_system_project:alphaware_-_simple_e-commerce_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E925AF-79F2-41BA-99AD-333772CEE4D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1MurasaKi/bug_report/blob/main/vendors/razormist/Alphaware%20-%20Simple%20E-Commerce%20System/SQLi-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/1MurasaKi/bug_report/blob/main/vendors/razormist/Alphaware%20-%20Simple%20E-Commerce%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28617",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-19T03:15:11.747",
      "lastModified" : "2025-11-03T21:15:57.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:org_mode:*:*:*:*:*:gnu_emacs:*:*",
            "versionEndIncluding" : "9.6.1",
            "matchCriteriaId" : "9BAB37F0-2861-45A4-AF07-A5ED6D9401FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=8f8ec2ccf3f5ef8f38d68ec84a7e4739c45db485",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=a8006ea580ed74f27f974d60b598143b04ad1741",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://list.orgmode.org/tencent_04CF842704737012CCBCD63CD654DD41CA0A%40qq.com/T/#m6ef8e7d34b25fe17b4cbb655b161edce18c6655e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00008.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00019.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=8f8ec2ccf3f5ef8f38d68ec84a7e4739c45db485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=a8006ea580ed74f27f974d60b598143b04ad1741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://list.orgmode.org/tencent_04CF842704737012CCBCD63CD654DD41CA0A%40qq.com/T/#m6ef8e7d34b25fe17b4cbb655b161edce18c6655e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/02/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1496",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-19T17:15:11.173",
      "lastModified" : "2024-11-21T07:39:18.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evilmartians:imgproxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.14.0",
            "matchCriteriaId" : "D271D07A-F367-4DB0-9255-5FF0A8546417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/imgproxy/imgproxy/commit/62f8d08a93d301285dcd1dabcc7ba10c6c65b689",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/de603972-935a-401a-96fb-17ddadd282b2",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/imgproxy/imgproxy/commit/62f8d08a93d301285dcd1dabcc7ba10c6c65b689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/de603972-935a-401a-96fb-17ddadd282b2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1497",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-19T19:15:20.130",
      "lastModified" : "2024-11-21T07:39:18.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. It has been rated as critical. This issue affects some unknown processing of the file uploaderm.php. The manipulation of the argument submit leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223397 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_and_nice_shopping_cart_script_project:simple_and_nice_shopping_cart_script:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D05B141-8FF7-4FA2-8A41-D169E2D3056B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Decemberus/BugHub/blob/main/simple%20and%20beautiful%20shopping%20cart%20system%20uploaderm.php%20has%20a%20file%20upload%20vulnerability.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223397",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223397",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Decemberus/BugHub/blob/main/simple%20and%20beautiful%20shopping%20cart%20system%20uploaderm.php%20has%20a%20file%20upload%20vulnerability.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223397",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1498",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-19T20:15:19.280",
      "lastModified" : "2025-10-23T20:06:00.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223398 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:responsive_hotel_site:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEEBA52B-991B-4FF9-AE6A-14E21F1F7E50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Decemberus/BugHub/blob/main/Responsive%20Hotel%20Site%20System%20Has%20Sql%20injection%20vulnerabilities.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223398",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223398",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Decemberus/BugHub/blob/main/Responsive%20Hotel%20Site%20System%20Has%20Sql%20injection%20vulnerabilities.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1499",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-19T20:15:19.377",
      "lastModified" : "2024-11-21T07:39:19.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in code-projects Simple Art Gallery 1.0. Affected by this vulnerability is an unknown functionality of the file adminHome.php. The manipulation of the argument reach_city leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223399."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-projects:simple_art_gallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48D55A88-8756-4324-B13D-BC959051ED32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Fchen-xcu/Vulnerability-Set/blob/main/SIMPLE%20ART%20GALLERY%20system%20reach_city%20has%20Sql%20injection%20vulnerabilities.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223399",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223399",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Fchen-xcu/Vulnerability-Set/blob/main/SIMPLE%20ART%20GALLERY%20system%20reach_city%20has%20Sql%20injection%20vulnerabilities.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1500",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-19T20:15:19.453",
      "lastModified" : "2024-11-21T07:39:19.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file adminHome.php. The manipulation of the argument about_info leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223400."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:code-projects:simple_art_gallery:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48D55A88-8756-4324-B13D-BC959051ED32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Decemberus/BugHub/blob/main/SIMPLE%20ART%20GALLERY%20system%20has%20%20Cross%20site%20scripting%20vulnerabilities.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223400",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223400",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Decemberus/BugHub/blob/main/SIMPLE%20ART%20GALLERY%20system%20has%20%20Cross%20site%20scripting%20vulnerabilities.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1501",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-19T20:15:19.540",
      "lastModified" : "2024-11-21T07:39:19.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223401 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockoa:rockoa:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6955DED7-BC72-45EC-A056-B4119E6E4B92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/xieqiangweb/cve/blob/master/cve/Rockoa.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223401",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223401",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/xieqiangweb/cve/blob/master/cve/Rockoa.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1248",
      "sourceIdentifier" : "security@otrs.com",
      "published" : "2023-03-20T09:15:11.877",
      "lastModified" : "2024-11-21T07:38:45.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation vulnerability in OTRS AG OTRS (Ticket Actions modules), OTRS AG ((OTRS)) Community Edition (Ticket Actions modules) allows Cross-Site Scripting (XSS).This issue affects OTRS: from 7.0.X before 7.0.42; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@otrs.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@otrs.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "6.0.1",
            "versionEndIncluding" : "6.0.34",
            "matchCriteriaId" : "F4C2FF02-9A6F-435D-A55A-D2F085BD1FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.42",
            "matchCriteriaId" : "D1B1D5F9-829A-4ADB-AF14-B9AE6C06DB67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://otrs.com/release-notes/otrs-security-advisory-2023-01/",
        "source" : "security@otrs.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://otrs.com/release-notes/otrs-security-advisory-2023-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1250",
      "sourceIdentifier" : "security@otrs.com",
      "published" : "2023-03-20T09:15:12.020",
      "lastModified" : "2024-11-21T07:38:45.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation vulnerability in OTRS AG OTRS (ACL modules), OTRS AG ((OTRS)) Community Edition (ACL modules) allows Local Execution of Code. When creating/importing an ACL it was possible to inject code that gets executed via manipulated comments and ACL-names\nThis issue affects OTRS: from 7.0.X before 7.0.42, from 8.0.X before 8.0.31; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@otrs.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@otrs.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "6.0.1",
            "versionEndIncluding" : "6.0.34",
            "matchCriteriaId" : "F4C2FF02-9A6F-435D-A55A-D2F085BD1FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.42",
            "matchCriteriaId" : "D1B1D5F9-829A-4ADB-AF14-B9AE6C06DB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.31",
            "matchCriteriaId" : "E2871416-EC98-48A5-9322-49B18DF6D2D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://otrs.com/release-notes/otrs-security-advisory-2023-02/",
        "source" : "security@otrs.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://otrs.com/release-notes/otrs-security-advisory-2023-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1502",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-20T09:15:12.103",
      "lastModified" : "2024-11-21T07:39:19.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file function/edit_customer.php. The manipulation of the argument firstname/mi/lastname with the input a' RLIKE SLEEP(5) AND 'dAbu'='dAbu leads to sql injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-223406 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphaware_-_simple_e-commerce_system_project:alphaware_-_simple_e-commerce_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E925AF-79F2-41BA-99AD-333772CEE4D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223406",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223406",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1503",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-20T09:15:12.267",
      "lastModified" : "2024-11-21T07:39:19.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file admin/admin_index.php. The manipulation of the argument username/password with the input admin' AND (SELECT 8062 FROM (SELECT(SLEEP(5)))meUD)-- hLiX leads to sql injection. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223407."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphaware_-_simple_e-commerce_system_project:alphaware_-_simple_e-commerce_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E925AF-79F2-41BA-99AD-333772CEE4D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223407",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223407",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1504",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-20T09:15:12.410",
      "lastModified" : "2024-11-21T07:39:19.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Alphaware Simple E-Commerce System 1.0. This vulnerability affects unknown code. The manipulation of the argument email/password with the input test1%40test.com ' AND (SELECT 6077 FROM (SELECT(SLEEP(5)))dltn) AND 'PhRa'='PhRa leads to sql injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223408."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alphaware_-_simple_e-commerce_system_project:alphaware_-_simple_e-commerce_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E925AF-79F2-41BA-99AD-333772CEE4D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223408",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223408",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1505",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-20T09:15:12.540",
      "lastModified" : "2024-11-21T07:39:20.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester E-Commerce System 1.0. This issue affects some unknown processing of the file /ecommerce/admin/settings/setDiscount.php. The manipulation of the argument id with the input 201737 AND (SELECT 8973 FROM (SELECT(SLEEP(5)))OoAD) leads to sql injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-223409 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-commerce_system_project:e-commerce_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA60707-3A30-4D55-8DB4-DED3CF68189A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223409",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223409",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1506",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-20T10:15:11.543",
      "lastModified" : "2024-11-21T07:39:20.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester E-Commerce System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument U_USERNAME leads to sql injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. VDB-223410 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-commerce_system_project:e-commerce_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA60707-3A30-4D55-8DB4-DED3CF68189A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223410",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223410",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1507",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-20T10:15:11.633",
      "lastModified" : "2024-11-21T07:39:20.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ecommerce/admin/category/controller.php of the component Category Name Handler. The manipulation of the argument CATEGORY leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223411."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-commerce_system_project:e-commerce_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA60707-3A30-4D55-8DB4-DED3CF68189A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223411",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223411",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25782",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-20T10:15:11.720",
      "lastModified" : "2024-11-21T07:50:11.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) vulnerability in Second2none Service Area Postcode Checker plugin <= 2.0.8 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plustime:service_area_postcode_checker:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.0.8",
            "matchCriteriaId" : "DE8EC1CC-3DEC-44CD-A552-0B422501893A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/service-area-postcode-checker/wordpress-service-area-postcode-checker-plugin-2-0-8-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/service-area-postcode-checker/wordpress-service-area-postcode-checker-plugin-2-0-8-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22681",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-20T11:15:11.140",
      "lastModified" : "2024-11-21T07:45:12.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Aarvanshinfotech Online Exam Software: eExamhall plugin <= 4.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_exam_software_\\:_eexamhall_project:online_exam_software_\\:_eexamhall:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.0",
            "matchCriteriaId" : "04EC438C-FE82-4CA6-BE15-04A6003B2323"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/eexamhall/wordpress-online-exam-software-eexamhall-plugin-4-0-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/eexamhall/wordpress-online-exam-software-eexamhall-plugin-4-0-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24381",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-20T11:15:11.247",
      "lastModified" : "2024-11-21T07:47:44.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes Advanced Social Pixel plugin <= 2.1.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nsthemes:advanced_social_pixel:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "35D9E1A1-4BC6-40DF-B0B7-E8EC91D6D925"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/ns-facebook-pixel-for-wp/wordpress-advanced-social-pixel-plugin-2-1-1-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/ns-facebook-pixel-for-wp/wordpress-advanced-social-pixel-plugin-2-1-1-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25064",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-20T11:15:11.333",
      "lastModified" : "2024-11-21T07:49:02.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Matteo Candura WP htpasswd plugin <= 1.7 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp_htpasswd_project:wp_htpasswd:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7",
            "matchCriteriaId" : "287A07DF-8ECC-46C5-991F-EB13527D709E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-htpasswd/wordpress-wp-htpasswd-plugin-1-7-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-htpasswd/wordpress-wp-htpasswd-plugin-1-7-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25794",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-20T11:15:11.407",
      "lastModified" : "2024-11-21T07:50:12.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mighty Digital Nooz plugin <= 1.6.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nooz_project:nooz:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.6.0",
            "matchCriteriaId" : "24280F29-B205-4222-92A2-65151A71B028"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/nooz/wordpress-nooz-plugin-1-6-0-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/nooz/wordpress-nooz-plugin-1-6-0-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25795",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-20T11:15:11.493",
      "lastModified" : "2024-11-21T07:50:12.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in WP-master.Ir Feed Changer & Remover plugin <= 0.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-master:feed_changer_\\&_remover:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.2",
            "matchCriteriaId" : "35F16A0A-E1BC-4703-A9FC-B229CC60EF67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/feed-changer/wordpress-feed-changer-plugin-0-2-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/feed-changer/wordpress-feed-changer-plugin-0-2-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22678",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-20T12:15:11.157",
      "lastModified" : "2024-11-21T07:45:12.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Rafael Dery Superior FAQ plugin <= 1.0.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:superior_faq_project:superior_faq:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "B15A847F-73F9-4F22-AE0C-C0D46B9CA654"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/superior-faq/wordpress-superior-faq-plugin-1-0-2-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/superior-faq/wordpress-superior-faq-plugin-1-0-2-cross-site-request-forgery-csrf?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22679",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-20T12:15:11.260",
      "lastModified" : "2024-11-21T07:45:12.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nicolas Lemoine WP Better Emails plugin <= 0.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp_better_emails_project:wp_better_emails:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.4",
            "matchCriteriaId" : "26314652-0BB3-4144-85ED-924E25F11B65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-better-emails/wordpress-wp-better-emails-plugin-0-4-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-better-emails/wordpress-wp-better-emails-plugin-0-4-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22680",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-20T12:15:11.347",
      "lastModified" : "2024-11-21T07:45:12.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Altanic No API Amazon Affiliate plugin <= 4.2.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altanic:no_api_amazon_affiliate:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.2.2",
            "matchCriteriaId" : "EBDE39FB-45E7-4502-80C3-20E77B64AFD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/no-api-amazon-affiliate/wordpress-no-api-amazon-affiliate-plugin-4-2-2-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/no-api-amazon-affiliate/wordpress-no-api-amazon-affiliate-plugin-4-2-2-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22682",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-20T12:15:11.427",
      "lastModified" : "2024-11-21T07:45:12.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) vulnerability in Manuel Masia | Pixedelic.Com Camera slideshow plugin <= 1.4.0.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pixedelic:camera_slideshow:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.4.0.1",
            "matchCriteriaId" : "1F465C85-69AF-4626-BF32-336F80F09814"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/camera-slideshow/wordpress-camera-slideshow-plugin-1-4-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/camera-slideshow/wordpress-camera-slideshow-plugin-1-4-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23718",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-20T12:15:11.513",
      "lastModified" : "2024-11-21T07:46:43.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Esstat17 Page Loading Effects plugin <= 2.0.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:page_loading_effects_project:page_loading_effects:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D42C7A-EC12-442B-A882-B2675EAFD73F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/page-loading-effects/wordpress-page-loading-effects-plugin-2-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/page-loading-effects/wordpress-page-loading-effects-plugin-2-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23721",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-20T12:15:11.590",
      "lastModified" : "2024-11-21T07:46:43.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in David Gwyer Admin Log plugin <= 1.50 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:admin_log_project:admin_log:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.50",
            "matchCriteriaId" : "D66B4A67-3707-4181-891E-910DFB675F82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/admin-log/wordpress-admin-log-plugin-1-50-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/admin-log/wordpress-admin-log-plugin-1-50-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0320",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-20T13:15:11.693",
      "lastModified" : "2024-11-21T07:36:57.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Izmir Katip Celebi University UBYS allows Stored XSS.This issue affects UBYS: before 23.03.16.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:university_information_management_system_project:university_information_management_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.03.16",
            "matchCriteriaId" : "82D43CAB-4461-4678-905B-B862DA779292"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0159",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26513",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-20T13:15:11.783",
      "lastModified" : "2024-11-21T07:51:39.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Excessive Iteration vulnerability in Apache Software Foundation Apache Sling Resource Merger.This issue affects Apache Sling Resource Merger: from 1.2.0 before 1.4.2.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:sling_resource_merger:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "1.4.2",
            "matchCriteriaId" : "C3D6A8E5-F6A1-4E0F-B2B2-AE8EE45E50E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/xpcpo1y88ldss5hgmvogsf6h3735l5zb",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/xpcpo1y88ldss5hgmvogsf6h3735l5zb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28118",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-20T13:15:11.877",
      "lastModified" : "2024-11-21T07:54:26.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAML documents containing anchors and aliases. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-776"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaml_project:kaml:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.53.0",
            "matchCriteriaId" : "14E288FA-2A10-49B3-B836-442D90F4A7D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/charleskorn/kaml/releases/tag/0.53.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/charleskorn/kaml/releases/tag/0.53.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28424",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-20T13:15:11.973",
      "lastModified" : "2025-04-11T14:50:48.420",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Soko if the code that powers packages.gentoo.org. Prior to version 1.0.2, the two package search handlers, `Search` and `SearchFeed`, implemented in `pkg/app/handler/packages/search.go`, are affected by a SQL injection via the `q` parameter. As a result, unauthenticated attackers can execute arbitrary SQL queries on `https://packages.gentoo.org/`. It was also demonstrated that primitive was enough to gain code execution in the context of the PostgreSQL container. The issue was addressed in commit `4fa6e4b619c0362728955b6ec56eab0e0cbf1e23y` of version 1.0.2 using prepared statements to interpolate user-controlled data in SQL queries."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gentoo:soko:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2",
            "matchCriteriaId" : "3683F486-233D-4B6C-9737-FBA83943FFB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gentoo/soko/security/advisories/GHSA-gc2x-86p3-mxg2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitweb.gentoo.org/sites/soko.git/commit/?id=4fa6e4b619c0362728955b6ec56eab0e0cbf1e23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.sonarsource.com/blog/why-orms-and-prepared-statements-cant-always-win",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/gentoo/soko/security/advisories/GHSA-gc2x-86p3-mxg2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitweb.gentoo.org/sites/soko.git/commit/?id=4fa6e4b619c0362728955b6ec56eab0e0cbf1e23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28426",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-20T14:15:11.767",
      "lastModified" : "2023-11-07T04:10:35.027",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: GHSA-xrqq-wqh4-5hg2. Reason: Further investigation showed that this CVE was assigned in error. Notes: See https://github.com/darylldoyle/svg-sanitizer/issues/88 for a technical discussion."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1515",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-20T15:15:11.503",
      "lastModified" : "2024-11-21T07:39:20.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.19",
            "matchCriteriaId" : "9F355AEC-329F-43D1-A3D7-44C2481A1999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/44c6b37aa649a0e3105fa41f3d74a3e511acf964",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/44c6b37aa649a0e3105fa41f3d74a3e511acf964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28428",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-20T15:15:12.360",
      "lastModified" : "2024-11-21T07:55:02.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue is available in version 1.1.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfio_project:pdfio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.1",
            "matchCriteriaId" : "1476C11E-4858-423D-9719-0BF93A4B7208"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/michaelrsweet/pdfio/commit/97d4955666779dc5b0665e15dd951a5c12426a31",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/michaelrsweet/pdfio/security/advisories/GHSA-68x8-9phf-j7jf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/michaelrsweet/pdfio/commit/97d4955666779dc5b0665e15dd951a5c12426a31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/michaelrsweet/pdfio/security/advisories/GHSA-68x8-9phf-j7jf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28429",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-20T15:15:12.447",
      "lastModified" : "2024-11-21T07:55:02.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore is an open source data and experience management platform. Versions prior to 10.5.19 have an unsecured tooltip field in DataObject class definition. This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Users should upgrade to version 10.5.19 or, as a workaround, apply the patch manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.19",
            "matchCriteriaId" : "9F355AEC-329F-43D1-A3D7-44C2481A1999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/pull/14574",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14574.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-rcg9-hrhx-6q69",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14574.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-rcg9-hrhx-6q69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0145",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:11.607",
      "lastModified" : "2025-02-26T15:15:17.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Saan World Clock WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saan:world_clock:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.8",
            "matchCriteriaId" : "132556C8-6748-4878-92B2-23CA75362B34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/f4e4b4a2-c7cb-42ce-9d5b-bd84efcbf54d",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f4e4b4a2-c7cb-42ce-9d5b-bd84efcbf54d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0167",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:11.750",
      "lastModified" : "2025-02-26T19:15:14.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GetResponse for WordPress plugin through 5.5.31 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getresponse:getresponse:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.5.31",
            "matchCriteriaId" : "61F334D9-E0CF-4FD1-9728-CD41027D4A4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/fafbf666-b908-48ef-9041-fea653e9bfeb",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/fafbf666-b908-48ef-9041-fea653e9bfeb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0175",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:11.820",
      "lastModified" : "2025-02-26T19:15:14.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Responsive Clients Logo Gallery Plugin for WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.0.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "9FB5B505-CB25-47D8-B3EE-F2047A94D8BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.0.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "051AA4F7-25E4-4F72-A666-7C33D7A084E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.0.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "960E5C1D-A625-4862-A9DD-5A7958EC5181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.0.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "16FACD93-EA6D-4CB0-A474-9B3FB462BDCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.0.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "1E67D160-BBCB-4463-98C2-052A95ED4CF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.0.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2F3660E2-38A2-4C07-B2B6-381C23CB6B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.0.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "6FFDE2D9-0226-4BE4-83C6-C3BA401F885B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.0.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "6A6E74B4-9CB3-4DEC-9FD1-9F479BF8EE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.0.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "65D6597D-1C0D-492E-A78D-7B6370F7E499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.0.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "9D430412-5759-4219-8EF8-CA12A155EBC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "3FDEF4B8-606B-49B1-AA32-91DC0FB5A020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.1.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "BE92A222-1143-462F-BE60-3641EA901CFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.1.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A01F360C-B2F1-494E-A8E8-E87688CB6B5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.1.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "071C20DC-DD27-4157-A121-BE68E296A93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.1.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "E16D528D-877F-4E51-95E1-3F852E87231F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.1.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "20B9D6BF-28C6-406B-BE39-64AD84E42D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.1.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "14031AA8-0907-4743-9B4E-69BE5405AC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.1.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D3C00E24-9469-4D3A-9050-346BCA2EAF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.1.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "F0184FAD-24CE-498C-A77B-4EC2B9759631"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.1.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2B57D888-C6E4-4D9F-8125-8FE7FC3905C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/cdcd3c2c-cb29-4b21-8d3d-7eafbc1d3098",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/cdcd3c2c-cb29-4b21-8d3d-7eafbc1d3098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0273",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:11.887",
      "lastModified" : "2025-02-26T19:15:15.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Custom Content Shortcode WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:custom_content_shortcode_project:custom_content_shortcode:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "A1891241-3AEC-4649-9F4E-5AA2625E967A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5cafbba6-478f-4f5d-a2d4-60c6a22f2f1e",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5cafbba6-478f-4f5d-a2d4-60c6a22f2f1e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0340",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:12.000",
      "lastModified" : "2025-02-26T19:15:15.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Custom Content Shortcode WordPress plugin through 4.0.2 does not validate one of its shortcode attribute, which could allow users with a contributor role and above to include arbitrary files via a traversal attack. This could also allow them to read non PHP files and retrieve their content. RCE could also be achieved if the attacker manage to upload a malicious image containing PHP code, and then include it via the affected attribute, on a default WP install, authors could easily achieve that given that they have the upload_file capability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:custom_content_shortcode_project:custom_content_shortcode:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "A1891241-3AEC-4649-9F4E-5AA2625E967A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/71956598-90aa-4557-947a-c4716674543d",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/71956598-90aa-4557-947a-c4716674543d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0364",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:12.073",
      "lastModified" : "2025-02-26T15:15:18.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The real.Kit WordPress plugin before 5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:real.kit_project:real.kit:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.1.1",
            "matchCriteriaId" : "B8313353-DA4E-4952-851B-BE93372D05F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e56759ae-7530-467a-b9ba-e9a404afb872",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e56759ae-7530-467a-b9ba-e9a404afb872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0365",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:12.153",
      "lastModified" : "2025-02-26T15:15:18.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The React Webcam WordPress plugin through 1.2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:react_webcam_project:react_webcam:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.0",
            "matchCriteriaId" : "E35A68E3-8BE7-4E43-93A7-33CF45D550A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d268d7a3-82fd-4444-bc0e-27c7cc279b5a",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d268d7a3-82fd-4444-bc0e-27c7cc279b5a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0369",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:12.223",
      "lastModified" : "2025-02-26T15:15:18.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GoToWP WordPress plugin through 5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gotowp:gotowp:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "5.1.1",
            "matchCriteriaId" : "9AB8001E-4295-45A0-A288-35D90F066241"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/351f31e0-cd13-4079-8fd1-447f319133c9",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/351f31e0-cd13-4079-8fd1-447f319133c9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0370",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:12.293",
      "lastModified" : "2025-02-26T19:15:15.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WPB Advanced FAQ WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpbean:wpb_advanced_faq:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.06",
            "matchCriteriaId" : "3D0841DA-8DB4-4055-B4D9-C0E377CC802B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/4f5597f9-ab27-42d2-847c-14455b7d0849",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/4f5597f9-ab27-42d2-847c-14455b7d0849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0630",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:12.367",
      "lastModified" : "2025-02-26T15:15:18.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that concatenates attributes directly into an SQL query."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-slimstat:slimstat_analytics:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.9.3.3",
            "matchCriteriaId" : "BB531975-9682-440D-AE81-A367C05390D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/b82bdd02-b699-4527-86cc-d60b56ab0c55",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/b82bdd02-b699-4527-86cc-d60b56ab0c55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0631",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:12.437",
      "lastModified" : "2025-02-26T15:15:18.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strangerstudios:paid_memberships_pro:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.9.12",
            "matchCriteriaId" : "C7870689-AED1-42E6-B1E8-1063CE1870E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/19ef92fd-b493-4488-91f0-e6ba51362f79",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/19ef92fd-b493-4488-91f0-e6ba51362f79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0865",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:12.507",
      "lastModified" : "2025-02-26T15:15:18.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WooCommerce Multiple Customer Addresses & Shipping WordPress plugin before 21.7 does not ensure that the address to add/update/retrieve/delete and duplicate belong to the user making the request, or is from a high privilege users, allowing any authenticated users, such as subscriber to add/update/duplicate/delete as well as retrieve addresses of other users."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woocommerce_multiple_customer_addresses_\\&_shipping_project:woocommerce_multiple_customer_addresses_\\&_shipping:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "21.7",
            "matchCriteriaId" : "EB8B1FF8-068A-4F35-AB9B-CBE9CC728DF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e39c0171-ed4a-4143-9a31-c407e3555eec",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e39c0171-ed4a-4143-9a31-c407e3555eec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0875",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:12.587",
      "lastModified" : "2025-02-26T19:15:15.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Meta SEO WordPress plugin before 4.5.3 does not properly sanitize and escape inputs into SQL queries, leading to a blind SQL Injection vulnerability that can be exploited by subscriber+ users."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomunited:wp_meta_seo:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.5.3",
            "matchCriteriaId" : "0566D8FD-19D5-4111-A231-D1AB20EAAB7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d44e9a45-cbdf-46b1-8b48-7d934b617534",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d44e9a45-cbdf-46b1-8b48-7d934b617534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0876",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:12.653",
      "lastModified" : "2025-02-26T19:15:15.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Meta SEO WordPress plugin before 4.5.3 does not authorize several ajax actions, allowing low-privilege users to make updates to certain data and leading to an arbitrary redirect vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomunited:wp_meta_seo:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.5.3",
            "matchCriteriaId" : "0566D8FD-19D5-4111-A231-D1AB20EAAB7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/1a8c97f9-98fa-4e29-b7f7-bb9abe0c42ea",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/1a8c97f9-98fa-4e29-b7f7-bb9abe0c42ea",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0890",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:12.727",
      "lastModified" : "2024-11-21T07:38:02.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not ensure that posts to be displayed via some shortcodes are already public and can be accessed by the user making the request, allowing any authenticated users such as subscriber to view draft, private or even password protected posts. It is also possible to leak the password of protected posts"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getshortcodes:shortcodes_ultimate:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.12.8",
            "matchCriteriaId" : "4E5B1D19-FDBC-474D-B5B9-C95D16C55218"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/8a466f15-f112-4527-8b02-4544a8032671",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8a466f15-f112-4527-8b02-4544a8032671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0911",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:12.800",
      "lastModified" : "2025-02-25T21:15:10.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not validate the user meta to be retrieved via the user shortcode, allowing any authenticated users such as subscriber to retrieve arbitrary user meta (except the user_pass), such as the user email and activation key by default."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getshortcodes:shortcodes_ultimate:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.12.8",
            "matchCriteriaId" : "4E5B1D19-FDBC-474D-B5B9-C95D16C55218"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/35404d16-7213-4293-ac0d-926bd6c17444",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/35404d16-7213-4293-ac0d-926bd6c17444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0937",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:12.873",
      "lastModified" : "2025-02-25T22:15:12.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VK All in One Expansion Unit WordPress plugin before 9.87.1.0 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vektor-inc:vk_all_in_one_expansion_unit:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "9.87.1.0",
            "matchCriteriaId" : "E1FCAC49-AAC3-49D5-B5E9-C2301A8980FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5110ff02-c721-43eb-b13e-50aca25e1162",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5110ff02-c721-43eb-b13e-50aca25e1162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0940",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-20T16:15:12.950",
      "lastModified" : "2025-02-26T19:15:16.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ProfileGrid WordPress plugin before 5.3.1 provides an AJAX endpoint for resetting a user password but does not implement proper authorization. This allows a user with low privileges, such as subscriber, to change the password of any account, including Administrator ones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metagauss:profilegrid:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.3.1",
            "matchCriteriaId" : "F927A555-3243-4F33-993A-C19CCD3D1D78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/56744f72-2d48-4f42-8195-24b4dd951bb5",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/56744f72-2d48-4f42-8195-24b4dd951bb5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1517",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-20T16:15:13.023",
      "lastModified" : "2024-11-21T07:39:21.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.19."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.19",
            "matchCriteriaId" : "9F355AEC-329F-43D1-A3D7-44C2481A1999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/3a22700dacd8a439cffcb208838a4199e732cff7",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/3a22700dacd8a439cffcb208838a4199e732cff7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22288",
      "sourceIdentifier" : "security@checkmk.com",
      "published" : "2023-03-20T16:15:13.120",
      "lastModified" : "2024-11-21T07:44:27.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTML Email Injection in Tribe29 Checkmk <=2.1.0p23; <=2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@checkmk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@checkmk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-138"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EDFDCA-0778-4540-B1D5-D3A986258028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "54031390-D7E7-4A14-AA2F-923768B3685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B7E35F-5A07-424E-AA09-AC54104D612B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4AC302-C8F5-4A2B-A73A-982D0AA2495A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "7A058C71-C39E-4109-B570-4A061013D033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*",
            "matchCriteriaId" : "22BCFA79-B3D6-4FFF-A3D3-8C4C97AF17C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1703D9-8EEB-432D-90E2-F847CDC4C204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4C72BA-6D78-4911-83E4-4DABB2CAC47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*",
            "matchCriteriaId" : "081FD127-1066-4019-B521-9FADB85DBD4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A4F005-4823-4B2B-B4EF-4EFDB04CFB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "357240B1-F0DA-4FA8-B782-D998951F4B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "2F828F54-04E2-4B98-91A7-B09ED833E88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B8B300-8264-40AB-A839-7EACB988163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "EB76A8DF-C870-482F-A488-DB2917ABD971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "04947B1B-CF67-4C11-8FE3-6C17FD35E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "591AEC3C-2F48-4E91-9881-42EEDD039C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CA04C8-2C80-4C7E-B329-3FFCBEDEE663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p16:*:*:*:*:*:*",
            "matchCriteriaId" : "47A1C5AC-C8B7-495A-A5F4-CD4790358A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "B87D8B46-5B04-460D-BBA1-BB19234DA19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "C59EA30A-0B7D-4E58-A503-8C2F16B45004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p19:*:*:*:*:*:*",
            "matchCriteriaId" : "F2849E4C-09D1-48A5-B28E-F7A4CD3E8967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E5549E-3272-478D-85D0-6F53EE731183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p20:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0EA35B-EBFF-4E6F-BD2E-4BE165E81A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p21:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2C76F2-D457-4C7C-BE76-515CA45CA161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p22:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5A374E-56C5-4EBA-967C-CDFE6A967DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p23:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4568F0-8CCD-4517-B4E9-7E2CA228D659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p24:*:*:*:*:*:*",
            "matchCriteriaId" : "96893FF5-B85E-45AF-9020-5D767E954D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p25:*:*:*:*:*:*",
            "matchCriteriaId" : "425ABB56-3A2E-40E3-9701-E638F16E6ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p26:*:*:*:*:*:*",
            "matchCriteriaId" : "9EEF6054-B3B5-4AAC-B24B-147A38564992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p27:*:*:*:*:*:*",
            "matchCriteriaId" : "462C2826-237E-4061-8F14-3DE09CE9952C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p28:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE8F008-1FC0-416C-B0D4-5A560CF985F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p29:*:*:*:*:*:*",
            "matchCriteriaId" : "53AA0AB2-E814-4378-9486-D9192293C1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "D884D3AF-7D57-4DF6-82E8-556C35319ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p30:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6A123B-D6D3-4C46-9595-4D8138FC31C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p31:*:*:*:*:*:*",
            "matchCriteriaId" : "4245029F-D95D-4364-BB29-8C60F5461070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p32:*:*:*:*:*:*",
            "matchCriteriaId" : "C67473D2-A96B-4ACD-B248-A0AF2E3C9738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p33:*:*:*:*:*:*",
            "matchCriteriaId" : "B22FDFE4-844F-449B-88D7-E7EDC92EC752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p34:*:*:*:*:*:*",
            "matchCriteriaId" : "01D13D8E-61F2-406C-8EE5-FDDD9BDCCF71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "528BAFA3-ED39-45B5-8C81-A6FD76DDB49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "02DA7C50-7360-4679-93A5-92C8DC5E8E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "71B49D90-9522-46C6-8948-B9C21CEA473C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "98C29296-D1F3-45A2-BF0A-22333150F416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "339226E6-532F-4FE2-A543-6B166A9BA7F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "986FDFA6-BE12-4268-9B90-F7D469BBE517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE224D8-742B-4D1F-ABBE-3DDA3EA5C5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6FCE7B-7ECE-42A4-82C5-12A647B0CCC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "923AA113-D5E7-4F78-88BA-B72EF250F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "B1984F57-A313-48AC-B8F9-F352D82824D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "A38DB527-72A6-40B8-B46F-B8E78BFFDB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b5:*:*:*:*:*:*",
            "matchCriteriaId" : "67643E11-91A1-4580-BC4C-574074C862CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b6:*:*:*:*:*:*",
            "matchCriteriaId" : "350B7E0F-D234-4D7C-91E4-F35E73579A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b7:*:*:*:*:*:*",
            "matchCriteriaId" : "DE58ACA9-8078-46A7-8487-C06E4E38F372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b8:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D8CF4D-E1F8-4D8D-A8A9-1783CAC869E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b9:*:*:*:*:*:*",
            "matchCriteriaId" : "58B0B051-7D3C-4EC7-96B0-38A1CC108D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A741-AAF2-43EE-8272-9239133A01E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F275A3-A99E-40E1-BD77-694FA568541F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "3A44BF1A-5BE0-4412-B51D-055445758B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "A31BAE94-9096-4320-AC19-AA204E8EC08D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0784EA-98E8-4490-B97B-894F188A223D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "A56A901F-1040-4DB9-9BE3-FE1999C514CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "58A904FC-C015-469D-8502-E678D5FDBD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p16:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5D109C-60AA-4FA4-9B10-2191AAF109F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "37297866-24BB-4044-8744-EC0A8C29F152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D4A171-CCB3-43B8-8B70-78610423E7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA8F776-A724-48FC-B7EF-13788BC69753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p20:*:*:*:*:*:*",
            "matchCriteriaId" : "46F42A22-99F2-4DF5-9B00-3123396F87AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p21:*:*:*:*:*:*",
            "matchCriteriaId" : "1C59D4D3-D526-4E6B-B3AA-FE485D030190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p22:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5CAE6-DC8B-47B3-84A0-D79B0C33EB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p23:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9E0D89-79E2-476A-8A3E-8443316BC310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "076463AA-195F-4CD6-861B-72FE1C8A407F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "63043834-98E5-47C2-91F1-41B98270ABCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF745D0-2EA6-4414-90BC-99D3ED08BB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "4823087F-D7FA-4594-8FD3-412DE5EA1F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "6429F9CE-D477-4CFF-B6E0-4BF11B61ED0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "A50C58F9-94ED-4D85-8331-2D81F8E0760A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6AC0BD-FB65-4FAA-B344-66F87F16F8B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribe29:checkmk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.0",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "2E68DD82-AF90-4D24-B507-833541B762AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://checkmk.com/werk/15069",
        "source" : "security@checkmk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://checkmk.com/werk/15069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27586",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-20T16:15:13.197",
      "lastModified" : "2024-11-21T07:53:12.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files. A malicious actor could send a specially crafted SVG file that allows them to perform a server-side request forgery or denial of service. Version 2.7.0 disables CairoSVG's ability to access other files online by default."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:courtbouillon:cairosvg:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.0",
            "matchCriteriaId" : "49569D87-C5E0-449A-8DD0-D28D273E9FA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Kozea/CairoSVG/commit/12d31c653c0254fa9d9853f66b04ea46e7397255",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Kozea/CairoSVG/commit/33007d4af9195e2bfb2ff9af064c4c2d8e4b2b53",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Kozea/CairoSVG/releases/tag/2.7.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Kozea/CairoSVG/security/advisories/GHSA-rwmf-w63j-p7gv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Kozea/CairoSVG/commit/12d31c653c0254fa9d9853f66b04ea46e7397255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Kozea/CairoSVG/commit/33007d4af9195e2bfb2ff9af064c4c2d8e4b2b53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Kozea/CairoSVG/releases/tag/2.7.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Kozea/CairoSVG/security/advisories/GHSA-rwmf-w63j-p7gv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0681",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-20T20:15:52.470",
      "lastModified" : "2024-11-21T07:37:37.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rapid7 InsightVM versions 6.6.178 and lower suffers from an open redirect vulnerability, whereby an attacker has the ability to redirect the user to a site of the attacker’s choice using the ‘page’ parameter of the ‘data/console/redirect’ component of the application. This issue was resolved in the February, 2023 release of version 6.6.179. \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@rapid7.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:insightvm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.6.179",
            "matchCriteriaId" : "4111324E-B540-43DB-B93D-5A0B948BDAD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.rapid7.com/release-notes/nexpose/20230208/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.rapid7.com/release-notes/nexpose/20230208/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27578",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-20T20:15:52.690",
      "lastModified" : "2024-11-21T07:53:11.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Galaxy is an open-source platform for data analysis. All supported versions of Galaxy are affected prior to 22.01, 22.05, and 23.0 are affected by an insufficient permission check. Unsupported versions are likely affected as far back as the functionality of Visualizations/Pages exists. Due to this issue, an attacker can modify or delete any Galaxy Visualization or Galaxy Page given they know the encoded ID of it. Additionally, they can copy or import any Galaxy Visualization given they know the encoded ID of it. Patches are available for versions 22.01, 22.05, and 23.0. For the changes to take effect, you must restart all Galaxy server processes. There are no supported workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:galaxyproject:galaxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.01",
            "matchCriteriaId" : "C63ACD69-5A46-4B1B-A41F-3BF8C102FD3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://depot.galaxyproject.org/patch/GX-2022-0002/modify_pages_viz-release_22.01.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://depot.galaxyproject.org/patch/GX-2022-0002/modify_pages_viz-release_22.05.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://depot.galaxyproject.org/patch/GX-2022-0002/modify_pages_viz-release_23.0.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/galaxyproject/galaxy/security/advisories/GHSA-j8q2-r4g5-f22j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://depot.galaxyproject.org/patch/GX-2022-0002/modify_pages_viz-release_22.01.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://depot.galaxyproject.org/patch/GX-2022-0002/modify_pages_viz-release_22.05.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://depot.galaxyproject.org/patch/GX-2022-0002/modify_pages_viz-release_23.0.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/galaxyproject/galaxy/security/advisories/GHSA-j8q2-r4g5-f22j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28425",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-20T20:15:52.787",
      "lastModified" : "2024-11-21T07:55:02.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.8",
            "versionEndExcluding" : "7.0.10",
            "matchCriteriaId" : "A3A3D6B1-C1A2-420D-9AD7-F9F6F04E6CFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redis/redis/commit/48e0d4788434833b47892fe9f3d91be7687f25c9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis/releases/tag/7.0.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redis/redis/security/advisories/GHSA-mvmm-4vq6-vw8c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0005/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/redis/redis/commit/48e0d4788434833b47892fe9f3d91be7687f25c9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis/releases/tag/7.0.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redis/redis/security/advisories/GHSA-mvmm-4vq6-vw8c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230413-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1527",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-21T00:15:10.780",
      "lastModified" : "2024-11-21T07:39:22.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:corebos:corebos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0",
            "matchCriteriaId" : "2ED1C4A9-9F39-4663-9E1B-6270C9CC2539"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tsolucio/corebos/commit/aaaca69185bce2be6a82956c69541938dc871268",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f0272a31-9944-4545-8428-a26154d20348",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tsolucio/corebos/commit/aaaca69185bce2be6a82956c69541938dc871268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f0272a31-9944-4545-8428-a26154d20348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1535",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-21T05:15:08.797",
      "lastModified" : "2024-11-21T07:39:23.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.7",
            "matchCriteriaId" : "04A638AA-976E-4A76-B0C0-A1B167B41572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/c3743bad4f2a69f69f8f1e1e5b4b6524fc03da25",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/4d4b0caa-6d8c-4574-ae7e-e9ef5e2e1a40",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/c3743bad4f2a69f69f8f1e1e5b4b6524fc03da25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/4d4b0caa-6d8c-4574-ae7e-e9ef5e2e1a40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1536",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-21T05:15:09.630",
      "lastModified" : "2024-11-21T07:39:23.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.7",
            "matchCriteriaId" : "04A638AA-976E-4A76-B0C0-A1B167B41572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/c3743bad4f2a69f69f8f1e1e5b4b6524fc03da25",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/538207f4-f805-419a-a314-51716643f05e",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/c3743bad4f2a69f69f8f1e1e5b4b6524fc03da25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/538207f4-f805-419a-a314-51716643f05e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1537",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-21T05:15:09.720",
      "lastModified" : "2024-11-21T07:39:23.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/171cde18-a447-446c-a9ab-297953ad9b86",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/171cde18-a447-446c-a9ab-297953ad9b86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1538",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-21T05:15:09.813",
      "lastModified" : "2024-11-21T07:39:23.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ac0271eb-660f-4966-8b57-4bc660a9a1a0",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ac0271eb-660f-4966-8b57-4bc660a9a1a0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1539",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-21T05:15:09.907",
      "lastModified" : "2024-11-21T07:39:24.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/b4df67f4-14ea-4051-97d4-26690c979a28",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/b4df67f4-14ea-4051-97d4-26690c979a28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1540",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-21T05:15:09.997",
      "lastModified" : "2024-11-21T07:39:24.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-204"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/1de3ec27e50ba7389c9449c59e8ea3a37a908ee4",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d8d6c259-a0f2-4209-a3b0-ecbf3eb092f4",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/1de3ec27e50ba7389c9449c59e8ea3a37a908ee4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d8d6c259-a0f2-4209-a3b0-ecbf3eb092f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1541",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-21T05:15:10.077",
      "lastModified" : "2024-11-21T07:39:24.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-840"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/15390adbfcd5fd37af4661f992f8873ae5a6b840",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/8fd891c6-b04e-4dac-818f-9ea30861cd92",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/15390adbfcd5fd37af4661f992f8873ae5a6b840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/8fd891c6-b04e-4dac-818f-9ea30861cd92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1542",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-21T05:15:10.160",
      "lastModified" : "2024-11-21T07:39:24.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-840"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/4ca2429d190a6e614f5bbee1173c80a7cffcc568",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d947417c-5a12-407a-9a2f-fa696f65126f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/4ca2429d190a6e614f5bbee1173c80a7cffcc568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d947417c-5a12-407a-9a2f-fa696f65126f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1543",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-21T05:15:10.243",
      "lastModified" : "2024-11-21T07:39:24.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/cd742b75605c99776f32d271c0a60e0f468e181c",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f82388d6-dfc3-4fbc-bea6-eb40cf5b2683",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/cd742b75605c99776f32d271c0a60e0f468e181c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f82388d6-dfc3-4fbc-bea6-eb40cf5b2683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27980",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-03-21T06:15:13.063",
      "lastModified" : "2024-11-21T07:53:51.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow the creation of a malicious report file in the IGSS project report directory, this could lead to remote code execution when a victim eventually opens the report. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:custom_reports:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "93DB1B65-C1B5-4A20-ACA7-84EE9C07E9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_dashboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "CCB39F06-042F-444C-819B-709FF63E060F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_data_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "AE9B5271-999B-4B2B-B4F3-8D99B3A78077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27982",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-03-21T07:15:08.410",
      "lastModified" : "2024-11-21T07:53:52.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS project report directory, when an attacker sends specific crafted messages to the Data Server TCP port, this could lead to remote code execution when a victim eventually opens a malicious dashboard file. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:custom_reports:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "93DB1B65-C1B5-4A20-ACA7-84EE9C07E9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_dashboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "CCB39F06-042F-444C-819B-709FF63E060F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_data_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "AE9B5271-999B-4B2B-B4F3-8D99B3A78077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1462",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-21T09:15:10.497",
      "lastModified" : "2024-11-21T07:39:14.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key vulnerability in Vadi Corporate Information Systems DigiKent allows Authentication Bypass, Authentication Abuse. This issue affects DigiKent: before 23.03.20."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vadi:digikent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.03.20",
            "matchCriteriaId" : "02BD5BAD-8FAD-4402-A594-EAB89DF78A96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0161",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27978",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-03-21T09:15:11.470",
      "lastModified" : "2024-11-21T07:53:51.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to remote code execution when an attacker gets the user to open a malicious file. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:custom_reports:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "93DB1B65-C1B5-4A20-ACA7-84EE9C07E9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_dashboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "CCB39F06-042F-444C-819B-709FF63E060F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_data_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "AE9B5271-999B-4B2B-B4F3-8D99B3A78077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27981",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-03-21T10:15:17.173",
      "lastModified" : "2024-11-21T07:53:51.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a malicious report. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:custom_reports:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "93DB1B65-C1B5-4A20-ACA7-84EE9C07E9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_dashboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "CCB39F06-042F-444C-819B-709FF63E060F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_data_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "AE9B5271-999B-4B2B-B4F3-8D99B3A78077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1545",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-21T11:15:10.453",
      "lastModified" : "2024-11-21T07:39:24.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.23",
            "matchCriteriaId" : "764C6217-B0DC-46BE-8785-63C62947781F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nilsteampassnet/teampass/commit/4780252fdb600ef2ec2758f17a37d738570cbe66",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/942c015f-7486-49b1-94ae-b1538d812bc2",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/teampass/commit/4780252fdb600ef2ec2758f17a37d738570cbe66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/942c015f-7486-49b1-94ae-b1538d812bc2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27984",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-03-21T11:15:10.553",
      "lastModified" : "2024-11-21T07:53:52.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed, potentially leading to remote code execution when a user opens a malicious report file planted by an attacker. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:custom_reports:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "93DB1B65-C1B5-4A20-ACA7-84EE9C07E9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_dashboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "CCB39F06-042F-444C-819B-709FF63E060F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_data_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "AE9B5271-999B-4B2B-B4F3-8D99B3A78077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1153",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-21T12:15:10.117",
      "lastModified" : "2024-11-21T07:38:33.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pacsrapor allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Pacsrapor: before 1.22.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pacsrapor:pacsrapor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22",
            "matchCriteriaId" : "F9D6E36C-D132-41AF-AB5B-067EC31D7E88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0163",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1154",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-21T12:15:10.407",
      "lastModified" : "2024-11-21T07:38:33.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pacsrapor allows Reflected XSS.This issue affects Pacsrapor: before 1.22.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pacsrapor:pacsrapor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22",
            "matchCriteriaId" : "F9D6E36C-D132-41AF-AB5B-067EC31D7E88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0163",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1314",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2023-03-21T12:15:10.563",
      "lastModified" : "2024-11-21T07:38:54.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been discovered in cloudflared's installer (<= 2023.3.0) for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared relied on a world-writable directory.\n\nAn attacker with local access to the device (without Administrator rights) can use symbolic links to trick the MSI installer into deleting files in locations that the attacker would otherwise have no access to. By creating a symlink from the world-writable directory to the target file, the attacker can manipulate the MSI installer's repair functionality to delete the target file during the repair process.\n\nExploitation of this vulnerability could allow an attacker to delete important system files or replace them with malicious files, potentially leading to the affected device being compromised.\n\nThe cloudflared client itself is not affected by this vulnerability, only the installer for 32-bit Windows devices.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cloudflare.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cloudflare.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudflare:cloudflared:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.3.1",
            "matchCriteriaId" : "7D99E948-CB23-4FC2-A4E0-5CA2D6495907"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cloudflare/cloudflared/releases",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/cloudflare/cloudflared/security/advisories/GHSA-7mjv-x3jf-545x",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/cloudflare/cloudflared/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/cloudflare/cloudflared/security/advisories/GHSA-7mjv-x3jf-545x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27977",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-03-21T12:15:10.647",
      "lastModified" : "2024-11-21T07:53:51.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project report directory, this could lead to loss of data when an attacker sends specific crafted messages to the Data Server TCP port. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:custom_reports:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "93DB1B65-C1B5-4A20-ACA7-84EE9C07E9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_dashboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "CCB39F06-042F-444C-819B-709FF63E060F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_data_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "AE9B5271-999B-4B2B-B4F3-8D99B3A78077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27979",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-03-21T13:15:12.140",
      "lastModified" : "2024-11-21T07:53:51.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the renaming of files in the IGSS project report directory, this could lead to denial of service when an attacker sends specific crafted messages to the Data Server TCP port. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:custom_reports:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "93DB1B65-C1B5-4A20-ACA7-84EE9C07E9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_dashboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "CCB39F06-042F-444C-819B-709FF63E060F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_data_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "AE9B5271-999B-4B2B-B4F3-8D99B3A78077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27983",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-03-21T14:15:11.337",
      "lastModified" : "2024-11-21T07:53:52.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow deletion of reports from the IGSS project report directory, this would lead to loss of data when an attacker abuses this functionality. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:custom_reports:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "93DB1B65-C1B5-4A20-ACA7-84EE9C07E9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_dashboard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "CCB39F06-042F-444C-819B-709FF63E060F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:igss_data_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "16.0.0.23040",
            "matchCriteriaId" : "AE9B5271-999B-4B2B-B4F3-8D99B3A78077"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25687",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-21T15:15:12.157",
      "lastModified" : "2024-11-21T07:49:56.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to obtain sensitive information from log files.  IBM X-Force ID:  247602."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5744D219-B3BD-4CBA-888E-2920B5A7FD99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8182ED-77F8-4931-88ED-385163DD4091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D815B49-CE8E-45C8-A025-509253F5252C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D098B3CA-E84B-42CE-ABF5-97D80864C553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C04E4B-EAA5-43E8-A6F3-251ED2D6C1E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247602",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962729",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25689",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-21T15:15:12.250",
      "lastModified" : "2024-11-21T07:49:56.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1 , and 4.1.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system.  IBM X-Force ID:  247618."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5744D219-B3BD-4CBA-888E-2920B5A7FD99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8182ED-77F8-4931-88ED-385163DD4091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D815B49-CE8E-45C8-A025-509253F5252C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D098B3CA-E84B-42CE-ABF5-97D80864C553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C04E4B-EAA5-43E8-A6F3-251ED2D6C1E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247618",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962729",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27842",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-21T15:15:12.413",
      "lastModified" : "2025-02-26T18:15:12.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-277"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:extplorer:extplorer:2.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F888E605-69A9-4197-9AA6-2801EC0D7198"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.tristaomarinho.com/extplorer-2-1-15-insecure-permissions-following-remote-code-execution/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://extplorer.net/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://extplorer.net/attachments/download/99/eXtplorer_2.1.15.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/tristao-marinho/CVE-2023-27842",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tristao-marinho/CVE-2023-27842/blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.tristaomarinho.com/extplorer-2-1-15-insecure-permissions-following-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://extplorer.net/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://extplorer.net/attachments/download/99/eXtplorer_2.1.15.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/tristao-marinho/CVE-2023-27842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tristao-marinho/CVE-2023-27842/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27871",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-21T15:15:12.477",
      "lastModified" : "2025-02-25T20:15:32.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Aspera Faspex 4.4.2 could allow a remote attacker to obtain sensitive credential information for an external user, using a specially crafted SQL query.  IBM X-Force ID:  249613."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_faspex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.2",
            "matchCriteriaId" : "BFC015A7-A006-4441-942B-89A6B9A76BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_faspex:4.4.2:patch_level_1:*:*:*:*:*:*",
            "matchCriteriaId" : "60433D3C-FA1F-43F2-AB2B-BF4B039A97B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_faspex:4.4.2:patch_level_2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC992C37-4065-492D-95C1-DC28B39E8B81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249613",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6964694",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6964694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27873",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-21T15:15:12.543",
      "lastModified" : "2024-11-21T07:53:36.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nIBM Aspera Faspex 4.4.2 could allow a remote authenticated attacker to obtain sensitive credential information using specially crafted XML input. IBM X-Force ID: 249654.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_faspex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.2",
            "matchCriteriaId" : "BFC015A7-A006-4441-942B-89A6B9A76BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_faspex:4.4.2:patch_level_1:*:*:*:*:*:*",
            "matchCriteriaId" : "60433D3C-FA1F-43F2-AB2B-BF4B039A97B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_faspex:4.4.2:patch_level_2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC992C37-4065-492D-95C1-DC28B39E8B81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249654",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6964694",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6964694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27874",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-21T15:15:12.633",
      "lastModified" : "2024-11-21T07:53:37.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands.  IBM X-Force ID:  249845."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_faspex:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.2",
            "matchCriteriaId" : "BFC015A7-A006-4441-942B-89A6B9A76BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_faspex:4.4.2:patch_level_1:*:*:*:*:*:*",
            "matchCriteriaId" : "60433D3C-FA1F-43F2-AB2B-BF4B039A97B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_faspex:4.4.2:patch_level_2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC992C37-4065-492D-95C1-DC28B39E8B81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249845",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6964694",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6964694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25686",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-21T16:15:12.860",
      "lastModified" : "2024-11-21T07:49:56.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 stores user credentials in plain clear text which can be read by a local user.  IBM X-Force ID:  247601."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5744D219-B3BD-4CBA-888E-2920B5A7FD99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8182ED-77F8-4931-88ED-385163DD4091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D815B49-CE8E-45C8-A025-509253F5252C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D098B3CA-E84B-42CE-ABF5-97D80864C553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C04E4B-EAA5-43E8-A6F3-251ED2D6C1E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247601",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962729",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25923",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-21T16:15:12.947",
      "lastModified" : "2024-11-21T07:50:25.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an attacker to upload files that could be used in a denial of service attack due to incorrect authorization.  IBM X-Force ID:  247629."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5744D219-B3BD-4CBA-888E-2920B5A7FD99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8182ED-77F8-4931-88ED-385163DD4091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D815B49-CE8E-45C8-A025-509253F5252C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D098B3CA-E84B-42CE-ABF5-97D80864C553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C04E4B-EAA5-43E8-A6F3-251ED2D6C1E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247629",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962729",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-21T16:15:13.040",
      "lastModified" : "2025-02-26T19:15:18.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The eo_tags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or Referer header."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:eo_tags:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "8CEEB42D-5D89-4B90-863A-17F54DED03BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://profileo.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://security.profileo.com/cve/eo_tags_2023-27569-27570/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://profileo.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://security.profileo.com/cve/eo_tags_2023-27569-27570/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-21T16:15:13.113",
      "lastModified" : "2025-02-26T18:15:12.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The eo_tags package before 1.4.19 for PrestaShop allows SQL injection via a crafted _ga cookie."
      }, {
        "lang" : "es",
        "value" : "El paquete de etiquetas eo_tags antes de 1.4.19 para PrestaShop permite la inyección de SQL a través de una cookie _ga manipulada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:eo_tags:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "1.4.19",
            "matchCriteriaId" : "93D5C060-D195-4CE3-A93B-C5225F6120A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://profileo.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://security.profileo.com/cve/eo_tags_2023-27569-27570/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://profileo.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://security.profileo.com/cve/eo_tags_2023-27569-27570/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1304",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-21T17:15:11.557",
      "lastModified" : "2025-02-25T19:15:12.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perform other actions that are normally expected to be private methods. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:insightappsec:*:*:*:*:self-managed:*:*:*",
            "versionEndExcluding" : "23.2.1",
            "matchCriteriaId" : "65FCB38E-8FDE-43D4-A62E-BBAD43FFBC97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:insightcloudsec:*:*:*:*:managed:*:*:*",
            "versionEndExcluding" : "2023.02.01",
            "matchCriteriaId" : "2005649C-D913-4281-9E35-6E342C7E6D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:insightcloudsec:*:*:*:*:saas:*:*:*",
            "versionEndExcluding" : "2023.02.01",
            "matchCriteriaId" : "D88FD323-9DA9-497D-BC99-F30C66E33096"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.divvycloud.com/changelog/23321-release-notes",
        "source" : "cve@rapid7.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://nephosec.com/exploiting-rapid7s-insightcloudsec/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.divvycloud.com/changelog/23321-release-notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://nephosec.com/exploiting-rapid7s-insightcloudsec/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1305",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-21T17:15:11.727",
      "lastModified" : "2025-02-26T17:15:15.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated attacker can leverage an exposed “box” object to read and write arbitrary files from disk, provided those files can be parsed as yaml or JSON. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-653"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:insightappsec:*:*:*:*:self-managed:*:*:*",
            "versionEndExcluding" : "23.2.1",
            "matchCriteriaId" : "65FCB38E-8FDE-43D4-A62E-BBAD43FFBC97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:insightcloudsec:*:*:*:*:managed:*:*:*",
            "versionEndExcluding" : "2023.02.01",
            "matchCriteriaId" : "2005649C-D913-4281-9E35-6E342C7E6D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:insightcloudsec:*:*:*:*:saas:*:*:*",
            "versionEndExcluding" : "2023.02.01",
            "matchCriteriaId" : "D88FD323-9DA9-497D-BC99-F30C66E33096"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.divvycloud.com/changelog/23321-release-notes",
        "source" : "cve@rapid7.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://nephosec.com/exploiting-rapid7s-insightcloudsec/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.divvycloud.com/changelog/23321-release-notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://nephosec.com/exploiting-rapid7s-insightcloudsec/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1306",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-21T17:15:11.797",
      "lastModified" : "2025-02-26T17:15:15.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated attacker can leverage an exposed resource.db() accessor method to smuggle Python method calls via a Jinja template, which can lead to code execution. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:insightappsec:*:*:*:*:self-managed:*:*:*",
            "versionEndExcluding" : "23.2.1",
            "matchCriteriaId" : "65FCB38E-8FDE-43D4-A62E-BBAD43FFBC97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:insightcloudsec:*:*:*:*:managed:*:*:*",
            "versionEndExcluding" : "2023.02.01",
            "matchCriteriaId" : "2005649C-D913-4281-9E35-6E342C7E6D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:insightcloudsec:*:*:*:*:saas:*:*:*",
            "versionEndExcluding" : "2023.02.01",
            "matchCriteriaId" : "D88FD323-9DA9-497D-BC99-F30C66E33096"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.divvycloud.com/changelog/23321-release-notes",
        "source" : "cve@rapid7.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://nephosec.com/exploiting-rapid7s-insightcloudsec/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.divvycloud.com/changelog/23321-release-notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://nephosec.com/exploiting-rapid7s-insightcloudsec/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25684",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-21T17:15:11.883",
      "lastModified" : "2024-11-21T07:49:56.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.  IBM X-Force ID:  247597."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5744D219-B3BD-4CBA-888E-2920B5A7FD99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8182ED-77F8-4931-88ED-385163DD4091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D815B49-CE8E-45C8-A025-509253F5252C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D098B3CA-E84B-42CE-ABF5-97D80864C553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C04E4B-EAA5-43E8-A6F3-251ED2D6C1E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247597",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962729",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-21T18:15:12.647",
      "lastModified" : "2025-02-28T22:15:37.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "McAfee Total Protection prior to 16.0.50 may allow an adversary (with full administrative access) to modify a McAfee specific Component Object Model (COM) in the Windows Registry. This can result in the loading of a malicious payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:total_protection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.50",
            "matchCriteriaId" : "4D9A573D-CB3B-4269-B893-6D682F86865F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/support/?articleId=TS103398&page=shell&shell=article-view",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/support/?articleId=TS103398&page=shell&shell=article-view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-21T19:15:11.607",
      "lastModified" : "2025-02-26T19:15:17.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-280"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xuxueli:xxl-job:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AE69F1-6781-47B8-933D-989F4EF5ED19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xuxueli:xxl-job:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233AAF33-91ED-425F-951A-1DAAC0B3A4C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xuxueli:xxl-job:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F9E9173-1AD8-4DFA-8AC2-7C91E73635D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xuxueli/xxl-job/issues/3096",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xuxueli/xxl-job/issues/3096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0391",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-21T20:15:11.683",
      "lastModified" : "2025-02-26T17:15:14.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MGT-COMMERCE CloudPanel ships with a static SSL certificate to encrypt communications to the administrative interface, shared across every installation of CloudPanel. This behavior was observed in version 2.2.0. There has been no indication from the vendor this has been addressed in version 2.2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mgt-commerce:cloudpanel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.1",
            "matchCriteriaId" : "7CDC9617-57AC-4528-9088-57B84A999366"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.bleepingcomputer.com/news/security/cloudpanel-installations-use-the-same-ssl-certificate-private-key/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Exploit", "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/03/21/cve-2023-0391-mgt-commerce-cloudpanel-shared-certificate-vulnerability-and-weak-installation-procedures/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.bleepingcomputer.com/news/security/cloudpanel-installations-use-the-same-ssl-certificate-private-key/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/03/21/cve-2023-0391-mgt-commerce-cloudpanel-shared-certificate-vulnerability-and-weak-installation-procedures/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1261",
      "sourceIdentifier" : "product-security@silabs.com",
      "published" : "2023-03-21T21:15:12.097",
      "lastModified" : "2024-11-21T07:38:47.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nMissing MAC layer security in Silicon Labs Wi-SUN SDK v1.5.0 and earlier allows malicious node to route malicious messages through network.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@silabs.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@silabs.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silabs:wi-sun_software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "F95609A0-A2D4-46D7-8582-1F24DD0B1E73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000SMyfRQAT?operationContext=S1",
        "source" : "product-security@silabs.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/SiliconLabs/gecko_sdk",
        "source" : "product-security@silabs.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000SMyfRQAT?operationContext=S1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/SiliconLabs/gecko_sdk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1262",
      "sourceIdentifier" : "product-security@silabs.com",
      "published" : "2023-03-21T21:15:12.220",
      "lastModified" : "2024-11-21T07:38:47.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nMissing MAC layer security in Silicon Labs Wi-SUN Linux Border Router v1.5.2 and earlier allows malicious node to route malicious messages through network.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@silabs.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@silabs.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:silabs:wireless_smart_ubiquitous_network_linux_border_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "302771A7-E9E4-40E4-B721-E3443313D8DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:silabs:wireless_smart_ubiquitous_network_linux_border_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "581A46D5-5783-4135-B50F-76765EBF7A5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000SMyfRQAT?operationContext=S1",
        "source" : "product-security@silabs.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/SiliconLabs/wisun-br-linux",
        "source" : "product-security@silabs.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000SMyfRQAT?operationContext=S1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/SiliconLabs/wisun-br-linux",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1528",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-21T21:15:12.297",
      "lastModified" : "2024-11-21T07:39:22.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.110",
            "matchCriteriaId" : "F71F8C2B-9C13-4A8B-B404-066DDFF45006"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1421773",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1421773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1529",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-21T21:15:12.357",
      "lastModified" : "2024-11-21T07:39:22.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious HID device. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.110",
            "matchCriteriaId" : "F71F8C2B-9C13-4A8B-B404-066DDFF45006"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1419718",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1419718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1530",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-21T21:15:12.413",
      "lastModified" : "2025-05-05T16:15:28.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.110",
            "matchCriteriaId" : "F71F8C2B-9C13-4A8B-B404-066DDFF45006"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1419831",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1419831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1531",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-21T21:15:12.527",
      "lastModified" : "2024-11-21T07:39:22.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.110",
            "matchCriteriaId" : "F71F8C2B-9C13-4A8B-B404-066DDFF45006"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chromium:chromium:112.0.5592.0:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "3FEF925E-AEE4-445A-90D4-3C10E218EB9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1415330",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1724",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1415330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1532",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-21T21:15:12.613",
      "lastModified" : "2024-11-21T07:39:22.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.110",
            "matchCriteriaId" : "F71F8C2B-9C13-4A8B-B404-066DDFF45006"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171959/Chrome-media-mojom-VideoFrame-Missing-Validation.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1421268",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171959/Chrome-media-mojom-VideoFrame-Missing-Validation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1421268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1533",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-21T21:15:12.690",
      "lastModified" : "2024-11-21T07:39:23.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.110",
            "matchCriteriaId" : "F71F8C2B-9C13-4A8B-B404-066DDFF45006"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1422183",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1422183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1534",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-03-21T21:15:12.747",
      "lastModified" : "2024-11-21T07:39:23.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.5563.110",
            "matchCriteriaId" : "F71F8C2B-9C13-4A8B-B404-066DDFF45006"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171961/Chrome-GL_ShaderBinary-Untrusted-Process-Exposure.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171965/Chrome-SpvGetMappedSamplerName-Out-Of-Bounds-String-Copy.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1422594",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171961/Chrome-GL_ShaderBinary-Untrusted-Process-Exposure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171965/Chrome-SpvGetMappedSamplerName-Out-Of-Bounds-String-Copy.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1422594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26497",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-21T22:15:12.210",
      "lastModified" : "2025-02-26T19:15:16.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5125. Memory corruption can occur when processing Session Description Negotiation for Video Configuration Attribute."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F66A096-7BA3-47D6-98F4-879C3A4C1FFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE202894-D48A-4B9E-B3BD-28529967A0B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B60F97-1320-44F5-970C-BBA29F375524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72419735-076A-4E72-869F-0C7D801371C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-21T23:15:12.637",
      "lastModified" : "2025-02-28T22:15:36.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paradox:ipr512_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9279AB4B-4F22-4A89-8A09-F5A55E5AD28A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:paradox:ipr512:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97496F30-B39F-4483-9911-F947E87AA12E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171783/Paradox-Security-Systems-IPR512-Denial-Of-Service.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/SlashXzerozero/Injection-vulnerability-in-Paradox-Security-Systems-IPR512",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sunktitanic/Injection-vulnerability-in-Paradox-Security-Systems-IPR512",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171783/Paradox-Security-Systems-IPR512-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/SlashXzerozero/Injection-vulnerability-in-Paradox-Security-Systems-IPR512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sunktitanic/Injection-vulnerability-in-Paradox-Security-Systems-IPR512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27855",
      "sourceIdentifier" : "PSIRT@rockwellautomation.com",
      "published" : "2023-03-22T00:15:12.670",
      "lastModified" : "2024-11-21T07:53:35.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nIn affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed. The attacker could overwrite existing executable files with attacker-controlled, malicious contents, potentially causing remote code execution. \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "PSIRT@rockwellautomation.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@rockwellautomation.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "10.0.2",
            "matchCriteriaId" : "B3690F79-0AB9-4FBA-BCF0-BCCCF00EFD31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.5",
            "matchCriteriaId" : "68D1B6ED-F052-4CAC-80B0-614AF4FA5455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1.0",
            "versionEndIncluding" : "11.1.5",
            "matchCriteriaId" : "D8066DE9-ACFA-42F9-AC88-08FB8ACC745E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.2.0",
            "versionEndIncluding" : "11.2.6",
            "matchCriteriaId" : "ADF30A13-51AD-479B-B0C4-462C059D511B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.0.4",
            "matchCriteriaId" : "2A809366-5838-445A-8034-787551292BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "EDC56DD9-44E6-45C0-82F1-0D9EAA2343BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FA8090-F7EB-4C5D-AD9D-7D82F34F34D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:13.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0486F851-53AC-41C5-9ECE-1EA2DB1D3FAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138640",
        "source" : "PSIRT@rockwellautomation.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27856",
      "sourceIdentifier" : "PSIRT@rockwellautomation.com",
      "published" : "2023-03-22T00:15:12.810",
      "lastModified" : "2024-11-21T07:53:35.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\nIn affected versions, path traversal exists when processing a message of type 8\n\n in Rockwell Automation's ThinManager ThinServer. \n\nAn unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.exe is installed.\n\n \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "PSIRT@rockwellautomation.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@rockwellautomation.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "10.0.2",
            "matchCriteriaId" : "B3690F79-0AB9-4FBA-BCF0-BCCCF00EFD31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.5",
            "matchCriteriaId" : "68D1B6ED-F052-4CAC-80B0-614AF4FA5455"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1.0",
            "versionEndIncluding" : "11.1.5",
            "matchCriteriaId" : "D8066DE9-ACFA-42F9-AC88-08FB8ACC745E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.2.0",
            "versionEndIncluding" : "11.2.6",
            "matchCriteriaId" : "ADF30A13-51AD-479B-B0C4-462C059D511B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.0.4",
            "matchCriteriaId" : "2A809366-5838-445A-8034-787551292BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "EDC56DD9-44E6-45C0-82F1-0D9EAA2343BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FA8090-F7EB-4C5D-AD9D-7D82F34F34D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:13.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0486F851-53AC-41C5-9ECE-1EA2DB1D3FAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138640",
        "source" : "PSIRT@rockwellautomation.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28725",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-22T00:15:12.907",
      "lastModified" : "2025-02-26T17:15:20.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "General Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March 2023. This is fixed in 20221118.48 and 20230120.44."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:generalbytes:crypto_application_server:20230120:*:*:*:*:*:*:*",
            "matchCriteriaId" : "607247ED-915D-4E75-A156-ABE1C6523AB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://arstechnica.com/information-technology/2023/03/hackers-drain-bitcoin-atms-of-1-5-million-by-exploiting-0-day-bug/",
        "source" : "cve@mitre.org",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://generalbytes.atlassian.net/wiki/spaces/ESD/pages/2885222430/Security+Incident+March+17-18th+2023",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://generalbytes.atlassian.net/wiki/spaces/ESD/pages/951418958/Update+CAS",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation" ]
      }, {
        "url" : "https://twitter.com/generalbytes/status/1637192687160897537",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://web3isgoinggreat.com/single/general-bytes-crypto-atms-exploited-for-over-1-6-million",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.bleepingcomputer.com/news/security/general-bytes-bitcoin-atms-hacked-using-zero-day-15m-stolen/",
        "source" : "cve@mitre.org",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://www.generalbytes.com/en/support/changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://arstechnica.com/information-technology/2023/03/hackers-drain-bitcoin-atms-of-1-5-million-by-exploiting-0-day-bug/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://generalbytes.atlassian.net/wiki/spaces/ESD/pages/2885222430/Security+Incident+March+17-18th+2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://generalbytes.atlassian.net/wiki/spaces/ESD/pages/951418958/Update+CAS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation" ]
      }, {
        "url" : "https://twitter.com/generalbytes/status/1637192687160897537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://web3isgoinggreat.com/single/general-bytes-crypto-atms-exploited-for-over-1-6-million",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.bleepingcomputer.com/news/security/general-bytes-bitcoin-atms-hacked-using-zero-day-15m-stolen/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage" ]
      }, {
        "url" : "https://www.generalbytes.com/en/support/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27857",
      "sourceIdentifier" : "PSIRT@rockwellautomation.com",
      "published" : "2023-03-22T02:15:48.953",
      "lastModified" : "2024-11-21T07:53:35.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field\n\n\n\n in Rockwell Automation's ThinManager ThinServer.  An unauthenticated remote attacker can exploit this vulnerability to crash ThinServer.exe due to a read access violation.\n\n\n\n \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "PSIRT@rockwellautomation.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@rockwellautomation.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.5",
            "matchCriteriaId" : "87FE29AC-1AC8-4BEE-9C53-E03F30D8943D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1.0",
            "versionEndExcluding" : "11.1.5",
            "matchCriteriaId" : "A2A444C2-A733-48D6-8D60-D7DB93AF7A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.2.0",
            "versionEndExcluding" : "11.2.6",
            "matchCriteriaId" : "FC17AE85-2491-4E52-AF74-39A0DE8C7599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.0.3",
            "matchCriteriaId" : "E4E20E28-04AF-4797-8F7C-7406897C078B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.4",
            "matchCriteriaId" : "681995A2-01BD-4ADA-A6B4-256E9EA73591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7FA8090-F7EB-4C5D-AD9D-7D82F34F34D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138640",
        "source" : "PSIRT@rockwellautomation.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1168",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-22T06:15:09.390",
      "lastModified" : "2025-02-26T17:15:14.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated remote code execution vulnerability\n    exists in the AOS-CX Network Analytics Engine. Successful\n    exploitation of this vulnerability results in the ability to\n    execute arbitrary code as a privileged user on the underlying\n    operating system, leading to a complete compromise of the\n    switch running AOS-CX.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.06.0000",
            "versionEndExcluding" : "10.06.0240",
            "matchCriteriaId" : "93B17071-FD9B-49C1-8C0B-FDA68664E773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.08.0000",
            "versionEndIncluding" : "10.08.1070",
            "matchCriteriaId" : "6C8A631C-CB1E-4314-943D-713DC9EA260E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.09.0000",
            "versionEndIncluding" : "10.09.1020",
            "matchCriteriaId" : "936EB0DA-9A69-4E7B-B5F5-437A86B8C897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.10.0000",
            "versionEndExcluding" : "10.10.1030",
            "matchCriteriaId" : "690D819F-1B6E-48A1-BEDD-90B511048317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_10000-48y6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10D4824-3D75-4CD2-A541-D910B91FD560"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_6200f_48g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BC4F4F-5DF6-45D6-9039-BF06C5D53487"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_6200m_24g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05337A1-9022-41DA-AFED-AE76FC39D3C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_6300m_24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5172FB6C-C38E-4A5A-8C67-55B475C96B0A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_6300m_48g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF6C6CE-E842-420D-9C4C-54D4B4F85D14"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_6405:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D118A9A6-BBA4-4149-AE0D-1DA2EB45B53F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_6410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "790C5E7A-3405-4873-83E8-4D9C0FEC5E6D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_8320-32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "873275E0-0BF3-42A6-A88A-4A4CDCC98C37"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_8320-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65875CB1-A9A3-42CC-A14D-7AB4E985808A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_8325-32c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B7E2D3-0B72-4A78-AEFA-F106FAD38156"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_8325-48y8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E87A92B-4EE5-4235-A0DA-195F27841DBB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_8360-12c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC24E52-13C0-402F-9ABF-A1DE51719AEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_8360-16y2c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EF979E-061A-42A3-B161-B835E92ED180"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_8360-24xf2c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE04919C-9289-4FB3-938F-F8BB15EC6A74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_8360-32y4c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B630C64B-C474-477D-A80B-A0FB73ACCC49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_8360-48xt4c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53ABE8B8-A4F6-400B-A893-314BE24D06B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_8360-48y6c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C44383CC-3751-455E-B1AB-39B16F40DC76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_8400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25A9CD2-5E5F-4BDB-8707-5D6941411A2B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:aruba_cx_9300_32d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C595A15-BD04-45A3-A719-3DFB8DAB46E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-004.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1370",
      "sourceIdentifier" : "reefs@jfrog.com",
      "published" : "2023-03-22T06:15:09.493",
      "lastModified" : "2025-02-13T17:15:58.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "[Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib.\n\nWhen reaching a ‘[‘ or ‘{‘ character in the JSON input, the code parses an array or an object respectively.\n\nIt was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays and objects is done recursively, nesting too many of them can cause a stack exhaustion (stack overflow) and crash the software."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "reefs@jfrog.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "reefs@jfrog.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:json-smart_project:json-smart:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.9",
            "matchCriteriaId" : "DCB9A6B6-D76A-44FE-9326-07E17A486932"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.jfrog.com/vulnerabilities/stack-exhaustion-in-json-smart-leads-to-denial-of-service-when-parsing-malformed-json-xray-427633/",
        "source" : "reefs@jfrog.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "reefs@jfrog.com"
      }, {
        "url" : "https://research.jfrog.com/vulnerabilities/stack-exhaustion-in-json-smart-leads-to-denial-of-service-when-parsing-malformed-json-xray-427633/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1436",
      "sourceIdentifier" : "reefs@jfrog.com",
      "published" : "2023-03-22T06:15:09.633",
      "lastModified" : "2024-11-21T07:39:11.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "reefs@jfrog.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "reefs@jfrog.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jettison_project:jettison:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.4",
            "matchCriteriaId" : "6DF803CA-88D7-4FA2-8D43-4602BB8441DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/",
        "source" : "reefs@jfrog.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25069",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2023-03-22T06:15:09.753",
      "lastModified" : "2025-02-26T20:15:12.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TXOne StellarOne has an improper access control privilege escalation vulnerability in every version before V2.0.1160 that could allow a malicious, falsely authenticated user to escalate his privileges to administrator level. With these privileges, an attacker could perform actions they are not authorized to.\r\n\r\nPlease note: an attacker must first obtain a low-privileged authenticated user's profile on the target system in order to exploit this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:txone_stellarone:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.1160",
            "matchCriteriaId" : "1708FD23-90A2-41D8-8925-894372EDF291"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000292486",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-231/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000292486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-231/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25589",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-22T06:15:09.837",
      "lastModified" : "2025-02-27T16:15:36.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform. A successful exploit allows an attacker to achieve total cluster compromise."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndIncluding" : "6.9.13",
            "matchCriteriaId" : "DAF80068-5F4B-46ED-AD0D-CB27FAC68C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.10.0",
            "versionEndIncluding" : "6.10.8",
            "matchCriteriaId" : "032EBB33-A9BD-4C79-90DE-812706B26691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3811F6B0-A00C-413B-B1F1-0347249A50BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADA5D58-3928-46B7-BB45-A989577CC726"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25590",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-22T06:15:09.927",
      "lastModified" : "2025-02-27T16:15:36.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndIncluding" : "6.9.13",
            "matchCriteriaId" : "DAF80068-5F4B-46ED-AD0D-CB27FAC68C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.10.0",
            "versionEndIncluding" : "6.10.8",
            "matchCriteriaId" : "032EBB33-A9BD-4C79-90DE-812706B26691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3811F6B0-A00C-413B-B1F1-0347249A50BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADA5D58-3928-46B7-BB45-A989577CC726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25591",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-22T06:15:10.017",
      "lastModified" : "2025-02-27T16:15:36.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further privileges on the ClearPass instance."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndIncluding" : "6.9.13",
            "matchCriteriaId" : "DAF80068-5F4B-46ED-AD0D-CB27FAC68C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.10.0",
            "versionEndIncluding" : "6.10.8",
            "matchCriteriaId" : "032EBB33-A9BD-4C79-90DE-812706B26691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3811F6B0-A00C-413B-B1F1-0347249A50BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADA5D58-3928-46B7-BB45-A989577CC726"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25592",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-22T06:15:10.110",
      "lastModified" : "2025-02-27T15:15:37.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndIncluding" : "6.9.13",
            "matchCriteriaId" : "DAF80068-5F4B-46ED-AD0D-CB27FAC68C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.10.0",
            "versionEndIncluding" : "6.10.8",
            "matchCriteriaId" : "032EBB33-A9BD-4C79-90DE-812706B26691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3811F6B0-A00C-413B-B1F1-0347249A50BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADA5D58-3928-46B7-BB45-A989577CC726"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25593",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-22T06:15:10.220",
      "lastModified" : "2025-02-27T15:15:37.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndIncluding" : "6.9.13",
            "matchCriteriaId" : "DAF80068-5F4B-46ED-AD0D-CB27FAC68C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.10.0",
            "versionEndIncluding" : "6.10.8",
            "matchCriteriaId" : "032EBB33-A9BD-4C79-90DE-812706B26691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3811F6B0-A00C-413B-B1F1-0347249A50BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADA5D58-3928-46B7-BB45-A989577CC726"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25594",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-22T06:15:10.337",
      "lastModified" : "2025-02-27T15:15:37.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : " A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. Successful exploitation of this vulnerability allows an attacker to complete state-changing actions in the web-based management interface that should not be allowed by their current level of authorization on the platform."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndIncluding" : "6.9.13",
            "matchCriteriaId" : "DAF80068-5F4B-46ED-AD0D-CB27FAC68C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.10.0",
            "versionEndIncluding" : "6.10.8",
            "matchCriteriaId" : "032EBB33-A9BD-4C79-90DE-812706B26691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3811F6B0-A00C-413B-B1F1-0347249A50BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADA5D58-3928-46B7-BB45-A989577CC726"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25595",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-22T06:15:10.430",
      "lastModified" : "2025-02-27T19:15:48.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : " A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance access to potentially obtain sensitive information. Successful Exploitation of this vulnerability allows an attacker to retrieve information that is of a sensitive nature to the ClearPass/OnGuard environment."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndIncluding" : "6.9.13",
            "matchCriteriaId" : "DAF80068-5F4B-46ED-AD0D-CB27FAC68C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.10.0",
            "versionEndIncluding" : "6.10.8",
            "matchCriteriaId" : "032EBB33-A9BD-4C79-90DE-812706B26691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3811F6B0-A00C-413B-B1F1-0347249A50BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADA5D58-3928-46B7-BB45-A989577CC726"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25596",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-22T06:15:10.517",
      "lastModified" : "2025-02-27T15:15:37.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : " A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndIncluding" : "6.9.13",
            "matchCriteriaId" : "DAF80068-5F4B-46ED-AD0D-CB27FAC68C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.10.0",
            "versionEndIncluding" : "6.10.8",
            "matchCriteriaId" : "032EBB33-A9BD-4C79-90DE-812706B26691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3811F6B0-A00C-413B-B1F1-0347249A50BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADA5D58-3928-46B7-BB45-A989577CC726"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25688",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-22T06:15:10.607",
      "lastModified" : "2024-11-21T07:49:56.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system.  IBM X-Force ID:  247606."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5744D219-B3BD-4CBA-888E-2920B5A7FD99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8182ED-77F8-4931-88ED-385163DD4091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D815B49-CE8E-45C8-A025-509253F5252C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D098B3CA-E84B-42CE-ABF5-97D80864C553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C04E4B-EAA5-43E8-A6F3-251ED2D6C1E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247606",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962729",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25924",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-03-22T06:15:10.740",
      "lastModified" : "2024-11-21T07:50:25.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have access to due to improper authorization.  IBM X-Force ID:  247630."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5744D219-B3BD-4CBA-888E-2920B5A7FD99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8182ED-77F8-4931-88ED-385163DD4091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D815B49-CE8E-45C8-A025-509253F5252C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D098B3CA-E84B-42CE-ABF5-97D80864C553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_key_lifecycle_manager:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C04E4B-EAA5-43E8-A6F3-251ED2D6C1E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247630",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962729",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6962729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28005",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2023-03-22T06:15:10.877",
      "lastModified" : "2025-05-05T16:15:33.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the device.\r\n\r\nAn attacker must first obtain physical access to the target system in order to exploit this vulnerability. It is also important to note that the contents of the drive(s) encrypted with TMEE FDE would still be protected and would NOT be accessible by the attacker by exploitation of this vulnerability alone."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:trend_micro_endpoint_encryption:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.0.3204",
            "matchCriteriaId" : "1560E512-F7E4-446C-B6EE-D28DA8FDF526"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000292473",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000292473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28083",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-03-22T06:15:10.950",
      "lastModified" : "2024-11-21T07:54:22.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-alert@hpe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:integrated_lights-out_4:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.82",
            "matchCriteriaId" : "A2AE4806-D70C-4D80-A898-405A3BC7D81C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_4200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C20D38E9-B2EA-4ECC-B9EC-D29BB249AC77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_r2000_chassis:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9724EB6-9693-4F0D-B507-B962D64B2E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_bl420c_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E3C760C-2DAF-45CE-972B-B86D963B16BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_bl460c_gen8_server_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B110E689-1823-42D6-91E6-81115A2CB048"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_bl460c_gen9_server_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D230E7A-D852-4040-83CF-164AA3233F00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_bl465c_gen8_server_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C786E99-CDC8-4265-A05B-931602A4E10B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_bl660c_gen8_server_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91276F1E-6475-479D-857C-689E210116B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_bl660c_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E685C0-E20A-4E95-A76F-8D18AF92C0F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl120_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B65F98-15A8-48FA-A836-97430AF183EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl160_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "346996C3-E131-4BE0-9261-E32D0567F795"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl160_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AD90B1-F95C-4A74-AAD5-684C0E0DCBC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl180_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E4F18F-55E2-4829-A1EF-881D06CC5481"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl20_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31223B01-2107-479B-AC77-1C31BBE2F96C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl320e_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51593FEE-B2A5-4642-8A3B-F0A7D85475AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl320e_gen8_v2_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED8AE8A0-82CF-47E9-99F7-FFF1EF632C90"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl360_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34A65EC0-14C7-4838-913D-8EF11144A85B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl360e_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFFBB73F-EAF7-47A2-BD06-FC31172E05B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl360p_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47779C63-CDE4-4BE6-96BA-CBD118E027ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl380_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F6D2D0-482F-4B2F-AF78-82BC56704E8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl380e_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D81703-DB67-4650-959B-8787ED450AE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl380p_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE425FF-B87E-40D6-A85F-7740418B3A9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl385p_gen8_\\(amd\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F1E3B5-02FF-4C46-825F-21D6ED76F6AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl560_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CED1122-4927-4665-8D6B-A6C986ED6252"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl560_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2068295-B73A-4C01-8351-C2D8B957845B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl580_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "407DB236-65BF-4B41-9C75-4D5BC246A905"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl580_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3EB6796-FE83-42EB-84FF-F405289EE0B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl60_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F7E5C6-201B-4268-9CA7-13BBA1E74DF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl80_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF640F8-B432-40DA-93C8-77D8351CB390"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_microserver_gen8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDDEC65-E89C-47CA-9716-F4EB936ADE9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ml110_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3268D0-1F66-47BA-972C-21E809DC2F2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ml30_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9E7C549-3A1B-40DE-A1FC-0BC62040E4C8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ml310e_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7791C8B1-D949-4AEE-8BC5-40FECA8FBC7A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ml310e_gen8_v2_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBA3BC52-96CB-4F52-87BC-3E6DF13BD654"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ml350_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB05A81-BDF5-4D6C-B9E3-1894703F1CC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ml350e_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92436412-45F8-49EB-B02E-5405F21B42EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ml350e_gen8_v2_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F92AE-CE88-4C38-AC00-6B56198D57F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ml350p_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB075F0-2825-43F5-BA0A-8348A082580C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_sl210t_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F537C3-16DE-4F0C-9C38-6EE9504F841F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_sl230s_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6795F47-30A0-4433-96FD-808AAF536F45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_sl250s_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533312DC-3EB0-4F15-B7A6-BFCE5CFABC6C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_sl270s_gen8_se_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5067AA37-ED79-403B-953E-8EC4807A7067"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_sl270s_gen8_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361590CD-06A8-4BDF-9C24-053F31468A53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ws460c_gen8_graphics_server_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD07DCA-B8AF-409F-A902-AE66CB450152"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ws460c_gen9_graphics_server_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E10A5D-7C64-460A-9DBE-E5BCBBFDE6C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl170r_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58AE85AC-1062-42E2-8142-9BC754D51035"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl190r_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49BA2C97-7AAB-4A55-B487-522715BDC80C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl220a_gen8_v2_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056D1649-1670-465D-9E48-292B3F451521"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl230a_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA80708D-3219-4D54-B167-105DDEC5B85D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl230b_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE433CD5-FE98-4E41-9C18-4521DA23282F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl250a_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E62FEEB-A62D-42F4-A713-4CEAFF9B158E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl270d_gen9_special_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D87F1F6-28DA-433A-B43E-D105EE2B5EBB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl450_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEE8B85-1F21-418F-B2D3-90151F6423BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl730f_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C838C36-FFF2-4C90-8BF1-21984D6C9C88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl740f_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EBB97C-4A68-4276-BFF2-93D58F6F1CA2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl750f_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "425FCBD4-A94B-4AE5-B002-258CE1FE97FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1430_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "206854F1-5EBD-4073-9CF3-A54D8877212C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1440_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC48AAA-59FC-44CD-A8AB-2E0E965559EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1450_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFBC1A4-A348-4FE2-B84D-6324DCAF163A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1530_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE21ED77-6606-46B3-9326-2C46B7EBD128"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1540_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "373A69DF-504E-4D4D-B646-E02958C7784F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1550_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B623A5-3771-405E-9F5C-174C0AC6E893"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1630_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F4AB82-4BDA-4859-A847-FBCFA7A15866"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1640_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE943A0C-7359-4D61-9A10-4ADA92794BCA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1650_expanded_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EAFDF1D-7EA9-4FFA-B552-97F8EC5581C8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1650_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7F0EE22-6BA9-4ACD-BEE2-9F98C2E41961"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1830_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5235A8FE-9234-41FF-8CA1-36D3988D2756"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1840_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BA82E3-5911-43F9-82F8-79D3D3C6A1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1850_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F85603B-105D-4E25-973C-90A7EDAE6FF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_3830_gateway_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43ED3B2D-74D6-4EB5-85B8-6725FBA3D461"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_3830_gateway_storage_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C86C2B99-9DF0-4982-888C-57C8B3BEAEDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_3840_gateway_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325C2A58-86B6-4F21-B7F2-72DE964AB612"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_3840_gateway_storage_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F939EF20-915C-4ADB-B6F8-62746ED2273D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_3850_gateway_single_node_upgrade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "170E15DB-9227-4323-891F-A914B6061F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_3850_gateway_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4623E31-E486-4303-9407-DD9680DFF09C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_3850_gateway_storage_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10D2BEE-E5CB-45B6-A836-849272070DCC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storevirtual_3000_file_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7B8B24-E11A-4CC0-A2F3-D467BA58A6E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:synergy_480_gen9_compute_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29BE9486-493D-495E-8CFA-1E79FE57457C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:synergy_620_gen9_compute_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "789F7158-51DE-4344-BD8A-1249BFE0158B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:synergy_660_gen9_compute_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0163D6F2-5E24-4741-BEF3-7B671A10CA08"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:synergy_680_gen9_compute_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CBAD3B0-D47D-4E05-96D1-28A989E118CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:integrated_lights-out_5:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.78",
            "matchCriteriaId" : "7A9239CA-2FC4-456E-B1FD-5A5B174A1EB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_4200_gen10_plus_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF55930-EC9C-4C0D-8092-3E1091902D4B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_4200_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB818A6-80D5-4DD7-8E0D-EC25764A0693"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_4510_gen10_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25418088-0890-401E-837C-611154B2C433"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_6500_gen10_plus_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1480B92-9A59-4675-B2DF-6DAE385927B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_6500_gen10_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC09C72C-0BD3-4DB1-96C6-72F2330D4165"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_n2600_gen10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB23B5E3-887B-41C8-B83E-0203BEC9DDB1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_n2800_gen10_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A5C2F7-66E1-483F-95E7-D51C6D32E7CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_r2200_gen10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FF527B-51BF-445B-80D0-42FD50D6F60A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_r2600_gen10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A478D98-EE4E-45ED-A257-F154693E6FB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_r2800_gen10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAC257C-8594-454D-BA28-5D98F03AF3EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:edgeline_e920_server_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CB4D5F2-2E5C-4191-ACA0-D086E08FFDA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:edgeline_e920d_server_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC36ED1-D392-4DC6-B3E0-99A821705AA2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:edgeline_e920t_server_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0ACC75-47E9-439A-9338-170478FB326F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_bl460c_gen10_server_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C25FD273-0E16-4975-985C-8BD96AE0D449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl120_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5876FB45-B037-4355-BAE9-69157FD0A402"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl160_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C77CAF-0A18-4447-93BD-C64595475E37"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl180_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D81BA5-E5D8-4D42-8C42-A91063008359"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl20_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA978EC2-6027-4605-BECC-68B4682DB5E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl20_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B15D52EA-CE63-47AF-993D-265163B5B38E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl325_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1F98CB6-3933-4425-A7E9-542AB764C8C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl325_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93765BE7-D8C2-48C8-9ADA-A7C36B993D95"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl345_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE801CF-95AB-409A-8063-9525FC1A3BF1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl360_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A540039-4339-44CE-92AD-83B80928FC81"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl360_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD08B95A-240C-436E-91B5-2D594F6F1F07"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl365_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7151CE9-BAD2-47B8-9283-5BEB53C93D98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl380_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E27B2E8E-1F1D-4397-BE33-80755D6BE56C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl380_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8545248A-2943-4B8D-A295-BE7D43492BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl385_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B032E4-9663-4525-ACC4-217B5E266124"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl385_gen10_plus_v2_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61758FDD-0744-4207-950E-D11717E9E5D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl385_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3845235-CAFC-4FB3-AB26-F0E8A8815F88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl560_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8389F7F-7653-4695-91CC-DCFACC870094"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl580_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419470B4-80EF-46BF-8DB4-6569D3E8435F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dx170r_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7591DA99-B0CA-4A23-A8C5-C6D9084C2329"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dx190r_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1642BAB-2EC5-4E89-86DE-7B9BECA4F6CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dx220n_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D176EE5-FDE7-475B-802A-AFD21A9F6E87"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dx325_gen10_plus_v2_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18B76D60-5493-4959-A85E-91C1D810365F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dx360_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D9CF07-D08E-4B36-B25D-1011AF0463DA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dx360_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D8AA54-634D-4870-AC5E-BD8F70EDB83D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dx380_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8464FB6E-5744-44B7-BD1F-87D8F382A30B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dx380_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C8768C-5E7D-4C11-8C49-182CC1D643B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dx385_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "594B767B-41AB-436A-AF2C-10185E1161F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dx385_gen10_plus_v2_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779A6A62-4357-46FF-9BA8-F53E657A4E31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dx4200_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00D29DB-B073-4C5A-934D-87A311D57657"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dx560_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5869DE25-F914-48E0-8AFF-72C463E99084"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_e910_server_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174EF59C-18A6-4490-A23A-76E74C1D2AFA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_e910t_server_blade:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C755817B-B074-4496-934B-A30C72A4F849"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ml110_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB32875E-11E3-443E-809C-12CCAE574570"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ml30_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5527AD20-7E19-4987-915D-FCFFEBFDA4C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ml350_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7DE16BA-939E-4C26-B03B-439E60C7C872"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl170r_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B224273-2E15-41F2-84D6-D754F6B76B49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl190r_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ACD7139-05F6-4D60-BB0F-9AA6952720CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl220n_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01181BEB-DE0B-49AA-B632-91B40046120F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl225n_gen10_plus_1u_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9334B70C-EBBD-4D0F-A0DC-EC84E014701E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl230k_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50247A44-3EA0-4B4B-9AB6-64D9B470F190"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl270d_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A21F0B8-D613-46CD-BAEC-5CD876FD5352"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl290n_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4435D5C3-A7CB-4EA6-87A9-6026DAC8DA47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl450_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD81201-ECD9-4E9F-A6F0-7EAEB1DA9891"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl645d_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424298C0-01E2-4770-818D-25F47A801F88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_xl675d_gen10_plus_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E7408A4-7409-4223-ABA7-C1F35E84D213"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storage_file_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBCBE981-8F98-49B2-B09D-B0187D5DF322"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storage_performance_file_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A9E7335-3545-4F2D-A915-AB6B34EBB76D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1460_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFC69BAD-3243-405F-839E-8BE9E2562205"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1560_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C386FE40-4223-4F35-A04A-84008B7A1B8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1660_expanded_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E86E62-1B51-4934-B8B6-40D920BE6192"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1660_performance_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D34B52-2803-43B0-942A-F974CBE14531"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1660_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC53F93-901B-40A9-BAAD-DD5A8865E824"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1860_performance_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3A06978-A8B5-4251-955F-2DF206962605"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:storeeasy_1860_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82CC8E6-A017-406E-B993-4CFFEB230829"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:synergy_480_gen10_compute_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853AF641-B81C-4FB7-89AB-EACF420F0C62"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:synergy_480_gen10_plus_compute_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F15301B-B695-4DC8-9EE5-517AC2E64778"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:synergy_660_gen10_compute_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19188281-533B-450E-84F1-089F3300D08E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:integrated_lights-out_6:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.20",
            "matchCriteriaId" : "E81519FB-34FB-4FAC-B068-F821A18E4AA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl320_gen11_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D01E2C9-76B7-4C23-A9B4-7BFB90F7F848"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl325_gen11_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8A4A0C-A33A-48E5-8F53-807A20333DE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl345_gen11_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37DFB5BE-E36B-4D5D-AC60-267799B6AEF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl360_gen11_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE19E0B8-B23C-41E0-82DA-BEFBCDC7954A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl365_gen11_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8E5A73F-96A5-4488-8DAE-3ECBEAD71CE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl380_gen11_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AF31FE-6C42-4D64-A216-7FD5383D50F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_dl385_gen11_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36449636-2501-4608-968D-9E73090A4D43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:proliant_ml350_gen11_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A24D0AE-55B8-438A-B956-3A20F34382F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04456en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04456en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28685",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-03-22T06:15:11.060",
      "lastModified" : "2025-02-26T17:15:20.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins AbsInt a³ Plugin 1.1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:absint_a3:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "17D8339E-C39C-49FC-B3EE-2C47B8676F49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2930",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1556",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T11:15:10.163",
      "lastModified" : "2024-11-21T07:39:25.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file summary_results.php. The manipulation of the argument main_event_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223549 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:judging_management_system_project:judging_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE693B0-3497-406C-AD53-36AC05735004"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/debug601/bug_report/blob/main/vendors/oretnom23/judging-management-system/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223549",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223549",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/debug601/bug_report/blob/main/vendors/oretnom23/judging-management-system/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1557",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T11:15:10.297",
      "lastModified" : "2024-11-21T07:39:26.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ecommerce/admin/user/controller.php?action=edit of the component Username Handler. The manipulation of the argument USERID leads to improper access controls. The attack may be launched remotely. VDB-223550 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-commerce_system_project:e-commerce_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA60707-3A30-4D55-8DB4-DED3CF68189A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223550",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223550",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223550",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1558",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T11:15:10.387",
      "lastModified" : "2024-11-21T07:39:26.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Simple and Beautiful Shopping Cart System 1.0. This affects an unknown part of the file uploadera.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223551."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_and_beautiful_shopping_cart_system_project:simple_and_beautiful_shopping_cart_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65BE6CC4-4C1E-474E-8E5E-2CC672ED60B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nightcloudos/bug_report/blob/main/simple%20and%20beautiful%20shopping%20cart%20system/simple%20and%20beautiful%20shopping%20cart%20system%20uploadera.php%20has%20a%20file%20upload%20vulnerability.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223551",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223551",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nightcloudos/bug_report/blob/main/simple%20and%20beautiful%20shopping%20cart%20system/simple%20and%20beautiful%20shopping%20cart%20system%20uploadera.php%20has%20a%20file%20upload%20vulnerability.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1562",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2023-03-22T11:15:10.493",
      "lastModified" : "2024-11-21T07:39:26.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mattermost fails to check the \"Show Full Name\" setting when rendering the result for the /plugins/focalboard/api/v2/users API call, allowing an attacker to learn the full name of a board owner.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.5.0",
            "matchCriteriaId" : "342C92D7-F1A4-44AC-BEB1-A391931DA803"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28708",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-22T11:15:10.623",
      "lastModified" : "2025-11-04T20:16:26.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When using the RemoteIpFilter with requests received from a    reverse proxy via HTTP that include the X-Forwarded-Proto    header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel.\n\nOlder, EOL versions may also be affected."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-523"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0",
            "versionEndExcluding" : "8.5.86",
            "matchCriteriaId" : "B5B9F578-C5AF-47B9-8DCB-956FE1142895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "9.0.0",
            "versionEndExcluding" : "9.0.72",
            "matchCriteriaId" : "F53E1703-7327-4B44-8641-9335B78714E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "10.1.0",
            "versionEndExcluding" : "10.1.6",
            "matchCriteriaId" : "55049943-7BFB-4022-B790-84466E2E873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1AA7FF6-E8E7-4BF6-983E-0A99B0183008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:11.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAD52CE-94F5-4F98-A027-9A7E68818CB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/hdksc59z3s7tm39x0pp33mtwdrt8qr67",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/hdksc59z3s7tm39x0pp33mtwdrt8qr67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230331-0012/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1559",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T12:15:10.580",
      "lastModified" : "2024-11-21T07:39:26.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in SourceCodester Storage Unit Rental Management System 1.0. This vulnerability affects unknown code of the file classes/Users.php?f=save. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223552."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storage_unit_rental_management_system_project:storage_unit_rental_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D351382-4B33-47FD-A48A-361224232FD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ret2hh/bug_report/blob/main/UPLOAD.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223552",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223552",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ret2hh/bug_report/blob/main/UPLOAD.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1560",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T12:15:10.670",
      "lastModified" : "2024-11-21T07:39:26.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in TinyTIFF 3.0.0.0. This issue affects some unknown processing of the file tinytiffreader.c of the component File Handler. The manipulation leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223553 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinytiff_project:tinytiff:3.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6431A9DC-17CF-44B2-858F-48734F6BF20E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/Security-Issue-Report-of-TinyTIFF",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/Security-Issue-Report-of-TinyTIFF/blob/main/id8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223553",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223553",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/Security-Issue-Report-of-TinyTIFF",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/Security-Issue-Report-of-TinyTIFF/blob/main/id8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1561",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T12:15:10.763",
      "lastModified" : "2025-10-23T20:06:00.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file add_room.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. VDB-223554 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fabian:simple_online_hotel_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB45381F-7BBB-408B-98AA-D931AC3C779B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sincere9/Bug-Hub/blob/main/SIMPLE%20ONLINE%20HOTEL%20RESERVATION%20SYSTEM/SIMPLE%20ONLINE%20HOTEL%20RESERVATION%20SYSTEM%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223554",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223554",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sincere9/Bug-Hub/blob/main/SIMPLE%20ONLINE%20HOTEL%20RESERVATION%20SYSTEM/SIMPLE%20ONLINE%20HOTEL%20RESERVATION%20SYSTEM%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1563",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T13:15:09.813",
      "lastModified" : "2024-11-21T07:39:26.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/assign/assign.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223555."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:student_study_center_desk_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD3233D-01A2-4779-9E48-F3495A5E56D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Student%20Study%20Center%20Desk%20Management%20System/Student%20Study%20Center%20Desk%20Management%20System%20-%20vlun3.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223555",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223555",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Student%20Study%20Center%20Desk%20Management%20System/Student%20Study%20Center%20Desk%20Management%20System%20-%20vlun3.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1564",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T13:15:09.893",
      "lastModified" : "2024-11-21T07:39:27.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/transactions/update_status.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223556."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:air_cargo_management_system_project:air_cargo_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D90CD3-B8A3-4899-AFE1-43A81B5EE02C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/333123www/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223556",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223556",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/333123www/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1565",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T13:15:09.970",
      "lastModified" : "2024-11-21T07:39:27.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in FeiFeiCMS 2.7.130201. It has been classified as problematic. This affects an unknown part of the file \\Public\\system\\slide_add.html of the component Extension Tool. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223557 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:feifeicms:feifeicms:2.7.130201:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E84D9E-9D4D-46A8-B220-212D0FE21725"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1114506941/lsummer/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223557",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223557",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/1114506941/lsummer/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1572",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T13:15:10.053",
      "lastModified" : "2024-11-21T07:39:28.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in DataGear up to 1.11.1 and classified as problematic. This vulnerability affects unknown code of the component Plugin Handler. The manipulation leads to cross site scripting. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 1.12.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-223564."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 1.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datagear:datagear:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.12.0",
            "matchCriteriaId" : "B098904D-0002-43E6-9572-C84DB0A9D06B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/datageartech/datagear/releases/tag/v1.12.0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/yangyanglo/ForCVE/blob/main/2023-0x03.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yangyanglo/ForCVE/edit/main/2023-0x03.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223564",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223564",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/datageartech/datagear/releases/tag/v1.12.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/yangyanglo/ForCVE/blob/main/2023-0x03.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yangyanglo/ForCVE/edit/main/2023-0x03.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-22T13:15:10.150",
      "lastModified" : "2025-02-26T16:15:13.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised product_id GET parameter in order to exploit an insecure parameter in the front controller file designer.php, which could lead to a SQL injection. This is exploited in the wild in March 2023."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tshirtecommerce:custom_product_designer:2.1.4:*:*:*:*:prestashop:*:*",
            "matchCriteriaId" : "8DA9FE54-9760-4168-9FE0-DE918ABD532E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://codecanyon.net/item/prestashop-custom-product-designer/19202018",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/module/2023/03/21/tshirtecommerce_cwe-89.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://tshirtecommerce.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://codecanyon.net/item/prestashop-custom-product-designer/19202018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/module/2023/03/21/tshirtecommerce_cwe-89.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://tshirtecommerce.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-22T13:15:10.213",
      "lastModified" : "2025-02-26T16:15:14.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised tshirtecommerce_design_cart_id GET parameter in order to exploit an insecure parameter in the functions hookActionCartSave and updateCustomizationTable, which could lead to a SQL injection. This is exploited in the wild in March 2023."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tshirtecommerce:custom_product_designer:2.1.4:*:*:*:*:prestashop:*:*",
            "matchCriteriaId" : "8DA9FE54-9760-4168-9FE0-DE918ABD532E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://codecanyon.net/item/prestashop-custom-product-designer/19202018",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/module/2023/03/21/tshirtecommerce_cwe-89.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://tshirtecommerce.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://codecanyon.net/item/prestashop-custom-product-designer/19202018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/module/2023/03/21/tshirtecommerce_cwe-89.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://tshirtecommerce.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1281",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-03-22T14:15:16.090",
      "lastModified" : "2025-02-13T17:15:58.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext. A local attacker user can use this vulnerability to elevate its privileges to root.\nThis issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14",
            "versionEndExcluding" : "5.10.169",
            "matchCriteriaId" : "D331CADA-2EA6-4EA6-879D-6C266057BB64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.95",
            "matchCriteriaId" : "8508F80E-8588-4976-A2BA-7A2D85018C4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.13",
            "matchCriteriaId" : "CE354BE6-0C0F-47EB-AD8A-1433F041AC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF501633-2F44-4913-A8EE-B021929F49F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDA597B-CAC1-4DF0-86F0-42E142C654E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "725C78C9-12CE-406F-ABE8-0813A01D66E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A127C155-689C-4F67-B146-44A57F4BFD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D34127CC-68F5-4703-A5F6-5006F803E4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "C64BDD9D-C663-4E75-AE06-356EDC392B82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "26544390-88E4-41CA-98BF-7BB1E9D4E243"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/11/3",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ee059170b1f7e94e55fa6cadee544e176a6e59c2",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kernel.dance/#ee059170b1f7e94e55fa6cadee544e176a6e59c2",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0004/",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/11/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ee059170b1f7e94e55fa6cadee544e176a6e59c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://kernel.dance/#ee059170b1f7e94e55fa6cadee544e176a6e59c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1566",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T14:15:16.183",
      "lastModified" : "2024-11-21T07:39:27.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been declared as critical. This vulnerability affects unknown code of the file action.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-223558 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medical_certificate_generator_app_project:medical_certificate_generator_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99101B10-CEBF-4396-B794-8B4A8D91ED1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Medical%20Certificate%20Generator%20App/Medical%20Certificate%20Generator%20App%20-%20vlun(2).pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223558",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223558",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Medical%20Certificate%20Generator%20App/Medical%20Certificate%20Generator%20App%20-%20vlun(2).pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223558",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1567",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T14:15:16.263",
      "lastModified" : "2024-11-21T07:39:27.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/assign/assign.php. The manipulation of the argument sid leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223559."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:student_study_center_desk_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD3233D-01A2-4779-9E48-F3495A5E56D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Student%20Study%20Center%20Desk%20Management%20System/Student%20Study%20Center%20Desk%20Management%20System%20-%20vlun1.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223559",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223559",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Student%20Study%20Center%20Desk%20Management%20System/Student%20Study%20Center%20Desk%20Management%20System%20-%20vlun1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1568",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T14:15:16.343",
      "lastModified" : "2024-11-21T07:39:27.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file /admin/reports/index.php of the component GET Parameter Handler. The manipulation of the argument date_to leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223560."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:student_study_center_desk_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD3233D-01A2-4779-9E48-F3495A5E56D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Student%20Study%20Center%20Desk%20Management%20System/Student%20Study%20Center%20Desk%20Management%20System%20-%20vlun2.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223560",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223560",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Student%20Study%20Center%20Desk%20Management%20System/Student%20Study%20Center%20Desk%20Management%20System%20-%20vlun2.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1569",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T14:15:16.427",
      "lastModified" : "2024-11-21T07:39:27.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in SourceCodester E-Commerce System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/user/controller.php?action=edit. The manipulation of the argument U_NAME with the input <script>alert('1')</script> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223561 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-commerce_system_project:e-commerce_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA60707-3A30-4D55-8DB4-DED3CF68189A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223561",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223561",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1570",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T15:15:10.187",
      "lastModified" : "2024-11-21T07:39:27.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in syoyo tinydng. Affected by this issue is the function __interceptor_memcpy of the file tiny_dng_loader.h. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. It is recommended to apply a patch to fix this issue. VDB-223562 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 1.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinydng_project:tinydng:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-02-20",
            "matchCriteriaId" : "6E49821A-82C1-4C71-9F93-4CCEFCAC8BD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/tinydngSecurityIssueReport1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/syoyo/tinydng/issues/28",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/syoyo/tinydng/issues/29",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223562",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223562",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/tinydngSecurityIssueReport1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/syoyo/tinydng/issues/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/syoyo/tinydng/issues/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1571",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T15:15:10.273",
      "lastModified" : "2024-11-21T07:39:28.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in DataGear up to 4.5.0. This affects an unknown part of the file /analysisProject/pagingQueryData. The manipulation of the argument queryOrder leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.5.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-223563."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datagear:datagear:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.0",
            "matchCriteriaId" : "F7B44A15-3B63-4D56-9803-5A3FB8183D89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yangyanglo/ForCVE/blob/main/2023-0x01.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223563",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223563",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yangyanglo/ForCVE/blob/main/2023-0x01.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-22T15:15:10.357",
      "lastModified" : "2024-11-21T07:52:03.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EVOLUCARE ECSIMAGING (aka ECS Imaging) < 6.21.5 is vulnerable to Cross Site Scripting (XSS) via new_movie. php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evolucare:ecs_imaging:6.21.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C187A1C-0162-4575-A4D6-2E89C49B2A43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wanheiqiyihu.top/2023/02/13/Evolucare-Ecsimaging-new-movie-php%E5%8F%8D%E5%B0%84%E6%80%A7xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wanheiqiyihu.top/2023/02/13/Evolucare-Ecsimaging-new-movie-php%E5%8F%8D%E5%B0%84%E6%80%A7xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1573",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-22T16:15:13.437",
      "lastModified" : "2024-11-21T07:39:28.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in DataGear up to 1.11.1 and classified as problematic. This issue affects some unknown processing of the component Graph Dataset Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.12.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-223565 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datagear:datagear:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.11.1",
            "matchCriteriaId" : "FD5D926D-2287-4257-BFFF-6F5352040B6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/datageartech/datagear/releases/tag/v1.12.0",
        "source" : "cna@vuldb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/yangyanglo/ForCVE/blob/main/2023-0x04.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223565",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223565",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/datageartech/datagear/releases/tag/v1.12.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/yangyanglo/ForCVE/blob/main/2023-0x04.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1578",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-22T16:15:13.553",
      "lastModified" : "2024-11-21T07:39:28.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.19",
            "matchCriteriaId" : "9F355AEC-329F-43D1-A3D7-44C2481A1999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/367b74488808d71ec3f66f4ca9e8df5217c2c8d2",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7e441a14-8e55-4ab4-932c-4dc56bb1bc2e",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/367b74488808d71ec3f66f4ca9e8df5217c2c8d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7e441a14-8e55-4ab4-932c-4dc56bb1bc2e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0464",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2023-03-22T17:15:13.130",
      "lastModified" : "2025-05-05T16:15:26.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.2",
            "versionEndExcluding" : "1.0.2zh",
            "matchCriteriaId" : "23F912E9-9126-4D16-8F77-BD41CED6774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.1",
            "versionEndExcluding" : "1.1.1u",
            "matchCriteriaId" : "7D99C2F8-BE74-4912-8653-A2AEE387AAF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.9",
            "matchCriteriaId" : "4C637E94-F5EC-4D4B-836F-8C8219F1ECEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndExcluding" : "3.1.1",
            "matchCriteriaId" : "68821BE0-7889-48B0-888D-CEC8BB9BDEA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5417",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230322.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230406-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230322.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21615",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:13.313",
      "lastModified" : "2024-11-21T07:43:11.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21616",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:13.410",
      "lastModified" : "2024-11-21T07:43:11.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22252",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:13.507",
      "lastModified" : "2024-11-21T07:44:24.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22253",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:13.597",
      "lastModified" : "2024-11-21T07:44:24.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22254",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:13.697",
      "lastModified" : "2024-11-21T07:44:24.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22256",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:13.807",
      "lastModified" : "2024-11-21T07:44:24.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22257",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:13.900",
      "lastModified" : "2024-11-21T07:44:24.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22258",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:13.997",
      "lastModified" : "2024-11-21T07:44:24.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22259",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:14.100",
      "lastModified" : "2024-11-21T07:44:24.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22260",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:14.200",
      "lastModified" : "2024-11-21T07:44:25.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22261",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:14.297",
      "lastModified" : "2024-11-21T07:44:25.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22262",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:14.397",
      "lastModified" : "2024-11-21T07:44:25.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22263",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:14.493",
      "lastModified" : "2024-11-21T07:44:25.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22264",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:14.597",
      "lastModified" : "2024-11-21T07:44:25.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22265",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:14.687",
      "lastModified" : "2024-11-21T07:44:25.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22266",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:14.777",
      "lastModified" : "2024-11-21T07:44:25.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22269",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:14.873",
      "lastModified" : "2024-11-21T07:44:25.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22271",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:14.973",
      "lastModified" : "2024-11-21T07:44:26.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Experience Manager versions 6.5.15.0 (and earlier) are affected by a Weak Cryptography for Passwords vulnerability that can lead to a security feature bypass. A low-privileged attacker can exploit this in order to decrypt a user's password. The attack complexity is high since a successful exploitation requires to already have in possession this encrypted secret."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-261"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.16.0",
            "matchCriteriaId" : "57E7937E-BEB6-4DEA-A37D-37690D421025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.0",
            "matchCriteriaId" : "81AD871B-AB64-4FE4-944C-4BB0D9BDDAFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25859",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:15.067",
      "lastModified" : "2024-11-21T07:50:18.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "26.5.2",
            "matchCriteriaId" : "DA070019-74EA-4104-9DF1-DE1B8452DA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "27.0.0",
            "versionEndExcluding" : "27.3.1",
            "matchCriteriaId" : "24BA3C9A-FCAC-466D-9520-FD9A434AD38E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb23-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb23-19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25860",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:15.160",
      "lastModified" : "2024-11-21T07:50:18.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Illustrator versiones 26.5.2  (y anteriores) y 27.2.0 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "26.5.2",
            "matchCriteriaId" : "DA070019-74EA-4104-9DF1-DE1B8452DA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "27.0.0",
            "versionEndExcluding" : "27.3.1",
            "matchCriteriaId" : "24BA3C9A-FCAC-466D-9520-FD9A434AD38E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb23-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb23-19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25861",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:15.250",
      "lastModified" : "2024-11-21T07:50:18.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Illustrator versiones 26.5.2  (y anteriores) y 27.2.0 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "26.5.2",
            "matchCriteriaId" : "DA070019-74EA-4104-9DF1-DE1B8452DA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "27.0.0",
            "versionEndExcluding" : "27.3.1",
            "matchCriteriaId" : "24BA3C9A-FCAC-466D-9520-FD9A434AD38E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb23-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb23-19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25862",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:15.337",
      "lastModified" : "2024-11-21T07:50:19.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "26.5.2",
            "matchCriteriaId" : "DA070019-74EA-4104-9DF1-DE1B8452DA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "27.0.0",
            "versionEndExcluding" : "27.3.1",
            "matchCriteriaId" : "24BA3C9A-FCAC-466D-9520-FD9A434AD38E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb23-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb23-19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26358",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:15.430",
      "lastModified" : "2024-11-21T07:51:11.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Creative Cloud version 5.9.1 (and earlier) is affected by an Untrusted Search Path vulnerability that might allow attackers to execute their own programs, access unauthorized data files, or modify configuration in unexpected ways. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. The problem extends to any type of critical resource that the application trusts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:creative_cloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10",
            "matchCriteriaId" : "93D4CF63-5B22-4072-8D56-A394D31E3945"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/creative-cloud/apsb23-21.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/creative-cloud/apsb23-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26426",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-22T17:15:15.523",
      "lastModified" : "2024-11-21T07:51:24.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "26.5.2",
            "matchCriteriaId" : "DA070019-74EA-4104-9DF1-DE1B8452DA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "27.0.0",
            "versionEndExcluding" : "27.3.1",
            "matchCriteriaId" : "24BA3C9A-FCAC-466D-9520-FD9A434AD38E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb23-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb23-19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-22T17:15:15.753",
      "lastModified" : "2025-02-26T16:15:14.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vox2mesh 1.0 has stack-overflow in main.cpp, this is stack-overflow caused by incorrect use of memcpy() funciton. The flow allows an attacker to cause a denial of service (abort) via a crafted file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vox2mesh_project:vox2mesh:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC37AB53-0EA8-4EDF-A155-427CE8D3BA01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/vox2mesh_poc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/vox2mesh_poc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0870",
      "sourceIdentifier" : "security@opennms.com",
      "published" : "2023-03-22T19:15:11.817",
      "lastModified" : "2024-11-21T07:38:00.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A form can be manipulated with cross-site request forgery in multiple versions of OpenNMS Meridian and Horizon. This can potentially allow an attacker to gain access to confidential information and compromise integrity. The solution is to upgrade to Meridian 2023.1.1 or Horizon 31.0.6 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@opennms.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opennms.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:horizon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "31.0.6",
            "matchCriteriaId" : "8B1236D1-83CD-4F35-84B3-3D4699276E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020.1.0",
            "versionEndExcluding" : "2020.1.33",
            "matchCriteriaId" : "0F635108-0354-41C2-A2D8-F1297FC9311E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2021.1.0",
            "versionEndExcluding" : "2021.1.25",
            "matchCriteriaId" : "AB510EA1-539C-405F-809E-AC6C16FBD6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2022.1.0",
            "versionEndExcluding" : "2022.1.14",
            "matchCriteriaId" : "A71A1FDB-72DF-4E73-B4DA-7B475E3730BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:meridian:2023.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD05EE7C-7E63-4AAD-A45F-E1503A1F863B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.opennms.com/meridian/2023/releasenotes/changelog.html#releasenotes-changelog-Meridian-2023.1.1",
        "source" : "security@opennms.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenNMS/opennms/pull/5835/files",
        "source" : "security@opennms.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://docs.opennms.com/meridian/2023/releasenotes/changelog.html#releasenotes-changelog-Meridian-2023.1.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenNMS/opennms/pull/5835/files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25820",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-22T19:15:11.933",
      "lastModified" : "2024-11-21T07:50:15.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Enterprise Server is the enterprise version of the file server software. In Nextcloud Server versions 25.0.x prior to 25.0.5 and versions 24.0.x prior to 24.0.10 as well as Nextcloud Enterprise Server versions 25.0.x prior to 25.0.4, 24.0.x prior to 24.0.10, 23.0.x prior to 23.0.12.5, 22.x prior to 22.2.0.10, and 21.x prior to 21.0.9.10, when an attacker gets access to an already logged in user session they can then brute force the password on the confirmation endpoint. Nextcloud Server should upgraded to 24.0.10 or 25.0.4 and Nextcloud Enterprise Server should upgraded to 21.0.9.10, 22.2.10.10, 23.0.12.5, 24.0.10, or 25.0.4 to receive a patch. No known workarounds are available."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndExcluding" : "21.0.9",
            "matchCriteriaId" : "3A67058C-45D1-48DD-9247-1F465D0FBC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "22.2.0",
            "versionEndExcluding" : "22.2.10.10",
            "matchCriteriaId" : "6FC1C66F-52EF-4703-9376-F6D654148B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.12.5",
            "matchCriteriaId" : "F2FEEE2E-6BF9-4332-99A3-690EF68D884F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.10",
            "matchCriteriaId" : "A7706446-1A54-49C2-A431-844CDF9A8BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.10",
            "matchCriteriaId" : "3D2D0CEB-437C-4ABA-9915-EFCB776E7ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.4",
            "matchCriteriaId" : "79F00330-43E1-4509-B76B-8D410E53FC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.4",
            "matchCriteriaId" : "E14A1D06-7AB2-40C2-806F-7EE34595DAF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-36g6-wjx2-333x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36489",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1842114",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-36g6-wjx2-333x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1842114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28114",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-22T19:15:12.020",
      "lastModified" : "2024-11-21T07:54:26.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`cilium-cli` is the command line interface to install, manage, and troubleshoot Kubernetes clusters running Cilium. Prior to version 0.13.2,`cilium-cli`, when used to configure cluster mesh functionality, can remove the enforcement of user permissions on the `etcd` store used to mirror local cluster information to remote clusters. Users who have set up cluster meshes using the Cilium Helm chart are not affected by this issue.\n\nDue to an incorrect mount point specification, the settings specified by the `initContainer` that configures `etcd` users and their permissions are overwritten when using `cilium-cli` to configure a cluster mesh. An attacker who has already gained access to a valid key and certificate for an `etcd` cluster compromised in this manner could then modify state in that `etcd` cluster.\n\nThis issue is patched in `cilium-cli` 0.13.2. As a workaround, one may use Cilium's Helm charts to create their cluster."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-280"
        }, {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cilium:cilium-cli:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.13.2",
            "matchCriteriaId" : "745EA41C-AFCC-43BA-863C-D419E59E0A91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://artifacthub.io/packages/helm/cilium/cilium",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cilium/cilium-cli/commit/fb1427025764e1eebc4a7710d902c4f22cae2610",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cilium/cilium-cli/releases/tag/v0.13.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/cilium/cilium-cli/security/advisories/GHSA-6f27-3p6c-p5jc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://artifacthub.io/packages/helm/cilium/cilium",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cilium/cilium-cli/commit/fb1427025764e1eebc4a7710d902c4f22cae2610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cilium/cilium-cli/releases/tag/v0.13.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/cilium/cilium-cli/security/advisories/GHSA-6f27-3p6c-p5jc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-22T20:15:12.723",
      "lastModified" : "2025-02-25T21:15:12.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the configuration file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jc21:nginx_proxy_manager:2.9.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28B1F106-AA8D-472F-BF9B-D2556F8F841D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LinuxProgramDevelop/NginxProxyManagerCommandInjectVulnInfo/blob/main/Nginx_proxy_manager_Command_Inject_vulnerability.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NginxProxyManager/nginx-proxy-manager",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LinuxProgramDevelop/NginxProxyManagerCommandInjectVulnInfo/blob/main/Nginx_proxy_manager_Command_Inject_vulnerability.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NginxProxyManager/nginx-proxy-manager",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28117",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-22T20:15:12.793",
      "lastModified" : "2024-11-21T07:54:26.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sentry SDK is the official Python SDK for Sentry, real-time crash reporting software. When using the Django integration of versions prior to 1.14.0 of the Sentry SDK in a specific configuration it is possible to leak sensitive cookies values, including the session cookie to Sentry. These sensitive cookies could then be used by someone with access to your Sentry issues to impersonate or escalate their privileges within your application.\n\nIn order for these sensitive values to be leaked, the Sentry SDK configuration must have `sendDefaultPII` set to `True`; one must use a custom name for either `SESSION_COOKIE_NAME` or `CSRF_COOKIE_NAME` in one's Django settings; and one must not be configured in one's organization or project settings to use Sentry's data scrubbing features to account for the custom cookie names.\n\nAs of version 1.14.0, the Django integration of the `sentry-sdk` will detect the custom cookie names based on one's Django settings and will remove the values from the payload before sending the data to Sentry. As a workaround, use the SDK's filtering mechanism to remove the cookies from the payload that is sent to Sentry. For error events, this can be done with the `before_send` callback method and for performance related events (transactions) one can use the `before_send_transaction` callback method. Those who want to handle filtering of these values on the server-side can also use Sentry's advanced data scrubbing feature to account for the custom cookie names. Look for the `$http.cookies`, `$http.headers`, `$request.cookies`, or `$request.headers` fields to target with a scrubbing rule."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        }, {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sentry:sentry_software_development_kit:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "1.14.0",
            "matchCriteriaId" : "A6E329F6-0AF3-4AAB-9A3A-3AB10BC9D52F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/getsentry/sentry-python/pull/1842",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/getsentry/sentry-python/releases/tag/1.14.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/getsentry/sentry-python/security/advisories/GHSA-29pr-6jr8-q5jm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/getsentry/sentry-python/pull/1842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/getsentry/sentry-python/releases/tag/1.14.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/getsentry/sentry-python/security/advisories/GHSA-29pr-6jr8-q5jm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28119",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-22T20:15:12.877",
      "lastModified" : "2024-11-21T07:54:26.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The crewjam/saml go library contains a partial implementation of the SAML standard in golang. Prior to version 0.4.13, the package's use of `flate.NewReader` does not limit the size of the input. The user can pass more than 1 MB of data in the HTTP request to the processing functions, which will be decompressed server-side using the Deflate algorithm. Therefore, after repeating the same request multiple times, it is possible to achieve a reliable crash since the operating system kills the process. This issue is patched in version 0.4.13.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saml_project:saml:0.4.12:*:*:*:*:go:*:*",
            "matchCriteriaId" : "14C445C8-C940-4611-8824-97C098BB08A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/crewjam/saml/commit/8e9236867d176ad6338c870a84e2039aef8a5021",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/crewjam/saml/security/advisories/GHSA-5mqj-xc49-246p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/crewjam/saml/commit/8e9236867d176ad6338c870a84e2039aef8a5021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/crewjam/saml/security/advisories/GHSA-5mqj-xc49-246p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0386",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-22T21:15:18.090",
      "lastModified" : "2025-11-04T16:47:21.283",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2025-06-17",
      "cisaActionDue" : "2025-07-08",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Linux Kernel Improper Ownership Management Vulnerability",
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-282"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "902B8056-9E37-443B-8905-8AA93E2447FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "359012F1-2C63-415A-88B8-6726A87830DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.91",
            "matchCriteriaId" : "91C2E92D-CC25-4FBD-8824-56A148119D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.9",
            "matchCriteriaId" : "ED5B6045-B1D2-4E03-B194-9005A351BCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF501633-2F44-4913-A8EE-B021929F49F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDA597B-CAC1-4DF0-86F0-42E142C654E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "725C78C9-12CE-406F-ABE8-0813A01D66E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A127C155-689C-4F67-B146-44A57F4BFD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D34127CC-68F5-4703-A5F6-5006F803E4AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0004/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5402",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-0386",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28431",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-22T21:15:18.170",
      "lastModified" : "2024-11-21T07:55:03.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Frontier is an Ethereum compatibility layer for Substrate. Frontier's `modexp` precompile uses `num-bigint` crate under the hood. In the implementation prior to pull request 1017, the cases for modulus being even and modulus being odd are treated separately. Odd modulus uses the fast Montgomery multiplication, and even modulus uses the slow plain power algorithm. This gas cost discrepancy was not accounted for in the `modexp` precompile, leading to possible denial of service attacks.\n\nNo fixes for `num-bigint` are currently available, and thus this issue is fixed in the short term by raising the gas costs for even modulus, and in the long term fixing it in `num-bigint` or switching to another modexp implementation. The short-term fix for Frontier is deployed at pull request 1017. There are no known workarounds aside from applying the fix."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parity:frontier:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03-15",
            "matchCriteriaId" : "D94BBB99-5FB0-4821-903E-58E016A7407F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/paritytech/frontier/commit/5af12e94d7dfc8a0208a290643a800f55de7b219",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/paritytech/frontier/pull/1017",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/paritytech/frontier/security/advisories/GHSA-fcmm-54jp-7vf6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rust-num/num-bigint/blob/6f2b8e0fc218dbd0f49bebb8db2d1a771fe6bafa/src/biguint/power.rs#L134",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/paritytech/frontier/commit/5af12e94d7dfc8a0208a290643a800f55de7b219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/paritytech/frontier/pull/1017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/paritytech/frontier/security/advisories/GHSA-fcmm-54jp-7vf6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rust-num/num-bigint/blob/6f2b8e0fc218dbd0f49bebb8db2d1a771fe6bafa/src/biguint/power.rs#L134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28432",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-22T21:15:18.257",
      "lastModified" : "2025-10-24T14:46:55.697",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including `MINIO_SECRET_KEY`\nand `MINIO_ROOT_PASSWORD`, resulting in information disclosure. All users of distributed deployment are impacted. All users are advised to upgrade to RELEASE.2023-03-20T20-16-18Z."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "cisaExploitAdd" : "2023-04-21",
      "cisaActionDue" : "2023-05-12",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "MinIO Information Disclosure Vulnerability",
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minio:minio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019-12-17t23-16-33z",
            "versionEndExcluding" : "2023-03-20t20-16-18z",
            "matchCriteriaId" : "A2A8F3D7-177F-4D52-B4F6-C4AB06AA4A4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/minio/minio/releases/tag/RELEASE.2023-03-20T20-16-18Z",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-6xvq-wj2x-3h3q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/Andrew___Morris/status/1639325397241278464",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://viz.greynoise.io/tag/minio-information-disclosure-attempt",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.greynoise.io/blog/openai-minio-and-why-you-should-always-use-docker-cli-scan-to-keep-your-supply-chain-clean",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/releases/tag/RELEASE.2023-03-20T20-16-18Z",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-6xvq-wj2x-3h3q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/Andrew___Morris/status/1639325397241278464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://viz.greynoise.io/tag/minio-information-disclosure-attempt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.greynoise.io/blog/openai-minio-and-why-you-should-always-use-docker-cli-scan-to-keep-your-supply-chain-clean",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28432",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28433",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-22T21:15:18.340",
      "lastModified" : "2024-11-21T07:55:03.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Minio is a Multi-Cloud Object Storage framework. All users on Windows prior to version RELEASE.2023-03-20T20-16-18Z are impacted. MinIO fails to filter the `\\` character, which allows for arbitrary object placement across buckets. As a result, a user with low privileges, such as an access key, service account, or STS credential, which only has permission to `PutObject` in a specific bucket, can create an admin user. This issue is patched in RELEASE.2023-03-20T20-16-18Z. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minio:minio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03-20t20-16-18z",
            "matchCriteriaId" : "63CBB19F-80FF-4D6B-ADF3-7BD9768861D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/minio/minio/commit/8d6558b23649f613414c8527b58973fbdfa4d1b8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/minio/minio/commit/b3c54ec81e0a06392abfb3a1ffcdc80c6fbf6ebc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/minio/minio/releases/tag/RELEASE.2023-03-20T20-16-18Z",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-w23q-4hw3-2pp6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/commit/8d6558b23649f613414c8527b58973fbdfa4d1b8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/minio/minio/commit/b3c54ec81e0a06392abfb3a1ffcdc80c6fbf6ebc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/minio/minio/releases/tag/RELEASE.2023-03-20T20-16-18Z",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-w23q-4hw3-2pp6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28434",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-22T21:15:18.427",
      "lastModified" : "2026-02-26T15:03:51.180",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket`. To carry out this attack, the attacker requires credentials with `arn:aws:s3:::*` permission, as well as enabled Console API access. This issue has been patched in RELEASE.2023-03-20T20-16-18Z. As a workaround, enable browser API access and turn off `MINIO_BROWSER=off`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-09-19",
      "cisaActionDue" : "2023-10-10",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "MinIO Security Feature Bypass Vulnerability",
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minio:minio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03-20t20-16-18z",
            "matchCriteriaId" : "63CBB19F-80FF-4D6B-ADF3-7BD9768861D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/minio/minio/commit/67f4ba154a27a1b06e48bfabda38355a010dfca5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/minio/minio/pull/16849",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-2pxw-r47w-4p8c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/commit/67f4ba154a27a1b06e48bfabda38355a010dfca5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/minio/minio/pull/16849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-2pxw-r47w-4p8c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28434",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28438",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-22T21:15:18.520",
      "lastModified" : "2024-11-21T07:55:04.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore is an open source data and experience management platform. Prior to version 10.5.19, since a user with 'report' permission can already write arbitrary SQL queries and given the fact that this endpoint is using the GET method (no CSRF protection), an attacker can inject an arbitrary query by manipulating a user to click on a link. Users should upgrade to version 10.5.19 to receive a patch or, as a workaround, may apply the patch manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.19",
            "matchCriteriaId" : "9F355AEC-329F-43D1-A3D7-44C2481A1999"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/d1abadb181c88ebaa4bce1916f9077469d4ea2bc.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14526",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-vf7q-g2pv-jxvx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/d1abadb181c88ebaa4bce1916f9077469d4ea2bc.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-vf7q-g2pv-jxvx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28439",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-22T21:15:18.607",
      "lastModified" : "2024-11-21T07:55:04.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special conditions: using one of the affected packages on a web page with missing proper Content Security Policy configuration; initializing the editor on an element and using an element other than `<textarea>` as a base; and destroying the editor instance. This vulnerability might affect a small percentage of integrators that depend on dynamic editor initialization/destroy mechanism.\n\nA fix is available in CKEditor4 version 4.21.0. In some rare cases, a security fix may be considered a breaking change. Starting from version 4.21.0, the Iframe Dialog plugin applies the `sandbox` attribute by default, which restricts JavaScript code execution in the iframe element. To change this behavior, configure the `config.iframe_attributes` option. Also starting from version 4.21.0, the Media Embed plugin regenerates the entire content of the embed widget by default. To change this behavior, configure the `config.embed_keepOriginalContent` option. Those who choose to enable either of the more permissive options or who cannot upgrade to a patched version should properly configure Content Security Policy to avoid any potential security issues that may arise from embedding iframe elements on their web page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ckeditor:ckeditor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.21.0",
            "matchCriteriaId" : "0DFC29A5-004B-4815-AF02-37517672D3F1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ckeditor.com/cke4/addon/embed",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://ckeditor.com/cke4/addon/iframe",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-vh5c-xwqv-cv9g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GWKG2VCPJNETVCDTXU4X6FQ2PO6XCNGN/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4ODGOW6PYVOXHQSMWJBOCE6DXWAI33W/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCYKD3JZWWA3ESOZG4PHJJEXT4EYIUIQ/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://ckeditor.com/cke4/addon/embed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://ckeditor.com/cke4/addon/iframe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-vh5c-xwqv-cv9g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GWKG2VCPJNETVCDTXU4X6FQ2PO6XCNGN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4ODGOW6PYVOXHQSMWJBOCE6DXWAI33W/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCYKD3JZWWA3ESOZG4PHJJEXT4EYIUIQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28659",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-22T21:15:18.697",
      "lastModified" : "2025-02-25T21:15:13.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Waiting: One-click Countdowns WordPress Plugin, version <= 0.6.2, is affected by an authenticated SQL injection vulnerability in the pbc_down[meta][id] parameter of the pbc_save_downs action."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plugin:waiting:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.6.2",
            "matchCriteriaId" : "E719F69E-20BF-46D4-A862-E84F6CA72723"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28660",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-22T21:15:18.747",
      "lastModified" : "2024-11-21T07:55:45.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Events Made Easy WordPress Plugin, version <= 2.3.14 is affected by an authenticated SQL injection vulnerability in the 'search_name' parameter in the eme_recurrences_list action."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-dynamics:events_made_easy:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.3.14",
            "matchCriteriaId" : "97D60183-B10D-4D2C-BC41-2004541B5FC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28661",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-22T21:15:18.827",
      "lastModified" : "2024-11-21T07:55:45.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnerability in the 'value' parameter in the get_popup_data action."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.0.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C2E73D7B-A9CF-4EFF-AD79-2DCAB5E56F00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.0.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "54616CED-212F-438A-9544-A661332145EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.0.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C8008A9F-A5A4-4ED0-A417-A800B2BA4D34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.0.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "1183F60A-A89E-4D62-AE43-B1BC9540BFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.0.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "C503AC15-FB86-444C-BDBA-B116591AB2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.0.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "2D7C80AC-6113-4B89-8D1E-41D279AED395"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.0.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "20F6607F-6FA1-4DA8-AC72-1E2C39C74937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.0.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "82D1F362-ED99-42CA-BB60-05B9ABDC45D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.0.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "570507CF-BB82-4CF0-B806-B0D47057712C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "058497B8-3EB3-4497-B111-D0198586685D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.1.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "EC0B6FF6-BC14-4AAD-A74B-622533474A42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.1.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "8BA5B5D8-5299-457C-B5DC-1695B2E0BF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.1.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "BDBF6345-3357-45DA-B287-730BAC5ACC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.1.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "D0D3C39B-318B-4203-A504-76C1C3E8DE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.1.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "7379A1E5-35B2-40A1-A4D7-6D83BF677034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.1.6:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "EADC08AC-0855-43AE-8439-6E771AEAF005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.1.7:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "AA0FCAA7-147C-4EF5-81CD-8106D36E3131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.1.8:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "4C34B202-F992-44EF-A60F-D0CCBC35676F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.1.9:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "80D538C8-F645-42C4-AF1F-9B398A0E1E6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.2.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A9C4AA1B-F14B-4C5E-ACCB-D29B09EBF12D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.2.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "F670474C-3930-433B-82BA-30CC9D747CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.2.2:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "53A8783A-B911-4112-A641-527DB935634E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.2.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "1CF6B83D-6527-4F58-96F7-DA6A9798B47B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.2.4:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "59981B00-F3AB-4145-8FA6-DB1E69D69441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.2.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "6E62537A-2AE8-4A02-BD8A-D303257BE51A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28662",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-22T21:15:18.913",
      "lastModified" : "2025-02-25T21:15:13.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgv_doajax_voucher_pdf_save_func action."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codemenschen:gift_vouchers:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.3.1",
            "matchCriteriaId" : "002858B0-6211-4C96-9E94-1B9E6A1DBF04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28663",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-22T21:15:18.967",
      "lastModified" : "2025-02-25T21:15:13.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Formidable PRO2PDF WordPress Plugin, version < 3.11, is affected by an authenticated SQL injection vulnerability in the ‘fieldmap’ parameter in the fpropdf_export_file action."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:formidablepro2pdf:formidable_pro2pdf:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.11",
            "matchCriteriaId" : "7DF91E0D-6557-46B9-B4DA-4971A4B9DAE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28664",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-22T21:15:19.023",
      "lastModified" : "2025-02-25T21:15:13.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Meta Data and Taxonomies Filter WordPress plugin, in versions < 1.3.1, is affected by a reflected cross-site scripting vulnerability in the 'tax_name' parameter of the mdf_get_tax_options_in_widget action, which can only be triggered by an authenticated user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluginus:wordpress_meta_data_and_taxonomies_filter:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "75C0EA67-96DB-4EDF-BF08-8364F104C4E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-3",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28665",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-22T21:15:19.077",
      "lastModified" : "2025-02-25T19:15:13.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'page' parameter to the techno_get_products action, which can only be triggered by an authenticated user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:technocrackers:bulk_price_update_for_woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.2.2",
            "matchCriteriaId" : "B10923C2-A867-469F-A054-DC9F3E154F1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-3",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28666",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-22T21:15:19.133",
      "lastModified" : "2025-02-25T21:15:13.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to the add_inpost_gallery_slide_item action, which can only be triggered by an authenticated user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluginus:inpost_gallery:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.1.4.1",
            "matchCriteriaId" : "DE2301D5-1AA0-4595-B80D-0505C305C7E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-3",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28667",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-03-22T21:15:19.190",
      "lastModified" : "2025-02-25T19:15:13.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Lead Generated WordPress Plugin, version <= 1.23, was affected by an unauthenticated insecure deserialization issue. The tve_labels parameter of the tve_api_form_submit action is passed to the PHP unserialize() function without being sanitized or verified, and as a result could lead to PHP object injection, which when combined with certain class implementations / gadget chains could be leveraged to perform a variety of malicious actions granted a POP chain is also present."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leadgenerated:lead_generated:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.25",
            "matchCriteriaId" : "F031A967-69BB-464C-B419-FC0BD6FFD980"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2023-7",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2023-7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-22T22:15:12.490",
      "lastModified" : "2025-02-26T16:15:13.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the settings module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirotalk:mirotalk_p2p:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-02-18",
            "matchCriteriaId" : "45DFFCBF-0545-417D-BC59-32824D4F24B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/miroslavpejic85/mirotalk",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/miroslavpejic85/mirotalk/commit/f535b3515d2d480dc3135b37982f5df93e43c592",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/miroslavpejic85/mirotalk/issues/139",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/miroslavpejic85/mirotalk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/miroslavpejic85/mirotalk/commit/f535b3515d2d480dc3135b37982f5df93e43c592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/miroslavpejic85/mirotalk/issues/139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-22T22:15:12.547",
      "lastModified" : "2025-02-26T16:15:13.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LightCMS v1.3.7 was discovered to contain a remote code execution (RCE) vulnerability via the image:make function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lightcms_project:lightcms:1.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7D3D7B-45D1-464D-8470-ACA099B89C04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eddy8/LightCMS/issues/21",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://igml.top/2021/05/10/lightcms-RCE/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eddy8/LightCMS/issues/21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://igml.top/2021/05/10/lightcms-RCE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-22T23:15:12.350",
      "lastModified" : "2025-02-25T22:15:14.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgate:pfsense_plus:22.05.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3B5179-1D65-4536-AC94-FC7CCE8288DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pfsense:pfsense:2.6.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7F69B7B3-805F-4604-9710-80F11F5E4142"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171791/pfsenseCE-2.6.0-Protection-Bypass.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.netgate.com/downloads/pfSense-SA-23_05.sshguard.asc",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://redmine.pfsense.org/issues/13574",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171791/pfsenseCE-2.6.0-Protection-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.netgate.com/downloads/pfSense-SA-23_05.sshguard.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://redmine.pfsense.org/issues/13574",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://packetstorm.news/files/id/171791",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24655",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T01:15:12.123",
      "lastModified" : "2025-06-27T19:05:16.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:simple_customer_relationship_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1110BA8-AEB2-410C-983F-6EFEBECC8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-24655/CVE-2023-24655.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-24655/CVE-2023-24655.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T01:15:12.180",
      "lastModified" : "2024-11-21T07:50:45.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:malwarebytes:malwarebytes:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "4.5.23",
            "matchCriteriaId" : "EA6E7B8E-FF14-4451-BC22-A3154BDDC044"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.malwarebytes.com/hc/en-us/articles/14279575968659-Malwarebytes-for-Windows-4-5-23-Release-Notes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.malwarebytes.com/secure/cves/cve-2023-26088",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.malwarebytes.com/hc/en-us/articles/14279575968659-Malwarebytes-for-Windows-4-5-23-Release-Notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.malwarebytes.com/secure/cves/cve-2023-26088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26498",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T01:15:12.240",
      "lastModified" : "2024-11-21T07:51:38.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto T5126. Memory corruption can occur due to improper checking of the number of properties while parsing the chatroom attribute in the SDP (Session Description Protocol) module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F66A096-7BA3-47D6-98F4-879C3A4C1FFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE202894-D48A-4B9E-B3BD-28529967A0B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B60F97-1320-44F5-970C-BBA29F375524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72419735-076A-4E72-869F-0C7D801371C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T01:15:12.317",
      "lastModified" : "2025-02-24T16:15:11.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.0",
            "versionEndExcluding" : "7.1.4",
            "matchCriteriaId" : "90EECB4E-AB0E-49E4-9387-37C80E88A15A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.couchbase.com/server/current/release-notes/relnotes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://forums.couchbase.com/tags/security",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.couchbase.com/downloads",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.couchbase.com/server/current/release-notes/relnotes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://forums.couchbase.com/tags/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.couchbase.com/downloads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T02:15:12.543",
      "lastModified" : "2024-11-21T07:45:55.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IS Decisions UserLock MFA 11.01 is vulnerable to authentication bypass using scheduled task."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isdecisions:userlock:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C743AD34-AE17-48C0-AD62-4D6C1D0FD988"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pinarsadioglu/CVE-2023-23192/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.isdecisions.com/products/userlock/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pinarsadioglu/CVE-2023-23192/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.isdecisions.com/products/userlock/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T02:15:12.603",
      "lastModified" : "2023-11-07T04:08:26.813",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T02:15:12.657",
      "lastModified" : "2024-11-21T07:51:38.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5124. Memory corruption can occur due to improper checking of the parameter length while parsing the fmtp attribute in the SDP (Session Description Protocol) module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F66A096-7BA3-47D6-98F4-879C3A4C1FFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE202894-D48A-4B9E-B3BD-28529967A0B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B60F97-1320-44F5-970C-BBA29F375524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72419735-076A-4E72-869F-0C7D801371C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T02:15:12.733",
      "lastModified" : "2025-02-25T21:15:12.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swf_GetPlaceObject at swfobject.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://swfdump.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/keepinggg/poc/blob/main/poc_of_swfdump/poc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keepinggg/poc/tree/main/poc_of_swfdump",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/197",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://swfdump.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/keepinggg/poc/blob/main/poc_of_swfdump/poc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keepinggg/poc/tree/main/poc_of_swfdump",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T04:17:11.923",
      "lastModified" : "2025-02-25T20:15:33.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.3.0.2",
            "matchCriteriaId" : "A281F692-A6C6-4167-A02A-8296C1D15D3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS23-003",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS23-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T04:17:13.260",
      "lastModified" : "2025-02-25T20:15:34.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loading may allow a lower-level user to elevate privileges and compromise the system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0",
            "matchCriteriaId" : "B2C4B1AB-DBDB-414C-8ACD-6025F4D329CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS23-006",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS23-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26114",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-03-23T05:15:16.927",
      "lastModified" : "2025-02-25T20:15:32.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package code-server before 4.10.1 are vulnerable to Missing Origin Validation in WebSockets handshakes. Exploiting this vulnerability can allow an adversary in specific scenarios to access data from and connect to the code-server instance."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1385"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coder:code-server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.10.1",
            "matchCriteriaId" : "E36A6CC6-DD16-4EC8-8E13-C8A4C2836284"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/coder/code-server/commit/d477972c68fc8c8e8d610aa7287db87ba90e55c7",
        "source" : "report@snyk.io",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/coder/code-server/releases/tag/v4.10.1",
        "source" : "report@snyk.io",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-CODESERVER-3368148",
        "source" : "report@snyk.io",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/coder/code-server/commit/d477972c68fc8c8e8d610aa7287db87ba90e55c7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/coder/code-server/releases/tag/v4.10.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-CODESERVER-3368148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1050",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-23T07:15:11.880",
      "lastModified" : "2024-11-21T07:38:21.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in As Koc Energy Web Report System allows SQL Injection.This issue affects Web Report System: before 23.03.10.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:askoc:web_report_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.03.10",
            "matchCriteriaId" : "703BE6D4-079F-4D39-BDF0-E25734DB5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0166",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1051",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-23T07:15:12.787",
      "lastModified" : "2024-11-21T07:38:21.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in As Koc Energy Web Report System allows Reflected XSS.This issue affects Web Report System: before 23.03.10.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:askoc:web_report_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.03.10",
            "matchCriteriaId" : "703BE6D4-079F-4D39-BDF0-E25734DB5100"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0166",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1410",
      "sourceIdentifier" : "security@grafana.com",
      "published" : "2023-03-23T08:15:12.470",
      "lastModified" : "2025-02-13T17:15:58.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grafana is an open-source platform for monitoring and observability. \n\nGrafana had a stored XSS vulnerability in the Graphite FunctionDescription tooltip. \n\nThe stored XSS vulnerability was possible due the value of the Function Description was not properly sanitized.\n\nAn attacker needs to have control over the Graphite data source in order to manipulate a function description and a Grafana admin needs to configure the data source, later a Grafana user needs to select a tampered function and hover over the description. \n\n  Users may upgrade to version 8.5.22, 9.2.15 and 9.3.11 to receive a fix."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@grafana.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@grafana.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.5.22",
            "matchCriteriaId" : "F7482331-D381-4704-BF90-060DB1E279C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.15",
            "matchCriteriaId" : "79D0AE4D-AD37-45A8-A84B-FE675F2D2943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "9.3.0",
            "versionEndExcluding" : "9.3.11",
            "matchCriteriaId" : "3D6B0083-7414-4C30-9C14-B4C4784F79DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/grafana/bugbounty/security/advisories/GHSA-qrrg-gw7w-vp76",
        "source" : "security@grafana.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/security/security-advisories/cve-2023-1410/",
        "source" : "security@grafana.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0003/",
        "source" : "security@grafana.com"
      }, {
        "url" : "https://github.com/grafana/bugbounty/security/advisories/GHSA-qrrg-gw7w-vp76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/security/security-advisories/cve-2023-1410/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1589",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-23T08:15:12.577",
      "lastModified" : "2024-11-21T07:39:29.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This vulnerability affects the function exec of the file admin/operations/approve_delete.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-223654 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/129729911",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223654",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223654",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/129729911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1590",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-23T08:15:12.683",
      "lastModified" : "2024-11-21T07:39:30.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file admin/operations/currency.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223655."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_tours_\\&_travels_management_system_project:online_tours_\\&_travels_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5468F32-0596-4448-BE96-F06564FC0831"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/129730106",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223655",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223655",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.csdn.net/weixin_43864034/article/details/129730106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1591",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-23T09:15:11.707",
      "lastModified" : "2024-11-21T07:39:30.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Automatic Question Paper Generator System 1.0. This affects an unknown part of the file classes/Users.php?f=save_ruser. The manipulation of the argument id/email leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-223659."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatic_question_paper_generator_system_project:automatic_question_paper_generator_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026B7C92-CE66-4285-9FD7-01207D0ABDFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223659",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223659",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1592",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-23T10:15:12.030",
      "lastModified" : "2024-11-21T07:39:30.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file admin/courses/view_class.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-223660."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatic_question_paper_generator_system_project:automatic_question_paper_generator_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026B7C92-CE66-4285-9FD7-01207D0ABDFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223660",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223660",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1593",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-23T10:15:12.250",
      "lastModified" : "2024-11-21T07:39:30.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in SourceCodester Automatic Question Paper Generator System 1.0. This issue affects some unknown processing of the file classes/Master.php?f=save_class. The manipulation of the argument description leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-223661 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatic_question_paper_generator_system_project:automatic_question_paper_generator_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026B7C92-CE66-4285-9FD7-01207D0ABDFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223661",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223661",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1594",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-23T10:15:12.330",
      "lastModified" : "2024-11-21T07:39:30.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223662 is the identifier assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad, que se clasificó como crítica, se encontró en novel-plus 3.6.2. Afectando la función MenuService del archivo sys/menu/list. La manipulación del argumento sort conduce a la inyección sql. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. VDB-223662 es el identificador asignado a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xxyopen:novel-plus:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8784DC3-1BFE-4C21-B764-13F6C7CC28BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OYyunshen/Poc/blob/main/Novel-PlusV3.6.2Sqli.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223662",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223662",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/OYyunshen/Poc/blob/main/Novel-PlusV3.6.2Sqli.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1595",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-23T11:15:13.007",
      "lastModified" : "2024-11-21T07:39:30.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file common/log/list. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223663."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad en novel-plus 3.6.2 y se ha clasificado como crítica. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo common/log/list. La manipulación del argumento sort conduce a la inyección sql. El ataque se puede lanzar de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. El identificador asociado de esta vulnerabilidad es VDB-223663."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xxyopen:novel-plus:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8784DC3-1BFE-4C21-B764-13F6C7CC28BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1610349395/novel-plus-v3.6.2----Background-SQL-Injection-Vulnerability-/blob/main/novel-plus%20v3.6.2%20--%20Background%20SQL%20Injection%20Vulnerability.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223663",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223663",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/1610349395/novel-plus-v3.6.2----Background-SQL-Injection-Vulnerability-/blob/main/novel-plus%20v3.6.2%20--%20Background%20SQL%20Injection%20Vulnerability.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.223663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22704",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-23T12:15:13.087",
      "lastModified" : "2024-11-21T07:45:15.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <= 8.1.8 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mtrv:teachpress:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "8.1.9",
            "matchCriteriaId" : "D1C48A72-45D5-460B-AC4A-0756782765E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/teachpress/wordpress-teachpress-plugin-8-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/teachpress/wordpress-teachpress-plugin-8-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28422",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-23T12:15:13.167",
      "lastModified" : "2024-11-21T07:55:01.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce <= 3.8.6. versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mage-people:event_manager_and_tickets_selling_for_woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.8.7",
            "matchCriteriaId" : "97B0DEE5-5ED5-4D61-965C-7B3DF41DEA61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/mage-eventpress/wordpress-event-manager-for-woocommerce-plugin-3-8-6-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/mage-eventpress/wordpress-event-manager-for-woocommerce-plugin-3-8-6-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22712",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-23T14:15:14.917",
      "lastModified" : "2024-11-21T07:45:16.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TemplatesNext TemplatesNext ToolKit plugin <= 3.2.7 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:templatesnext:templatesnext_toolkit:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.2.8",
            "matchCriteriaId" : "E3B1C92A-6ED0-444A-AE9E-63C46C87EFB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/templatesnext-toolkit/wordpress-templatesnext-toolkit-plugin-3-2-7-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/templatesnext-toolkit/wordpress-templatesnext-toolkit-plugin-3-2-7-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22715",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-23T14:15:15.020",
      "lastModified" : "2024-11-21T07:45:16.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Lester 'GaMerZ' Chan WP-CommentNavi plugin <= 1.12.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-commentnavi_project:wp-commentnavi:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.12.2",
            "matchCriteriaId" : "27D67D6D-5EF3-479D-987B-96E33888F404"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-commentnavi/wordpress-wp-commentnavi-plugin-1-12-1-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-commentnavi/wordpress-wp-commentnavi-plugin-1-12-1-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22716",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-23T14:15:15.120",
      "lastModified" : "2024-11-21T07:45:16.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Cross-Site Scripting vulnerability in OOPSpam OOPSpam Anti-Spam plugin <= 1.1.35 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oopspam:oopspam_anti-spam:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.36",
            "matchCriteriaId" : "02E36934-FC13-46DE-82B1-9C7E50F750E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/oopspam-anti-spam/wordpress-oopspam-anti-spam-plugin-1-1-35-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/oopspam-anti-spam/wordpress-oopspam-anti-spam-plugin-1-1-35-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23650",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-23T14:15:15.223",
      "lastModified" : "2024-11-21T07:46:36.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Code Snippets Extension plugin <= 4.0.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mainwp:code_snippets_extension:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "EE99E30E-CFAF-40BA-B393-842F789BBA51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/mainwp-code-snippets-extension/wordpress-mainwp-code-snippets-extension-plugin-4-0-2-subscriber-stored-cross-site-scripting-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/mainwp-code-snippets-extension/wordpress-mainwp-code-snippets-extension-plugin-4-0-2-subscriber-stored-cross-site-scripting-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23864",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-23T14:15:15.323",
      "lastModified" : "2024-11-21T07:46:59.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Michael Aronoff Very Simple Google Maps plugin <= 2.8.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:very_simple_google_maps_project:very_simple_google_maps:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.9",
            "matchCriteriaId" : "C8771982-A4B7-4C3F-A541-D26AD2AC4D7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/very-simple-google-maps/wordpress-very-simple-google-maps-plugin-2-8-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/very-simple-google-maps/wordpress-very-simple-google-maps-plugin-2-8-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T14:15:15.423",
      "lastModified" : "2025-02-25T21:15:12.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command Injection vulnerability found in Tenda G103 v.1.0.05 allows an attacker to obtain sensitive information via a crafted package"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:g103_firmware:1.0.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40B1D18-7271-450F-B35E-41827C125D47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:g103:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1530E06E-43D9-44DE-9569-D5A6B1647378"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/B2eFly/Router/blob/main/Tenda/G103/2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/B2eFly/Router/blob/main/Tenda/G103/2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27655",
      "sourceIdentifier" : "xpdf@xpdfreader.com",
      "published" : "2023-03-23T14:15:15.490",
      "lastModified" : "2023-11-07T04:10:02.500",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22702",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-23T15:15:11.747",
      "lastModified" : "2025-02-25T20:38:29.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Application plugin <= 11.13 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amauri:wpmobile.app:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "11.14",
            "matchCriteriaId" : "C04906FE-5955-40B4-A48B-8C6F675B392E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wpappninja/wordpress-wpmobile-app-android-and-ios-mobile-application-plugin-11-13-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wpappninja/wordpress-wpmobile-app-android-and-ios-mobile-application-plugin-11-13-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23722",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-23T15:15:11.830",
      "lastModified" : "2024-11-21T07:46:43.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP eBay Product Feeds plugin <= 3.3.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winwar:wp_ebay_product_feeds:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "2CC6151C-0CE4-4128-B0AD-53385443E74D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/ebay-feeds-for-wordpress/wordpress-wp-ebay-product-feeds-plugin-3-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/ebay-feeds-for-wordpress/wordpress-wp-ebay-product-feeds-plugin-3-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23728",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-23T15:15:11.923",
      "lastModified" : "2024-11-21T07:46:44.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Flipclock plugin <= 1.7.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winwar:wp_flipclock:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8",
            "matchCriteriaId" : "524E9DDE-F0B9-41B8-A8C8-4781ABF95931"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-flipclock/wordpress-wp-flipclock-plugin-1-7-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-flipclock/wordpress-wp-flipclock-plugin-1-7-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T15:15:12.010",
      "lastModified" : "2025-02-25T21:15:11.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack Overflow vulnerability found in 360 D901 allows a remote attacker to cause a Distributed Denial of Service (DDOS) via a crafted HTTP package."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:360:d901_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D21147-DF02-4A6C-9527-929A55BBFA7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:360:d901:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E2C5BD-6AB4-44DA-8DFB-003912D56814"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/B2eFly/Router/blob/main/360/360D901.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/B2eFly/Router/blob/main/360/360D901.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T15:15:12.070",
      "lastModified" : "2025-02-25T21:15:12.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection issue was found in TP-Link MR3020 v.1_150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-mr3020_firmware:1.0:150921:*:*:*:*:*:*",
            "matchCriteriaId" : "C760A2DB-5A58-4855-9542-2EEB93988431"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-mr3020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E5E590D-ECE2-437F-AA9B-C02593B67957"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/B2eFly/Router/blob/main/TPLINK/MR3020/1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/B2eFly/Router/blob/main/TPLINK/MR3020/1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T15:15:12.120",
      "lastModified" : "2025-02-25T19:15:13.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7100ru_firmware:7.4cu.2313_b20191024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C47206-6608-4258-A2FE-D15C5637192D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7100ru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DD0831-0EB3-4F09-B4E4-6165E53AB6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T15:15:12.177",
      "lastModified" : "2025-05-05T16:15:34.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.27",
            "versionEndExcluding" : "4.4.276",
            "matchCriteriaId" : "AC46ADF4-F65E-4A9C-8AFA-1C349FACCCC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.276",
            "matchCriteriaId" : "C79FFC06-9530-4CD7-B651-01D786CC925E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.240",
            "matchCriteriaId" : "FB359B2E-773D-4D52-9915-E07A47ABE72B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.198",
            "matchCriteriaId" : "B93AEDB9-C52B-4222-8F9A-882DAD9EF5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.133",
            "matchCriteriaId" : "65A8F1FF-5639-455A-8BF4-9FF529240505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.51",
            "matchCriteriaId" : "93289127-DFB3-4515-89DD-50521FF8B7FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.12.18",
            "matchCriteriaId" : "79D13C82-E06F-4A70-A3D1-C09494FBC94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.13",
            "versionEndExcluding" : "5.13.3",
            "matchCriteriaId" : "853187F6-707A-487B-95C0-621B5211B43C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/d3b16034a24a112bb83aeb669ac5b9b01f744bb7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lkml.kernel.org/r/20210626032156.47889-1-yun.zhou%40windriver.com",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lore.kernel.org/lkml/20210625122453.5e2fe304%40oasis.local.home/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0005/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/d3b16034a24a112bb83aeb669ac5b9b01f744bb7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lkml.kernel.org/r/20210626032156.47889-1-yun.zhou%40windriver.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lore.kernel.org/lkml/20210625122453.5e2fe304%40oasis.local.home/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28610",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T16:15:12.083",
      "lastModified" : "2025-02-26T15:15:19.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited by providing a modified firmware update image. This allows a remote attacker to gain root access to the system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omicronenergy:stationguard:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "81C272A4-6190-4BEB-B399-368504005E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omicronenergy:stationscout:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "1B632B00-EA61-469E-92B5-332567D2F48D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.omicronenergy.com/en/support/product-security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.omicronenergy.com/fileadmin/user_upload/website/files/product-security/osa-5.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.omicronenergy.com/en/support/product-security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.omicronenergy.com/fileadmin/user_upload/website/files/product-security/osa-5.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20027",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:13.857",
      "lastModified" : "2024-11-21T07:40:23.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper reassembly of large packets that occurs when VFR is enabled on either a tunnel interface or on a physical interface that is configured with a maximum transmission unit (MTU) greater than 4,615 bytes. An attacker could exploit this vulnerability by sending fragmented packets through a VFR-enabled interface on an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3B6D68-DA31-45EB-ACFD-AE703B2FA2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F278DC-5102-4A18-9C72-E8FEEDCC5729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513675B5-D62C-442D-8754-DC4F221942B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9F45C-E71F-4425-A0C7-DFFEEC93C152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FB3B1A-FB8C-4371-A6D2-AB83ECF17F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12F65A-5B43-4612-8788-B697567C0B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A005E0C-A744-4AFA-A1D1-2E3228E093FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED25B1B-C47A-45E9-8235-081550FB0AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B7EC67-B431-4284-8781-9090D134B781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3598539F-0EEB-45D6-8BA5-A2A3F69D556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF349D4-BF1C-4127-B6FA-7AD379F62A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ABE123-BBA5-46CD-8578-4A1F3CB8BA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD674BF9-16F6-4817-9ADE-564A402A5F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4142E2-B8A8-4E78-B4ED-52F63C43C6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DA3731-E719-4DB7-9783-1C00481141EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "483A3F03-F5CC-45BD-AEB7-83E23601BB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1692889D-BD16-41C6-A226-A9BAF6F64603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAC081C-9A22-4CBC-A9D0-DD9995801791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43F819E-3072-430F-8C52-B43FF28D4687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80F59A9-C1EF-4E9B-B204-1EEC7FDF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A930B7-7B9B-426E-A296-9F29F4A03F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309952D7-B220-4678-A16D-AA5FF005F782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503EFE9E-C238-46BA-8CA3-DE8D5DDB9A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EC8B17-6EC2-47AF-818D-1DFBDA612FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278ACF0A-949B-486D-8F6C-ADC2AF25FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A30BA4-D760-4321-AAC8-04093AAAEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42616EA2-DDCF-4B57-BF2A-37968C82DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F35F75-75E8-4A20-94C4-5908E404C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6E9386-30B4-4E86-9676-E7E005274048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E4463-DB0F-4B06-B403-B3606B386F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665ACEAC-AE81-40F7-8A01-E8DB9DD7DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96637FB9-B552-417B-8C7F-4F4524F69690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA6851D-6DC1-403F-A511-EE996FE832F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C97617-6574-4EFD-8408-A9E21A56E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB188B71-4CF0-49EA-BA00-10FEDF994D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEAB7F8-EAB5-4E7A-8A1B-38EC16D601FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5484A4-D116-4B79-8369-47979E20AACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1826C997-6D5D-480E-A12E-3048B6C61216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D136C95-F837-49AD-82B3-81C25F68D0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B3F96-B342-4AFC-A511-7A735B961ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203E52-0A3A-4910-863D-05FEF537C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED2D791-4142-4B9E-8401-6B63357536B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4es:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6442B5-A87E-493B-98D5-F954B5A001BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4gs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8794DA1D-9EE8-4139-B8E9-061A73CFD5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EAC484-1C4F-4CA8-B8E1-6EE0E9497A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC5E30-71D2-4C17-A1BA-0850A9BC7D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E7CEC-5CB6-47AE-95F7-75693347C08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E50A67CE-EB1C-4BFA-AB40-BCF6CDF168BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147A245E-9A5D-4178-A1AC-5B0D41C3B730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169D71B3-1CCE-4526-8D91-048212EEDF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F66514-B9C4-422E-B68E-406608302E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2438157-4D9C-4E16-9D2A-759A8F6CDDE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12ECC01E-E59F-4AED-AE51-7EE6B5E717E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC524BA-544C-49B9-A9D6-800D25556532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC99316-75AC-45EB-B6BB-DB014ED08ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0141D67B-632F-48ED-8837-4CC799616C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE444B39-D025-471B-835E-88671212ACAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE390091-D382-4436-BBB4-D4C33E4F6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D43FA49-1F9D-4FD0-AF18-6E9AB6DF702F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89526731-B712-43D3-B451-D7FC503D2D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302933FE-4B6A-48A3-97F0-4B943251B717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296636F1-9242-429B-8472-90352C056106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77993343-0394-413F-ABF9-C1215E9AD800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283971DD-DD58-4A76-AC2A-F316534ED416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F324A5-4830-482E-A684-AB3B6594CEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8120196-8648-49D0-8262-CD4C9C90C37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E7CCE2-C685-4019-9B55-B3BECB3E5F76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E2D781-2684-45F1-AC52-636572A0DCA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479FB47B-AF2E-4FCB-8DE0-400BF325666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2B4C78-5C31-4F3D-9639-305E15576E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C09F0A2-B21F-40ED-A6A8-9A29D6E1C6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BA13F4-EF9C-4368-B8B1-9FD9FAF5CEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CB889F-B064-4CAC-99AC-903745ACA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8AF15-AB46-4EAB-8872-8C55E8601599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957318BE-55D4-4585-AA52-C813301D01C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F11B703-8A0F-47ED-AA70-951FF78B94A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7B2557-821D-4E05-B5C3-67192573D97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187F699A-AF2F-42B0-B855-27413140C384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0B905E-4D92-4FD6-B2FF-41FF1F59A948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EDEC28-661E-42EF-88F0-F62D0220D2E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D2D24-8F63-46DE-AC5F-8DE33332EBC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B825E6-5929-4890-BDBA-4CF4BD2314C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65020120-491D-46CD-8C73-974B6F4C11E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F35C623-6043-43A6-BBAA-478E185480CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83E34F4-F4DD-49CC-9C95-93F9D4D26B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8F50DB-3A80-4D89-9F7B-86766D37338B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFC70A2-87BC-4898-BCF3-57F7B1DD5F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8DA556-ABF3-48D0-95B8-E57DBE1B5A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B53828-C520-4845-9C14-6C7D50EAA3A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F23DB7-6F8E-470A-9B43-0ACEEF331C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623BF701-ADC9-4F24-93C5-043A6A7FEF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FBD681F-7969-42BE-A47E-7C287755DCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98255E6F-3056-487D-9157-403836EFB9D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9C585C-A6EC-4385-B915-046C110BF95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC2EE60-4A07-4D92-B9BC-BF07CF4F2BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DBE4ED-1CD8-4134-9B33-17A91F44F17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961F8312-31B9-44E7-8858-EF8E2134F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D62EE1B-9A59-406C-B7DF-91B495F3ECFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79CF8D4E-F82A-469C-A8C2-0C203A800A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F9A8BD-75C5-4237-8B2C-027298300D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.8c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A66EAAF-6964-49C3-A5DC-5940826F824A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FCB9440-F470-45D1-AAFA-01FB5D76B600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B736F09-3B51-4B2A-92F6-602847001F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E864BB1-FD23-4AB3-9138-5FD8B62EAF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838D6C2D-C131-4A9C-AAE5-5BF38E637E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4D4659-A304-459F-8AB3-ED6D84B44C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F95D7-E49F-4B36-8F47-823C0298449E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21B3881-37E9-4C00-9336-12C9C28D1B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B270A04-9961-4E99-806B-441CD674AFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DD2403-113B-4100-8BD4-90E1927E6648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF73937-BCE2-4BEF-B4B0-83212DA4A6C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DDB1E60-C2A9-4570-BE80-F3D478A53738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B2902D8-3A7B-4C47-9BC6-8CA4C580A346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6B707B-4543-41F1-83DF-49A93BF56FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8F611B-D347-4A21-90E6-56CF4D8A35A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A92CE4-B4B0-4C14-AE11-8DFE511406F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274E3E6F-4280-4EAE-B102-1BE57FE1F1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B0720-8CA7-43BA-9708-5CE9EC7A565A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4BE7166-DBD3-4CE6-A14A-725FE896B85E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE62C4B-7C06-4907-BADE-416C1618D2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.6.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C60DF3F-DBD9-4BBF-812E-4BB0C47BDF3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D19D8C-FACF-49B4-BA99-CC3A3FDADAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B78942C-BEE1-4D18-9075-8E1D991BF621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.6.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B306D35-4A13-4D23-8EC2-D000E8ADCDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38B87B17-C653-40AC-8AE4-066BB1123C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.7.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9012A66E-82C4-4ACF-A4BB-37EC54B87B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "849C6FF1-F7C0-4021-BCA2-A791C87E4F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7592C7E3-3735-425F-A276-9EE03224CD5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1103BE75-EB64-4A9A-801E-EDE6A1F861F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:cisco:catalyst_8000v_edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF365FC4-46E3-4564-9F25-1C2FBE70057B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:cisco:cloud_services_router_1000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237136F5-5A1B-4033-8B7C-CDAD66AF25DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4856E07-B3C2-4674-9584-866F6AF643B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g\\/6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F668B9-2C1D-4306-8286-35E67D0F67C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77CD6A-83DA-4F31-A128-AD6DAECD623B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68B363-3C57-4E95-8B13-0F9B59D551F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80890A8-E3D3-462C-B125-9E9BC6525B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0547E196-5991-4C33-823A-342542E9DFD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802CBFC1-8A2F-4BF7-A1D3-00622C33BE16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F374DC-B9F7-4515-A064-01BB436CA984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D916389F-54DB-44CB-91DD-7CE3C7059350"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9421DBEF-AE42-4234-B49F-FCC34B804D7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419CB9F-241F-4431-914F-2659BE27BEA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5720462A-BE6B-4E84-A1A1-01E80BBA86AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818CEFA6-208C-43C3-8E43-474A93ADCF21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B60888-6E2B-494E-AC65-83337661EE7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c8200-1n-4t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF17101-9EF9-47BB-B966-0FA9B71AEEFA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c8200l-1n-4t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2F0C218-B0FF-4BEC-B76F-1F4BAA6D0960"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c8500l-8s4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2038BF-DC77-4326-B80C-FC3384FED25E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7E8914-7B25-4097-8B22-6928C1F03D5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B207857B-C483-47DF-9FC7-6A05B866BF60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD26746A-80D1-4C48-BF77-E9F7EEEF7EA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB16CCE-1E89-4707-86C1-97F2FB5B62B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipv4-vfr-dos-CXxtFacb",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipv4-vfr-dos-CXxtFacb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20029",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:13.940",
      "lastModified" : "2024-11-21T07:40:23.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attacker could exploit this vulnerability by modifying the Meraki registration parameters. A successful exploit could allow the attacker to elevate privileges to root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38B87B17-C653-40AC-8AE4-066BB1123C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7592C7E3-3735-425F-A276-9EE03224CD5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4A5C56-0D08-4423-AEBD-33EDF172FCF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200cx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7670A322-31C2-4A8A-86E9-09D63C52E4C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6376BE-3A69-469C-B6A9-2EFB55A3B87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0972076B-5C87-44B3-90EC-4C200B89318A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3765B3DB-8B1B-46EF-AF7D-ED1EB2079C3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AED057-2458-4DE0-8D51-ABD766D07F68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19538C03-5FB8-4401-8B21-489C629D7E7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B26D7061-F471-4DF0-A892-ED132958B84A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033ED443-80E7-4012-9825-07AAC0D44B96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F3CC6-A349-47B1-B282-B6458683C191"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB24EF21-1C10-48A7-BC68-FFC842A28D12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0625A2-BF14-4552-83D8-AEE0A04EA023"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0D6ED6-AE64-4E20-B9CD-3EAA22709CFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AFDC0D-7629-424E-827B-C8A8767324C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A263CFF2-A659-405B-90EA-51E49B25C6D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFBD449-217D-4569-99F7-D56B853A3E07"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED668FC-D1A5-4175-A234-23760BA6E788"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D650C48-9241-42F7-87A9-20733329489A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED16A65-9AFF-4825-95D1-162FBA0F566D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D345E7-8208-41AC-B11A-4425D29E98A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E386D461-F1C1-4970-B056-D6119E74D449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F3A466-F665-4132-ABC4-2DFC0A7E2B55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3395168-FF2E-4CB6-AABE-5E36DEB241CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F525CBC-1CE6-4CAB-B1C1-DFA7EA462EF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226F985C-4669-4D0A-9DB4-CB1465B37B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B736A43-6F4E-40A9-84E4-D9E251489234"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FF888F-46F5-4A79-BB88-BB2EC2D27E24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26437DA7-2EFE-4CA2-8DB0-9FECBEFAE4EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99CA124-7D86-463B-A31E-A7836B7493E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E014B028-8DD9-428C-B705-8F428F145932"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C44229-A842-49B2-AD3E-79C83DB63EBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D56D21F-0F55-4AB1-AB9B-8EAE08F4BEDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C0441D-A7AC-4B4E-970A-3A441C2F66B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5306E847-C718-4C83-9C97-8AB498DC4A88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18287CEF-B574-4498-A256-567CA6E6CA7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9AAA2C-495E-4FD1-9050-264FDC25254B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713043E-2535-4540-B3EF-41FAC40BECE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0C18E5-45B9-49D2-A4AB-DD8D5CB04C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67701D77-8B03-446A-AE22-4B8CCCD6F029"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0BEAE3-2056-4B7B-8D7C-AEE3DC86CC2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831A2390-7170-4FC0-A95E-3DAB1791017D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788CBC4-782F-4A43-AC80-4AEF1C43A22D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493989DC-8F1B-45C9-AD11-38B97B958C9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l_stack:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419ABFB5-2C27-4EBE-98EF-8A8B718CD1F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300lm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DBB2E-DB15-47E1-B8F2-3AC0B1197C5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F168FB20-0C44-4A5B-910A-04B9517545C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-priv-esc-sABD8hcU",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-priv-esc-sABD8hcU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20035",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:14.030",
      "lastModified" : "2024-11-21T07:40:24.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges. This vulnerability is due to insufficient input validation by the system CLI. An attacker with privileges to run commands could exploit this vulnerability by first authenticating to an affected device using either local terminal access or a management shell interface and then submitting crafted input to the system CLI. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges. An attacker with limited user privileges could use this vulnerability to gain complete control over the system. Note: For additional information about specific impacts, see the Details section of this advisory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-146"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe_sd-wan:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16266B9E-E613-45FA-A02B-51EED8BEFCC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:cisco:catalyst_8000v_edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF365FC4-46E3-4564-9F25-1C2FBE70057B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g\\/6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F668B9-2C1D-4306-8286-35E67D0F67C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80890A8-E3D3-462C-B125-9E9BC6525B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F374DC-B9F7-4515-A064-01BB436CA984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D916389F-54DB-44CB-91DD-7CE3C7059350"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9421DBEF-AE42-4234-B49F-FCC34B804D7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419CB9F-241F-4431-914F-2659BE27BEA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5720462A-BE6B-4E84-A1A1-01E80BBA86AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818CEFA6-208C-43C3-8E43-474A93ADCF21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82225D40-537F-41D2-B1C4-1B7D06466B06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B60888-6E2B-494E-AC65-83337661EE7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C913FF-63D5-43FB-8B39-598EF436BA5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2794BD-C8CE-46EF-9857-1723FCF04E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7401B7-094C-46EB-9869-2F0372E8B26B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1009-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8A72FD-D8B0-45B5-8FAD-6D8395BB218A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9EABE0-5FB0-4277-A389-87732E750B7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BBF8E8-7AD9-46B8-8B02-F0DB1F95E1CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7E8914-7B25-4097-8B22-6928C1F03D5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B207857B-C483-47DF-9FC7-6A05B866BF60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD26746A-80D1-4C48-BF77-E9F7EEEF7EA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB16CCE-1E89-4707-86C1-97F2FB5B62B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A82CE19-C3C4-4FAD-A1B3-AB91EDB61591"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500-4qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DBA393-232D-40E6-9CDB-DF82D2E7A5B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04AB61E9-0148-495E-BD21-64D52DE60A6C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D2C587-E95B-4E74-88CF-5930072258D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D1BB0B-0EFE-4C6D-A18E-3E48ABA01F00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74270062-2030-45A0-9C93-C1F3B7C88E8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F403859-F034-4DD9-9CA5-708EADECB380"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:csr_1000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8B0B49-2C99-410B-B011-5B821C5992FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-sdwan-VQAhEjYw",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-sdwan-VQAhEjYw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20055",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:14.127",
      "lastModified" : "2025-07-23T15:26:38.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privileges in the context of the web-based management interface on an affected device. This vulnerability is due to the unintended exposure of sensitive information. An attacker could exploit this vulnerability by inspecting the responses from the API. Under certain circumstances, a successful exploit could allow the attacker to access the API with the privileges of a higher-level user account. To successfully exploit this vulnerability, the attacker would need at least valid Observer credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la API de administración de Cisco DNA Center podría permitir que un atacante remoto autenticado eleve privilegios en el contexto de la interfaz de administración web de un dispositivo afectado. Esta vulnerabilidad se debe a la exposición involuntaria de información confidencial. Un atacante podría explotar esta vulnerabilidad inspeccionando las respuestas de la API. En determinadas circunstancias, una explotación exitosa podría permitir al atacante acceder a la API con los privilegios de una cuenta de usuario de nivel superior. Para explotar esta vulnerabilidad, el atacante necesitaría al menos credenciales de observador válidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.3.6",
            "matchCriteriaId" : "1BE4616D-A0C4-4E43-B300-4A689EBC7FA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_center:2.3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80114D6D-ADCA-48F6-B22E-1D5FBDB9BA68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-privesc-QFXe74RS",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-privesc-QFXe74RS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20056",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:14.220",
      "lastModified" : "2024-11-21T07:40:27.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to cause an affected device to reload spontaneously, resulting in a DoS condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.10.183.0",
            "matchCriteriaId" : "D9EA7E3F-2EA0-4B32-BCA0-0E88FC9E4F9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09051BC5-CFE7-43EF-975D-BF77724E8776"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:aironet_access_point_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.9.0.135",
            "matchCriteriaId" : "386B92C5-05F3-40A8-8F35-280DD9E84169"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BFEED4-7AD7-406F-A044-BDEA98133711"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1542d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DB7510-2741-464A-8FC9-8419985E330F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1542i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AE916B2-CAAD-4508-A47E-A7D4D88B077A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8191FD87-4E55-4F38-8DB0-7E6772AD075B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1562d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D717945-EE41-4D0F-86EF-90826EBE9C3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1562e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EAEA92-6589-4DFB-BC4B-8CBA425452D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1562i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27AB201-342D-4517-9E05-6088598F4695"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F4C00A-D1E2-4B21-A14E-F30B4B818493"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC836B4D-A489-4300-B0A2-EF0B6E01E623"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F923CF-D4EB-48F8-821D-8BB3A69ABB62"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1810w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D613A17-FFA9-4FF0-9C2A-AF8ACD59B765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1815:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BF9DDB-884D-47B5-A295-8BFA5207C412"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1815i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207DC80E-499C-4CA3-8A88-F027DBC64CCF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1815m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E3225A6-DA3C-49FE-B0F8-8AC6B7DA3347"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1815t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1D6F32-3F51-4C5B-97AF-1AD8917FCB07"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1815w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09FEE6E-8169-4E90-ACF6-88BEE747D7A8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C28A6B0-10FF-4C6D-8527-2313E163C98E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098A82FF-95F7-416A-BADD-C57CE81ACD32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D5813-9223-4B3F-9DE2-F3EF854FC927"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7636F7E2-E386-4F8C-A0C5-F510D8E21DA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D7583E-2B61-40F1-B9A6-701DA08F8CDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945DDBE7-6233-416B-9BEE-7029F047E298"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED89428-750C-4C26-B2A1-E3D63F8B3F44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D8A4CB-5B80-4332-BCBC-DA18AD94D215"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749040C6-A21A-4EF3-8213-42EE01CFA303"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9105:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3CCCFE-88CC-4F7B-8958-79CA62516EA9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9105ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76DACE3-7D3B-4FE6-8567-0C9D43FF7A7E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9105axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F93DF4-67DB-4B30-AC22-60C67DF32DB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9105axw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C77B06-3C22-4092-AAAB-DB099A0B16A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9115:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4081C532-3B10-4FBF-BB22-5BA17BC6FCF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9115_ap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A3430C-9AF7-4604-AD95-FCF2989E9EB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9115ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E2B891-4F41-4D0D-BAA2-0256C0565BDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9115axe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE4C56A6-E843-498A-A17B-D3D1B01E70E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9115axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F050F416-44C3-474C-9002-321A33F288D6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9117:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCE2220-E2E6-4A17-9F0A-2C927FAB4AA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9117_ap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AE36E2-E7E9-4E49-8BFF-615DACFC65C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9117ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8798F4-35BB-4F81-9385-B0274BFAAF15"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9117axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A699C5C-CD03-4263-952F-5074B470F20E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47C2D6F-8F90-4D74-AFE1-EAE954021F46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120_ap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04889F8-3C2A-41AA-9DC9-5A4A4BBE60E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5889AFA2-752E-4EDD-A837-5C003025B25C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120axe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D41CFE-784B-40EE-9431-8097428E5892"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D148A27-85B6-4883-96B5-343C8D32F23B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120axp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "735CA950-672C-4787-8910-48AD07868FDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9124:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11EF240-7599-4138-B7A7-17E4479F5B83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9124ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53852300-C1D2-4F84-B8DA-4EDBCB374075"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9124axd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E987C945-4D6D-4BE5-B6F0-784B7E821D11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9124axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B434C6D7-F583-4D2B-9275-38A5EC4ECC30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C8E35A-5A9B-4D56-A753-937D5CFB5B19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9130_ap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248A3FFC-C33C-4336-A37C-67B6046556E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9130ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CADEB5A-5147-4420-A825-BAB07BD60AA2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9130axe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC1F736-6240-4FA2-9FEC-D8798C9D287C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9130axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169E5354-07EA-4639-AB4B-20D2B9DE784C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_iw6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C559D6F7-B432-4A2A-BE0E-9697CC412C70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_iw6300_ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23153AA4-B169-4421-BFF8-873205FC9C21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_iw6300_dc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67DC3B71-B64D-4C49-B089-B274FA34ECB6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_iw6300_dcw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F857465-314F-4124-9835-8A269486D654"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.12.8",
            "matchCriteriaId" : "810472FD-52DE-4694-98FA-1AD858BEC895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1",
            "versionEndExcluding" : "17.3.6",
            "matchCriteriaId" : "55C1CD64-ADE0-453F-9E0B-EA952F743892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.4",
            "versionEndExcluding" : "17.6.5",
            "matchCriteriaId" : "612EB810-AB85-49D4-BB5C-C03E2B1A0B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.7",
            "versionEndExcluding" : "17.9.2",
            "matchCriteriaId" : "8F4C5572-9D7D-405C-AF93-DF9FF07F92F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-cli-dos-tc2EKEpu",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-cli-dos-tc2EKEpu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20059",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:14.303",
      "lastModified" : "2025-07-23T15:26:38.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Center could allow an authenticated, remote attacker to view sensitive information in clear text. The attacker must have valid low-privileged user credentials. This vulnerability is due to improper role-based access control (RBAC) with the integration of PnP. An attacker could exploit this vulnerability by authenticating to the device and sending a query to an internal API. A successful exploit could allow the attacker to view sensitive information in clear text, which could include configuration files."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación del agente Cisco Network Plug-and-Play (PnP) de Cisco DNA Center podría permitir que un atacante remoto autenticado acceda a información confidencial en texto plano. El atacante debe tener credenciales de usuario válidas con privilegios bajos. Esta vulnerabilidad se debe a un control de acceso basado en roles (RBAC) inadecuado con la integración de PnP. Un atacante podría explotar esta vulnerabilidad autenticándose en el dispositivo y enviando una consulta a una API interna. Una explotación exitosa podría permitir al atacante acceder a información confidencial en texto plano, que podría incluir archivos de configuración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-555"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.3.7",
            "matchCriteriaId" : "A043AAF2-566B-4124-BEEF-C5522606B9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.4.0",
            "versionEndExcluding" : "2.3.5.0",
            "matchCriteriaId" : "8D5FAB09-904E-409A-BB91-92211144CABE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-infodisc-pe7zAbdR",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-infodisc-pe7zAbdR",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20065",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:14.393",
      "lastModified" : "2024-11-21T07:40:28.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. \r\n\r This vulnerability is due to insufficient restrictions on the hosted application. An attacker could exploit this vulnerability by logging in to and then escaping the Cisco IOx application container. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B78942C-BEE1-4D18-9075-8E1D991BF621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F313F2EC-F3D6-4639-934C-402DDA3DA806"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4856E07-B3C2-4674-9584-866F6AF643B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77CD6A-83DA-4F31-A128-AD6DAECD623B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68B363-3C57-4E95-8B13-0F9B59D551F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80890A8-E3D3-462C-B125-9E9BC6525B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0547E196-5991-4C33-823A-342542E9DFD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802CBFC1-8A2F-4BF7-A1D3-00622C33BE16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F374DC-B9F7-4515-A064-01BB436CA984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D916389F-54DB-44CB-91DD-7CE3C7059350"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE82335E-ECEC-47BD-BC4A-5FDEA08D1A18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9421DBEF-AE42-4234-B49F-FCC34B804D7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419CB9F-241F-4431-914F-2659BE27BEA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5720462A-BE6B-4E84-A1A1-01E80BBA86AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818CEFA6-208C-43C3-8E43-474A93ADCF21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82225D40-537F-41D2-B1C4-1B7D06466B06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B60888-6E2B-494E-AC65-83337661EE7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8101-32fh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E055F58F-F9FB-4B27-841E-61ECAB5F42B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8101-32h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B832863-E366-46ED-BC35-838762F0CE29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8102-64h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3DDAC-7D0F-4D1D-9632-F001F2EB5D34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8E7FFF-82A8-4ECB-BA0C-CBF0C2FDA3A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201-32fh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528BE0D3-E5ED-4836-B0D8-0C8508C5BDD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC4C2F-01C5-4D89-8D79-E5D28EDAD0F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_12-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4318C0-0FD0-46B3-8E23-94EC53A34A20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_18-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FC6220-78E1-44A6-A596-6368D3EF7CC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_4-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAEDE0A-E6F9-4727-8DC2-F47579220BE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_8-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E289FAD-04F0-4E3A-BC4D-8E5116F01AF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8804:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6655851F-58D9-49D9-A56E-8440A7F7BB45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E2AE67-DED3-4414-A194-386ADB2C8DC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3920133A-684D-4A9F-B65A-FF4EAE5052E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED06361-5A68-4656-AEA5-240C290594CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8831:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2514A1-486C-40F7-8746-56E2B973CBE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C3816C-95F4-443C-9C79-72F0251528F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1810C73-93B8-4EB5-85FC-3585AD5256BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2BC76E-A166-4E71-B058-F49FF84A9E19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542244A0-300C-4630-812A-BF45F61E38DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91209C16-A620-44A0-9134-8AA456343F29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5C1005-0C12-4EDA-BC4A-B52201C4F516"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp100-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917B52DF-4210-4DD6-97EF-8A033497A954"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp200-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F413FB-D4F9-4113-9D67-2956BF1DC30D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7C321E-F083-4AB6-96A0-D6358980441E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7594E307-AC80-41EC-AE94-07E664A7D701"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33208B25-0CBB-4E31-A892-60B7B5625155"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C913FF-63D5-43FB-8B39-598EF436BA5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241EEBD9-76E4-4AE6-96B8-1C1ACD834F17"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4376E56-A21C-4642-A85D-439C8E21CD7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2794BD-C8CE-46EF-9857-1723FCF04E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC03A84F-C8F2-4225-9A00-8FA35368CD57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444F688F-79D0-4F22-B530-7BD520080B8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F2A755-556C-4C5E-8622-96D124319AF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD2272-10C2-43B9-9F13-6DC41DBE179B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7428E0A8-1641-47FB-9CA9-34311DEF660D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7401B7-094C-46EB-9869-2F0372E8B26B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1009-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8A72FD-D8B0-45B5-8FAD-6D8395BB218A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854D9594-FE84-4E7B-BA21-A3287F2DC302"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1023:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81CC6E3-B989-4730-820E-46734E3E608D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA873342-542E-4FC8-9C22-B5A43F9F3E9D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEF8271-315F-4756-931F-015F790BE693"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71BD158E-71D8-4DCA-8C09-F8AB7EF0EBDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000v:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B6AF64-42FF-4411-85EA-9AE537383CD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324C97E6-1810-404F-9F45-6240F99FF039"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EB55BB-41B7-40A1-B6F5-142FE8AB4C16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-12c-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6279A69-2F9D-4CD9-9C19-62E701C3C4F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-12c-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46BB1E3-D813-4C19-81FA-96B8EF3E2F7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-4c-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E9CCC6-CA54-44C4-9A41-D2CA3A25BE8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-4c-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4E0CC8-9C67-4EB0-97A1-BAEFC6E9708A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-f-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB1A95C-8513-4CC7-8CDF-012B212FF02F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE761B1C-D749-4E1B-9A4A-7F41D1DF9C8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-fs-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B64B28-7F3F-40BC-B289-0D1DB55B6461"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-fs-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5603296-34B3-4EEB-B242-C44BC56BFBB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-ft-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2A515C-797D-47EE-8051-F3FBE417BCE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E673A75F-EFF8-4591-8E0F-A21083563DBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433F4A82-04A4-4EAA-8C19-F7581DCD8D29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-2sg-f-ah:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5456C70-6BA4-456A-BCFA-06FD052E44EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-2sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "515CD97F-DDBD-4F75-A6DB-646890A30B32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-3sg-f-ah:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E181FC9-6790-4C12-874F-67252B6879BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-3sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD4F12D-3F97-44D2-9DE2-571425E75F4E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-4sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1288DB-5946-4091-A6E8-42E0A0E7B2B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70352B04-C3FD-47F5-A2F8-691CF63EB50D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_902u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE063AF2-5579-4D7E-8829-9102FC7CB994"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_903:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51938C0A-AFDB-4B12-BB64-9C67FC0C738F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_907:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18E4A46-10D3-48F8-9E92-377ACA447257"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_914:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D5E61B-9F17-4C56-A1BB-3EE08CB62C53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-10sz-pd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE110B5-CC6E-4103-9983-4195BCC28165"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-10sz-pd_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97DDC45-ABD1-4C8F-A249-0865345637A4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE4D129-435B-45DD-838D-4017BD94DF93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-a_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "456C68A8-F3C8-4302-B55A-134979B42045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870D5B63-A1D5-442A-B2B9-9E522E5DB08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-d_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C6733C-F77B-4688-B051-C1557F4D8D41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD45D77-4097-4AFB-98DF-5B8188316C20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12sz-im_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489F97AB-5C6D-4AFE-BE5A-ABF7F9ED8B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064DB97B-9E52-45BC-9F43-8FCB5570FC7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-im_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31608C12-FBED-4EAD-96EC-48BC4B356B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D989205A-0576-415C-935E-E83AD42FD1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-m_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D21D9A5-DE8F-4C55-B03F-35C04C270A40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24tz-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C3EB40-574A-48F7-A679-90F62ED976B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24tz-m_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CC6206-DF19-4636-84C2-8912E443D122"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85489F69-EAF0-4971-8C93-36838A8AA00E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-a_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95FEC1-12F3-44FC-B922-CD18CADB42FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D029B0C-2DAE-491A-90B4-79C093EC9E48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-d_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE37BC85-7758-4412-A5E6-0F1A19E8776B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920u-12sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA179D79-07E7-4721-85BB-0C740B516B1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9901:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5E60AB-94FF-448A-89D8-5D2197E21C74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91474DBC-FB31-4DDF-96C5-311FA1D53A74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9903:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA241214-2F05-4360-9B50-385355E29CF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9904:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93212A4-50AB-42E7-89A4-5FBBAEA050C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9906:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA53A61-98B3-458C-8893-61CD7D6B1E48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F396564E-B477-4A27-A189-CEB737552E25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9912:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5445CC54-ACFB-4070-AF26-F91FEAA85181"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E7ED87-8AC0-4107-A7A5-F334236E2906"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7AA58E5-D7E1-48CF-93FF-C60EB85B2BC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005F5347-A5E6-4954-ACAB-E4DF29119724"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2A8413-DF92-4690-8BC1-A21001BDF76B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12s-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882B8D8F-E154-45C3-BB47-5353167C9776"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12x48u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F7FAA3-003D-4BEE-99CC-C9F75D5293FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54B4EB4-EB41-4522-B7AB-C30F96099EA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD7BE51-0BA6-4750-B274-A6E33D32B484"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-16xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B6123E-B86F-4EC8-95D6-4CE47A7D0AC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-16xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2305B8A-B8F2-4AF4-A86A-EFF11541D62D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C3EF8E-DF88-46DC-8E06-B009F346D1D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E87F823-D924-4718-AD81-248A6C619531"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA01B5E-9E7B-4EE6-9480-A82B753BBB82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24pw-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAC93E0-F982-4E37-866E-43B7BC5AC82E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC866C9-BB98-4320-9FFA-F0960C560DA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24s-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FB0F3E-BB66-47BB-A59F-2D4C123F9CBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AD7495-3DA2-4596-9620-CD36D7C561AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492F3F8-4188-41E4-9A84-5E30C4AC3378"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "718F2FDC-9EA4-4C4C-8821-B15E56AF8101"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5CB558-BD42-4615-BC31-41CCF25DE5C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC04072A-9BBE-4A9D-AE39-054D93E0C6D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45BCCD0-65BB-431F-B448-221C1595CD92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33BA722-0680-4074-8D03-41657F8CDCC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C46B4-5E9F-4DD8-861B-00BA43923306"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431570C7-74A1-4F7E-8FD0-690AEF0F823B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D22E15-E1E8-4115-A55F-5743CA9C5947"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F840171D-CA1C-4E25-BD41-6B871C47BB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B240B20-CF48-4A72-9653-9D04D59C1391"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D6AC73-67C9-4FA2-A361-FF08B0E3AF47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58430463-EA77-4DC9-ACDE-4DCF92CA2FC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-32xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CCD143-3D6E-4880-B275-ECF5B04238C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-32xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D3784F-C572-4A6F-83B9-BCF64D339BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C466B-CE87-4A57-B40B-88C94BAAF36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D58FF034-8E07-4518-A858-5F16F22217E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376AD386-373D-4B24-966F-D11F76C9020F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2280CAA3-03F6-4168-8E50-A6B7132A3B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0C1174-C789-4547-9899-F7FCD0905F92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC366801-655A-403B-ACD9-3BB43802A3C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48pw-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF5463D0-A8D3-43EC-8CFF-F659A8C84436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD50BB2-BFD8-42F2-8C23-0D95187B01F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D4D7E4-B195-46D8-8A6B-6AA4B8357618"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39600E51-4A21-4E5B-9FF9-E7C00AE86646"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E4D5A8-7E4A-44C5-81DC-84712781206D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D6D50-D0FA-4527-BED3-52560DDD5253"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965BF315-D833-4711-97FC-512151113367"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0ADEBE-3DA2-4850-8115-0AC937FB0A94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E9B149-AA2B-4421-8CC3-5A4B32B7AADF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04072C0F-78A2-4D10-87B2-52DC2537BA89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-f-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5C080E-D5C4-47B2-A46C-4EB3051C5221"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CEBEE0-DA67-4EE5-9BCF-263843053A8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD262F58-C47F-439E-A9FF-D1C60120D306"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-nm-2-40g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35490BDE-DF21-495E-9F8A-7631FCB32A1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-nm-8-10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EFB5B8-4A38-48C5-A363-3C7F7763C1D5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9EABE0-5FB0-4277-A389-87732E750B7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BBF8E8-7AD9-46B8-8B02-F0DB1F95E1CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7E8914-7B25-4097-8B22-6928C1F03D5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B207857B-C483-47DF-9FC7-6A05B866BF60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD26746A-80D1-4C48-BF77-E9F7EEEF7EA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB16CCE-1E89-4707-86C1-97F2FB5B62B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A82CE19-C3C4-4FAD-A1B3-AB91EDB61591"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500-4qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DBA393-232D-40E6-9CDB-DF82D2E7A5B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04AB61E9-0148-495E-BD21-64D52DE60A6C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D2C587-E95B-4E74-88CF-5930072258D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D1BB0B-0EFE-4C6D-A18E-3E48ABA01F00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74270062-2030-45A0-9C93-C1F3B7C88E8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F403859-F034-4DD9-9CA5-708EADECB380"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4A5C56-0D08-4423-AEBD-33EDF172FCF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200cx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7670A322-31C2-4A8A-86E9-09D63C52E4C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6376BE-3A69-469C-B6A9-2EFB55A3B87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0972076B-5C87-44B3-90EC-4C200B89318A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3765B3DB-8B1B-46EF-AF7D-ED1EB2079C3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AED057-2458-4DE0-8D51-ABD766D07F68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19538C03-5FB8-4401-8B21-489C629D7E7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B26D7061-F471-4DF0-A892-ED132958B84A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033ED443-80E7-4012-9825-07AAC0D44B96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F3CC6-A349-47B1-B282-B6458683C191"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB24EF21-1C10-48A7-BC68-FFC842A28D12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0625A2-BF14-4552-83D8-AEE0A04EA023"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0D6ED6-AE64-4E20-B9CD-3EAA22709CFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AFDC0D-7629-424E-827B-C8A8767324C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A263CFF2-A659-405B-90EA-51E49B25C6D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFBD449-217D-4569-99F7-D56B853A3E07"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED668FC-D1A5-4175-A234-23760BA6E788"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D650C48-9241-42F7-87A9-20733329489A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED16A65-9AFF-4825-95D1-162FBA0F566D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D345E7-8208-41AC-B11A-4425D29E98A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E386D461-F1C1-4970-B056-D6119E74D449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F3A466-F665-4132-ABC4-2DFC0A7E2B55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3395168-FF2E-4CB6-AABE-5E36DEB241CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F525CBC-1CE6-4CAB-B1C1-DFA7EA462EF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226F985C-4669-4D0A-9DB4-CB1465B37B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B736A43-6F4E-40A9-84E4-D9E251489234"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FF888F-46F5-4A79-BB88-BB2EC2D27E24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26437DA7-2EFE-4CA2-8DB0-9FECBEFAE4EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99CA124-7D86-463B-A31E-A7836B7493E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E014B028-8DD9-428C-B705-8F428F145932"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C44229-A842-49B2-AD3E-79C83DB63EBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D56D21F-0F55-4AB1-AB9B-8EAE08F4BEDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C0441D-A7AC-4B4E-970A-3A441C2F66B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5306E847-C718-4C83-9C97-8AB498DC4A88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18287CEF-B574-4498-A256-567CA6E6CA7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9AAA2C-495E-4FD1-9050-264FDC25254B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713043E-2535-4540-B3EF-41FAC40BECE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0C18E5-45B9-49D2-A4AB-DD8D5CB04C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67701D77-8B03-446A-AE22-4B8CCCD6F029"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0BEAE3-2056-4B7B-8D7C-AEE3DC86CC2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831A2390-7170-4FC0-A95E-3DAB1791017D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788CBC4-782F-4A43-AC80-4AEF1C43A22D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493989DC-8F1B-45C9-AD11-38B97B958C9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l_stack:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419ABFB5-2C27-4EBE-98EF-8A8B718CD1F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300lm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DBB2E-DB15-47E1-B8F2-3AC0B1197C5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F168FB20-0C44-4A5B-910A-04B9517545C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737F22AB-C5A9-4A18-BA3D-38A222491397"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9400_supervisor_engine-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5DCFD5-2B46-4D06-9E4C-B2325F440F02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9407r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5508320-8318-41A8-8026-4A61907C1CD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9410r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD337D8-8C72-4025-A8C3-E63598DE7BDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176ACF88-6112-4179-8492-50C50577B300"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9500h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07FC868-0B38-4F24-BA40-87966FF80AB7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C19A801D-02D7-40B0-88E8-FE7BA8630E60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600_supervisor_engine-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA59279-3504-417D-9E86-E5886EE198BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4035136-CC10-4DDD-92AF-9DC41D19CF8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48E6CF0-7A3B-4D11-8D02-0CD38F2420E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9ED0E5-CB20-4106-9CF2-8EB587B33543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-40_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E283C34-43AE-49A5-A72B-32DEA185ABD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B0E620C-8E09-4F7C-A326-26013173B993"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-80_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB3AF13-5324-42CD-8EDB-6F730BF46214"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF93F1C8-669F-4ECB-8D81-ECDA7B550175"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0BA345-B7D7-4975-9199-4DC7875BBFD0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9EA95F-4E39-4D9C-8A84-D1F6014A4A40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0BC769-C244-41BD-BE80-E67F4E1CDDA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800_embedded_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78706517-83F4-4D44-A6EC-B78ADCEABAC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EACA55A5-4E73-4187-96BE-08E04F2C7659"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3200_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86879AC0-890E-42F4-9561-6851F38FE0AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E31CB8F-60FF-4D03-BE8C-824ECE967797"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3300_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19017B10-F630-42CD-ACD2-E817FEF0E7F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8E319D-5AE5-4074-9DAF-4B65F3B3CEE5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3400_heavy_duty_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A41A34-58D2-4DBC-ABC9-20A62BC8A838"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3400_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CCC02-113E-4EA1-B0CA-9FDF1108BB71"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF0025D-8DE1-437D-9A4E-72C3AC6B46CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cbr-8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB77D0EC-A448-4D97-8EB0-EA4956549A52"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cg418-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C054973-91D8-439F-960F-02BF12A50632"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cg522-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79252E00-2D94-44AA-8601-E4AB4EA38A76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esr6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D19136-4ECB-437F-BA8A-E2FE35A39BF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-24t-con-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C98B90-69B3-4BDF-A569-4C102498BFAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-24t-con-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7646B0A1-FDF5-4A60-A451-E84CE355302E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-24t-ncp-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA889066-14A8-4D88-9EFF-582FE1E65108"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-24t-ncp-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0C09AE-CD2A-486A-82D4-2F26AA6B6B95"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-con-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF81CC0-AEED-42DE-B423-8F4E118680BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-con-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDAAFDF1-7A3C-475F-AE82-B3194939D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-ncp-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9566FC8C-0357-4780-976F-8A68E6A7D24A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-ncp-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07503D21-965B-49F0-B8F2-B5ECD656F277"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess9300-10x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880B8176-B30D-443E-B5F1-1769B65978C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:integrated_services_virtual_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5361C70A-C036-4254-9698-BC58F48C465B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-priv-escalate-Xg8zkyPk",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-priv-escalate-Xg8zkyPk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20066",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:14.547",
      "lastModified" : "2024-11-21T07:40:28.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform a directory traversal and access resources that are outside the filesystem mountpoint of the web UI. This vulnerability is due to an insufficient security configuration. An attacker could exploit this vulnerability by sending a crafted request to the web UI. A successful exploit could allow the attacker to gain read access to files that are outside the filesystem mountpoint of the web UI. Note: These files are located on a restricted filesystem that is maintained for the web UI. There is no ability to write to any files on this filesystem."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B270A04-9961-4E99-806B-441CD674AFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D19D8C-FACF-49B4-BA99-CC3A3FDADAFB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4856E07-B3C2-4674-9584-866F6AF643B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77CD6A-83DA-4F31-A128-AD6DAECD623B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68B363-3C57-4E95-8B13-0F9B59D551F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80890A8-E3D3-462C-B125-9E9BC6525B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0547E196-5991-4C33-823A-342542E9DFD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802CBFC1-8A2F-4BF7-A1D3-00622C33BE16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F374DC-B9F7-4515-A064-01BB436CA984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D916389F-54DB-44CB-91DD-7CE3C7059350"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE82335E-ECEC-47BD-BC4A-5FDEA08D1A18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9421DBEF-AE42-4234-B49F-FCC34B804D7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419CB9F-241F-4431-914F-2659BE27BEA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5720462A-BE6B-4E84-A1A1-01E80BBA86AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818CEFA6-208C-43C3-8E43-474A93ADCF21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82225D40-537F-41D2-B1C4-1B7D06466B06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B60888-6E2B-494E-AC65-83337661EE7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8101-32fh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E055F58F-F9FB-4B27-841E-61ECAB5F42B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8101-32h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B832863-E366-46ED-BC35-838762F0CE29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8102-64h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3DDAC-7D0F-4D1D-9632-F001F2EB5D34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8E7FFF-82A8-4ECB-BA0C-CBF0C2FDA3A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201-32fh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528BE0D3-E5ED-4836-B0D8-0C8508C5BDD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC4C2F-01C5-4D89-8D79-E5D28EDAD0F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_12-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4318C0-0FD0-46B3-8E23-94EC53A34A20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_18-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FC6220-78E1-44A6-A596-6368D3EF7CC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_4-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAEDE0A-E6F9-4727-8DC2-F47579220BE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_8-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E289FAD-04F0-4E3A-BC4D-8E5116F01AF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8804:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6655851F-58D9-49D9-A56E-8440A7F7BB45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E2AE67-DED3-4414-A194-386ADB2C8DC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3920133A-684D-4A9F-B65A-FF4EAE5052E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED06361-5A68-4656-AEA5-240C290594CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8831:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2514A1-486C-40F7-8746-56E2B973CBE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C3816C-95F4-443C-9C79-72F0251528F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1810C73-93B8-4EB5-85FC-3585AD5256BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE2BC76E-A166-4E71-B058-F49FF84A9E19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:9800-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542244A0-300C-4630-812A-BF45F61E38DD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91209C16-A620-44A0-9134-8AA456343F29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5C1005-0C12-4EDA-BC4A-B52201C4F516"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp100-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917B52DF-4210-4DD6-97EF-8A033497A954"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp200-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F413FB-D4F9-4113-9D67-2956BF1DC30D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7C321E-F083-4AB6-96A0-D6358980441E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7594E307-AC80-41EC-AE94-07E664A7D701"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33208B25-0CBB-4E31-A892-60B7B5625155"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C913FF-63D5-43FB-8B39-598EF436BA5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241EEBD9-76E4-4AE6-96B8-1C1ACD834F17"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4376E56-A21C-4642-A85D-439C8E21CD7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2794BD-C8CE-46EF-9857-1723FCF04E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC03A84F-C8F2-4225-9A00-8FA35368CD57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444F688F-79D0-4F22-B530-7BD520080B8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F2A755-556C-4C5E-8622-96D124319AF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD2272-10C2-43B9-9F13-6DC41DBE179B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7428E0A8-1641-47FB-9CA9-34311DEF660D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7401B7-094C-46EB-9869-2F0372E8B26B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1009-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8A72FD-D8B0-45B5-8FAD-6D8395BB218A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854D9594-FE84-4E7B-BA21-A3287F2DC302"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1023:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81CC6E3-B989-4730-820E-46734E3E608D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA873342-542E-4FC8-9C22-B5A43F9F3E9D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEF8271-315F-4756-931F-015F790BE693"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71BD158E-71D8-4DCA-8C09-F8AB7EF0EBDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000v:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B6AF64-42FF-4411-85EA-9AE537383CD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324C97E6-1810-404F-9F45-6240F99FF039"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EB55BB-41B7-40A1-B6F5-142FE8AB4C16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-12c-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6279A69-2F9D-4CD9-9C19-62E701C3C4F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-12c-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A46BB1E3-D813-4C19-81FA-96B8EF3E2F7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-4c-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E9CCC6-CA54-44C4-9A41-D2CA3A25BE8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-4c-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC4E0CC8-9C67-4EB0-97A1-BAEFC6E9708A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-f-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDB1A95C-8513-4CC7-8CDF-012B212FF02F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE761B1C-D749-4E1B-9A4A-7F41D1DF9C8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-fs-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B64B28-7F3F-40BC-B289-0D1DB55B6461"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-fs-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5603296-34B3-4EEB-B242-C44BC56BFBB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-ft-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2A515C-797D-47EE-8051-F3FBE417BCE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901-6cz-ft-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E673A75F-EFF8-4591-8E0F-A21083563DBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433F4A82-04A4-4EAA-8C19-F7581DCD8D29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-2sg-f-ah:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5456C70-6BA4-456A-BCFA-06FD052E44EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-2sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "515CD97F-DDBD-4F75-A6DB-646890A30B32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-3sg-f-ah:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E181FC9-6790-4C12-874F-67252B6879BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-3sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD4F12D-3F97-44D2-9DE2-571425E75F4E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_901s-4sg-f-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1288DB-5946-4091-A6E8-42E0A0E7B2B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70352B04-C3FD-47F5-A2F8-691CF63EB50D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_902u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE063AF2-5579-4D7E-8829-9102FC7CB994"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_903:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51938C0A-AFDB-4B12-BB64-9C67FC0C738F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_907:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18E4A46-10D3-48F8-9E92-377ACA447257"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_914:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67D5E61B-9F17-4C56-A1BB-3EE08CB62C53"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-10sz-pd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBE110B5-CC6E-4103-9983-4195BCC28165"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-10sz-pd_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B97DDC45-ABD1-4C8F-A249-0865345637A4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE4D129-435B-45DD-838D-4017BD94DF93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-a_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "456C68A8-F3C8-4302-B55A-134979B42045"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "870D5B63-A1D5-442A-B2B9-9E522E5DB08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12cz-d_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C6733C-F77B-4688-B051-C1557F4D8D41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD45D77-4097-4AFB-98DF-5B8188316C20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-12sz-im_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489F97AB-5C6D-4AFE-BE5A-ABF7F9ED8B66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064DB97B-9E52-45BC-9F43-8FCB5570FC7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-im_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31608C12-FBED-4EAD-96EC-48BC4B356B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D989205A-0576-415C-935E-E83AD42FD1CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24sz-m_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D21D9A5-DE8F-4C55-B03F-35C04C270A40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24tz-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C3EB40-574A-48F7-A679-90F62ED976B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-24tz-m_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6CC6206-DF19-4636-84C2-8912E443D122"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85489F69-EAF0-4971-8C93-36838A8AA00E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-a_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE95FEC1-12F3-44FC-B922-CD18CADB42FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D029B0C-2DAE-491A-90B4-79C093EC9E48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920-4sz-d_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE37BC85-7758-4412-A5E6-0F1A19E8776B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_920u-12sz-im:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA179D79-07E7-4721-85BB-0C740B516B1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9901:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5E60AB-94FF-448A-89D8-5D2197E21C74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91474DBC-FB31-4DDF-96C5-311FA1D53A74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9903:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA241214-2F05-4360-9B50-385355E29CF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9904:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93212A4-50AB-42E7-89A4-5FBBAEA050C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9906:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA53A61-98B3-458C-8893-61CD7D6B1E48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F396564E-B477-4A27-A189-CEB737552E25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9912:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5445CC54-ACFB-4070-AF26-F91FEAA85181"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E7ED87-8AC0-4107-A7A5-F334236E2906"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7AA58E5-D7E1-48CF-93FF-C60EB85B2BC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005F5347-A5E6-4954-ACAB-E4DF29119724"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2A8413-DF92-4690-8BC1-A21001BDF76B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12s-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882B8D8F-E154-45C3-BB47-5353167C9776"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12x48u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F7FAA3-003D-4BEE-99CC-C9F75D5293FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54B4EB4-EB41-4522-B7AB-C30F96099EA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD7BE51-0BA6-4750-B274-A6E33D32B484"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-16xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B6123E-B86F-4EC8-95D6-4CE47A7D0AC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-16xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2305B8A-B8F2-4AF4-A86A-EFF11541D62D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C3EF8E-DF88-46DC-8E06-B009F346D1D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E87F823-D924-4718-AD81-248A6C619531"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA01B5E-9E7B-4EE6-9480-A82B753BBB82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24pw-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAC93E0-F982-4E37-866E-43B7BC5AC82E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC866C9-BB98-4320-9FFA-F0960C560DA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24s-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FB0F3E-BB66-47BB-A59F-2D4C123F9CBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AD7495-3DA2-4596-9620-CD36D7C561AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492F3F8-4188-41E4-9A84-5E30C4AC3378"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "718F2FDC-9EA4-4C4C-8821-B15E56AF8101"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5CB558-BD42-4615-BC31-41CCF25DE5C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC04072A-9BBE-4A9D-AE39-054D93E0C6D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45BCCD0-65BB-431F-B448-221C1595CD92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33BA722-0680-4074-8D03-41657F8CDCC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C46B4-5E9F-4DD8-861B-00BA43923306"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431570C7-74A1-4F7E-8FD0-690AEF0F823B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D22E15-E1E8-4115-A55F-5743CA9C5947"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F840171D-CA1C-4E25-BD41-6B871C47BB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B240B20-CF48-4A72-9653-9D04D59C1391"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D6AC73-67C9-4FA2-A361-FF08B0E3AF47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58430463-EA77-4DC9-ACDE-4DCF92CA2FC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-32xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CCD143-3D6E-4880-B275-ECF5B04238C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-32xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D3784F-C572-4A6F-83B9-BCF64D339BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C466B-CE87-4A57-B40B-88C94BAAF36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D58FF034-8E07-4518-A858-5F16F22217E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376AD386-373D-4B24-966F-D11F76C9020F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2280CAA3-03F6-4168-8E50-A6B7132A3B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0C1174-C789-4547-9899-F7FCD0905F92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC366801-655A-403B-ACD9-3BB43802A3C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48pw-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF5463D0-A8D3-43EC-8CFF-F659A8C84436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD50BB2-BFD8-42F2-8C23-0D95187B01F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D4D7E4-B195-46D8-8A6B-6AA4B8357618"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39600E51-4A21-4E5B-9FF9-E7C00AE86646"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E4D5A8-7E4A-44C5-81DC-84712781206D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D6D50-D0FA-4527-BED3-52560DDD5253"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965BF315-D833-4711-97FC-512151113367"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0ADEBE-3DA2-4850-8115-0AC937FB0A94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E9B149-AA2B-4421-8CC3-5A4B32B7AADF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04072C0F-78A2-4D10-87B2-52DC2537BA89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-f-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5C080E-D5C4-47B2-A46C-4EB3051C5221"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CEBEE0-DA67-4EE5-9BCF-263843053A8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD262F58-C47F-439E-A9FF-D1C60120D306"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-nm-2-40g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35490BDE-DF21-495E-9F8A-7631FCB32A1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-nm-8-10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EFB5B8-4A38-48C5-A363-3C7F7763C1D5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9EABE0-5FB0-4277-A389-87732E750B7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BBF8E8-7AD9-46B8-8B02-F0DB1F95E1CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7E8914-7B25-4097-8B22-6928C1F03D5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B207857B-C483-47DF-9FC7-6A05B866BF60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD26746A-80D1-4C48-BF77-E9F7EEEF7EA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB16CCE-1E89-4707-86C1-97F2FB5B62B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A82CE19-C3C4-4FAD-A1B3-AB91EDB61591"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500-4qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DBA393-232D-40E6-9CDB-DF82D2E7A5B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04AB61E9-0148-495E-BD21-64D52DE60A6C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D2C587-E95B-4E74-88CF-5930072258D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D1BB0B-0EFE-4C6D-A18E-3E48ABA01F00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74270062-2030-45A0-9C93-C1F3B7C88E8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F403859-F034-4DD9-9CA5-708EADECB380"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4A5C56-0D08-4423-AEBD-33EDF172FCF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200cx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7670A322-31C2-4A8A-86E9-09D63C52E4C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6376BE-3A69-469C-B6A9-2EFB55A3B87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0972076B-5C87-44B3-90EC-4C200B89318A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3765B3DB-8B1B-46EF-AF7D-ED1EB2079C3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AED057-2458-4DE0-8D51-ABD766D07F68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19538C03-5FB8-4401-8B21-489C629D7E7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B26D7061-F471-4DF0-A892-ED132958B84A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033ED443-80E7-4012-9825-07AAC0D44B96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F3CC6-A349-47B1-B282-B6458683C191"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB24EF21-1C10-48A7-BC68-FFC842A28D12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0625A2-BF14-4552-83D8-AEE0A04EA023"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0D6ED6-AE64-4E20-B9CD-3EAA22709CFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AFDC0D-7629-424E-827B-C8A8767324C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A263CFF2-A659-405B-90EA-51E49B25C6D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFBD449-217D-4569-99F7-D56B853A3E07"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED668FC-D1A5-4175-A234-23760BA6E788"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D650C48-9241-42F7-87A9-20733329489A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED16A65-9AFF-4825-95D1-162FBA0F566D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D345E7-8208-41AC-B11A-4425D29E98A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E386D461-F1C1-4970-B056-D6119E74D449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F3A466-F665-4132-ABC4-2DFC0A7E2B55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3395168-FF2E-4CB6-AABE-5E36DEB241CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F525CBC-1CE6-4CAB-B1C1-DFA7EA462EF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226F985C-4669-4D0A-9DB4-CB1465B37B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B736A43-6F4E-40A9-84E4-D9E251489234"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FF888F-46F5-4A79-BB88-BB2EC2D27E24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26437DA7-2EFE-4CA2-8DB0-9FECBEFAE4EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99CA124-7D86-463B-A31E-A7836B7493E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E014B028-8DD9-428C-B705-8F428F145932"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C44229-A842-49B2-AD3E-79C83DB63EBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D56D21F-0F55-4AB1-AB9B-8EAE08F4BEDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C0441D-A7AC-4B4E-970A-3A441C2F66B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5306E847-C718-4C83-9C97-8AB498DC4A88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18287CEF-B574-4498-A256-567CA6E6CA7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9AAA2C-495E-4FD1-9050-264FDC25254B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713043E-2535-4540-B3EF-41FAC40BECE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0C18E5-45B9-49D2-A4AB-DD8D5CB04C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67701D77-8B03-446A-AE22-4B8CCCD6F029"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0BEAE3-2056-4B7B-8D7C-AEE3DC86CC2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831A2390-7170-4FC0-A95E-3DAB1791017D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788CBC4-782F-4A43-AC80-4AEF1C43A22D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493989DC-8F1B-45C9-AD11-38B97B958C9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l_stack:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419ABFB5-2C27-4EBE-98EF-8A8B718CD1F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300lm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DBB2E-DB15-47E1-B8F2-3AC0B1197C5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F168FB20-0C44-4A5B-910A-04B9517545C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737F22AB-C5A9-4A18-BA3D-38A222491397"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9400_supervisor_engine-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5DCFD5-2B46-4D06-9E4C-B2325F440F02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9407r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5508320-8318-41A8-8026-4A61907C1CD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9410r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD337D8-8C72-4025-A8C3-E63598DE7BDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176ACF88-6112-4179-8492-50C50577B300"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9500h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07FC868-0B38-4F24-BA40-87966FF80AB7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C19A801D-02D7-40B0-88E8-FE7BA8630E60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600_supervisor_engine-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA59279-3504-417D-9E86-E5886EE198BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4035136-CC10-4DDD-92AF-9DC41D19CF8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48E6CF0-7A3B-4D11-8D02-0CD38F2420E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9ED0E5-CB20-4106-9CF2-8EB587B33543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-40_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E283C34-43AE-49A5-A72B-32DEA185ABD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B0E620C-8E09-4F7C-A326-26013173B993"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-80_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB3AF13-5324-42CD-8EDB-6F730BF46214"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF93F1C8-669F-4ECB-8D81-ECDA7B550175"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0BA345-B7D7-4975-9199-4DC7875BBFD0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9EA95F-4E39-4D9C-8A84-D1F6014A4A40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0BC769-C244-41BD-BE80-E67F4E1CDDA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800_embedded_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78706517-83F4-4D44-A6EC-B78ADCEABAC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EACA55A5-4E73-4187-96BE-08E04F2C7659"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3200_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86879AC0-890E-42F4-9561-6851F38FE0AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E31CB8F-60FF-4D03-BE8C-824ECE967797"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3300_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19017B10-F630-42CD-ACD2-E817FEF0E7F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A8E319D-5AE5-4074-9DAF-4B65F3B3CEE5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3400_heavy_duty_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A41A34-58D2-4DBC-ABC9-20A62BC8A838"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3400_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CCC02-113E-4EA1-B0CA-9FDF1108BB71"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF0025D-8DE1-437D-9A4E-72C3AC6B46CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cbr-8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB77D0EC-A448-4D97-8EB0-EA4956549A52"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cg418-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C054973-91D8-439F-960F-02BF12A50632"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cg522-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79252E00-2D94-44AA-8601-E4AB4EA38A76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esr6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D19136-4ECB-437F-BA8A-E2FE35A39BF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-24t-con-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C98B90-69B3-4BDF-A569-4C102498BFAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-24t-con-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7646B0A1-FDF5-4A60-A451-E84CE355302E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-24t-ncp-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA889066-14A8-4D88-9EFF-582FE1E65108"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-24t-ncp-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0C09AE-CD2A-486A-82D4-2F26AA6B6B95"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-con-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF81CC0-AEED-42DE-B423-8F4E118680BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-con-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDAAFDF1-7A3C-475F-AE82-B3194939D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-ncp-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9566FC8C-0357-4780-976F-8A68E6A7D24A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-ncp-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07503D21-965B-49F0-B8F2-B5ECD656F277"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess9300-10x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880B8176-B30D-443E-B5F1-1769B65978C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:integrated_services_virtual_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5361C70A-C036-4254-9698-BC58F48C465B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-pthtrv-es7GSb9V",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-pthtrv-es7GSb9V",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20067",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:14.660",
      "lastModified" : "2024-11-21T07:40:28.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the HTTP-based client profiling feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of received traffic. An attacker could exploit this vulnerability by sending crafted traffic through a wireless access point. A successful exploit could allow the attacker to cause CPU utilization to increase, which could result in a DoS condition on an affected device and could cause new wireless client associations to fail. Once the offending traffic stops, the affected system will return to an operational state and new client associations will succeed."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FCB9440-F470-45D1-AAFA-01FB5D76B600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B736F09-3B51-4B2A-92F6-602847001F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F58A94E-B050-4EFA-84BA-43B11BA22E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E864BB1-FD23-4AB3-9138-5FD8B62EAF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838D6C2D-C131-4A9C-AAE5-5BF38E637E4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4D4659-A304-459F-8AB3-ED6D84B44C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F95D7-E49F-4B36-8F47-823C0298449E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B270A04-9961-4E99-806B-441CD674AFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360069D-0358-4746-8C3F-44C2A40988D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DD2403-113B-4100-8BD4-90E1927E6648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF73937-BCE2-4BEF-B4B0-83212DA4A6C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEF022B-271F-4017-B74B-82748D5EBA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B2902D8-3A7B-4C47-9BC6-8CA4C580A346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8871B890-78F4-4D9D-AEFF-6A393493C51E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E489AC5-A445-44FF-AA85-F0915577384E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917BA05C-2A18-4C68-B508-85C2B5A94416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6B707B-4543-41F1-83DF-49A93BF56FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938B0720-8CA7-43BA-9708-5CE9EC7A565A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DE62C4B-7C06-4907-BADE-416C1618D2D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D19D8C-FACF-49B4-BA99-CC3A3FDADAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B78942C-BEE1-4D18-9075-8E1D991BF621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F21093D-1036-4F6B-B90F-ACE1EF99EA33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38B87B17-C653-40AC-8AE4-066BB1123C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7592C7E3-3735-425F-A276-9EE03224CD5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0C2129-8149-4362-827C-A5494C9D398B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-dos-wFujBHKw",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-dos-wFujBHKw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20072",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:14.727",
      "lastModified" : "2024-11-21T07:40:29.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the improper handling of large fragmented tunnel protocol packets. One example of a tunnel protocol is Generic Routing Encapsulation (GRE). An attacker could exploit this vulnerability by sending crafted fragmented packets to an affected system. A successful exploit could allow the attacker to cause the affected system to reload, resulting in a DoS condition. Note: Only traffic directed to the affected system can be used to exploit this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0C2129-8149-4362-827C-A5494C9D398B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.9.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7452C7E9-6241-42C5-9A7F-13C0BD38A2B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.9.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38C48FC4-5362-4B61-8B8C-7CAFFB81045E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-gre-crash-p6nE5Sq5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-gre-crash-p6nE5Sq5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20080",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:14.797",
      "lastModified" : "2024-11-21T07:40:30.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to insufficient validation of data boundaries. An attacker could exploit this vulnerability by sending crafted DHCPv6 messages to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6\\)i1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAFD220-48D7-46EE-8537-A69C5F8D0F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E5F22B-2CD3-4A14-AB2B-E039CF001140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15102BA5-E96F-468C-8F8E-4F8F9E947533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F481FC-D16B-461C-BCBB-D58B58D1647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D47483-F300-4224-86B2-6FBEFA35EE63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC9E74C5-4BF5-4F29-938F-3E71784F08AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2963A4BD-1414-40CA-A949-9CE61B3C61C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0C7B38-F1D2-4D6F-A986-BDE58F6B7E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A6C5B60-9524-4A5A-A8CA-3C18730E18F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sg8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B09C15-62E9-4278-806C-03D47B75E336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CC9728-4E4A-4536-BC81-031AFE1A74E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DECC49-1DF8-4925-9232-04DA748428B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B736A1E0-89F4-418C-BC12-7E6A7AC7891F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDC0B5A-E59C-454E-AA0E-6EB9C8888480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2363876E-0E3B-44BA-8157-FA96554302B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D3131A-74F7-4465-826E-5F6C90240C4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0D1E17-9A5C-4B74-B780-F31364FD9F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70ADF53-D937-4CB1-8D17-8B4DB9A5458C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0F30A4-C088-4ECC-ABE0-33D4A7BC8D1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B11B78-1936-42CA-919E-BCD1E0C2A397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A807560F-7111-40AB-BCC8-F3D7A2F92D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEE56D89-5894-49E9-BDCF-E23AE4159989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC9347AF-7729-44BD-8E33-610D573C560F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14DC014A-2CDD-4294-8AEB-9C0B437C1633"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9AB472D-2158-44DC-A627-8C4D52F476A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE1712A-1A44-4BD1-B114-318D4EC4977A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC27EED6-7F43-422F-8E61-CDD4E9EDC719"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(2\\)sy16a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE785B19-81BE-4A59-92C5-DA21B8F2B41C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svr10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4F81E0-F5DA-4217-B7B7-55206BBCCFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EC35AA-4BD3-4FBB-878D-3313D37D9AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svt1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BD52DF-E396-415D-B46E-A8814579A01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svt3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C17AB3-4EFC-478D-A447-43F444B4CDF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svt4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F4592D-EDD1-4F06-88C6-35EA5EB56CC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svu1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9711B4-23FF-4C41-86F5-94D5E941453B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svu2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2710C44B-A353-4BCF-85E8-525AAF839A98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svu10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE460A37-D782-4DB2-9F18-44D16C45618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svu11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAEC313-FD2C-4E06-A67A-11E94F1771A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svu20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378CBC90-21DF-4F68-87A0-F0DCA3731157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svu21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E803BF09-5AE0-4C67-98C3-0554800D7555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svv1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A5EA4A-A127-4363-90F7-B21E9A086C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svv2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "456F57B2-F92F-49D6-8234-827E1C6BC9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svv3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C4B5D67-016E-4265-B98C-022280223B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svw:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD49B553-678A-40D4-B258-E36CDBFCBF45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svw1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082DEBC4-2748-49E8-9BFE-7BC51133C4EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svx:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886C03B2-862E-4CD6-8086-FB924FB40A56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svx1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D696852C-2208-43B7-9C4C-A1AE8AE995FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59D6811-BF02-436B-808A-DF21682561CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE752C6-250E-47CE-93EA-536958874386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B3103F-9381-40A5-A7BD-D1251B3EA5A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B990E413-C863-4613-803F-1E492982C70C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(4\\)m12a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49686A5-B498-4142-8632-05E979B6D3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B725B7-AFBB-4F0D-87BA-38477E250374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F05531B-A6A2-437A-B7CE-1A2DD33EC8DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBD931B-9D7F-452A-A567-60ED7EA1D2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4B3624-1DA1-4A63-B2F1-F8E06CB61E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D601E90-6F2A-4C66-97A2-152031C88DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF56A5C-3370-4F64-9F2D-F003B8536CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78159F0B-2553-41F7-9ABA-38065EB5B23E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46DC8876-9FC4-451A-996F-71F2B1C35781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE57C85-794E-405B-841F-A806D32C08EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B91687C-A8F8-45FB-BF03-8534E9230AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E082DB05-253F-4C6F-BD0A-524699309D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B43D4858-AE1C-4372-97F9-5983EEE6ED4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9678A6F2-0624-4A8A-9991-9DADCDDB2687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F6D655-D3A3-4BEE-9DEF-19ADD41D1663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC0B809-72AD-413F-BE84-73FE2DB33950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2834B6-AA9D-4FDC-A228-CED66C799849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3426024-7199-4B7B-90CB-CE83FD2E0878"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF163F6F-1A6D-4AA9-AAC2-52249BB28421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD250CC8-B26A-424E-A737-97F2A7E7C4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A156FE-590E-49DB-819D-4103D629829D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F6C767-042C-4277-90F4-F81D9AFFF227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33DB919-4F82-43C6-830A-A9D4FC043B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72782F95-948D-489B-A19A-9DAB825DFE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F904CD0-8609-47F7-988C-613DE26BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3A39FE-69F6-4BB9-A9CE-D516A3802538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B7058-3467-4CCE-B9A4-71CF8143FEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90447919-CC40-4CA5-A488-2FCF0F25ABE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF74559-F418-48EA-9CA7-A9574CAFC97E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A1ADB8-DF62-4CB6-8075-2F0956BB0126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C787A4-4AF4-49F1-AA10-F5CF51AE17AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0F2B2A-F273-4166-826F-88B54A480BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194D54FC-F399-4C86-AE04-FB3FD828DDA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F98E150B-C806-4CF6-83EC-0C16A44F3EFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C85E0E-A920-4501-AC23-0F7534CF88EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D298AF-05E5-4A03-8252-79E5A45F93EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e10b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB46BE27-091F-420D-B2A0-55009B60478D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50CB7858-C857-41E2-9E5D-9368EEC2825E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10438F4B-281D-4C2F-B4C3-DC3D47B0033A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ea2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681E360E-2287-4BE7-8228-77C235DFA901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ea3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81800178-449A-4B61-9611-5FB2FC4DBC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7316ED4-FABD-49E0-AA21-394D327435F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A56EF3-4E88-4220-846A-A9BE1E496311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA77FEC-51CE-4D0B-9D1F-7BF1A28D30A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC422D76-8337-41F0-98AE-E5D85DF4D0DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB76F47-8723-4888-8613-AC3273BAB758"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CC5862-F8D0-4184-A29B-AE627680D0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF05167-C9CC-43C4-92FC-CCA80093CF8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1CCA5C4-3683-46C9-801B-683E194DDA8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D4C7E2-F1F1-43BF-A53E-2A8FF408F4A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B29CAEE-A01B-4156-A871-43F3CC90ECB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6879F438-0A0E-460C-A52F-3EE2F0EC2C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A925CDF2-3A2E-499C-B38F-1D086534F11E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05373F4-E820-4D22-A86A-904854F04C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C38969D-65EB-4C80-BB2A-A1245C4E718B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A429CFF2-A288-4CD5-9C06-8D18647C67E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3A9655-9E22-4AEA-BBCF-6C0749D0289E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C846C74-7644-4DAB-A4B8-B33464EBE92E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2a\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDB0B25-95E0-4796-A56F-1A59EF7EA283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2b\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0687FD87-BAED-4776-9B94-3C9EA7CCE79A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB214EAE-AEB7-4359-AD8C-86CCC080EF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757000B2-A8EB-464A-9A2D-EC4D920A0569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102BF855-ED1C-4D26-85D9-74B2BE0E9CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42618DF-F118-41A7-96E5-24C229DA020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F6FC68-BF4A-4511-8B46-A93C81E349B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7582DA8C-2360-4E8C-90F8-6194F269CD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D6FBCE-F1F0-437B-A9B0-57F717C974F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "260E5F96-48DB-41C4-B45E-5BE0367DD7E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA06788C-E529-4024-9565-EAF5D90D68C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96274788-A5AC-4740-A915-C381593203C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3m\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FD15D65-9471-4755-9EDB-04ECF34DFD8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE9B41B-B1B5-45A2-8DBE-775B1CE4F2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80114F8D-320D-41FF-ADD3-729E250A8CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879C4495-3B26-4370-8708-16F5002E37CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9DDD1E-201F-42B8-ADC9-9CD2F3ED2C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C2BB1F-79DF-4471-B75F-C22CEBB5380F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5A55B3-49E4-4C48-B942-4816504BAA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5BDAB63-EA0E-486D-B146-7E0060F70066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62AADD63-CEA3-461B-94EA-0CDAB4A2ED00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB704746-C27B-4C6B-948C-B8C0A3F40782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F354F8F6-70D3-43EE-BF08-DFB87E83E847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F908B0-7ECE-40F8-8549-29BD1A070606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378E67DD-779C-4852-BF29-38C2DFFB1BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9033ACC7-1CCC-44E7-8275-73499C0E6E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e10b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2436CB44-A933-4885-8BD2-E2AAEE7CC1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e10c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDCEDCA-C120-44DD-89FB-5173464D0D52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF92BEC-AA46-46DF-8C1E-956F3E506E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C226FE9-61A0-4873-B277-1B8ADB397B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9C3A73-E4E1-4C0F-86D4-B796069E4EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5BD905-75C3-47AE-8D19-6225BD808B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DE452A-6852-4879-9187-8A152E6E260E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6367C8-C9D7-4965-BD9C-1DD4A2FCE2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3047E4-BCC3-41A7-9DCD-15C25D14EC44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7785E177-C04E-4170-9C35-B4259D14EA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAE727E-E552-4222-8FF0-6146A813BDEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7850295-C728-4448-ABA7-D01397DBBE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C104A47-53EE-47FC-BAE5-21925BEE98E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65589A68-58A4-4BD4-8A26-C629AE610953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ec2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A64C8F-6380-47CA-8116-E3438B953F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FE61C7-3B61-4085-AD91-137459DA29D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71080D8B-BC81-4CDF-8626-D0F35DA40AEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)gc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF10596D-457A-4DA8-8037-5E92E1D39232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B213D7CC-AD3D-4241-AF59-5B4CFC9BA930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E88FA32-5EBE-44BA-979B-60FE8340E8C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4CE0E6F-A277-48BE-8F1D-BCA48C57666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE991C07-531B-4566-89BE-0A90C79FDCD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FDDD94-40C9-47F0-9D43-0C0267F439C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E77BE16-C28C-43C2-B2CC-5AC4F33F7E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3BBE82-E29A-4FD6-A897-1D80DE6ACA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0322D5E9-FE05-49EF-A210-A276D69B9F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)m11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F188F2EB-60D2-47BB-8FA8-2F832289345E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1DE401-4E0B-4F72-B59D-1A600624D43E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704ED4C8-DA95-43A8-9DCC-56E74E7DC42D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59B7F84-4C39-46E1-932C-EE52F22F4C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "606F44FA-864C-4514-B5F1-2E78E09EFBD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3A0F9C0-4591-4981-863E-1704FC4A0919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF56328-A74E-432E-A790-E16C941CA3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F91421B-F04E-4CA7-8EE3-2F06AC6303C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8B6E5BE-2D8B-4BAF-88BE-772F5905875E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CFB827C-E7A9-410F-AE0D-5E31C6B29EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180C12CE-E9EC-4E86-A18A-E57803232193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8007004F-7331-48FF-9821-866560F3580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F877F3-C1EB-47D4-BBF2-0D678403A1D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FAC1F8-8315-4669-8B2E-37D423AAEA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4m\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65F813B-C080-4028-8E1E-A81827917DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4m\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ABBCE48-B9D1-4EFB-BF64-CF30F5294EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4m\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D54D10E-D94E-4731-9988-4EC1786FF4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4n\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC02AA6-E046-4EC9-9FFB-8B2C76FBE027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4o\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A2BB34B-D902-4064-BADC-56B5379E92CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4o\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55D0A0A2-DB62-4C92-9877-CF8CA01B1A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4p\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2316E962-6C56-4F45-9575-274506B9D4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4q\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D3DFE3-7576-4D56-ABD2-425C28B56960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4s\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39AFD5E-8FCA-4EC6-9472-FD208CB2A555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F112DE64-0042-4FB9-945D-3107468193E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E027FB12-862F-413E-AA2B-4BBD90AE3650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28874B-148A-4299-9AA1-67A550B25F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B80CBC-961F-4EE8-A998-C0A827151EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7131776-5DEB-4B96-8483-B81B538E24FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE991877-18E0-4374-A441-C2316085CCA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A472B96-0DDE-49DD-A7E3-A82DD6AEB3DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2EB46D-16E0-4C31-8634-C33D70B5381A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757EB1A1-4764-4108-9AB1-F33CF9CEE574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5b\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29B2E6F-ED6C-4568-9042-7A1BD96A9E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5c\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7803B445-FE22-4D4B-9F3A-68EFE528195E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199DCF1B-8A1E-47CC-87A6-64E6F21D8886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B78669-3B28-4F1D-993D-85282A7D0E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD05109E-1183-419D-96A1-9CD5EA5ECC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C73A3A-4B84-476F-AC3C-81DCB527E29A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7551128E-9E23-4C42-A681-6BE64D284C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB7BFE1-06ED-4B45-8B4F-2B309B8D6342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE2C71-C401-43D1-86DC-725FE5FDF87E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758F264-96F9-4EE9-9CA9-AD5407885547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2842F6-4CD5-457C-AC75-241A5AB9534B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABE0470-E94A-4CAF-865D-73E2607A0DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9CCD7E3-C62B-4151-96FF-1175D4896E95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6437E689-A049-4D48-AB7A-49CA7EBDE8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110B699D-169E-4932-A480-6EBB90CAE94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C12918-E5BB-465E-9DA4-06B7351DD805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4862C453-8BD7-4D53-B2D6-CE3E44A4915A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C4E1F4-AD64-418C-A308-85501E0F3EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EF41C6-A0D0-4149-BC5D-B31C4F5CC6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57ED9CDC-FC03-4DA7-A791-CE61D0D8364D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB8C3BBA-4829-4006-B7EB-F552D86922C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29FE4D84-423F-4A5E-9B06-D5231BF1E03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F980EFA3-BB92-49D3-8D5F-2804BB44ABB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6935EBC4-3881-46F4-B608-8E6C9EF8E37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e3k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D6D0AA7-E879-4303-AB2D-4FEF3574B60E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345C9300-CAC2-4427-A6B4-8DBC72573E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64BFCF66-DE06-46DA-8F9D-60A446DC0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BDF6ABA-F0A4-423F-9056-A57C6A074137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7a\\)e0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1374E243-4EC2-4A81-991C-B5705135CAD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7b\\)e0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECA6101-94BA-4209-8243-A56AF02963EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(8\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFF00927-80B0-4BE3-BF7C-E663A5E7763A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(8\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9795E31D-A642-4100-A980-CD49C291AB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(8\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C79479-27C6-4273-BC80-70395D609197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(234k\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93681DCF-D5ED-4909-B41F-C7CB975DE282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(0\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1724DF49-B5A4-4EA6-8733-1672455BB3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D682D369-AFAA-47D6-B063-95A9FE336FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FDD38A-D864-4E73-BEBE-E3545113FA2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)s1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "527197ED-992E-453A-8E53-091249FC1195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46DC7974-36DA-49AF-BDA3-671EA5F41441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "249D78EB-A125-4731-A41B-62F8302D7246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E599088-5071-469B-980F-4BA3026856C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F58CEE-636B-460E-91D1-330965FA7FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36979139-66D2-40DD-A865-547BA9D49786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "815E129B-EB7C-4E67-A50A-38CA19B697AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7E5969-E55B-4EBF-ADDE-8A969174E03D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DA9DD7-A350-4A62-B19A-6AF90CF798F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7113699B-762C-48BD-AD99-19D1A25995E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E178E6C-D717-48B1-B79A-4E071BDFE6AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF7DF14-DD6F-4D24-8F12-AAB145FBDB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB84CE04-F2D0-4A37-B2BA-25126D1824D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E32C83FA-EBE9-4A84-B34A-25BBA4D47E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8957EB38-37CF-47FA-853D-7A1AA6079874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63ACFACC-23B7-4EAC-BDC0-E3C403642D88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "717FAD11-1B58-4D43-9628-468AC4CFBF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3A95D5-157D-4335-87B4-8DA080A496FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E613BC4-AC20-4E43-8FB3-2EE9F0A2610D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D54B325-22D5-4F21-BE28-BE28F6135FBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0444FAA1-6613-45DF-93E2-B19DF8FE157C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1529F74-BB34-4490-8445-F75EA13CB7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BAA5367-F81E-425A-A93C-B9220D1BB37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B1ED4F8-3B6C-452D-A3D0-D2F1A24AF994"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF32BC7-57DF-4BF0-BF97-69E97CC048CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3836108-E847-4BB6-BFFE-7C81E9D94A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)s10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D38466E0-40AC-45C6-9C14-1BE309B079CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D962FBA3-CE59-401B-9451-45001775BA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)cg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F2837-174B-4437-BF3F-CB6BFBF8F64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237D305E-016D-4E84-827C-44D04E3E0999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E993A32E-D2AF-4519-B4C9-7F576649D20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7260A66D-D477-440E-9A87-C05F9BD9E67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31059ED1-4D82-43D7-8EF7-042125289CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B813F19-1B37-48F4-99EC-05E0CAA861FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4220D3B1-BD05-4169-91BA-B1AA45084C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BAF351-4C7F-44F8-812E-9C402CBBB5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595F3D8-8D99-4C82-9EC1-1187C52A6740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662ACAD0-7E80-4CB5-8409-03E72A3C59D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A43EE852-5F22-4387-8332-A12FF3306210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B856BB-0FFE-4A92-9CE7-D71B6C611CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EE552E-226C-46DE-9861-CB148AD8FB44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF02C8E-9BB2-4DC2-8BF1-932835191F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1B86D1-344A-470D-8A35-BD8A9ABE9D9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5AC88EB-7A67-4CDE-9C69-94734966E677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)cg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8E0069-21AB-497F-9F4C-6F7C041BA0E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4151B2B1-B17F-4F1D-A211-34C7DB84E442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B550C9-B2E4-44EE-8E0B-54D150C69A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBBA614-74E7-43C7-8D33-ADF4BD79D477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A852A3-7CAC-4D35-A583-556D17A0F7E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF5D54D-4403-4C5E-AA65-9FD8661E283B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C89048E-2A5F-4818-92DB-812BB8FEDC90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)sn1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA83229-767A-40EA-AE03-53DA0DD40B26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E1226B-46CF-4C82-911A-86C818A75DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100DA24F-464E-4273-83DF-6428D0ED6641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "063C0C47-25EB-4AA4-9332-8E43CD60FF39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6004A94-FF96-4A34-B3CC-D4B4E555CFB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02866AED-A1B4-4D89-A11F-27089EF935BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C85BAAF-819B-40E7-9099-04AA8D9AB114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED684DB4-527A-4268-B197-4719B0178429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F41406-0F55-4D74-A4F6-4ABD5A803907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7082C083-7517-4CD4-BF95-CC7AF08D4053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "370EF3DC-151F-4724-A026-3AD8ED6D801C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B8FB86F-2A89-413B-BED7-97E3D392804E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005EAD76-34BE-4E3F-8840-23F613661FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2595B3E3-7FD4-4EFF-98A2-89156A657A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB998A1F-BAEA-4B8F-BE49-1C282ED3952E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55379B7-2787-4BE6-8960-204C074F4CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AABDAB3-6329-48CF-BB49-DA2046AB9048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C96E41FF-DD4B-4D55-8C96-248C9A15226B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F7ACB5-4FE5-4B07-8B4D-28DF8D655199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63FF7C4-D9CE-4D6C-B36E-0C0DC06F453E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s0d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F1BC11-BD27-4465-B92E-B01248B2EAAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2DB2F4-DA30-4250-834D-B60D74B7B1F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s0f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5323B67-7A30-44B6-B3FB-0148444F1725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4408CD8-DC1D-4102-924B-E9E28FC5CECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A39749-3A95-41B6-850B-4D388E6242B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B663F9-DBF4-4EEE-836D-C83BF99A682A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E780F3-D378-4201-AC69-79C356EE9CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28FE5158-FA37-476B-8289-11733BB9AFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AE7F08-FB39-4E35-81AD-0186F2A539D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "447FAF3B-8E93-4A2C-A8B1-1A2F7D958754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E2628F-456D-4471-A914-D92157725CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA37E61-7EA5-45F3-87F6-432B591A79BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AE143DA-B2AA-47C3-BA8D-F0C02AFF36BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)s10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1F539B-8422-43AD-8BFB-E57622035B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)sn1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0C961B-833E-4F45-AAD0-DB8CDBC3A988"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(3\\)sn1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D604EC27-EC42-435C-93E4-2DCB62AEA3D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9613EE90-A90A-4817-A5A1-F78A9F3BA571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A96A92-02E7-440C-9E46-0FBE8CE75E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F1AEF3-08BD-4CC0-A36A-D26D550853E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD9FF45-C8C2-42E2-B329-48C037A10521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36CBB93A-A8C8-477E-B530-B0058C3D15B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "075BBA36-281F-4164-A1ED-04A2B3589B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sn1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB675E0-5497-4307-9B1C-4CBFAEE612FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6465E3DA-90F0-4DD6-82B1-C9DF9FAEBDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "346BD6D0-AAF2-4C9A-8DD3-8C710302DCA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5B7053-7F9C-432C-B6F1-DAC00B0C9619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D029D52-65E5-4129-AB47-E873F53799CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31605A68-9398-4239-A137-DD0516BD2660"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727E596A-295D-4D70-810A-436FC6A4415D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "368210A0-CC15-4FB9-8334-4ED475523C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D37EF429-EE6B-4A72-9D76-4FC1E6E19E01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9969CCF7-EAD0-4BEA-BCDB-F22A1E0C7C18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C258F34-C557-4586-A8D0-590EC37E252E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59F21FEC-A536-45CB-9AE5-61CE45EAD1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0340EC20-7099-4F13-8DE6-84475B2A52CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6994F100-864F-4512-9141-F7D1050F9DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC0CC364-FF3A-4FB3-8004-6628400BC7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67A1BC08-28AF-4583-BE21-0D85CA2D7B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A259566-AA04-4DE8-900D-865384E56C8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CF70F3C-FAC8-4691-AF95-1B5B828A9D41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF08E7CE-DE01-43B2-A9F0-1CE657E79260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC500D08-0DE1-4AA8-AE97-0CF17A706430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E86EA2EC-7FEA-4AE8-8CE0-45CA3C21B943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CFF6E14-D29F-41F3-BD25-A1DB0A464592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A4E00DF-60FD-48F2-A69A-D709A5657F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5D3761-16C8-413A-89AD-C076B9B92FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F690BEC9-FAE9-4C02-9993-34BF14FA99EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BEA314F-8C89-4D6C-A6B6-3E9247A35B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)t4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B8565B-3EE6-48DC-AE92-9F16AFFC509C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(2\\)xb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D604189-E382-47B3-B9D3-A6D2EA3B2C80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "716EC9AA-0569-4FA7-A244-1A14FA15C5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39166A66-859D-43A7-9947-3F3C32FBFAAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097D1950-6159-45A2-8653-D3F90044D0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F421AC3C-B0BC-4177-ACDB-87792C1636EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA965B88-3464-4320-B9C4-594C49C9C0F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CD336D-1110-4B0C-B8D4-7C96293CBADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C580D9-A2EC-4CBB-87F5-1F5CBA23F73F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C427BA8-3A8C-4934-997B-6DDF9CEB96AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90950C85-D631-4F60-AB3E-3ED1D74D56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD79CA0D-7D90-4955-969A-C25873B0B9D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7809674-4738-463E-B522-FC6C419E2A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFD51F00-C219-439F-918E-9AF20A6E053A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BCB671-7ED0-43D5-894F-8B3DBF44E68E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4802BC7-F326-4F6E-9C74-04032FF35FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDE3BCF-B518-47B0-BD3B-0B75515771E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5C9BF5-0C29-4B50-9A86-29F0ECD44F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B0621A-D7A2-415B-91ED-674F2FB4227B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9D7FDD-8CE6-4E83-A186-734BC5546E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m11a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271D901A-3196-4653-A04E-07A6BC13B44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1194A7BD-CB51-42CD-96E6-9ACF126DD8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB52603C-CED4-4330-BB53-DDDFEA83882A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F40A87C1-5EDB-4B50-84CF-729F5037E870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3BFDBE4-7AD9-418F-8DA5-F97BB37E46BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C9B84C-F9DC-4F9E-82F2-04004D539C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E246B9E-F93F-4BB2-9BA4-438FCC4A711B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE884ADE-FD51-4F10-89A8-D871E7407C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00BF54E-CBFB-4ECD-9EDF-0A8331AF2BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC22B2CD-5154-4055-A6A7-4C31B84B032B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082A46-7AD3-4533-9A15-267953D9E642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED8D1FE-5880-484E-810B-B1CDC2C9F7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ADD1575-BB35-40CE-8452-3D34E25995B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FE59A3-5BA1-4C68-8959-A5B0CA61CDB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B02867-F082-4A57-9E2E-12B0F4C77526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8389200-0585-456E-8D0B-D725266ADBBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFEF03FA-FBF2-477F-A5E2-67F47610897A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0969524D-EB41-47F0-8370-2E38ED7493BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s10b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D97C79-48C6-4A3E-8C10-AC04BFDF2951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84498B4-7002-44D1-B2B7-B43F3081D258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)sn0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10003D7-8501-4A8C-AED1-A9F9B79D0666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F61B07A-7933-476F-951A-AD0019D2443D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41939712-5075-4924-ABF2-467430B37197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CBC8C7-E3B2-4659-9B47-C0F16817F46A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC59C3E-A2A4-4A1A-B561-E411D7DE85E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945363EE-FE7A-44ED-A4A0-942A1F9B2702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CEA598-B4E5-44E6-AA1A-79DC4FE3B62E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)sn1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2481A9F2-2C99-4A78-B8B4-0D073A6CFED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)sn2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667CB7FD-280B-42D6-9E45-EA04A1DC7701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)sn3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65DD79B6-A44A-447F-A69D-C7C4193F5C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E25B3DC-B9A7-4DFC-8566-3F790F460DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "679DCA8C-F64B-4716-BCC9-9C461A89CB29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF662E36-0831-4892-850F-844B0E0B54DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E71F49D-E405-4AB4-9188-DA7B338DFD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(1\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "204B0A52-F6AB-406B-B46D-E92F2D7D87F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700D0D31-138B-4F9A-8C76-3AF8B9D2C59C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B843CEE5-4D53-414D-95C7-4BA515818E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB5DABC-4DAF-4696-A8AE-D4B6B188B9EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72480900-6E08-425F-965D-143B348E374A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBA0926-E790-4B1C-A549-5B7D2F040E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D439A6-E8A8-4389-A7C8-2F4BCB7C3854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E903D9F-530D-4597-ABA9-4C1CFB79814B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AE10B51-53FB-4F30-BAA0-0BD92C3D5C88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5060BAEA-DF8F-4B85-84F5-1410FD45C733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB56857D-029C-4DA8-B439-F1B89EA32074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F91AC2D-86F7-4618-A31B-DE081D4C21BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25B94F9-F10F-47CE-8340-CE56E7ED31E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C32C536-640C-468D-872F-442697DB9EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38DE4F33-A677-4848-BB33-10C4A4655735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0A4820-F737-4A3A-8A08-E2C3EE6F6E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83758252-FF68-432F-8670-AABE1DD0C425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)sp9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0894FC09-880C-44D5-B67D-81C92D96D790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09578DDF-5D13-47C1-9BD1-A1A8B9B0C87D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DDCF08B-3A61-4B3D-BF35-ABB5F11EA7E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BBF8B70-DFBE-4F6E-83F0-171F03E97606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA55D660-66C6-4278-8C27-25DB2712CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(2\\)t3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5609B342-D98E-4850-A0FE-810699A80A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8320F23D-F6BE-405B-B645-1CEB984E8267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE2670E-8C17-448D-A5BD-5A4FBCAEC35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C5C705-6A8C-4834-9D24-CFE26A232C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691BA27E-77AB-4A30-916D-3BB916B05298"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC270E40-CABA-44B4-B4DD-E9C47A97770B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DB8C1-7F7D-4562-A317-87E925CAD524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1887D9-E339-4DC6-BE24-A5FF15438B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB2645F-C3BF-458F-9D07-6D66E1953730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2303A3-CAF1-4DBA-BB6E-F205C23DCE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686FD45C-7722-4D98-A6D7-C36CAC56A4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871E33AC-B469-47BA-9317-DC9E3E9BF5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4091CAC-BFAA-404C-A827-4DA9EADDF621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0DA9FCA-4166-4084-96AF-E82CC4A4DB25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369A99E0-3451-41D1-8C56-5352EA689950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D4A7FA-E4E0-49C2-97FD-A547A1612F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0B918F-A28C-4B5A-A566-6E588B4F6696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "436114F2-D906-4469-99C4-10B75253B3D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466F2336-03D9-4842-BC3D-861749756B9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(4\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "494F7651-927A-418D-B01A-1C30BFE28560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(5\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9ACFB65-C99B-4402-A8E5-914533FF3F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(7\\)sn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F805324A-1593-4B48-B597-CF870D35944B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(7\\)sn1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C78D1111-D91D-4E43-BC47-86EB37AACF75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(7\\)sn2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B949D73E-0ED4-40CA-801E-F0BEE22157B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8A00BF-4522-467B-A96E-5C33623DCA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A434E7-B27C-4663-BE83-39A650D22D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C106CF-CBD3-4630-8E77-EDB1643F97E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DB7943-5CE1-44F6-B093-5EA65BF71A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64404B00-4956-47B8-ACDB-88E365E97212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE6A696-5CBC-4552-A54E-55C21BC74D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41237041-1D82-4C6C-BF48-ECEDF9DB08C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB72CA3-088E-4EFE-BE1C-190C64101851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA584AC4-96AB-4026-84DF-F44F3B97F7E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EB41FD-4DE2-4753-A18C-C877B81B51D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158EDE62-04C9-471B-B243-309D49583E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8609F10-2B43-4BDC-AAF1-80D589910EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "270A1FF4-8541-4026-AE2D-7D500DC401E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A58C01B-459E-432F-A49F-68EC45EE6E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DFE673-9A5E-4369-A7BB-3DE7F8E503C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4125EE35-ED52-4350-A4CE-E90EA8ED6BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AD5BA0-4D08-4A92-88BE-60AF29BC35CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2881C5EA-0AC7-4074-A4FD-9FA33E3F60A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198FF520-7631-49D9-B8A8-2E64F6237CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E067E8-552B-4691-9F6A-C5E8766287BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4162EC-90DE-4194-8ABC-55CCB8C24FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405CC56E-574F-4983-B492-C8811FAF06E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1829074-66F9-4B3B-A084-B88D838CFC44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715A135-61A7-4E56-948D-8A8D5F7C98C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C836C26-DBC1-42CB-9B73-9F248D4F2B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CC4602-D1F5-4843-991A-2903C8336251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCCD64D-D73C-45FE-B49C-F79E23431B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7561E37E-E7B9-419F-949F-B8EF52DF00DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFE8A85-7F63-4E4C-A3FE-7B7E27AD1DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0807458A-2453-4575-AE19-0DE15E04B88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA0A0E0-A9D8-4FC3-88BD-FA0E7290A9A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1AF57E-79E9-40F2-817A-5E7D2760F1E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF9CEA3-054B-4469-A10F-DFCB9057E5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8313597-49A9-4918-B8D5-8E53C5C9AFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31D6B0E4-92F1-42FD-92DA-887D3D38CEBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C6DA27-2445-4850-B0EF-82EE8C01C0B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63BEFCC8-CC04-4C41-B31A-BF01E40FA1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E473CF-FE4B-4DBE-9EBE-337AE415FA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "730D29C4-2BC5-478C-AAFD-E8CF598A5CFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930678B3-1527-4967-9D8F-27FC0DA060AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A34268-7618-48D2-8872-27B5B624543B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.2xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2017A75-CC29-4161-85CB-7A531E5ABB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.0sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C809C7E-738B-461F-9155-BC19AAC8B661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.1sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CDB780-F259-4A2D-B32C-0401601715FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.2sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DBFACA-112F-48F6-BF0C-37FC6D133EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.3sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95384E18-A319-4BFA-912F-7AC7C664A80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.4sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B3C5A2B-85A8-4B75-A067-335D1DFE8C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.5sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85512107-7E38-4C00-96D0-01D9EE7DD903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.6sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7707BC4D-6090-44CF-B304-A54A46FAD32C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.7sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53D28F4F-5E14-48C1-8353-4D6A8C657FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.4.8sg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC7331C-F9D5-4E3C-B39A-11E1ED9240DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C14EB390-BA15-45C9-B971-D66CD98B0EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "748C5458-8F16-4DA4-8BDE-D00BF42DC8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B82207E-7E19-4E0A-93E6-C631897793D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.5.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A02F04-6717-403D-8A6B-B365F74DEE00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC32DB11-4E23-492E-A00E-E0DBF9131C64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2306E8-ABFD-4C37-A911-7B35A654147C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455DAAB8-83B4-44B9-B2F7-2DC9EA796898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F462360-3597-420B-ACB8-44A6F622C8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39DED4C1-E7AF-48E0-8B1A-839A87E52992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CA4E70-28BE-434C-811A-C16474CFD87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77A9A46-517E-467B-A702-E6F6DD9FCD96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD485792-290B-4553-AAB2-DA7427DE7131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7139C7-3C02-46C9-8F89-CB517A706CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AD00E6-A155-4CCB-B329-7B536BEBC976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D365DFD-C99B-4F33-9A90-1162C7A4D3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671F6847-6855-41BF-A148-944AEEB32A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.7ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7207B1F1-AF21-4C02-A163-4289503A026C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.7be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7CC0497-24F5-42ED-99A6-4C8642F73F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120DA9BF-1153-41C8-B80D-3F99E0E28A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.8e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89812FA8-230C-4F62-8AA8-7F13FA86B805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.9ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C116A982-58BF-4523-A5B1-83089E8557D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.9e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D17DB28-2559-4837-8B4B-7CC722D73324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.10e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92991EE-BB4A-499D-8F14-F7D0E32BE31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87687169-312C-41E6-9557-B2536A4CCA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E979597C-E614-45E9-9AC4-66DE323221BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0xas:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E7F768-0ABD-486E-810E-7C444951F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D46F3A2-C0C2-4083-B32F-B94DA4FD213E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312FDFDD-7612-4E79-A12E-7B1540324696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E908D0-7327-42B7-81C0-FA25BF45929C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705971E9-7FB4-43EA-A1AE-C91865EADE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5420E152-A00C-406C-8E27-6B7ADE4ABF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A56292-386C-4FC8-BC54-EF9E465F891B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DAA45-B363-47BB-ADBA-992F381572EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86176257-7075-476E-BE09-B0E469392BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355F4945-4FFA-469F-A799-815F371C637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB1EA1E-D995-4732-9685-75AC9042D484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1432B59F-5A66-4A5A-B3F7-E297700ED9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA68978-C42E-4A5E-A0D6-7887FA0318B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF06D7B-A239-4046-A704-01C54D534F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4622910B-5459-4FA4-A8D0-239AF2EFFE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F719709E-ACE9-4539-BA05-72F7DCB8BFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2835C64E-808F-4A6C-B245-7A9996FAFE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6907E1FE-760E-4557-A472-1A1F0052B82B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1040AF-A087-4791-BFC3-36CA3F3208E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62291CDD-A775-44B4-85F3-CE1D494F55FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F95B900-12A3-4488-BB50-20C972BEE169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658EDFE2-6EC8-4DD3-AACA-C168F942712A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCBE369-81ED-4C94-8C44-53C6F4A087CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90005E78-413A-47D7-82B3-A3011E6B118D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D764D126-4604-43DD-9A66-BDD32565D893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA25E3C0-24C1-479C-8C8F-A6FB9C5002FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06067D8B-79BD-4982-909F-7C08BE5660C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.8e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EAFB8DA-F9EC-4A42-A663-1BB4EF8F5E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.9e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "672B77C7-0E6B-496D-9ACC-6AD965319B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.10ce:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CF82A10-0DCA-4813-9D47-C6CBD6F36B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.10e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA1D885-2270-4370-9F3F-CA80B0E96DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3B6D68-DA31-45EB-ACFD-AE703B2FA2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EC727B-AF92-460D-B61D-F45ECEEE5D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94227B25-5C86-453C-9DC8-A8201C1D1FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0xas:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4293A90D-1FCA-456D-9D70-F5650B80B462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6352A220-8F3E-4E08-8DD3-50E366434333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5604A84-8240-45B6-9027-B03AA549CD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F278DC-5102-4A18-9C72-E8FEEDCC5729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895DAB3D-5C14-4D0B-94FA-EB7C7C7BB0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9846AE-1344-4EE4-9FDF-6CE17D9461FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513675B5-D62C-442D-8754-DC4F221942B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0ce:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3363DF79-8A5A-4BE2-B04C-253A4A3A0ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25725655-EBDE-4538-8AE1-CF5C81F09C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9F45C-E71F-4425-A0C7-DFFEEC93C152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98F2654-46F3-4C63-A2C2-48B372C655B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4E206B-37BF-4D61-BE90-80BB65C0C582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FB3B1A-FB8C-4371-A6D2-AB83ECF17F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17674BAD-F2F1-4E63-AAE0-FEAC14C37CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B351B3-3A18-4068-A95D-68942955070E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1xcs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007C8D80-2A6B-4C53-8A6B-0C95BCF1CA89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12F65A-5B43-4612-8788-B697567C0B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4117E2EC-F58A-4B22-AB72-FC63A0D96E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A005E0C-A744-4AFA-A1D1-2E3228E093FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED25B1B-C47A-45E9-8235-081550FB0AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20286676-70FF-471C-9612-74E5F0ECB8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B7EC67-B431-4284-8781-9090D134B781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3598539F-0EEB-45D6-8BA5-A2A3F69D556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF349D4-BF1C-4127-B6FA-7AD379F62A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ABE123-BBA5-46CD-8578-4A1F3CB8BA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD674BF9-16F6-4817-9ADE-564A402A5F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4142E2-B8A8-4E78-B4ED-52F63C43C6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DA3731-E719-4DB7-9783-1C00481141EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "483A3F03-F5CC-45BD-AEB7-83E23601BB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1692889D-BD16-41C6-A226-A9BAF6F64603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F327F7D0-93E8-4005-9ECB-44852C16BB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAC081C-9A22-4CBC-A9D0-DD9995801791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27252883-091A-471D-87FC-E07EADBC6FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF9D58E-CD75-47B1-938C-B5C0A73E28FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43F819E-3072-430F-8C52-B43FF28D4687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC3D979-02B2-4EEC-A6C2-A44C9FC694D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C340CE-7F18-448B-B9BE-BFEB1724C882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80F59A9-C1EF-4E9B-B204-1EEC7FDF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C1CA89-0FE4-4DC3-BB4B-299114E172AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79BC92-0869-447C-AF34-3FBF42375D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A930B7-7B9B-426E-A296-9F29F4A03F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4615A652-96A3-4809-94C0-7B7BF607B519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309952D7-B220-4678-A16D-AA5FF005F782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A31B2A2-E88A-49AA-B187-3EA91CB8842A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B26F38B-B72E-4BB7-B9FB-18C8AF92E05A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C5FC5B-BE2E-4BAC-AC23-58666BDEB553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503EFE9E-C238-46BA-8CA3-DE8D5DDB9A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EC8B17-6EC2-47AF-818D-1DFBDA612FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278ACF0A-949B-486D-8F6C-ADC2AF25FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A30BA4-D760-4321-AAC8-04093AAAEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42616EA2-DDCF-4B57-BF2A-37968C82DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246251E8-7D4E-4CD4-8D4F-BF360780FA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F35F75-75E8-4A20-94C4-5908E404C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D7ACF1-6A30-4D6E-AA69-D2F365E2791C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6E9386-30B4-4E86-9676-E7E005274048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD0A60B-6848-4B9A-B11D-2C2952D2D48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E4463-DB0F-4B06-B403-B3606B386F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D377F-EBEC-4234-8628-2CFD04E43CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665ACEAC-AE81-40F7-8A01-E8DB9DD7DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.7as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE50185-23ED-4640-9037-E45810793C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96637FB9-B552-417B-8C7F-4F4524F69690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA6851D-6DC1-403F-A511-EE996FE832F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C97617-6574-4EFD-8408-A9E21A56E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB188B71-4CF0-49EA-BA00-10FEDF994D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEAB7F8-EAB5-4E7A-8A1B-38EC16D601FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5484A4-D116-4B79-8369-47979E20AACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97410577-A005-49B6-981C-535B3484E72F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3420FB4D-8A6A-4B37-A4AE-7B35BEEEAF71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3822447-EB80-4DF2-B7F2-471F55BA99C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B441A-3A09-4A58-8A40-D463003A50BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E1A64A-204D-4567-A2DC-EFEB2AE62B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEFD3AD-EFA2-4808-801E-B98E4C63AA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1826C997-6D5D-480E-A12E-3048B6C61216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D136C95-F837-49AD-82B3-81C25F68D0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B3F96-B342-4AFC-A511-7A735B961ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203E52-0A3A-4910-863D-05FEF537C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED2D791-4142-4B9E-8401-6B63357536B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4es:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6442B5-A87E-493B-98D5-F954B5A001BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4gs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8794DA1D-9EE8-4139-B8E9-061A73CFD5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBEF4B2-EA12-445A-823E-E0E5343A405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EAC484-1C4F-4CA8-B8E1-6EE0E9497A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC5E30-71D2-4C17-A1BA-0850A9BC7D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E7CEC-5CB6-47AE-95F7-75693347C08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E50A67CE-EB1C-4BFA-AB40-BCF6CDF168BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147A245E-9A5D-4178-A1AC-5B0D41C3B730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169D71B3-1CCE-4526-8D91-048212EEDF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F66514-B9C4-422E-B68E-406608302E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2438157-4D9C-4E16-9D2A-759A8F6CDDE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12ECC01E-E59F-4AED-AE51-7EE6B5E717E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC524BA-544C-49B9-A9D6-800D25556532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.10as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A07FC8-5649-4A64-8B94-507524FE4551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.10bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E619BC-F1A2-45A7-BC12-E716BAC81376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC99316-75AC-45EB-B6BB-DB014ED08ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEF94C7-CEE6-4696-9F1D-549639A831C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0141D67B-632F-48ED-8837-4CC799616C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE444B39-D025-471B-835E-88671212ACAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE390091-D382-4436-BBB4-D4C33E4F6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E6308-7A34-43E3-9AD8-5FB52B31ACB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A667AEC6-57E3-4D67-A02E-F0BAEBCE16DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EE163D-D9EC-46A1-826A-54F8F3A3FFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1csp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE4CFE4-C00F-4FAE-8FDF-F6C92E92838D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1gsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3170E3-0BCC-4C5F-8E6C-5E91E8C4E7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1hsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCDB353-DD15-4C91-AD2A-73649C012E08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1isp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DAAE1-BB3F-4FBA-A6ED-3BABC9196C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEBCBF7-D1CF-488F-BB3E-F864F901A96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D43FA49-1F9D-4FD0-AF18-6E9AB6DF702F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8CCA19-1D1C-45C0-A1A0-CED5885AD580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014224BF-926E-470C-A133-84036D8AD533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10B0DE46-C4C4-4DA1-A4CD-9627F13FED3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58E818D-03BB-4FE4-946B-B967E9764DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4063CCF8-19BE-4411-B71B-147BB146700B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE8E0D1-E4AD-4648-BCF0-AE11B93D22B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "186ADB50-A4D4-4B32-884D-3195E7770346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.4sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334F278A-CFEB-4145-9D8D-EFC36A1BF258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.5sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B76F26E-7B1C-4894-8CDD-4BA1243E4EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.6sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5FB99D7-CDA9-4C3E-9DBB-3AC1CEBA4D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.7sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D05DBA-D3F0-492B-9976-54A7E46F315E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.8asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "596E09DB-97B1-4DCE-AC5E-18CC9ACCAFB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.8sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78224D59-5C86-4090-9645-170B6583C7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.9sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB2D4A7B-E0B7-4D65-B242-75934490D703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED5527C-A638-4E20-9928-099E32E17743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A685A9A-235D-4D74-9D6C-AC49E75709CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43052998-0A27-4E83-A884-A94701A3F4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89526731-B712-43D3-B451-D7FC503D2D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302933FE-4B6A-48A3-97F0-4B943251B717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296636F1-9242-429B-8472-90352C056106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77993343-0394-413F-ABF9-C1215E9AD800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283971DD-DD58-4A76-AC2A-F316534ED416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F324A5-4830-482E-A684-AB3B6594CEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8120196-8648-49D0-8262-CD4C9C90C37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E7CCE2-C685-4019-9B55-B3BECB3E5F76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0699DD6E-BA74-4814-93AB-300329C9D032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E2D781-2684-45F1-AC52-636572A0DCA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479FB47B-AF2E-4FCB-8DE0-400BF325666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2B4C78-5C31-4F3D-9639-305E15576E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C09F0A2-B21F-40ED-A6A8-9A29D6E1C6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BA13F4-EF9C-4368-B8B1-9FD9FAF5CEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CB889F-B064-4CAC-99AC-903745ACA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8AF15-AB46-4EAB-8872-8C55E8601599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957318BE-55D4-4585-AA52-C813301D01C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F11B703-8A0F-47ED-AA70-951FF78B94A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7B2557-821D-4E05-B5C3-67192573D97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE6EC32-51E4-43A3-BFB9-A0D842D08E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187F699A-AF2F-42B0-B855-27413140C384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0B905E-4D92-4FD6-B2FF-41FF1F59A948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EDEC28-661E-42EF-88F0-F62D0220D2E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D2D24-8F63-46DE-AC5F-8DE33332EBC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B825E6-5929-4890-BDBA-4CF4BD2314C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65020120-491D-46CD-8C73-974B6F4C11E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADDCD0A-6168-45A0-A885-76CC70FE2FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F35C623-6043-43A6-BBAA-478E185480CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83E34F4-F4DD-49CC-9C95-93F9D4D26B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2833EAE-94C8-4279-A244-DDB6E2D15DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B688E46-5BAD-4DEC-8B13-B184B141B169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8F50DB-3A80-4D89-9F7B-86766D37338B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFC70A2-87BC-4898-BCF3-57F7B1DD5F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F13F583-F645-4DF0-A075-B4F19D71D128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8DA556-ABF3-48D0-95B8-E57DBE1B5A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B53828-C520-4845-9C14-6C7D50EAA3A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20F23DB7-6F8E-470A-9B43-0ACEEF331C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623BF701-ADC9-4F24-93C5-043A6A7FEF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5311FBE-12BF-41AC-B8C6-D86007834863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FB055E-72F9-4CB7-A51D-BF096BD1A55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FBD681F-7969-42BE-A47E-7C287755DCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98255E6F-3056-487D-9157-403836EFB9D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521ACFB0-4FB2-44DB-AD7B-C27F9059DE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4463A1D1-E169-4F0B-91B2-FA126BB444CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F69C3-CAA6-491C-A0B6-6DC12B5AB472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD58C58-1B0C-4A71-8C02-F555CEF9C253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96852D16-AF50-4C70-B125-D2349E6765D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15B882A-BA60-4932-A55E-F4A798B30EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9C585C-A6EC-4385-B915-046C110BF95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC2EE60-4A07-4D92-B9BC-BF07CF4F2BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DBE4ED-1CD8-4134-9B33-17A91F44F17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0375BF9E-D04B-4E5B-9051-536806ECA44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2266E5A2-B3F6-4389-B8E2-42CB845EC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A6CF7-9104-4882-9C95-E6D4458AB778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5214D-9257-498F-A3EB-C4EC18E2FEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC5BB06-100F-42C9-8CEB-CC47FD26DDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84AE35F-D016-4B8F-8FE2-C2ACB200DFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07F9539-CFBE-46F7-9F5E-93A68169797D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10182B94-6831-461E-B0FC-9476EAB6EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961F8312-31B9-44E7-8858-EF8E2134F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D62EE1B-9A59-406C-B7DF-91B495F3ECFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79CF8D4E-F82A-469C-A8C2-0C203A800A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.8a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F9A8BD-75C5-4237-8B2C-027298300D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.8b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE589823-15AE-4352-AF1A-86787BB33C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081A51-E08F-4114-9276-584E836181D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A46516-CEB7-48D4-879B-341963A1FA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF98FA-6DF9-4935-9639-143E08462BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18B32E3-6B33-4E3D-879A-82E2F0BFC906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E37204-FC9A-4397-AFA4-9CAC7A116D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FCB9440-F470-45D1-AAFA-01FB5D76B600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F66ECFE-B631-47AE-995F-024A4E586A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBFDD70-7AF3-47AE-94CA-56C19F2D6234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B736F09-3B51-4B2A-92F6-602847001F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F58A94E-B050-4EFA-84BA-43B11BA22E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E864BB1-FD23-4AB3-9138-5FD8B62EAF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4D4659-A304-459F-8AB3-ED6D84B44C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F95D7-E49F-4B36-8F47-823C0298449E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21B3881-37E9-4C00-9336-12C9C28D1B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54599DB-A85E-4EEA-9985-2CBF90E28A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4046C325-7EDB-4C95-AA98-541BEC8F9E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B70A3D-CBE1-4218-A7B4-F85741A57BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B270A04-9961-4E99-806B-441CD674AFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360069D-0358-4746-8C3F-44C2A40988D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DD2403-113B-4100-8BD4-90E1927E6648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A35FFA44-9A59-4C20-9D86-C40B68BD5F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6B707B-4543-41F1-83DF-49A93BF56FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8F611B-D347-4A21-90E6-56CF4D8A35A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A92CE4-B4B0-4C14-AE11-8DFE511406F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298C82F9-79A6-4DB7-8432-8B3A6DA39620"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274E3E6F-4280-4EAE-B102-1BE57FE1F1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B52A51-51DB-4A12-AB1D-8D9605226599"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-dhcpv6-dos-44cMvdDK",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-dhcpv6-dos-44cMvdDK",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20081",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:14.873",
      "lastModified" : "2024-11-21T07:40:30.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of DHCPv6 messages. An attacker could exploit this vulnerability by sending crafted DHCPv6 messages to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Note: To successfully exploit this vulnerability, the attacker would need to either control the DHCPv6 server or be in a man-in-the-middle position."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D482F818-0A8E-49D7-8E3E-0958019FA629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E7BFB57-BC02-4930-A02F-83583E6A0FC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026F1960-C879-4611-A60A-96311B63CCA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF8B33E-0C95-467D-A865-0A234E69D0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF144F5-D933-4DE4-818C-001BD9E3958A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00112ED3-FE7B-425B-9A28-1E5F2BC8BB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD491D5-FAAB-493F-91A6-D2F3B5F5970E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1519F49D-588F-4B70-B38F-EF4F3E13FEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15354443-5EB7-4712-B2DE-61DB33830759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248D6B44-E134-4DEC-A947-636824E3FDFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0820A79C-F3EF-407F-9AC7-DCAB4CD39C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3E8805-85D2-4345-8076-039513209A31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14BB907B-D75A-4F5E-B20D-5457A71A70EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F118B803-4C55-436A-A136-0C1FEA49858F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A272121-408E-45F6-A2A1-0BA6EBC060A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61C3A433-0792-434E-AC90-A84B346499D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "980CEA3B-5A81-4E8C-BEA3-DD31BE7DA2CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3910211-D4DB-4CA7-BBEA-DD8246FF10ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C260BF30-7A33-4C70-9509-404856C93666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF894850-39EC-4B57-BBFF-F1AB4F8389A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FAFCF9-0ABE-483E-9604-329762BB7870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83DB4278-3126-4765-97C4-6C0A8C78DA78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174E631B-6099-47DE-8790-BBF4B7FDB8CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE3538B-F612-4105-BFDE-A4B594482DCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3143B0FF-C855-485E-A908-E48974B1643C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD9992-6D98-4E03-9599-ECF38A186FBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DCEAE6-355B-40AE-A7C8-AF744FCA8A86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2097E81E-B422-4B93-AF09-F300A0E8AF71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "454DEA31-A607-4054-82D3-24A4FEB7358F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57F0B213-8187-4465-84F1-FB8D92B36020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E540771E-BA0B-42D1-8251-B576B0F142C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC2A833-BECF-4000-A592-6113A84C2D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "077F1416-924A-4D25-9CEE-3BD66A96A019"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDC8D92-D6E0-40EE-B190-D2B32C7DEB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23CD5619-E534-4F40-998D-39DC19FA0451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D0EB11-14B1-44B3-8D46-B9DD872F772C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA399CF-12DB-42E0-A66F-14508B52A453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A7608-E737-420E-9B5E-836600DAC701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7EB6801-336D-4F41-ADE7-1C58C63C3F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8413DA41-02A5-4269-8C88-9DD5076AF91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA00285F-6914-4749-8A47-FC4EDAFFF3C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA4D367-32B9-4F54-8352-A959F61A1FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2259FF9E-0C8B-440F-B1AC-51BDE3F60E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C522B55-904D-4C08-B73E-1457D877C0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4483056A-FBF3-4E00-81EB-1E97334EF240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48677330-06AB-4C7F-B2AD-F7E465A9632A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AEA80D2-5DB8-4334-9A88-7DDE395832C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1C38A5-1028-4AD3-8CC7-A00091091E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C50642A-B123-4503-9EBB-32CDB67E44D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39B646DA-3317-4285-9CB3-1D90B8F54266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97AC204B-9376-4760-8EF7-58F6EC68C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75846B12-CC4D-4277-B12D-2C2D0DF1C706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289317DE-77AB-48AF-8CF2-00E9EB85F364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC44F77D-C48E-46DA-B7B7-9D772D043B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6445101B-54E3-4511-9D45-001CBE70203A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA4A0F4E-1330-456C-8C5E-C9F76BAF651F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F181EF65-D795-4ABB-B464-40B24B29ECA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C49A0CF5-EF87-4228-8B88-859A1E1AB7B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2CC4146-D447-4E5A-8CBB-60664CDE05BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1150A5-B314-4798-BE10-25E6F979ADA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44FC4B71-584F-444F-957C-99E045AA4140"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25FBC5B-3FD8-461A-99DE-4120D62CA914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1608733-4D00-4169-AAA2-2ACB7DCE01E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "390781EE-6B38-4C25-9BBC-10D67F858678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "332C4752-27EA-43ED-A42D-9C0E250C2F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A29D95A7-C9FB-424C-90E4-1D2F0FB27917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C3345B-61DA-4565-80DC-7C0645E076D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547BBEE2-E4C8-43C7-B0CB-A40DBF0457AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86F29A49-1E28-4483-BE05-6409DFBF6FC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0E70B2-E401-4F27-9033-5061BD8BA3D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D43506-BB40-4490-A3D0-D4B56D01F931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6F94E7F-2455-4C23-B055-3C759571D986"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B3FB946-FEC6-42F8-AFC3-40F581F7126B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A6CF74B-A6AC-4081-BA20-AB1C7DCF8850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ED3B3FD-B44F-464B-9B4E-2650A62EEF3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9.2.235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A2806C4-C1C7-4B10-A015-C5C922A9526F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69289C72-01B5-4280-A382-665C1224C850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A774BF55-3B8C-4E0A-BE73-93189E8E1CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.10.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC46F5E6-5385-46A9-997B-ED543B71CE25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.10.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F083BA6-04C8-44DF-8E3E-77C550F31C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.10.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445E350-259B-41DB-BAFF-EB1B023C4648"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.10.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E65D4505-C562-41C1-8CFE-1ABE807D83FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.10.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3F91FE1-433C-4263-AA0C-1EB5166B07D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.10.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4E6F0E-1729-4EFD-9B4B-76A39F1B7ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.10.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1A5740-7C1A-45D7-8767-5C50E09F2268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.10.1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9D78E4-EFEB-4D2F-989C-CB976E1B5C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.10.1.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B8ADDF-2845-4F6D-8920-A4909150927C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.10.1.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B422EED4-C9AA-411A-8203-270862FFFFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.10.1.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1F99D0-F529-44DE-BB26-2279688DFCCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.10.1.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46CE7CFE-6DAB-47D5-87EB-9607BBD41E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F002FD55-F881-450E-BC1B-8073E188F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA940C4F-13BB-465F-BB8D-CBD0109BF012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0434F5-9A50-4B57-9C5B-E09415D098C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE727035-06CB-4E37-A9D2-96BD54502120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FE52B81-2CF8-48E5-A7BA-A163A25A669B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E8D7C9-5272-40E6-869B-B33959F9F0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE8D5D71-5C85-4644-8A84-F073549ADB50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0790DDC2-7BA0-42DC-A157-754C0CBBE178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882394EA-70C8-4D86-9AEF-5D273D8E518C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855AD3CC-F404-48C5-80D2-7F2765D16D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26B6BF72-9124-4213-B3C0-BD31B46E8C91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8FBE89-8FDA-4B9B-BA1A-90FFD482A585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149C3872-8DA9-48DD-ADD0-2E84C1A76A40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D33E8C-294A-4C43-8DB6-9DA9F61F0B3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E23ACB0-DF8B-4672-A819-4DCD3104CE4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4723B88-62BA-40E6-AA89-BAC02D6A036F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C698819-3C8E-4A16-8F52-42FF1E54C076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3CE74E-59E7-448A-8417-18F97C05C798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0986C171-0E75-4F6F-A9BD-276830104E5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66A2777A-7831-4324-AEB2-5D93B5F6C04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37045680-9189-4B7F-A4F7-4E682FE20A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C9F37B-CF3C-4861-A969-C7CF4946274A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1DAF21-3FED-4691-9D4C-8FD8CEA7FB3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB938E58-4963-4A31-8836-88E958592B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E317897-EE97-44F3-96BB-E54228D72A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EF7FAB2-158D-4C48-9246-E7AD3BF1D801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056D43AE-ECDB-40D2-A196-18DDCD02629E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9AE545-A469-41C7-BD95-3CC80AF8067B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3255DB9E-85A5-48ED-90AA-6A7A55A0B1F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B6C9A0-B941-4C7C-BFE9-F1D837D5ADBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E783FD-5D4B-4C4F-BBFE-1186EFDFEF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40145CFB-CEE8-4ABA-A9C2-BA262B7A9AEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C82327-5362-4876-8058-EB51030CD5DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C700CC9-E16F-4C05-915D-1CA39257ACCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABDBB94-BA4F-4991-A703-0D7DDF999CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59B6947-1953-4C86-A76C-7A881CD3A502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D83C3A-ED0B-42D5-A08A-97D27E189875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A649E319-D408-4AA2-8293-C9E37AF14BA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4187EFE-4D7E-4493-A6E0-24C98256CF79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6730194F-5069-40AB-AE66-871D3992560C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E257F98-D1A0-4D28-9504-1749CC090D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FF1A5FC-73BE-4218-86D9-2E81FA64EABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E492943-6EC0-4E34-9DBC-DD1C2CF1CDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589E46F3-8038-4B87-8C40-55C6268B82F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3B73F6-139E-42DC-B895-DDD17B5A1138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2590E7-FE04-4B29-B36B-AABAA5F3B9AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4FD5E3-7E82-4294-8B05-D2045D857029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E998A4A-5346-4CFA-A617-FD1106C6B7A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91265549-A16E-4A00-A031-4F1EB8D6881C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3C316B-5485-4CDD-A1A1-6C0A9CB4719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE6D033-7B8B-4F61-B653-0C0EF13466EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14441650-DAD5-4959-83DF-4D6F3D6A05FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B21ABC9-A64B-43E4-8951-1E6C0F427DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48EC041-322F-422D-B95B-0FC07BDA2B6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0B9B73-A9E6-4924-9EAE-B57E534938FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012812C4-EFF8-465F-A771-134BEB617CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E06141A9-8C37-445A-B58A-45739AFE7D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EDC09E5-51D3-4672-B910-B34A9CBD6128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71ED7A71-81CB-444C-A4ED-EA4A58D5E73C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD13331-0EB8-4C8D-85CC-D96CA9F829AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7137F22B-F993-4620-9378-9412DAEA9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923A40E8-6456-4288-B9AB-DBF5F9C4246A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F57A86-6284-4269-823E-B30C57185D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6560447-039C-40FA-A24D-C8994AC2743B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378ED826-F5FE-40BA-9FC0-9C185A13518B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "130B6FD9-764D-4EF8-91AA-37E52AE9B3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225861CE-FFF8-4AFA-A07B-CB8D5BC9C361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD08C4E8-3ADB-4048-9B3C-4F0385201523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27ACBA2A-87A7-4836-A474-AFD7D22F820D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC0A7B7-2FE5-40ED-80F3-70F6CC2065F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B066DB88-FB86-467E-8AE2-3AC76B202082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A356E12-DFC8-45D3-A72B-133C72011A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40955D09-9351-436D-A93A-266913CFE407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDA8B7D-108E-4851-BDDD-E81C58131B8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "975AA7EF-3BE1-4112-AAAE-80C678DF06FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDC513A-8B98-4904-BC39-E178D6CABD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4E4A8-3FB8-4EAA-ADD8-D8A48269C7A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.2.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00E1A95-4D81-4D8C-8E9F-02F9866DEC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.2.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "968A5890-B604-4AF7-88FD-52512DE60A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3390375-1D75-4D28-AA2B-4D28FC006B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.2.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134FBA88-E8BF-4757-9ED5-449A03ED4FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.2.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F83FA7-11A1-48D1-AAD9-80EB8330C576"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.2.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2250FD43-E360-4BB9-8444-47C6014E77F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.2.38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E18DBD-6477-4DEF-9A4F-884F0987C89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.2.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F86296-B25B-4807-942F-C411B2B168A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A26F87-4A82-4BF1-9B69-3FDA62659237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B5E7C5-CE7E-45CF-9B02-D174F99D3379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A59FF9C-0A15-4F9F-A807-5F4B5FDD83F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.3.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0912860-7B6E-4AF9-8208-0F51A11B0CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.3.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1136F1DA-65C0-4D46-87EE-63A5EA8BCC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA9D4DA-1CC3-4F76-8AC2-936DF68608A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.3.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A05215-3700-4DF3-8CDF-25E40065B539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE017C1-28CE-4219-9BC4-E7AC61A836E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.3.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB86586-4D1A-415D-9070-EAAFFFF670AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2443A527-3A65-4226-A643-B683072CB664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA645994-0744-446B-96EA-21915AF3BEC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1E87A4-A9EB-4BFC-9070-F32ABD32D33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B63317-7612-4B7C-8AE8-F18AEFAF4560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF8BD7E-31C0-4F05-A092-64D9918ED5DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BBD9E97-0BC5-4120-8E03-1EE9D11E3359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D724096-92CD-457E-8CC5-B8099A8E3187"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66EA1792-85AC-4AD1-8213-A992F623D743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86C7966B-2EB0-4970-B2D5-9F892F2D1C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C1D4AD-01C0-4591-9308-625FEF736D7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EE06D7A-8DF5-4C98-AEDB-CF0DC5DFF565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B9027F6-F91E-49D3-9328-C72E18625292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C4EBE8-60A7-4F71-959A-1127DAF2A262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3484693F-1D88-44AA-B739-6E0B2C359A4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "413E425D-9BD5-4A9B-9FE6-6190C488C1D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753121F0-AE17-49FE-B5F3-71DFBD9A4634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A583EEC5-7EA9-422E-8C1C-4C28CDBC65F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDAA778-942A-433F-88E5-359490AA28CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DC8A5AE-032F-49C7-B1D3-FA68351E9C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.41:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0F554EB-CCF5-4779-B199-B5F54DDEF79A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.43:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2FD6008-65F5-4AA5-A824-674863D55F3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21908446-BEEC-4E62-AC98-A29CC1130C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.8.4.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F24887-C173-4EEB-A299-104C1E3FA701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646F1EBB-24EA-45B3-8437-071BE1040989"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CA92DBD-4500-4295-9E21-14E06E0FDC81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6D89F7-1EAF-4091-9FF1-A0B70F76B41D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C24AF6C-7C97-4C76-97B7-6CF98513D2C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AD2276-DA52-4A03-A991-3C9B736FFBE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10A10EF3-3BF1-413F-89C4-A157C70F8CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09AC6A1C-1080-4B70-A324-A7EF270270DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C48DE3-1096-42D0-BA55-9B8F46F1C9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC25AD63-0715-476D-BC9E-66E99091BF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CC2F017-C961-46C6-BB73-7B57367A48D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "553EF6FF-05DF-4B05-83D9-D7E4B45B5CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "028E165F-B8E3-4BC9-B235-B9CFD2D0E54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36999788-BB3C-45C6-A4A3-28572AE3B579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFEE1329-0C49-4149-AA4A-64E76429F7E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D45CD1F1-53F3-466A-B217-C68A57248A16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "020A76EE-85E4-4064-BFF3-10F6F2FD1244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B344394-1F5C-4272-B62F-372AA8C6FE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.52:*:*:*:*:*:*:*",
            "matchCriteriaId" : "272B4F25-F353-402F-A8C3-2CA59A7F091F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB33B59A-8448-4DF1-9CC9-AE1AAB1DFA4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDE7264-FC49-4E03-A540-28BD79BFFCD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D572BA-D27D-4CF2-A5A6-50A6FB03F681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1F5272-79BD-4847-83F7-B55D8D93172F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.67:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE6074A-133D-4553-A089-1F679B9D788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.74:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56F76A7D-8832-4873-8172-BD2FF68B79C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1DD620-7DC3-464B-8BED-205ECF2B49EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.83:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C219B2E1-8B1E-477C-9119-86C2D1575CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A50CAA-619B-4814-91A9-4D71110A6DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.9.2.235:*:*:*:*:*:*:*",
            "matchCriteriaId" : "959A700C-7F5B-4BB2-8DE7-313952301540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C1682E-F944-4A15-AD8D-FB15848C025F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.10.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C3B3E6-ED15-4AAE-A02D-224E6A738C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.10.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4C62CB3-06EB-4D7B-9C45-C920A30B3CDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.10.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDA9B25D-D9D7-470B-9B82-8FD818D4AAAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.10.1.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4F41B3-AF10-4E3B-AA94-22AF79D40D7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.10.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9F83CC-E66B-4FAB-A816-5F340E4D4A36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.10.1.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD19AC6E-4BF9-4644-B45A-09E73B31ED07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.10.1.27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2CE675D-2530-43FD-AF4D-F7AF70B86132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.10.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9838B80F-503A-4E24-B59B-5C7D219D49FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.10.1.32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF7E033-CF74-4F83-B857-0E0D04470C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.10.1.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4589D214-DF24-4DBD-8778-F22A1118E2E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.10.1.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5159338-D8B3-449B-9BF2-7586B81BBD45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.10.1.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "540FC6EA-4C1B-47E1-8C9D-8CBC12625DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.10.1.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60050A86-D4C3-4BDD-9106-33306BD8E953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55711FD3-EF2E-4247-883B-03A40FD97612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91495846-B9D1-4EBD-9AB3-3B93B85AC279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C17961-8069-4D62-ABC1-DCAB7329C3FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D742BF-6E32-4510-A484-EB478EE12132"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED71E067-9788-4369-BD9B-DAC3AA1A26BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344AAD16-48F8-470F-A292-1CA3D21A75D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6A591D-2AC6-4A28-B6CD-BD2A3F8D3C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95EC0A62-B604-4913-B52F-478FA03A5949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934198F1-D461-4881-B8C7-8CCECB730FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E357084A-5E12-41E8-9944-1451A55A2D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5D877E6-5623-41B0-BE45-4D8697DF1715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA3917D9-E072-4474-B236-AE25875AA509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0561BA9E-415A-4D2A-95A2-0C4A706E19A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E4A054-1837-436E-A1BF-68FF5213EE91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CC50D9-10AC-4098-8C09-E46A3BB2DB2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "420D097B-8D7F-455A-8FFD-3D07722CB232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBBAE927-0B79-4EFA-BC6B-08134B03DAB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B9CA5A8-6C58-44DA-8786-0A1784D73A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E47AFC-3BC4-4B8D-AC45-D71A0DB8937C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A81420A1-7B35-4C48-AF03-82F0ACDEC038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.4.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FAC37E6-81AC-4B7C-9C8B-EE9AFB4EF36B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.4.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD9D1E08-2203-4C5D-A6CA-1041312AAAC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.4.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "874B8CDA-1A5B-4F26-B7DF-34204FD481CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.4.29:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C2D047-BE9B-4A8C-A34E-77D9F1E4EEA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.4.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0481146-DDE9-4B0A-907E-867CCCA79F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.4.35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8D47A5-60F7-48F7-B8D1-BCE9E9976CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.12.4.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6362C627-390E-4183-B6D2-981E0EA1C89F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49124883-9210-4876-AD9A-1D907EE2FFE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.13.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A1C8D0-526A-4688-9699-5E1937A89180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.13.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D130D9-8913-489E-BAA4-B0B14250B8FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.13.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80D17185-7BD2-43A3-951D-CC593D4E9017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.13.1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93C908AA-D9C0-4205-A551-7E9D9834E01B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.13.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9A8FE6-F25E-497D-A3EF-69FC6A5DC881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.13.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD4E146-6C60-4F37-A882-E1AA166A4E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.13.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "909E97F3-0F3C-42E1-94D9-C785594F78DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.13.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38348775-81CD-4DD0-B3FE-3B5F9A3CACD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22038B43-6CE2-413A-8334-32BF9137E574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15464E33-3166-4401-993D-FEB12DBF0CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEAC68D-1A73-492B-A932-50048090A855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EB29B3-F12B-41DC-B573-3FFC0EB9D26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.1.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41F732E6-A003-4B38-9057-A962C7EDFC6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF57890-3CD7-41A3-A93A-4E3609CA1BF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2183862-4E0A-4046-AA22-53B8CFFAE9C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87C2BF2-D4F5-43FD-805C-B93D752ABAD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AF5911-BFE9-414B-AD39-F1E2E06377C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.2.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02C8586E-8BBE-45FA-80AA-5C1F2AC79BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4726A373-71E1-4E12-BEBB-62DF6293B45B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F02586-FB92-4A39-8141-A9BD55C52D6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66B0B2F-B191-47A2-917E-AC4616CC39AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A3E2E8-2E7E-469F-B396-902706C5863F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E247E151-E5C3-4A39-AA3F-BA77FBD743D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.3.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73F35B92-5A4B-4194-A7F0-721E12F7A427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.3.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F58F94-4010-4B3F-BD37-5DB291BFC082"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.14.3.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756045B0-6A52-4B98-9EE3-455A71F39034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E02DCB5D-818B-498E-B077-6C73568EC7A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.15.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C65E767-7E10-45CE-B46D-32A512D37E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.15.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B33FEB-0DB6-4F2F-BCB8-67CB26C5F127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.15.1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03700A91-CFC9-4038-AEC6-1D693F2577C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.15.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929439FB-D5E7-4E13-979B-8F0E407E17B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.15.1.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C107667C-A223-4EA1-ABB0-45E0AC6E0A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.15.1.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "143F8F07-9B3B-4015-AC57-B17F007D92E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.15.1.21:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A963BCC1-C1EF-4294-AF84-6969807E9B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E31CF5-7241-4DC5-97F9-C2EFC9E44A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.16.1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D20C10-2129-4AEE-87A1-05BD05690823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D84F31E-6830-4B79-BC20-584E622E3861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.16.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A45DA2B-089E-476D-B2B5-18337AA54B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.16.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA21B4B-0D0D-4F43-AC83-D979EFCCCBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.16.2.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D06B1D5-4CDE-406C-A667-1A2226B5229A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:9.17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D5859D3-D831-44BB-A72C-E2509054BB6B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:17.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "130B8DBD-7530-4A92-8044-39C097411EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7592C7E3-3735-425F-A276-9EE03224CD5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F77CD6A-83DA-4F31-A128-AD6DAECD623B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B68B363-3C57-4E95-8B13-0F9B59D551F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80890A8-E3D3-462C-B125-9E9BC6525B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0547E196-5991-4C33-823A-342542E9DFD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802CBFC1-8A2F-4BF7-A1D3-00622C33BE16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F374DC-B9F7-4515-A064-01BB436CA984"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D916389F-54DB-44CB-91DD-7CE3C7059350"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE82335E-ECEC-47BD-BC4A-5FDEA08D1A18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9421DBEF-AE42-4234-B49F-FCC34B804D7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419CB9F-241F-4431-914F-2659BE27BEA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5720462A-BE6B-4E84-A1A1-01E80BBA86AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818CEFA6-208C-43C3-8E43-474A93ADCF21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82225D40-537F-41D2-B1C4-1B7D06466B06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B60888-6E2B-494E-AC65-83337661EE7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8101-32fh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E055F58F-F9FB-4B27-841E-61ECAB5F42B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8101-32h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B832863-E366-46ED-BC35-838762F0CE29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8102-64h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C3DDAC-7D0F-4D1D-9632-F001F2EB5D34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8E7FFF-82A8-4ECB-BA0C-CBF0C2FDA3A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201-32fh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528BE0D3-E5ED-4836-B0D8-0C8508C5BDD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC4C2F-01C5-4D89-8D79-E5D28EDAD0F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_12-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B4318C0-0FD0-46B3-8E23-94EC53A34A20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_18-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FC6220-78E1-44A6-A596-6368D3EF7CC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_4-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAEDE0A-E6F9-4727-8DC2-F47579220BE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8800_8-slot:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E289FAD-04F0-4E3A-BC4D-8E5116F01AF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8804:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6655851F-58D9-49D9-A56E-8440A7F7BB45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E2AE67-DED3-4414-A194-386ADB2C8DC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3920133A-684D-4A9F-B65A-FF4EAE5052E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED06361-5A68-4656-AEA5-240C290594CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8831:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2514A1-486C-40F7-8746-56E2B973CBE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91209C16-A620-44A0-9134-8AA456343F29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C5C1005-0C12-4EDA-BC4A-B52201C4F516"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp100-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917B52DF-4210-4DD6-97EF-8A033497A954"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-esp200-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F413FB-D4F9-4113-9D67-2956BF1DC30D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE2182E7-C813-4966-A36C-E648A9344299"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED7C321E-F083-4AB6-96A0-D6358980441E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7594E307-AC80-41EC-AE94-07E664A7D701"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C913FF-63D5-43FB-8B39-598EF436BA5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1001-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "241EEBD9-76E4-4AE6-96B8-1C1ACD834F17"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4376E56-A21C-4642-A85D-439C8E21CD7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD2794BD-C8CE-46EF-9857-1723FCF04E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-hx_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC03A84F-C8F2-4225-9A00-8FA35368CD57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444F688F-79D0-4F22-B530-7BD520080B8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1002-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F2A755-556C-4C5E-8622-96D124319AF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DD2272-10C2-43B9-9F13-6DC41DBE179B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7428E0A8-1641-47FB-9CA9-34311DEF660D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1006-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7401B7-094C-46EB-9869-2F0372E8B26B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1009-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8A72FD-D8B0-45B5-8FAD-6D8395BB218A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854D9594-FE84-4E7B-BA21-A3287F2DC302"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1023:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C81CC6E3-B989-4730-820E-46734E3E608D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA873342-542E-4FC8-9C22-B5A43F9F3E9D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEF8271-315F-4756-931F-015F790BE693"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71BD158E-71D8-4DCA-8C09-F8AB7EF0EBDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9000v:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B6AF64-42FF-4411-85EA-9AE537383CD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324C97E6-1810-404F-9F45-6240F99FF039"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EB55BB-41B7-40A1-B6F5-142FE8AB4C16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "433F4A82-04A4-4EAA-8C19-F7581DCD8D29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70352B04-C3FD-47F5-A2F8-691CF63EB50D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_902u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE063AF2-5579-4D7E-8829-9102FC7CB994"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_903:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51938C0A-AFDB-4B12-BB64-9C67FC0C738F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_907:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18E4A46-10D3-48F8-9E92-377ACA447257"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7814FA61-CAF1-46DE-9D84-CEBE6480EA03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48fd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE4F60E-DF3D-4839-8731-7CF16DA8FF26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48fd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA5EEE3-A084-46B4-84C0-ADFD69800649"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48fd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "592F67D5-344B-49AF-A277-1089A40AC2FD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7434059A-25B8-4FAC-A756-6E571348B76E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2A5355-BF40-437C-8683-A7A81DEE362C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43F4B90E-3499-45D4-864D-18505E2149F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9BE6BA-6B2D-47C9-B8F1-3C9CE213948D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858FEECF-CC69-4E68-8E8A-674643021964"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE5FCCFF-E491-474F-9B86-AB51D8244582"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA8464F8-D6D2-4165-ADE8-B40F7D8556C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48ur-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61007628-A81B-43E0-86DE-1F7DDAD9F1A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9F022-4C3D-493E-9418-E9CDDAFEC9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C3F03C3-C0CA-4E9B-A99A-BE28153EB5C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B39F250E-6A89-4537-BD31-1FB81734A9A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-12x48uz-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4E3B69-DDE8-4EA2-8E63-D6EEF41083B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8904EAF5-25E7-4A6B-8117-1859F913B83B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A369CD35-1242-4556-A83D-BD69CC149CFA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2D1B9E-6234-4FD6-A003-AFBC8A4DC2E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784A1499-1F33-493D-B433-EB2550C03C19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59A990D6-B748-4AFD-B924-1D19680BD3DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CECFC88D-5480-46E4-BF74-E11A514A8BDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54D16A8-0407-41E3-9599-9A6F57E1AA75"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24pdm-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C94A9A21-C4F7-4EA4-95B1-DEA7DDA0F77D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ps-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3818CC-8653-4A9E-A57B-950A15914D6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EDC790B-B42D-45DB-ACF5-A789F76C2BC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ps-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A6BC84-91F2-437D-9D2E-F8B3F5966767"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24td-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F331F13-5D05-4213-B442-D48D8E22287B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24td-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E312F4-90DA-40E4-BCD1-92F41BEEEECF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24td-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA32EA3F-946D-430D-B00F-939D828DD72C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ts-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D239A09C-34D2-4418-B538-03A1080B8479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C84561E-DD99-4433-9EF2-083F7C300123"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-24ts-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29871BE-CA7D-4108-B46A-CBD539C9A2B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39CD9189-6524-4157-B90E-FF6A81DE3599"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF1B702-643A-4AF2-B0AD-3C540CF85F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96269625-CB31-4850-872B-B2C1321B13B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "426B68A6-3A41-43DB-846F-AEFBA62E221B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDE086A-3FE5-46E3-BD66-23D0AE5089BE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA53775A-D3ED-4D34-8338-A384DBEB94E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7D4522-D6BB-467F-AF5D-4D753A89D524"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C96215F-A300-4B4E-9D3A-C32E484BFC5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C680534-C663-40B0-A4AA-7F292EE60FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAF4F233-7B47-46ED-BDC5-A589BCFC0B39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fqm-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A528EC0-4650-4787-BE52-A588E7E38A31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53898E96-03D6-43A2-AE05-46C62464BD26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fs-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "465917E5-8BF0-4BBB-85A0-DE8F516880C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48fs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FA66D9-E465-406E-A95C-608A1BE34D74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFFE6E6-413F-48AC-B4CE-0F1058C48FC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1456B204-A2A5-4790-A684-7F50D692EC9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD715BDD-7C74-4785-BEDF-75918F6FB37A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD10664-94D0-48C0-92EF-E8EA66841245"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071A47F9-FF35-4F2C-BF5D-897CAC8BC08A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48pq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E988448-36C9-47E0-9356-DA400EB824E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ps-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D067EF9-00DB-4979-B12E-55749059A083"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ps-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FA300A-44B1-44EE-8111-C1296EB0B638"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ps-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8598A543-B30B-4BD4-9974-F432FFFDCDD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48td-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DEBBAD-D28D-4784-BBD8-9FAD1710A919"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48td-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5FC516-6B48-4D77-B26D-FA097AC91D1A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48td-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A7437E4-5C09-436C-AFBC-F6B6747A4339"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48tq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBC0277-4990-4DE7-AD80-20E8A6F561D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48tq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7DAF69-662B-4999-A6AD-AA528B53EAF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48tq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF90C70-A2B8-44A4-B4A1-2A1B48AA9D0A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ts-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D28306B1-3DDE-4444-9784-522B3D2163EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ts-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9257D187-1F2D-40F4-8C87-78978DB56C3F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-48ts-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF4A033-FD9E-4B98-A0FD-CF6CD9BD3E5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24pd-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AF8261-74E0-4F53-B82C-A7BA7559D7CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24pd-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25AE251E-E99F-4546-85B0-C57834B040B7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24pd-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62FFCB9-4253-459B-9298-C252DA9177DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "991CBDFB-6836-4D1F-80A9-14EBCE3F855F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4C0250-DA0D-4CEE-99F4-C211163C6653"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E18C436-AC70-4E2E-8ED2-EEADFCE36CB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3650-8x24uq-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D453BF6-AB9F-4D47-B4DF-C25C67358FFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "005F5347-A5E6-4954-ACAB-E4DF29119724"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2A8413-DF92-4690-8BC1-A21001BDF76B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12s-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "882B8D8F-E154-45C3-BB47-5353167C9776"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12x48u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F7FAA3-003D-4BEE-99CC-C9F75D5293FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54B4EB4-EB41-4522-B7AB-C30F96099EA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-12xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD7BE51-0BA6-4750-B274-A6E33D32B484"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-16xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B6123E-B86F-4EC8-95D6-4CE47A7D0AC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-16xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2305B8A-B8F2-4AF4-A86A-EFF11541D62D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C3EF8E-DF88-46DC-8E06-B009F346D1D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E87F823-D924-4718-AD81-248A6C619531"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BA01B5E-9E7B-4EE6-9480-A82B753BBB82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24pw-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAC93E0-F982-4E37-866E-43B7BC5AC82E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC866C9-BB98-4320-9FFA-F0960C560DA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24s-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FB0F3E-BB66-47BB-A59F-2D4C123F9CBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AD7495-3DA2-4596-9620-CD36D7C561AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492F3F8-4188-41E4-9A84-5E30C4AC3378"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "718F2FDC-9EA4-4C4C-8821-B15E56AF8101"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC5CB558-BD42-4615-BC31-41CCF25DE5C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC04072A-9BBE-4A9D-AE39-054D93E0C6D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E45BCCD0-65BB-431F-B448-221C1595CD92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33BA722-0680-4074-8D03-41657F8CDCC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "295C46B4-5E9F-4DD8-861B-00BA43923306"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431570C7-74A1-4F7E-8FD0-690AEF0F823B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D22E15-E1E8-4115-A55F-5743CA9C5947"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F840171D-CA1C-4E25-BD41-6B871C47BB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B240B20-CF48-4A72-9653-9D04D59C1391"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19D6AC73-67C9-4FA2-A361-FF08B0E3AF47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-24xu-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58430463-EA77-4DC9-ACDE-4DCF92CA2FC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-32xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CCD143-3D6E-4880-B275-ECF5B04238C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-32xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D3784F-C572-4A6F-83B9-BCF64D339BC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09C466B-CE87-4A57-B40B-88C94BAAF36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D58FF034-8E07-4518-A858-5F16F22217E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "376AD386-373D-4B24-966F-D11F76C9020F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2280CAA3-03F6-4168-8E50-A6B7132A3B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0C1174-C789-4547-9899-F7FCD0905F92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC366801-655A-403B-ACD9-3BB43802A3C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48pw-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF5463D0-A8D3-43EC-8CFF-F659A8C84436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD50BB2-BFD8-42F2-8C23-0D95187B01F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05D4D7E4-B195-46D8-8A6B-6AA4B8357618"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39600E51-4A21-4E5B-9FF9-E7C00AE86646"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E4D5A8-7E4A-44C5-81DC-84712781206D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13D6D50-D0FA-4527-BED3-52560DDD5253"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "965BF315-D833-4711-97FC-512151113367"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48u-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0ADEBE-3DA2-4850-8115-0AC937FB0A94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E9B149-AA2B-4421-8CC3-5A4B32B7AADF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04072C0F-78A2-4D10-87B2-52DC2537BA89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-f-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5C080E-D5C4-47B2-A46C-4EB3051C5221"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CEBEE0-DA67-4EE5-9BCF-263843053A8F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-48xs-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD262F58-C47F-439E-A9FF-D1C60120D306"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-nm-2-40g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35490BDE-DF21-495E-9F8A-7631FCB32A1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_3850-nm-8-10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EFB5B8-4A38-48C5-A363-3C7F7763C1D5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE9EABE0-5FB0-4277-A389-87732E750B7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7E8914-7B25-4097-8B22-6928C1F03D5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B207857B-C483-47DF-9FC7-6A05B866BF60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD26746A-80D1-4C48-BF77-E9F7EEEF7EA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB16CCE-1E89-4707-86C1-97F2FB5B62B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500-4qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DBA393-232D-40E6-9CDB-DF82D2E7A5B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04AB61E9-0148-495E-BD21-64D52DE60A6C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D2C587-E95B-4E74-88CF-5930072258D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8510msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3D1BB0B-0EFE-4C6D-A18E-3E48ABA01F00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540csr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74270062-2030-45A0-9C93-C1F3B7C88E8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8540msr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F403859-F034-4DD9-9CA5-708EADECB380"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4A5C56-0D08-4423-AEBD-33EDF172FCF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200cx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7670A322-31C2-4A8A-86E9-09D63C52E4C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9200l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D6376BE-3A69-469C-B6A9-2EFB55A3B87F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0972076B-5C87-44B3-90EC-4C200B89318A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3765B3DB-8B1B-46EF-AF7D-ED1EB2079C3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AED057-2458-4DE0-8D51-ABD766D07F68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19538C03-5FB8-4401-8B21-489C629D7E7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B26D7061-F471-4DF0-A892-ED132958B84A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033ED443-80E7-4012-9825-07AAC0D44B96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F3CC6-A349-47B1-B282-B6458683C191"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB24EF21-1C10-48A7-BC68-FFC842A28D12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0625A2-BF14-4552-83D8-AEE0A04EA023"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0D6ED6-AE64-4E20-B9CD-3EAA22709CFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AFDC0D-7629-424E-827B-C8A8767324C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A263CFF2-A659-405B-90EA-51E49B25C6D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFBD449-217D-4569-99F7-D56B853A3E07"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED668FC-D1A5-4175-A234-23760BA6E788"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D650C48-9241-42F7-87A9-20733329489A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED16A65-9AFF-4825-95D1-162FBA0F566D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D345E7-8208-41AC-B11A-4425D29E98A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E386D461-F1C1-4970-B056-D6119E74D449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F3A466-F665-4132-ABC4-2DFC0A7E2B55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3395168-FF2E-4CB6-AABE-5E36DEB241CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F525CBC-1CE6-4CAB-B1C1-DFA7EA462EF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226F985C-4669-4D0A-9DB4-CB1465B37B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B736A43-6F4E-40A9-84E4-D9E251489234"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FF888F-46F5-4A79-BB88-BB2EC2D27E24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26437DA7-2EFE-4CA2-8DB0-9FECBEFAE4EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99CA124-7D86-463B-A31E-A7836B7493E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E014B028-8DD9-428C-B705-8F428F145932"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C44229-A842-49B2-AD3E-79C83DB63EBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D56D21F-0F55-4AB1-AB9B-8EAE08F4BEDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C0441D-A7AC-4B4E-970A-3A441C2F66B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5306E847-C718-4C83-9C97-8AB498DC4A88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18287CEF-B574-4498-A256-567CA6E6CA7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9AAA2C-495E-4FD1-9050-264FDC25254B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713043E-2535-4540-B3EF-41FAC40BECE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0C18E5-45B9-49D2-A4AB-DD8D5CB04C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67701D77-8B03-446A-AE22-4B8CCCD6F029"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0BEAE3-2056-4B7B-8D7C-AEE3DC86CC2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831A2390-7170-4FC0-A95E-3DAB1791017D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788CBC4-782F-4A43-AC80-4AEF1C43A22D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493989DC-8F1B-45C9-AD11-38B97B958C9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l_stack:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419ABFB5-2C27-4EBE-98EF-8A8B718CD1F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300lm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DBB2E-DB15-47E1-B8F2-3AC0B1197C5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F168FB20-0C44-4A5B-910A-04B9517545C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737F22AB-C5A9-4A18-BA3D-38A222491397"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9400_supervisor_engine-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5DCFD5-2B46-4D06-9E4C-B2325F440F02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9407r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5508320-8318-41A8-8026-4A61907C1CD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9410r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAD337D8-8C72-4025-A8C3-E63598DE7BDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176ACF88-6112-4179-8492-50C50577B300"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9500h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07FC868-0B38-4F24-BA40-87966FF80AB7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C19A801D-02D7-40B0-88E8-FE7BA8630E60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600_supervisor_engine-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA59279-3504-417D-9E86-E5886EE198BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9600x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4035136-CC10-4DDD-92AF-9DC41D19CF8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48E6CF0-7A3B-4D11-8D02-0CD38F2420E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9ED0E5-CB20-4106-9CF2-8EB587B33543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-40_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E283C34-43AE-49A5-A72B-32DEA185ABD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B0E620C-8E09-4F7C-A326-26013173B993"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-80_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB3AF13-5324-42CD-8EDB-6F730BF46214"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF93F1C8-669F-4ECB-8D81-ECDA7B550175"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0BA345-B7D7-4975-9199-4DC7875BBFD0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9EA95F-4E39-4D9C-8A84-D1F6014A4A40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0BC769-C244-41BD-BE80-E67F4E1CDDA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800_embedded_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78706517-83F4-4D44-A6EC-B78ADCEABAC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cbr8_converged_broadband_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141CA33C-7453-417F-8A16-A64CE97C9052"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cg418-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C054973-91D8-439F-960F-02BF12A50632"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cg522-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79252E00-2D94-44AA-8601-E4AB4EA38A76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cloud_services_router_1000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CCB8270-A01D-40A6-BF4B-26BAF65E68F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esr-6300-con-k9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E69A6F-DFC0-4C8A-B77F-B7329FA5F567"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esr-6300-ncp-k9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA015C4-7163-4FCD-ADE1-D5481B10EACA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-24t-con-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C98B90-69B3-4BDF-A569-4C102498BFAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-24t-con-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7646B0A1-FDF5-4A60-A451-E84CE355302E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-24t-ncp-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA889066-14A8-4D88-9EFF-582FE1E65108"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-24t-ncp-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0C09AE-CD2A-486A-82D4-2F26AA6B6B95"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-con-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF81CC0-AEED-42DE-B423-8F4E118680BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-con-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDAAFDF1-7A3C-475F-AE82-B3194939D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-ncp-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9566FC8C-0357-4780-976F-8A68E6A7D24A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess-3300-ncp-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07503D21-965B-49F0-B8F2-B5ECD656F277"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess9300-10x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "880B8176-B30D-443E-B5F1-1769B65978C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3200-8p2s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "409A8E23-765E-4DDF-A1D6-957C069485F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3200-8t2s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBDA8A7A-0E67-457D-B141-4A7123D88563"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3300-8p2s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9BE362-7510-49AA-8407-9DF16C2CE83F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3300-8p2s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "188F53F7-026B-439F-8230-7A86F88ED291"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3300-8t2s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D83BE1F-BEAA-4A5E-ABB3-3D1C1290C33D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3300-8t2s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A025E73-71FF-4021-A531-972597B20983"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3300-8t2x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "258F818D-A13B-487F-B885-BCD66CFD9A35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3300-8t2x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96578BAC-0720-4662-9C15-10B085618ADB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3300-8u2x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B21C9C3-1B1F-4EAF-909B-D68A3975490A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3300-8u2x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D5D07D-81D0-4827-8AF9-4FA8E1C64D9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3400-8p2s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1424EF-E9F8-40AD-8B77-95A6EC220C2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3400-8p2s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE60F5EA-EE6A-45F2-8276-6859F1F976F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3400-8t2s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10B5F733-8359-4A02-9AE6-379DCEF98B54"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-3400-8t2s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E58BBF6-0975-45F0-9EBE-10AD86FBE1C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-9310-26s2c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6118613-8BC0-413D-A4D1-D6C6138CA693"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ie-9320-26s2c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4487C0CE-3020-4D06-92D8-CEA97C4FAC4A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:integrated_services_virtual_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5361C70A-C036-4254-9698-BC58F48C465B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftdios-dhcpv6-cli-Zf3zTv",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftdios-dhcpv6-cli-Zf3zTv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20082",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:14.953",
      "lastModified" : "2024-11-21T07:40:30.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to errors that occur when retrieving the public release key that is used for image signature verification. An attacker could exploit this vulnerability by modifying specific variables in the Serial Peripheral Interface (SPI) flash memory of an affected device. A successful exploit could allow the attacker to execute persistent code on the underlying operating system. Note: In Cisco IOS XE Software releases 16.11.1 and later, the complexity of an attack using this vulnerability is high. However, an attacker with level-15 privileges could easily downgrade the Cisco IOS XE Software on a device to a release that would lower the attack complexity."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.3.7",
            "matchCriteriaId" : "CC8A9AA8-8B32-4DC7-ABD9-BF2C5626BC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.4",
            "versionEndExcluding" : "17.6.5",
            "matchCriteriaId" : "612EB810-AB85-49D4-BB5C-C03E2B1A0B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0D8A08-6D86-44CE-8002-596EE74C4B26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0972076B-5C87-44B3-90EC-4C200B89318A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3765B3DB-8B1B-46EF-AF7D-ED1EB2079C3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AED057-2458-4DE0-8D51-ABD766D07F68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19538C03-5FB8-4401-8B21-489C629D7E7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B26D7061-F471-4DF0-A892-ED132958B84A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "033ED443-80E7-4012-9825-07AAC0D44B96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3F3CC6-A349-47B1-B282-B6458683C191"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB24EF21-1C10-48A7-BC68-FFC842A28D12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0625A2-BF14-4552-83D8-AEE0A04EA023"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0D6ED6-AE64-4E20-B9CD-3EAA22709CFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-24ux-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21AFDC0D-7629-424E-827B-C8A8767324C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A263CFF2-A659-405B-90EA-51E49B25C6D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48p-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEFBD449-217D-4569-99F7-D56B853A3E07"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED668FC-D1A5-4175-A234-23760BA6E788"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48s-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D650C48-9241-42F7-87A9-20733329489A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED16A65-9AFF-4825-95D1-162FBA0F566D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48t-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82D345E7-8208-41AC-B11A-4425D29E98A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E386D461-F1C1-4970-B056-D6119E74D449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48u-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99F3A466-F665-4132-ABC4-2DFC0A7E2B55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3395168-FF2E-4CB6-AABE-5E36DEB241CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48un-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F525CBC-1CE6-4CAB-B1C1-DFA7EA462EF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226F985C-4669-4D0A-9DB4-CB1465B37B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300-48uxm-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B736A43-6F4E-40A9-84E4-D9E251489234"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2FF888F-46F5-4A79-BB88-BB2EC2D27E24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26437DA7-2EFE-4CA2-8DB0-9FECBEFAE4EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E99CA124-7D86-463B-A31E-A7836B7493E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E014B028-8DD9-428C-B705-8F428F145932"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C44229-A842-49B2-AD3E-79C83DB63EBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D56D21F-0F55-4AB1-AB9B-8EAE08F4BEDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C0441D-A7AC-4B4E-970A-3A441C2F66B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5306E847-C718-4C83-9C97-8AB498DC4A88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18287CEF-B574-4498-A256-567CA6E6CA7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9AAA2C-495E-4FD1-9050-264FDC25254B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713043E-2535-4540-B3EF-41FAC40BECE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C0C18E5-45B9-49D2-A4AB-DD8D5CB04C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67701D77-8B03-446A-AE22-4B8CCCD6F029"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0BEAE3-2056-4B7B-8D7C-AEE3DC86CC2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831A2390-7170-4FC0-A95E-3DAB1791017D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F788CBC4-782F-4A43-AC80-4AEF1C43A22D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493989DC-8F1B-45C9-AD11-38B97B958C9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300l_stack:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "419ABFB5-2C27-4EBE-98EF-8A8B718CD1F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300lm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA0DBB2E-DB15-47E1-B8F2-3AC0B1197C5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F168FB20-0C44-4A5B-910A-04B9517545C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9300-spi-ace-yejYgnNQ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9300-spi-ace-yejYgnNQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20097",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:15.027",
      "lastModified" : "2024-11-21T07:40:32.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to improper input validation of commands that are issued from a wireless controller to an AP. An attacker with Administrator access to the CLI of the controller could exploit this vulnerability by issuing a command with crafted arguments. A successful exploit could allow the attacker to gain full root access on the AP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.10.183.0",
            "matchCriteriaId" : "D9EA7E3F-2EA0-4B32-BCA0-0E88FC9E4F9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09051BC5-CFE7-43EF-975D-BF77724E8776"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:aironet_access_point_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.9.0.135",
            "matchCriteriaId" : "386B92C5-05F3-40A8-8F35-280DD9E84169"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BFEED4-7AD7-406F-A044-BDEA98133711"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1542d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5DB7510-2741-464A-8FC9-8419985E330F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1542i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AE916B2-CAAD-4508-A47E-A7D4D88B077A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8191FD87-4E55-4F38-8DB0-7E6772AD075B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1562d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D717945-EE41-4D0F-86EF-90826EBE9C3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1562e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99EAEA92-6589-4DFB-BC4B-8CBA425452D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1562i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27AB201-342D-4517-9E05-6088598F4695"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F4C00A-D1E2-4B21-A14E-F30B4B818493"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC836B4D-A489-4300-B0A2-EF0B6E01E623"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F923CF-D4EB-48F8-821D-8BB3A69ABB62"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1810w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D613A17-FFA9-4FF0-9C2A-AF8ACD59B765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1815:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BF9DDB-884D-47B5-A295-8BFA5207C412"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1815i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "207DC80E-499C-4CA3-8A88-F027DBC64CCF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1815m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E3225A6-DA3C-49FE-B0F8-8AC6B7DA3347"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1815t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E1D6F32-3F51-4C5B-97AF-1AD8917FCB07"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1815w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09FEE6E-8169-4E90-ACF6-88BEE747D7A8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C28A6B0-10FF-4C6D-8527-2313E163C98E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "098A82FF-95F7-416A-BADD-C57CE81ACD32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD1D5813-9223-4B3F-9DE2-F3EF854FC927"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7636F7E2-E386-4F8C-A0C5-F510D8E21DA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D7583E-2B61-40F1-B9A6-701DA08F8CDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "945DDBE7-6233-416B-9BEE-7029F047E298"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED89428-750C-4C26-B2A1-E3D63F8B3F44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D8A4CB-5B80-4332-BCBC-DA18AD94D215"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749040C6-A21A-4EF3-8213-42EE01CFA303"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9105:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3CCCFE-88CC-4F7B-8958-79CA62516EA9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9105ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76DACE3-7D3B-4FE6-8567-0C9D43FF7A7E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9105axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F93DF4-67DB-4B30-AC22-60C67DF32DB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9105axw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C77B06-3C22-4092-AAAB-DB099A0B16A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9115:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4081C532-3B10-4FBF-BB22-5BA17BC6FCF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9115_ap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56A3430C-9AF7-4604-AD95-FCF2989E9EB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9115ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E2B891-4F41-4D0D-BAA2-0256C0565BDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9115axe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE4C56A6-E843-498A-A17B-D3D1B01E70E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9115axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F050F416-44C3-474C-9002-321A33F288D6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9117:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCE2220-E2E6-4A17-9F0A-2C927FAB4AA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9117_ap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4AE36E2-E7E9-4E49-8BFF-615DACFC65C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9117ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8798F4-35BB-4F81-9385-B0274BFAAF15"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9117axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A699C5C-CD03-4263-952F-5074B470F20E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47C2D6F-8F90-4D74-AFE1-EAE954021F46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120_ap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04889F8-3C2A-41AA-9DC9-5A4A4BBE60E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5889AFA2-752E-4EDD-A837-5C003025B25C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120axe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D41CFE-784B-40EE-9431-8097428E5892"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D148A27-85B6-4883-96B5-343C8D32F23B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120axp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "735CA950-672C-4787-8910-48AD07868FDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9124:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11EF240-7599-4138-B7A7-17E4479F5B83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9124ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53852300-C1D2-4F84-B8DA-4EDBCB374075"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9124axd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E987C945-4D6D-4BE5-B6F0-784B7E821D11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9124axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B434C6D7-F583-4D2B-9275-38A5EC4ECC30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C8E35A-5A9B-4D56-A753-937D5CFB5B19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9130_ap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "248A3FFC-C33C-4336-A37C-67B6046556E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9130ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CADEB5A-5147-4420-A825-BAB07BD60AA2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9130axe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC1F736-6240-4FA2-9FEC-D8798C9D287C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9130axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169E5354-07EA-4639-AB4B-20D2B9DE784C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_iw6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C559D6F7-B432-4A2A-BE0E-9697CC412C70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_iw6300_ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23153AA4-B169-4421-BFF8-873205FC9C21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_iw6300_dc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67DC3B71-B64D-4C49-B089-B274FA34ECB6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_iw6300_dcw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F857465-314F-4124-9835-8A269486D654"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.12.8",
            "matchCriteriaId" : "810472FD-52DE-4694-98FA-1AD858BEC895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1",
            "versionEndExcluding" : "17.3.6",
            "matchCriteriaId" : "55C1CD64-ADE0-453F-9E0B-EA952F743892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.4",
            "versionEndExcluding" : "17.6.5",
            "matchCriteriaId" : "612EB810-AB85-49D4-BB5C-C03E2B1A0B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.7",
            "versionEndExcluding" : "17.9.2",
            "matchCriteriaId" : "8F4C5572-9D7D-405C-AF93-DF9FF07F92F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aironetap-cmdinj-6bjT4FL8",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aironetap-cmdinj-6bjT4FL8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20100",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:15.103",
      "lastModified" : "2024-11-21T07:40:33.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error that occurs when certain conditions are met during the AP joining process. An attacker could exploit this vulnerability by adding an AP that is under their control to the network. The attacker then must ensure that the AP successfully joins an affected wireless controller under certain conditions. Additionally, the attacker would need the ability to restart a valid AP that was previously connected to the controller. A successful exploit could allow the attacker to cause the affected device to restart unexpectedly, resulting in a DoS condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-694"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42FAEC29-D754-49D6-85F1-F5DDFAF6E80F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48E6CF0-7A3B-4D11-8D02-0CD38F2420E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9ED0E5-CB20-4106-9CF2-8EB587B33543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-40_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E283C34-43AE-49A5-A72B-32DEA185ABD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B0E620C-8E09-4F7C-A326-26013173B993"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-80_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB3AF13-5324-42CD-8EDB-6F730BF46214"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF93F1C8-669F-4ECB-8D81-ECDA7B550175"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0BA345-B7D7-4975-9199-4DC7875BBFD0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9EA95F-4E39-4D9C-8A84-D1F6014A4A40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA0BC769-C244-41BD-BE80-E67F4E1CDDA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800_embedded_wireless_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78706517-83F4-4D44-A6EC-B78ADCEABAC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-apjoin-dos-nXRHkt5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-apjoin-dos-nXRHkt5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20107",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:15.197",
      "lastModified" : "2024-11-21T07:40:33.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco ASA 5506-X, ASA 5508-X, and ASA 5516-X Firewalls could allow an unauthenticated, remote attacker to cause a cryptographic collision, enabling the attacker to discover the private key of an affected device. This vulnerability is due to insufficient entropy in the DRBG for the affected hardware platforms when generating cryptographic keys. An attacker could exploit this vulnerability by generating a large number of cryptographic keys on an affected device and looking for collisions with target devices. A successful exploit could allow the attacker to impersonate an affected target device or to decrypt traffic secured by an affected key that is sent to or from an affected target device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-332"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-331"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.12.1",
            "matchCriteriaId" : "8EFD11F3-D5A7-4733-AEDE-74D1E0B341F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.0",
            "matchCriteriaId" : "BA44C8ED-0EDD-41A0-992A-0200CF1B33CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asa_5506-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763B801D-CA1E-4C56-8B06-3373EA307C7E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asa_5506h-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30AC6907-3091-409F-967D-64A82A0C5A8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asa_5506w-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11AF728-8EB0-45EB-A7DD-F2D52B3BB7B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asa_5508-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92AE506A-E710-465B-B795-470FDE0E0ECA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asa_5516-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E07AF10-FFB2-4AC7-BBE7-199C3EFED81F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa5500x-entropy-6v9bHVYP",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa5500x-entropy-6v9bHVYP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20112",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:15.267",
      "lastModified" : "2024-11-21T07:40:34.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:business_150ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "53461D22-32D2-4DE1-AD92-7973EC5B205B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:business_150ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2B555E-1523-4C62-A91D-EE1F3F1200EC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:business_151axm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "5A020A23-9AD6-4543-A859-3830EBB12296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:business_151axm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8760865B-4AB3-4A1A-960D-FF6974A7AC06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9105ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "AEAD0137-380A-42A1-8292-9923CCD36FEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9105ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76DACE3-7D3B-4FE6-8567-0C9D43FF7A7E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9105axi_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "9D31EFF0-1179-47AA-9D6E-1C9760F5A9EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9105axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F93DF4-67DB-4B30-AC22-60C67DF32DB2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9105axw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "D301BE7A-4A6A-48B1-8CF2-2FB930D47DB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9105axw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C77B06-3C22-4092-AAAB-DB099A0B16A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9105i_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "70D701B8-21F8-4286-B31F-C4CC18FF3B07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9105i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93510CF6-232E-4FBD-BF01-79070306FB97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9105w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "9CC5C951-CA0B-445D-B340-D1D6ECD94A59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9105w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77BE20A3-964E-46D3-ACA2-B53A175027D9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9115_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "4F837E8E-7B45-4D1C-8AD6-A40E60BB5CD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9115:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4081C532-3B10-4FBF-BB22-5BA17BC6FCF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9115ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "37255F5F-CB34-469E-A323-59914D7540CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9115ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E2B891-4F41-4D0D-BAA2-0256C0565BDE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9115axe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "591778EC-0772-44E4-B021-54B1B3504E83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9115axe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE4C56A6-E843-498A-A17B-D3D1B01E70E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9115axi_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "E0D5E598-481E-449A-9971-179687EB9592"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9115axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F050F416-44C3-474C-9002-321A33F288D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9117_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "51F49A92-966B-4269-9E35-7A28A86685A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9117:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FCE2220-E2E6-4A17-9F0A-2C927FAB4AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9117ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "7AD186AA-430B-4F51-AAB0-9D869EAD586C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9117ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8798F4-35BB-4F81-9385-B0274BFAAF15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9117axi_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "B540968A-C15E-4DAC-AEAE-4A0218600194"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9117axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A699C5C-CD03-4263-952F-5074B470F20E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "E55F958F-C3DC-4DAF-8EE5-C55562224DA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47C2D6F-8F90-4D74-AFE1-EAE954021F46"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9120ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "1794D85C-A7E4-4959-A3F8-0F15BD4D30D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5889AFA2-752E-4EDD-A837-5C003025B25C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9120axe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "588A0484-72B4-479C-9EA3-D427979BAAAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120axe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D41CFE-784B-40EE-9431-8097428E5892"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9120axi_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "A7A404E6-04C8-48C3-8D86-866969BEFA63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D148A27-85B6-4883-96B5-343C8D32F23B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9120axp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "3D7445C6-7A24-454A-8129-C4F3EEB38130"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9120axp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "735CA950-672C-4787-8910-48AD07868FDE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9124_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "5A5860B4-186D-460F-9C36-D3031D927AB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9124:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11EF240-7599-4138-B7A7-17E4479F5B83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9124ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "6BB68FAD-4F8C-4228-99C4-6EDFFAF5242D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9124ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53852300-C1D2-4F84-B8DA-4EDBCB374075"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9124axd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "FBB23E27-C004-4932-8690-1ECE1F4981B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9124axd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E987C945-4D6D-4BE5-B6F0-784B7E821D11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9124axi_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "7147FDD8-9B32-46E3-8537-0E8BEFFA4893"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9124axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B434C6D7-F583-4D2B-9275-38A5EC4ECC30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9130_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "3D612055-BDA4-49E2-9F31-1E434685BB83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1C8E35A-5A9B-4D56-A753-937D5CFB5B19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9130ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "61148FE7-059D-47B6-92B6-14187ED5B65A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9130ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CADEB5A-5147-4420-A825-BAB07BD60AA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9130axe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "457919D4-12E5-4E31-B29C-A2798B711D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9130axe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC1F736-6240-4FA2-9FEC-D8798C9D287C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9130axi_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "2B49F389-8F3E-421C-8C6B-FD05EAD6ED34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9130axi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169E5354-07EA-4639-AB4B-20D2B9DE784C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9136_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "F409EED4-899A-4C4C-B919-2C5E6F96A738"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9136:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09185C81-6FDF-4E6D-B8F7-E4B5D77909F4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9162_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "17541D5B-1F7D-4F99-92D1-2A2709F2D12E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9162:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9347227-9FA8-46B6-96EF-713543376296"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9164_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "8A85B807-FE69-4445-9846-1C50BFD0D4E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9164:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E81F0A-5B5C-4DD3-A56F-C7BF53D4B070"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9166_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.2.0",
            "matchCriteriaId" : "D76C0984-493A-4875-AACF-20870DF5DD7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9166:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "774AEB3E-5D6A-4E66-B0B4-C014A7C180E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-assoc-dos-D2SunWK2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-assoc-dos-D2SunWK2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20113",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-03-23T17:15:15.343",
      "lastModified" : "2024-11-21T07:40:35.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. These actions could include modifying the system configuration and deleting accounts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.6.5",
            "matchCriteriaId" : "05E5E3E9-A930-406C-B94C-61B62E74CACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan:20.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306ACFA4-A671-4B36-84B6-28325093D895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan:20.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36424C06-494A-479C-AF84-49A190B11AB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-csrf-76RDbLEh",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-csrf-76RDbLEh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23707",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-23T17:15:15.437",
      "lastModified" : "2024-11-21T07:46:42.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Unrestricted Upload of File with Dangerous Type vulnerability in Awsm Innovations Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files allows Stored XSS via upload of SVG and HTML files. This issue affects Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin <= 2.7.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:awsm:embed_any_document:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "2AAFA2D5-AD2A-4D43-82D3-C25849861A3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/embed-any-document/wordpress-embed-any-document-embed-pdf-word-powerpoint-and-excel-files-plugin-2-7-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/embed-any-document/wordpress-embed-any-document-embed-pdf-word-powerpoint-and-excel-files-plugin-2-7-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25456",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-23T17:15:15.553",
      "lastModified" : "2024-11-21T07:49:32.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Klaviyo, Inc. Klaviyo plugin <= 3.0.7 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:klaviyo:klaviyo:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.0.7",
            "matchCriteriaId" : "6D7E2283-F599-4925-AE0B-7015FC7FEF8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/klaviyo/wordpress-klaviyo-plugin-3-0-7-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/klaviyo/wordpress-klaviyo-plugin-3-0-7-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25992",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-23T17:15:15.637",
      "lastModified" : "2024-11-21T07:50:35.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM Answers plugin <= 3.1.9 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cminds:cm_answers:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.1.9",
            "matchCriteriaId" : "7FE220CA-2105-40BC-82CE-1A412627AB5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/cm-answers/wordpress-cm-answers-plugin-3-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/cm-answers/wordpress-cm-answers-plugin-3-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26008",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-23T17:15:15.730",
      "lastModified" : "2024-11-21T07:50:35.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay D'Souza Top 10 – Popular posts plugin for WordPress plugin <= 3.2.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:top_10_-_popular_posts_project:top_10_-_popular_posts:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.2.4",
            "matchCriteriaId" : "6391CA26-D808-4AD7-95E3-1FC095EAF697"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/top-10/wordpress-top-10-plugin-3-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/top-10/wordpress-top-10-plugin-3-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T17:15:15.817",
      "lastModified" : "2025-02-26T16:15:13.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in OpenGoofy Hippo4j v.1.4.3 allows attackers to escalate privileges via the ThreadPoolController of the tenant Management module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoofy:hippo4j:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE6062-50F4-4276-8D27-337745FF8AF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opengoofy/hippo4j/issues/1059",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/opengoofy/hippo4j/issues/1059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1605",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-23T19:15:12.863",
      "lastModified" : "2024-11-21T07:39:31.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.8.6",
            "matchCriteriaId" : "045B7EE7-A10D-430E-A936-327F65AFD8A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/radareorg/radare2/commit/508a6307045441defd1bef0999a1f7052097613f",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/9dddcf5b-7dd4-46cc-abf9-172dce20bab2",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/radareorg/radare2/commit/508a6307045441defd1bef0999a1f7052097613f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/9dddcf5b-7dd4-46cc-abf9-172dce20bab2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1606",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-23T19:15:12.953",
      "lastModified" : "2024-11-21T07:39:31.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in novel-plus 3.6.2 and classified as critical. Affected by this issue is some unknown functionality of the file DictController.java. The manipulation of the argument orderby leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223736."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en novel-plus 3.6.2 y se clasificó como crítica. Este problema afecta a algunas funciones desconocidas del archivo DictController.java. La manipulación del argumento orderby conduce a la inyección sql. El ataque puede ser lanzado de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. El identificador de esta vulnerabilidad es VDB-223736."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xxyopen:novel-plus:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8784DC3-1BFE-4C21-B764-13F6C7CC28BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OYyunshen/Poc/blob/main/Novel-PlusSqli1.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223736",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223736",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OYyunshen/Poc/blob/main/Novel-PlusSqli1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1289",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-23T20:15:14.393",
      "lastModified" : "2024-11-21T07:38:50.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in \"/tmp,\" resulting in a denial of service. When ImageMagick crashes, it generates a lot of trash files. These trash files can be large if the SVG file contains many render actions. In a denial of service attack, if a remote attacker uploads an SVG file of size t, ImageMagick generates files of size 103*t. If an attacker uploads a 100M SVG, the server will generate about 10G."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.1-0",
            "matchCriteriaId" : "A9DF6DDA-7BD8-46B0-B576-3B36C8E981CD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB176AC3-3CDA-4DDA-9089-C67B2F73AA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C30C1AC-01E4-4D7C-B03A-8EEEF3FC8C2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2176858",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/c5b23cbf2119540725e6dc81f4deb25798ead6a4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j96m-mjp6-99xr",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2176858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/c5b23cbf2119540725e6dc81f4deb25798ead6a4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j96m-mjp6-99xr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1544",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-03-23T20:15:14.497",
      "lastModified" : "2025-11-03T20:15:59.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "patrick@puiterwijk.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.0",
            "matchCriteriaId" : "7CCEA83E-03FB-45F9-9CE1-D3399FBD0782"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-1544",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2180364",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.nongnu.org/archive/html/qemu-devel/2023-03/msg00206.html",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0005/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-1544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2180364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/04/msg00042.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.nongnu.org/archive/html/qemu-devel/2023-03/msg00206.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1607",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-23T20:15:14.570",
      "lastModified" : "2024-11-21T07:39:31.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in novel-plus 3.6.2. It has been classified as critical. This affects an unknown part of the file /common/sysFile/list. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223737 was assigned to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en novel-plus 3.6.2. Se ha clasificado como crítico. Esto afecta a una parte desconocida del archivo /common/sysFile/list. La manipulación del argumento sort conduce a la inyección sql. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. El identificador VDB-223737 se asignó a esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xxyopen:novel-plus:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8784DC3-1BFE-4C21-B764-13F6C7CC28BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1610349395/novel-plus-v3.6.2----SQL-Injection-Vulnerability-/blob/main/novel-plus%20v3.6.2%20--%20%20SQL%20Injection%20Vulnerability%20.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223737",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223737",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/1610349395/novel-plus-v3.6.2----SQL-Injection-Vulnerability-/blob/main/novel-plus%20v3.6.2%20--%20%20SQL%20Injection%20Vulnerability%20.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1608",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-23T20:15:14.660",
      "lastModified" : "2024-11-21T07:39:31.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been declared as critical. This vulnerability affects the function getAdminList of the file /api/admin/store/product/list. The manipulation of the argument cateId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-223738 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crmeb:crmeb_java:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.4",
            "matchCriteriaId" : "6B0CB136-8432-4A7D-ADED-3C0E15826090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/crmeb/crmeb_java/issues/11",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223738",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223738",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/crmeb/crmeb_java/issues/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1609",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-23T20:15:14.743",
      "lastModified" : "2024-11-21T07:39:31.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been rated as problematic. This issue affects the function save of the file /api/admin/store/product/save. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223739."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crmeb:crmeb_java:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.4",
            "matchCriteriaId" : "6B0CB136-8432-4A7D-ADED-3C0E15826090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/crmeb/crmeb_java/issues/12",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223739",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223739",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/crmeb/crmeb_java/issues/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1610",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-23T20:15:14.850",
      "lastModified" : "2024-11-21T07:39:32.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in Rebuild up to 3.2.3. Affected by this issue is some unknown functionality of the file /project/tasks/list. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-223742 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruifang-tech:rebuild:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "3055AC72-F415-4504-952E-1E891C67D61C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/getrebuild/rebuild/issues/597",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223742",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223742",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/getrebuild/rebuild/issues/597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25654",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-23T20:15:14.960",
      "lastModified" : "2024-11-21T07:49:52.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution (RCE) Vulnerability in the management system of baserCMS. Version 4.7.5 contains a patch."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7.5",
            "matchCriteriaId" : "8E320A5C-F148-4B1C-A910-EE042EBD72E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/baserproject/basercms/commit/002886be0998c74c386e04f0b43688a8a45d7a96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/commit/08247f0a633d8e836ce2e5cd2d53aa19901a1359",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/commit/60f83054d8131b0ace60716cec7e629b5eb3a8f0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/releases/tag/basercms-4.7.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/security/advisories/GHSA-h4cc-fxpp-pgw9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/commit/002886be0998c74c386e04f0b43688a8a45d7a96",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/commit/08247f0a633d8e836ce2e5cd2d53aa19901a1359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/commit/60f83054d8131b0ace60716cec7e629b5eb3a8f0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/releases/tag/basercms-4.7.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/security/advisories/GHSA-h4cc-fxpp-pgw9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25655",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-23T20:15:15.067",
      "lastModified" : "2024-11-21T07:49:52.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains a patch."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7.5",
            "matchCriteriaId" : "8E320A5C-F148-4B1C-A910-EE042EBD72E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/baserproject/basercms/commit/922025a98b0e697ab78f6a785a004e0729aa9100",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/commit/9297629983ed908c7f51bf61a0231dde91404ebd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/releases/tag/basercms-4.7.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/security/advisories/GHSA-mfvg-qwcw-qvc8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/commit/922025a98b0e697ab78f6a785a004e0729aa9100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/commit/9297629983ed908c7f51bf61a0231dde91404ebd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/releases/tag/basercms-4.7.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/baserproject/basercms/security/advisories/GHSA-mfvg-qwcw-qvc8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26359",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-23T20:15:15.167",
      "lastModified" : "2025-10-23T11:12:54.057",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-08-21",
      "cisaActionDue" : "2023-09-11",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3B54B2B0-B1E1-4B4E-A529-D0BD3B5DEEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB126BF-E09D-4E58-A39F-1190407D1CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDD85DF-69A0-476F-8365-CD67C75CF0CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "23F63675-7817-4AF0-A7DB-5E35EDABF04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3BF53E-2C0D-4F79-8B62-4C2A50CB5F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "C26BF72C-E991-4170-B68B-09B20B6C0679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "25B4B4F2-318F-4046-ADE5-E9DD64F83FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "831E8D69-62E9-4778-8CC5-D6D45CF5AB6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "59649177-81EE-43C3-BFA5-E56E65B486DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "453B96ED-738A-4642-B461-C5216CF45CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "58D32489-627B-4E49-9329-8A3B8F8E4903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5860E1-D293-48FE-9796-058B78B2D571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9336CC-E38F-4BCB-83CD-805EC7FEF806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "97964507-047A-4CC8-8D2B-0EA0C7F9BD50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "82208628-F32A-4380-9B0F-DC8507E7701D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "1563CE5E-A4F7-40A4-A050-BB96E332D8DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7A94B406-C011-4673-8C2B-0DD94D46CC4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD05E3A-10F9-4C75-9710-BA46B66FF6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "D57C8681-AC68-47DF-A61E-B5C4B4A47663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "75608383-B727-48D6-8FFA-D552A338A562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "7773DB68-414A-4BA9-960F-52471A784379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B38B9E86-BCD5-4BCA-8FB7-EC55905184E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-26359",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26360",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-23T20:15:15.263",
      "lastModified" : "2025-10-23T11:12:47.763",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-03-15",
      "cisaActionDue" : "2023-04-05",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3B54B2B0-B1E1-4B4E-A529-D0BD3B5DEEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB126BF-E09D-4E58-A39F-1190407D1CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDD85DF-69A0-476F-8365-CD67C75CF0CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "23F63675-7817-4AF0-A7DB-5E35EDABF04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3BF53E-2C0D-4F79-8B62-4C2A50CB5F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "C26BF72C-E991-4170-B68B-09B20B6C0679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "25B4B4F2-318F-4046-ADE5-E9DD64F83FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "831E8D69-62E9-4778-8CC5-D6D45CF5AB6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "59649177-81EE-43C3-BFA5-E56E65B486DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "453B96ED-738A-4642-B461-C5216CF45CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "58D32489-627B-4E49-9329-8A3B8F8E4903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5860E1-D293-48FE-9796-058B78B2D571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9336CC-E38F-4BCB-83CD-805EC7FEF806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "97964507-047A-4CC8-8D2B-0EA0C7F9BD50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "82208628-F32A-4380-9B0F-DC8507E7701D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "1563CE5E-A4F7-40A4-A050-BB96E332D8DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7A94B406-C011-4673-8C2B-0DD94D46CC4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD05E3A-10F9-4C75-9710-BA46B66FF6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "D57C8681-AC68-47DF-A61E-B5C4B4A47663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "75608383-B727-48D6-8FFA-D552A338A562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "7773DB68-414A-4BA9-960F-52471A784379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B38B9E86-BCD5-4BCA-8FB7-EC55905184E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172079/Adobe-ColdFusion-Unauthenticated-Remote-Code-Execution.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172079/Adobe-ColdFusion-Unauthenticated-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-26360",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26361",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-23T20:15:15.373",
      "lastModified" : "2024-11-21T07:51:12.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in Arbitrary file system read. Exploitation of this issue does not require user interaction, but does require administrator privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3B54B2B0-B1E1-4B4E-A529-D0BD3B5DEEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB126BF-E09D-4E58-A39F-1190407D1CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDD85DF-69A0-476F-8365-CD67C75CF0CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "23F63675-7817-4AF0-A7DB-5E35EDABF04E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "3E3BF53E-2C0D-4F79-8B62-4C2A50CB5F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "C26BF72C-E991-4170-B68B-09B20B6C0679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "25B4B4F2-318F-4046-ADE5-E9DD64F83FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "831E8D69-62E9-4778-8CC5-D6D45CF5AB6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "59649177-81EE-43C3-BFA5-E56E65B486DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "453B96ED-738A-4642-B461-C5216CF45CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "58D32489-627B-4E49-9329-8A3B8F8E4903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5860E1-D293-48FE-9796-058B78B2D571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9336CC-E38F-4BCB-83CD-805EC7FEF806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "97964507-047A-4CC8-8D2B-0EA0C7F9BD50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "82208628-F32A-4380-9B0F-DC8507E7701D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "1563CE5E-A4F7-40A4-A050-BB96E332D8DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7A94B406-C011-4673-8C2B-0DD94D46CC4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD05E3A-10F9-4C75-9710-BA46B66FF6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "D57C8681-AC68-47DF-A61E-B5C4B4A47663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "75608383-B727-48D6-8FFA-D552A338A562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "7773DB68-414A-4BA9-960F-52471A784379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "B38B9E86-BCD5-4BCA-8FB7-EC55905184E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28436",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-23T20:15:15.487",
      "lastModified" : "2024-11-21T07:55:03.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tailscale is software for using Wireguard and multi-factor authentication (MFA). A vulnerability identified in the implementation of Tailscale SSH starting in version 1.34.0 and prior to prior to 1.38.2 in FreeBSD allows commands to be run with a higher privilege group ID than that specified in Tailscale SSH access rules. A difference in the behavior of the FreeBSD `setgroups` system call from POSIX meant that the Tailscale client running on a FreeBSD-based operating system did not appropriately restrict groups on the host when using Tailscale SSH. When accessing a FreeBSD host over Tailscale SSH, the egid of the tailscaled process was used instead of that of the user specified in Tailscale SSH access rules.\n\nTailscale SSH commands may have been run with a higher privilege group ID than that specified in Tailscale SSH access rules if they met all of the following criteria: the destination node was a FreeBSD device with Tailscale SSH enabled; Tailscale SSH access rules permitted access for non-root users; and a non-interactive SSH session was used.\n\nAffected users should upgrade to version 1.38.2 to remediate the issue.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tailscale:tailscale:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.34",
            "versionEndExcluding" : "1.38.2",
            "matchCriteriaId" : "627EF495-6BE7-4E49-95B1-2F6F67C153EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tailscale/tailscale/commit/d00c046b723dff6e3775d7d35f891403ac21a47d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tailscale/tailscale/releases/tag/v1.38.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/tailscale/tailscale/security/advisories/GHSA-vfgq-g5x8-g595",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://tailscale.com/security-bulletins/#ts-2023-003",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tailscale/tailscale/commit/d00c046b723dff6e3775d7d35f891403ac21a47d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tailscale/tailscale/releases/tag/v1.38.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/tailscale/tailscale/security/advisories/GHSA-vfgq-g5x8-g595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://tailscale.com/security-bulletins/#ts-2023-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0056",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-23T21:15:19.087",
      "lastModified" : "2025-02-25T20:15:31.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68833392-03CF-4C78-B499-EB2B8C1335D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ceph_storage:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E37E1B3-6F68-4502-85D6-68333643BDFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:software_collections:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749804DA-4B27-492A-9ABA-6BB562A6B3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40449571-22F8-44FA-B57B-B43F71AB25E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform_for_ibm_linuxone:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948DF974-D58C-41D3-9024-1C7D260D822F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform_for_power:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2127E592-F973-4244-9793-680736EC5313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FBE62-5A35-4C7A-BBC7-E0D05E09008B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.10:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "4E5177BE-F2A0-4148-AA26-E1C8D3B75D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.11:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "1E5CB8B9-F3B7-478E-94EA-705BDBE902D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "36DBD95A-D9C8-47CB-AD0E-F37255E237EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595C9F8-9C7A-4FC1-B7EE-52978A1B1E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform_for_ibm_linuxone:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91EE3858-A648-44B4-B282-8F808D88D3B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform_for_power:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54E24055-813B-4E6D-94B7-FAD5F78B8537"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E58526FB-522F-4AAC-B03C-9CAB443D0CFF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA983F8C-3A06-450A-AEFF-9429DE9A3454"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform_for_ibm_linuxone:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1104A2D0-B813-41B0-A6FB-677A3FC249BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform_for_power:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B2EF9F6-CE0A-48FA-87E5-77F94363B540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DFC1BF-2EC4-4102-97D0-BC9F75C94F71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40449571-22F8-44FA-B57B-B43F71AB25E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform_for_ibm_linuxone:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948DF974-D58C-41D3-9024-1C7D260D822F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform_for_power:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2127E592-F973-4244-9793-680736EC5313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "608FBE62-5A35-4C7A-BBC7-E0D05E09008B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB176AC3-3CDA-4DDA-9089-C67B2F73AA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-0056",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-0056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0590",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-23T21:15:19.150",
      "lastModified" : "2024-11-21T07:37:27.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 (\"net: sched: fix race condition in qdisc_graft()\") not applied yet, then kernel could be affected."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "9064B383-DD48-40A2-8947-F5BA6E6B6713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lore.kernel.org/all/20221018203258.2793282-1-edumazet%40google.com/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lore.kernel.org/all/20221018203258.2793282-1-edumazet%40google.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1249",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-23T21:15:19.217",
      "lastModified" : "2025-03-19T16:15:16.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in the Linux kernel’s core dump subsystem. This flaw allows a local user to crash the system. Only if patch 390031c94211 (\"coredump: Use the vma snapshot in fill_files_note\") not applied yet, then kernel could be affected."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.18",
            "matchCriteriaId" : "FE93544F-B946-47CF-9697-FBF3484FCB92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171912/CentOS-Stream-9-Missing-Kernel-Security-Fix.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://patchwork.kernel.org/project/linux-fsdevel/patch/87iltzn3nd.fsf_-_%40email.froward.int.ebiederm.org/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://packetstormsecurity.com/files/171912/CentOS-Stream-9-Missing-Kernel-Security-Fix.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://patchwork.kernel.org/project/linux-fsdevel/patch/87iltzn3nd.fsf_-_%40email.froward.int.ebiederm.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1252",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-23T21:15:19.287",
      "lastModified" : "2025-04-23T17:16:25.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations simultaneously with the overlay FS usage. This flaw allows a local user to crash or potentially escalate their privileges on the system. Only if patch 9a2544037600 (\"ovl: fix use after free in struct ovl_aio_req\") not applied yet, the kernel could be affected."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6",
            "versionEndExcluding" : "5.10.80",
            "matchCriteriaId" : "F33BDA1D-849E-4A10-BBF8-66BB9EA83D16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.14.19",
            "matchCriteriaId" : "2CEA9E6D-0F19-4EA8-B4B7-0ACE5C0FC7DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15",
            "versionEndExcluding" : "5.15.3",
            "matchCriteriaId" : "83F73FEF-14B1-40D4-9A9D-2FCF409F26AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lore.kernel.org/lkml/20211115165433.449951285%40linuxfoundation.org/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230505-0005/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lore.kernel.org/lkml/20211115165433.449951285%40linuxfoundation.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230505-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1402",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-03-23T21:15:19.357",
      "lastModified" : "2024-11-21T07:39:07.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The course participation report required additional checks to prevent roles being displayed which the user did not have access to view."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.9.0",
            "versionEndExcluding" : "3.9.20",
            "matchCriteriaId" : "8DDCF3CA-3037-424B-A5D7-4CD8E68E3007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.11.0",
            "versionEndExcluding" : "3.11.13",
            "matchCriteriaId" : "A52C0547-2DE2-4A30-8C47-6B8445ECDD7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.0.7",
            "matchCriteriaId" : "BBDF9798-C958-4541-95CC-E4B2452DEBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF8FCAA-948F-430E-A19D-C7BC09DA7D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "00B3AC07-3BC4-4F15-B6C2-043D113DD2FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6C077F6B-BA29-4B33-BD6B-AB4BEC630C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B926AF-E5E5-466B-B507-99F995EA25F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBD09E-9C4A-4E3A-B76C-5A3E6FD28AA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179427",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445069",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1513",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-23T21:15:19.427",
      "lastModified" : "2025-02-25T20:15:32.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "108695B6-7133-4B6C-80AF-0F66880FE858"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179892",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2c10b61421a28e95a46ab489fd56c0f442ff6952",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lore.kernel.org/kvm/20230214103304.3689213-1-gregkh%40linuxfoundation.org/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2c10b61421a28e95a46ab489fd56c0f442ff6952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lore.kernel.org/kvm/20230214103304.3689213-1-gregkh%40linuxfoundation.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1612",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-23T21:15:19.510",
      "lastModified" : "2024-11-21T07:39:32.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in Rebuild up to 3.2.3. This affects an unknown part of the file /files/list-file. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-223743."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruifang-tech:rebuild:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "3055AC72-F415-4504-952E-1E891C67D61C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/getrebuild/rebuild/issues/598",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223743",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223743",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/getrebuild/rebuild/issues/598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1613",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-23T21:15:19.597",
      "lastModified" : "2024-11-21T07:39:32.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Rebuild up to 3.2.3 and classified as problematic. This vulnerability affects unknown code of the file /feeds/post/publish. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-223744."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruifang-tech:rebuild:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "3055AC72-F415-4504-952E-1E891C67D61C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/getrebuild/rebuild/issues/596",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223744",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223744",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/getrebuild/rebuild/issues/596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20859",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-03-23T21:15:19.680",
      "lastModified" : "2024-11-21T07:41:42.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_cloud_config:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndIncluding" : "3.1.6",
            "matchCriteriaId" : "27E7C265-DE73-4FE5-BAE9-D6FD0B838B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_cloud_config:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.1",
            "matchCriteriaId" : "6A42F633-1074-46A8-AB65-DF694B34F650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_cloud_vault:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndIncluding" : "3.1.2",
            "matchCriteriaId" : "B545C7F6-40FB-4010-9146-1ED3FB861E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_cloud_vault:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBE7574-C6A7-4EE3-B7BE-5D867E1034BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_vault:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndExcluding" : "2.3.3",
            "matchCriteriaId" : "B2216E96-8849-4F10-BB79-24BB6B5A1F15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_vault:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.2",
            "matchCriteriaId" : "87C49F06-1DF2-4BA5-89E4-1FD4ED9086FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://spring.io/security/cve-2023-20859",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://spring.io/security/cve-2023-20859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20861",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-03-23T21:15:19.737",
      "lastModified" : "2025-02-25T16:15:33.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.22",
            "matchCriteriaId" : "B652E021-CB2D-4FBE-94F0-5D86A4DDFC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndIncluding" : "5.3.25",
            "matchCriteriaId" : "7F9C54AB-5DD5-4538-BAF5-9B7E155D9C74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.6",
            "matchCriteriaId" : "B59FEFBB-700F-42CA-B78D-7799BFADBAAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0007/",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://spring.io/security/cve-2023-20861",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://spring.io/security/cve-2023-20861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T21:15:19.793",
      "lastModified" : "2024-11-21T07:48:24.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delivery.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:notrinos:notrinoserp:0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B1872CA-417C-404A-B7EC-E3EEDBB3FE4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171804/NotrinosERP-0.7-SQL-Injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/arvandy/CVE/blob/main/CVE-2023-24788/CVE-2023-24788.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/arvandy/CVE/blob/main/CVE-2023-24788/CVE-2023-24788.py",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/arvandy/CVE/blob/main/NotrinosERP/POC.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/notrinos/NotrinosERP",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171804/NotrinosERP-0.7-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/arvandy/CVE/blob/main/CVE-2023-24788/CVE-2023-24788.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/arvandy/CVE/blob/main/CVE-2023-24788/CVE-2023-24788.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/arvandy/CVE/blob/main/NotrinosERP/POC.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/notrinos/NotrinosERP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28329",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-03-23T21:15:19.857",
      "lastModified" : "2024-11-21T07:54:51.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient validation of profile field availability condition resulted in an SQL injection risk (by default only available to teachers and managers)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.9.0",
            "versionEndExcluding" : "3.9.20",
            "matchCriteriaId" : "8DDCF3CA-3037-424B-A5D7-4CD8E68E3007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.11.0",
            "versionEndExcluding" : "3.11.13",
            "matchCriteriaId" : "A52C0547-2DE2-4A30-8C47-6B8445ECDD7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.0.7",
            "matchCriteriaId" : "BBDF9798-C958-4541-95CC-E4B2452DEBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF8FCAA-948F-430E-A19D-C7BC09DA7D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "00B3AC07-3BC4-4F15-B6C2-043D113DD2FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6C077F6B-BA29-4B33-BD6B-AB4BEC630C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B926AF-E5E5-466B-B507-99F995EA25F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBD09E-9C4A-4E3A-B76C-5A3E6FD28AA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179406",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445061",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28330",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-03-23T21:15:19.927",
      "lastModified" : "2024-11-21T07:54:51.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.9.0",
            "versionEndExcluding" : "3.9.20",
            "matchCriteriaId" : "8DDCF3CA-3037-424B-A5D7-4CD8E68E3007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.11.0",
            "versionEndExcluding" : "3.11.13",
            "matchCriteriaId" : "A52C0547-2DE2-4A30-8C47-6B8445ECDD7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.0.7",
            "matchCriteriaId" : "BBDF9798-C958-4541-95CC-E4B2452DEBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF8FCAA-948F-430E-A19D-C7BC09DA7D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "00B3AC07-3BC4-4F15-B6C2-043D113DD2FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6C077F6B-BA29-4B33-BD6B-AB4BEC630C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B926AF-E5E5-466B-B507-99F995EA25F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBD09E-9C4A-4E3A-B76C-5A3E6FD28AA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179412",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445062",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28331",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-03-23T21:15:20.000",
      "lastModified" : "2025-02-25T21:15:12.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.9.0",
            "versionEndExcluding" : "3.9.20",
            "matchCriteriaId" : "8DDCF3CA-3037-424B-A5D7-4CD8E68E3007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.11.0",
            "versionEndExcluding" : "3.11.13",
            "matchCriteriaId" : "A52C0547-2DE2-4A30-8C47-6B8445ECDD7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.0.7",
            "matchCriteriaId" : "BBDF9798-C958-4541-95CC-E4B2452DEBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF8FCAA-948F-430E-A19D-C7BC09DA7D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "00B3AC07-3BC4-4F15-B6C2-043D113DD2FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6C077F6B-BA29-4B33-BD6B-AB4BEC630C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B926AF-E5E5-466B-B507-99F995EA25F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBD09E-9C4A-4E3A-B76C-5A3E6FD28AA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179418",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445063",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179418",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28332",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-03-23T21:15:20.063",
      "lastModified" : "2024-11-21T07:54:51.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If the algebra filter was enabled but not functional (eg the necessary binaries were missing from the server), it presented an XSS risk."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.9.0",
            "versionEndExcluding" : "3.9.20",
            "matchCriteriaId" : "8DDCF3CA-3037-424B-A5D7-4CD8E68E3007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.11.0",
            "versionEndExcluding" : "3.11.13",
            "matchCriteriaId" : "A52C0547-2DE2-4A30-8C47-6B8445ECDD7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.0.7",
            "matchCriteriaId" : "BBDF9798-C958-4541-95CC-E4B2452DEBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF8FCAA-948F-430E-A19D-C7BC09DA7D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "00B3AC07-3BC4-4F15-B6C2-043D113DD2FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6C077F6B-BA29-4B33-BD6B-AB4BEC630C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B926AF-E5E5-466B-B507-99F995EA25F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBD09E-9C4A-4E3A-B76C-5A3E6FD28AA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179419",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445064",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28333",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-03-23T21:15:20.127",
      "lastModified" : "2024-11-21T07:54:51.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.9.0",
            "versionEndExcluding" : "3.9.20",
            "matchCriteriaId" : "8DDCF3CA-3037-424B-A5D7-4CD8E68E3007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.11.0",
            "versionEndExcluding" : "3.11.13",
            "matchCriteriaId" : "A52C0547-2DE2-4A30-8C47-6B8445ECDD7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.0.7",
            "matchCriteriaId" : "BBDF9798-C958-4541-95CC-E4B2452DEBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF8FCAA-948F-430E-A19D-C7BC09DA7D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "00B3AC07-3BC4-4F15-B6C2-043D113DD2FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6C077F6B-BA29-4B33-BD6B-AB4BEC630C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B926AF-E5E5-466B-B507-99F995EA25F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBD09E-9C4A-4E3A-B76C-5A3E6FD28AA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179422",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445065",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28334",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-03-23T21:15:20.193",
      "lastModified" : "2024-11-21T07:54:52.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authenticated users were able to enumerate other users' names via the learning plans page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.0.7",
            "matchCriteriaId" : "BBDF9798-C958-4541-95CC-E4B2452DEBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6C077F6B-BA29-4B33-BD6B-AB4BEC630C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B926AF-E5E5-466B-B507-99F995EA25F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBD09E-9C4A-4E3A-B76C-5A3E6FD28AA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179423",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445066",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28335",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-03-23T21:15:20.257",
      "lastModified" : "2024-11-21T07:54:52.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B926AF-E5E5-466B-B507-99F995EA25F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBD09E-9C4A-4E3A-B76C-5A3E6FD28AA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179424",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445067",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28336",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2023-03-23T21:15:20.317",
      "lastModified" : "2024-11-21T07:54:52.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.9.0",
            "versionEndExcluding" : "3.9.20",
            "matchCriteriaId" : "8DDCF3CA-3037-424B-A5D7-4CD8E68E3007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.11.0",
            "versionEndExcluding" : "3.11.13",
            "matchCriteriaId" : "A52C0547-2DE2-4A30-8C47-6B8445ECDD7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.0.0",
            "versionEndExcluding" : "4.0.7",
            "matchCriteriaId" : "BBDF9798-C958-4541-95CC-E4B2452DEBF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8CF8FCAA-948F-430E-A19D-C7BC09DA7D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "00B3AC07-3BC4-4F15-B6C2-043D113DD2FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6C077F6B-BA29-4B33-BD6B-AB4BEC630C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B926AF-E5E5-466B-B507-99F995EA25F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BBD09E-9C4A-4E3A-B76C-5A3E6FD28AA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179426",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445068",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2179426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=445068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28611",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T21:15:20.377",
      "lastModified" : "2025-02-25T20:15:32.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect authorization in OMICRON StationGuard 1.10 through 2.20 and StationScout 1.30 through 2.20 allows an attacker to bypass intended access restrictions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omicronenergy:stationguard:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.10",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "B48EC8DE-4466-42B1-BE49-A650BEA48DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omicronenergy:stationscout:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.30",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "9C7859AF-E619-45A4-A4BF-37A60A236286"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.omicronenergy.com/en/support/product-security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.omicronenergy.com/fileadmin/user_upload/website/files/product-security/osa-6.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.omicronenergy.com/en/support/product-security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.omicronenergy.com/fileadmin/user_upload/website/files/product-security/osa-6.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T22:15:12.920",
      "lastModified" : "2024-11-21T07:47:39.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack overfow in SoftMaker Software GmbH FlexiPDF v3.0.3.0 allows attackers to execute arbitrary code after opening a crafted PDF file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softmaker:flexipdf:2022:revision3.0.3:*:*:*:*:*:*",
            "matchCriteriaId" : "AAA380DE-C97E-4EA1-A2FC-650664DEA2C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sit.fraunhofer.de/CVE-2023-24295/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sit.fraunhofer.de/CVE-2023-24295/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24787",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T22:15:12.997",
      "lastModified" : "2023-11-07T04:08:42.430",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-24685. Reason: This record is a duplicate of CVE-2023-24685. Notes: All CVE users should reference CVE-2023-24685 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-23T22:15:13.053",
      "lastModified" : "2024-11-21T07:52:12.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joommasters:jms_blog:2.5.5:*:*:*:*:prestashop:*:*",
            "matchCriteriaId" : "D7B24874-0D96-4257-A6C0-41880E86E3BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joommasters:jms_blog:2.5.6:*:*:*:*:prestashop:*:*",
            "matchCriteriaId" : "5671D2FA-702F-4FB8-AC34-4E3E9315E6A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/03/13/jmsblog.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/03/13/jmsblog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28441",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-24T00:15:15.377",
      "lastModified" : "2024-11-21T07:55:04.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "smartCARS 3 is flight tracking software. In version 0.5.8 and prior, all persons who have failed login attempts will have their password stored in error logs. This problem doesn't occur in version 0.5.9. As a workaround, delete the affected log file, and ensure one logs in correctly."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invernyx:smartcars_3:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.5.9",
            "matchCriteriaId" : "3F5C51C7-A439-4503-813F-C1AF984BCD8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/invernyx/smartcars-3-bugs/security/advisories/GHSA-fp42-c8g2-5jc7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/invernyx/smartcars-3-bugs/security/advisories/GHSA-fp42-c8g2-5jc7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28442",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-24T00:15:15.463",
      "lastModified" : "2024-11-21T07:55:04.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. Prior to versions 2.20.6, 2.19.6, and 2.18.7, anonymous users can obtain sensitive information about GeoNode configurations from the response of the `/geoserver/rest/about/status` Geoserver REST API endpoint. The Geoserver endpoint is secured by default, but the configuration of Geoserver for GeoNode opens a list of REST endpoints to support some of its public-facing services. The vulnerability impacts both GeoNode 3 and GeoNode 4 instances.\n\nGeoserver security configuration is provided by `geoserver-geonode-ext`. A patch for 2.20.7 has been released which blocks access to the affected endpoint. The patch has been backported to branches 2.20.6, 2.19.7, 2.19.6, and 2.18.7. All the published artifacts and Docker images have been updated accordingly. A more advanced patch has been applied to the master and development versions, which require some changes to GeoNode code. They will be available with the next 4.1.0 release. The patched configuration only has an effect on new deployments. For existing setups, the patch must be applied manually inside the Geoserver data directory. The patched file must replace the existing `<geoserver_datadir>/security/rest.properties` file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geosolutionsgroup:geonode:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.18.7",
            "matchCriteriaId" : "027B75CC-42A5-4AB6-A6EB-A7C4C36EE44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geosolutionsgroup:geonode:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.19.0",
            "versionEndExcluding" : "2.19.6",
            "matchCriteriaId" : "2FC6FBE2-67E1-4014-9439-478911E7C56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:geosolutionsgroup:geonode:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.20.0",
            "versionEndExcluding" : "2.20.6",
            "matchCriteriaId" : "769D448E-E1E4-4C36-853C-8E24CDDB74FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GeoNode/geonode/security/advisories/GHSA-87mh-vw7c-5v6w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GeoNode/geoserver-geonode-ext/blob/2.20.7/data/security/rest.properties",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GeoNode/geoserver-geonode-ext/commit/f44cb074d8361c0f4e625013675bdd7bd8203df6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GeoNode/geonode/security/advisories/GHSA-87mh-vw7c-5v6w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GeoNode/geoserver-geonode-ext/blob/2.20.7/data/security/rest.properties",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GeoNode/geoserver-geonode-ext/commit/f44cb074d8361c0f4e625013675bdd7bd8203df6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28443",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-24T00:15:15.553",
      "lastModified" : "2024-11-21T07:55:05.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.23.3, the `directus_refresh_token` is not redacted properly from the log outputs and can be used to impersonate users without their permission. This issue is patched in version 9.23.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        }, {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "9.23.3",
            "matchCriteriaId" : "FE45F985-DA11-41EA-AC98-0F122231CCE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/directus/directus/blob/7c479c5161639aac466c763b6b958a9524201d74/api/src/logger.ts#L13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/directus/directus/commit/349536303983ccba68ecb3e4fb35315424011afc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/directus/directus/security/advisories/GHSA-8vg2-wf3q-mwv7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/directus/directus/blob/7c479c5161639aac466c763b6b958a9524201d74/api/src/logger.ts#L13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/directus/directus/commit/349536303983ccba68ecb3e4fb35315424011afc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/directus/directus/security/advisories/GHSA-8vg2-wf3q-mwv7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28445",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-24T00:15:15.653",
      "lastModified" : "2024-11-21T07:55:05.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Resizable ArrayBuffers passed to asynchronous functions that are shrunk during the asynchronous operation could result in an out-of-bound read/write. It is unlikely that this has been exploited in the wild, as the only version affected is Deno 1.32.0. Deno Deploy users are not affected. The problem has been resolved by disabling resizable ArrayBuffers temporarily in Deno 1.32.1. Deno 1.32.2 will re-enable resizable ArrayBuffers with a proper fix. As a workaround, run with `--v8-flags=--no-harmony-rab-gsab` to disable resizable ArrayBuffers."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deno:deno:1.32.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A38DE-3D64-41AE-A44A-B4E3EFCE97B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deno:deno_runtime:0.102.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "078A97CE-CC80-48D7-B07B-2ACCC0C6A808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deno:serde_v8:0.87.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "01AE0210-6362-4A33-B3BE-E7F7D81BA923"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/denoland/deno/pull/18395",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/denoland/deno/releases/tag/v1.32.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/denoland/deno/security/advisories/GHSA-c25x-cm9x-qqgx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/denoland/deno/pull/18395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/denoland/deno/releases/tag/v1.32.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/denoland/deno/security/advisories/GHSA-c25x-cm9x-qqgx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-24T04:15:55.963",
      "lastModified" : "2025-02-19T22:15:16.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message. The attacker can change the display of group chats or force a victim to join a group chat; the victim may then be tricked into disclosing sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dino:dino:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.3",
            "matchCriteriaId" : "8C1028D4-918B-4FBB-A87B-909BE83D0703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dino:dino:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.3.0",
            "versionEndExcluding" : "0.3.2",
            "matchCriteriaId" : "9C6DBD26-1958-4668-81F5-57EC5FE68D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dino:dino:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.4.0",
            "versionEndExcluding" : "0.4.2",
            "matchCriteriaId" : "8C2CF482-9F37-40CE-86DA-6188A5CDF3EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dino.im/security/cve-2023-28686/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQLCEUZS5GPHUQMS7C6W2NS3PHYUFHYF/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GOH6NYTLPM52MDIR2IRVUR3REDVWZV6N/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IIWXAK656EHSRIRUHLPBE3AX2I4TMH7M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5379",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://dino.im/security/cve-2023-28686/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQLCEUZS5GPHUQMS7C6W2NS3PHYUFHYF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GOH6NYTLPM52MDIR2IRVUR3REDVWZV6N/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IIWXAK656EHSRIRUHLPBE3AX2I4TMH7M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28818",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-24T04:15:56.393",
      "lastModified" : "2025-02-19T22:15:16.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing unauthentic components. A malicious actor could install rogue Collector executable files (aptare.jar or upgrademanager.zip) on the Portal server, which might then be downloaded and installed on collectors."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:aptare_it_analytics:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.6.00",
            "matchCriteriaId" : "0740098E-CE7C-4AC6-BC8F-A51F046ABFA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_it_analytics:11.0.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD01BD6-54A5-4F81-81E2-81D65BC7428D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_it_analytics:11.1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A3FBC4-5341-4928-9B29-8A8A0891B9F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS23-002",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS23-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1616",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-24T08:15:07.467",
      "lastModified" : "2024-11-21T07:39:32.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223800."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teacms_project:teacms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "66AD3593-AEFF-47BC-BA9B-F28EEF8CFF81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/xiaobingby/TeaCMS/issues/I6L9Z2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223800",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223800",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/xiaobingby/TeaCMS/issues/I6L9Z2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-24T12:15:07.090",
      "lastModified" : "2025-02-19T22:15:15.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SourceCodester Loan Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Type parameter under the Edit Loan Types module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razormist:loan_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B340CFE4-DBA8-40EB-B73D-1A294A9BB502"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kaikai-11/Loan-Management-System",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kaikai-11/Loan-Management-System/blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kaikai-11/Loan-Management-System",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kaikai-11/Loan-Management-System/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1176",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-24T15:15:10.110",
      "lastModified" : "2024-11-21T07:38:36.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-36"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.2",
            "matchCriteriaId" : "84D05E2A-38B6-4CE3-A817-5EFA0F802CF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mlflow/mlflow/commit/63ef72aa4334a6473ce7f889573c92fcae0b3c0d",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ae92f814-6a08-435c-8445-eec0ef4f1085",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/mlflow/mlflow/commit/63ef72aa4334a6473ce7f889573c92fcae0b3c0d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ae92f814-6a08-435c-8445-eec0ef4f1085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1177",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-24T15:15:10.193",
      "lastModified" : "2024-11-21T07:38:36.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path Traversal: '\\..\\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-29"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.1",
            "matchCriteriaId" : "47585D82-8CC2-4A20-B203-4EB18BC5F4FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mlflow/mlflow/pull/7891/commits/7162a50c654792c21f3e4a160eb1a0e6a34f6e6e",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/1fe8f21a-c438-4cba-9add-e8a5dab94e28",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mlflow/mlflow/pull/7891/commits/7162a50c654792c21f3e4a160eb1a0e6a34f6e6e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/1fe8f21a-c438-4cba-9add-e8a5dab94e28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-24T15:15:10.287",
      "lastModified" : "2025-02-21T18:15:14.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) attack."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ladybirdweb:faveo_servicedesk:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C8BFEA-0FF8-4B4E-9F40-A95A8868A4F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cupc4k3.lol/cve-2023-24625-idor-in-faveo-service-desk-37a63f53d896",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/%40cupc4k3/vulnerabilities-in-faveo-service-desk-37a63f53d896",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.faveohelpdesk.com/servicedesk/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://cupc4k3.lol/cve-2023-24625-idor-in-faveo-service-desk-37a63f53d896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/%40cupc4k3/vulnerabilities-in-faveo-service-desk-37a63f53d896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.faveohelpdesk.com/servicedesk/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-24T16:15:08.673",
      "lastModified" : "2025-05-30T16:15:34.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:independentsoft:jword:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.110",
            "matchCriteriaId" : "C2847521-A44E-4F08-A648-2E97AB03ABCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-28152",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/CVE-2023-28152",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.independentsoft.de/jword/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/CVE-2023-28152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.independentsoft.de/jword/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20906",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.067",
      "lastModified" : "2025-02-28T21:15:19.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission after a Target SDK update due to a permissions bypass. This could lead to local escalation of privilege after updating an app to a higher Target SDK with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-221040577"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20910",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.113",
      "lastModified" : "2025-02-28T21:15:19.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/packages/modules/Wifi/+/8827591ae680c4d0bd0e373d4ca20cb35f53faa6",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/packages/modules/Wifi/+/d7df9d633c2726fa2bee8739c9ba274f300e1ea9",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-07-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://android.googlesource.com/platform/packages/modules/Wifi/+/8827591ae680c4d0bd0e373d4ca20cb35f53faa6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://android.googlesource.com/platform/packages/modules/Wifi/+/d7df9d633c2726fa2bee8739c9ba274f300e1ea9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-07-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20911",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.160",
      "lastModified" : "2025-02-28T21:15:19.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-242537498"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20917",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.213",
      "lastModified" : "2025-02-28T21:15:19.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-242605257"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20926",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.257",
      "lastModified" : "2025-02-28T21:15:19.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-253043058"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20929",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.303",
      "lastModified" : "2025-02-28T21:15:19.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due to an unrestricted broadcast intent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-234442700"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20931",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.350",
      "lastModified" : "2025-02-28T21:15:20.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-242535997"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20936",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.397",
      "lastModified" : "2025-02-25T22:15:12.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-226927612"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20947",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.447",
      "lastModified" : "2025-02-28T21:15:20.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-237405974"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20951",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.497",
      "lastModified" : "2025-02-25T22:15:12.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-258652631"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20952",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.543",
      "lastModified" : "2025-02-25T22:15:12.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In A2DP_BuildCodecHeaderSbc of a2dp_sbc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-186803518"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20953",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.593",
      "lastModified" : "2025-02-25T22:15:12.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to incorrect UI being shown prior to setup completion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251778420"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20954",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.637",
      "lastModified" : "2025-02-25T17:15:11.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-261867748"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20955",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.687",
      "lastModified" : "2025-02-25T17:15:12.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-258653813"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20956",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.730",
      "lastModified" : "2025-02-25T17:15:12.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-240140929"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20957",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.777",
      "lastModified" : "2025-02-25T17:15:12.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-258422561"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20958",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.823",
      "lastModified" : "2025-02-25T17:15:12.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In read_paint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-254803162"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20959",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.867",
      "lastModified" : "2025-02-21T16:15:31.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions checks. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-249057848"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20960",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.913",
      "lastModified" : "2025-02-25T17:15:12.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12L Android-13Android ID: A-250589026"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20962",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:09.963",
      "lastModified" : "2025-02-25T17:15:12.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-256590210"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-926"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20963",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:10.010",
      "lastModified" : "2025-10-23T14:53:36.140",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-220302519"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-04-13",
      "cisaActionDue" : "2023-05-04",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Android Framework Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20963",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20964",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:10.087",
      "lastModified" : "2025-02-25T17:15:13.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy. This could lead to local denial of service or escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-238177121"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20966",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:10.477",
      "lastModified" : "2025-02-25T22:15:12.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-242299736"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20968",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:10.643",
      "lastModified" : "2025-02-25T16:15:34.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262235935"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20969",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:10.687",
      "lastModified" : "2025-02-25T16:15:34.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236313"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20970",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:10.793",
      "lastModified" : "2025-02-25T16:15:34.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236005"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20971",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:10.913",
      "lastModified" : "2025-02-25T16:15:34.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://android.googlesource.com/platform/frameworks/base/+/6c22d6c1e69676c5c68d21928aa5486bfd1bd131",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2024-08-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20972",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.040",
      "lastModified" : "2025-02-25T16:15:34.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In btm_vendor_specific_evt of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-255304665"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20973",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.157",
      "lastModified" : "2025-02-25T16:15:35.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In btm_create_conn_cancel_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568245"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20974",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.283",
      "lastModified" : "2025-02-25T16:15:35.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In btm_ble_add_resolving_list_entry_complete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260078907"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20975",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.330",
      "lastModified" : "2025-02-25T16:15:35.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW_CONTENT_CAPTURE due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-250573776"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20976",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.373",
      "lastModified" : "2025-02-25T17:15:13.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-216117246"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20977",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.417",
      "lastModified" : "2025-02-25T16:15:35.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In btm_ble_read_remote_features_complete of btm_ble_gap.cc, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if the firmware were compromised with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-254445952"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20979",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.463",
      "lastModified" : "2025-02-25T22:15:13.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GetNextSourceDataPacket of bta_av_co.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-259939364"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20980",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.513",
      "lastModified" : "2024-11-21T07:41:56.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In btu_ble_ll_conn_param_upd_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260230274"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20981",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.560",
      "lastModified" : "2024-11-21T07:41:56.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In btu_ble_rc_param_req_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-256165737"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20982",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.603",
      "lastModified" : "2024-11-21T07:41:56.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In btm_read_tx_power_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568083"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20983",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.647",
      "lastModified" : "2024-11-21T07:41:56.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260569449"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20984",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.700",
      "lastModified" : "2024-11-21T07:41:56.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ParseBqrLinkQualityEvt of btif_bqr.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-242993878"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20985",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.747",
      "lastModified" : "2024-11-21T07:41:57.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-245915315"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20986",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.793",
      "lastModified" : "2024-11-21T07:41:57.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In btm_ble_clear_resolving_list_completecomplete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-255304475"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20987",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.840",
      "lastModified" : "2024-11-21T07:41:57.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In btm_read_link_quality_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over Bluetooth with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260569414"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20988",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.887",
      "lastModified" : "2025-02-25T22:15:13.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In btm_read_rssi_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260569232"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20989",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.933",
      "lastModified" : "2025-02-25T22:15:13.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In btm_ble_write_adv_enable_complete of btm_ble_gap.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568367"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20990",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:11.983",
      "lastModified" : "2024-11-21T07:41:57.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568354"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20991",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.027",
      "lastModified" : "2024-11-21T07:41:57.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In btm_ble_process_periodic_adv_sync_lost_evt of ble_scanner_hci_interface.cc , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-255305114"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20992",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.080",
      "lastModified" : "2024-11-21T07:41:57.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In on_iso_link_quality_read of btm_iso_impl.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-260568750"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20993",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.130",
      "lastModified" : "2025-02-24T15:15:11.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-261588851"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-05-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-05-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20994",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.177",
      "lastModified" : "2024-11-21T07:41:58.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-259062118"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20995",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.227",
      "lastModified" : "2025-02-25T15:15:12.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-241910279"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20996",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.273",
      "lastModified" : "2025-02-25T22:15:13.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246749764"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20997",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.317",
      "lastModified" : "2025-02-25T22:15:13.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246749702"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20998",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.360",
      "lastModified" : "2025-02-25T22:15:13.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246749936"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20999",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.403",
      "lastModified" : "2025-02-25T22:15:14.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246750467"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21000",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.450",
      "lastModified" : "2025-02-26T21:15:12.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-194783918"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21001",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.490",
      "lastModified" : "2025-02-26T21:15:12.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-237672190"
      }, {
        "lang" : "es",
        "value" : "En el método onContextItemSelected de NetworkProviderSettings.java existe una manera de que a los usuarios cambien las configuraciones de Wi-Fi de otros usuarios debido a una falta de verificación de permisos. Esto podría conducir a una escalada local de privilegios sin necesidad de privilegios adicionales de ejecución. El usuario no necesita interactuar para explotar esta vulnerabilidad.\n\nProducto: Android\nVersiones: Android-13\nIdentificador de Android: A-237672190"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21002",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.533",
      "lastModified" : "2025-02-26T19:15:16.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261193935"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21003",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.587",
      "lastModified" : "2025-02-26T21:15:12.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261193711"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21004",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.633",
      "lastModified" : "2025-02-26T21:15:13.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261193664"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21005",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.677",
      "lastModified" : "2025-02-26T21:15:13.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261193946"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21006",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.733",
      "lastModified" : "2025-02-26T21:15:13.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257030027"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21007",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.773",
      "lastModified" : "2025-02-26T21:15:13.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257029965"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21008",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.817",
      "lastModified" : "2025-02-26T21:15:13.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257030100"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21009",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.867",
      "lastModified" : "2025-02-26T21:15:13.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257029925"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21010",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.910",
      "lastModified" : "2025-02-26T21:15:14.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257029915"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21011",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.950",
      "lastModified" : "2025-02-26T21:15:14.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257029912"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21012",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:12.997",
      "lastModified" : "2025-03-24T19:15:39.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257029812"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21013",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.037",
      "lastModified" : "2025-02-24T15:15:11.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In forceStaDisconnection of hostapd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-256818945"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21014",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.073",
      "lastModified" : "2025-03-19T19:15:38.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257029326"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21015",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.110",
      "lastModified" : "2025-03-17T19:15:18.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-244569778"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21016",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.147",
      "lastModified" : "2025-03-17T19:15:18.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In AccountTypePreference of AccountTypePreference.java, there is a possible way to mislead the user about accounts installed on the device due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-213905884"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21017",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.183",
      "lastModified" : "2025-03-17T19:15:18.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-236687884"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21018",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.217",
      "lastModified" : "2025-02-26T21:15:14.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In UnwindingWorker of unwinding.cc, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233338564"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21019",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.257",
      "lastModified" : "2025-02-24T17:15:12.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ih264e_init_proc_ctxt of ih264e_process.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-242379731"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21020",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.287",
      "lastModified" : "2025-02-24T15:15:11.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-256591441"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21021",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.323",
      "lastModified" : "2025-02-26T21:15:14.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In isTargetSdkLessThanQOrPrivileged of WifiServiceImpl.java, there is a possible way for the guest user to change admin user network settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-255537598"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21022",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.360",
      "lastModified" : "2025-02-25T16:15:35.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BufferBlock of Suballocation.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-236098131"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21024",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.393",
      "lastModified" : "2025-02-25T16:15:35.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246543238"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21025",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.430",
      "lastModified" : "2025-02-25T16:15:35.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ufdt_local_fixup_prop of ufdt_overlay.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-254929746"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21026",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.467",
      "lastModified" : "2025-02-25T16:15:36.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own SurfaceControl due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-254681548"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21027",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.507",
      "lastModified" : "2025-02-25T16:15:36.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-216854451"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21028",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.543",
      "lastModified" : "2025-02-25T15:15:13.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In parse_printerAttributes of ipphelper.c, there is a possible out of bounds read due to a string without a null-terminator. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-180680572"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21029",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.583",
      "lastModified" : "2025-02-25T15:15:13.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In register of UidObserverController.java, there is a missing permission check. This could lead to local information disclosure of app usage with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-217934898"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21030",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.620",
      "lastModified" : "2025-02-25T15:15:13.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-226234140"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21031",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.657",
      "lastModified" : "2025-02-25T15:15:13.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-242688355"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-06-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21032",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.690",
      "lastModified" : "2025-02-25T15:15:14.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-248085351"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21033",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.723",
      "lastModified" : "2025-02-25T15:15:14.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-244713323"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21034",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.760",
      "lastModified" : "2025-02-26T21:15:14.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-230358834"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21035",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.797",
      "lastModified" : "2025-02-25T15:15:14.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions of BackupHelper.java, there is a possible way for an app to get permissions previously granted to another app with the same package name due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-184847040"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21036",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.827",
      "lastModified" : "2025-02-25T15:15:14.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidVersions: Android kernelAndroid ID: A-264261868References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21038",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.863",
      "lastModified" : "2025-02-25T15:15:14.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-224000736References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21039",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.903",
      "lastModified" : "2025-02-25T15:15:14.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In dumpstateBoard of Dumpstate.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263783650References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21040",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.940",
      "lastModified" : "2025-02-25T15:15:15.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In buildCommand of bluetooth_ccc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238420277References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21041",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:13.987",
      "lastModified" : "2025-02-25T15:15:15.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-250123688References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21042",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.023",
      "lastModified" : "2025-02-19T22:15:11.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239873326References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21043",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.057",
      "lastModified" : "2025-02-25T15:15:15.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239872581References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21044",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.090",
      "lastModified" : "2025-02-24T20:15:32.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-253425086References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21045",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.127",
      "lastModified" : "2025-02-24T20:15:32.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When cpif handles probe failures, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-259323725References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21046",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.157",
      "lastModified" : "2025-02-26T21:15:14.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-253424924References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21047",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.197",
      "lastModified" : "2025-02-24T15:15:11.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-256166866References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21048",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.230",
      "lastModified" : "2025-02-24T20:15:32.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In handleEvent of nan.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-259304053References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21049",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.267",
      "lastModified" : "2025-02-21T21:15:12.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In append_camera_metadata of camera_metadata.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-236688120References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21050",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.300",
      "lastModified" : "2025-02-21T22:15:11.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In load_png_image of ExynosHWCHelper.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-244423702References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21051",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.333",
      "lastModified" : "2025-02-24T17:15:12.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In dwc3_exynos_clk_get of dwc3-exynos.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-259323322References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21052",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.367",
      "lastModified" : "2025-02-24T17:15:12.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In setToExternal of ril_external_client.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-259063189References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21053",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.397",
      "lastModified" : "2025-02-21T20:15:31.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-251805610References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21054",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.433",
      "lastModified" : "2025-02-21T20:15:32.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EUTRAN_LCS_ConvertLCS_MOLRReq of LPP_CommonUtil.c, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-244556535References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21055",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.470",
      "lastModified" : "2025-02-21T20:15:32.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In dit_hal_ioctl of dit.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-244301523References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21056",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.507",
      "lastModified" : "2025-02-21T20:15:32.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-245300559References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21057",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.540",
      "lastModified" : "2025-02-21T20:15:32.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ProfSixDecomTcpSACKoption of RohcPacketCommon, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-244450646References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21058",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.590",
      "lastModified" : "2024-11-21T07:42:05.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In lcsm_SendRrAcquiAssist of lcsm_bcm_assist.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-246169606References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21059",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.627",
      "lastModified" : "2024-11-21T07:42:05.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-247564044References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21060",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.660",
      "lastModified" : "2024-11-21T07:42:05.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In sms_GetTpPiIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-253770924References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21061",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.700",
      "lastModified" : "2025-02-20T16:15:33.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Product: AndroidVersions: Android kernelAndroid ID: A-229255400References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21062",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.733",
      "lastModified" : "2024-11-21T07:42:05.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In DoSetTempEcc of imsservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243376770References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21063",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.767",
      "lastModified" : "2024-11-21T07:42:05.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ParseWithAuthType of simdata.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243129862References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21064",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.803",
      "lastModified" : "2024-11-21T07:42:05.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In DoSetPinControl of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243130078References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21065",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.837",
      "lastModified" : "2024-11-21T07:42:05.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630493References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21067",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.873",
      "lastModified" : "2025-02-20T16:15:33.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Product: AndroidVersions: Android kernelAndroid ID: A-254114726References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21068",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.907",
      "lastModified" : "2025-02-20T16:15:33.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243433344References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21069",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.943",
      "lastModified" : "2024-11-21T07:42:06.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wl_update_hidden_ap_ie of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254029309References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21070",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:14.987",
      "lastModified" : "2024-11-21T07:42:06.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In add_roam_cache_list of wl_roam.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254028776References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21071",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:15.023",
      "lastModified" : "2024-11-21T07:42:06.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In dhd_prot_ioctcmplt_process of dhd_msgbuf.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254028518References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21072",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:15.067",
      "lastModified" : "2024-11-21T07:42:06.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257290781References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21073",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:15.107",
      "lastModified" : "2024-11-21T07:42:06.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257290396References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21075",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:15.150",
      "lastModified" : "2024-11-21T07:42:06.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In get_svc_hash of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-261857862References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21076",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:15.190",
      "lastModified" : "2024-11-21T07:42:07.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In createTransmitFollowupRequest of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-261857623References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21077",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:15.227",
      "lastModified" : "2024-11-21T07:42:07.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257289560References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21078",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:15.273",
      "lastModified" : "2024-11-21T07:42:07.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254840211References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21079",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-03-24T20:15:15.307",
      "lastModified" : "2025-02-21T16:15:31.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254839721References: N/A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2023-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22812",
      "sourceIdentifier" : "psirt@wdc.com",
      "published" : "2023-03-24T20:15:15.343",
      "lastModified" : "2024-11-21T07:45:27.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data. \n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@wdc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@wdc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:westerndigital:sandisk_privateaccess:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.9",
            "matchCriteriaId" : "3CB10A26-F4A8-4BC8-9EEB-EBFF1250C5F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.westerndigital.com/support/product-security/wdc-23005-sandisk-privateaccess-software-update",
        "source" : "psirt@wdc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.westerndigital.com/support/product-security/wdc-23005-sandisk-privateaccess-software-update",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-24T20:15:15.403",
      "lastModified" : "2025-02-21T18:15:15.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ladybirdweb:faveo_helpdesk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "1.11.1",
            "matchCriteriaId" : "3399E631-787E-4EA7-AC43-19BB79B1A9BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Whitehat-Su/8402323c00ea93b4abc21ab9a372101e",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ladybirdweb/faveo-helpdesk/issues/7827",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/Whitehat-Su/8402323c00ea93b4abc21ab9a372101e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ladybirdweb/faveo-helpdesk/issues/7827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-24T20:15:15.443",
      "lastModified" : "2025-05-30T16:15:34.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:independentsoft:jspreadsheet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.110",
            "matchCriteriaId" : "EA4BA97D-2B9A-4D6E-8446-FAF50D7895C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-28151",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/CVE-2023-28151",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.independentsoft.de/jword/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/CVE-2023-28151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.independentsoft.de/jword/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28444",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-24T20:15:15.493",
      "lastModified" : "2024-11-21T07:55:05.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "angular-server-side-configuration helps configure an angular application at runtime on the server or in a docker container via environment variables. angular-server-side-configuration detects used environment variables in TypeScript (.ts) files during build time of an Angular CLI project. The detected environment variables are written to a ngssc.json file in the output directory.\nDuring deployment of an Angular based app, the environment variables based on the variables from ngssc.json are inserted into the apps index.html (or defined index file). With version 15.0.0 the environment variable detection was widened to the entire project, relative to the angular.json file from the Angular CLI. In a monorepo setup, this could lead to environment variables intended for a backend/service to be detected and written to the ngssc.json, which would then be populated and exposed via index.html. This has NO IMPACT, in a plain Angular project that has no backend component. This vulnerability has been mitigated in version 15.1.0, by adding an option `searchPattern` which restricts the detection file range by default. As a workaround, manually edit or create ngssc.json or run script after ngssc.json generation.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-538"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angular-server-side-configuration_project:angular-server-side-configuration:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "65210220-4342-4700-BE6B-CF474029584F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kyubisation/angular-server-side-configuration/commit/d701f51260637a84ede278e248934e0437a7ff86",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kyubisation/angular-server-side-configuration/releases/tag/v15.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kyubisation/angular-server-side-configuration/security/advisories/GHSA-gwvm-vrp4-4pp5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kyubisation/angular-server-side-configuration/commit/d701f51260637a84ede278e248934e0437a7ff86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kyubisation/angular-server-side-configuration/releases/tag/v15.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kyubisation/angular-server-side-configuration/security/advisories/GHSA-gwvm-vrp4-4pp5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28446",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-24T20:15:15.560",
      "lastModified" : "2024-11-21T07:55:05.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deno is a simple, modern and secure runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Arbitrary program names without any ANSI filtering allows any malicious program to clear the first 2 lines of a `op_spawn_child` or `op_kill` prompt and replace it with any desired text. This works with any command on the respective platform, giving the program the full ability to choose what program they wanted to run. This problem can not be exploited on systems that do not attach an interactive prompt (for example headless servers). This issue has been patched in version 1.31.2.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-150"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.31.2",
            "matchCriteriaId" : "A167405B-5CD3-4DBD-BFA6-5E3CC681D68E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/denoland/deno/blob/7d13d65468c37022f003bb680dfbddd07ea72173/runtime/js/40_process.js#L175",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/denoland/deno/releases/tag/v1.31.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/denoland/deno/security/advisories/GHSA-vq67-rp93-65qf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/denoland/deno/blob/7d13d65468c37022f003bb680dfbddd07ea72173/runtime/js/40_process.js#L175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/denoland/deno/releases/tag/v1.31.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/denoland/deno/security/advisories/GHSA-vq67-rp93-65qf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28448",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-24T20:15:15.613",
      "lastModified" : "2024-11-21T07:55:06.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versionize is a framework for version tolerant serializion/deserialization of Rust data structures, designed for usecases that need fast deserialization times and minimal size overhead. An issue was discovered in the ‘Versionize::deserialize’ implementation provided by the ‘versionize’ crate for ‘vmm_sys_utils::fam::FamStructWrapper', which can lead to out of bounds memory accesses. The impact started with version 0.1.1. The issue was corrected in version 0.1.10 by inserting a check that verifies, for any deserialized header, the lengths of compared flexible arrays are equal and aborting deserialization otherwise.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:versionize_project:versionize:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.1.1",
            "versionEndExcluding" : "0.1.10",
            "matchCriteriaId" : "16F37684-4478-44B1-A067-78576CCD0E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/firecracker-microvm/versionize/commit/a57a051ba006cfa3b41a0532f484df759e008d47",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/firecracker-microvm/versionize/pull/53",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/firecracker-microvm/versionize/security/advisories/GHSA-8vxc-r5wp-vgvc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/firecracker-microvm/versionize/commit/a57a051ba006cfa3b41a0532f484df759e008d47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/firecracker-microvm/versionize/pull/53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/firecracker-microvm/versionize/security/advisories/GHSA-8vxc-r5wp-vgvc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28435",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-24T21:15:06.860",
      "lastModified" : "2024-11-21T07:55:03.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dataease is an open source data visualization and analysis tool. The permissions for the file upload interface is not checked so users who are not logged in can upload directly to the background. The file type also goes unchecked, users could upload any type of file. These vulnerabilities has been fixed in version 1.18.5.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.18.5",
            "matchCriteriaId" : "2A6525A4-9AFC-4166-83A7-7986DA122308"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dataease/dataease/issues/4798",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dataease/dataease/security/advisories/GHSA-625h-q3g9-rffc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dataease/dataease/issues/4798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dataease/dataease/security/advisories/GHSA-625h-q3g9-rffc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1583",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-24T22:15:07.137",
      "lastModified" : "2025-02-20T19:15:11.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. When fixed files are unregistered, some context information (file_alloc_{start,end} and alloc_hint) is not cleared. A subsequent request that has auto index selection enabled via IORING_FILE_INDEX_ALLOC can cause a NULL pointer dereference. An unprivileged user can use the flaw to cause a system crash."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.19",
            "versionEndExcluding" : "6.1.22",
            "matchCriteriaId" : "3ABED26E-DCA7-48C4-B7FC-6722DF89A2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.2.9",
            "matchCriteriaId" : "0353DD1B-3800-4821-880C-4A78287A42BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=02a4d923e4400a36d340ea12d8058f69ebf3a383",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux-block.git/commit/?h=io_uring-6.3&id=761efd55a0227aca3a69deacdaa112fffd44fe37",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=02a4d923e4400a36d340ea12d8058f69ebf3a383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux-block.git/commit/?h=io_uring-6.3&id=761efd55a0227aca3a69deacdaa112fffd44fe37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-24T22:15:07.197",
      "lastModified" : "2025-02-21T20:15:33.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability found in PrestaShop smplredirectionsmanager v.1.1.19 and before allow a remote attacker to gain privileges via the SmplTools::getMatchingRedirectionsFromPartscomponent."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smplredirectionsmanager_project:smplredirectionsmanager:*:*:*:*:*:prestashop:*:*",
            "versionEndExcluding" : "1.1.19",
            "matchCriteriaId" : "EA530AFE-2196-49B5-BE92-90D61825ADDE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/01/17/smplredirectionsmanager.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/01/17/smplredirectionsmanager.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-24T22:15:07.240",
      "lastModified" : "2025-02-21T20:15:33.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aver:ptzapp_2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.1051.53",
            "matchCriteriaId" : "BE21CE13-F645-4BD9-8EEE-DF91F023CBF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/StolidWaffle/AVer-PTZApp2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/StolidWaffle/AVer-PTZApp2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-24T22:15:07.283",
      "lastModified" : "2025-05-30T16:15:33.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:independentsoft:jodf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.110",
            "matchCriteriaId" : "EC4BA18A-F7E6-46DA-9E60-870B9507DB9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-28150",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/CVE-2023-28150",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.independentsoft.de/jword/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/CVE-2023-28150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.independentsoft.de/jword/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-24T23:15:06.750",
      "lastModified" : "2025-02-20T20:15:44.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DEK-1705 <=Firmware:34.23.1 device was discovered to have a command execution vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dek-1705_project:dek-1705_firmware:34.23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5953CCC3-D5EB-4ABC-8000-9EA87B14ADA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dek-1705_project:dek-1705:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B5DF28-6FA8-4F1E-B695-9E4550A19F17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/yinfei6/5430dc75683c642b7dc09e61c21a4ef4",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/yinfei6/5430dc75683c642b7dc09e61c21a4ef4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-24T23:15:06.830",
      "lastModified" : "2025-02-20T21:15:24.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AX3 V16.03.12.11 is vulnerable to Buffer Overflow via /goform/SetFirewallCfg."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ax3_firmware:16.03.12.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFD11D4-8E44-4156-9D8E-7094E36A2152"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ax3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A01F4C4-FFFF-48DD-90DB-4DD29FE57479"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hujianjie123/vuln/blob/main/Tenda/SetFirewallCfg/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hujianjie123/vuln/blob/main/Tenda/SetFirewallCfg/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25658",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.077",
      "lastModified" : "2024-11-21T07:49:53.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, an out of bounds read is in GRUBlockCellGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/ff459137c2716a2a60f7d441b855fcb466d778cb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-68v3-g9cm-rmm6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/ff459137c2716a2a60f7d441b855fcb466d778cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-68v3-g9cm-rmm6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25659",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.143",
      "lastModified" : "2024-11-21T07:49:53.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the parameter `indices` for `DynamicStitch` does not match the shape of the parameter `data`, it can trigger an stack OOB read. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/ee004b18b976eeb5a758020af8880236cd707d05",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-93vr-9q9m-pj8p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/ee004b18b976eeb5a758020af8880236cd707d05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-93vr-9q9m-pj8p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25660",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.200",
      "lastModified" : "2024-11-21T07:49:53.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter `summarize` of `tf.raw_ops.Print` is zero, the new method `SummarizeArray<bool>` will reference to a nullptr, leading to a seg fault. A fix is included in TensorFlow version 2.12 and version 2.11.1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/6d423b8bcc9aa9f5554dc988c1c16d038b508df1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qjqc-vqcf-5qvj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/6d423b8bcc9aa9f5554dc988c1c16d038b508df1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qjqc-vqcf-5qvj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25662",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.260",
      "lastModified" : "2024-11-21T07:49:53.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 are vulnerable to integer overflow in EditDistance. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/08b8e18643d6dcde00890733b270ff8d9960c56c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7jvm-xxmr-v5cw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/08b8e18643d6dcde00890733b270ff8d9960c56c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7jvm-xxmr-v5cw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25663",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.313",
      "lastModified" : "2024-11-21T07:49:53.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `ctx->step_containter()` is a null ptr, the Lookup function will be executed with a null pointer. A fix is included in TensorFlow 2.12.0 and 2.11.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/239139d2ae6a81ae9ba499ad78b56d9b2931538a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-64jg-wjww-7c5w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/239139d2ae6a81ae9ba499ad78b56d9b2931538a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-64jg-wjww-7c5w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25664",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.367",
      "lastModified" : "2024-11-21T07:49:53.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer overflow in TAvgPoolGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/ddaac2bdd099bec5d7923dea45276a7558217e5b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6hg6-5c2q-7rcr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/ddaac2bdd099bec5d7923dea45276a7558217e5b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6hg6-5c2q-7rcr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25665",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.427",
      "lastModified" : "2024-11-21T07:49:54.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `SparseSparseMaximum` is given invalid sparse tensors as inputs, it can give a null pointer error. A fix is included in TensorFlow version 2.12 and version 2.11.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/5e0ecfb42f5f65629fd7a4edd6c4afe7ff0feb04",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-558h-mq8x-7q9g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/5e0ecfb42f5f65629fd7a4edd6c4afe7ff0feb04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-558h-mq8x-7q9g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25666",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.480",
      "lastModified" : "2024-11-21T07:49:54.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a floating point exception in AudioSpectrogram. A fix is included in TensorFlow version 2.12.0 and version 2.11.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-697"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/d0d4e779da0d0f56499c6fa5ba09f0a576cc6b14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f637-vh3r-vfh2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/d0d4e779da0d0f56499c6fa5ba09f0a576cc6b14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f637-vh3r-vfh2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25667",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.537",
      "lastModified" : "2024-11-21T07:49:54.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 <= num_frames * height * width * channels < 2^32`, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fqm2-gh8w-gr68",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fqm2-gh8w-gr68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25668",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.593",
      "lastModified" : "2024-11-21T07:49:54.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the control of user, leading to a crash or remote code execution. The fix will be included in TensorFlow version 2.12.0 and will also cherrypick this commit on TensorFlow version 2.11.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        }, {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/7b174a0f2e40ff3f3aa957aecddfd5aaae35eccb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gw97-ff7c-9v96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/7b174a0f2e40ff3f3aa957aecddfd5aaae35eccb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gw97-ff7c-9v96",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25669",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.653",
      "lastModified" : "2024-11-21T07:49:54.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and window size are not positive for `tf.raw_ops.AvgPoolGrad`, it can give a floating point exception. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-697"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/1295ae4dbb52fe06b19733b0257e2340d7b63b8d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rcf8-g8jv-vg6p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/1295ae4dbb52fe06b19733b0257e2340d7b63b8d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rcf8-g8jv-vg6p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25670",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.710",
      "lastModified" : "2024-11-21T07:49:54.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize with MKL enabled. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/8a47a39d9697969206d23a523c977238717e8727",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rq-hwc3-x77w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/8a47a39d9697969206d23a523c977238717e8727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rq-hwc3-x77w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25671",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.760",
      "lastModified" : "2024-11-21T07:49:54.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. There is out-of-bounds access due to mismatched integer type sizes. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/2eedc8f676d2c3b8be9492e547b2bc814c10b367",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/760322a71ac9033e122ef1f4b1c62813021e5938",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j5w9-hmfh-4cr6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/2eedc8f676d2c3b8be9492e547b2bc814c10b367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/760322a71ac9033e122ef1f4b1c62813021e5938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j5w9-hmfh-4cr6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25672",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.817",
      "lastModified" : "2024-11-21T07:49:54.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. The function `tf.raw_ops.LookupTableImportV2` cannot handle scalars in the `values` parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/980b22536abcbbe1b4a5642fc940af33d8c19b69",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-94mm-g2mv-8p7r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/980b22536abcbbe1b4a5642fc940af33d8c19b69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-94mm-g2mv-8p7r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25673",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.873",
      "lastModified" : "2024-11-21T07:49:55.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-697"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-647v-r7qq-24fh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-647v-r7qq-24fh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25674",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.937",
      "lastModified" : "2024-11-21T07:49:55.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error in RandomShuffle with XLA enabled. A fix is included in TensorFlow 2.12.0 and 2.11.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf97-q72m-7579",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf97-q72m-7579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25675",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:07.997",
      "lastModified" : "2024-11-21T07:49:55.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.Bincount` segfaults when given a parameter `weights` that is neither the same shape as parameter `arr` nor a length-0 tensor. A fix is included in TensorFlow 2.12.0 and 2.11.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-697"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/8ae76cf085f4be26295d2ecf2081e759e04b8acf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7x4v-9gxg-9hwj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/8ae76cf085f4be26295d2ecf2081e759e04b8acf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7x4v-9gxg-9hwj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25676",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:08.057",
      "lastModified" : "2024-11-21T07:49:55.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.ParallelConcat` segfaults with a nullptr dereference when given a parameter `shape` with rank that is not greater than zero. A fix is available in TensorFlow 2.12.0 and 2.11.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/da66bc6d5ff466aee084f9e7397980a24890cd15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6wfh-89q8-44jq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/da66bc6d5ff466aee084f9e7397980a24890cd15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6wfh-89q8-44jq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25801",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:08.120",
      "lastModified" : "2024-11-21T07:50:13.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops.fractional_avg_pool_v2` and `nn_ops.fractional_max_pool_v2` require the first and fourth elements of their parameter `pooling_ratio` to be equal to 1.0, as pooling on batch and channel dimensions is not supported. A fix is included in TensorFlow 2.12.0 and 2.11.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/ee50d1e00f81f62a4517453f721c634bbb478307",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f49c-87jh-g47q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/ee50d1e00f81f62a4517453f721c634bbb478307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f49c-87jh-g47q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27579",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:08.183",
      "lastModified" : "2024-11-21T07:53:11.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater `filter_input_channel` of less than 1 gives a FPE. This issue has been patched in version 2.12. TensorFlow will also cherrypick the fix commit on TensorFlow 2.11.1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-697"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.0",
            "matchCriteriaId" : "FAC3DE54-93B4-4D6C-9648-B9D416B9770F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/34f8368c535253f5c9cb3a303297743b62442aaa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5w96-866f-6rm8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/34f8368c535253f5c9cb3a303297743b62442aaa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5w96-866f-6rm8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28437",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-25T00:15:08.243",
      "lastModified" : "2024-11-21T07:55:03.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dataease is an open source data visualization and analysis tool. The blacklist for SQL injection protection is missing entries. This vulnerability has been fixed in version 1.18.5. There are no known workarounds. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.18.5",
            "matchCriteriaId" : "2A6525A4-9AFC-4166-83A7-7986DA122308"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dataease/dataease/issues/4795",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dataease/dataease/releases/tag/v1.18.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/dataease/dataease/security/advisories/GHSA-7j7j-9rw6-3r56",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dataease/dataease/issues/4795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dataease/dataease/releases/tag/v1.18.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/dataease/dataease/security/advisories/GHSA-7j7j-9rw6-3r56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1629",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-25T11:16:01.577",
      "lastModified" : "2024-11-21T07:39:34.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in JiangMin Antivirus 16.2.2022.418. Affected by this vulnerability is the function 0x222010 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224011."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jiangmin:jiangmin_antivirus:16.2.2022.418:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D47A82-0F08-4197-9F3E-4676537649DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1soMFXUAYkCttFDA_icry6q-irb2jdAxw/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1629",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224011",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224011",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1soMFXUAYkCttFDA_icry6q-irb2jdAxw/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1626",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-25T12:15:06.880",
      "lastModified" : "2024-11-21T07:39:34.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been declared as critical. This vulnerability affects unknown code in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224008."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jiangmin:jiangmin_antivirus:16.2.2022.418:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D47A82-0F08-4197-9F3E-4676537649DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1soMFXUAYkCttFDA_icry6q-irb2jdAxw/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned31",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224008",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224008",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1soMFXUAYkCttFDA_icry6q-irb2jdAxw/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1627",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-25T12:15:06.943",
      "lastModified" : "2024-11-21T07:39:34.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been rated as problematic. This issue affects some unknown processing in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier VDB-224009 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jiangmin:jiangmin_antivirus:16.2.2022.418:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D47A82-0F08-4197-9F3E-4676537649DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1fQFw8ayQUFzJM2_4V-ld8CN8gvisVoiu/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned29",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224009",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224009",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1fQFw8ayQUFzJM2_4V-ld8CN8gvisVoiu/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1628",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-25T12:15:07.000",
      "lastModified" : "2024-11-21T07:39:34.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224010 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jiangmin:jiangmin_antivirus:16.2.2022.418:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D47A82-0F08-4197-9F3E-4676537649DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned30",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224010",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224010",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1630",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-25T12:15:07.057",
      "lastModified" : "2024-11-21T07:39:35.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by this issue is the function 0x222000 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224012."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jiangmin:jiangmin_antivirus:16.2.2022.418:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D47A82-0F08-4197-9F3E-4676537649DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1fQFw8ayQUFzJM2_4V-ld8CN8gvisVoiu/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1630",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224012",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224012",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1fQFw8ayQUFzJM2_4V-ld8CN8gvisVoiu/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1631",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-25T12:15:07.107",
      "lastModified" : "2024-11-21T07:39:35.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the function 0x222010 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-224013 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jiangmin:jiangmin_antivirus:16.2.2022.418:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D47A82-0F08-4197-9F3E-4676537649DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1631",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224013",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224013",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1632",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-25T17:15:07.563",
      "lastModified" : "2023-11-07T04:04:24.830",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Vendor identified that the vulnerability does not exist within the product, but merely with this particular on premise customer's implementation."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1634",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-25T19:15:06.933",
      "lastModified" : "2024-11-21T07:39:35.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the file /admin/info_deal.php of the component URL Parameter Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224016."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otcms:otcms:6.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9553B93-A57B-4F29-9217-B8EC9FE077AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BigTiger2020/2023-1/blob/main/ssrf/ssrf.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224016",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224016",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BigTiger2020/2023-1/blob/main/ssrf/ssrf.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1635",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-25T19:15:06.990",
      "lastModified" : "2024-11-21T07:39:35.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in OTCMS 6.72. It has been declared as problematic. Affected by this vulnerability is the function AutoRun of the file apiRun.php. The manipulation of the argument mode leads to cross site scripting. The attack can be launched remotely. The identifier VDB-224017 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otcms:otcms:6.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9553B93-A57B-4F29-9217-B8EC9FE077AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BigTiger2020/2023/blob/main/XSS.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224017",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224017",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BigTiger2020/2023/blob/main/XSS.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1456",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-25T21:15:06.790",
      "lastModified" : "2024-11-21T07:39:13.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. This issue affects some unknown processing of the component NAT Configuration Handler. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier VDB-223301 was assigned to this vulnerability. NOTE: The vendor position is that post-authentication issues are not accepted as vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:edgerouter_x_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FCC51B-D699-4D1E-80FE-B4B3E0858F27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:edgerouter_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736F2CD6-C3C4-463A-A3A9-04FFA66666DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223301",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223301",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1457",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-25T21:15:06.850",
      "lastModified" : "2024-11-21T07:39:13.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. Affected is an unknown function of the component Static Routing Configuration Handler. The manipulation of the argument next-hop-interface leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. VDB-223302 is the identifier assigned to this vulnerability. NOTE: The vendor position is that post-authentication issues are not accepted as vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:edgerouter_x_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FCC51B-D699-4D1E-80FE-B4B3E0858F27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:edgerouter_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736F2CD6-C3C4-463A-A3A9-04FFA66666DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223302",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223302",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1458",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-25T22:15:06.873",
      "lastModified" : "2024-11-21T07:39:13.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical. Affected by this vulnerability is an unknown functionality of the component OSPF Handler. The manipulation of the argument area leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The associated identifier of this vulnerability is VDB-223303. NOTE: The vendor position is that post-authentication issues are not accepted as vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:edgerouter_x_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FCC51B-D699-4D1E-80FE-B4B3E0858F27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:edgerouter_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736F2CD6-C3C4-463A-A3A9-04FFA66666DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.223303",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223303",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.223303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.223303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-26T19:15:06.780",
      "lastModified" : "2024-11-21T07:56:10.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4.3, and 4.5.3 were released (changing the behavior for pipeline operations); however, please see CVE-2023-28859 about addressing data leakage across AsyncIO connections in general."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis:redis-py:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.3.6",
            "matchCriteriaId" : "01B96893-5078-47C0-A2F2-D1039A45152D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis:redis-py:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "D4512975-5839-4179-9B9E-526526E02C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis:redis-py:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.3",
            "matchCriteriaId" : "5782D240-CF0F-41B0-9A06-47DD9E51C075"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redis/redis-py/compare/v4.3.5...v4.3.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis-py/compare/v4.4.2...v4.4.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis-py/compare/v4.5.2...v4.5.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis-py/issues/2624",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/redis/redis-py/pull/2641",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://openai.com/blog/march-20-chatgpt-outage",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis-py/compare/v4.3.5...v4.3.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis-py/compare/v4.4.2...v4.4.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis-py/compare/v4.5.2...v4.5.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis-py/issues/2624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/redis/redis-py/pull/2641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://openai.com/blog/march-20-chatgpt-outage",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28859",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-26T19:15:06.850",
      "lastModified" : "2024-11-21T07:56:10.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis:redis-py:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.4.4",
            "matchCriteriaId" : "8BF5D290-49BC-4C70-B801-9DCE97070663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis:redis-py:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.4",
            "matchCriteriaId" : "39E01CD5-9AC0-46ED-A952-1EAD9FBFC930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redis/redis-py/issues/2665",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis-py/pull/2641",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis-py/pull/2666",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redis/redis-py/releases/tag/v4.4.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redis/redis-py/releases/tag/v4.5.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redis/redis-py/issues/2665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis-py/pull/2641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis-py/pull/2666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redis/redis-py/releases/tag/v4.4.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redis/redis-py/releases/tag/v4.5.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1638",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-26T21:15:06.817",
      "lastModified" : "2024-11-21T07:39:36.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been rated as problematic. Affected by this issue is the function 0x8001E024/0x8001E040 in the library ImfRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-224018 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iobit:malware_fighter:9.4.0.776:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DA5087-46A3-4982-9646-70015584BC4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1_jYlCkQMNaUwGV5QJtyz4zhdTqaGCv6Z/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1638",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224018",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224018",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1_jYlCkQMNaUwGV5QJtyz4zhdTqaGCv6Z/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1639",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-26T21:15:06.887",
      "lastModified" : "2024-11-21T07:39:36.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in IObit Malware Fighter 9.4.0.776. This affects the function 0x8001E04C in the library ImfRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224019."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iobit:malware_fighter:9.4.0.776:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DA5087-46A3-4982-9646-70015584BC4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1hWgHhboaekq4hGIj2kNgEI54rM-u_rvV/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1639",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224019",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224019",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1hWgHhboaekq4hGIj2kNgEI54rM-u_rvV/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-26T21:15:06.967",
      "lastModified" : "2024-11-21T07:51:57.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruijienetworks:rg-ew1200r_firmware:ew_3.0\\(1\\)b11p204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5327E827-80E2-46AA-9383-3CD874B51FEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruijienetworks:rg-ew1200r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "832C68AE-662E-4597-B0DF-9467078B6F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruijienetworks:rg-ew1200_firmware:ew_3.0\\(1\\)b11p204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC61FDAC-B299-42FA-BA81-CE95622BC0CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruijienetworks:rg-ew1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693E2E30-5F81-49DD-8FA9-B88EB089B378"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruijienetworks:rg-ew1200g_pro_firmware:ew_3.0\\(1\\)b11p204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666DA117-2888-42E6-82A4-FE78087C41BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruijienetworks:rg-ew1200g_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727F7545-61FB-43F4-9A52-A613CE26B0ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/winmt/my-vuls/tree/main/RG-EW1200",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/winmt/my-vuls/tree/main/RG-EW1200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-26T21:15:07.020",
      "lastModified" : "2025-05-05T16:15:32.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/set_LimitClient_cfg."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lb-link:bl-lte300_firmware:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D29DDF-E016-4F9C-82A3-AAC73BB8B74C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lb-link:bl-lte300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B27325-952E-4557-8031-C49F700AFD92"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lb-link:bl-x26_firmware:1.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5BFD80-93A1-4303-AE62-3A144F8BD6C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lb-link:bl-x26:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42598045-2763-4592-8A55-882E527623B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lb-link:bl-wr9000_firmware:2.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A23AFF5-C85A-4422-933E-02547D9E2859"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lb-link:bl-wr9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29EAB380-0F6C-4E9A-B7DA-5C36021E4175"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lb-link:bl-ac1900_firmware:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89117B39-ECA8-49A5-8863-939AEEAB95F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lb-link:bl-ac1900:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2933C6D3-8FAA-4BAB-894B-1E228103093B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/winmt/my-vuls/tree/main/LB-LINK%20BL-AC1900%2C%20BL-WR9000%2C%20BL-X26%20and%20BL-LTE300%20Wireless%20Routers",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.akamai.com/blog/security-research/cve-2023-26801-exploited-spreading-mirai-botnet",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/winmt/my-vuls/tree/main/LB-LINK%20BL-AC1900%2C%20BL-WR9000%2C%20BL-X26%20and%20BL-LTE300%20Wireless%20Routers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-26T21:15:07.060",
      "lastModified" : "2025-05-05T16:15:32.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dcnglobal:dcbi-netlog-lab_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B94DCC3-FA15-43C4-9965-B53F4ACA1743"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dcnglobal:dcbi-netlog-lab:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC0FC49-00AD-4718-BC34-EB0898A6DB4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/winmt/my-vuls/tree/main/DCN%20DCBI-Netlog-LAB",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/winmt/my-vuls/tree/main/DCN%20DCBI-Netlog-LAB",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-26T21:15:07.103",
      "lastModified" : "2024-11-21T07:53:30.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW_3.0(1)B11P204, and RG-EW3200GX PRO Wireless Routers EW_3.0(1)B11P204 were discovered to contain multiple command injection vulnerabilities via the data.ip, data.protocal, data.iface and data.package parameters in the runPackDiagnose function of diagnose.lua."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruijienetworks:rg-ew1800gx_pro_firmware:ew_3.0\\(1\\)b11p204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1078AED-F5A5-47AC-8C85-B05DFD310784"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruijienetworks:rg-ew1800gx_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "325AEC70-B53C-425B-8B2A-520B8AC790EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruijienetworks:rg-ew3200gx_pro_firmware:ew_3.0\\(1\\)b11p204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5578737-13E6-410A-B9C2-C177D74FB1D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruijienetworks:rg-ew3200gx_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "740F0BB8-76B4-4A91-B67B-CE9314BE48E6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ruijienetworks:rg-ew1200g_pro_firmware:ew_3.0\\(1\\)b11p204:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666DA117-2888-42E6-82A4-FE78087C41BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ruijienetworks:rg-ew1200g_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727F7545-61FB-43F4-9A52-A613CE26B0ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/winmt/my-vuls/tree/main/RG-EW%20PRO%20Series",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/winmt/my-vuls/tree/main/RG-EW%20PRO%20Series",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1640",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-26T22:15:06.893",
      "lastModified" : "2024-11-21T07:39:36.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in IObit Malware Fighter 9.4.0.776. This vulnerability affects the function 0x222010 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224020."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iobit:malware_fighter:9.4.0.776:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DA5087-46A3-4982-9646-70015584BC4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1AcwSxTA0_zh7mmxU5J8WphRqg_mQsO-g/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1640",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224020",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224020",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1AcwSxTA0_zh7mmxU5J8WphRqg_mQsO-g/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1641",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-26T22:15:06.960",
      "lastModified" : "2024-11-21T07:39:36.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in IObit Malware Fighter 9.4.0.776. This issue affects the function 0x222018 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-224021 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iobit:malware_fighter:9.4.0.776:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DA5087-46A3-4982-9646-70015584BC4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1ncqfaxSdeu-mGVAOnYxqxYtyyFZClHBF/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1641",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224021",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224021",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1ncqfaxSdeu-mGVAOnYxqxYtyyFZClHBF/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1642",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-26T22:15:07.017",
      "lastModified" : "2024-11-21T07:39:36.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in IObit Malware Fighter 9.4.0.776. Affected is the function 0x222034/0x222038/0x22203C/0x222040 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. VDB-224022 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iobit:malware_fighter:9.4.0.776:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DA5087-46A3-4982-9646-70015584BC4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1iWdqJ9PsBp1W5xINpUdQ28xbx_tB9xxf/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1642",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224022",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224022",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1iWdqJ9PsBp1W5xINpUdQ28xbx_tB9xxf/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1643",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-26T22:15:07.077",
      "lastModified" : "2024-11-21T07:39:36.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this vulnerability is the function 0x8001E000/0x8001E004/0x8001E018/0x8001E01C/0x8001E024/0x8001E040 in the library ImfHpRegFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224023."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iobit:malware_fighter:9.4.0.776:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DA5087-46A3-4982-9646-70015584BC4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1dHdltwenfMdwAPeb3JPex0fHxfK_iLYh/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1643",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224023",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224023",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1dHdltwenfMdwAPeb3JPex0fHxfK_iLYh/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1644",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-26T23:15:07.807",
      "lastModified" : "2024-11-21T07:39:36.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this issue is the function 0x8018E010 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224024."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iobit:malware_fighter:9.4.0.776:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DA5087-46A3-4982-9646-70015584BC4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1TVezyDiS9Kyw7ttNlLBCstpEUqxozha0/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1644",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224024",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224024",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1TVezyDiS9Kyw7ttNlLBCstpEUqxozha0/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1645",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-26T23:15:07.880",
      "lastModified" : "2024-11-21T07:39:37.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been classified as problematic. This affects the function 0x8018E008 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-224025 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iobit:malware_fighter:9.4.0.776:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DA5087-46A3-4982-9646-70015584BC4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1RmFSm1sQWwQXPXjkeZtgf8q51hGD8tTf/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link", "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1645",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224025",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224025",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1RmFSm1sQWwQXPXjkeZtgf8q51hGD8tTf/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1646",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-26T23:15:07.940",
      "lastModified" : "2024-11-21T07:39:37.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affects the function 0x8018E000/0x8018E004 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224026 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iobit:malware_fighter:9.4.0.776:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DA5087-46A3-4982-9646-70015584BC4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1GITWzh29cRcycVqVJgMJuX6emE_f1KPV/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1646",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224026",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224026",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1GITWzh29cRcycVqVJgMJuX6emE_f1KPV/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1647",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-27T01:15:07.223",
      "lastModified" : "2024-11-21T07:39:37.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Access Control in GitHub repository calcom/cal.com prior to 2.7.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cal:cal.com:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.0",
            "matchCriteriaId" : "1BAF7B28-A6E0-4FD1-B37D-3E7A4B3D35AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sbs20/scanservjs/pull/606/commits/d51fd52c1569813990b8f74e64ae6979c665dca1",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d6de3d6e-9551-47d1-b28c-7e965c1b82b6",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sbs20/scanservjs/pull/606/commits/d51fd52c1569813990b8f74e64ae6979c665dca1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d6de3d6e-9551-47d1-b28c-7e965c1b82b6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T01:15:07.377",
      "lastModified" : "2025-05-05T16:15:34.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but do not."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.8",
            "matchCriteriaId" : "46C809B7-D074-451B-91AE-F53C5AE72B61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=95084403f8c070ccf5d7cbe72352519c1798a40a",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lore.kernel.org/lkml/20230321015018.1759683-1-iam%40sung-woo.kim/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://patchwork.kernel.org/project/bluetooth/patch/20230322232543.3079578-1-luiz.dentz%40gmail.com",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=95084403f8c070ccf5d7cbe72352519c1798a40a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lore.kernel.org/lkml/20230321015018.1759683-1-iam%40sung-woo.kim/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://patchwork.kernel.org/project/bluetooth/patch/20230322232543.3079578-1-luiz.dentz%40gmail.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28867",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T01:15:07.413",
      "lastModified" : "2024-11-21T07:56:11.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption. The fixed versions are 20.1, 19.4, 18.4, 17.5, and 0.0.0-2023-03-20T01-49-44-80e3135."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphql-java:graphql-java:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.5",
            "matchCriteriaId" : "69FCAB99-DF08-4B03-9FBC-9621BF9C0820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphql-java:graphql-java:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndExcluding" : "18.4",
            "matchCriteriaId" : "5A5880A2-BC5A-48B3-9916-91CA7DA48C48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphql-java:graphql-java:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.0",
            "versionEndExcluding" : "19.4",
            "matchCriteriaId" : "45943F35-6801-451B-BC93-0FF9533290BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:graphql-java:graphql-java:20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A9F6EBC-5C0B-4816-949E-E3AD77343984"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/graphql-java/graphql-java/pull/3112",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/graphql-java/graphql-java/releases/tag/v17.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/graphql-java/graphql-java/releases/tag/v18.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/graphql-java/graphql-java/releases/tag/v19.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/graphql-java/graphql-java/releases/tag/v20.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/graphql-java/graphql-java/pull/3112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/graphql-java/graphql-java/releases/tag/v17.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/graphql-java/graphql-java/releases/tag/v18.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/graphql-java/graphql-java/releases/tag/v19.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/graphql-java/graphql-java/releases/tag/v20.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28883",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T03:15:07.193",
      "lastModified" : "2025-02-19T17:15:13.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cerebrate-project:cerebrate:1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EC9D276-F497-4347-9E8D-70EEEDD450B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cerebrate-project/cerebrate/commit/5f1c99cd534442ec40c2129769608e3e61ff8be3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://zigrin.com/advisories/cerebrate-blind-sql-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cerebrate-project/cerebrate/commit/5f1c99cd534442ec40c2129769608e3e61ff8be3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://zigrin.com/advisories/cerebrate-blind-sql-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T03:15:07.233",
      "lastModified" : "2024-11-21T07:56:13.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp-project:malware_information_sharing_platform:2.4.169:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25FB0E6F-32FA-4A98-87BC-723C1484FE57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/b94c7978e5e6b1db369abeedbbf00bca975b08b7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://zigrin.com/advisories/misp-dom-based-xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/b94c7978e5e6b1db369abeedbbf00bca975b08b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://zigrin.com/advisories/misp-dom-based-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22902",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-03-27T04:15:09.577",
      "lastModified" : "2024-11-21T07:45:37.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Openfind Mail2000 file uploading function has insufficient filtering for user input. An authenticated remote attacker with general user privilege can exploit this vulnerability to inject JavaScript, conducting an XSS attack."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openfind:mail2000:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1762976A-2372-49D5-BD94-77F8C0C86DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openfind:mail2000:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC17A2D8-B006-4738-A6CB-F6B277460B6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6953-79236-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6953-79236-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24834",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-03-27T04:15:09.660",
      "lastModified" : "2024-11-21T07:48:29.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WisdomGarden Tronclass has improper access control when uploading file. An authenticated remote attacker with general user privilege can exploit this vulnerability to access files belonging to other users by modifying the file ID within URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wisdomgarden:tronclass_ilearn:*:*:*:*:web:*:*:*",
            "versionEndExcluding" : "1.52.29198",
            "matchCriteriaId" : "D0ADB517-1526-4675-8012-12A77AC3FECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wisdomgarden:tronclass_ilearn:2.3.2:*:*:*:*:android:*:*",
            "matchCriteriaId" : "0F51CEDF-A48E-4DD7-841D-01F562E73787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wisdomgarden:tronclass_ilearn:2.3.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "4D2980CF-A73D-4196-AE92-574C8096417B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6954-ed16b-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6954-ed16b-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24835",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-03-27T04:15:09.750",
      "lastModified" : "2024-11-21T07:48:29.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. An authenticated remote attacker with administrator privilege can exploit this vulnerability to execute arbitrary system command to perform arbitrary system operation or disrupt service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softnext:spam_sqr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.221231",
            "matchCriteriaId" : "FBD41930-ACEF-469A-83C9-5FB6514143B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6955-c7612-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6955-c7612-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24837",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-03-27T04:15:09.830",
      "lastModified" : "2024-11-21T07:48:29.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HGiga PowerStation remote management function has insufficient filtering for user input. An authenticated remote attacker with general user privilege can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operation or disrupt service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hgiga:powerstation_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "x64.6.2.165",
            "matchCriteriaId" : "C3553132-CE95-4A61-9188-22D479C3E8A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hgiga:powerstation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4335A03A-1D0E-4DC9-A71B-FA627DB38B2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6956-fbd85-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6956-fbd85-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24838",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-03-27T04:15:09.917",
      "lastModified" : "2024-11-21T07:48:29.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HGiga PowerStation has a vulnerability of Information Leakage. An unauthenticated remote attacker can exploit this vulnerability to obtain the administrator's credential. This credential can then be used to login PowerStation or Secure Shell to achieve remote code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hgiga:powerstation_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "x64.6.2.165",
            "matchCriteriaId" : "C3553132-CE95-4A61-9188-22D479C3E8A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hgiga:powerstation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4335A03A-1D0E-4DC9-A71B-FA627DB38B2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6957-d8f67-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6957-d8f67-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24839",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-03-27T04:15:09.997",
      "lastModified" : "2024-11-21T07:48:29.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript, conducting a reflected XSS attack."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:oaklouds_mailsherlock:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0A93EB-11BC-4634-A8E2-09EA403912B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6958-e1a8e-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6958-e1a8e-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24840",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-03-27T04:15:10.087",
      "lastModified" : "2024-11-21T07:48:30.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HGiga MailSherlock mail query function has vulnerability of insufficient validation for user input. An authenticated remote attacker with administrator privilege can exploit this vulnerability to inject SQL commands to read, modify, and delete the database."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:oaklouds_mailsherlock:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0A93EB-11BC-4634-A8E2-09EA403912B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6959-cdecb-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6959-cdecb-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24841",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-03-27T04:15:10.167",
      "lastModified" : "2024-11-21T07:48:30.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HGiga MailSherlock query function for connection log has a vulnerability of insufficient filtering for user input. An authenticated remote attacker with administrator privilege can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operation or disrupt service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:oaklouds_mailsherlock:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0A93EB-11BC-4634-A8E2-09EA403912B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6960-fc2fe-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6960-fc2fe-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24842",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-03-27T04:15:10.247",
      "lastModified" : "2024-11-21T07:48:30.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of another user’s mail by changing user ID and mail ID within URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:oaklouds_mailsherlock:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB0A93EB-11BC-4634-A8E2-09EA403912B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6961-12444-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6961-12444-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25017",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-03-27T04:15:10.317",
      "lastModified" : "2024-11-21T07:48:56.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIFARTEK IOT Wall has a vulnerability of incorrect authorization. An authenticated remote attacker with general user privilege is allowed to perform specific privileged function to access and modify all sensitive data."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rifartek:iot_wall:22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F367A9-A5D0-43B4-AFCE-1AA49D4C68AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6962-34ac1-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6962-34ac1-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25018",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-03-27T04:15:10.390",
      "lastModified" : "2024-11-21T07:48:56.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIFARTEK IOT Wall transportation function has insufficient filtering for user input. An authenticated remote attacker with general user privilege can inject JavaScript to perform reflected XSS (Reflected Cross-site scripting) attack."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rifartek:iot_wall:22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3F367A9-A5D0-43B4-AFCE-1AA49D4C68AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6963-7d2ee-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6963-7d2ee-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25909",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-03-27T04:15:10.473",
      "lastModified" : "2024-11-21T07:50:24.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary command or disrupt service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:oaklouds_portal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "2.0-10",
            "matchCriteriaId" : "781258B7-4D3E-458B-84CF-69E96AB8F7C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:oaklouds_portal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.0-10",
            "matchCriteriaId" : "A1915384-8254-4B4C-A3A6-81091263747A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6973-45872-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-6973-45872-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T04:15:10.553",
      "lastModified" : "2025-02-19T17:15:13.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MyLink infotainment system (build 2021.3.26) in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service (temporary failure of Media Player functionality) via a crafted MP3 file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gm:mylink_infotainment_system:2021.3.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D92838E-E17F-429C-8E61-2D5EC8ACBACB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:gm:chevrolet_equinox:2021:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E936B44B-EB4F-4898-A8E2-A0FDE1DE0E51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zj3t/Automotive-vulnerabilities/tree/main/GM/Chevrolet_Equinox2021",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/zj3t/GM_Vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zj3t/Automotive-vulnerabilities/tree/main/GM/Chevrolet_Equinox2021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/zj3t/GM_Vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T14:15:07.897",
      "lastModified" : "2025-02-19T19:15:12.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service (DoS) via crafted packets."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mikrotik:routeros:6.40.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29AFF54C-9291-4ADF-9DD4-1F1FF4CD2166"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mikrotik.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://routeros.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/ZYen12138/RouterOS/blob/main/CVE-2023-24094.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://mikrotik.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://routeros.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/ZYen12138/RouterOS/blob/main/CVE-2023-24094.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T14:15:07.947",
      "lastModified" : "2024-11-21T07:52:07.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Phpgurukul Park Ticketing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Admin Name parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:park_ticketing_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3182D77A-8569-48EC-B6CD-B3DA5B156971"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40shiva.infocop/stored-xss-park-ticketing-management-system-phpgurukul-893583dc2e20",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/%40shiva.infocop/stored-xss-park-ticketing-management-system-phpgurukul-893583dc2e20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T14:15:07.987",
      "lastModified" : "2024-11-21T07:52:07.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:park_ticketing_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3182D77A-8569-48EC-B6CD-B3DA5B156971"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40shiva.infocop/authentication-bypass-park-ticketing-management-system-phpgurukul-427045159c05",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/%40shiva.infocop/authentication-bypass-park-ticketing-management-system-phpgurukul-427045159c05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T14:15:08.033",
      "lastModified" : "2024-11-21T07:52:19.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker to obtain sensitive information via the ConfigVerifyController function of the Tenant Management module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opengoofy:hippo4j:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDE6062-50F4-4276-8D27-337745FF8AF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opengoofy/hippo4j/issues/1060",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/opengoofy/hippo4j/issues/1060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1133",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T15:15:07.293",
      "lastModified" : "2024-11-21T07:38:31.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on port 10100/ UDP by default. The service accepts the unverified UDP packets and deserializes the content, which could allow an unauthenticated attacker to remotely execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "CCCA3760-38A4-4DBF-98D3-1A6799317836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172799/Delta-Electronics-InfraSuite-Device-Master-Deserialization.html",
        "source" : "ics-cert@hq.dhs.gov"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172799/Delta-Electronics-InfraSuite-Device-Master-Deserialization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1134",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T15:15:07.370",
      "lastModified" : "2024-11-21T07:38:31.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a path traversal vulnerability, which could allow an attacker to read local files, disclose plaintext credentials, and escalate privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "CCCA3760-38A4-4DBF-98D3-1A6799317836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1135",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T15:15:07.460",
      "lastModified" : "2024-11-21T07:38:31.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nIn Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could set incorrect directory permissions, which could result in local privilege escalation.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "CCCA3760-38A4-4DBF-98D3-1A6799317836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1136",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T15:15:07.540",
      "lastModified" : "2024-11-21T07:38:31.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an unauthenticated attacker could generate a valid token, which would lead to authentication bypass."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "CCCA3760-38A4-4DBF-98D3-1A6799317836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1137",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T15:15:07.620",
      "lastModified" : "2024-11-21T07:38:31.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which a low-level user could extract files and plaintext credentials of administrator users, resulting in privilege escalation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "CCCA3760-38A4-4DBF-98D3-1A6799317836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1138",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T15:15:07.690",
      "lastModified" : "2024-11-21T07:38:31.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain an improper access control vulnerability, which could allow an attacker to retrieve Gateway configuration files to obtain plaintext credentials."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "CCCA3760-38A4-4DBF-98D3-1A6799317836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1139",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T15:15:07.760",
      "lastModified" : "2024-11-21T07:38:32.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Device-gateway service, which could allow deserialization of requests prior to authentication, resulting in remote code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "CCCA3760-38A4-4DBF-98D3-1A6799317836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1140",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T15:15:07.840",
      "lastModified" : "2024-11-21T07:38:32.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability that could allow an attacker to achieve unauthenticated remote code execution in the context of an administrator."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "CCCA3760-38A4-4DBF-98D3-1A6799317836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1141",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T15:15:07.917",
      "lastModified" : "2024-11-21T07:38:32.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a command injection vulnerability that could allow an attacker to inject arbitrary commands, which could result in remote code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "CCCA3760-38A4-4DBF-98D3-1A6799317836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1142",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T15:15:08.000",
      "lastModified" : "2024-11-21T07:38:32.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication resulting in privilege escalation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "CCCA3760-38A4-4DBF-98D3-1A6799317836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1143",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T15:15:08.080",
      "lastModified" : "2024-11-21T07:38:32.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use Lua scripts, which could allow an attacker to remotely execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "CCCA3760-38A4-4DBF-98D3-1A6799317836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1144",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T15:15:08.167",
      "lastModified" : "2024-11-21T07:38:32.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contains an improper access control vulnerability in which an attacker can use the Device-Gateway service and bypass authorization, which could result in privilege escalation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "CCCA3760-38A4-4DBF-98D3-1A6799317836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1145",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T15:15:08.277",
      "lastModified" : "2024-11-21T07:38:32.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\n\n\n\n\nDelta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Device-DataCollect service, which could allow deserialization of requests prior to authentication, resulting in remote code execution.\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "CCCA3760-38A4-4DBF-98D3-1A6799317836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1655",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-27T15:15:08.390",
      "lastModified" : "2024-11-21T07:39:38.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.0",
            "matchCriteriaId" : "8D40AF3F-484F-41A5-BBAD-15B2391EB83F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/e7f96c2d3774e4ea25f952bcdf55af1dd6e919f4",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/05f1d1de-bbfd-43fe-bdf9-7f73419ce7c9",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/e7f96c2d3774e4ea25f952bcdf55af1dd6e919f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/05f1d1de-bbfd-43fe-bdf9-7f73419ce7c9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1659",
      "sourceIdentifier" : "cve@asrg.io",
      "published" : "2023-03-27T15:15:08.493",
      "lastModified" : "2023-11-07T04:04:31.303",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22707",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-27T15:15:08.560",
      "lastModified" : "2025-06-10T11:44:28.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (author+) Cross-Site Scripting (XSS) vulnerability in Wpsoul Greenshift – animation and page builder blocks plugin <= 4.9.9 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpsoul:greenshift:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.9.9",
            "matchCriteriaId" : "35EF8152-7FD9-4200-9BBF-591B75C9BB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/greenshift-animation-and-page-builder-blocks/wordpress-greenshift-animation-and-page-builder-blocks-plugin-4-9-9-svg-upload-to-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/greenshift-animation-and-page-builder-blocks/wordpress-greenshift-animation-and-page-builder-blocks-plugin-4-9-9-svg-upload-to-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27296",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-27T15:15:08.650",
      "lastModified" : "2024-11-21T07:52:36.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong.\n\nIt could be triggered by authenticated users of InLong, you could refer to [1] to know more about this vulnerability.\n\nThis issue affects Apache InLong: from 1.1.0 through 1.5.0.  Users are advised to upgrade to Apache InLong's latest version or cherry-pick [2] to solve it.\n\n\n\n[1]  https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html\n\n https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html \n\n[2]  https://github.com/apache/inlong/pull/7422 https://github.com/apache/inlong/pull/7422 \n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:inlong:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "6B76100A-B84F-42E0-98DD-8637E4B5C63A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/xbvtjw9bwzgbo9fp1by8o3p49nf59xzt",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/xbvtjw9bwzgbo9fp1by8o3p49nf59xzt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0272",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:07.937",
      "lastModified" : "2025-02-19T16:15:35.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NEX-Forms WordPress plugin before 8.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basixonline:nex-forms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "8.3.3",
            "matchCriteriaId" : "CF48FD99-B1DD-4AB1-944C-AA0CA9DE8BFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/047b50c0-0eb3-4371-9e5d-3778fdafc66b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/047b50c0-0eb3-4371-9e5d-3778fdafc66b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0335",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.007",
      "lastModified" : "2025-02-19T21:15:11.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Shamsi WordPress plugin through 4.3.3 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber delete attachment."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpvar:wp_shamsi:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.3.3",
            "matchCriteriaId" : "F2B9C406-DAC7-4E55-BAEE-ACC28FB74358"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/f7a20bea-c3d5-431b-bdcf-e189c81a561a",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f7a20bea-c3d5-431b-bdcf-e189c81a561a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0336",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.067",
      "lastModified" : "2025-02-19T20:15:33.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OoohBoi Steroids for Elementor WordPress plugin before 2.1.5 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber to delete attachment."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ooohboi_steroids_for_elementor_project:ooohboi_steroids_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.5",
            "matchCriteriaId" : "97B8A27B-7894-4CB4-A5DD-7BC7FEFE3733"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/ac74df9a-6fbf-4411-a501-97eba1ad1895",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ac74df9a-6fbf-4411-a501-97eba1ad1895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0395",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.133",
      "lastModified" : "2025-02-19T15:15:12.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The menu shortcode WordPress plugin through 1.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:menu_shortcode_project:menu_shortcode:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "58C48219-E879-4345-9B6B-32ED4B94DA3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/3f2565cd-7050-4ebd-9a50-cd9b9f7c3341",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/3f2565cd-7050-4ebd-9a50-cd9b9f7c3341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0441",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.193",
      "lastModified" : "2025-02-19T17:15:11.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gallery Blocks with Lightbox WordPress plugin before 3.0.8 has an AJAX endpoint that can be accessed by any authenticated users, such as subscriber. The callback function allows numerous actions, the most serious one being reading and updating the WordPress options which could be used to enable registration with a default administrator user role."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplygallery:simply_gallery_blocks_with_lightbox:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.0.8",
            "matchCriteriaId" : "ABE77C84-0F53-4733-B15D-9134483E92C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/11703e49-c042-4eb6-9a5f-6e006e3725a0",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/11703e49-c042-4eb6-9a5f-6e006e3725a0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0467",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.250",
      "lastModified" : "2025-02-19T17:15:12.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Dark Mode WordPress plugin before 4.0.8 does not properly sanitize the style parameter in shortcodes before using it to load a PHP template. This leads to Local File Inclusion on servers where non-existent directories may be traversed, or when chained with another vulnerability allowing arbitrary directory creation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wppool:wp_dark_mode:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.0.8",
            "matchCriteriaId" : "E24AF69B-BDA8-40A6-9845-5FFAC20F3404"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/8eb431a6-59a5-4cee-84e0-156c0b31cfc4",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8eb431a6-59a5-4cee-84e0-156c0b31cfc4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0484",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.333",
      "lastModified" : "2025-02-19T20:15:33.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks WordPress plugin before 1.1.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:contact_form_7_widget_for_elementor_page_builder_\\&_gutenberg_blocks:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.6",
            "matchCriteriaId" : "943706A3-D764-442C-B82D-2A2BBFAC6368"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e61fb245-0d7f-42b0-9b96-c17ade8c04c5",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e61fb245-0d7f-42b0-9b96-c17ade8c04c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0491",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.420",
      "lastModified" : "2025-02-19T20:15:33.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Schedulicity WordPress plugin through 2.21 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schedulicity:schedulicity:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.2.1",
            "matchCriteriaId" : "63D4F975-5F26-42BF-868F-F81D681E3035"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/b1a7e8fc-ffcf-493b-9f2d-ffa5d2348b60",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/b1a7e8fc-ffcf-493b-9f2d-ffa5d2348b60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0495",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.493",
      "lastModified" : "2025-02-19T21:15:11.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HT Slider For Elementor WordPress plugin before 1.4.0 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:ht_slider_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.0",
            "matchCriteriaId" : "ECBA9CA8-8EF4-4622-B45B-6D07F3257087"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/2e3af480-b1a4-404c-b0fc-2b7b6a6b9c27",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/2e3af480-b1a4-404c-b0fc-2b7b6a6b9c27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0496",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.560",
      "lastModified" : "2025-02-14T16:15:32.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HT Event WordPress plugin before 1.4.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:ht_event:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.6",
            "matchCriteriaId" : "EFFB4E8C-1FD8-408F-BB9E-B7F273255A57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/451b47d5-7bd2-4a82-9c8e-fe6601bcd2ab",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/451b47d5-7bd2-4a82-9c8e-fe6601bcd2ab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0497",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.627",
      "lastModified" : "2025-02-26T19:15:15.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HT Portfolio WordPress plugin before 1.1.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:ht_portfolio:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.6",
            "matchCriteriaId" : "9CCEE134-701D-4C59-83CC-E97480CF6564"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/ae5b7776-9d0d-4db8-81c3-237b16cd9c62",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ae5b7776-9d0d-4db8-81c3-237b16cd9c62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0498",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.697",
      "lastModified" : "2025-02-19T21:15:11.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Education WordPress plugin before 1.2.7 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:wp_education:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.7",
            "matchCriteriaId" : "D27AEC30-02C2-444B-B886-BD4E4F92DA5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/8fa051ad-5b35-46d8-be95-0ac4e73d5eff",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8fa051ad-5b35-46d8-be95-0ac4e73d5eff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0499",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.760",
      "lastModified" : "2025-02-19T21:15:12.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The QuickSwish WordPress plugin before 1.1.0 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:quickswish:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "B85DCABB-353D-4016-8B5F-5A369809A07C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/9342470a-a0ad-4f0b-b95f-7daa39a6362b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/9342470a-a0ad-4f0b-b95f-7daa39a6362b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0500",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.820",
      "lastModified" : "2025-02-19T20:15:33.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Film Studio WordPress plugin before 1.3.5 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:wp_film_studio:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.5",
            "matchCriteriaId" : "6EE23323-8AD3-4366-B6D3-A68CED917181"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/95a6a11e-da5d-4fac-aff6-a3f7624682b7",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/95a6a11e-da5d-4fac-aff6-a3f7624682b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0501",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.877",
      "lastModified" : "2025-02-19T20:15:34.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Insurance WordPress plugin before 2.1.4 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:wp_insurance:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.4",
            "matchCriteriaId" : "21BA0B88-B057-4B6C-B273-9B29928F835B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/36fd6c0d-3f0c-4f7d-aa17-5b2d084ab94c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/36fd6c0d-3f0c-4f7d-aa17-5b2d084ab94c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0502",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.937",
      "lastModified" : "2025-02-19T20:15:34.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP News WordPress plugin through 1.1.9 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:wp_news:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.9",
            "matchCriteriaId" : "F6F3C23C-C991-42B6-A7AF-3C6CA21F0DB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c959f4ce-b6ea-4aee-9a98-aa98d2a62138",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c959f4ce-b6ea-4aee-9a98-aa98d2a62138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0503",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:08.990",
      "lastModified" : "2025-02-19T20:15:34.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Free WooCommerce Theme 99fy Extension WordPress plugin before 1.2.8 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:free_woocommerce_theme_99fy_extension:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.8",
            "matchCriteriaId" : "4408E092-B622-433D-8A2F-EEF935B29E86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/3cb148fb-1f30-4316-a421-10da51d849f3",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/3cb148fb-1f30-4316-a421-10da51d849f3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0504",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.047",
      "lastModified" : "2025-02-19T17:15:12.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HT Politic WordPress plugin before 2.3.8 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:ht_politic:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.3.8",
            "matchCriteriaId" : "5A3D819B-2AFD-43BE-B8FA-3F16843ECFCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/b427841d-a3ad-4e3a-8964-baad90a9aedb",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/b427841d-a3ad-4e3a-8964-baad90a9aedb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0505",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.107",
      "lastModified" : "2025-02-19T21:15:12.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ever Compare WordPress plugin through 1.2.3 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:ever_compare:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "321CC4FC-3B78-4C67-856B-531F340E6B49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/dbabff3e-b021-49ed-aaf3-b73a77d4b354",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/dbabff3e-b021-49ed-aaf3-b73a77d4b354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0589",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.167",
      "lastModified" : "2025-05-05T16:15:26.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Image Carousel WordPress plugin through 1.0.2 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp_image_carousel_project:wp_image_carousel:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "A9030159-EA39-4254-A9BE-65E8890B340E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/58649228-69a6-4028-8487-166b0a07fcf7",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/58649228-69a6-4028-8487-166b0a07fcf7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0660",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.223",
      "lastModified" : "2025-02-19T19:15:12.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Smart Slider 3 WordPress plugin before 3.5.1.14 does not properly validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextendweb:smart_slider_3:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.5.1.14",
            "matchCriteriaId" : "E58AEBD8-292A-49FE-B0BF-C64649778625"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/3fe712bc-ce7f-4b30-9fc7-1ff15aa5b6ce",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/3fe712bc-ce7f-4b30-9fc7-1ff15aa5b6ce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0816",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.277",
      "lastModified" : "2025-02-19T17:15:12.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of anti-spam protections."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strategy11:formidable_form_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "EE53A412-1B19-493C-A9A9-5821D1E22EA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/a281f63f-e295-4666-8a08-01b23cd5a744",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/a281f63f-e295-4666-8a08-01b23cd5a744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0823",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.337",
      "lastModified" : "2025-02-19T17:15:12.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.4.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hu-manity:cookie_notice_\\&_compliance_for_gdpr_\\/_ccpa:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.4.7",
            "matchCriteriaId" : "D7E47810-FAFC-4040-9B22-D961082EA1D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/83f23a9f-9ace-47d2-a5f3-a4915129b16c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/83f23a9f-9ace-47d2-a5f3-a4915129b16c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0955",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.387",
      "lastModified" : "2025-02-19T20:15:34.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks. By default, the affected feature is available to users with the manage_options capability (admin+), however the plugin has a settings to allow low privilege users to access it as well."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veronalabs:wp_statistics:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "14.0",
            "matchCriteriaId" : "92495453-6100-4B68-9087-BAE60201AB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/18b7e93f-b038-4f28-918b-4015d62f0eb8",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/18b7e93f-b038-4f28-918b-4015d62f0eb8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1025",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.433",
      "lastModified" : "2025-02-26T21:15:12.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple File List WordPress plugin before 6.0.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simplefilelist:simple_file_list:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "6.0.10",
            "matchCriteriaId" : "D553357F-69B1-4EC9-A10D-68405570D05C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/13621b13-8d31-4214-a665-cb15981f3ec1",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/13621b13-8d31-4214-a665-cb15981f3ec1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1069",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.480",
      "lastModified" : "2025-02-18T21:15:14.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Complianz WordPress plugin before 6.4.2, Complianz Premium WordPress plugin before 6.4.2 do not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:really-simple-plugins:complianz:*:*:*:*:-:wordpress:*:*",
            "versionEndExcluding" : "6.4.2",
            "matchCriteriaId" : "36295716-0F54-4A1E-9336-23A136EE624E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:really-simple-plugins:complianz:*:*:*:*:premium:wordpress:*:*",
            "versionEndExcluding" : "6.4.2",
            "matchCriteriaId" : "ACA2F652-0557-4DAC-B551-631F2AFA4A72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/caacc50c-822e-46e9-bc0b-681349fd0dda",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/caacc50c-822e-46e9-bc0b-681349fd0dda",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1086",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.540",
      "lastModified" : "2025-02-19T20:15:34.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Preview Link Generator WordPress plugin before 1.0.4 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:preview_link_generator:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "558EA43B-AD76-4C96-B1DF-B70FC527C9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e2bda716-76dc-4a26-b26a-7a2a764757b0",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e2bda716-76dc-4a26-b26a-7a2a764757b0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1087",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.610",
      "lastModified" : "2025-02-19T16:15:35.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WC Sales Notification WordPress plugin before 1.2.3 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:wc_sales_notification:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "A3DAD38A-7D48-4521-889D-35BFAA3EDEAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/356c89a1-81b6-4600-9291-1a74788af7f9",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/356c89a1-81b6-4600-9291-1a74788af7f9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1088",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.670",
      "lastModified" : "2025-02-19T21:15:12.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Plugin Manager WordPress plugin before 1.1.8 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:wp_plugin_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.8",
            "matchCriteriaId" : "F2631E86-6E31-4E36-AFCC-91770AFA4F21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/a956f1cd-fce4-4235-b1af-4b7675a60ca2",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/a956f1cd-fce4-4235-b1af-4b7675a60ca2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1089",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.730",
      "lastModified" : "2025-02-19T19:15:12.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Coupon Zen WordPress plugin before 1.0.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:coupon_zen:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "02BCEC2C-3D4A-4DBA-AB14-507BAEF75C42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/9787e26f-33fe-4c65-abb3-7f5c76ae8d6f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/9787e26f-33fe-4c65-abb3-7f5c76ae8d6f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1092",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.777",
      "lastModified" : "2025-02-19T17:15:12.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OAuth Single Sign On Free WordPress plugin before 6.24.2, OAuth Single Sign On Standard WordPress plugin before 28.4.9, OAuth Single Sign On Premium WordPress plugin before 38.4.9 and OAuth Single Sign On Enterprise WordPress plugin before 48.4.9 do not have CSRF checks when deleting Identity Providers (IdP), which could allow attackers to make logged in admins delete arbitrary IdP via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniorange:oauth_single_sign_on:*:*:*:*:free:wordpress:*:*",
            "versionEndExcluding" : "6.24.2",
            "matchCriteriaId" : "3FE503DD-9ECB-4215-B19E-568FFD96D42F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniorange:oauth_single_sign_on:*:*:*:*:standard:wordpress:*:*",
            "versionEndExcluding" : "28.4.9",
            "matchCriteriaId" : "FE720C72-28C3-4AC0-A34E-188A48B922E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniorange:oauth_single_sign_on:*:*:*:*:premium:wordpress:*:*",
            "versionEndExcluding" : "38.4.9",
            "matchCriteriaId" : "9EF5DF2E-9A32-4F69-AF5E-E8D8906C89C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniorange:oauth_single_sign_on:*:*:*:*:enterprise:wordpress:*:*",
            "versionEndExcluding" : "48.4.9",
            "matchCriteriaId" : "E93C3449-9BD8-4528-8E97-CABB398A93F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/52e29f16-b6dd-4132-9bb8-ad10bd3c39d7",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5eb85df5-8aab-4f30-a401-f776a310b09c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8fbf7efe-0bf2-42c6-aef1-7fcf2708b31b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f6e165d9-2193-4c76-ae2d-618a739fe4fb",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/52e29f16-b6dd-4132-9bb8-ad10bd3c39d7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5eb85df5-8aab-4f30-a401-f776a310b09c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8fbf7efe-0bf2-42c6-aef1-7fcf2708b31b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f6e165d9-2193-4c76-ae2d-618a739fe4fb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1093",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.833",
      "lastModified" : "2025-02-19T21:15:12.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers (IdP), which could allow attackers to make logged in admins delete all IdP via a CSRF attack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniorange:oauth_single_sign_on:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "6.24.2",
            "matchCriteriaId" : "38C167A3-4ABC-4228-95C4-A1245128B4E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/1e13b9ea-a3ef-483b-b967-6ec14bd6d54d",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/1e13b9ea-a3ef-483b-b967-6ec14bd6d54d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1399",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T16:15:09.890",
      "lastModified" : "2024-11-21T07:39:06.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nN6854A Geolocation Server versions 2.4.2 are vulnerable to untrusted data deserialization, which may allow a malicious actor to escalate privileges in the affected device’s default configuration and achieve remote code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:keysight:n6854a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.2",
            "matchCriteriaId" : "275BC2F4-12BD-49E6-9631-DBFEBEF51EB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:keysight:n6854a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "685A10D5-092D-48D5-92F8-5D960A825E93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1400",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-03-27T16:15:09.960",
      "lastModified" : "2025-04-23T17:16:27.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Modern Events Calendar Lite WordPress plugin before 6.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webnus:modern_events_calendar_lite:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "6.5.2",
            "matchCriteriaId" : "5B689965-73E3-45EA-86BA-89AC058C9A30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c7feceef-28f1-4cac-b124-4b95e3f17b07",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c7feceef-28f1-4cac-b124-4b95e3f17b07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1654",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-27T16:15:10.017",
      "lastModified" : "2024-11-21T07:39:38.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial of Service in GitHub repository gpac/gpac prior to 2.4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "46EDD964-D166-4879-8E48-CF3AC00AF840"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/2c055153d401b8c49422971e3a0159869652d3da",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/33652b56-128f-41a7-afcc-10641f69ff14",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/gpac/gpac/commit/2c055153d401b8c49422971e3a0159869652d3da",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/33652b56-128f-41a7-afcc-10641f69ff14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T16:15:10.083",
      "lastModified" : "2024-11-21T07:53:34.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability found in PrestaShop xipblog v.2.0.1 and before allow a remote attacker to gain privileges via the xipcategoryclass and xippostsclass components."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xipblog_project:xipblog:*:*:*:*:*:prestashop:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "BDBE89CF-4B69-48D0-B49B-30AA3DE68990"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/03/23/xipblog.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xpert-idea/xipblog/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/03/23/xipblog.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xpert-idea/xipblog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25828",
      "sourceIdentifier" : "disclosure@synopsys.com",
      "published" : "2023-03-27T17:15:09.480",
      "lastModified" : "2025-02-19T17:15:13.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nPluck CMS is vulnerable to an authenticated remote code execution (RCE) vulnerability through its “albums” module. Albums are used to create collections of images that can be inserted into web pages across the site. Albums allow the upload of various filetypes, which undergo a normalization process before being available on the site. Due to lack of file extension validation, it is possible to upload a crafted JPEG payload containing an embedded PHP web-shell. An attacker may navigate to it directly to achieve RCE on the underlying web server. Administrator credentials for the Pluck CMS web interface are required to access the albums module feature, and are thus required to exploit this vulnerability. CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C (8.2 High)\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@synopsys.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluck-cms:pluck:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7.16",
            "matchCriteriaId" : "68FEF945-EB20-4C8A-AE93-E8FBF280D3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluck-cms:pluck:4.7.16:dev1:*:*:*:*:*:*",
            "matchCriteriaId" : "202CB88D-BDA3-4F58-8CAB-6224367CA33B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluck-cms:pluck:4.7.16:dev2:*:*:*:*:*:*",
            "matchCriteriaId" : "6C20AFCB-BF33-42E3-A735-E0B7E9C6D4E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluck-cms:pluck:4.7.16:dev3:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD1FF6D-A0F9-46CF-AF24-1CBC4F858D13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pluck-cms:pluck:4.7.16:dev4:*:*:*:*:*:*",
            "matchCriteriaId" : "2A0E277D-0CB2-448C-9508-1E5719128EDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synopsys.com/blogs/software-security/pluck-cms-vulnerability/",
        "source" : "disclosure@synopsys.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synopsys.com/blogs/software-security/pluck-cms-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T17:15:09.547",
      "lastModified" : "2024-11-21T07:52:30.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SourceCodester Water Billing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the lastname text box under the Add Client module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:water_billing_system_project:water_billing_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B183E2E1-018E-4055-AA2E-2A38291CD903"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kaikai-11/WaterBilling-System",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kaikai-11/WaterBilling-System/blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kaikai-11/WaterBilling-System",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kaikai-11/WaterBilling-System/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T17:15:09.587",
      "lastModified" : "2024-11-21T07:52:31.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:file_management_system_project:file_management_system:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1839E28-9E53-4142-BA2C-096A6CAD68AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flyasolo/File-Management-System",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/flyasolo/File-Management-System",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22300",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T20:15:09.343",
      "lastModified" : "2025-01-17T18:15:19.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthenticated remote attacker could force all authenticated users, such as administrative users, to perform unauthorized actions by viewing the logs. This action would also grant the attacker privilege escalation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:ey-as525f001_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37645A9B-B6A3-498C-B148-E78A1CD4C60B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:ey-as525f001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF655609-2273-4111-8F44-0835C769E391"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25661",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-27T20:15:09.417",
      "lastModified" : "2024-11-21T07:49:53.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TensorFlow is an Open Source Machine Learning Framework. In versions prior to 2.11.1 a malicious invalid input crashes a tensorflow model (Check Failed) and can be used to trigger a denial of service attack. A proof of concept can be constructed with the `Convolution3DTranspose` function. This Convolution3DTranspose layer is a very common API in modern neural networks. The ML models containing such vulnerable components could be deployed in ML applications or as cloud services. This failure could be potentially used to trigger a denial of service attack on ML cloud services. An attacker must have privilege to provide input to a `Convolution3DTranspose` call. This issue has been patched and users are advised to upgrade to version 2.11.1. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11.1",
            "matchCriteriaId" : "677029E5-422E-423C-9C8E-95A8483E51AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tensorflow/tensorflow/commit/948fe6369a5711d4b4568ea9bbf6015c6dfb77e2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fxgc-95xx-grvq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/commit/948fe6369a5711d4b4568ea9bbf6015c6dfb77e2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fxgc-95xx-grvq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25818",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-27T20:15:09.490",
      "lastModified" : "2024-11-21T07:50:15.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud server is an open source, personal cloud implementation. In affected versions a malicious user could try to reset the password of another user and then brute force the 62^21 combinations for the password reset token. As of commit `704eb3aa` password reset attempts are now throttled. Note that 62^21 combinations would significant compute resources to brute force. None the less it is recommended that the Nextcloud Server is upgraded to 24.0.10 or 25.0.4. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndExcluding" : "21.0.9.10",
            "matchCriteriaId" : "BFCBAD36-04D2-47EC-836E-35EFC1D6E060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.2.10.10",
            "matchCriteriaId" : "C5886100-3157-4377-8681-381720CFDA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.12.5",
            "matchCriteriaId" : "F2FEEE2E-6BF9-4332-99A3-690EF68D884F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.10",
            "matchCriteriaId" : "302FFA48-9204-4112-BF23-6182ED62F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.10",
            "matchCriteriaId" : "3D2D0CEB-437C-4ABA-9915-EFCB776E7ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.4",
            "matchCriteriaId" : "282F04F1-B4E4-4DC2-82CA-55DB39A3F373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.4",
            "matchCriteriaId" : "E14A1D06-7AB2-40C2-806F-7EE34595DAF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-v243-x6jc-42mp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36489",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36489/commits/704eb3aa6cecc0a646f5cca4290b595f493f9ed3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-v243-x6jc-42mp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36489/commits/704eb3aa6cecc0a646f5cca4290b595f493f9ed3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27927",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T20:15:09.577",
      "lastModified" : "2025-01-17T18:15:21.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated malicious user could acquire the simple mail transfer protocol (SMTP) Password in cleartext format, despite it being protected and hidden behind asterisks. The attacker could then perform further attacks using the SMTP credentials."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:ey-as525f001_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37645A9B-B6A3-498C-B148-E78A1CD4C60B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:ey-as525f001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF655609-2273-4111-8F44-0835C769E391"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28650",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T20:15:09.633",
      "lastModified" : "2025-01-17T18:15:21.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthenticated remote attacker could provide a malicious link and trick an unsuspecting user into clicking on it. If clicked, the attacker could execute the malicious JavaScript (JS) payload in the target’s security context."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:ey-as525f001_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37645A9B-B6A3-498C-B148-E78A1CD4C60B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:ey-as525f001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF655609-2273-4111-8F44-0835C769E391"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28652",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T20:15:09.693",
      "lastModified" : "2025-01-17T18:15:21.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated malicious user could successfully upload a malicious image could lead to a denial-of-service condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:ey-as525f001_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37645A9B-B6A3-498C-B148-E78A1CD4C60B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:ey-as525f001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF655609-2273-4111-8F44-0835C769E391"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28655",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-27T20:15:09.757",
      "lastModified" : "2025-01-17T18:15:21.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious user could leverage this vulnerability to escalate privileges or perform unauthorized actions in the context of the targeted privileged users."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sauter-controls:ey-as525f001_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37645A9B-B6A3-498C-B148-E78A1CD4C60B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sauter-controls:ey-as525f001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF655609-2273-4111-8F44-0835C769E391"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0241",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T21:15:10.147",
      "lastModified" : "2025-03-17T16:46:07.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another user's settings or alter the database."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.19",
            "matchCriteriaId" : "3096375A-EDFB-4E7A-ABBF-0E8B8ED07C24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pgadmin-org/pgadmin4/issues/5734",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN01398015/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/pgadmin-org/pgadmin4/issues/5734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN01398015/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0494",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T21:15:10.193",
      "lastModified" : "2025-02-24T18:15:16.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.1.7",
            "matchCriteriaId" : "8B7D5030-1EC6-4BAD-B66D-859A906E3D38"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF30E57A-97EA-4A44-8404-6AE4F058B44D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D5F4FA7-E5C5-4C23-BDA8-36A36972E4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CA4F12A-5BC5-4D75-8F20-80D8BB2C5BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C068A4-3780-4EAB-A937-6082DF847564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3F09B5-569F-4C58-9FCA-3C0953D107B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3741B8-851F-475D-B428-523F4F722350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DDA3E5A-8754-4C48-9A27-E2415F8A6000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "566507B6-AC95-47F7-A3FB-C6F414E45F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C21FE1-EA5C-498F-9C6C-D05F91A88217"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C9BD9AE-46FC-4609-8D99-A3CFE91D58D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF5C4AC-CA69-41E3-AD93-7AC21931374A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CDCFF34-6F1D-45A1-BE37-6A0E17B04801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4A684C7-88FD-43C4-9BDB-AE337FCBD0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47811209-5CE5-4375-8391-B0A7F6A0E420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35EEDB95-DCD1-4FED-9BBB-877B2062410C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983533DD-3970-4A37-9A9C-582BD48AA1E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "729C515E-1DD3-466D-A50B-AFE058FFC94A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CE1DC7-72C5-483C-8921-0B462C8284D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EF4996-72F4-4FA4-814F-F5991E7A8318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6897676D-53F9-45B3-B27F-7FF9A4C58D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF2B9A2-8CA6-4EDF-9975-07265E363ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA6A5AF-2EBE-4ED9-B312-DCD9D150D031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22D095ED-9247-4133-A133-73B7668565E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871A5C26-DB7B-4870-A5B2-5DD24C90B4A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DF629-16B8-4882-822D-A6897B03DD30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B09ACF2D-D83F-4A86-8185-9569605D8EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC10D919-57FD-4725-B8D2-39ECB476902F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1272DF03-7674-4BD4-8E64-94004B195448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3921C1CF-A16D-4727-99AD-03EFFA7C91CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7808D1-B267-4361-8187-5AB70B64179A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2165995",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.x.org/archives/xorg-announce/2023-February/003320.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-30",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2165995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.x.org/archives/xorg-announce/2023-February/003320.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0778",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T21:15:10.240",
      "lastModified" : "2025-02-24T18:15:16.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podman_project:podman:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C3D1F8-4CE5-41FE-9D99-F5C5A6ADA0FB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2168256",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2168256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1073",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T21:15:10.287",
      "lastModified" : "2025-04-23T17:16:24.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/11/05/2",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/11/05/3",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2173403",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/id=b12fece4c64857e5fab4290bf01b2e0317a88456",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.openwall.com/lists/osssecurity/2023/01/17/3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/11/05/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/11/05/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2173403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/id=b12fece4c64857e5fab4290bf01b2e0317a88456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openwall.com/lists/osssecurity/2023/01/17/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1074",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T21:15:10.330",
      "lastModified" : "2025-03-19T16:15:16.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a malicious networking service and someone connects to this service. This could allow a local user to starve resources, causing a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/11/05/4",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2173430",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=458e279f861d3f61796894cd158b780765a1569f",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/23/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/11/05/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2173430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=458e279f861d3f61796894cd158b780765a1569f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/23/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1075",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T21:15:10.380",
      "lastModified" : "2025-02-24T17:15:11.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the list_head, leaking the last byte of the confused field that overlaps with rec->tx_ready."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=ffe2a22562444720b05bdfeb999c03e810d84cbb",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=ffe2a22562444720b05bdfeb999c03e810d84cbb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1076",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T21:15:10.423",
      "lastModified" : "2025-02-24T17:15:12.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability. This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-791"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=66b2c338adce580dfce2199591e65e2bab889cff",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=a096ccca6e503a5c575717ff8a36ace27510ab0a",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=66b2c338adce580dfce2199591e65e2bab889cff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=a096ccca6e503a5c575717ff8a36ace27510ab0a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1077",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T21:15:10.467",
      "lastModified" : "2024-11-21T07:38:24.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.25",
            "versionEndExcluding" : "4.19.293",
            "matchCriteriaId" : "7DB2C5B7-1672-40ED-9A23-6E6C8A94537F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.235",
            "matchCriteriaId" : "13DD5E68-8CB4-46EE-9A8F-C7F6C1A84430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.173",
            "matchCriteriaId" : "4D810CFB-B7C5-493C-B98A-0D5F0D8A47B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.99",
            "matchCriteriaId" : "5B8B2AC9-2F31-4A0F-96F5-7E26B50B27BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.16",
            "matchCriteriaId" : "0FD95FDA-6525-4B13-B3FB-49D9995FD8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.2.3",
            "matchCriteriaId" : "88C67289-22AD-4CA9-B202-5F5A80E5BA4B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDD92BFA-9117-4E6E-A13F-ED064B4B7284"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:a700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7DA42F-5D64-4967-A2D4-6210FE507841"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:8300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E73901F-666D-4D8B-BDFD-93DD2F70C74B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FD5AED-42CF-4918-B32C-D675738EF15C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:8700_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B25BEF-8708-4E2C-8BA6-EBCD5267EB04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:8700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0F11D2-B5D9-46B4-BFC5-C86BC87D516A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:a400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04E3BD77-8915-4FFC-8483-5DB5D610F829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:a400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E94ECB-BB51-4364-BEDD-8648C193196F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:c400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC7AD92-8B33-4137-A4EC-08641E4AF857"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:c400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD443748-B0D1-4C1A-A62E-BD5FB5967370"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=7c4a5b89a0b5a57a64b601775b296abf77a9fe97",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0002/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=7c4a5b89a0b5a57a64b601775b296abf77a9fe97",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1078",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T21:15:10.520",
      "lastModified" : "2025-05-05T16:15:28.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.17",
            "versionEndExcluding" : "4.19.273",
            "matchCriteriaId" : "1A6AF175-29AC-4FF5-8D35-A1F4C5EBC8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.232",
            "matchCriteriaId" : "9C6E0696-3702-4B0C-A102-2753BDC8C3D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.168",
            "matchCriteriaId" : "12258A3F-04BD-49C9-9C6B-D3C1945E8910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.94",
            "matchCriteriaId" : "55EC7465-CE9A-4B9C-B0FA-97394061A77F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.12",
            "matchCriteriaId" : "63F0738E-F1B2-47A2-9329-E2B8BC87708A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/11/05/1",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=f753a68980cf4b59a80fe677619da2b1804f526d",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230505-0004/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/11/05/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=f753a68980cf4b59a80fe677619da2b1804f526d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230505-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1079",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T21:15:10.573",
      "lastModified" : "2025-02-19T22:15:11.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the work_struct may be scheduled by the LED controller while the device is disconnecting, triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3",
            "matchCriteriaId" : "3769AA63-B0A8-4EF1-96F9-6A6A6B305A02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=4ab3a086d10eeec1424f2e8a968827a6336203df",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=4ab3a086d10eeec1424f2e8a968827a6336203df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1380",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T21:15:10.623",
      "lastModified" : "2024-11-21T07:39:04.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.1",
            "versionEndExcluding" : "4.14.315",
            "matchCriteriaId" : "91C87C3E-F6EF-4375-BA59-76354CE3EFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.19",
            "versionEndExcluding" : "4.19.283",
            "matchCriteriaId" : "E9AD7AA8-ABE6-4255-91B3-D994EC47281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4",
            "versionEndExcluding" : "5.4.243",
            "matchCriteriaId" : "A426D5CD-3C05-4632-92A0-405D35E579EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndExcluding" : "5.10.180",
            "matchCriteriaId" : "096DA06C-349D-4644-941B-A5877497A9B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15",
            "versionEndExcluding" : "5.15.110",
            "matchCriteriaId" : "AD70961A-5CB1-44F0-A005-22AB9CE7A971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndExcluding" : "6.1.27",
            "matchCriteriaId" : "6E180409-F070-48C2-A227-98DC7BFD287F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.2.14",
            "matchCriteriaId" : "0E62BC79-E13F-46D3-9641-F34A9BFDF62C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "21D6F467-B848-453E-B1A4-BEF940E413A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F0FC3-CE52-4BA1-BA51-22F783938431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "3583026A-27EC-4A4C-850A-83F2AF970673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "DC271202-7570-4505-89A4-D602D47BFD00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D413BB6D-4F74-4C7D-9163-47786619EF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D613FB-9976-4989-8C4A-567773373CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "B1240A34-749A-49F5-B8DD-C09441AD2228"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "902B8056-9E37-443B-8905-8AA93E2447FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "359012F1-2C63-415A-88B8-6726A87830DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2177883",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lore.kernel.org/linux-wireless/20230309104457.22628-1-jisoo.jang%40yonsei.ac.kr/T/#u",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0001/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5480",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/14/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2177883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lore.kernel.org/linux-wireless/20230309104457.22628-1-jisoo.jang%40yonsei.ac.kr/T/#u",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/14/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1666",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-27T21:15:10.677",
      "lastModified" : "2024-11-21T07:39:39.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. This vulnerability affects unknown code of the file users/classes/view_class.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224104."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automatic_question_paper_generator_system_project:automatic_question_paper_generator_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "026B7C92-CE66-4285-9FD7-01207D0ABDFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/si-xiao-kai/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224104",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224104",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/si-xiao-kai/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22247",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:10.727",
      "lastModified" : "2024-11-21T07:44:23.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An unauthenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "76AAB57F-7723-44E0-B91A-9F120C849AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D258D9EF-94FB-41F0-A7A5-7F66FA7A0055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5CF6F0-2388-4D3F-8FE1-43B8AF148564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B07F7B2-E915-4EFF-8FFC-91143CEF082E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "DBE7069F-C3EE-46F1-85C4-4EC858C49E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D6340732-571E-468C-9834-A8B2FCB5F5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.4:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D8E4EA-9756-4F9B-BB73-A3EE9C3006FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.4:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "6943D30A-E4A8-47E9-B510-40C2950021D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "684E82D1-7BE3-4D47-9B19-935ED6EC6D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.5:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "80BA2D10-0D51-4E37-A40E-3F8903AE9374"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb23-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb23-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22249",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:10.797",
      "lastModified" : "2024-11-21T07:44:24.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "76AAB57F-7723-44E0-B91A-9F120C849AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D258D9EF-94FB-41F0-A7A5-7F66FA7A0055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5CF6F0-2388-4D3F-8FE1-43B8AF148564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B07F7B2-E915-4EFF-8FFC-91143CEF082E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "DBE7069F-C3EE-46F1-85C4-4EC858C49E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D6340732-571E-468C-9834-A8B2FCB5F5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.4:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D8E4EA-9756-4F9B-BB73-A3EE9C3006FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.4:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "6943D30A-E4A8-47E9-B510-40C2950021D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "684E82D1-7BE3-4D47-9B19-935ED6EC6D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.5:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "80BA2D10-0D51-4E37-A40E-3F8903AE9374"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb23-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb23-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22250",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:10.860",
      "lastModified" : "2024-11-21T07:44:24.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature. Exploitation of this issue does not require user interaction."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "76AAB57F-7723-44E0-B91A-9F120C849AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D258D9EF-94FB-41F0-A7A5-7F66FA7A0055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5CF6F0-2388-4D3F-8FE1-43B8AF148564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B07F7B2-E915-4EFF-8FFC-91143CEF082E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "DBE7069F-C3EE-46F1-85C4-4EC858C49E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D6340732-571E-468C-9834-A8B2FCB5F5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.4:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D8E4EA-9756-4F9B-BB73-A3EE9C3006FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.4:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "6943D30A-E4A8-47E9-B510-40C2950021D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "684E82D1-7BE3-4D47-9B19-935ED6EC6D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.5:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "80BA2D10-0D51-4E37-A40E-3F8903AE9374"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb23-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb23-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22251",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:10.923",
      "lastModified" : "2024-11-21T07:44:24.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Incorrect Authorization vulnerability. A low-privileged authenticated attacker could leverage this vulnerability to achieve minor information disclosure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "76AAB57F-7723-44E0-B91A-9F120C849AC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D258D9EF-94FB-41F0-A7A5-7F66FA7A0055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5CF6F0-2388-4D3F-8FE1-43B8AF148564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B07F7B2-E915-4EFF-8FFC-91143CEF082E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.4",
            "matchCriteriaId" : "DBE7069F-C3EE-46F1-85C4-4EC858C49E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D6340732-571E-468C-9834-A8B2FCB5F5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.4:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "E2D8E4EA-9756-4F9B-BB73-A3EE9C3006FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.4:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "6943D30A-E4A8-47E9-B510-40C2950021D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "684E82D1-7BE3-4D47-9B19-935ED6EC6D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.5:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "80BA2D10-0D51-4E37-A40E-3F8903AE9374"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb23-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb23-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22608",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T21:15:10.980",
      "lastModified" : "2023-11-07T04:07:08.247",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24366",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T21:15:11.017",
      "lastModified" : "2025-02-19T18:15:22.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rconfig:rconfig:6.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A86C2BF-2E95-4122-B090-4819F2DAD539"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mrojz/rconfig-exploit/blob/main/CVE-2023-24366.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mrojz/rconfig-exploit/blob/main/rconfigV6_Local_File_Disclosure.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/mrojz/rconfig-exploit/blob/main/CVE-2023-24366.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mrojz/rconfig-exploit/blob/main/rconfigV6_Local_File_Disclosure.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T21:15:11.053",
      "lastModified" : "2025-02-19T16:15:36.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Stimulsoft GmbH products are affected by: Remote Code Execution. This affects Stimulsoft Designer (Desktop) 2023.1.4 and Stimulsoft Designer (Web) 2023.1.3 and Stimulsoft Viewer (Web) 2023.1.3. Access to the local file system is not prohibited in any way. Therefore, an attacker may include source code which reads or writes local directories and files. It is also possible for the attacker to prepare a report which has a variable that holds the gathered data and render it in the report."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stimulsoft:designer:2023.1:*:*:*:desktop:*:*:*",
            "matchCriteriaId" : "58FBAE53-015C-46BB-AE66-7C02F71896E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stimulsoft:designer:2023.1.3:*:*:*:web:*:*:*",
            "matchCriteriaId" : "ED354002-625C-4A34-8D5B-B296E1E4C677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stimulsoft:designer:2023.1.4:*:*:*:web:*:*:*",
            "matchCriteriaId" : "4481FACF-9808-45D8-A888-4625AE2CCB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stimulsoft:viewer:2023.1.3:*:*:*:web:*:*:*",
            "matchCriteriaId" : "B02D0EFB-A5B6-4E46-9C6B-DBE13F75FA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stimulsoft:viewer:2023.1.4:*:*:*:web:*:*:*",
            "matchCriteriaId" : "CBE99606-BB02-418E-86B6-AD04AFC4DE67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://stimulsoft.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cloud-trustit.spp.at/s/Rskwb3jKXQQsJy2",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://cves.at/posts/cve-2023-25261/writeup/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://stimulsoft.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cloud-trustit.spp.at/s/Rskwb3jKXQQsJy2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://cves.at/posts/cve-2023-25261/writeup/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T21:15:11.093",
      "lastModified" : "2024-11-21T07:49:22.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll the attacker is able to decrypt any connectionstring stored in .mrt files since a static secret is used. The secret does not differ between the tested versions and different operating systems."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stimulsoft:designer:2023.1.4:*:*:*:desktop:*:*:*",
            "matchCriteriaId" : "F9E87AC3-EDEA-405B-9837-E72E152AAD22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stimulsoft:designer:2023.1.4:*:*:*:web:*:*:*",
            "matchCriteriaId" : "4481FACF-9808-45D8-A888-4625AE2CCB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stimulsoft:designer:2023.1.5:*:*:*:desktop:*:*:*",
            "matchCriteriaId" : "51B83B01-2BE1-46B9-AE72-80A09FADD589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stimulsoft:designer:2023.1.5:*:*:*:web:*:*:*",
            "matchCriteriaId" : "3171A392-E37D-4800-A358-56291DF7590B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://stimulsoft.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://cloud-trustit.spp.at/s/Db8ZfNq2WYiNCHa",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://cves.at/posts/cve-2023-25263/writeup/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://stimulsoft.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://cloud-trustit.spp.at/s/Db8ZfNq2WYiNCHa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://cves.at/posts/cve-2023-25263/writeup/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25817",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-27T21:15:11.127",
      "lastModified" : "2024-11-21T07:50:15.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud server is an open source, personal cloud implementation. In versions from 24.0.0 and before 24.0.9 a user could escalate their permissions to delete files they were not supposed to deletable but only viewed or downloaded. This issue has been addressed andit is recommended that the Nextcloud Server is upgraded to 24.0.9. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.9",
            "matchCriteriaId" : "B68C1CBB-9670-4B21-9705-35C0080DB7A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8v5c-f752-fgpv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/33941",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8v5c-f752-fgpv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/33941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25863",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:11.213",
      "lastModified" : "2024-11-21T07:50:19.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (y anteriores) se ven afectados por una vulnerabilidad de lectura fuera de los límites al analizar un archivo manipulado, lo que podría dar como resultado una lectura más allá del final de una estructura de memoria asignada. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25864",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:11.277",
      "lastModified" : "2024-11-21T07:50:19.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Substance 3D Stager versión 2.0.0 (y anteriores), están afectadas por una vulnerabilidad de desbordamiento del búfer en la región Heap de la memoria que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25865",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:11.333",
      "lastModified" : "2024-11-21T07:50:19.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25866",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:11.387",
      "lastModified" : "2024-11-21T07:50:19.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Substance 3D Stager versiones 2.0.0  (y anteriores) , están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25867",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:11.443",
      "lastModified" : "2024-11-21T07:50:19.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25868",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:11.500",
      "lastModified" : "2024-11-21T07:50:19.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Substance 3D Stager versión 2.0.0 (y anteriores), están afectadas por una vulnerabilidad de desbordamiento del búfer en la región Heap de la memoria que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25869",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:11.560",
      "lastModified" : "2024-11-21T07:50:19.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (y anteriores) se ven afectados por una vulnerabilidad de lectura fuera de los límites al analizar un archivo manipulado, lo que podría dar como resultado una lectura más allá del final de una estructura de memoria asignada. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25870",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:11.617",
      "lastModified" : "2024-11-21T07:50:20.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Substance 3D Stager versiones 2.0.0  (y anteriores) , están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25871",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:11.673",
      "lastModified" : "2024-11-21T07:50:20.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25872",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:11.730",
      "lastModified" : "2024-11-21T07:50:20.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Substance 3D Stager versión 2.0.0 (y anteriores), están afectadas por una vulnerabilidad de desbordamiento del búfer en la región Heap de la memoria que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25873",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:11.783",
      "lastModified" : "2024-11-21T07:50:20.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (y anteriores) se ven afectados por una vulnerabilidad de lectura fuera de los límites al analizar un archivo manipulado, lo que podría dar como resultado una lectura más allá del final de una estructura de memoria asignada. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25874",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:11.843",
      "lastModified" : "2024-11-21T07:50:20.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Substance 3D Stager versión 2.0.0 (y anteriores), están afectadas por una vulnerabilidad de desbordamiento del búfer en la región Heap de la memoria que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25875",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:11.900",
      "lastModified" : "2024-11-21T07:50:20.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25876",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:11.967",
      "lastModified" : "2024-11-21T07:50:20.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25877",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:12.027",
      "lastModified" : "2024-11-21T07:50:20.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25878",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:12.080",
      "lastModified" : "2024-11-21T07:50:21.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "A7D1DD19-BC05-40AC-A122-2B927C67AAF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25908",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-27T21:15:12.140",
      "lastModified" : "2024-11-21T07:50:24.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Photoshop versions 23.5.3 (and earlier) and 24.1.1 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndIncluding" : "23.5.3",
            "matchCriteriaId" : "74D3F638-791D-408F-A220-CD35EEF13952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndIncluding" : "24.1.1",
            "matchCriteriaId" : "9CA83FFA-6D50-43C3-B1AE-55E663266205"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb23-23.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb23-23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28596",
      "sourceIdentifier" : "security@zoom.us",
      "published" : "2023-03-27T21:15:12.203",
      "lastModified" : "2024-11-21T07:55:38.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoom Client for IT Admin macOS installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain during the installation process to escalate their privileges to privileges to root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zoom.us",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zoom.us",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:meetings:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "5.13.5",
            "matchCriteriaId" : "A4A0E928-5FA5-47BD-976A-BE9C5C3CE453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://explore.zoom.us/en/trust/security/security-bulletin/",
        "source" : "security@zoom.us",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://explore.zoom.us/en/trust/security/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28597",
      "sourceIdentifier" : "security@zoom.us",
      "published" : "2023-03-27T21:15:12.260",
      "lastModified" : "2025-02-19T16:15:37.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom’s web portal, an attacker positioned on an adjacent network to the victim client could set up a malicious SMB server to respond to client requests, causing the client to execute attacker controlled executables. This could result in an attacker gaining access to a user's device and data, and remote code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zoom.us",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zoom.us",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-501"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-501"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "5.13.5",
            "matchCriteriaId" : "9A22E1F9-8302-4990-8118-4A2D6A38A605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:rooms:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "5.13.5",
            "matchCriteriaId" : "2F296A18-F2FE-44F8-A803-F5CEE0FEE3CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:rooms:*:*:*:*:*:linux_kernel:*:*",
            "versionEndExcluding" : "5.13.5",
            "matchCriteriaId" : "BD7706B3-16ED-44E8-B41C-C55E8C715713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "5.13.5",
            "matchCriteriaId" : "17083D16-FEE1-4DE4-8EBC-FBCA89AC3DD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "5.13.5",
            "matchCriteriaId" : "186D705B-003C-4991-93FC-AA71C1656C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "5.13.5",
            "matchCriteriaId" : "54800A16-98E2-4903-B2B0-D5C66C4AC845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "5.13.5",
            "matchCriteriaId" : "35139855-F16B-4149-88EE-05C0C4040C38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux_kernel:*:*",
            "versionEndExcluding" : "5.13.5",
            "matchCriteriaId" : "1C4200BC-CF56-4795-80EF-0E4D3A43F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "5.13.5",
            "matchCriteriaId" : "A31F4838-E56D-4C7E-BA09-17E10D54A273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "5.13.5",
            "matchCriteriaId" : "DDDF143E-324E-4D0C-83D1-2E66DDE760E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.13.10",
            "matchCriteriaId" : "3FB64BAF-EB86-40B9-A123-7C1C7EFDE5AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://explore.zoom.us/en/trust/security/security-bulletin/",
        "source" : "security@zoom.us",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://explore.zoom.us/en/trust/security/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28627",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-27T21:15:12.310",
      "lastModified" : "2024-11-21T07:55:41.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pymedusa is an automatic video library manager for TV Shows. In versions prior 1.0.12 an attacker with access to the web interface can update the git executable path in /config/general/ > advanced settings with arbitrary OS commands. An attacker may exploit this vulnerability to take execute arbitrary OS commands as the user running the pymedusa program. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pymedusa:medusa:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.12",
            "matchCriteriaId" : "FECD7ABD-8877-43E8-B1B9-716FF510EABE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pymedusa/Medusa/commit/66d4be8f0872bd5ddcdc5c5a58cb014d22834a45",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pymedusa/Medusa/security/advisories/GHSA-6589-x6f5-cgg9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pymedusa/Medusa/commit/66d4be8f0872bd5ddcdc5c5a58cb014d22834a45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pymedusa/Medusa/security/advisories/GHSA-6589-x6f5-cgg9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28628",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-27T21:15:12.367",
      "lastModified" : "2024-11-21T07:55:41.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lambdaisland/uri is a pure Clojure/ClojureScript URI library. In versions prior to 1.14.120 `authority-regex` allows an attacker to send malicious URLs to be parsed by the `lambdaisland/uri` and return the wrong authority. This issue is similar to but distinct from CVE-2020-8910. The regex in question doesn't handle the backslash (`\\`) character in the username correctly, leading to a wrong output. ex. a payload of `https://example.com\\\\@google.com` would return that the host is `google.com`, but the correct host should be `example.com`. Given that the library returns the wrong authority this may be abused to bypass host restrictions depending on how the library is used in an application. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-706"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lambdaisland:uri:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.14.120",
            "matchCriteriaId" : "FB4E4DCA-E6F9-4482-AB74-DFB3AC4A09D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lambdaisland/uri/commit/f46db3e84846f79e14bfee0101d9c7a872321820",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/lambdaisland/uri/security/advisories/GHSA-cp4w-6x4w-v2h5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/lambdaisland/uri/commit/f46db3e84846f79e14bfee0101d9c7a872321820",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/lambdaisland/uri/security/advisories/GHSA-cp4w-6x4w-v2h5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28629",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-27T21:15:12.483",
      "lastModified" : "2024-11-21T07:55:41.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GoCD is an open source continuous delivery server. GoCD versions before 23.1.0 are vulnerable to a stored XSS vulnerability, where pipeline configuration with a malicious pipeline label configuration can affect browser display of pipeline runs generated from that configuration. An attacker that has permissions to configure GoCD pipelines could include JavaScript elements within the label template, causing a XSS vulnerability to be triggered for any users viewing the Value Stream Map or Job Details for runs of the affected pipeline, potentially allowing them to perform arbitrary actions within the victim's browser context rather than their own. This issue has been fixed in GoCD 23.1.0. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thoughtworks:gocd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.1.0",
            "matchCriteriaId" : "79B56F88-BE21-4ED0-A079-DFD2EF0D8E54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.gocd.org/current/configuration/pipeline_labeling.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/gocd/gocd/commit/95f758229d419411a38577608709d8552cccf193",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gocd/gocd/commit/c6aa644973b034305bbe9ea34b010dcf5b5790ce",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gocd/gocd/releases/tag/23.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gocd/gocd/security/advisories/GHSA-3vvg-gjfr-q9vm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.gocd.org/releases/#23-1-0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.gocd.org/current/configuration/pipeline_labeling.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/gocd/gocd/commit/95f758229d419411a38577608709d8552cccf193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gocd/gocd/commit/c6aa644973b034305bbe9ea34b010dcf5b5790ce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gocd/gocd/releases/tag/23.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gocd/gocd/security/advisories/GHSA-3vvg-gjfr-q9vm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.gocd.org/releases/#23-1-0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28630",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-27T21:15:12.543",
      "lastModified" : "2024-11-21T07:55:42.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GoCD is an open source continuous delivery server. In GoCD versions from 20.5.0 and below 23.1.0, if the server environment is not correctly configured by administrators to provide access to the relevant PostgreSQL or MySQL backup tools, the credentials for database access may be unintentionally leaked to admin alerts on the GoCD user interface. The vulnerability is triggered only if the GoCD server host is misconfigured to have backups enabled, but does not have access to the `pg_dump` or `mysqldump` utility tools to backup the configured database type (PostgreSQL or MySQL respectively). In such cases, failure to launch the expected backup utility reports the shell environment used to attempt to launch in the server admin alert, which includes the plaintext database password supplied to the configured tool. This vulnerability does not affect backups of the default on-disk H2 database that GoCD is configured to use. This issue has been addressed and fixed in GoCD 23.1.0. Users are advised to upgrade. Users unable to upgrade may disable backups, or administrators should ensure that the required `pg_dump` (PostgreSQL) or `mysqldump` (MySQL) binaries are available on the GoCD server when backups are triggered."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thoughtworks:gocd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5.0",
            "versionEndExcluding" : "23.1.0",
            "matchCriteriaId" : "29DC9E78-250A-4C59-966F-95C32E409D3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gocd/gocd/commit/6545481e7b36817dd6033bf614585a8db242070d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gocd/gocd/releases/tag/23.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gocd/gocd/security/advisories/GHSA-p95w-gh78-qjmv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.gocd.org/releases/#23-1-0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gocd/gocd/commit/6545481e7b36817dd6033bf614585a8db242070d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gocd/gocd/releases/tag/23.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gocd/gocd/security/advisories/GHSA-p95w-gh78-qjmv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.gocd.org/releases/#23-1-0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28638",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-27T21:15:12.603",
      "lastModified" : "2024-11-21T07:55:43.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Snappier is a high performance C# implementation of the Snappy compression algorithm. This is a buffer overrun vulnerability that can affect any user of Snappier 1.1.0. In this release, much of the code was rewritten to use byte references rather than pointers to pinned buffers. This change generally improves performance and reduces workload on the garbage collector. However, when the garbage collector performs compaction and rearranges memory, it must update any byte references on the stack to refer to the updated location. The .NET garbage collector can only update these byte references if they still point within the buffer or to a point one byte past the end of the buffer. If they point outside this area, the buffer itself may be moved while the byte reference stays the same. There are several places in 1.1.0 where byte references very briefly point outside the valid areas of buffers. These are at locations in the code being used for buffer range checks. While the invalid references are never dereferenced directly, if a GC compaction were to occur during the brief window when they are on the stack then it could invalidate the buffer range check and allow other operations to overrun the buffer.  This should be very difficult for an attacker to trigger intentionally. It would require a repetitive bulk attack with the hope that a GC compaction would occur at precisely the right moment during one of the requests. However, one of the range checks with this problem is a check based on input data in the decompression buffer, meaning malformed input data could be used to increase the chance of success. Note that any resulting buffer overrun is likely to cause access to protected memory, which will then cause an exception and the process to be terminated. Therefore, the most likely result of an attack is a denial of service. This issue has been patched in release 1.1.1. Users are advised to upgrade. Users unable to upgrade may pin buffers to a fixed location before using them for compression or decompression to mitigate some, but not all, of these cases. At least one temporary decompression buffer is internal to the library and never pinned.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snappier_project:snappier:1.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99256ABC-36CA-44D3-A2B1-CAB26F1B2EC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/brantburnett/Snappier/commit/d7ac5267b5b18439e6d108f8138edf48c436b32f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/brantburnett/Snappier/security/advisories/GHSA-838x-pcvx-6p5w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/brantburnett/Snappier/commit/d7ac5267b5b18439e6d108f8138edf48c436b32f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/brantburnett/Snappier/security/advisories/GHSA-838x-pcvx-6p5w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28640",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-27T21:15:12.667",
      "lastModified" : "2024-11-21T07:55:43.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apiman is a flexible and open source API Management platform. Due to a missing permissions check, an attacker with an authenticated Apiman Manager account may be able to gain access to API keys they do not have permission for if they correctly guess the URL, which includes Organisation ID, Client ID, and Client Version of the targeted non-permitted resource. While not trivial to exploit, it could be achieved by brute-forcing or guessing common names. Access to the non-permitted API Keys could allow use of other users' resources without their permission (depending on the specifics of configuration, such as whether an API key is the only form of security). Apiman 3.1.0.Final resolved this issue. Users are advised to upgrade. The only known workaround is to restrict account access.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apiman:apiman:3.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "94343161-4523-4B3C-9DCE-7C4B14E2F2CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apiman/apiman/security/advisories/GHSA-m6f8-hjrv-mw5f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.apiman.io/blog/potential-permissions-bypass-disclosure/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/apiman/apiman/security/advisories/GHSA-m6f8-hjrv-mw5f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.apiman.io/blog/potential-permissions-bypass-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0179",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T22:15:20.963",
      "lastModified" : "2024-11-21T07:36:41.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.10.164",
            "matchCriteriaId" : "EC18969D-F6B9-4E48-8ECE-3CA27969FD68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.89",
            "matchCriteriaId" : "E706841F-E788-4316-9B05-DA8EB60CE6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.7",
            "matchCriteriaId" : "9275C81F-AE96-4CDB-AD20-7DBD36E5D909"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "902B8056-9E37-443B-8905-8AA93E2447FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "359012F1-2C63-415A-88B8-6726A87830DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DDA3E5A-8754-4C48-9A27-E2415F8A6000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D650BFB9-4FDC-4311-8D7E-D981C8F4FA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35EEDB95-DCD1-4FED-9BBB-877B2062410C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868A6ED7-44DD-44FF-8ADD-9971298A1175"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_real_time:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8173AF8-110D-4503-AA50-1BA4F79622E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D583DDD-E84D-4180-A339-5467540DB9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A375767-2398-428F-99C6-F2BF395814EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492DF629-16B8-4882-822D-A6897B03DD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:codeready_linux_builder:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD81C46-328B-412D-AF4E-68A2AD2F1A73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DDA3E5A-8754-4C48-9A27-E2415F8A6000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D650BFB9-4FDC-4311-8D7E-D981C8F4FA3B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C30A81-BF75-46CC-A05E-42BAF271D1C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35EEDB95-DCD1-4FED-9BBB-877B2062410C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868A6ED7-44DD-44FF-8ADD-9971298A1175"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A375767-2398-428F-99C6-F2BF395814EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171601/Kernel-Live-Patch-Security-Notice-LNS-0093-1.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2161713",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/oss-sec/2023/q1/20",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0003/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171601/Kernel-Live-Patch-Security-Notice-LNS-0093-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2161713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/oss-sec/2023/q1/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0210",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T22:15:21.040",
      "lastModified" : "2024-11-21T07:36:45.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15",
            "versionEndExcluding" : "5.15.87",
            "matchCriteriaId" : "AF34DC7D-4D5D-4D9C-B1B4-FAE010E910F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.0.19",
            "matchCriteriaId" : "B70FF53F-1F99-4483-9376-CBA1A4EE0351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndExcluding" : "6.1.5",
            "matchCriteriaId" : "8C1E7766-4310-43F9-BAC4-3763A36C043A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=797805d81baa814f76cf7bdab35f86408a79d707",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://github.com/cifsd-team/ksmbd/commit/8824b7af409f51f1316e92e9887c2fd48c0b26d6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0002/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://securityonline.info/cve-2023-0210-flaw-in-linux-kernel-allows-unauthenticated-remote-dos-attacks/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/04/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/11/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=797805d81baa814f76cf7bdab35f86408a79d707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://github.com/cifsd-team/ksmbd/commit/8824b7af409f51f1316e92e9887c2fd48c0b26d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://securityonline.info/cve-2023-0210-flaw-in-linux-kernel-allows-unauthenticated-remote-dos-attacks/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/04/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/01/11/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0326",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-03-27T22:15:21.110",
      "lastModified" : "2024-11-21T07:36:58.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:dynamic_application_security_testing_analyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.50",
            "versionEndExcluding" : "2.11.0",
            "matchCriteriaId" : "B13A7CF8-FBB6-420A-8CD3-24882FE66D9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0326.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/388132",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1826896",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0326.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/388132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1826896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1637",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-27T22:15:21.217",
      "lastModified" : "2025-02-19T21:15:12.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-226"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-212"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.18:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB06DDF-3C2B-416D-B448-E990D8FF67A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e2a1256b17b16f9b9adf1b6fea56819e7b68e463",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=27398",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e2a1256b17b16f9b9adf1b6fea56819e7b68e463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=27398",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=27398",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1648",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-03-27T22:15:21.440",
      "lastModified" : "2023-11-07T04:04:30.260",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-0326. Reason: This candidate is a duplicate of CVE-2023-0326. Notes: All CVE users should reference CVE-2023-0326 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1665",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-27T22:15:21.517",
      "lastModified" : "2024-11-21T07:39:38.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linagora:twake:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03-25",
            "matchCriteriaId" : "94EF9311-4E42-4AF3-AF03-2FC5342EE68E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linagora/twake/commit/599f397561a771251dfc7cafb8cecda5ab22b8b3",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/db8fcbab-6ef0-44ba-b5c6-3b0f17ca22a2",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/linagora/twake/commit/599f397561a771251dfc7cafb8cecda5ab22b8b3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/db8fcbab-6ef0-44ba-b5c6-3b0f17ca22a2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20860",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-03-27T22:15:21.603",
      "lastModified" : "2025-02-19T19:15:12.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using \"**\" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.26",
            "matchCriteriaId" : "9980B4D3-7C20-4812-9BE3-DDEE57228240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.7",
            "matchCriteriaId" : "8E40A602-3481-4DE3-9FE0-484E6368E291"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230505-0006/",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://spring.io/security/cve-2023-20860",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230505-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://spring.io/security/cve-2023-20860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26493",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-27T22:15:21.673",
      "lastModified" : "2024-11-21T07:51:37.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cocos Engine is an open-source framework for building 2D & 3D real-time rendering and interactive content. In the github repo for Cocos Engine the `web-interface-check.yml` was subject to command injection. The `web-interface-check.yml` was triggered when a pull request was opened or updated and contained the user controllable field `(${{ github.head_ref }} – the name of the fork’s branch)`. This would allow an attacker to take over the GitHub Runner and run custom commands (potentially stealing secrets such as GITHUB_TOKEN) and altering the repository. The workflow has since been removed for the repository. There are no actions required of users."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cocos:cocos-engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-02-20",
            "matchCriteriaId" : "CA8EFD91-A024-4F27-8E0C-E5652BD32963"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cocos/cocos-engine/blob/2362df28a4b3016dbda804899041279701929728/.github/workflows/web-interface-check.yml",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cocos/cocos-engine/commit/6d06aefa2684e20da79e7ceaf41f728c1a8d7a41",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2023-027_Engine_for_Cocos_Creator/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cocos/cocos-engine/blob/2362df28a4b3016dbda804899041279701929728/.github/workflows/web-interface-check.yml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cocos/cocos-engine/commit/6d06aefa2684e20da79e7ceaf41f728c1a8d7a41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2023-027_Engine_for_Cocos_Creator/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26547",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2023-03-27T22:15:21.793",
      "lastModified" : "2024-11-21T07:51:43.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511F8CE2-C2B6-4A08-B992-49D9B75B8655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A974CA73-84E8-480B-BB4C-4A81D0C985B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF07E7F-3A18-4B74-B73D-DF3647C2A48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AEAF2-AF46-4835-93E1-4F942D5E2810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD62E8B-CB4B-43A6-98E8-09A8A1A3505B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64118936-E2A5-4935-8594-29DF29B5475A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE0AFB0-A112-484B-BEAD-A7F1BDDCE313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3751C1-7729-41D3-AE50-80B5AF601135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D81C4EF-7CAF-4E60-91A4-8CF7B95B2B54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2023/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2023/3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26548",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2023-03-27T22:15:21.850",
      "lastModified" : "2024-11-21T07:51:43.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may affect availability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511F8CE2-C2B6-4A08-B992-49D9B75B8655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A974CA73-84E8-480B-BB4C-4A81D0C985B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF07E7F-3A18-4B74-B73D-DF3647C2A48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AEAF2-AF46-4835-93E1-4F942D5E2810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD62E8B-CB4B-43A6-98E8-09A8A1A3505B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64118936-E2A5-4935-8594-29DF29B5475A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE0AFB0-A112-484B-BEAD-A7F1BDDCE313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3751C1-7729-41D3-AE50-80B5AF601135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D81C4EF-7CAF-4E60-91A4-8CF7B95B2B54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2023/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2023/3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26549",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2023-03-27T22:15:21.910",
      "lastModified" : "2025-02-19T16:15:37.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of this vulnerability may affect confidentiality."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-233"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511F8CE2-C2B6-4A08-B992-49D9B75B8655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A974CA73-84E8-480B-BB4C-4A81D0C985B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF07E7F-3A18-4B74-B73D-DF3647C2A48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353AEAF2-AF46-4835-93E1-4F942D5E2810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD62E8B-CB4B-43A6-98E8-09A8A1A3505B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64118936-E2A5-4935-8594-29DF29B5475A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCE0AFB0-A112-484B-BEAD-A7F1BDDCE313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3751C1-7729-41D3-AE50-80B5AF601135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D81C4EF-7CAF-4E60-91A4-8CF7B95B2B54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2023/3/",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://consumer.huawei.com/en/support/bulletin/2023/3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-27T22:15:21.967",
      "lastModified" : "2024-11-21T07:52:04.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes \"Language front-ends ... for which a malicious input file can cause undesirable behavior.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:llvm:llvm:2023-01-22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71350E43-57E7-48F3-AD46-043D4988D2BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Colloportus0/fc16d10d74aedf89d5d1d020ebb89c0c",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/llvm/llvm-project/issues/60216",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://llvm.org/docs/Security.html#what-is-considered-a-security-issue",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gist.github.com/Colloportus0/fc16d10d74aedf89d5d1d020ebb89c0c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/llvm/llvm-project/issues/60216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://llvm.org/docs/Security.html#what-is-considered-a-security-issue",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28102",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-27T22:15:22.027",
      "lastModified" : "2024-11-21T07:54:24.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "discordrb is an implementation of the Discord API using Ruby. In discordrb before commit `91e13043ffa` the `encoder.rb` file unsafely constructs a shell string using the file parameter, which can potentially leave clients of discordrb vulnerable to command injection. The library is not directly exploitable: the exploit requires that some client of the library calls the vulnerable method with user input. However, if unsafe input reaches the library method, then an attacker can execute arbitrary shell commands on the host machine. Full impact will depend on the permissions of the process running the `discordrb` library and will likely not be total system access. This issue has been addressed in code, but a new release of the `discordrb` gem has not been uploaded to rubygems. This issue is also tracked as `GHSL-2022-094`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discordrb_project:discordrb:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "2023-03-08",
            "matchCriteriaId" : "B00BD68A-B86C-47E5-8272-47C8237BA601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shardlab/discordrb/commit/91e13043ffa89227c3fcdc3408f06da237d28c95",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2022-094_discordrb/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shardlab/discordrb/commit/91e13043ffa89227c3fcdc3408f06da237d28c95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2022-094_discordrb/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28430",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-27T22:15:22.130",
      "lastModified" : "2024-11-21T07:55:03.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneSignal is an email, sms, push notification, and in-app message service for mobile apps.The Zapier.yml workflow is triggered on issues (types: [closed]) (i.e., when an Issue is closed). The workflow starts with full write-permissions GitHub repository token since the default workflow permissions on Organization/Repository level are set to read-write. This workflow runs the following step with data controlled by the comment `(${{ github.event.issue.title }} – the full title of the Issue)`, allowing an attacker to take over the GitHub Runner and run custom commands, potentially stealing any secret (if used), or altering the repository. This issue was found with CodeQL using javascript’s Expression injection in Actions query. This issue has been addressed in the repositories github action. No actions are required by users. This issue is also tracked as `GHSL-2023-051`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onesignal:react-native-onesignal:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.1",
            "matchCriteriaId" : "78D30C1F-E0B0-48A2-8436-AA54D28A3830"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OneSignal/react-native-onesignal/commit/4a66f4237fb51dcc2236889038d488cd49b0f433",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OneSignal/react-native-onesignal/commit/4e43bda4ce1eb395f36bb8a5640002523c051085",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2023-051_React_Native_OneSignal_SDK/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OneSignal/react-native-onesignal/commit/4a66f4237fb51dcc2236889038d488cd49b0f433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OneSignal/react-native-onesignal/commit/4e43bda4ce1eb395f36bb8a5640002523c051085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2023-051_React_Native_OneSignal_SDK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T01:15:10.460",
      "lastModified" : "2025-02-18T21:15:14.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "amano Xparc parking solutions 7.1.3879 was discovered to be vulnerable to local file inclusion."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amano:xoffice:7.1.3879:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C03A80E-2A2D-4AF2-9328-F51121DA3F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40saleh.py/amano-xparc-local-file-inclusion-cve-2023-23330-672ae8fbfd1e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.amano.eu/en/parking/xparc/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://medium.com/%40saleh.py/amano-xparc-local-file-inclusion-cve-2023-23330-672ae8fbfd1e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.amano.eu/en/parking/xparc/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T01:15:10.523",
      "lastModified" : "2025-02-19T19:15:13.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe Reporting Designer (Web) offers the possibility to embed sources from external locations. If the user chooses an external location, the request to that resource is performed by the server rather than the client. Therefore, the server causes outbound traffic and potentially imports data. An attacker may also leverage this behaviour to exfiltrate data of machines on the internal network of the server hosting the Stimulsoft Reporting Designer (Web)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stimulsoft:designer:2023.1.3:*:*:*:web:*:*:*",
            "matchCriteriaId" : "ED354002-625C-4A34-8D5B-B296E1E4C677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stimulsoft:designer:2023.1.4:*:*:*:web:*:*:*",
            "matchCriteriaId" : "4481FACF-9808-45D8-A888-4625AE2CCB4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://stimulsoft.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cloud-trustit.spp.at/s/HjEksN86SfsMaJM",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://cves.at/posts/cve-2023-25262/writeup/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://stimulsoft.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cloud-trustit.spp.at/s/HjEksN86SfsMaJM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://cves.at/posts/cve-2023-25262/writeup/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27700",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T01:15:10.577",
      "lastModified" : "2025-02-18T21:15:16.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muyucms_project:muyucms:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFED72CC-F677-4F0C-9412-FBA439ABAD0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MuYuCMS/MuYuCMS/issues/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MuYuCMS/MuYuCMS/issues/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25704",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-28T09:15:07.630",
      "lastModified" : "2024-11-21T07:49:58.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mehjabin Orthi Interactive SVG Image Map Builder plugin <= 1.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpmart:interactive_svg_image_map_builder:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "9C28045C-3845-45B5-BD37-5B37158D9C59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/interactive-image-map-builder/wordpress-interactive-svg-image-map-builder-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/interactive-image-map-builder/wordpress-interactive-svg-image-map-builder-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25195",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-28T12:15:07.280",
      "lastModified" : "2024-11-21T07:49:17.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache Fineract.\nAuthorized users with limited permissions can gain access to server and may be able to use server for any outbound traffic. \n\nThis issue affects Apache Fineract: from 1.4 through 1.8.3.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:fineract:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndIncluding" : "1.8.3",
            "matchCriteriaId" : "DB9B39C7-A96B-4603-A685-AB1017E24E4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/m58fdjmtkfp9h4c0r4l48rv995w3qhb6",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/m58fdjmtkfp9h4c0r4l48rv995w3qhb6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25196",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-28T12:15:07.360",
      "lastModified" : "2024-11-21T07:49:17.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache Fineract.\nAuthorized users may be able to change or add data in certain components.  \n\nThis issue affects Apache Fineract: from 1.4 through 1.8.2.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:fineract:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "07B8FD75-D5C0-430D-97D7-395E75E4CFA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/m9x3vpn3bry4fympkzxnnz4qx0oc0w8m",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/m9x3vpn3bry4fympkzxnnz4qx0oc0w8m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25197",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-28T12:15:07.430",
      "lastModified" : "2024-11-21T07:49:17.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation apache fineract.\nAuthorized users may be able to exploit this for limited impact on components.  \n\nThis issue affects apache fineract: from 1.4 through 1.8.2.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:fineract:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndIncluding" : "1.8.2",
            "matchCriteriaId" : "07B8FD75-D5C0-430D-97D7-395E75E4CFA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/v0q9x86sx6f6l2nzr1z0nwm3y9qlng04",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/v0q9x86sx6f6l2nzr1z0nwm3y9qlng04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28326",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-28T13:15:07.153",
      "lastModified" : "2024-11-21T07:54:50.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vendor: The Apache Software Foundation\n\nVersions Affected: Apache OpenMeetings from 2.0.0 before 7.0.0\n\nDescription: Attacker can elevate their privileges in any room\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "7.0.0",
            "matchCriteriaId" : "0875B7CD-1D9F-4D5D-B570-4C9123055FA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/r9vn12dp5yofn1h3wd5x4h7c3vmmr5d9",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/r9vn12dp5yofn1h3wd5x4h7c3vmmr5d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T14:15:07.393",
      "lastModified" : "2025-02-19T19:15:13.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stimulsoft:designer:2023.1.3:*:*:*:web:*:*:*",
            "matchCriteriaId" : "ED354002-625C-4A34-8D5B-B296E1E4C677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stimulsoft:designer:2023.1.4:*:*:*:web:*:*:*",
            "matchCriteriaId" : "4481FACF-9808-45D8-A888-4625AE2CCB4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://stimulsoft.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://cloud-trustit.spp.at/s/K9ZXWzEmftaxa3C",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://cves.at/posts/cve-2023-25260/writeup/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://stimulsoft.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://cloud-trustit.spp.at/s/K9ZXWzEmftaxa3C",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://cves.at/posts/cve-2023-25260/writeup/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27701",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T14:15:07.450",
      "lastModified" : "2025-02-18T21:15:16.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:muyucms:muyucms:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E558AF9C-EBCD-4299-94C6-E32EC2D9C336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MuYuCMS/MuYuCMS/issues/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/MuYuCMS/MuYuCMS/issues/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0465",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2023-03-28T15:15:06.820",
      "lastModified" : "2025-02-18T21:15:13.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.2",
            "versionEndExcluding" : "1.0.2zh",
            "matchCriteriaId" : "23F912E9-9126-4D16-8F77-BD41CED6774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.1",
            "versionEndExcluding" : "1.1.1u",
            "matchCriteriaId" : "7D99C2F8-BE74-4912-8653-A2AEE387AAF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.9",
            "matchCriteriaId" : "4C637E94-F5EC-4D4B-836F-8C8219F1ECEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndExcluding" : "3.1.1",
            "matchCriteriaId" : "68821BE0-7889-48B0-888D-CEC8BB9BDEA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230414-0001/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5417",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230328.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230414-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230328.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0466",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2023-03-28T15:15:06.880",
      "lastModified" : "2025-02-19T18:15:22.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.2",
            "versionEndExcluding" : "1.0.2zh",
            "matchCriteriaId" : "23F912E9-9126-4D16-8F77-BD41CED6774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.1",
            "versionEndExcluding" : "1.1.1u",
            "matchCriteriaId" : "7D99C2F8-BE74-4912-8653-A2AEE387AAF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.9",
            "matchCriteriaId" : "4C637E94-F5EC-4D4B-836F-8C8219F1ECEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndExcluding" : "3.1.1",
            "matchCriteriaId" : "68821BE0-7889-48B0-888D-CEC8BB9BDEA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/09/28/4",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230414-0001/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5417",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230328.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/09/28/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202402-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230414-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230328.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T15:15:06.933",
      "lastModified" : "2025-02-18T21:15:14.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If attacker can additional information, attacker can execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:musescore:musescore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndIncluding" : "4.0.1",
            "matchCriteriaId" : "3B9C65BD-6EF2-45F2-8FB7-54B87F63DF87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/musescore/MuseScore/issues/16346",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/musescore/MuseScore/issues/16346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T15:15:06.973",
      "lastModified" : "2025-02-18T21:15:15.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-site scripting (XSS) vulnerability in the function encrypt_password() in login.tmpl.php in ATutor 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atutor:atutor:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3379F338-0AB7-4ECE-B5C5-42DA74D9FD9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plantplants213607121.wordpress.com/2023/02/16/atutor-2-2-1-cross-site-scripting-via-the-token-body-parameter/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plantplants213607121.wordpress.com/2023/02/16/atutor-2-2-1-cross-site-scripting-via-the-token-body-parameter/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0775",
      "sourceIdentifier" : "product-security@silabs.com",
      "published" : "2023-03-28T17:15:12.187",
      "lastModified" : "2024-11-21T07:37:47.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able to handle subsequent connection requests, resulting in a denial-of-service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@silabs.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@silabs.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silabs:gecko_software_development_kit:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B59E7E-4AAB-4C00-8817-5DC01C036811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silabs:gecko_software_development_kit:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6BBB817-E2E3-44E4-962A-9D3065CC608D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SiliconLabs/gecko_sdk",
        "source" : "product-security@silabs.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000SMMyGQAX?operationContext=S1",
        "source" : "product-security@silabs.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/SiliconLabs/gecko_sdk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000SMMyGQAX?operationContext=S1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T17:15:12.293",
      "lastModified" : "2025-02-18T21:15:17.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Databasir v1.0.7 was discovered to contain a remote code execution (RCE) vulnerability via the mockDataScript parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-917"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-917"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:databasir:databasir:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE4F93A-FF0A-4C76-A3C9-03BED4938A44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/luelueking/Databasir-1.0.7-vuln-poc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vran-dev/databasir/issues/269",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/luelueking/Databasir-1.0.7-vuln-poc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vran-dev/databasir/issues/269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T18:15:09.527",
      "lastModified" : "2025-02-18T21:15:16.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted .htaccess file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mk-auth:mk-auth:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "23.01k4.9",
            "matchCriteriaId" : "4EA80969-7AE3-4211-B76E-6E76263D592A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IntruderLabs/2023-05-25-ziroudei/blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IntruderLabs/2023-05-25-ziroudei/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T18:15:09.573",
      "lastModified" : "2025-02-18T21:15:16.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cynet Client Agent v4.6.0.8010 allows attackers with Administrator rights to disable the EDR functions by disabling process privilege tokens."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cynet:client_agent:4.6.0.8010:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27B50C2D-B823-4056-865A-1F7ADC19BC31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NF-Security-Team/CVEs/blob/main/CVE-Cynet/Readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-hmjw-7429-p2vc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/NF-Security-Team/CVEs/blob/main/CVE-Cynet/Readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-hmjw-7429-p2vc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1622",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-28T20:15:11.013",
      "lastModified" : "2023-11-07T04:04:21.773",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T20:15:11.093",
      "lastModified" : "2025-02-19T19:15:13.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Veracode Scan Jenkins Plugin before 23.3.19.0, when the \"Connect using proxy\" option is enabled and configured with proxy credentials and when the Jenkins global system setting debug is enabled and when a scan is configured for remote agent jobs, allows users (with access to view the job log) to discover proxy credentials."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veracode:veracode:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "23.3.19.0",
            "matchCriteriaId" : "BA5546FF-7971-441B-A228-B0DB39F7C4AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.veracode.com/updates/r/c_all_int#veracode-jenkins-plugin-233190",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://veracode.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.veracode.com/updates/r/c_all_int#veracode-jenkins-plugin-233190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://veracode.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T20:15:11.140",
      "lastModified" : "2025-02-19T19:15:13.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A credential-leak issue was discovered in related Veracode products before 2023-03-27. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java API Wrapper in a manner that allows local users (with OS-level access of the Jenkins remote) to discover Veracode API credentials by listing the process and its arguments. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs and when the \"Connect using proxy\" option is enabled and configured with proxy credentials, allows local users of the Jenkins remote to discover proxy credentials by listing the process and its arguments. Veracode Azure DevOps Extension before 3.20.0 invokes the Veracode Java API Wrapper in a manner that allows local users (with OS-level access to the Azure DevOps Services cloud infrastructure or Azure DevOps Server) to discover Veracode API credentials by listing the process and its arguments. Veracode Azure DevOps Extension before 3.20.0, when configured with proxy credentials, allows users (with shell access to the Azure DevOps Services cloud infrastructure or Azure DevOps Server) to discover proxy credentials by listing the process and its arguments."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veracode:veracode:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "23.3.19.0",
            "matchCriteriaId" : "BA5546FF-7971-441B-A228-B0DB39F7C4AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.veracode.com/updates/r/c_all_int#veracode-jenkins-plugin-233190",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://veracode.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.veracode.com/updates/r/c_all_int#veracode-jenkins-plugin-233190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://veracode.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25879",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:11.177",
      "lastModified" : "2024-11-21T07:50:21.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25880",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:11.243",
      "lastModified" : "2024-11-21T07:50:21.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25881",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:11.297",
      "lastModified" : "2024-11-21T07:50:21.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25882",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:11.357",
      "lastModified" : "2024-11-21T07:50:21.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25883",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:11.427",
      "lastModified" : "2024-11-21T07:50:21.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25884",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:11.500",
      "lastModified" : "2024-11-21T07:50:21.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25885",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:11.587",
      "lastModified" : "2024-11-21T07:50:21.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25886",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:11.667",
      "lastModified" : "2024-11-21T07:50:21.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25887",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:11.753",
      "lastModified" : "2024-11-21T07:50:22.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25888",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:11.817",
      "lastModified" : "2024-11-21T07:50:22.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25889",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:11.900",
      "lastModified" : "2024-11-21T07:50:22.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25890",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:11.983",
      "lastModified" : "2024-11-21T07:50:22.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25891",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:12.057",
      "lastModified" : "2024-11-21T07:50:22.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25892",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:12.137",
      "lastModified" : "2024-11-21T07:50:22.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25893",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:12.217",
      "lastModified" : "2024-11-21T07:50:22.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25894",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:12.293",
      "lastModified" : "2024-11-21T07:50:22.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25895",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:12.377",
      "lastModified" : "2024-11-21T07:50:23.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25896",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:12.453",
      "lastModified" : "2024-11-21T07:50:23.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25897",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:12.537",
      "lastModified" : "2024-11-21T07:50:23.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25898",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:12.613",
      "lastModified" : "2024-11-21T07:50:23.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25899",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:12.710",
      "lastModified" : "2024-11-21T07:50:23.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25900",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:12.777",
      "lastModified" : "2024-11-21T07:50:23.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25901",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:12.857",
      "lastModified" : "2024-11-21T07:50:23.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25902",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:12.937",
      "lastModified" : "2024-11-21T07:50:23.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25903",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:13.003",
      "lastModified" : "2024-11-21T07:50:23.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25904",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:13.063",
      "lastModified" : "2024-11-21T07:50:24.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25905",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:13.137",
      "lastModified" : "2024-11-21T07:50:24.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25906",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:13.217",
      "lastModified" : "2024-11-21T07:50:24.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25907",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:13.280",
      "lastModified" : "2024-11-21T07:50:24.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T20:15:13.343",
      "lastModified" : "2025-02-19T16:15:37.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MCUBO ICT through 10.12.4 (aka 6.0.2). An Observable Response Discrepancy can occur under the login web page. In particular, the web application provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor. That allow an unauthorized actor to perform User Enumeration attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:harpaitalia:mcuboict:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.12.4",
            "matchCriteriaId" : "84C504A1-E323-4A1D-B4B1-5F7C8803DB4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gruppotim.it/it/footer/red-team.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?id.224303",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gruppotim.it/it/footer/red-team.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26327",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:13.387",
      "lastModified" : "2024-11-21T07:51:08.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26328",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:13.447",
      "lastModified" : "2024-11-21T07:51:08.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26329",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:13.507",
      "lastModified" : "2024-11-21T07:51:08.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26330",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:13.587",
      "lastModified" : "2024-11-21T07:51:08.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26331",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:13.680",
      "lastModified" : "2024-11-21T07:51:08.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26332",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:13.753",
      "lastModified" : "2024-11-21T07:51:08.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26333",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:13.833",
      "lastModified" : "2024-11-21T07:51:08.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.7",
            "matchCriteriaId" : "AAB714D0-14E5-4AFA-A193-0360821597F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26334",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:13.903",
      "lastModified" : "2024-11-21T07:51:08.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26335",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:13.967",
      "lastModified" : "2024-11-21T07:51:09.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26336",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:14.043",
      "lastModified" : "2024-11-21T07:51:09.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26337",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:14.127",
      "lastModified" : "2024-11-21T07:51:09.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26338",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:14.213",
      "lastModified" : "2024-11-21T07:51:09.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26339",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:14.280",
      "lastModified" : "2024-11-21T07:51:09.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26340",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:14.337",
      "lastModified" : "2024-11-21T07:51:09.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26341",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:14.417",
      "lastModified" : "2024-11-21T07:51:09.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26342",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:14.493",
      "lastModified" : "2024-11-21T07:51:09.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26343",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:14.577",
      "lastModified" : "2024-11-21T07:51:10.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26344",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:14.643",
      "lastModified" : "2024-11-21T07:51:10.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26345",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:14.707",
      "lastModified" : "2024-11-21T07:51:10.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26346",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:14.787",
      "lastModified" : "2024-11-21T07:51:10.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26348",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:14.857",
      "lastModified" : "2024-11-21T07:51:10.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26349",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:14.923",
      "lastModified" : "2024-11-21T07:51:10.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26350",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:15.007",
      "lastModified" : "2024-11-21T07:51:10.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26351",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:15.070",
      "lastModified" : "2024-11-21T07:51:11.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26352",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:15.140",
      "lastModified" : "2024-11-21T07:51:11.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26353",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:15.210",
      "lastModified" : "2024-11-21T07:51:11.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26354",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:15.280",
      "lastModified" : "2024-11-21T07:51:11.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26355",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:15.373",
      "lastModified" : "2024-11-21T07:51:11.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26356",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-03-28T20:15:15.457",
      "lastModified" : "2024-11-21T07:51:11.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "CECE94AB-0C9E-470C-AF46-1A99B0E7E3E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28395",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-28T20:15:15.530",
      "lastModified" : "2024-11-21T07:54:59.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Osprey Pump Controller version 1.01 is vulnerable to a weak session token generation algorithm that can be predicted and can aid in authentication and authorization bypass. This may allow an attacker to hijack a session by predicting the session id and gain unauthorized access to the product."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:propumpservice:osprey_pump_controller_firmware:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B10E95-86EC-4C15-83B4-73B7384A5C43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:propumpservice:osprey_pump_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16780CFE-7F41-4A59-8C5C-CFB6AA7D22E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1516",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-28T21:15:10.293",
      "lastModified" : "2024-11-21T07:39:21.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RoboDK versions 5.5.3 and prior contain an insecure permission \nassignment to critical directories vulnerability, which could allow a \nlocal user to escalate privileges and write files to the RoboDK process \nand achieve code execution.  \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:robodk:robodk:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.3",
            "matchCriteriaId" : "7C7BF6E6-1F9D-458A-AE37-AD3CD68C9C6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://robodk.com/contact",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://robodk.com/contact",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1518",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-28T21:15:10.363",
      "lastModified" : "2024-11-21T07:39:21.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to \nsensitive credentials being leaked because they are insufficiently \nprotected.   \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpplusworld:kvms_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.01.0.t.190521",
            "matchCriteriaId" : "E41450CE-283E-4F93-AA2C-A026D83A7521"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1674",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-28T21:15:10.423",
      "lastModified" : "2024-11-21T07:39:39.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester School Registration and Fee System 1.0 and classified as critical. This issue affects some unknown processing of the file /bilal final/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224231."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:school_registration_and_fee_system_project:school_registration_and_fee_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F100A856-80A5-463B-945D-FB306E1F3300"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/saintone98/bug_report/blob/main/vendors/hemedy99/School%20Registration%20and%20Fee%20System/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224231",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224231",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/saintone98/bug_report/blob/main/vendors/hemedy99/School%20Registration%20and%20Fee%20System/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1675",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-28T21:15:10.487",
      "lastModified" : "2024-11-21T07:39:40.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester School Registration and Fee System 1.0. It has been classified as critical. Affected is an unknown function of the file /bilal final/edit_stud.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224232."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:school_registration_and_fee_system_project:school_registration_and_fee_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F100A856-80A5-463B-945D-FB306E1F3300"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/saintone98/bug_report/blob/main/vendors/hemedy99/School%20Registration%20and%20Fee%20System/SQLi-2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224232",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224232",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/saintone98/bug_report/blob/main/vendors/hemedy99/School%20Registration%20and%20Fee%20System/SQLi-2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1676",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-28T21:15:10.547",
      "lastModified" : "2024-11-21T07:39:40.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in DriverGenius 9.70.0.346. It has been declared as critical. Affected by this vulnerability is the function 0x9C402088 in the library mydrivers64.sys of the component IOCTL Handler. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-224233 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drivergenius:drivergenius:9.70.0.346:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9EE997-D3E6-4B63-A2B2-8992D320BA53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1kYCec3kYCzD9s2Vnclp_aW5jLneWqHC_/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1676",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224233",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224233",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1kYCec3kYCzD9s2Vnclp_aW5jLneWqHC_/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20903",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-03-28T21:15:10.633",
      "lastModified" : "2025-02-19T19:15:12.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This disclosure regards a vulnerability related to UAA refresh tokens and external identity providers.Assuming that an external identity provider is linked to the UAA, a refresh token is issued to a client on behalf of a user from that identity provider, the administrator of the UAA deactivates the identity provider from the UAA. It is expected that the UAA would reject a refresh token during a refresh token grant, but it does not (hence the vulnerability). It will continue to issue access tokens to request presenting such refresh tokens, as if the identity provider was still active. As a result, clients with refresh tokens issued through the deactivated identity provider would still have access to Cloud Foundry resources until their refresh token expires (which defaults to 30 days)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:user_account_and_authentication:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4978589D-A0BA-4294-BC27-B4E649AD7869"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/blog/cve-2023-20903-tokens-for-inactivated-idps-are-not-revoked-and-remain-valid-until-expiration/",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/blog/cve-2023-20903-tokens-for-inactivated-idps-are-not-revoked-and-remain-valid-until-expiration/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T21:15:10.673",
      "lastModified" : "2025-02-18T21:15:14.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation in the PDF.dll plugin of IrfanView v4.60 allows attackers to execute arbitrary code via opening a crafted PDF file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0BDB5E-A687-4933-92D3-537D6665CB3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sit.fraunhofer.de/CVE-2023-24304/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sit.fraunhofer.de/CVE-2023-24304/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T21:15:10.710",
      "lastModified" : "2025-02-19T16:15:36.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential memory vulnerability due to insufficient input validation in PDFXEditCore.x64.dll in PDF-XChange Editor version 9.3 by Tracker Software may allow attackers to execute code when a user opens a crafted PDF file. The issue occurs when handling a large number of objects in a PDF file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdf-xchange:pdf-xchange_editor:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F824D120-B0D3-4407-B8EC-2AB81C8765C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sit.fraunhofer.de/cve-2023-24308/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sit.fraunhofer.de/cve-2023-24308/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27394",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-28T21:15:10.750",
      "lastModified" : "2024-11-21T07:52:49.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP GET parameter called by DataLogView.php, EventsView.php and AlarmsView.php scripts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:propumpservice:osprey_pump_controller_firmware:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B10E95-86EC-4C15-83B4-73B7384A5C43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:propumpservice:osprey_pump_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16780CFE-7F41-4A59-8C5C-CFB6AA7D22E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27886",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-28T21:15:10.813",
      "lastModified" : "2024-11-21T07:53:37.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP POST parameter called by index.php script."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:propumpservice:osprey_pump_controller_firmware:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B10E95-86EC-4C15-83B4-73B7384A5C43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:propumpservice:osprey_pump_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16780CFE-7F41-4A59-8C5C-CFB6AA7D22E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28103",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-28T21:15:10.887",
      "lastModified" : "2024-11-21T07:54:24.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the `Object.prototype`, disrupting matrix-react-sdk functionality, causing denial of service and potentially affecting program logic. This is fixed in matrix-react-sdk 3.69.0 and users are advised to upgrade. There are no known workarounds for this vulnerability. Note this advisory is distinct from GHSA-2x9c-qwgf-94xr which refers to a similar issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix-react-sdk_project:matrix-react-sdk:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.69.0",
            "matchCriteriaId" : "AF07F482-9705-4FBF-896C-8638D831A623"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-6g43-88cp-w5gv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://matrix.org/blog/2023/03/28/security-releases-matrix-js-sdk-24-0-0-and-matrix-react-sdk-3-69-0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-6g43-88cp-w5gv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://matrix.org/blog/2023/03/28/security-releases-matrix-js-sdk-24-0-0-and-matrix-react-sdk-3-69-0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28375",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-28T21:15:10.950",
      "lastModified" : "2024-11-21T07:54:57.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure. Using a GET parameter, attackers can disclose arbitrary files on the affected device and disclose sensitive and system information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:propumpservice:osprey_pump_controller_firmware:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B10E95-86EC-4C15-83B4-73B7384A5C43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:propumpservice:osprey_pump_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16780CFE-7F41-4A59-8C5C-CFB6AA7D22E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28398",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-28T21:15:11.003",
      "lastModified" : "2024-11-21T07:54:59.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providing valid credentials. A threat actor who successfully exploits this vulnerability could gain access to the pump controller and cause disruption in operation, modify data, or shut down the controller."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:propumpservice:osprey_pump_controller_firmware:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B10E95-86EC-4C15-83B4-73B7384A5C43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:propumpservice:osprey_pump_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16780CFE-7F41-4A59-8C5C-CFB6AA7D22E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28427",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-28T21:15:11.057",
      "lastModified" : "2024-11-21T07:55:02.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to the consumer. This vulnerability is distinct from GHSA-rfv9-x7hh-xc32 which covers a similar issue. The issue has been patched in matrix-js-sdk 24.0.0 and users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix:javascript_sdk:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "24.0.0",
            "matchCriteriaId" : "F62FDB36-FCF3-46AF-B806-FB5ADD18B0FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-mwq8-fjpf-c2gr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00027.html",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://matrix.org/blog/2023/03/28/security-releases-matrix-js-sdk-24-0-0-and-matrix-react-sdk-3-69-0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-36",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5392",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-mwq8-fjpf-c2gr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://matrix.org/blog/2023/03/28/security-releases-matrix-js-sdk-24-0-0-and-matrix-react-sdk-3-69-0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28447",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-28T21:15:11.127",
      "lastModified" : "2025-11-03T22:16:06.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user's browser session. This may lead to unauthorized access to sensitive user data, manipulation of the web application's behavior, or unauthorized actions performed on behalf of the user. Users are advised to upgrade to either version 3.1.48 or to 4.3.1 to resolve this issue. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smarty:smarty:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.48",
            "matchCriteriaId" : "9E84A24D-C1B5-4218-A407-96D45BDB859D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smarty:smarty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.3.1",
            "matchCriteriaId" : "20285F83-0020-4AF8-BD31-CFCA7E02B630"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/smarty-php/smarty/commit/685662466f653597428966d75a661073104d713d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/smarty-php/smarty/security/advisories/GHSA-7j98-h7fp-4vwj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HSAUM3YHWHO4UCJXRGRLQGPJAO3MFOZZ/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JBB35GLYTL6JL6EOM6BOZNYP47JKNNHT/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P7O7SKTATM6GAP45S64QFXNLWIY5I7HP/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/smarty-php/smarty/commit/685662466f653597428966d75a661073104d713d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/smarty-php/smarty/security/advisories/GHSA-7j98-h7fp-4vwj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/11/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HSAUM3YHWHO4UCJXRGRLQGPJAO3MFOZZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JBB35GLYTL6JL6EOM6BOZNYP47JKNNHT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P7O7SKTATM6GAP45S64QFXNLWIY5I7HP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28626",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-28T21:15:11.190",
      "lastModified" : "2024-11-21T07:55:41.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. A range of quadratic parsing issues are present in Comrak. These can be used to craft denial-of-service attacks on services that use Comrak to parse Markdown. This issue has been addressed in version 0.17.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. This issue is also tracked as `GHSL-2023-047`"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comrak_project:comrak:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.17.0",
            "matchCriteriaId" : "DF5F74D4-3456-49A1-B3AC-B1BE66BEE50B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kivikakk/comrak/commit/ce795b7f471b01589f842dc09af38b025701178d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kivikakk/comrak/security/advisories/GHSA-8hqf-xjwp-p67v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OUYME2VA555X6567H7ORIJQFN4BVGT6N/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PTWZWCT7KCX2KTXTLPUYZ3EHOONG4X46/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VQ3UBC7LE4VPCMZBTADIBL353CH7CPVV/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/kivikakk/comrak/commit/ce795b7f471b01589f842dc09af38b025701178d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kivikakk/comrak/security/advisories/GHSA-8hqf-xjwp-p67v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OUYME2VA555X6567H7ORIJQFN4BVGT6N/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PTWZWCT7KCX2KTXTLPUYZ3EHOONG4X46/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VQ3UBC7LE4VPCMZBTADIBL353CH7CPVV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28631",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-28T21:15:11.250",
      "lastModified" : "2024-11-21T07:55:42.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. A Comrak AST can be constructed manually by a program instead of parsing a Markdown document with `parse_document`. This AST can then be converted to HTML via `html::format_document_with_plugins`. However, the HTML formatting code assumes that the AST is well-formed. For example, many AST notes contain `[u8]` fields which the formatting code assumes is valid UTF-8 data. Several bugs can be triggered if this is not the case. Version 0.17.0 contains adjustments to the AST, storing strings instead of unvalidated byte arrays. Users are advised to upgrade. Users unable to upgrade may manually validate UTF-8 correctness of all data when assigning to `&[u8]` and `Vec<u8>` fields in the AST. This issue is also tracked as `GHSL-2023-049`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comrak_project:comrak:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.17.0",
            "matchCriteriaId" : "DF5F74D4-3456-49A1-B3AC-B1BE66BEE50B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kivikakk/comrak/commit/9ff5f8df0ac951f5742d22a72c39b89a15f56639",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kivikakk/comrak/security/advisories/GHSA-5r3x-p7xx-x6q5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OUYME2VA555X6567H7ORIJQFN4BVGT6N/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PTWZWCT7KCX2KTXTLPUYZ3EHOONG4X46/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VQ3UBC7LE4VPCMZBTADIBL353CH7CPVV/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/kivikakk/comrak/commit/9ff5f8df0ac951f5742d22a72c39b89a15f56639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kivikakk/comrak/security/advisories/GHSA-5r3x-p7xx-x6q5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OUYME2VA555X6567H7ORIJQFN4BVGT6N/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PTWZWCT7KCX2KTXTLPUYZ3EHOONG4X46/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VQ3UBC7LE4VPCMZBTADIBL353CH7CPVV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28637",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-28T21:15:11.330",
      "lastModified" : "2024-11-21T07:55:42.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DataEase is an open source data visualization analysis tool. In Dataease users are normally allowed to modify data and the data sources are expected to properly sanitize data. The AWS redshift data source does not provide data sanitization which may lead to remote code execution. This vulnerability has been fixed in v1.18.5. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataease:dataease:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.18.5",
            "matchCriteriaId" : "2A6525A4-9AFC-4166-83A7-7986DA122308"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dataease/dataease/security/advisories/GHSA-8wg2-9gwc-5fx2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/dataease/dataease/security/advisories/GHSA-8wg2-9gwc-5fx2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28648",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-28T21:15:11.390",
      "lastModified" : "2024-11-21T07:55:44.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Osprey Pump Controller version 1.01 inputs passed to a GET parameter are not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML/JS code in a user's browser session in context of an affected site."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:propumpservice:osprey_pump_controller_firmware:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B10E95-86EC-4C15-83B4-73B7384A5C43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:propumpservice:osprey_pump_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16780CFE-7F41-4A59-8C5C-CFB6AA7D22E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28654",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-28T21:15:11.443",
      "lastModified" : "2024-11-21T07:55:44.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Osprey Pump Controller version 1.01 has a hidden administrative account that has the hardcoded password that allows full access to the web management interface configuration. The user is not visible in Usernames and Passwords menu list of the application and the password cannot be changed through any normal operation of the device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:propumpservice:osprey_pump_controller_firmware:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B10E95-86EC-4C15-83B4-73B7384A5C43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:propumpservice:osprey_pump_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16780CFE-7F41-4A59-8C5C-CFB6AA7D22E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28712",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-28T21:15:11.520",
      "lastModified" : "2024-11-21T07:55:51.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Osprey Pump Controller version 1.01 contains an unauthenticated command injection vulnerability that could allow system access with www-data permissions. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:propumpservice:osprey_pump_controller_firmware:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B10E95-86EC-4C15-83B4-73B7384A5C43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:propumpservice:osprey_pump_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16780CFE-7F41-4A59-8C5C-CFB6AA7D22E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28718",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-28T21:15:11.587",
      "lastModified" : "2024-11-21T07:55:52.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Osprey Pump Controller version 1.01 allows users to perform certain actions via HTTP requests without performing any checks to verify the requests. This may allow an attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:propumpservice:osprey_pump_controller_firmware:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B10E95-86EC-4C15-83B4-73B7384A5C43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:propumpservice:osprey_pump_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16780CFE-7F41-4A59-8C5C-CFB6AA7D22E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1677",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-28T22:15:09.293",
      "lastModified" : "2024-11-21T07:39:40.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in DriverGenius 9.70.0.346. It has been rated as problematic. Affected by this issue is the function 0x9c40a0c8/0x9c40a0dc/0x9c40a0e0/0x9c40a0d8/0x9c4060d4/0x9c402004/0x9c402088/0x9c40208c/0x9c4060d0/0x9c4060cc/0x9c4060c4/0x9c402084 in the library mydrivers64.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-224234 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drivergenius:drivergenius:9.70.0.346:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9EE997-D3E6-4B63-A2B2-8992D320BA53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1C7afiLbOOLuYZVeeslPW3AdNeOIwUea9/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1677",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224234",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224234",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1C7afiLbOOLuYZVeeslPW3AdNeOIwUea9/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1678",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-28T22:15:09.357",
      "lastModified" : "2024-11-21T07:39:40.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in DriverGenius 9.70.0.346. This affects the function 0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library mydrivers64.sys of the component IOCTL Handler. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224235."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drivergenius:drivergenius:9.70.0.346:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9EE997-D3E6-4B63-A2B2-8992D320BA53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1VWI0i6Zq-Fi55kbZI6l3dHCeBq-NOlJc/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1678",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224235",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224235",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1VWI0i6Zq-Fi55kbZI6l3dHCeBq-NOlJc/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1679",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-28T22:15:09.420",
      "lastModified" : "2024-11-21T07:39:40.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in DriverGenius 9.70.0.346. This vulnerability affects the function 0x9C406104/0x9C40A108 in the library mydrivers64.sys of the component IOCTL Handler. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224236."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drivergenius:drivergenius:9.70.0.346:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9EE997-D3E6-4B63-A2B2-8992D320BA53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1Iz4VTUUVDveZlgtxN9WkvdygHkD1BUCr/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1679",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224236",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224236",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1Iz4VTUUVDveZlgtxN9WkvdygHkD1BUCr/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T22:15:09.500",
      "lastModified" : "2025-02-18T21:15:15.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7100ru_firmware:7.4cu.2313_b20191024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C47206-6608-4258-A2FE-D15C5637192D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7100ru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DD0831-0EB3-4F09-B4E4-6165E53AB6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/30",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T22:15:09.550",
      "lastModified" : "2025-02-18T21:15:15.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWanIeCfg."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7100ru_firmware:7.4cu.2313_b20191024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C47206-6608-4258-A2FE-D15C5637192D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7100ru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DD0831-0EB3-4F09-B4E4-6165E53AB6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/31",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1681",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-28T23:15:09.070",
      "lastModified" : "2024-11-21T07:39:40.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-224238 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xunruicms:xunruicms:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87320D5-95B1-4484-AC76-9E22F5B26B94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224238",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224238",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-28T23:15:09.143",
      "lastModified" : "2025-02-18T21:15:16.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting/setWanIeCfg."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7100ru_firmware:7.4cu.2313_b20191024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C47206-6608-4258-A2FE-D15C5637192D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7100ru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DD0831-0EB3-4F09-B4E4-6165E53AB6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1682",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-29T00:15:08.903",
      "lastModified" : "2024-11-21T07:39:41.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Xunrui CMS 4.61 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dayrui/My/Config/Install.txt. The manipulation leads to direct request. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224239."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xunruicms:xunruicms:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87320D5-95B1-4484-AC76-9E22F5B26B94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224239",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224239",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1683",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-29T01:15:10.443",
      "lastModified" : "2024-11-21T07:39:41.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Xunrui CMS 4.61 and classified as problematic. Affected by this issue is some unknown functionality of the file /dayrui/Fcms/View/system_log.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224240."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xunruicms:xunruicms:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87320D5-95B1-4484-AC76-9E22F5B26B94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224240",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224240",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1684",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-29T04:15:08.257",
      "lastModified" : "2024-11-21T07:39:41.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in HadSky 7.7.16. It has been classified as problematic. This affects an unknown part of the file upload/index.php?c=app&a=superadmin:index. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224241 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hadsky:hadsky:7.7.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C09ABC72-B4B9-4715-98A0-1FAFFA1588D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/wkstestete/cve/blob/master/upload/HadSky.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224241",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224241",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/wkstestete/cve/blob/master/upload/HadSky.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23355",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2023-03-29T05:15:07.563",
      "lastModified" : "2024-11-21T07:46:01.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote authenticated administrators to execute commands via unspecified vectors.\nQES is not affected.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.0.1.2346 build 20230322 and later\nQTS 4.5.4.2374 build 20230416 and later\nQuTS hero h5.0.1.2348 build 20230324 and later\nQuTS hero h4.5.4.2374 build 20230417 and later\nQuTScloud c5.0.1.2374 and later\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@qnapsecurity.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@qnapsecurity.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:qvr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42F03B20-3D1D-44D9-8F23-9E9989115F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.1.2346",
            "matchCriteriaId" : "9499D1F9-E357-4EAB-8588-7D5F58323C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "h5.0.1.2348",
            "matchCriteriaId" : "67BA4C2A-0193-494E-8FAE-CCD2E552741D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qutscloud:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A9F466-2EAD-4D49-9B52-65EE161A120B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qvp-41b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6ADC0D-E55E-481F-91AD-2A8206A03727"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qnap:qvp-41b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D764104-5E62-48E3-B6D1-18F65C1FFF39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qvp-63b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC0360C-919F-4AB8-B6BB-DE461817185A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qnap:qvp-63b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C84CB0F-23E8-453F-A485-8D5B9A4B9D01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qvp-85b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E0F038B-7D58-4BDF-A697-4B3D06EB8605"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qnap:qvp-85b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFD9423A-DC97-44DE-92E8-917F2CF84918"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qvp-21a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D78E0EC9-5FE3-4C5C-913E-255A310D5DC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qnap:qvp-21a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD2CA465-3F63-4955-A275-D6B49BCED673"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qvp-41a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27D87757-F3CB-4A02-8D99-2851220B1962"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qnap:qvp-41a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "790DC93C-E866-47B6-8324-B7324B83F48F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qvp-63a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D4CB3C-13B8-412D-B3A0-6CB561F27E61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qnap:qvp-63a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E59A7B-E96E-44B9-ABF5-886CC2C7EDB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qnap:qvp-85a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7E56A1-E75B-4172-AF3C-42F504189853"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qnap:qvp-85a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4511E417-E9FE-4DC0-88DF-5BF9BCD67154"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/en/security-advisory/qsa-23-10",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/en/security-advisory/qsa-23-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1685",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-29T06:15:07.217",
      "lastModified" : "2024-11-21T07:39:41.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in HadSky up to 7.11.8. It has been declared as critical. This vulnerability affects unknown code of the file /install/index.php of the component Installation Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224242 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hadsky:hadsky:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.11.0",
            "versionEndIncluding" : "7.11.8",
            "matchCriteriaId" : "D543AE4E-A6F1-4EAE-AAD9-BDC78AF73257"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/galaxies2580/cve/blob/master/hadSky.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitee.com/xinbate/cve/blob/master/HadSky%20rce.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224242",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224242",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/galaxies2580/cve/blob/master/hadSky.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitee.com/xinbate/cve/blob/master/HadSky%20rce.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1686",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-29T07:15:08.707",
      "lastModified" : "2024-11-21T07:39:41.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file bsenordering/admin/category/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input <script>alert(233)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224243."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:young_entrepreneur_e-negosyo_system_project:young_entrepreneur_e-negosyo_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3637BBA5-1FD7-483B-83E8-98F27CA42C6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Apeng96/bug_report/blob/main/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224243",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224243",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Apeng96/bug_report/blob/main/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1687",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-29T08:15:07.047",
      "lastModified" : "2024-11-21T07:39:41.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file LoginRegistration.php?a=register_user. The manipulation of the argument Fullname leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-224244."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:task_allocation_system_project:task_allocation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13FAF231-8214-4DDB-BA13-570FEB192C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.224244",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224244",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1688",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-29T09:15:08.237",
      "lastModified" : "2024-11-21T07:39:41.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in SourceCodester Earnings and Expense Tracker App 1.0. This affects an unknown part of the file Master.php?a=save_expense. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-224307."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:earnings_and_expense_tracker_application:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281E6B12-77A2-4A7D-9963-C236DCEAED1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.224307",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224307",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1689",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-29T10:15:06.940",
      "lastModified" : "2024-11-21T07:39:42.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in SourceCodester Earnings and Expense Tracker App 1.0. This vulnerability affects unknown code of the file Master.php?a=save_earning. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-224308."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:earnings_and_expense_tracker_app_project:earnings_and_expense_tracker_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D10ECCE-7EF3-48CA-83AE-14390AEB502E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.224308",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224308",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0213",
      "sourceIdentifier" : "security@m-files.com",
      "published" : "2023-03-29T11:15:07.033",
      "lastModified" : "2026-02-23T09:16:13.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Elevation of privilege issue in M-Files Installer versions before 22.6 on Windows allows user to gain SYSTEM privileges via DLL hijacking."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@m-files.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@m-files.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m-files:m-files:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "22.6",
            "matchCriteriaId" : "2F7BEA8A-16DD-42BA-8DC1-F3DF23F8C6D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://empower.m-files.com/security-advisories/CVE-2023-0213",
        "source" : "security@m-files.com"
      }, {
        "url" : "https://product.m-files.com/security-advisories/cve-2023-0213/",
        "source" : "security@m-files.com"
      }, {
        "url" : "https://www.m-files.com/about/trust-center/security-advisories/cve-2023-0213/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1509",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-29T11:15:07.117",
      "lastModified" : "2026-04-08T18:17:54.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GMAce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.2. This is due to missing nonce validation on the gmace_manager_server function called via the wp_ajax_gmace_manager AJAX action. This makes it possible for unauthenticated attackers to modify arbitrary files and achieve remote code execution via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gmace_project:gmace:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "29FA17CA-CF8F-4F33-B316-12A55A0463D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/gmace/trunk/gmace.php?rev=1583327#L84",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/gmace/trunk/inc/filemanager.php?rev=1583319#L27",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/826b3913-9a37-4e15-80fd-b35cefb51af8?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/gmace/trunk/gmace.php?rev=1583327#L84",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/gmace/trunk/inc/filemanager.php?rev=1583319#L27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/826b3913-9a37-4e15-80fd-b35cefb51af8?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1690",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-29T11:15:07.200",
      "lastModified" : "2024-11-21T07:39:42.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in SourceCodester Earnings and Expense Tracker App 1.0. This issue affects some unknown processing of the file LoginRegistration.php?a=register_user. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-224309 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:earnings_and_expense_tracker_app_project:earnings_and_expense_tracker_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D10ECCE-7EF3-48CA-83AE-14390AEB502E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.224309",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224309",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23861",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-29T13:15:08.217",
      "lastModified" : "2024-11-21T07:46:59.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in German Mesky GMAce plugin <= 1.5.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gmace_project:gmace:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "29FA17CA-CF8F-4F33-B316-12A55A0463D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/gmace/wordpress-gmace-plugin-1-5-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/gmace/wordpress-gmace-plugin-1-5-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28158",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-29T13:15:08.313",
      "lastModified" : "2025-02-13T17:16:14.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation via stored XSS using the file upload service to upload malicious content.\nThe issue can be exploited only by authenticated users which can create directory name to inject some XSS content and gain some privileges such admin user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:archiva:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "2.2.10",
            "matchCriteriaId" : "95454E36-5438-4F8A-BB13-073645DAA1C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/18/2",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread/8pm6d5y9cptznm0bdny3n8voovmm0dtt",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/18/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread/8pm6d5y9cptznm0bdny3n8voovmm0dtt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1663",
      "sourceIdentifier" : "disclosure@synopsys.com",
      "published" : "2023-03-29T14:15:07.453",
      "lastModified" : "2024-11-21T07:39:38.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Coverity versions prior to 2023.3.2 are vulnerable to forced browsing, which exposes authenticated resources to unauthorized actors. The root cause of this vulnerability is an insecurely configured servlet mapping for the underlying Apache Tomcat server. As a result, the downloads directory and its contents are accessible. 5.9 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "disclosure@synopsys.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@synopsys.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synopsys:coverity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.3.2",
            "matchCriteriaId" : "4A8A2391-E900-4710-92F2-EDC11BEAD24F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.synopsys.com/s/article/Mitigation-for-Coverity-Platforms-Exposure-to-CVE-2023-1663",
        "source" : "disclosure@synopsys.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-CVE-2023-1663-Affecting-Coverity-Platform",
        "source" : "disclosure@synopsys.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.synopsys.com/s/article/Mitigation-for-Coverity-Platforms-Exposure-to-CVE-2023-1663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-CVE-2023-1663-Affecting-Coverity-Platform",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1575",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-03-29T15:15:07.470",
      "lastModified" : "2026-04-08T19:18:07.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Mega Main Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:megamain:mega_main_menu:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.2.2",
            "matchCriteriaId" : "9399D46E-1A99-4534-A431-264F52554B79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://codecanyon.net/item/mega-main-menu-wordpress-menu-plugin/6135125",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a44ce6a3-0a9d-4bce-9251-f3a38b000645?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codecanyon.net/item/mega-main-menu-wordpress-menu-plugin/6135125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a44ce6a3-0a9d-4bce-9251-f3a38b000645?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1680",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-29T15:15:07.560",
      "lastModified" : "2024-11-21T07:39:40.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in Xunrui CMS 4.61. This issue affects some unknown processing of the file /dayrui/My/View/main.html. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224237 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xunruicms:xunruicms:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87320D5-95B1-4484-AC76-9E22F5B26B94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224237",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224237",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26982",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-29T15:15:07.667",
      "lastModified" : "2025-02-18T17:15:16.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter under the Create Ticket function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trudesk_project:trudesk:1.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "304A2CB7-5AD2-497B-A322-C6B153EF5441"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bypazs/CVE-2023-26982",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/polonel/trudesk/releases/tag/v1.2.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://trudesk.io/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bypazs/CVE-2023-26982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/polonel/trudesk/releases/tag/v1.2.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://trudesk.io/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-29T15:15:07.730",
      "lastModified" : "2024-11-21T07:56:13.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\\AdwCleaner\\Logs\\AdwCleaner_Debug.log in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a symbolic link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:malwarebytes:adwcleaner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.4.0",
            "matchCriteriaId" : "258E0106-029F-4EE3-B0EB-7265F6CE0641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forums.malwarebytes.com/topic/307429-release-adwcleaner-841/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://malwarebytes.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.malwarebytes.com/secure/cves/cve-2023-28892",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://forums.malwarebytes.com/topic/307429-release-adwcleaner-841/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://malwarebytes.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.malwarebytes.com/secure/cves/cve-2023-28892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1701",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-29T16:15:07.213",
      "lastModified" : "2024-11-21T07:39:43.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.20",
            "matchCriteriaId" : "98C7372B-CF43-42C5-9227-9ED728BF03F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/2b997737dd6a60be2239a51dd6d9ef5881568e6d",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/64f943c4-68e5-4ef8-82f6-9c4abe928256",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/2b997737dd6a60be2239a51dd6d9ef5881568e6d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/64f943c4-68e5-4ef8-82f6-9c4abe928256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1702",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-29T16:15:07.283",
      "lastModified" : "2024-11-21T07:39:43.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.20",
            "matchCriteriaId" : "98C7372B-CF43-42C5-9227-9ED728BF03F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/2b997737dd6a60be2239a51dd6d9ef5881568e6d",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d8a47f29-3297-4fce-b534-e1d95a2b3e19",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/2b997737dd6a60be2239a51dd6d9ef5881568e6d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d8a47f29-3297-4fce-b534-e1d95a2b3e19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1703",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-29T16:15:07.347",
      "lastModified" : "2024-11-21T07:39:43.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.20",
            "matchCriteriaId" : "98C7372B-CF43-42C5-9227-9ED728BF03F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/765832f0dc5f6cfb296a82e089b701066f27bcef",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d12d105c-18fa-4d08-b591-b0e89e39eec1",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/765832f0dc5f6cfb296a82e089b701066f27bcef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d12d105c-18fa-4d08-b591-b0e89e39eec1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1704",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-29T16:15:07.403",
      "lastModified" : "2024-11-21T07:39:43.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.20."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.20",
            "matchCriteriaId" : "98C7372B-CF43-42C5-9227-9ED728BF03F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/295f5e8d108b68198e36399bea0f69598eb108a0",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/84419c7b-ae29-401b-bdfd-5d0c498d320f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/295f5e8d108b68198e36399bea0f69598eb108a0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/84419c7b-ae29-401b-bdfd-5d0c498d320f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1550",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2023-03-29T17:15:07.107",
      "lastModified" : "2024-11-21T07:39:25.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 before 2.23.3 inserts sensitive information into a log file. An authenticated attacker with local access to read agent log files may gain access to private keys. This issue is only exposed when the non-default trace level logging is enabled. Note: NGINX Agent is included with NGINX Instance Manager and used in conjunction with NGINX API Connectivity Manager, and NGINX Management Suite Security Monitoring."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "f5sirt@f5.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "f5sirt@f5.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_agent:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.23.3",
            "matchCriteriaId" : "ED458946-AFF7-4358-8EEA-1FF12F546580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:nginx_instance_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.9.0",
            "matchCriteriaId" : "EAEC7716-B3B5-4640-A094-38379425DB83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://my.f5.com/manage/s/article/K000133135",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0008/",
        "source" : "f5sirt@f5.com"
      }, {
        "url" : "https://my.f5.com/manage/s/article/K000133135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26290",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2023-03-29T17:15:07.187",
      "lastModified" : "2024-11-21T07:51:04.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_reset_request.mhtml modules), Forcepoint Web Security Portal on Hybrid (login_reset_request.mhtml modules) allows Reflected XSS.This issue affects Cloud Security Gateway (CSG): before 03/29/2023; Web Security: before 03/29/2023.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@forcepoint.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@forcepoint.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forcepoint:cloud_security_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03-29",
            "matchCriteriaId" : "879B02EA-F67B-4D3C-8C98-EE861BF0E36A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forcepoint:web_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03-29",
            "matchCriteriaId" : "AD1BB571-3BA9-40BF-B49E-8DD612B1D483"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.forcepoint.com/s/article/000041617",
        "source" : "psirt@forcepoint.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.forcepoint.com/s/article/000041617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26291",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2023-03-29T17:15:07.247",
      "lastModified" : "2024-11-21T07:51:04.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_form.mhtml modules), Forcepoint Web Security Portal on Hybrid (login_form.mhtml modules) allows Reflected XSS.This issue affects Cloud Security Gateway (CSG): before 03/29/2023; Web Security: before 03/29/2023.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@forcepoint.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@forcepoint.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forcepoint:cloud_security_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03-29",
            "matchCriteriaId" : "879B02EA-F67B-4D3C-8C98-EE861BF0E36A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forcepoint:web_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03-29",
            "matchCriteriaId" : "AD1BB571-3BA9-40BF-B49E-8DD612B1D483"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.forcepoint.com/s/article/000041617",
        "source" : "psirt@forcepoint.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.forcepoint.com/s/article/000041617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26292",
      "sourceIdentifier" : "psirt@forcepoint.com",
      "published" : "2023-03-29T17:15:07.313",
      "lastModified" : "2024-11-21T07:51:04.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_submit.mhtml modules), Forcepoint Web Security Portal on Hybrid (login_submit.mhtml modules) allows Reflected XSS.This issue affects Cloud Security Gateway (CSG): before 03/29/2023; Web Security: before 03/29/2023.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@forcepoint.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@forcepoint.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forcepoint:cloud_security_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03-29",
            "matchCriteriaId" : "879B02EA-F67B-4D3C-8C98-EE861BF0E36A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forcepoint:web_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03-29",
            "matchCriteriaId" : "AD1BB571-3BA9-40BF-B49E-8DD612B1D483"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.forcepoint.com/s/article/000041617",
        "source" : "psirt@forcepoint.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.forcepoint.com/s/article/000041617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-29T17:15:07.377",
      "lastModified" : "2025-02-18T17:15:16.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atrocore:atrocore:1.5.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF6C7B5C-477A-429F-ACA5-D1972ED8D633"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/atrocore/atrocore-1.5.25",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/atrocore/atrocore-1.5.25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-29T17:15:07.427",
      "lastModified" : "2025-05-05T16:15:32.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supremainc:biostar_2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.8.16",
            "matchCriteriaId" : "D463FA95-A29F-4EF2-9487-90BFC1C997D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://suprema.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://biostar2.ciklum.net/api/users/absence?search_month=1",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/171523/Suprema-BioStar-2-2.8.16-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://protey.net/threads/cve-2023-27167-suprema-biostar-2-v2-8-16-sql-injection.995/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.linkedin.com/in/yuriy-tsarenko-a1453aa4/",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://suprema.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://biostar2.ciklum.net/api/users/absence?search_month=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/171523/Suprema-BioStar-2-2.8.16-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://protey.net/threads/cve-2023-27167-suprema-biostar-2-v2-8-16-sql-injection.995/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.linkedin.com/in/yuriy-tsarenko-a1453aa4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26984",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-29T18:15:07.200",
      "lastModified" : "2025-02-18T17:15:16.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peppermint:peppermint:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "307EF4B7-3BC5-4026-98CD-5EE1E9CE48F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Peppermint-Lab/peppermint/tree/master",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bypazs/CVE-2023-26984",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://peppermint.sh/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Peppermint-Lab/peppermint/tree/master",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/bypazs/CVE-2023-26984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://peppermint.sh/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25809",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-29T19:15:22.170",
      "lastModified" : "2024-11-21T07:50:14.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes `/sys/fs/cgroup` writable in following conditons: 1. when runc is executed inside the user namespace, and the `config.json` does not specify the cgroup namespace to be unshared (e.g.., `(docker|podman|nerdctl) run --cgroupns=host`, with Rootless Docker/Podman/nerdctl) or 2. when runc is executed outside the user namespace, and `/sys` is mounted with `rbind, ro` (e.g., `runc spec --rootless`; this condition is very rare). A container may gain the write access to user-owned cgroup hierarchy `/sys/fs/cgroup/user.slice/...` on the host . Other users's cgroup hierarchies are not affected. Users are advised to upgrade to version 1.1.5. Users unable to upgrade may unshare the cgroup namespace (`(docker|podman|nerdctl) run --cgroupns=private)`. This is the default behavior of Docker/Podman/nerdctl on cgroup v2 hosts. or add `/sys/fs/cgroup` to `maskedPaths`.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:runc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.5",
            "matchCriteriaId" : "AE0C5D34-F78A-4993-AC70-25A6606FC82B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencontainers/runc/commit/0d62b950e60f6980b54fe3bafd9a9c608dc1df17",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/opencontainers/runc/commit/0d62b950e60f6980b54fe3bafd9a9c608dc1df17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27489",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-29T19:15:22.277",
      "lastModified" : "2024-11-21T07:53:00.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS accepts SVG files uploaded by users which could potentially contain JavaScript code. If SVG images are viewed directly, i.e. not rendered in an HTML page, this JavaScript code could execute. This vulnerability has been fixed by configuring Kiwi TCMS to serve with the Content-Security-Policy HTTP header which blocks inline JavaScript in all modern browsers. This configuration change is provided in version 12.1 and users are advised to upgrade. Users unable to upgrade may set their Content-Security-Policy HTTP header manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kiwitcms:kiwi_tcms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1",
            "matchCriteriaId" : "F4287F3C-2839-4274-8D5D-74C9143F1949"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kiwitcms/Kiwi/commit/6617cee0fb70cc394b7be6bbc86ef84e6e9de077",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-2wcr-87wf-cf9j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/commit/6617cee0fb70cc394b7be6bbc86ef84e6e9de077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-2wcr-87wf-cf9j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28642",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-29T19:15:22.397",
      "lastModified" : "2024-12-06T14:15:19.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:runc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.5",
            "matchCriteriaId" : "AE0C5D34-F78A-4993-AC70-25A6606FC82B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencontainers/runc/pull/3785",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/opencontainers/runc/pull/3785",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20241206-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0664",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-29T20:15:07.347",
      "lastModified" : "2025-02-18T20:15:16.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "E39E9130-AC54-4D0B-AE7C-7CE6F83CB25D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2167423",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/qemu-project/qemu/-/commit/07ce178a2b0768eb9e712bb5ad0cf6dc7fcf0158",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/qemu-project/qemu/-/commit/88288c2a51faa7c795f053fc8b31b1c16ff804c5",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MURWGXDIF2WTDXV36T6HFJDBL632AO7R/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEOC7SRJWLZSXCND2ADFW6C76ZMTZLE4/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.nongnu.org/archive/html/qemu-devel/2023-03/msg01445.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0005/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2167423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/qemu-project/qemu/-/commit/07ce178a2b0768eb9e712bb5ad0cf6dc7fcf0158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/qemu-project/qemu/-/commit/88288c2a51faa7c795f053fc8b31b1c16ff804c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MURWGXDIF2WTDXV36T6HFJDBL632AO7R/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEOC7SRJWLZSXCND2ADFW6C76ZMTZLE4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.nongnu.org/archive/html/qemu-devel/2023-03/msg01445.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1656",
      "sourceIdentifier" : "psirt@forgerock.com",
      "published" : "2023-03-29T20:15:07.393",
      "lastModified" : "2025-04-14T17:15:26.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Connector Server (RCS): from 1.5.20.9 through 1.5.20.13."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@forgerock.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@forgerock.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forgerock:ldap_connector:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5.20.9",
            "versionEndExcluding" : "1.5.20.14",
            "matchCriteriaId" : "C6C49376-B78D-4BCF-A2A3-710F066094AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://backstage.forgerock.com/downloads/browse/idm/all/productId:idm-connectors/subProductId:ldap/minorVersion:1.5/version:1.5.20.14",
        "source" : "psirt@forgerock.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a14149722",
        "source" : "psirt@forgerock.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://backstage.forgerock.com/downloads/browse/idm/all/productId:idm-connectors/subProductId:ldap/minorVersion:1.5/version:1.5.20.14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://backstage.forgerock.com/knowledge/kb/article/a14149722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22705",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-29T20:15:07.450",
      "lastModified" : "2025-02-20T18:34:50.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Collne Inc. Welcart e-Commerce plugin <= 2.8.10 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:welcart:welcart_e-commerce:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.8.10",
            "matchCriteriaId" : "6D5F57E2-5F01-4AC3-B564-130C7BB1C220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/usc-e-shop/wordpress-welcart-e-commerce-plugin-2-8-10-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/usc-e-shop/wordpress-welcart-e-commerce-plugin-2-8-10-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28501",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-29T20:15:07.507",
      "lastModified" : "2025-02-18T17:15:17.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based buffer overflow in the unirpcd daemon that, if successfully exploited, can lead to remote code execution as the root user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:unidata:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.4",
            "matchCriteriaId" : "4190A053-8AEE-483F-B7EA-1A985F58D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.3.5",
            "matchCriteriaId" : "6E02DA68-C335-40DA-80A4-1DE974B1E0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.2.1",
            "matchCriteriaId" : "4FE07875-8D74-4C39-BD7D-6044A25BC975"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0836",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-29T21:15:07.950",
      "lastModified" : "2025-02-18T17:15:15.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the connection buffer when encoding the FCGI_BEGIN_REQUEST record. Sensitive data may be disclosed to configured FastCGI backends in an unexpected way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.2.27",
            "matchCriteriaId" : "2716FE42-E573-4714-81AD-6C282F19D4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndIncluding" : "2.4.21",
            "matchCriteriaId" : "A7A06FF0-94D5-4414-9089-5E8EDCF28FB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndIncluding" : "2.5.11",
            "matchCriteriaId" : "E793E6B3-4384-4E14-95F0-4A9764694BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndIncluding" : "2.6.8",
            "matchCriteriaId" : "403E881D-2546-4324-AD6A-C1F96D66EF7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B917864F-A221-453D-9A8A-A5E6F2923894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64C89E5B-9EEC-4BE8-89C2-E9908B016872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C053BE-78C8-475F-8D2B-56FAD7B0E0D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.haproxy.org/?p=haproxy.git%3Ba=commitdiff%3Bh=2e6bf0a",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5388",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://git.haproxy.org/?p=haproxy.git%3Ba=commitdiff%3Bh=2e6bf0a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1652",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-29T21:15:07.997",
      "lastModified" : "2025-02-18T17:15:15.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.14",
            "versionEndExcluding" : "5.15.91",
            "matchCriteriaId" : "D7106030-745D-4E41-92EA-B14D4942EE1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.9",
            "matchCriteriaId" : "ED5B6045-B1D2-4E03-B194-9005A351BCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF501633-2F44-4913-A8EE-B021929F49F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDA597B-CAC1-4DF0-86F0-42E142C654E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "725C78C9-12CE-406F-ABE8-0813A01D66E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A127C155-689C-4F67-B146-44A57F4BFD85"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/cve-2023-1652",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0006/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/cve-2023-1652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28502",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-29T21:15:08.080",
      "lastModified" : "2025-02-18T17:15:17.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow in the \"udadmin\" service that can lead to remote code execution as the root user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:unidata:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.4",
            "matchCriteriaId" : "4190A053-8AEE-483F-B7EA-1A985F58D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.3.5",
            "matchCriteriaId" : "6E02DA68-C335-40DA-80A4-1DE974B1E0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.2.1",
            "matchCriteriaId" : "4FE07875-8D74-4C39-BD7D-6044A25BC975"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171853/Rocket-Software-Unidata-8.2.4-Build-3003-Buffer-Overflow.html",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171853/Rocket-Software-Unidata-8.2.4-Build-3003-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28503",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-29T21:15:08.123",
      "lastModified" : "2025-02-18T16:15:15.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from an authentication bypass vulnerability, where a special username with a deterministic password can be leveraged to bypass authentication checks and execute OS commands as the root user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:unidata:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.4",
            "matchCriteriaId" : "4190A053-8AEE-483F-B7EA-1A985F58D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.3.5",
            "matchCriteriaId" : "6E02DA68-C335-40DA-80A4-1DE974B1E0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.2.1",
            "matchCriteriaId" : "4FE07875-8D74-4C39-BD7D-6044A25BC975"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171854/Rocket-Software-Unidata-udadmin_server-Authentication-Bypass.html",
        "source" : "cve@rapid7.com"
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171854/Rocket-Software-Unidata-udadmin_server-Authentication-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28504",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-29T21:15:08.170",
      "lastModified" : "2025-02-18T16:15:15.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow that can lead to remote code execution as the root user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:unidata:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.4",
            "matchCriteriaId" : "4190A053-8AEE-483F-B7EA-1A985F58D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.3.5",
            "matchCriteriaId" : "6E02DA68-C335-40DA-80A4-1DE974B1E0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.2.1",
            "matchCriteriaId" : "4FE07875-8D74-4C39-BD7D-6044A25BC975"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28505",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-29T21:15:08.217",
      "lastModified" : "2025-02-18T16:15:15.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a buffer overflow in an API function, where a string is copied into a caller-provided buffer without checking the length. This requires a valid login to exploit."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:unidata:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.4",
            "matchCriteriaId" : "4190A053-8AEE-483F-B7EA-1A985F58D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.3.5",
            "matchCriteriaId" : "6E02DA68-C335-40DA-80A4-1DE974B1E0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.2.1",
            "matchCriteriaId" : "4FE07875-8D74-4C39-BD7D-6044A25BC975"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28506",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-29T21:15:08.263",
      "lastModified" : "2025-02-18T16:15:15.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow, where a string is copied into a buffer using a memcpy-like function and a user-provided length. This requires a valid login to exploit."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:unidata:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.4",
            "matchCriteriaId" : "4190A053-8AEE-483F-B7EA-1A985F58D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.3.5",
            "matchCriteriaId" : "6E02DA68-C335-40DA-80A4-1DE974B1E0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.2.1",
            "matchCriteriaId" : "4FE07875-8D74-4C39-BD7D-6044A25BC975"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28507",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-29T21:15:08.307",
      "lastModified" : "2025-02-18T15:15:14.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a memory-exhaustion issue, where a decompression routine will allocate increasing amounts of memory until all system memory is exhausted and the forked process crashes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:unidata:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.4",
            "matchCriteriaId" : "4190A053-8AEE-483F-B7EA-1A985F58D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.3.5",
            "matchCriteriaId" : "6E02DA68-C335-40DA-80A4-1DE974B1E0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.2.1",
            "matchCriteriaId" : "4FE07875-8D74-4C39-BD7D-6044A25BC975"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28508",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-29T21:15:08.353",
      "lastModified" : "2025-02-18T17:15:17.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based overflow vulnerability, where certain input can corrupt the heap and crash the forked process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:unidata:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.4",
            "matchCriteriaId" : "4190A053-8AEE-483F-B7EA-1A985F58D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.3.5",
            "matchCriteriaId" : "6E02DA68-C335-40DA-80A4-1DE974B1E0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.2.1",
            "matchCriteriaId" : "4FE07875-8D74-4C39-BD7D-6044A25BC975"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28509",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-29T21:15:08.397",
      "lastModified" : "2025-02-18T17:15:17.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 use weak encryption for packet-level security and passwords transferred on the wire."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:unidata:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.2.4",
            "matchCriteriaId" : "4190A053-8AEE-483F-B7EA-1A985F58D407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.3.5",
            "matchCriteriaId" : "6E02DA68-C335-40DA-80A4-1DE974B1E0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.2.1",
            "matchCriteriaId" : "4FE07875-8D74-4C39-BD7D-6044A25BC975"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0620",
      "sourceIdentifier" : "security@hashicorp.com",
      "published" : "2023-03-30T01:15:07.380",
      "lastModified" : "2024-11-21T07:37:29.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when configuring the Microsoft SQL (MSSQL) Database Storage Backend. When configuring the MSSQL plugin through the local, certain parameters are not sanitized when passed to the user-provided MSSQL database. An attacker may modify these parameters to execute a malicious SQL command.\n\nThis issue is fixed in versions 1.13.1, 1.12.5, and 1.11.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hashicorp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hashicorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "1.11.9",
            "matchCriteriaId" : "2C565DBD-95F4-4951-A029-93ABE5315740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "1.11.9",
            "matchCriteriaId" : "80EB9F32-09A4-469C-AF76-1AE3137EAC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.5",
            "matchCriteriaId" : "446F872F-F64C-44CA-85BC-144FCFBCFA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.5",
            "matchCriteriaId" : "71A02FE6-C8D4-455D-A71A-C8353E1ECB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndExcluding" : "1.13.1",
            "matchCriteriaId" : "81280166-3DF7-4867-95E9-A7AFB9A12CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndExcluding" : "1.13.1",
            "matchCriteriaId" : "C56E203C-1E18-4395-B500-B6EA695B16C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-12-vault-s-microsoft-sql-database-storage-backend-vulnerable-to-sql-injection-via-configuration-file/52080/1",
        "source" : "security@hashicorp.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0008/",
        "source" : "security@hashicorp.com"
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-12-vault-s-microsoft-sql-database-storage-backend-vulnerable-to-sql-injection-via-configuration-file/52080/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0665",
      "sourceIdentifier" : "security@hashicorp.com",
      "published" : "2023-03-30T01:15:07.437",
      "lastModified" : "2024-11-21T07:37:35.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hashicorp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hashicorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "1.11.9",
            "matchCriteriaId" : "2C565DBD-95F4-4951-A029-93ABE5315740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "1.11.9",
            "matchCriteriaId" : "80EB9F32-09A4-469C-AF76-1AE3137EAC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.5",
            "matchCriteriaId" : "446F872F-F64C-44CA-85BC-144FCFBCFA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.5",
            "matchCriteriaId" : "71A02FE6-C8D4-455D-A71A-C8353E1ECB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndExcluding" : "1.13.1",
            "matchCriteriaId" : "81280166-3DF7-4867-95E9-A7AFB9A12CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndExcluding" : "1.13.1",
            "matchCriteriaId" : "C56E203C-1E18-4395-B500-B6EA695B16C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-11-vault-s-pki-issuer-endpoint-did-not-correctly-authorize-access-to-issuer-metadata/52079/1",
        "source" : "security@hashicorp.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0008/",
        "source" : "security@hashicorp.com"
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-11-vault-s-pki-issuer-endpoint-did-not-correctly-authorize-access-to-issuer-metadata/52079/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25000",
      "sourceIdentifier" : "security@hashicorp.com",
      "published" : "2023-03-30T01:15:07.493",
      "lastModified" : "2024-11-21T07:48:54.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Vault's implementation of Shamir's secret sharing used precomputed table lookups, and was vulnerable to cache-timing attacks. An attacker with access to, and the ability to observe a large number of unseal operations on the host through a side channel may reduce the search space of a brute force effort to recover the Shamir shares. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hashicorp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hashicorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "1.11.9",
            "matchCriteriaId" : "2C565DBD-95F4-4951-A029-93ABE5315740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "1.11.9",
            "matchCriteriaId" : "80EB9F32-09A4-469C-AF76-1AE3137EAC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.5",
            "matchCriteriaId" : "446F872F-F64C-44CA-85BC-144FCFBCFA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.5",
            "matchCriteriaId" : "71A02FE6-C8D4-455D-A71A-C8353E1ECB7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndExcluding" : "1.13.1",
            "matchCriteriaId" : "81280166-3DF7-4867-95E9-A7AFB9A12CE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndExcluding" : "1.13.1",
            "matchCriteriaId" : "C56E203C-1E18-4395-B500-B6EA695B16C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-10-vault-vulnerable-to-cache-timing-attacks-during-seal-and-unseal-operations/52078",
        "source" : "security@hashicorp.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0008/",
        "source" : "security@hashicorp.com"
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-10-vault-vulnerable-to-cache-timing-attacks-during-seal-and-unseal-operations/52078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26116",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-03-30T05:15:07.410",
      "lastModified" : "2025-11-20T17:53:57.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angularjs:angularjs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.21",
            "versionEndIncluding" : "1.8.3",
            "matchCriteriaId" : "7E36CFFF-D4D0-42F9-A38A-4BC77852642C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQWJLE5WE33WNMA54XSJIDXBRK2KL3XJ/",
        "source" : "report@snyk.io",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDKFLKJ6VZKL52AFVW2OVZRMJWHMW55K/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406320",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBANGULAR-5406322",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-5406321",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-ANGULAR-3373044",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://stackblitz.com/edit/angularjs-vulnerability-angular-copy-redos",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQWJLE5WE33WNMA54XSJIDXBRK2KL3XJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDKFLKJ6VZKL52AFVW2OVZRMJWHMW55K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBANGULAR-5406322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-5406321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-ANGULAR-3373044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://stackblitz.com/edit/angularjs-vulnerability-angular-copy-redos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26117",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-03-30T05:15:07.687",
      "lastModified" : "2025-11-20T17:53:57.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angularjs:angularjs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.8.3",
            "matchCriteriaId" : "C545C186-F584-48D6-8776-5244F9DA372E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQWJLE5WE33WNMA54XSJIDXBRK2KL3XJ/",
        "source" : "report@snyk.io",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDKFLKJ6VZKL52AFVW2OVZRMJWHMW55K/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406323",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBANGULAR-5406325",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-5406324",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-ANGULAR-3373045",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://stackblitz.com/edit/angularjs-vulnerability-resource-trailing-slashes-redos",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQWJLE5WE33WNMA54XSJIDXBRK2KL3XJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDKFLKJ6VZKL52AFVW2OVZRMJWHMW55K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBANGULAR-5406325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-5406324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-ANGULAR-3373045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://stackblitz.com/edit/angularjs-vulnerability-resource-trailing-slashes-redos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26118",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-03-30T05:15:07.750",
      "lastModified" : "2025-11-20T17:53:57.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the <input type=\"url\"> element due to the usage of an insecure regular expression in the input[url] functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:angularjs:angularjs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.9",
            "versionEndIncluding" : "1.8.3",
            "matchCriteriaId" : "CB17233C-A20B-4182-B8EC-652759FA193C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQWJLE5WE33WNMA54XSJIDXBRK2KL3XJ/",
        "source" : "report@snyk.io",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDKFLKJ6VZKL52AFVW2OVZRMJWHMW55K/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406326",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBANGULAR-5406328",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-5406327",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-ANGULAR-3373046",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://stackblitz.com/edit/angularjs-vulnerability-inpur-url-validation-redos",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQWJLE5WE33WNMA54XSJIDXBRK2KL3XJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDKFLKJ6VZKL52AFVW2OVZRMJWHMW55K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBANGULAR-5406328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-5406327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-ANGULAR-3373046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://stackblitz.com/edit/angularjs-vulnerability-inpur-url-validation-redos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1013",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-30T09:15:10.317",
      "lastModified" : "2024-11-21T07:38:17.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Virames Vira-Investing allows Cross-Site Scripting (XSS).This issue affects Vira-Investing: before 1.0.84.86.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dizayn:vira-investing:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.84.86",
            "matchCriteriaId" : "92C947C7-4AE8-40D8-BCA9-992CAE070BAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0183",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1014",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-30T09:15:10.440",
      "lastModified" : "2024-11-21T07:38:17.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account Footprinting.This issue affects Vira-Investing: before 1.0.84.86.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1320"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dizayn:vira-investing:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.84.86",
            "matchCriteriaId" : "92C947C7-4AE8-40D8-BCA9-992CAE070BAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0183",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1699",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-03-30T10:15:07.137",
      "lastModified" : "2024-11-21T07:39:43.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rapid7 Nexpose versions 6.6.186 and below suffer from a forced browsing vulnerability.  This vulnerability allows an attacker to manipulate URLs to forcefully browse to and access administrative pages. This vulnerability is fixed in version 6.6.187.  "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@rapid7.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:nexpose:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.6.187",
            "matchCriteriaId" : "DC070CA9-0DD2-4AC3-8072-49E1A097D00D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.rapid7.com/release-notes/nexpose/20230329/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.rapid7.com/release-notes/nexpose/20230329/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1712",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-30T10:15:07.217",
      "lastModified" : "2024-11-21T07:39:44.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack prior to 0.1.30."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-547"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deepset:haystack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03-29",
            "matchCriteriaId" : "1CEC8E1C-85B8-47CA-BCED-7AB8C5511D6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/deepset-ai/haystack/commit/5fc84904f198de661d5b933fde756aa922bf09f1",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/9a6b1fb4-ec9b-4cfa-af1e-9ce304924829",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/deepset-ai/haystack/commit/5fc84904f198de661d5b933fde756aa922bf09f1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/9a6b1fb4-ec9b-4cfa-af1e-9ce304924829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28935",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-03-30T10:15:07.310",
      "lastModified" : "2024-11-21T07:56:15.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache UIMA DUCC.\n\n\nWhen using the \"Distributed UIMA Cluster Computing\" (DUCC) module of Apache UIMA, an authenticated user that has the permissions to modify core entities can cause command execution as the system user that runs the web process.\n\n\nAs the \"Distributed UIMA Cluster Computing\" module for UIMA is retired, we do not plan to release a fix for this issue.\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:unstructured_information_management_architecture:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE4E8F2C-D9ED-481F-AC3E-75AFF73871D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/r19z14b9rrfxv72r93q5trq5tyffo75g",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/r19z14b9rrfxv72r93q5trq5tyffo75g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23670",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-30T11:15:06.880",
      "lastModified" : "2024-11-21T07:46:37.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Team Heateor Fancy Comments WordPress plugin <= 1.2.10 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heateor:fancy_comments:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.11",
            "matchCriteriaId" : "3812F452-7872-4773-9C35-8CA64F354FCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/fancy-facebook-comments/wordpress-fancy-comments-wordpress-plugin-1-2-10-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/fancy-facebook-comments/wordpress-fancy-comments-wordpress-plugin-1-2-10-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23675",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-30T11:15:06.953",
      "lastModified" : "2024-11-21T07:46:38.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Catchsquare WP Smart Preloader plugin <= 1.15 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:catchsquare:wp_smart_preloader:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.15.1",
            "matchCriteriaId" : "8125C9FD-335D-4BDE-BAC2-B546A96232B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-smart-preloader/wordpress-wp-smart-preloader-plugin-1-15-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-smart-preloader/wordpress-wp-smart-preloader-plugin-1-15-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23677",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-30T11:15:07.027",
      "lastModified" : "2024-11-21T07:46:38.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.5 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gtmetrix:gtmetrix:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.4.6",
            "matchCriteriaId" : "E7A191D3-35CC-4062-83D0-0488B60284A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/gtmetrix-for-wordpress/wordpress-gtmetrix-for-wordpress-plugin-0-4-5-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/gtmetrix-for-wordpress/wordpress-gtmetrix-for-wordpress-plugin-0-4-5-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23681",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-30T12:15:07.387",
      "lastModified" : "2024-11-21T07:46:39.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Labib Ahmed Image Hover Effects For WPBakery Page Builder plugin <= 4.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webdevocean:image_hover_effects_for_wpbakery_page_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.0",
            "matchCriteriaId" : "65418D2A-9763-44E6-B72D-DAB00E2CC402"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/image-hover-effects-visual-composer-extension/wordpress-image-hover-effects-for-wpbakery-page-builder-plugin-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/image-hover-effects-visual-composer-extension/wordpress-image-hover-effects-for-wpbakery-page-builder-plugin-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24399",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-30T12:15:07.457",
      "lastModified" : "2024-11-21T07:47:47.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in OceanWP Ocean Extra plugin <= 2.1.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oceanwp:ocean_extra:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "86A268FA-36E7-496E-BF5C-4B5FFD45C516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/ocean-extra/wordpress-ocean-extra-plugin-2-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/ocean-extra/wordpress-ocean-extra-plugin-2-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25040",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-03-30T12:15:07.520",
      "lastModified" : "2024-11-21T07:48:58.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vova Anokhin WordPress Shortcodes Plugin — Shortcodes Ultimate plugin <= 5.12.6 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getshortcodes:shortcodes_ultimate:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.12.7",
            "matchCriteriaId" : "B69E310B-7165-4725-821E-EA4E30DD8EAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/shortcodes-ultimate/wordpress-shortcodes-ultimate-plugin-5-12-6-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/shortcodes-ultimate/wordpress-shortcodes-ultimate-plugin-5-12-6-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28731",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2023-03-30T12:15:07.573",
      "lastModified" : "2024-11-21T07:55:53.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AnyMailing Joomla Plugin is vulnerable to unauthenticated remote code execution, when being granted access to the campaign's creation on front-office due to unrestricted file upload allowing PHP code to be injected. \n\n\n\nThis issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0. \n\n\n\n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acymailing:acymailing:*:*:*:*:*:joomla\\!:*:*",
            "versionEndExcluding" : "8.3.0",
            "matchCriteriaId" : "42A293DB-98EF-464D-BF05-6E47C6EED94C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.acymailing.com/change-log/",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.bugbounty.ch/advisories/CVE-2023-28731",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.acymailing.com/change-log/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.bugbounty.ch/advisories/CVE-2023-28731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28732",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2023-03-30T12:15:07.620",
      "lastModified" : "2024-11-21T07:55:53.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing access control in AnyMailing Joomla Plugin allows to list and access files containing sensitive information from the plugin itself and access to system files via path traversal, when being granted access to the campaign's creation on front-office. \n\nThis issue affects AnyMailing Joomla Plugin in versions below 8.3.0. \n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acymailing:acymailing:*:*:*:*:*:joomla\\!:*:*",
            "versionEndExcluding" : "8.3.0",
            "matchCriteriaId" : "42A293DB-98EF-464D-BF05-6E47C6EED94C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/acyba/acymailing/releases/tag/v8.3.0",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.acymailing.com/change-log/",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.bugbounty.ch/advisories/CVE-2023-28732",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/acyba/acymailing/releases/tag/v8.3.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.acymailing.com/change-log/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.bugbounty.ch/advisories/CVE-2023-28732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28733",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2023-03-30T12:15:07.663",
      "lastModified" : "2024-11-21T07:55:53.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when access is granted to the campaign's creation on front-office. \n\nThis issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0. \n\n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acymailing:acymailing:*:*:*:*:*:joomla\\!:*:*",
            "versionEndExcluding" : "8.3.0",
            "matchCriteriaId" : "42A293DB-98EF-464D-BF05-6E47C6EED94C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.acymailing.com/change-log/",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.bugbounty.ch/advisories/CVE-2023-28733",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.acymailing.com/change-log/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.bugbounty.ch/advisories/CVE-2023-28733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1725",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-30T15:15:07.287",
      "lastModified" : "2024-11-21T07:39:46.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-Side Request Forgery (SSRF) vulnerability in Infoline Project Management System allows Server Side Request Forgery.This issue affects Project Management System: before 4.09.31.125.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:infoline-tr:project_management_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.09.31.125",
            "matchCriteriaId" : "9E779E47-811D-4605-BA84-FFE20585B17A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0187",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25076",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-03-30T15:15:07.370",
      "lastModified" : "2024-11-21T07:49:03.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch (commit: 822bb80df9b7b345cc9eba55df74a07b498819ba). A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to trigger this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sniproxy_project:sniproxy:0.6.0-2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E18CB41-EF35-46B8-9D6C-E0BA78FFA8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sniproxy_project:sniproxy:0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28C6109D-E621-41AC-87A6-F50E7ACB5510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dlundquist/sniproxy/commit/f8d9a433fe22ab2fa15c00179048ab02ae23d583",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00030.html",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1731",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5413",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://github.com/dlundquist/sniproxy/commit/f8d9a433fe22ab2fa15c00179048ab02ae23d583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22845",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-03-30T16:15:07.250",
      "lastModified" : "2024-11-21T07:45:30.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openimageio:openimageio:2.4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE4ACB3-DF22-4B61-AF1C-2C9B7F718C65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1708",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24472",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-03-30T16:15:07.317",
      "lastModified" : "2024-11-21T07:47:55.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted ImageOutput Object can lead to denial of service. An attacker can provide malicious input to trigger this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openimageio:openimageio:2.4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE4ACB3-DF22-4B61-AF1C-2C9B7F718C65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/08/msg00005.html",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1709",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/08/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24473",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-03-30T16:15:07.380",
      "lastModified" : "2024-11-21T07:47:55.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openimageio:openimageio:2.4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE4ACB3-DF22-4B61-AF1C-2C9B7F718C65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1707",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-30T17:15:06.830",
      "lastModified" : "2025-05-05T16:15:34.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versions 18.12.407 and 18.12.416 of the 3CX DesktopApp Electron Windows application shipped in Update 7, and versions 18.11.1213, 18.12.402, 18.12.407, and 18.12.416 of the 3CX DesktopApp Electron macOS application."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3cx:3cx:18.11.1213:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "74B53EE3-FBB8-4755-87A7-5F6E49D0A1D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3cx:3cx:18.12.402:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "60744EF3-A372-4C3A-834D-7413E529D9DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3cx:3cx:18.12.407:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "621E8F42-E99A-4D88-88A5-A35C4129CC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3cx:3cx:18.12.407:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "41B7B637-FBA2-4D47-92D3-8D1876A496C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3cx:3cx:18.12.416:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "404313B1-54B9-457B-8AE0-8A574C2029E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3cx:3cx:18.12.416:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "7CD7C3F1-14A3-4E96-81AE-DD70BD87984D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cwe.mitre.org/data/definitions/506.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://news.sophos.com/en-us/2023/03/29/3cx-dll-sideloading-attack/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.3cx.com/blog/news/desktopapp-security-alert/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.crowdstrike.com/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.fortinet.com/blog/threat-research/3cx-desktop-app-compromised",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.huntress.com/blog/3cx-voip-software-compromise-supply-chain-threats",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cwe.mitre.org/data/definitions/506.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://news.sophos.com/en-us/2023/03/29/3cx-dll-sideloading-attack/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.3cx.com/blog/news/desktopapp-security-alert/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.crowdstrike.com/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.fortinet.com/blog/threat-research/3cx-desktop-app-compromised",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.huntress.com/blog/3cx-voip-software-compromise-supply-chain-threats",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1734",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-30T19:15:06.437",
      "lastModified" : "2024-11-21T07:39:47.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected is an unknown function of the file admin/products/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. VDB-224622 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:young_entrepreneur_e-negosyo_system_project:young_entrepreneur_e-negosyo_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3637BBA5-1FD7-483B-83E8-98F27CA42C6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.224622",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224622",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26482",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-30T19:15:06.523",
      "lastModified" : "2024-11-21T07:51:36.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which are designed to be only available for administrators. Some workflows are designed to be RCE by invoking defined scripts, in order to generate PDFs, invoking webhooks or running scripts on the server. Due to this combination depending on the available apps the issue can result in a RCE at the end. It is recommended that the Nextcloud Server is upgraded to 24.0.10 or 25.0.4. Users unable to upgrade should disable app `workflow_scripts` and `workflow_pdf_converter` as a mitigation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "18.0.0",
            "versionEndExcluding" : "20.0.14.12",
            "matchCriteriaId" : "F96F0D08-EE3D-4796-A6AC-B63E53770F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndExcluding" : "21.0.9.10",
            "matchCriteriaId" : "BFCBAD36-04D2-47EC-836E-35EFC1D6E060"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.2.10.10",
            "matchCriteriaId" : "C5886100-3157-4377-8681-381720CFDA8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.12.5",
            "matchCriteriaId" : "F2FEEE2E-6BF9-4332-99A3-690EF68D884F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.10",
            "matchCriteriaId" : "302FFA48-9204-4112-BF23-6182ED62F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.10",
            "matchCriteriaId" : "3D2D0CEB-437C-4ABA-9915-EFCB776E7ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.4",
            "matchCriteriaId" : "282F04F1-B4E4-4DC2-82CA-55DB39A3F373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.4",
            "matchCriteriaId" : "E14A1D06-7AB2-40C2-806F-7EE34595DAF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h3c9-cmh8-7qpj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/commit/5a06b50b10cc9278bbe68bbf897a0c4aeb0c4e60",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h3c9-cmh8-7qpj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/commit/5a06b50b10cc9278bbe68bbf897a0c4aeb0c4e60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28643",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-30T19:15:06.607",
      "lastModified" : "2024-11-21T07:55:43.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud server is an open source home cloud implementation. In affected versions when a recipient receives 2 shares with the same name, while a memory cache is configured, the second share will replace the first one instead of being renamed to `{name} (2)`. It is recommended that the Nextcloud Server is upgraded to 25.0.3 or 24.0.9. Users unable to upgrade should avoid sharing 2 folders with the same name to the same user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-706"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-706"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.9",
            "matchCriteriaId" : "06D75B2D-F295-44BB-8189-8A48F88EEBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.9",
            "matchCriteriaId" : "3DF4F00E-C1F3-40C6-B26E-19254BA4FE15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.3",
            "matchCriteriaId" : "B356E106-2C7D-4062-B5EA-07A19828853C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.3",
            "matchCriteriaId" : "C5E90102-61F6-4A2A-8EEC-A2795DCB56FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-hhq4-4pr8-wm27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/issues/34015",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36047",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-hhq4-4pr8-wm27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/issues/34015",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28644",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-30T19:15:06.687",
      "lastModified" : "2024-11-21T07:55:43.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an inefficient fetch operation may impact server performances and/or can lead to a denial of service. This issue has been addressed and it is recommended that the Nextcloud Server is upgraded to 25.0.3. There are no known workarounds for this vulnerability.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.3",
            "matchCriteriaId" : "C5E90102-61F6-4A2A-8EEC-A2795DCB56FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9wmj-gp8v-477j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36016",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9wmj-gp8v-477j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28646",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-30T19:15:06.767",
      "lastModified" : "2024-11-21T07:55:43.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud android is an android app for interfacing with the nextcloud home server ecosystem. In versions from 3.7.0 and before 3.24.1 an attacker that has access to the unlocked physical device can bypass the Nextcloud Android Pin/passcode protection via a thirdparty app. This allows to see meta information like sharer, sharees and activity of files. It is recommended that the Nextcloud Android app is upgraded to 3.24.1. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        }, {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud:*:*:*:*:*:android:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.24.1",
            "matchCriteriaId" : "4E06B4DB-C2C3-40A2-AD87-6128530FAA61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/android/pull/11242",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c3rf-94h6-vj8v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/android/pull/11242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c3rf-94h6-vj8v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28647",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-30T19:15:06.837",
      "lastModified" : "2024-11-21T07:55:44.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud iOS is an ios application used to interface with the nextcloud home cloud ecosystem. In versions prior to 4.7.0 when an attacker has physical access to an unlocked device, they may enable the integration into the iOS Files app and bypass the Nextcloud pin/password protection and gain access to a users files. It is recommended that the Nextcloud iOS app is upgraded to 4.7.0. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        }, {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "4.7.0",
            "matchCriteriaId" : "8FF91531-0882-4755-98F8-D0C469119B9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/ios/pull/2344",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wjgg-2v4p-2gq6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/ios/pull/2344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wjgg-2v4p-2gq6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28833",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-30T19:15:06.943",
      "lastModified" : "2024-11-21T07:56:07.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favicon and to provided a file name which was not restricted and could overwrite files in the appdata directory. Administrators may have access to overwrite these files by other means but this method could be exploited by tricking an admin into uploading a maliciously named file. It is recommended that the Nextcloud Server is upgraded to 24.0.10 or 25.0.4. Users unable to upgrade should avoid ingesting logo files from untrusted sources."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.14",
            "matchCriteriaId" : "8C96D16D-F7EB-4674-A02A-FD5AC82CAC57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.10",
            "matchCriteriaId" : "302FFA48-9204-4112-BF23-6182ED62F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.10",
            "matchCriteriaId" : "3D2D0CEB-437C-4ABA-9915-EFCB776E7ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.4",
            "matchCriteriaId" : "282F04F1-B4E4-4DC2-82CA-55DB39A3F373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.4",
            "matchCriteriaId" : "E14A1D06-7AB2-40C2-806F-7EE34595DAF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-ch7f-px7m-hg25",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36095",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-ch7f-px7m-hg25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28835",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-30T19:15:07.020",
      "lastModified" : "2024-11-21T07:56:07.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share was using a weak complexity random number generator, so when the sharer did not change it the password could be guessable to an attacker willing to brute force it. It is recommended that the Nextcloud Server is upgraded to 24.0.10 or 25.0.4. This issue only affects users who do not have a password policy enabled, so enabling a password policy is an effective mitigation for users unable to upgrade."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.14",
            "matchCriteriaId" : "8C96D16D-F7EB-4674-A02A-FD5AC82CAC57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.10",
            "matchCriteriaId" : "302FFA48-9204-4112-BF23-6182ED62F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.10",
            "matchCriteriaId" : "3D2D0CEB-437C-4ABA-9915-EFCB776E7ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.4",
            "matchCriteriaId" : "282F04F1-B4E4-4DC2-82CA-55DB39A3F373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.4",
            "matchCriteriaId" : "E14A1D06-7AB2-40C2-806F-7EE34595DAF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7w2p-rp9m-9xp9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36093",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7w2p-rp9m-9xp9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1735",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-30T20:15:06.947",
      "lastModified" : "2024-11-21T07:39:47.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this vulnerability is an unknown functionality of the file passwordrecover.php. The manipulation of the argument phonenumber leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-224623."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:young_entrepreneur_e-negosyo_system_project:young_entrepreneur_e-negosyo_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3637BBA5-1FD7-483B-83E8-98F27CA42C6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.224623",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224623",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1736",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-30T20:15:07.033",
      "lastModified" : "2024-11-21T07:39:47.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this issue is some unknown functionality of the file cart/controller.php?action=add. The manipulation of the argument PROID leads to sql injection. The identifier of this vulnerability is VDB-224624."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:young_entrepreneur_e-negosyo_system_project:young_entrepreneur_e-negosyo_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3637BBA5-1FD7-483B-83E8-98F27CA42C6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.224624",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224624",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/12684/young-entrepreneur-e-negosyo-system.html",
        "source" : "cna@vuldb.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/12684/young-entrepreneur-e-negosyo-system.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1737",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-30T20:15:07.117",
      "lastModified" : "2024-11-21T07:39:47.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument U_USERNAME leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-224625 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:young_entrepreneur_e-negosyo_system_project:young_entrepreneur_e-negosyo_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3637BBA5-1FD7-483B-83E8-98F27CA42C6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.224625",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224625",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224625",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-30T20:15:07.327",
      "lastModified" : "2026-01-15T18:49:56.967",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZCBS Zijper Collectie Beheer Systeem (ZCBS), Zijper Publication Management System (ZPBS), and Zijper Image Bank Management System (ZBBS) 4.14k is vulnerable to Cross Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zcbs:zbbs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "861FD0FA-16C9-46B9-BACD-2756FDB9FCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zcbs:zcbs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85BCE18F-E0D0-4BC4-AFBE-02FF628E53BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zcbs:zpbs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B45AB5-C406-421C-9153-E92255DEC19B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171787/ZCBS-ZBBS-ZPBS-4.14k-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigzooooz/CVE-2023-26692#readme",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171787/ZCBS-ZBBS-ZPBS-4.14k-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigzooooz/CVE-2023-26692#readme",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27533",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-03-30T20:15:07.373",
      "lastModified" : "2026-02-13T21:16:11.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-75"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.881",
            "matchCriteriaId" : "DE2FF3C2-5C80-4DD9-AACD-E458D4A6C7FE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "52DE3DFE-350F-4E83-B425-1D7D47BEF6DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.12",
            "matchCriteriaId" : "5722E753-75DE-4944-A11B-556CB299B57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.6",
            "matchCriteriaId" : "DC0F9351-81A4-4FEA-B6B5-6E960A933D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/1891474",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0011/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1891474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0011/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27534",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-03-30T20:15:07.427",
      "lastModified" : "2025-04-23T17:16:28.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.18.0",
            "versionEndIncluding" : "7.88.1",
            "matchCriteriaId" : "326E6E4E-DA6B-4794-A6EE-0060C6D965E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2748912-FC54-47F6-8C0C-B96784765B8E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.12",
            "matchCriteriaId" : "5722E753-75DE-4944-A11B-556CB299B57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.6",
            "matchCriteriaId" : "DC0F9351-81A4-4FEA-B6B5-6E960A933D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/1892351",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/03/msg00016.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0012/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1892351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/03/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0012/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27535",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-03-30T20:15:07.483",
      "lastModified" : "2025-06-09T15:15:28.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.13.0",
            "versionEndIncluding" : "7.88.1",
            "matchCriteriaId" : "9C599258-A578-454A-BB51-AC2B5C4BE0A8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD886814-B4A0-4764-9F08-2060601D8E89"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.12",
            "matchCriteriaId" : "5722E753-75DE-4944-A11B-556CB299B57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.6",
            "matchCriteriaId" : "DC0F9351-81A4-4FEA-B6B5-6E960A933D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/1892780",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0010/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1892780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27536",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-03-30T20:15:07.547",
      "lastModified" : "2025-02-14T16:15:33.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.22.0",
            "versionEndIncluding" : "7.88.1",
            "matchCriteriaId" : "1FD7CD4C-BF3D-41DD-AC3F-005FB087CE0A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A20333EE-4C13-426E-8B54-D78679D5DDB8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.12",
            "matchCriteriaId" : "5722E753-75DE-4944-A11B-556CB299B57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.6",
            "matchCriteriaId" : "DC0F9351-81A4-4FEA-B6B5-6E960A933D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/1895135",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0010/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1895135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27537",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-03-30T20:15:07.617",
      "lastModified" : "2024-11-21T07:53:07.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate \"handles\". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks, two threads sharing the same HSTS data could end up doing a double-free or use-after-free."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.88.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DDC50E-6E2E-4F49-AD48-18AAFEE7148D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:7.88.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54DA1679-739A-4C30-8C5F-81AB65B0873E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "52DE3DFE-350F-4E83-B425-1D7D47BEF6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2748912-FC54-47F6-8C0C-B96784765B8E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.12",
            "matchCriteriaId" : "5722E753-75DE-4944-A11B-556CB299B57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.6",
            "matchCriteriaId" : "DC0F9351-81A4-4FEA-B6B5-6E960A933D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/1897203",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0010/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1897203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27538",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-03-30T20:15:07.677",
      "lastModified" : "2025-06-09T15:15:29.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.16.1",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "D3ABEE9E-8E0B-4B8D-8913-D86B9CB05769"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "52DE3DFE-350F-4E83-B425-1D7D47BEF6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2748912-FC54-47F6-8C0C-B96784765B8E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.12",
            "matchCriteriaId" : "5722E753-75DE-4944-A11B-556CB299B57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.6",
            "matchCriteriaId" : "DC0F9351-81A4-4FEA-B6B5-6E960A933D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/1898475",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0010/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1898475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230420-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-30T20:15:07.733",
      "lastModified" : "2025-02-18T19:15:11.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 (Enterprise), 5.20.0 and newer (Enterprise), and 5.2020.1 and newer (Community), when Java 1.8u181 and earlier is used, allows remote attackers to load malicious code on the server once a JNDI directory scan is performed."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:payara:payara_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "4.1.2.191",
            "versionEndIncluding" : "5.0.0",
            "matchCriteriaId" : "E037FD25-7262-4915-8C15-E4F26AC2F118"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:payara:payara_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "5.20.0",
            "matchCriteriaId" : "86C0FB40-9E93-4C1D-97B2-5B006BAAF92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:payara:payara_server:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "5.2020.1",
            "matchCriteriaId" : "40196785-999A-417E-B959-0FE21CC75FD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update181:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8C0DB7-6178-4D70-B460-97A49F012560"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.payara.fish/vulnerability-affecting-server-environments-on-java-1.8-on-updates-lower-than-1.8u191",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.payara.fish/vulnerability-affecting-server-environments-on-java-1.8-on-updates-lower-than-1.8u191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28846",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-30T20:15:07.780",
      "lastModified" : "2024-11-21T07:56:08.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unpoly is a JavaScript framework for server-side web applications. There is a possible Denial of Service (DoS) vulnerability in the `unpoly-rails` gem that implements the Unpoly server protocol for Rails applications. This issues affects Rails applications that operate as an upstream of a load balancer's that uses passive health checks. The `unpoly-rails` gem echoes the request URL as an `X-Up-Location` response header. By making a request with exceedingly long URLs (paths or query string), an attacker can cause unpoly-rails to write a exceedingly large response header.  If the response header is too large to be parsed by a load balancer downstream of the Rails application, it may cause the load balancer to remove the upstream from a load balancing group. This causes that application instance to become unavailable until a configured timeout is reached or until an active healthcheck succeeds. This issue has been fixed and released as version 2.7.2.2 which is available via RubyGems and GitHub. Users unable to upgrade may: Configure your load balancer to use active health checks, e.g. by periodically requesting a route with a known response that indicates healthiness; Configure your load balancer so the maximum size of response headers is at least twice the maximum size of a URL; or instead of changing your server configuration you may also configure your Rails application to delete redundant `X-Up-Location` headers set by unpoly-rails.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unpoly:unpoly-rails:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.2",
            "matchCriteriaId" : "5C96F0D3-A1B4-496C-802A-F86FDCFC8B7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.nginx.com/nginx/admin-guide/load-balancer/http-health-check/#passive-health-checks",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/unpoly/unpoly-rails/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/unpoly/unpoly-rails/commit/cd9ad0007daceeb3b2354fdcab4f88350427bf16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/unpoly/unpoly-rails/security/advisories/GHSA-m875-3xf6-mf78",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://makandracards.com/operations/537537-nginx-proxy-buffer-tuning",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tryhexadecimal.com/guides/http/414-request-uri-too-long",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://unpoly.com/up.protocol",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.nginx.com/nginx/admin-guide/load-balancer/http-health-check/#passive-health-checks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/unpoly/unpoly-rails/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/unpoly/unpoly-rails/commit/cd9ad0007daceeb3b2354fdcab4f88350427bf16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/unpoly/unpoly-rails/security/advisories/GHSA-m875-3xf6-mf78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://makandracards.com/operations/537537-nginx-proxy-buffer-tuning",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tryhexadecimal.com/guides/http/414-request-uri-too-long",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://unpoly.com/up.protocol",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1393",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-30T21:15:06.557",
      "lastModified" : "2025-08-29T13:42:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.1.8",
            "matchCriteriaId" : "444F27A0-6E8A-40F6-9577-35C4DCB66370"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-30",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/29/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/29/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1738",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-30T21:15:06.617",
      "lastModified" : "2024-11-21T07:39:48.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0 and classified as critical. This vulnerability affects unknown code of the file index.php?q=product. The manipulation of the argument search leads to sql injection. The attack can be initiated remotely. VDB-224626 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:young_entrepreneur_e-negosyo_system_project:young_entrepreneur_e-negosyo_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3637BBA5-1FD7-483B-83E8-98F27CA42C6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.224626",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224626",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1739",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-30T21:15:06.680",
      "lastModified" : "2024-11-21T07:39:48.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0 and classified as critical. This issue affects some unknown processing of the file upload.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224627."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_and_beautiful_shopping_cart_system_project:simple_and_beautiful_shopping_cart_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65BE6CC4-4C1E-474E-8E5E-2CC672ED60B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/misak7in/cve/blob/master/simple%20and%20beautiful%20shopping%20cart%20system/simple%20and%20beautiful%20shopping%20cart%20system%20upload.php%20has%20a%20file%20upload%20vulnerability.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224627",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224627",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/misak7in/cve/blob/master/simple%20and%20beautiful%20shopping%20cart%20system/simple%20and%20beautiful%20shopping%20cart%20system%20upload.php%20has%20a%20file%20upload%20vulnerability.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1740",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-30T21:15:06.737",
      "lastModified" : "2024-11-21T07:39:48.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been classified as critical. Affected is an unknown function of the file admin/user/manage_user.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224628."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:air_cargo_management_system_project:air_cargo_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D90CD3-B8A3-4899-AFE1-43A81B5EE02C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/west9b/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224628",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224628",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/west9b/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224628",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1741",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-30T22:15:06.620",
      "lastModified" : "2024-11-21T07:39:48.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in jeecg-boot 3.5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file SysDictMapper.java of the component Sleep Command Handler. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224629 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeecg:jeecg_boot:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEDFF952-7B1F-44EB-98BA-265CB22D6FB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/private-null/report/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224629",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224629",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/private-null/report/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1742",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-30T22:15:06.677",
      "lastModified" : "2024-11-21T07:39:48.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in IBOS 4.5.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?r=report/api/getlist of the component Report Search. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-224630 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibos:ibos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.5",
            "matchCriteriaId" : "C1431BD2-EA6E-4B1C-9286-B34E91329054"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/wkstestete/cve/blob/master/sql/ibos%20sql%20injection3.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224630",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224630",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/wkstestete/cve/blob/master/sql/ibos%20sql%20injection3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1743",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-30T22:15:06.727",
      "lastModified" : "2024-11-21T07:39:48.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in SourceCodester Grade Point Average GPA Calculator 1.0. This affects an unknown part of the file index.php. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224631."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grade_point_average_\\(gpa\\)_calculator_project:grade_point_average_\\(gpa\\)_calculator:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD082A1-E13F-44F0-A661-9A246DAFCA54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Grade%20Point%20Average%20(GPA)%20Calculator%20in%20PHP%20and%20SQLite3/Grade%20Point%20Average%20(GPA)%20Calculator%20in%20PHP%20and%20SQLite3%20vlun%202.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224631",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224631",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Grade%20Point%20Average%20(GPA)%20Calculator%20in%20PHP%20and%20SQLite3/Grade%20Point%20Average%20(GPA)%20Calculator%20in%20PHP%20and%20SQLite3%20vlun%202.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224631",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25587",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-30T22:15:06.777",
      "lastModified" : "2023-11-07T04:09:02.113",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1670",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-03-30T23:15:06.413",
      "lastModified" : "2025-02-14T16:15:32.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.18",
            "versionEndExcluding" : "4.14.312",
            "matchCriteriaId" : "D34C164C-5677-4FB3-ACB0-D2A825C02A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.280",
            "matchCriteriaId" : "B8449DA5-0637-406C-99C3-84AF4CB5F3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.240",
            "matchCriteriaId" : "2C5F51A3-AEBF-4E51-AA58-D8C8B4554A86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.177",
            "matchCriteriaId" : "9FED8369-E7A1-48C6-9700-6ADEDEC371F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.105",
            "matchCriteriaId" : "0888AE70-CB0A-45C0-B9BD-A5371244C8DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.22",
            "matchCriteriaId" : "642B6F99-95C6-47F5-A9B1-5C45FE08CAD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.2.9",
            "matchCriteriaId" : "914F22DD-1E6F-4B0A-A14D-3A9F068F6761"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lore.kernel.org/all/20230316161526.1568982-1-zyytlz.wz%40163.com/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0010/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lore.kernel.org/all/20230316161526.1568982-1-zyytlz.wz%40163.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1744",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-30T23:15:06.463",
      "lastModified" : "2024-11-21T07:39:48.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in IBOS 4.5.5. This vulnerability affects unknown code of the component htaccess Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224632."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibos:ibos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.5",
            "matchCriteriaId" : "C1431BD2-EA6E-4B1C-9286-B34E91329054"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/xieqiangweb/cve/blob/master/cve/IBOS%20oa%20v4.5.5%20upload.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224632",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224632",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/xieqiangweb/cve/blob/master/cve/IBOS%20oa%20v4.5.5%20upload.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224632",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1745",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-30T23:15:06.520",
      "lastModified" : "2024-11-21T07:39:49.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in KMPlayer 4.2.2.73. This issue affects some unknown processing in the library SHFOLDER.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-224633 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pandora:kmplayer:4.2.2.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06245D8C-E271-4184-AB85-E7F02FAE213A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1bdYaDmtWhnjaHkzv3bZ4PUSMzDJ8JjSV/view",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/KMPlayer_Poc",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224633",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224633",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/7bh2BQOqxFo",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/file/d/1bdYaDmtWhnjaHkzv3bZ4PUSMzDJ8JjSV/view",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/KMPlayer_Poc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/7bh2BQOqxFo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1746",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-30T23:15:06.583",
      "lastModified" : "2025-04-04T15:15:06.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in Dreamer CMS up to 3.5.0. Affected is an unknown function of the component File Upload Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB-224634 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iteachyou:dreamer_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.5.0",
            "matchCriteriaId" : "CFBCDBF8-7F0C-44D7-A8BB-FE3306EB234C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/iteachyou-wjn/dreamer_cms/issues/11",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224634",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224634",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/iteachyou-wjn/dreamer_cms/issues/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1747",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-31T00:15:06.373",
      "lastModified" : "2024-11-21T07:39:49.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in IBOS up to 4.5.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /?r=email/api/mark&op=delFromSend. The manipulation of the argument emailids leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.5.5 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-224635."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibos:ibos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.4",
            "matchCriteriaId" : "EAF395FD-2074-4E4D-8E49-23DC6F2301A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/wkstestete/cve/blob/master/sql/ibos%20sql%20injection.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224635",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224635",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/wkstestete/cve/blob/master/sql/ibos%20sql%20injection.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1753",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-31T01:15:09.160",
      "lastModified" : "2024-11-21T07:39:49.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/f612a72494080e04947da7028340fee4493fe8a5",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/01d6ae23-3a8f-42a8-99f4-10246187d71b",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/f612a72494080e04947da7028340fee4493fe8a5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/01d6ae23-3a8f-42a8-99f4-10246187d71b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1754",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-31T01:15:09.247",
      "lastModified" : "2024-11-21T07:39:50.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/d773df925cb74e874527458beed1f66f966ec491",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/529f2361-eb2e-476f-b7ef-4e561a712e28",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/d773df925cb74e874527458beed1f66f966ec491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/529f2361-eb2e-476f-b7ef-4e561a712e28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1755",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-31T01:15:09.330",
      "lastModified" : "2024-11-21T07:39:50.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/2156573100fd3abf4c65270def77aed20ffc8994",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/882ffa07-5397-4dbb-886f-4626859d711a",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/2156573100fd3abf4c65270def77aed20ffc8994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/882ffa07-5397-4dbb-886f-4626859d711a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1759",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-31T02:15:06.570",
      "lastModified" : "2024-11-21T07:39:50.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/ecbd8107fe954b6be95dab315862d1caa0b94efa",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e8109aed-d364-4c0c-9545-4de0347b10e1",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/ecbd8107fe954b6be95dab315862d1caa0b94efa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e8109aed-d364-4c0c-9545-4de0347b10e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1760",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-31T02:15:06.643",
      "lastModified" : "2024-11-21T07:39:50.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/56295b54062a284020fccce12a5044f9fa7d2770",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2d0ac48a-490d-4548-8d98-7447042dd1b5",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/56295b54062a284020fccce12a5044f9fa7d2770",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2d0ac48a-490d-4548-8d98-7447042dd1b5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1761",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-31T02:15:06.703",
      "lastModified" : "2024-11-21T07:39:50.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/128ef85f8e3ab7869d3107aa4d0b6867b53391d7",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/24c0a65f-0751-4ff8-af63-4b325ac8879f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/128ef85f8e3ab7869d3107aa4d0b6867b53391d7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/24c0a65f-0751-4ff8-af63-4b325ac8879f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1762",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-03-31T02:15:06.750",
      "lastModified" : "2024-11-21T07:39:51.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/ae6c1d8c3eab05d6e2227c7a9998707f4f891514",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3c2374cc-7082-44b7-a6a6-ccff7a650a3a",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/ae6c1d8c3eab05d6e2227c7a9998707f4f891514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3c2374cc-7082-44b7-a6a6-ccff7a650a3a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T04:15:09.037",
      "lastModified" : "2025-11-04T18:15:40.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:uri:*:*:*:*:*:ruby:*:*",
            "versionEndIncluding" : "0.10.0",
            "matchCriteriaId" : "ADDFECF7-5F46-498B-9862-55DA03C8F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:uri:0.10.1:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "9AEC0027-E0D8-4E68-BDFC-6FAEFF01FEEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:uri:0.11.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "3D764446-C057-4529-B486-CA7C9D38E48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:uri:0.12.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "8C229D83-75B1-4874-B2A9-764FBA12C517"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ruby/uri/releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFZANOQA4RYX7XCB42OO3P24DQKWHEKA/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G76GZG3RAGYF4P75YY7J7TGYAU7Z5E2T/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QA6XUKUY7B5OLNQBLHOT43UW7C5NIOQQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMIOPLBAAM3FEQNAXA2L7BDKOGSVUT5Z/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202401-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/downloads/releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ruby/uri/releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFZANOQA4RYX7XCB42OO3P24DQKWHEKA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G76GZG3RAGYF4P75YY7J7TGYAU7Z5E2T/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QA6XUKUY7B5OLNQBLHOT43UW7C5NIOQQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMIOPLBAAM3FEQNAXA2L7BDKOGSVUT5Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202401-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/downloads/releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T04:15:09.090",
      "lastModified" : "2025-11-04T17:15:36.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.7",
            "matchCriteriaId" : "6AFF74E1-5365-4D53-9D5A-B61F9DF2BA6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:time:0.1.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "209A0CC6-4BC5-4794-B71A-3C7AC6C5AF91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:time:0.2.1:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "AE1F88CA-F758-4984-B132-7C0E944D92D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ruby/time/releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFZANOQA4RYX7XCB42OO3P24DQKWHEKA/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G76GZG3RAGYF4P75YY7J7TGYAU7Z5E2T/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMIOPLBAAM3FEQNAXA2L7BDKOGSVUT5Z/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202401-27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0004/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/downloads/releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ruby/time/releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFZANOQA4RYX7XCB42OO3P24DQKWHEKA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G76GZG3RAGYF4P75YY7J7TGYAU7Z5E2T/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMIOPLBAAM3FEQNAXA2L7BDKOGSVUT5Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202401-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/downloads/releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28726",
      "sourceIdentifier" : "product-security@gg.jp.panasonic.com",
      "published" : "2023-03-31T07:15:06.503",
      "lastModified" : "2025-02-12T15:15:11.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Panasonic AiSEG2 versions 2.80F through 2.93A allows remote attackers to execute arbitrary OS commands."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@gg.jp.panasonic.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:panasonic:aiseg2_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.80f",
            "versionEndIncluding" : "2.93a",
            "matchCriteriaId" : "6FFA2BF9-5426-4E57-99C9-7F2A99B25E7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:panasonic:aiseg2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F9BFAD-9968-40B5-922B-FF12316BF63E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www2.panasonic.biz/jp/densetsu/aiseg/firmup_info.html",
        "source" : "product-security@gg.jp.panasonic.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www2.panasonic.biz/jp/densetsu/aiseg/firmup_info.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28727",
      "sourceIdentifier" : "product-security@gg.jp.panasonic.com",
      "published" : "2023-03-31T07:15:06.687",
      "lastModified" : "2025-02-12T15:15:11.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@gg.jp.panasonic.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:panasonic:aiseg2_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.00j",
            "versionEndIncluding" : "2.93a",
            "matchCriteriaId" : "9AF6EF9B-8C4D-4056-AF49-95D2CEC1162D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:panasonic:aiseg2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F9BFAD-9968-40B5-922B-FF12316BF63E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www2.panasonic.biz/jp/densetsu/aiseg/firmup_info.html",
        "source" : "product-security@gg.jp.panasonic.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www2.panasonic.biz/jp/densetsu/aiseg/firmup_info.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1258",
      "sourceIdentifier" : "cybersecurity@ch.abb.com",
      "published" : "2023-03-31T08:15:06.397",
      "lastModified" : "2025-02-13T17:15:57.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allows Footprinting.This issue affects Flow-X: before 4.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@ch.abb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@ch.abb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:flow-x\\/m_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.6",
            "matchCriteriaId" : "1DCEC272-343C-4D88-9ED6-A3D5DC25A2FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:flow-x\\/m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61233B04-F1F2-4C5B-A260-460D30CFC162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:flow-x\\/c_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.6",
            "matchCriteriaId" : "406419A5-33DC-489D-A3DC-2736C8C788B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:flow-x\\/c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F273C0-E67E-4F69-8F2C-D3F498755DDA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:flow-x\\/k_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.6",
            "matchCriteriaId" : "1A769914-724B-4D91-BF2C-A646EA0FF1A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:flow-x\\/k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2824256-84EE-45A6-9794-10F4AA580D11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:flow-x\\/s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.6",
            "matchCriteriaId" : "7C079FE6-59A6-4220-B7FE-7AA47244C39C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:flow-x\\/s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15B144BE-2159-48A9-A097-599BDE51E8B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:flow-x\\/p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.6",
            "matchCriteriaId" : "794E908F-D650-4E92-898E-A4FCAD199744"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:flow-x\\/p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7823F0-C4B5-4A8F-8429-58CE14E46CE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:flow-x_r_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.6",
            "matchCriteriaId" : "C75BB6AE-9113-43AA-AAAC-5D0CE4160F69"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:flow-x_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5A008E-37C8-46A4-AD6C-3E8BCD555B79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:flow-x\\/t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.6",
            "matchCriteriaId" : "2C3CD012-F79D-4D51-85B2-90F10C11E5BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:flow-x\\/t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C96DF884-7DF2-46AB-B5C5-6BB301B030C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:abb:flow-x\\/web_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.6",
            "matchCriteriaId" : "1845A152-6B8A-4B12-82BB-0CBE39D8738E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:abb:flow-x\\/web:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F9782F-E7B8-45FC-8CBD-316ED3A7D37E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/173610/ABB-FlowX-4.00-Information-Disclosure.html",
        "source" : "cybersecurity@ch.abb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A9754&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "cybersecurity@ch.abb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173610/ABB-FlowX-4.00-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A9754&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1060",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-03-31T10:15:06.660",
      "lastModified" : "2024-11-21T07:38:22.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YKM YKM CRM allows Reflected XSS.This issue affects YKM CRM: before 23.03.30.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ykmbilisim:ykm_crm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.03.30",
            "matchCriteriaId" : "310BEB7A-1613-4463-B4A8-E8EB23698BFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0189",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1769",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-31T11:15:06.847",
      "lastModified" : "2024-11-21T07:39:52.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in SourceCodester Grade Point Average GPA Calculator 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page with the input php://filter/read=convert.base64-encode/resource=grade_table leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-224670 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grade_point_average_\\(gpa\\)_calculator_project:grade_point_average_\\(gpa\\)_calculator:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD082A1-E13F-44F0-A661-9A246DAFCA54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Pe4cefulSnow/CVE-Advisory/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224670",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224670",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Pe4cefulSnow/CVE-Advisory/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1770",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-31T12:15:06.433",
      "lastModified" : "2024-11-21T07:39:52.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as critical. Affected by this vulnerability is the function get_scale of the file Master.php. The manipulation of the argument perc leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224671."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grade_point_average_\\(gpa\\)_calculator_project:grade_point_average_\\(gpa\\)_calculator:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD082A1-E13F-44F0-A661-9A246DAFCA54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Pe4cefulSnow/SQL-Injection/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224671",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224671",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Pe4cefulSnow/SQL-Injection/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1771",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-31T12:15:06.497",
      "lastModified" : "2024-11-21T07:39:52.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as problematic. Affected by this issue is the function get_scale of the file Master.php. The manipulation of the argument perc leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224672."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grade_point_average_\\(gpa\\)_calculator_project:grade_point_average_\\(gpa\\)_calculator:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD082A1-E13F-44F0-A661-9A246DAFCA54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Grade%20Point%20Average%20(GPA)%20Calculator%20in%20PHP%20and%20SQLite3/Grade%20Point%20Average%20(GPA)%20Calculator%20in%20PHP%20and%20SQLite3%20vlun%201.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224672",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224672",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Grade%20Point%20Average%20(GPA)%20Calculator%20in%20PHP%20and%20SQLite3/Grade%20Point%20Average%20(GPA)%20Calculator%20in%20PHP%20and%20SQLite3%20vlun%201.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1772",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-31T12:15:06.553",
      "lastModified" : "2024-11-21T07:39:52.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in DataGear up to 4.5.1. It has been classified as problematic. This affects an unknown part of the component Diagram Type Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224673 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datagear:datagear:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.1",
            "matchCriteriaId" : "4F00AF95-2684-4B32-81F7-3FBEBE908314"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yangyanglo/ForCVE/blob/main/2023-0x02.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224673",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224673",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yangyanglo/ForCVE/blob/main/2023-0x02.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1773",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-31T12:15:06.600",
      "lastModified" : "2024-11-21T07:39:52.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfig.php of the component Configuration File Handler. The manipulation leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224674 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockoa:rockoa:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6955DED7-BC72-45EC-A056-B4119E6E4B92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/galaxies2580/cve/blob/master/xinhuv2.3.2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224674",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224674",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/galaxies2580/cve/blob/master/xinhuv2.3.2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1774",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2023-03-31T12:15:06.650",
      "lastModified" : "2024-11-21T07:39:52.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When processing an email invite to a private channel on a team, Mattermost fails to validate the inviter's permission to that channel, allowing an attacker to invite themselves to a private channel.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.6",
            "matchCriteriaId" : "68480D55-9BBC-46E3-8DE9-A2F13F2F8853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8E1831-9267-467F-A646-84052F0A3FAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1775",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2023-03-31T12:15:06.700",
      "lastModified" : "2024-11-21T07:39:53.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When running in a High Availability configuration, Mattermost fails to sanitize some of the user_updated and post_deleted events broadcast to all users, leading to disclosure of sensitive information to some of the users with currently connected Websocket clients.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.6",
            "matchCriteriaId" : "68480D55-9BBC-46E3-8DE9-A2F13F2F8853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8E1831-9267-467F-A646-84052F0A3FAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1776",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2023-03-31T12:15:06.750",
      "lastModified" : "2024-11-21T07:39:53.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Boards in Mattermost allows an attacker to upload a malicious SVG image file as an attachment to a card and share it using a direct link to the file.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.6",
            "matchCriteriaId" : "68480D55-9BBC-46E3-8DE9-A2F13F2F8853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8E1831-9267-467F-A646-84052F0A3FAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1777",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2023-03-31T12:15:06.803",
      "lastModified" : "2024-11-21T07:39:53.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mattermost allows an attacker to request a preview of an existing message when creating a new message via the createPost API call, disclosing the contents of the linked message.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.6",
            "matchCriteriaId" : "68480D55-9BBC-46E3-8DE9-A2F13F2F8853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:7.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8E1831-9267-467F-A646-84052F0A3FAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:7.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F76672DF-2ABD-4C95-A7CB-65AC3AA3F2C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0343",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-31T16:15:07.227",
      "lastModified" : "2024-11-21T07:37:00.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Akuvox E11 contains a function that encrypts messages which are then forwarded. The IV vector and the key are static, and this may allow an attacker to decrypt messages."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:akuvox:e11_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886F7330-EE01-4F57-9B7F-5DA6892C0347"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:akuvox:e11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2632D9FC-4B1E-4B2F-B06B-55EAEFA6D6D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0344",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-31T16:15:07.313",
      "lastModified" : "2024-11-21T07:37:00.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Akuvox E11 appears to be using a custom version of dropbear SSH server. This server allows an insecure option that by default is not in the official dropbear SSH server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:akuvox:e11_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB9ACE6-0CE7-4237-8CF5-06C46500C329"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:akuvox:e11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2632D9FC-4B1E-4B2F-B06B-55EAEFA6D6D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0432",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-03-31T16:15:07.390",
      "lastModified" : "2025-01-17T18:15:19.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nThe web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the operating system (OS) from the device in the context of the user \"root.\" If the attacker has credentials for the web service, then the device could be fully compromised.\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:deltaww:dx-2100l1-cn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0.12",
            "matchCriteriaId" : "0CE4CEE9-0BBA-46C8-86B8-5B359A8DFD69"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:deltaww:dx-2100l1-cn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D28DA6F-3823-4B64-A3C9-58DD55E4DCA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-033-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-033-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T16:15:07.457",
      "lastModified" : "2025-02-18T17:15:15.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gladinet:centrestack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.5.9808",
            "matchCriteriaId" : "DB3D37EC-EE45-4180-85C0-966E004C738F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.whiteoaksecurity.com/blog/centrestack-disclosure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.whiteoaksecurity.com/blog/centrestack-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T16:15:07.507",
      "lastModified" : "2025-02-18T17:15:16.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to the server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gladinet:centrestack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.5.9808",
            "matchCriteriaId" : "DB3D37EC-EE45-4180-85C0-966E004C738F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.whiteoaksecurity.com/blog/centrestack-disclosure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whiteoaksecurity.com/blog/centrestack-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T16:15:07.557",
      "lastModified" : "2024-11-21T07:55:08.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a double free that may lead to privilege escalation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1.25:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF27CF3-0CF3-49C5-B2FB-122DE725DFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72352E44-DFB4-4C71-81F3-55924B2B7CF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "21D6F467-B848-453E-B1A4-BEF940E413A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F0FC3-CE52-4BA1-BA51-22F783938431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "3583026A-27EC-4A4C-850A-83F2AF970673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "DC271202-7570-4505-89A4-D602D47BFD00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D413BB6D-4F74-4C7D-9163-47786619EF53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D613FB-9976-4989-8C4A-567773373CEA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lore.kernel.org/lkml/20230309074645.74309-1-wzhmmmmm%40gmail.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0004/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/28/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/28/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lore.kernel.org/lkml/20230309074645.74309-1-wzhmmmmm%40gmail.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/28/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/28/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28862",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T17:15:06.620",
      "lastModified" : "2025-02-14T20:15:33.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the AuthBasic handler and incorrect failure handling during a password check allow attackers to bypass 2FA verification. Any plugin that tries to deny session creation after the store step does not deny an AuthBasic session."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lemonldap-ng:lemonldap\\:\\:ng:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.1",
            "matchCriteriaId" : "1AED6FB4-65BD-464B-BEB2-58890CB4ED36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2896",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/releases/v2.16.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/07/msg00018.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/releases/v2.16.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/07/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T17:15:06.660",
      "lastModified" : "2025-02-14T20:15:33.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VTEX apps-graphql@2.x GraphQL API module does not properly restrict unauthorized access to private configuration data. (apps-graphql@3.x is unaffected by this issue.)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vtex:apps-graphql:2.x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A892FB06-048C-439B-AB03-688667DAE860"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developers.vtex.com/updates/release-notes/deprecation-of-apps-graphql%402.x",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://developers.vtex.com/updates/release-notes/deprecation-of-apps-graphql%402.x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T17:15:06.697",
      "lastModified" : "2025-02-14T20:15:33.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written."
      }, {
        "lang" : "es",
        "value" : "En Artifex Ghostscript hasta la versión 10.01.0, hay un desbordamiento de búfer que puede corromper los datos internos del intérprete PostScript, en base/sbcp.c. Esto afecta a BCPEncode, BCPDecode, TBCPEncode y TBCPDecode. Si el búfer de escritura se llena hasta un byte menos de su capacidad, y se intenta escribir un carácter escapado, se escriben dos bytes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.01.0",
            "matchCriteriaId" : "1147359D-C791-4817-B5FA-20BF3DB10FC5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/12/4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=706494",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://ghostscript.readthedocs.io/en/latest/News.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=37ed5022cecd584de868933b5b60da2e995b3179",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CI6UCKM3XMK7PYNIRGAVDJ5VKN6XYZOE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DHJX62KSRIOBZA6FKONMJP7MEFY7LTH2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MADLP3GWJFLLFVNZGEDNPMDQR6CCXAHN/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-03",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5383",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/12/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=706494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://ghostscript.readthedocs.io/en/latest/News.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=37ed5022cecd584de868933b5b60da2e995b3179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CI6UCKM3XMK7PYNIRGAVDJ5VKN6XYZOE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DHJX62KSRIOBZA6FKONMJP7MEFY7LTH2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MADLP3GWJFLLFVNZGEDNPMDQR6CCXAHN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5383",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28843",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-31T18:15:07.093",
      "lastModified" : "2024-11-21T07:56:08.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrestaShop/paypal is an open source module for the PrestaShop web commerce ecosystem which provides paypal payment support. A SQL injection vulnerability found in the PrestaShop paypal module from release from 3.12.0 to and including 3.16.3 allow a remote attacker to gain privileges, modify data, and potentially affect system availability. The cause of this issue is that SQL queries were being constructed with user input which had not been properly filtered. Only deployments on PrestaShop 1.6 are affected. Users are advised to upgrade to module version 3.16.4. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:202-ecommerce:paypal:*:*:*:*:*:prestashop:*:*",
            "versionStartIncluding" : "3.12.0",
            "versionEndExcluding" : "3.16.4",
            "matchCriteriaId" : "25A2149B-EE06-4764-A1B4-B19A7E9180DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/202ecommerce/paypal/commit/2f6884ea1d0fe4b58441699fcc1d6c56c7d733eb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/202ecommerce/paypal/security/advisories/GHSA-66pc-8gh8-mx7m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/202ecommerce/paypal/commit/2f6884ea1d0fe4b58441699fcc1d6c56c7d733eb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/202ecommerce/paypal/security/advisories/GHSA-66pc-8gh8-mx7m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T19:15:07.187",
      "lastModified" : "2025-02-18T18:15:14.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-u724_r2 provides remote unauthenticated attackers with access to execute commands intended only for valid/authenticated users, such as file uploads and configuration changes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sato-global:cl4nx_plus_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13.3-u724_r2",
            "matchCriteriaId" : "0F089FDA-FA61-4765-A9CD-C177BB4F5C72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sato-global:cl4nx_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "640A8A07-5847-48DA-90DE-56352FDC8C3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://d2n1rly8br52rx.cloudfront.net/content-blocks/files/pages/Vulnerability-Disclosure.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackandpwn.com/disclosures/CVE-2023-23594.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.satoamerica.com/products/printers/industrial-thermal-printers/cl4nx-plus",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://d2n1rly8br52rx.cloudfront.net/content-blocks/files/pages/Vulnerability-Disclosure.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackandpwn.com/disclosures/CVE-2023-23594.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.satoamerica.com/products/printers/industrial-thermal-printers/cl4nx-plus",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T19:15:07.230",
      "lastModified" : "2025-02-18T16:15:14.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted network request can lead to the disclosure of sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-882_firmware:1.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4999F85F-97FB-4FCD-94AB-16F8B2227B2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-882:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6ECB8ED-F3A2-4C05-8570-719ECB166B09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/laotun-s/POC/blob/main/CVE-2023-26925.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/laotun-s/POC/blob/main/CVE-2023-26925.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T19:15:07.273",
      "lastModified" : "2025-02-18T15:15:13.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:appwrite:appwrite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "30129B88-F271-4DED-8468-630A00F9EE3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://appwrite.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/43b26c31e895baf7e7aea2dbf9743a9a",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/e9e8192317c111e7897e04d2f9bf5fdb",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/appwrite/appwrite",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://notes.sjtu.edu.cn/gMNlpByZSDiwrl9uZyHTKA",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://appwrite.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/43b26c31e895baf7e7aea2dbf9743a9a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/e9e8192317c111e7897e04d2f9bf5fdb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/appwrite/appwrite",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://notes.sjtu.edu.cn/gMNlpByZSDiwrl9uZyHTKA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T19:15:07.320",
      "lastModified" : "2025-02-18T17:15:16.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forem:forem:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2022.11.11",
            "matchCriteriaId" : "EA46A77A-A76F-42D8-B090-8EB1DD71B307"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://forem.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/6172286862a4486b5888f3cbbdc6316d",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/forem/forem",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://notes.sjtu.edu.cn/s/MUUhEymt7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://forem.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/6172286862a4486b5888f3cbbdc6316d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/forem/forem",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://notes.sjtu.edu.cn/s/MUUhEymt7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/6172286862a4486b5888f3cbbdc6316d",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T19:15:07.430",
      "lastModified" : "2025-02-14T20:15:33.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. The UserImpactHandler for GrowthExperiments inadvertently returns the timezone preference for arbitrary users, which can be used to de-anonymize users."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.39.3",
            "matchCriteriaId" : "DEA20A42-6E1A-4DA2-8869-A49894256285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://phabricator.wikimedia.org/T328643",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T328643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T19:15:07.470",
      "lastModified" : "2025-02-14T20:15:33.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. When a user with checkuserlog permissions makes many CheckUserLog API requests in some configurations, denial of service can occur (RequestTimeoutException or upstream request timeout)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.39.3",
            "matchCriteriaId" : "DEA20A42-6E1A-4DA2-8869-A49894256285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://phabricator.wikimedia.org/T326293",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T326293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T326293",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T19:15:07.503",
      "lastModified" : "2025-02-18T16:15:15.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. Attackers might be able to see edits for which the username has been hidden, because there is no check for rev_deleted."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.39.3",
            "matchCriteriaId" : "DEA20A42-6E1A-4DA2-8869-A49894256285"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://phabricator.wikimedia.org/T327613",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T327613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T19:15:07.540",
      "lastModified" : "2025-02-18T16:15:16.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.35.10",
            "matchCriteriaId" : "A8E6856E-CA34-4C76-AC91-0D5B6D01B4BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.36.0",
            "versionEndExcluding" : "1.38.6",
            "matchCriteriaId" : "35C2A5F3-02E4-424F-A839-CF2C9E25A6ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.39.0",
            "versionEndExcluding" : "1.39.3",
            "matchCriteriaId" : "830D156B-2E4E-4CC4-B29B-D166216B1ACA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_39/RELEASE-NOTES-1.39",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/08/msg00029.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ONWHGOBFD6CQAEGOP5O375XAP2N6RUHT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGK4NZPIJ5ET2ANRZOUYPCRIB5I64JR7/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://phabricator.wikimedia.org/T285159",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5447",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_39/RELEASE-NOTES-1.39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/08/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ONWHGOBFD6CQAEGOP5O375XAP2N6RUHT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGK4NZPIJ5ET2ANRZOUYPCRIB5I64JR7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://phabricator.wikimedia.org/T285159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://phabricator.wikimedia.org/T285159",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1784",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-31T20:15:07.277",
      "lastModified" : "2024-11-21T07:39:53.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in jeecg-boot 3.5.0 and classified as critical. This issue affects some unknown processing of the component API Documentation. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224699."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jeecg:jeecg_boot:3.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEDFF952-7B1F-44EB-98BA-265CB22D6FB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://note.youdao.com/ynoteshare/index.html?id=7eb8fc804ea3544d8add43749a09173e",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224699",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224699",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://note.youdao.com/ynoteshare/index.html?id=7eb8fc804ea3544d8add43749a09173e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1785",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-03-31T20:15:07.333",
      "lastModified" : "2024-11-21T07:39:54.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as critical. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-224700."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:earnings_and_expense_tracker_app_project:earnings_and_expense_tracker_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D10ECCE-7EF3-48CA-83AE-14390AEB502E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/web-zxl/img/blob/main/4.png",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224700",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224700",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/web-zxl/img/blob/main/4.png",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26858",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T20:15:07.397",
      "lastModified" : "2025-02-18T17:15:16.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability found in PrestaSHp faqs v.3.1.6 allows a remote attacker to escalate privileges via the faqsBudgetModuleFrontController::displayAjaxGenerateBudget component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myprestamodules:frequently_asked_questions_page:3.1.6:*:*:*:*:prestashop:*:*",
            "matchCriteriaId" : "67997C2F-E17A-4D13-9FB0-E00909E8EF62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://addons.prestashop.com/en/faq-frequently-asked-questions/16036-frequently-asked-questions-faq-page.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/03/28/faqs.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://addons.prestashop.com/en/faq-frequently-asked-questions/16036-frequently-asked-questions-faq-page.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/03/28/faqs.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T20:15:07.437",
      "lastModified" : "2025-02-18T17:15:17.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen/clients/{language}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openapi-generator:openapi_generator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4.0",
            "matchCriteriaId" : "772A8BE0-7521-4332-8624-D713FD9FA00F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openapi-generator.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/6121210ebd9efd4f693c73b830d8ab08",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenAPITools/openapi-generator",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://notes.sjtu.edu.cn/s/2_yki_2Xq",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://openapi-generator.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/6121210ebd9efd4f693c73b830d8ab08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenAPITools/openapi-generator",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://notes.sjtu.edu.cn/s/2_yki_2Xq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/6121210ebd9efd4f693c73b830d8ab08",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-03-31T20:15:07.477",
      "lastModified" : "2025-02-18T16:15:14.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rbaskets:request_baskets:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "6F9A0E07-A103-4F6C-B7DF-DD0AF9049337"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/174128/Request-Baskets-1.2.1-Server-Side-Request-Forgery.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/174129/Maltrail-0.53-Remote-Code-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://request-baskets.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Product" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/3079c10c88cad379fb166c389ce3b7b3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/darklynx/request-baskets",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://notes.sjtu.edu.cn/s/MUUhEymt7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/174128/Request-Baskets-1.2.1-Server-Side-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/174129/Maltrail-0.53-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://request-baskets.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Product" ]
      }, {
        "url" : "https://gist.github.com/b33t1e/3079c10c88cad379fb166c389ce3b7b3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/darklynx/request-baskets",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://notes.sjtu.edu.cn/s/MUUhEymt7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24824",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-31T23:15:07.153",
      "lastModified" : "2024-11-21T07:48:28.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity issues when parsing text which leads with either large numbers of `>` or `-` characters. This issue has been addressed in version 0.29.0.gfm.10. Users are advised to upgrade. Users unable to upgrade should validate that their input comes from trusted sources."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-407"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:cmark-gfm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.29.0.gfm.10.",
            "matchCriteriaId" : "D388F6C5-34DD-4C62-9D86-0E10F97FC4EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/github/cmark-gfm/commit/2300c1bd2c8226108885bf019655c4159cf26b59",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/github/cmark-gfm/security/advisories/GHSA-66g8-4hjf-77xh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/github/cmark-gfm/commit/2300c1bd2c8226108885bf019655c4159cf26b59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/github/cmark-gfm/security/advisories/GHSA-66g8-4hjf-77xh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26485",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-31T23:15:07.250",
      "lastModified" : "2024-11-21T07:51:36.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity issues when parsing text which leads with either large numbers of `_` characters. This issue has been addressed in version 0.29.0.gfm.10. Users are advised to upgrade. Users unable to upgrade should validate that their input comes from trusted sources.\n\n\n\n\n### Impact\n\nA polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service.\n\n### Proof of concept\n\n```\n$ ~/cmark-gfm$ python3 -c 'pad = \"_\" * 100000; print(pad + \".\" + pad, end=\"\")' | time ./build/src/cmark-gfm --to plaintext\n```\n\nIncreasing the number 10000 in the above commands causes the running time to increase quadratically.\n\n### Patches\n\nThis vulnerability have been patched in 0.29.0.gfm.10.\n\n### Note on cmark and cmark-gfm\n\nXXX: TBD\n\n[cmark-gfm](https://github.com/github/cmark-gfm) is a fork of [cmark](https://github.com/commonmark/cmark) that adds the GitHub Flavored Markdown extensions. The two codebases have diverged over time, but share a common core. These bugs affect both `cmark` and `cmark-gfm`. \n\n### Credit\n\nWe would like to thank @gravypod for reporting this vulnerability.\n\n### References\n\nhttps://en.wikipedia.org/wiki/Time_complexity\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [github/cmark-gfm](https://github.com/github/cmark-gfm)\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-407"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:cmark-gfm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.29.0.gfm.10",
            "matchCriteriaId" : "E3CE1A70-0583-4858-9DA3-7A4E9717FE3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/github/cmark-gfm/commit/07a66c9bc341f902878e37d7da8647d6ef150987",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/github/cmark-gfm/security/advisories/GHSA-r8vr-c48j-fcc5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/github/cmark-gfm/commit/07a66c9bc341f902878e37d7da8647d6ef150987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/github/cmark-gfm/security/advisories/GHSA-r8vr-c48j-fcc5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28645",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-31T23:15:07.397",
      "lastModified" : "2024-11-21T07:55:43.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud richdocuments is a Nextcloud app integrating the office suit Collabora Online. In affected versions the secure view feature of the rich documents app can be bypassed by using unprotected internal API endpoint of the rich documents app. It is recommended that the Nextcloud Office app (richdocuments) is upgraded to 8.0.0-beta.1, 7.0.2 or 6.3.2. Users unable to upgrade may mitigate the issue by taking steps to restrict the ability to download documents. This includes ensuring that the `WOPI configuration` is configured to only serve documents between Nextcloud and Collabora. It is highly recommended to define the list of Collabora server IPs as the allow list within the Office admin settings of Nextcloud."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:richdocuments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.3.2",
            "matchCriteriaId" : "EA0BC53B-B9D9-467A-A58D-D2B41CEF0327"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:richdocuments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.2",
            "matchCriteriaId" : "7B7DAD1E-149D-4664-8B3A-492DA170CB69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.nextcloud.com/server/latest/admin_manual/office/configuration.html#wopi-settings",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/nextcloud/richdocuments/pull/2604",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-95j6-p5cj-5hh5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.nextcloud.com/server/latest/admin_manual/office/configuration.html#wopi-settings",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/nextcloud/richdocuments/pull/2604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-95j6-p5cj-5hh5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28844",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-31T23:15:07.467",
      "lastModified" : "2024-11-21T07:56:08.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud server is an open source home cloud implementation. In affected versions users that should not be able to download a file can still download an older version and use that for uncontrolled distribution. This issue has been addressed in versions 24.0.10 and 25.0.4. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.4",
            "versionEndExcluding" : "24.0.10",
            "matchCriteriaId" : "9C8F9D99-4E5C-465C-B159-1C8539F6DD50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.4",
            "matchCriteriaId" : "79F00330-43E1-4509-B76B-8D410E53FC51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-w47p-f66h-h2vj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36113",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-w47p-f66h-h2vj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28845",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-03-31T23:15:07.533",
      "lastModified" : "2024-11-21T07:56:08.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud talk is a video & audio conferencing app for Nextcloud. In affected versions the talk app does not properly filter access to a conversations member list. As a result an attacker could use this vulnerability to gain information about the members of a Talk conversation, even if they themselves are not members. It is recommended that the Nextcloud Talk is upgraded to 14.0.9 or 15.0.4. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:talk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.0.9",
            "matchCriteriaId" : "63F79F95-3A0B-4628-B84E-1FD4A680136E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:talk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.0.4",
            "matchCriteriaId" : "F94C5DA0-430B-42B1-9FCC-C8D6A533F414"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3m6r-479j-4chf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/spreed/pull/8651",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3m6r-479j-4chf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/spreed/pull/8651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1789",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-01T02:15:07.203",
      "lastModified" : "2024-11-21T07:39:54.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firefly-iii:firefly_iii:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7.18",
            "matchCriteriaId" : "9FBE25F1-2ED5-4575-9027-AFDBB23E5C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firefly-iii:firefly_iii:5.8.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "67EA0D9B-349C-4AE4-B747-658A85A90801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firefly-iii:firefly_iii:6.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2597736-BA8C-489E-91B6-80EB9010CF4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firefly-iii:firefly_iii:6.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "020B0289-B89A-470E-83E0-FD47D6C93F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firefly-iii:firefly_iii:6.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7A2308-6695-4162-9DF9-8FAE1679DA47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/firefly-iii/firefly-iii/commit/6b05c0fbd3e8c40ae9b24dc2698821786fccf0c5",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2c3489f7-6b84-48f8-9368-9cea67cf373d",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/firefly-iii/firefly-iii/commit/6b05c0fbd3e8c40ae9b24dc2698821786fccf0c5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2c3489f7-6b84-48f8-9368-9cea67cf373d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0208",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T04:15:08.813",
      "lastModified" : "2024-11-21T07:36:45.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nNVIDIA DCGM for Linux contains a vulnerability in HostEngine (server component) where a user may cause a heap-based buffer overflow through the bound socket. A successful exploit of this vulnerability may lead to denial of service and data tampering.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:data_center_gpu_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "6004FF3B-3002-4D29-8151-5FE9614D6F08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5453",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0180",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:07.160",
      "lastModified" : "2024-11-21T07:36:41.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Linux contains a vulnerability in a kernel mode layer handler, which may lead to denial of service or information disclosure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0181",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:07.713",
      "lastModified" : "2024-11-21T07:36:41.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a kernel mode layer handler, where memory permissions are not correctly checked, which may lead to denial of service and data tampering."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-280"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0182",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:07.787",
      "lastModified" : "2024-11-21T07:36:42.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service, information disclosure, and data tampering."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0183",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:07.867",
      "lastModified" : "2024-11-21T07:36:42.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an out-of-bounds write can lead to denial of service and data tampering."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0185",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:07.927",
      "lastModified" : "2024-11-21T07:36:42.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescasting an unsigned primitive to signed may lead to denial of service or information disclosure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-196"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0186",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:07.993",
      "lastModified" : "2024-11-21T07:36:42.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service and data tampering."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0187",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:08.053",
      "lastModified" : "2024-11-21T07:36:42.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read can lead to denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0188",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:08.110",
      "lastModified" : "2024-11-21T07:36:42.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged user can cause improper restriction of operations within the bounds of a memory buffer cause an out-of-bounds read, which may lead to denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0189",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:08.163",
      "lastModified" : "2024-11-21T07:36:42.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0191",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:08.240",
      "lastModified" : "2024-11-21T07:36:43.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds access may lead to denial of service or data tampering."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0192",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:08.303",
      "lastModified" : "2024-11-21T07:36:43.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer handler, where improper privilege management can lead to escalation of privileges and information disclosure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0194",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:08.367",
      "lastModified" : "2024-11-21T07:36:43.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer driver, where an invalid display configuration may lead to denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0195",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:08.440",
      "lastModified" : "2024-11-21T07:36:43.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284,\nwhich may lead to hypothetical Information leak of unimportant data such as local variable data of the driver"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0197",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:08.503",
      "lastModified" : "2024-11-21T07:36:43.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious user in a guest VM can cause a NULL-pointer dereference, which may lead to denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0198",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-01T05:15:08.557",
      "lastModified" : "2024-11-21T07:36:43.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where improper restriction of operations within the bounds of a memory buffer can lead to denial of service, information disclosure, and data tampering."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.12",
            "matchCriteriaId" : "81A64668-3B60-402B-B0EF-919079700FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.7",
            "matchCriteriaId" : "65AFFB06-AC6E-426A-97D0-768F34853D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "41388772-0B7C-4238-8021-590D0F1C0CE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1790",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-01T09:15:07.267",
      "lastModified" : "2024-11-21T07:39:54.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224724."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_task_allocation_system_project:simple_task_allocation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E075FC0B-C33D-4A73-9F55-56D08B9EFB37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Pe4cefulSnow/CVE-Advisory/blob/main/uploadcve.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224724",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224724",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Pe4cefulSnow/CVE-Advisory/blob/main/uploadcve.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-01T23:15:07.060",
      "lastModified" : "2025-02-11T18:15:24.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at soapcgi.main."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:go-rt-ac750_firmware:reva_v101b03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF67C4BB-000A-4657-9BA0-8DC944AC20B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:go-rt-ac750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE067003-B0B5-4419-8BB3-A31C015276D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yzskyt/Vuln/blob/main/Go-RT-AC750/Go-RT-AC750.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/yzskyt/Vuln/blob/main/Go-RT-AC750/Go-RT-AC750.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-02T01:15:07.400",
      "lastModified" : "2025-02-18T16:15:14.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruoyi:ruoyi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.6",
            "matchCriteriaId" : "2D89E48D-CB89-4CE4-9AB5-3E8039CB4A37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/y_project/RuoYi/commit/432d5ce1be2e9384a6230d7ccd8401eef5ce02b0",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitee.com/y_project/RuoYi/issues/I697Q5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://gitee.com/y_project/RuoYi/commit/432d5ce1be2e9384a6230d7ccd8401eef5ce02b0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitee.com/y_project/RuoYi/issues/I697Q5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1791",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-02T07:15:07.237",
      "lastModified" : "2024-11-21T07:39:54.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Simple Task Allocation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224743."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_task_allocation_system_project:simple_task_allocation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E075FC0B-C33D-4A73-9F55-56D08B9EFB37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Pe4cefulSnow/SQL-Injection/blob/main/SQLcve.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224743",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224743",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Pe4cefulSnow/SQL-Injection/blob/main/SQLcve.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1792",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-02T07:15:07.663",
      "lastModified" : "2024-11-21T07:39:54.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/fields/manage_field.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224744."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_mobile_comparison_website_project:simple_mobile_comparison_website:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819E4A1A-2355-4222-A684-B625872A8A54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LOBSSSA5DD5/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224744",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224744",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LOBSSSA5DD5/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1793",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-02T08:15:06.987",
      "lastModified" : "2024-11-21T07:39:55.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Police Crime Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /officer/assigncase.php of the component GET Parameter Handler. The manipulation of the argument caseid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224745 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:police_crime_record_management_system_project:police_crime_record_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E184750F-8512-4C8C-914D-3317F126DDBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fillorkill/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224745",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224745",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fillorkill/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1794",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-02T08:15:07.047",
      "lastModified" : "2024-11-21T07:39:55.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Police Crime Record Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/casedetails.php of the component GET Parameter Handler. The manipulation of the argument id with the input \"><script>alert(233)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224746 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:police_crime_record_management_system_project:police_crime_record_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E184750F-8512-4C8C-914D-3317F126DDBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fillorkill/bug_report/blob/main/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224746",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224746",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fillorkill/bug_report/blob/main/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1795",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-02T09:15:08.720",
      "lastModified" : "2024-11-21T07:39:55.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/products/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input <script>alert(666)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224747."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gadget_works_online_ordering_system_project:gadget_works_online_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CFA006A-2A38-4948-9F6E-487523293F52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FinleyTang/bug_report/blob/main/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224747",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224747",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FinleyTang/bug_report/blob/main/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1796",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-02T09:15:09.533",
      "lastModified" : "2024-11-21T07:39:55.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in SourceCodester Employee Payslip Generator 1.0. Affected is an unknown function of the file /classes/Master.php?f=save_position of the component Create News Handler. The manipulation of the argument name with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224748."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:employee_payslip_generator_system_project:employee_payslip_generator_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "317443CA-6CDC-405F-A0D1-592670B66145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Jean-Astruc/bug_report/blob/main/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224748",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224748",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Jean-Astruc/bug_report/blob/main/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1797",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-02T10:15:06.947",
      "lastModified" : "2024-11-21T07:39:55.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in OTCMS 6.0.1. Affected by this vulnerability is an unknown functionality of the file sysCheckFile.php?mudi=sql. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224749 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otcms:otcms:6.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539BAC83-D8EC-4C6B-9A60-BF7C762B78A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/wkstestete/cve/blob/master/upload/upload1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224749",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224749",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/wkstestete/cve/blob/master/upload/upload1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1798",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-02T10:15:07.003",
      "lastModified" : "2024-11-21T07:39:55.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in EyouCMS up to 1.5.4. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument typename leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-224750 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyoucms:eyoucms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.4",
            "matchCriteriaId" : "7ECD01BF-7AC3-4BD0-BA17-0A38AB8E11E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/wkstestete/cve/blob/master/xss/eyoucms%20xss.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224750",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224750",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/wkstestete/cve/blob/master/xss/eyoucms%20xss.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1799",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-02T10:15:07.053",
      "lastModified" : "2024-11-21T07:39:55.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4. This affects an unknown part of the file login.php. The manipulation of the argument tag_tag leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224751."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyoucms:eyoucms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.4",
            "matchCriteriaId" : "7ECD01BF-7AC3-4BD0-BA17-0A38AB8E11E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/wkstestete/cve/blob/master/xss/Eyoucms%20xss2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224751",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224751",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/wkstestete/cve/blob/master/xss/Eyoucms%20xss2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1800",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-02T11:15:06.707",
      "lastModified" : "2024-11-21T07:39:55.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in sjqzhang go-fastdfs up to 1.4.3. Affected by this issue is the function upload of the file /group1/uploa of the component File Upload Handler. The manipulation leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224768."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-24"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go-fastdfs_project:go-fastdfs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.3",
            "matchCriteriaId" : "E2E013CB-1199-4CAB-9165-31BFA6BF281E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yangyanglo/ForCVE/blob/main/2023-0x05.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224768",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224768",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yangyanglo/ForCVE/blob/main/2023-0x05.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1202",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-04-02T21:15:08.250",
      "lastModified" : "2025-02-20T21:15:24.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Permission bypass when importing or synchronizing entries in User vault\n\n in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to bypass entry permission via id collision."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.10",
            "matchCriteriaId" : "DF2F5F64-BFED-4D0D-95E8-BA3B53356C54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0008",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1574",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-04-02T21:15:08.297",
      "lastModified" : "2025-02-25T21:15:11.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information disclosure in the user creation feature of a MSSQL data source in Devolutions Remote Desktop Manager 2023.1.9 and below on Windows allows an attacker with access to the user interface to obtain sensitive information via the error message dialog that displays the password in clear text.\n\n\n\n\n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "2023.1.10",
            "matchCriteriaId" : "866FE7CD-C7F3-4E39-84DE-376AFB1FED80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0006",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1580",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-04-02T21:15:08.343",
      "lastModified" : "2025-02-25T21:15:11.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uncontrolled resource consumption in the logging feature in Devolutions Gateway 2023.1.1 and earlier allows an attacker to cause a denial of service by filling up the disk and render the system unusable.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.2",
            "matchCriteriaId" : "43313E30-EF5E-4BC9-BD1E-3981E51001D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0007",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1598",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2023-04-02T21:15:08.387",
      "lastModified" : "2023-11-07T04:04:16.190",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1603",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-04-02T21:15:08.427",
      "lastModified" : "2025-02-25T18:15:26.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nPermission bypass when importing or synchronizing entries in User vault\n\n in Devolutions Server 2022.3.13 and prior versions allows users with restricted rights to bypass entry permission via id collision.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.3.0",
            "matchCriteriaId" : "F3145584-045F-40D2-8EC7-1C4719C86036"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0008",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20558",
      "sourceIdentifier" : "psirt@amd.com",
      "published" : "2023-04-02T21:15:08.467",
      "lastModified" : "2025-02-20T20:15:44.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nInsufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "CC7064C1-67AF-4A2F-A284-846700D45614"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_5700g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6746407-9EC7-49B2-93B4-926174F2A457"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "80081A6A-9B1F-4995-B7ED-FF297CB98264"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_5700ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B481C5C-90C3-4DC2-85DF-F1EA0F409DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "F0CBE28F-9DF5-4D9C-BCC2-0D2ACB9D6B8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5600g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE6B0E7-AE27-4DE8-8AF2-801E57F5FC30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "439D9E75-CB06-4F8C-A10E-0A398B0BF699"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5600ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59A2AF2-5D13-480B-93CD-70AB6AEB60F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "462E0C21-B8D7-40CD-812F-3DACC77F13BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_5300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34308FA-D6D1-4024-95F5-45C86EFBF00A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "1D53236B-5DD1-486A-93C1-52AD9B0C4B3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_5300ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E19774-C744-46AC-B8F8-2B3E2BB19050"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_5980hx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "E36A1096-E2AF-4F0D-BD52-527AA7E59B56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_5980hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8308D5A2-0985-487C-B16C-4EEF835BDD4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_5980hs_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "372D68C2-87E3-436C-96A0-E2855AAFD910"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_5980hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C00179A-620B-4DC7-893A-11AFAB9EE13C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_5825u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "8FE756D6-6BE7-45F3-A40D-46CB74EFD6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_5825u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF398C51-EB53-4C3F-8D88-BD3931D9293F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_5900hx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "9CD4943E-9B99-4EDB-B9EF-75F15B097FFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_5900hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9BDB04-877C-472D-A3BB-6C32FF269E00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_5900hs_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "E0E6BA3E-FDA4-4996-B3AC-508D7EC1FC08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_5900hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE64730D-B284-450E-9450-72AAEBAE2000"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_5825c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "CE6F717B-9CE2-4AB9-85C8-FADE9256BC03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_5825c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DBB31D3-58CA-44EE-B115-77D1D83D9E23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_5800h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "91F6E921-B63E-419D-BEFC-29C92832A44F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_5800h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1449EC-F9D9-4846-A6E1-56F0B1EE8849"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5625u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "6FB62DD2-2352-43D6-87F4-53FC84DA80AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5625u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16BC515-84AE-432F-853B-822E737C242F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_5800hs_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "E1E154A8-DA3F-4E87-8C41-DA9465288BD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_5800hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FEDF9F0-CE97-4A9F-B4C2-EB3CF6E9507D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5625c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "570DB781-C169-421B-9D07-9E947918DDC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5625c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAED3E10-E29A-41E8-9758-C0DEEB13D630"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5600h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "D7C7B5DC-98A4-4966-A41B-B6A1C655B1A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5600h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5FDA44-978A-4ACC-9A42-00929DFE485B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5600hs_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "BE644693-0BFE-49D2-AE58-79D52B110169"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5600hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD963142-F19B-42C9-AB46-8F24CD773BE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_5800u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "BAC0EB2D-0AC1-4F0D-9D48-94C039E16579"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_5800u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A09152-93D2-493D-8CE0-8A4F30F0DD39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5600u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "5FD0DEC3-6D14-43DB-9FE7-AEDF42C547A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5600u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D64E8F-BB90-4425-9980-9D2E2B74E83B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5560u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "D4C2DF5C-5BF9-42AF-A2FB-F1EC7F3B5BFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5560u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BB2CE6-E989-43EE-B501-0DA6079BA420"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_5425u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "D09CDB5E-3184-49DF-AC0E-367D0EFF0E36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_5425u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74236755-56DA-4245-A07F-DF9817D8F01D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_5425c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "E75C6409-DC89-44AA-B7A6-C080281B35DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_5425c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962E91F5-037B-4532-A5DB-FCC01631666F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_5400u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "17F026FB-D58E-4A61-87E7-249B3E0B1293"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_5400u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1390DB-9E89-4C57-93F7-06B36EFDE579"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_5125c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "5A274267-5A91-4752-856F-3F84D85BB9CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_5125c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F962DD-90D5-47AB-8ABC-36E925821636"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:athlon_silver_3050u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064D6E4E-56D7-4E37-AC8C-7F3DDAA68B61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:athlon_silver_3050u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFF28BE-F049-4716-AADE-643FABB753A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:athlon_gold_3150u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610909ED-A636-4007-A50F-500057340E70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:athlon_gold_3150u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E11A9D-03EC-4014-BB1C-5286C694581B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3200u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B85FAD-49E4-4DE4-BF8B-88F3C9772779"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3200u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8921CB70-EE2E-4E18-8E6C-52B505E2D2E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3250u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B1F092-A9EA-4245-A154-2DFEA5D2A01F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3250u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C29793-1142-4506-8C32-3B89227BB3A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3300u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD9C1B7F-CA5E-4AC3-A2D4-0901907FE89F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3300u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9921AE2D-F497-47C8-B463-947E230CF4F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3350u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4660E0A-B6EF-42C6-9098-5E78ACBF1A8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3350u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2452A625-5B59-49DF-A3C3-872642181E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3450u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62D1862B-8C77-4FBF-AA6D-EA3308311118"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3450u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7888EB-C587-44BF-95AC-05BE7776B5F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3500u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6245B6C-1BAD-4877-9921-16E32466708A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3500u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84A1505-E6CB-431C-B44D-1E26045F30B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3500c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A170DB-7E2C-4709-B1BC-E5C367BFB8A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3500c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3D9C3E-F342-4932-8287-844E1963D572"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3550h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813B1750-DC92-46A5-BF2B-041DBA196968"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3550h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695A2D6B-A46C-475F-809F-B2715A41A936"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3580u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4518EEA9-2C4D-4615-A0F5-CF40C80285E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3580u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2CD9B5-7469-4B8A-8653-4C71B00D0D2E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3700u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27255DA-3451-492D-BC8C-F0ABD9746250"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3700u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658FF986-FD92-487B-A7FA-43E1F96B0FEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3700c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC59D0E5-A610-47D9-9820-6D5DA71C4FC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3700c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7FCAE2-1695-405A-AF62-9C9324BBCE09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3750h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21782BC7-E2F5-4377-B80A-56591F3D7C25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3750h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9397E5A5-0694-4016-AEBC-41D7902F9A03"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3780u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C31FA9-3DED-4794-8BB9-DCAD9F9FA9A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3780u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D51558-9F26-43D3-8BCB-4CD9A3DD7004"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_2200u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "262E6ECB-AAA9-4DFF-A7A2-C4457087A49F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_2200u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA61ADB-2FEA-459A-BF4F-C55401479107"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_2300u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "51CC1E13-BED2-4CE5-9BDF-D177B788E5A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_2300u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FF5F66-636C-4637-96F7-0FA45BB7C64B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_2500u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "5B745B7F-DDD9-4DAF-8511-76F2C4F7FA20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_2500u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BEE640-381F-449B-ACB1-F1BD255683C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_2600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "AA918714-FB83-42E4-87FE-2DAD5730193E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_2600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC4BECA-6023-4225-9685-937E47C67C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_2600h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "AEB99535-B654-4F63-A30A-F51FF934694B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_2600h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D2C602-8086-4FC4-AE89-0842A453E56E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_2600x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "6BEA11AE-B6BD-45B9-B286-68A21641E6D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_2600x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D777E18-B7ED-42CF-A2C4-87426B04E8EC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_2700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "D5AAC34F-CE36-43D3-B4BA-0DC1E188D0B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237AB35F-1702-418D-8193-F8B387B7F644"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_2700x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "272E5E53-54B5-4404-AB0F-842425AD6DC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_2700x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C5EE04-23BC-48E6-A171-D63C8258E317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_2700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "CDA5C1B3-E63C-4704-9A3E-0664430106DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D7F33C-F522-4A20-9055-1662178D7F27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_2700u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "0989D19D-9721-47AF-B4F1-3DAFE98FE52A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_2700u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBF39F8-2317-432A-846D-7FEC2C35EEE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_2700x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "2B40FD73-40E5-4218-8897-8E3336B84D6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_2700x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DE86B-DAAA-4A3B-9FFF-0583D5CB1B1E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_2800h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "11D0D05F-B73B-48D7-8341-EF9C1B9B413F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_2800h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9825AB7C-7675-4364-BCE3-4C63BD41780A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3300x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "6930FCB0-CFC6-4A46-B373-DA6F805F82D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3300x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C1A897-5FA2-403D-86C2-9D67C5B043A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_3500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "1770AC94-2C27-4797-8B42-7E766A9F9A8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A56423-3DDE-451B-AC47-51715AC74F41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_3500x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "07D7E3BD-D1FC-4850-9969-1AB65512CBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_3500x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CD66B3-96B6-43A0-AA57-A548FF34B5F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_3600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "49FA0A2B-6F31-44C6-B086-AEAA065EB06B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B07D45-5EA5-405E-A649-DADE2451E3EC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_3600x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "B72481C2-D8C0-41A1-A3DE-E98A11273A01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_3600x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09342618-057F-4F49-A43F-352212738F80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_3600xt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "F9D87868-0EEE-4627-B6F4-B43BBD72419D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_3600xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B156A9F3-E22D-428D-9E84-9D6CD6F3FE3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_3700x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "A2651564-0C1C-4F49-B9E0-859E02F58D72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_3700x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937E2FA2-BED8-48FF-8D01-153D4039F224"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_3800x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "01937EB1-0945-4D5D-B6E2-675796EE8E8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_3800x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC56C52-6200-47CD-A722-28A1437050B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_3800xt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "4E97C533-CA2F-4DF8-86B6-E66CF0AE4BA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_3800xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D814C2A-D794-46A8-9A06-CC4DB387176F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_3900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "F292599A-3546-4622-A003-98892F97CFC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_3900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB2C92-A84F-450D-BC0F-3675423DBF0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_3900x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "826EA2BF-9211-4E82-A1B3-07C2D618BAEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_3900x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED8BD87-468E-4953-96B1-CF923985B963"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_3900xt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "16F93C67-D14A-456B-AB4B-CD25C55119E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_3900xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E52108F-FAAE-4075-8F87-239008E77009"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_3950x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "F1EDB514-60CE-4F8E-B0AC-40E1BF4116A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_3950x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A468A5E6-BCFA-4141-955E-D7AFE1737913"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_pro_3900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "0470E6B4-2CBF-49F7-A358-411AB3BC3837"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_pro_3900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C86CD4F-AE07-47E2-ADD0-43C796709AFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_2990wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "summitpi-sp3r2_1.1.0.5",
            "matchCriteriaId" : "B6B2EB39-833A-40E7-9C0D-797D1878C925"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_2990wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B5369B-DFFE-4A84-8894-513AE7FC7C6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_2970wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "summitpi-sp3r2_1.1.0.5",
            "matchCriteriaId" : "5012CEC2-A60C-433F-ACDE-0FF589E9EE50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_2970wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A2CE6D-331C-4388-B0D6-EBAA05E87AB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_2950x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "summitpi-sp3r2_1.1.0.5",
            "matchCriteriaId" : "BE56DEA5-F95E-465F-A93F-047D8765ACD7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_2950x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3964CA7C-996C-43C5-B1A5-14046DAD07BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_2920x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "summitpi-sp3r2_1.1.0.5",
            "matchCriteriaId" : "8DF3D087-A373-435E-9085-B4D436259FEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_2920x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C9FEEF-0D0F-40DC-9E98-248F8608B755"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_3990x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakpi-sp3r3_1.0.0.6",
            "matchCriteriaId" : "2E108B9C-5C58-4B4C-962A-462DCD752C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_3990x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1A55FE-F144-494E-BCF0-7E367DA56E40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_3970x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakpi-sp3r3_1.0.0.6",
            "matchCriteriaId" : "1CEECC75-2A46-4D1B-ADFE-3DC594A9D327"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_3970x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDB8A-5EFB-4D00-9E05-FC19B4CD8913"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_3960x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakpi-sp3r3_1.0.0.6",
            "matchCriteriaId" : "53073C65-6389-41D8-8AE4-99C7ECFE0965"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_3960x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978DF75D-F7B7-40F6-8054-9551306106F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_3795wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "B8678119-2F1E-41DF-82BA-D4C395DB3A1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_3795wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE43349A-246E-45E9-8CD5-E417DB270445"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "65339D06-D1ED-49EB-A172-6071F3510E09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_3945wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D99997-1389-493E-BDEA-9904A46E48EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "69A0A6DA-EFF8-4DC8-BB52-FC35A5260C24"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_3955wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDF7650-0A7D-48FF-AD78-2D2DBF3CD646"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "153A5BA3-D730-45C6-9660-002E6512BCA1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_3975wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D16B66-A4EC-422D-856A-A862ECE13FBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "E5269FF7-5220-4707-9642-138D59438AC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_3995wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "015BEF9F-7CFC-4A99-B9B4-FB58B3F35E31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_5945wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "71E004F6-3488-48EB-A2B0-ABBE32729139"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_5945wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E38E22B3-AAAF-4075-9DEB-5198A8283E15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_5955wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "5F7E6D13-6343-4A2B-AF6F-044B9E93C656"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_5955wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08A5CCF-054C-450B-93FC-8A3A4577CA00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_5965wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "A6F9297E-63CD-4956-8C3F-417EF8AB27DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_5965wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97EE77A-DB13-4A81-8BCD-E3BC1E45F420"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_5975wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "0BA0C644-DFE5-432E-8078-45BEC5681519"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_5975wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B99E921-4023-4E28-BAB7-A830487B3850"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_5995wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "9A2A1A42-FA9E-4CA3-A666-7EF61D8ED794"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_5995wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BD2B6B-A491-4430-ACDA-019C8E1D0348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_4700g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "renoirpi-fp6_1.0.0.7",
            "matchCriteriaId" : "E7E3FFD9-62CD-4B3E-9D02-EF6C1066AC23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_4700g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B44C21E-681A-4869-8D9D-D3898D9CBB3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_4700ge_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "renoirpi-fp6_1.0.0.7",
            "matchCriteriaId" : "C9D34274-FDA3-4EE5-B858-B270F2822FF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_4700ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D640C5C-C906-41A2-96BC-19299ADB9446"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_4600g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "renoirpi-fp6_1.0.0.7",
            "matchCriteriaId" : "D6604DE8-4305-4DD7-BE96-1BE92F7722CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_4600g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0005355A-DA7A-417D-8AF9-F6CC880040BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_4600ge_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "renoirpi-fp6_1.0.0.7",
            "matchCriteriaId" : "41A97076-01B0-4E7C-95BD-050F8FDAAD3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_4600ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1614C8C2-0DDF-464F-BAE5-812CED10CA17"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_4300g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "renoirpi-fp6_1.0.0.7",
            "matchCriteriaId" : "E19E34AA-D442-432B-BBFA-00BCFA1B4073"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_4300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE6DAAF-7A5E-4D6C-862A-443647E66432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_4300ge_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "renoirpi-fp6_1.0.0.7",
            "matchCriteriaId" : "BF6484B1-7D1A-4EA5-9A6E-9EDC28A3926D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_4300ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492017EE-C13F-4C40-887F-9C3C9F439898"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1027.html",
        "source" : "psirt@amd.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20559",
      "sourceIdentifier" : "psirt@amd.com",
      "published" : "2023-04-02T21:15:08.510",
      "lastModified" : "2025-02-25T17:15:11.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\nInsufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-691"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "CC7064C1-67AF-4A2F-A284-846700D45614"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_5700g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6746407-9EC7-49B2-93B4-926174F2A457"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "80081A6A-9B1F-4995-B7ED-FF297CB98264"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_5700ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B481C5C-90C3-4DC2-85DF-F1EA0F409DF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "F0CBE28F-9DF5-4D9C-BCC2-0D2ACB9D6B8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5600g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE6B0E7-AE27-4DE8-8AF2-801E57F5FC30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "439D9E75-CB06-4F8C-A10E-0A398B0BF699"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5600ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F59A2AF2-5D13-480B-93CD-70AB6AEB60F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "462E0C21-B8D7-40CD-812F-3DACC77F13BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_5300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D34308FA-D6D1-4024-95F5-45C86EFBF00A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "1D53236B-5DD1-486A-93C1-52AD9B0C4B3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_5300ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E19774-C744-46AC-B8F8-2B3E2BB19050"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_5980hx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "E36A1096-E2AF-4F0D-BD52-527AA7E59B56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_5980hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8308D5A2-0985-487C-B16C-4EEF835BDD4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_5980hs_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "372D68C2-87E3-436C-96A0-E2855AAFD910"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_5980hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C00179A-620B-4DC7-893A-11AFAB9EE13C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_5825u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "8FE756D6-6BE7-45F3-A40D-46CB74EFD6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_5825u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF398C51-EB53-4C3F-8D88-BD3931D9293F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_5900hx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "9CD4943E-9B99-4EDB-B9EF-75F15B097FFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_5900hx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9BDB04-877C-472D-A3BB-6C32FF269E00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_5900hs_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "E0E6BA3E-FDA4-4996-B3AC-508D7EC1FC08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_5900hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE64730D-B284-450E-9450-72AAEBAE2000"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_5825c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "CE6F717B-9CE2-4AB9-85C8-FADE9256BC03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_5825c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DBB31D3-58CA-44EE-B115-77D1D83D9E23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_5800h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "91F6E921-B63E-419D-BEFC-29C92832A44F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_5800h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1449EC-F9D9-4846-A6E1-56F0B1EE8849"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5625u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "6FB62DD2-2352-43D6-87F4-53FC84DA80AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5625u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C16BC515-84AE-432F-853B-822E737C242F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_5800hs_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "E1E154A8-DA3F-4E87-8C41-DA9465288BD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_5800hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FEDF9F0-CE97-4A9F-B4C2-EB3CF6E9507D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5625c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "570DB781-C169-421B-9D07-9E947918DDC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5625c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAED3E10-E29A-41E8-9758-C0DEEB13D630"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5600h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "D7C7B5DC-98A4-4966-A41B-B6A1C655B1A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5600h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5FDA44-978A-4ACC-9A42-00929DFE485B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5600hs_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "BE644693-0BFE-49D2-AE58-79D52B110169"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5600hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD963142-F19B-42C9-AB46-8F24CD773BE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_5800u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "BAC0EB2D-0AC1-4F0D-9D48-94C039E16579"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_5800u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A09152-93D2-493D-8CE0-8A4F30F0DD39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5600u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "5FD0DEC3-6D14-43DB-9FE7-AEDF42C547A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5600u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D64E8F-BB90-4425-9980-9D2E2B74E83B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_5560u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "D4C2DF5C-5BF9-42AF-A2FB-F1EC7F3B5BFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_5560u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BB2CE6-E989-43EE-B501-0DA6079BA420"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_5425u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "D09CDB5E-3184-49DF-AC0E-367D0EFF0E36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_5425u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74236755-56DA-4245-A07F-DF9817D8F01D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_5425c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "E75C6409-DC89-44AA-B7A6-C080281B35DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_5425c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "962E91F5-037B-4532-A5DB-FCC01631666F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_5400u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "17F026FB-D58E-4A61-87E7-249B3E0B1293"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_5400u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1390DB-9E89-4C57-93F7-06B36EFDE579"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_5125c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cezannepi-fp6_1.0.0.9",
            "matchCriteriaId" : "5A274267-5A91-4752-856F-3F84D85BB9CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_5125c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F962DD-90D5-47AB-8ABC-36E925821636"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:athlon_silver_3050u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "064D6E4E-56D7-4E37-AC8C-7F3DDAA68B61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:athlon_silver_3050u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFF28BE-F049-4716-AADE-643FABB753A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:athlon_gold_3150u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "610909ED-A636-4007-A50F-500057340E70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:athlon_gold_3150u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E11A9D-03EC-4014-BB1C-5286C694581B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3200u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02B85FAD-49E4-4DE4-BF8B-88F3C9772779"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3200u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8921CB70-EE2E-4E18-8E6C-52B505E2D2E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3250u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03B1F092-A9EA-4245-A154-2DFEA5D2A01F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3250u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C29793-1142-4506-8C32-3B89227BB3A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3300u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD9C1B7F-CA5E-4AC3-A2D4-0901907FE89F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3300u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9921AE2D-F497-47C8-B463-947E230CF4F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3350u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4660E0A-B6EF-42C6-9098-5E78ACBF1A8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3350u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2452A625-5B59-49DF-A3C3-872642181E9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3450u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62D1862B-8C77-4FBF-AA6D-EA3308311118"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3450u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7888EB-C587-44BF-95AC-05BE7776B5F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3500u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6245B6C-1BAD-4877-9921-16E32466708A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3500u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C84A1505-E6CB-431C-B44D-1E26045F30B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3500c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A170DB-7E2C-4709-B1BC-E5C367BFB8A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3500c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3D9C3E-F342-4932-8287-844E1963D572"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3550h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813B1750-DC92-46A5-BF2B-041DBA196968"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3550h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "695A2D6B-A46C-475F-809F-B2715A41A936"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3580u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4518EEA9-2C4D-4615-A0F5-CF40C80285E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3580u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C2CD9B5-7469-4B8A-8653-4C71B00D0D2E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3700u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D27255DA-3451-492D-BC8C-F0ABD9746250"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3700u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658FF986-FD92-487B-A7FA-43E1F96B0FEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3700c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC59D0E5-A610-47D9-9820-6D5DA71C4FC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3700c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7FCAE2-1695-405A-AF62-9C9324BBCE09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3750h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21782BC7-E2F5-4377-B80A-56591F3D7C25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3750h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9397E5A5-0694-4016-AEBC-41D7902F9A03"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3780u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C31FA9-3DED-4794-8BB9-DCAD9F9FA9A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3780u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6D51558-9F26-43D3-8BCB-4CD9A3DD7004"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_2200u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "262E6ECB-AAA9-4DFF-A7A2-C4457087A49F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_2200u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA61ADB-2FEA-459A-BF4F-C55401479107"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_2300u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "51CC1E13-BED2-4CE5-9BDF-D177B788E5A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_2300u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FF5F66-636C-4637-96F7-0FA45BB7C64B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_2500u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "5B745B7F-DDD9-4DAF-8511-76F2C4F7FA20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_2500u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BEE640-381F-449B-ACB1-F1BD255683C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_2600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "AA918714-FB83-42E4-87FE-2DAD5730193E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_2600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC4BECA-6023-4225-9685-937E47C67C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_2600h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "AEB99535-B654-4F63-A30A-F51FF934694B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_2600h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D2C602-8086-4FC4-AE89-0842A453E56E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_2600x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "6BEA11AE-B6BD-45B9-B286-68A21641E6D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_2600x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D777E18-B7ED-42CF-A2C4-87426B04E8EC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_2700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "D5AAC34F-CE36-43D3-B4BA-0DC1E188D0B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237AB35F-1702-418D-8193-F8B387B7F644"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_2700x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "272E5E53-54B5-4404-AB0F-842425AD6DC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_2700x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C5EE04-23BC-48E6-A171-D63C8258E317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_2700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "CDA5C1B3-E63C-4704-9A3E-0664430106DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D7F33C-F522-4A20-9055-1662178D7F27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_2700u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "0989D19D-9721-47AF-B4F1-3DAFE98FE52A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_2700u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DBF39F8-2317-432A-846D-7FEC2C35EEE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_2700x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "2B40FD73-40E5-4218-8897-8E3336B84D6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_2700x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD6DE86B-DAAA-4A3B-9FFF-0583D5CB1B1E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_2800h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4v2_pi_1.2.0.6c",
            "matchCriteriaId" : "11D0D05F-B73B-48D7-8341-EF9C1B9B413F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_2800h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9825AB7C-7675-4364-BCE3-4C63BD41780A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_3300x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "6930FCB0-CFC6-4A46-B373-DA6F805F82D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_3300x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C1A897-5FA2-403D-86C2-9D67C5B043A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_3500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "1770AC94-2C27-4797-8B42-7E766A9F9A8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A56423-3DDE-451B-AC47-51715AC74F41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_3500x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "07D7E3BD-D1FC-4850-9969-1AB65512CBEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_3500x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CD66B3-96B6-43A0-AA57-A548FF34B5F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_3600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "49FA0A2B-6F31-44C6-B086-AEAA065EB06B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B07D45-5EA5-405E-A649-DADE2451E3EC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_3600x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "B72481C2-D8C0-41A1-A3DE-E98A11273A01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_3600x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09342618-057F-4F49-A43F-352212738F80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_3600xt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "F9D87868-0EEE-4627-B6F4-B43BBD72419D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_3600xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B156A9F3-E22D-428D-9E84-9D6CD6F3FE3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_3700x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "A2651564-0C1C-4F49-B9E0-859E02F58D72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_3700x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937E2FA2-BED8-48FF-8D01-153D4039F224"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_3800x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "01937EB1-0945-4D5D-B6E2-675796EE8E8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_3800x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DC56C52-6200-47CD-A722-28A1437050B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_3800xt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "4E97C533-CA2F-4DF8-86B6-E66CF0AE4BA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_3800xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D814C2A-D794-46A8-9A06-CC4DB387176F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_3900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "F292599A-3546-4622-A003-98892F97CFC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_3900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5CB2C92-A84F-450D-BC0F-3675423DBF0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_3900x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "826EA2BF-9211-4E82-A1B3-07C2D618BAEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_3900x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED8BD87-468E-4953-96B1-CF923985B963"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_3900xt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "16F93C67-D14A-456B-AB4B-CD25C55119E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_3900xt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E52108F-FAAE-4075-8F87-239008E77009"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_3950x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "F1EDB514-60CE-4F8E-B0AC-40E1BF4116A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_3950x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A468A5E6-BCFA-4141-955E-D7AFE1737913"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_9_pro_3900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "comboam4_v2_pi_1.2.0.6c",
            "matchCriteriaId" : "0470E6B4-2CBF-49F7-A358-411AB3BC3837"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_9_pro_3900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C86CD4F-AE07-47E2-ADD0-43C796709AFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_2990wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "summitpi-sp3r2_1.1.0.5",
            "matchCriteriaId" : "B6B2EB39-833A-40E7-9C0D-797D1878C925"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_2990wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B5369B-DFFE-4A84-8894-513AE7FC7C6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_2970wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "summitpi-sp3r2_1.1.0.5",
            "matchCriteriaId" : "5012CEC2-A60C-433F-ACDE-0FF589E9EE50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_2970wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A2CE6D-331C-4388-B0D6-EBAA05E87AB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_2950x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "summitpi-sp3r2_1.1.0.5",
            "matchCriteriaId" : "BE56DEA5-F95E-465F-A93F-047D8765ACD7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_2950x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3964CA7C-996C-43C5-B1A5-14046DAD07BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_2920x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "summitpi-sp3r2_1.1.0.5",
            "matchCriteriaId" : "8DF3D087-A373-435E-9085-B4D436259FEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_2920x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C9FEEF-0D0F-40DC-9E98-248F8608B755"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_3990x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakpi-sp3r3_1.0.0.6",
            "matchCriteriaId" : "2E108B9C-5C58-4B4C-962A-462DCD752C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_3990x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1A55FE-F144-494E-BCF0-7E367DA56E40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_3970x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakpi-sp3r3_1.0.0.6",
            "matchCriteriaId" : "1CEECC75-2A46-4D1B-ADFE-3DC594A9D327"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_3970x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDDFDB8A-5EFB-4D00-9E05-FC19B4CD8913"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_3960x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakpi-sp3r3_1.0.0.6",
            "matchCriteriaId" : "53073C65-6389-41D8-8AE4-99C7ECFE0965"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_3960x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978DF75D-F7B7-40F6-8054-9551306106F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_3795wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "B8678119-2F1E-41DF-82BA-D4C395DB3A1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_3795wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE43349A-246E-45E9-8CD5-E417DB270445"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "65339D06-D1ED-49EB-A172-6071F3510E09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_3945wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D99997-1389-493E-BDEA-9904A46E48EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "69A0A6DA-EFF8-4DC8-BB52-FC35A5260C24"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_3955wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDF7650-0A7D-48FF-AD78-2D2DBF3CD646"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "153A5BA3-D730-45C6-9660-002E6512BCA1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_3975wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D16B66-A4EC-422D-856A-A862ECE13FBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "E5269FF7-5220-4707-9642-138D59438AC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_3995wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "015BEF9F-7CFC-4A99-B9B4-FB58B3F35E31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_5945wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "71E004F6-3488-48EB-A2B0-ABBE32729139"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_5945wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E38E22B3-AAAF-4075-9DEB-5198A8283E15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_5955wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "5F7E6D13-6343-4A2B-AF6F-044B9E93C656"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_5955wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08A5CCF-054C-450B-93FC-8A3A4577CA00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_5965wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "A6F9297E-63CD-4956-8C3F-417EF8AB27DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_5965wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97EE77A-DB13-4A81-8BCD-E3BC1E45F420"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_5975wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "0BA0C644-DFE5-432E-8078-45BEC5681519"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_5975wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B99E921-4023-4E28-BAB7-A830487B3850"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_threadripper_pro_5995wx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "castlepeakwspi-swrx8_1.0.0.9",
            "matchCriteriaId" : "9A2A1A42-FA9E-4CA3-A666-7EF61D8ED794"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_threadripper_pro_5995wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BD2B6B-A491-4430-ACDA-019C8E1D0348"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_4700g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "renoirpi-fp6_1.0.0.7",
            "matchCriteriaId" : "E7E3FFD9-62CD-4B3E-9D02-EF6C1066AC23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_4700g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B44C21E-681A-4869-8D9D-D3898D9CBB3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_7_4700ge_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "renoirpi-fp6_1.0.0.7",
            "matchCriteriaId" : "C9D34274-FDA3-4EE5-B858-B270F2822FF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_7_4700ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D640C5C-C906-41A2-96BC-19299ADB9446"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_4600g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "renoirpi-fp6_1.0.0.7",
            "matchCriteriaId" : "D6604DE8-4305-4DD7-BE96-1BE92F7722CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_4600g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0005355A-DA7A-417D-8AF9-F6CC880040BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_5_4600ge_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "renoirpi-fp6_1.0.0.7",
            "matchCriteriaId" : "41A97076-01B0-4E7C-95BD-050F8FDAAD3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_5_4600ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1614C8C2-0DDF-464F-BAE5-812CED10CA17"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_4300g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "renoirpi-fp6_1.0.0.7",
            "matchCriteriaId" : "E19E34AA-D442-432B-BBFA-00BCFA1B4073"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_4300g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE6DAAF-7A5E-4D6C-862A-443647E66432"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amd:ryzen_3_4300ge_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "renoirpi-fp6_1.0.0.7",
            "matchCriteriaId" : "BF6484B1-7D1A-4EA5-9A6E-9EDC28A3926D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:amd:ryzen_3_4300ge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492017EE-C13F-4C40-887F-9C3C9F439898"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1027.html",
        "source" : "psirt@amd.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26283",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-02T21:15:08.567",
      "lastModified" : "2024-11-21T07:51:03.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  248416."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4F6F77C-2C0D-4A31-B2A0-DB1C4296FF5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F480AA32-841A-4E68-9343-B2E7548B0A0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492C463-D76E-49B7-A4D4-3B499E422D89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C684FC45-C9BA-4EF0-BD06-BB289450DD21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:z\\/os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E97A964-6F9E-4C87-9B90-21AE2C1DF52F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F372EA-3A78-4703-A457-751B2C98D796"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/248416",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6964836",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/248416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6964836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27284",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-02T21:15:08.647",
      "lastModified" : "2024-11-21T07:52:34.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system.  IBM X-Force ID:  248616."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_cargo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.5",
            "matchCriteriaId" : "865635CD-DF06-4938-8405-5FD8321E293C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_connect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.5",
            "matchCriteriaId" : "264F5B38-ABCF-42F3-AF9B-0E864F8B609A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/248616",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6966588",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/248616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6966588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27286",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-02T21:15:08.710",
      "lastModified" : "2024-11-21T07:52:35.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system.  IBM X-Force ID:  248616."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_cargo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.5",
            "matchCriteriaId" : "865635CD-DF06-4938-8405-5FD8321E293C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:aspera_connect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.5",
            "matchCriteriaId" : "264F5B38-ABCF-42F3-AF9B-0E864F8B609A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/248627",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6966588",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/248627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6966588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28668",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:08.767",
      "lastModified" : "2025-02-25T20:15:32.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Role-based Authorization Strategy Plugin 587.v2872c41fa_e51 and earlier grants permissions even after they've been disabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:role-based_authorization_strategy:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "587.v2872c41fa_e51",
            "matchCriteriaId" : "08D8AF1E-2DC1-4F74-88D2-37093E2D6204"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3053",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28669",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:08.807",
      "lastModified" : "2025-02-25T20:15:33.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins JaCoCo Plugin 3.3.2 and earlier does not escape class and method names shown on the UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control input files for the 'Record JaCoCo coverage report' post-build action."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jacoco:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "3.3.2",
            "matchCriteriaId" : "64694C56-4D66-43AA-ADA1-9B242338B266"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3061",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28670",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:08.847",
      "lastModified" : "2025-02-25T21:15:14.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current view's URL in inline JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:pipeline_aggregator_view:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.13",
            "matchCriteriaId" : "A3808FF8-D5A2-4871-A4A3-66E0ECA630FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2885",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28671",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:08.887",
      "lastModified" : "2025-02-25T21:15:14.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:octoperf_load_testing:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "4.5.0",
            "matchCriteriaId" : "31D8EB86-C55A-47B2-87CE-38A10B344FEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3067%20(1)",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3067%20(1)",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28672",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:08.943",
      "lastModified" : "2025-02-25T21:15:14.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins OctoPerf Load Testing Plugin Plugin 4.5.1 and earlier does not perform a permission check in a connection test HTTP endpoint, allowing attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:octoperf_load_testing:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "4.5.1",
            "matchCriteriaId" : "6C67964C-BBFE-4731-906E-8B7B8A5D1C8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3067%20(2)",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3067%20(2)",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28673",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:08.987",
      "lastModified" : "2024-11-21T07:55:46.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:octoperf_load_testing:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "4.5.2",
            "matchCriteriaId" : "863F9CDE-B4B7-44FC-9ED1-7380574ED24A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3067%20(3)",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3067%20(3)",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28674",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:09.030",
      "lastModified" : "2025-02-25T21:15:14.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers to connect to a previously configured Octoperf server using attacker-specified credentials."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:octoperf_load_testing:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "4.5.2",
            "matchCriteriaId" : "863F9CDE-B4B7-44FC-9ED1-7380574ED24A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3067%20(4)",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3067%20(4)",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28675",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:09.070",
      "lastModified" : "2025-02-25T19:15:13.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers to connect to a previously configured Octoperf server using attacker-specified credentials."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:octoperf_load_testing:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "4.5.2",
            "matchCriteriaId" : "863F9CDE-B4B7-44FC-9ED1-7380574ED24A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3067%20(4)",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3067%20(4)",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28676",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:09.117",
      "lastModified" : "2025-02-25T20:15:33.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins Convert To Pipeline Plugin 1.0 and earlier allows attackers to create a Pipeline based on a Freestyle project, potentially leading to remote code execution (RCE)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-652"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:convert_to_pipeline:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "755E233E-6577-4EB2-B143-38E08F367940"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2963",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28677",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:09.160",
      "lastModified" : "2025-02-25T20:15:33.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Convert To Pipeline Plugin 1.0 and earlier uses basic string concatenation to convert Freestyle projects' Build Environment, Build Steps, and Post-build Actions to the equivalent Pipeline step invocations, allowing attackers able to configure Freestyle projects to prepare a crafted configuration that injects Pipeline script code into the (unsandboxed) Pipeline resulting from a convertion by Jenkins Convert To Pipeline Plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:convert_to_pipeline:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "755E233E-6577-4EB2-B143-38E08F367940"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2966",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28678",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:09.200",
      "lastModified" : "2025-02-25T20:15:33.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Cppcheck Plugin 1.26 and earlier does not escape file names from Cppcheck report files before showing them on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control report file contents."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:cppcheck:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.26",
            "matchCriteriaId" : "43BFBB50-F28B-4249-8A6C-3010B823C081"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2809",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28679",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:09.240",
      "lastModified" : "2025-02-24T15:15:12.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides the \"Generic JS Portlet\" feature that lets a user populate a portlet using a custom JavaScript expression, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:mashup_portlets:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "AA6DDB80-FA8A-460E-B381-232957429B83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2813",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28680",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:09.287",
      "lastModified" : "2025-02-25T19:15:13.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Crap4J Plugin 0.9 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:crap4j:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "0.9",
            "matchCriteriaId" : "B6806BEF-BFF1-407B-A254-51D0B9D344AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2925",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28681",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:09.323",
      "lastModified" : "2025-02-25T19:15:13.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Visual Studio Code Metrics Plugin 1.7 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:visual_studio_code_metrics:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.7",
            "matchCriteriaId" : "EACE9EFD-3E74-49BF-8DAD-2DEBBD8AAAB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2926",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28682",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:09.367",
      "lastModified" : "2025-02-25T19:15:14.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Performance Publisher Plugin 8.09 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:performance_publisher:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "8.09",
            "matchCriteriaId" : "1AFCA468-D4FF-477B-9E2F-C99D17C523E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2928",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28683",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:09.407",
      "lastModified" : "2025-02-21T16:15:31.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Phabricator Differential Plugin 2.1.5 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:phabricator_differential:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.1.5",
            "matchCriteriaId" : "B9734BA4-2C7C-4BE9-A922-166BC4C7AF2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2942",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28684",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-02T21:15:09.447",
      "lastModified" : "2025-02-20T22:15:30.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins remote-jobs-view-plugin Plugin 0.0.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:remote-jobs-view:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "0.0.3",
            "matchCriteriaId" : "F82FAEE8-1D1E-4048-8460-220420DDEB7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2956",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29033",
      "sourceIdentifier" : "info@starlabs.sg",
      "published" : "2023-04-02T21:15:09.483",
      "lastModified" : "2023-11-07T04:11:00.917",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29034",
      "sourceIdentifier" : "info@starlabs.sg",
      "published" : "2023-04-02T21:15:09.523",
      "lastModified" : "2023-11-07T04:11:01.140",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29035",
      "sourceIdentifier" : "info@starlabs.sg",
      "published" : "2023-04-02T21:15:09.563",
      "lastModified" : "2023-11-07T04:11:01.440",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29036",
      "sourceIdentifier" : "info@starlabs.sg",
      "published" : "2023-04-02T21:15:09.600",
      "lastModified" : "2023-11-07T04:11:01.757",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29037",
      "sourceIdentifier" : "info@starlabs.sg",
      "published" : "2023-04-02T21:15:09.643",
      "lastModified" : "2023-11-07T04:11:02.070",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29038",
      "sourceIdentifier" : "info@starlabs.sg",
      "published" : "2023-04-02T21:15:09.680",
      "lastModified" : "2023-11-07T04:11:02.390",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29039",
      "sourceIdentifier" : "info@starlabs.sg",
      "published" : "2023-04-02T21:15:09.717",
      "lastModified" : "2023-11-07T04:11:02.703",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29040",
      "sourceIdentifier" : "info@starlabs.sg",
      "published" : "2023-04-02T21:15:09.760",
      "lastModified" : "2023-11-07T04:11:03.017",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29041",
      "sourceIdentifier" : "info@starlabs.sg",
      "published" : "2023-04-02T21:15:09.800",
      "lastModified" : "2023-11-07T04:11:03.327",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29042",
      "sourceIdentifier" : "info@starlabs.sg",
      "published" : "2023-04-02T21:15:09.833",
      "lastModified" : "2023-11-07T04:11:03.667",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26112",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-04-03T05:15:07.753",
      "lastModified" : "2025-02-13T17:16:11.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\\((.*)\\).\r\r**Note:** This is only exploitable in the case of a developer, putting the offending value in a server side configuration file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:configobj_project:configobj:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "712117B4-DF06-4167-8EE1-1244D60A1C11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DiffSK/configobj/issues/232",
        "source" : "report@snyk.io",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BO4RLMYEJODCNUE3DJIIUUFVTPAG6VN/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NZHY7B33EFY4LESP2NI4APQUPRROTAZK/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYU4IHVLOTYMFPH7KDOJGKZQR4GKWPFK/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-PYTHON-CONFIGOBJ-3252494",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DiffSK/configobj/issues/232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BO4RLMYEJODCNUE3DJIIUUFVTPAG6VN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NZHY7B33EFY4LESP2NI4APQUPRROTAZK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYU4IHVLOTYMFPH7KDOJGKZQR4GKWPFK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-PYTHON-CONFIGOBJ-3252494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26119",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-04-03T05:15:07.863",
      "lastModified" : "2024-11-21T07:50:48.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htmlunit:htmlunit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "475E13C7-9C7F-4396-806D-56BF2B3330A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/HtmlUnit/htmlunit/commit/641325bbc84702dc9800ec7037aec061ce21956b",
        "source" : "report@snyk.io",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-NETSOURCEFORGEHTMLUNIT-3252500",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://siebene.github.io/2022/12/30/HtmlUnit-RCE/",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/HtmlUnit/htmlunit/commit/641325bbc84702dc9800ec7037aec061ce21956b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-NETSOURCEFORGEHTMLUNIT-3252500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://siebene.github.io/2022/12/30/HtmlUnit-RCE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26269",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-03T08:15:07.087",
      "lastModified" : "2025-02-13T17:16:11.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default. This allows privilege escalation by a \nmalicious local user.\n\nAdministrators are advised to disable JMX, or set up a JMX password.\n\nNote that version 3.7.4 onward will set up a JMX password automatically for Guice users."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:james:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.4",
            "matchCriteriaId" : "DFB7B7EE-9A46-4E20-AF69-D74FB48C5C60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/18/3",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread/2z44rg93pflbjhvbwy3xtz505bx41cbs",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/18/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread/2z44rg93pflbjhvbwy3xtz505bx41cbs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26529",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-03T13:15:07.013",
      "lastModified" : "2024-11-21T07:51:41.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DupeOff.Com DupeOff plugin <= 1.6 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dupeoff_project:dupeoff:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.6",
            "matchCriteriaId" : "DBBC598F-2996-4916-97B3-75C55A1297AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/dupeoff/wordpress-dupeoff-plugin-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/dupeoff/wordpress-dupeoff-plugin-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1765",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-04-03T14:15:07.380",
      "lastModified" : "2024-11-21T07:39:51.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akbim Computer Panon allows SQL Injection.This issue affects Panon: before 1.0.2.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akbim:panon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2",
            "matchCriteriaId" : "F8B094D8-B11E-4098-A3A9-14A503E4379A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0193",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1766",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-04-03T14:15:07.443",
      "lastModified" : "2024-11-21T07:39:51.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Akbim Computer Panon allows Reflected XSS.This issue affects Panon: before 1.0.2.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:akbim:panon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2",
            "matchCriteriaId" : "F8B094D8-B11E-4098-A3A9-14A503E4379A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0193",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28625",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-03T14:15:07.507",
      "lastModified" : "2025-04-10T20:46:37.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mod_auth_openidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when `OIDCStripCookies` is set and a crafted cookie supplied, a NULL pointer dereference would occur, resulting in a segmentation fault. This could be used in a Denial-of-Service attack and thus presents an availability risk. Version 2.4.13.2 contains a patch for this issue. As a workaround, avoid using `OIDCStripCookies`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openidc:mod_auth_openidc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.4.13.2",
            "matchCriteriaId" : "F0E563D6-BFEA-48EF-ACFA-D746A2E78902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenIDC/mod_auth_openidc/blame/3f11976dab56af0a46a7dddb7a275cc16d6eb726/src/mod_auth_openidc.c#L178-L179",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenIDC/mod_auth_openidc/commit/c0e1edac3c4c19988ccdc7713d7aebfce6ff916a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenIDC/mod_auth_openidc/releases/tag/v2.4.13.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-f5xw-rvfr-24qr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00034.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WIBKFC22PDH6UXMSZ23PHTD7736ZC7BB/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5405",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenIDC/mod_auth_openidc/blame/3f11976dab56af0a46a7dddb7a275cc16d6eb726/src/mod_auth_openidc.c#L178-L179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenIDC/mod_auth_openidc/commit/c0e1edac3c4c19988ccdc7713d7aebfce6ff916a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenIDC/mod_auth_openidc/releases/tag/v2.4.13.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-f5xw-rvfr-24qr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00034.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WIBKFC22PDH6UXMSZ23PHTD7736ZC7BB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0399",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-03T15:15:18.867",
      "lastModified" : "2025-02-14T20:15:32.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Image Over Image For WPBakery Page Builder WordPress plugin before 3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:image_over_image_for_wpbakery_page_builder_project:image_over_image_for_wpbakery_page_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "68716722-B56A-4EAD-B157-950A4B51D934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/702d7bbe-93cc-4bc2-b41d-cb66e08c99a7",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/702d7bbe-93cc-4bc2-b41d-cb66e08c99a7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0820",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-03T15:15:18.920",
      "lastModified" : "2025-02-14T17:15:13.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:user_role:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.6.7",
            "matchCriteriaId" : "A2D2BFF3-707E-4EC7-8942-D1CE0EEEAE9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/b93d9f9d-0fd9-49b8-b465-d32b95351912",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/b93d9f9d-0fd9-49b8-b465-d32b95351912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1124",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-03T15:15:18.970",
      "lastModified" : "2025-02-14T17:15:13.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpeasycart:wp_easycart:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.4.3",
            "matchCriteriaId" : "2310652E-6CBA-45D8-965C-A0C445A33ABB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/229b93cd-544b-4877-8d9f-e6debda9511c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/229b93cd-544b-4877-8d9f-e6debda9511c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1330",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-03T15:15:19.023",
      "lastModified" : "2025-02-14T17:15:13.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which could allow attackers to add redirects via a CSRF attack."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inisev:redirection:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.4",
            "matchCriteriaId" : "27D46495-F393-42C8-BBD7-3BF4760CEA94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/de4cff6d-0030-40e6-8221-fef56e12b4de",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/de4cff6d-0030-40e6-8221-fef56e12b4de",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1377",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-03T15:15:19.070",
      "lastModified" : "2025-02-14T20:15:32.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Solidres WordPress plugin through 0.9.4 does not sanitise and escape numerous parameter before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solidres:solidres:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.9.4",
            "matchCriteriaId" : "C1E08361-4D85-46DD-BBAE-627FDFE21E59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c346ff80-c16b-4219-8983-708c64fa4a61",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c346ff80-c16b-4219-8983-708c64fa4a61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0975",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2023-04-03T16:15:07.443",
      "lastModified" : "2024-11-21T07:38:13.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local users, during install/upgrade workflow, to replace one of the Agent’s executables before it can be executed. This allows the user to elevate their permissions.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trellix:agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.8",
            "matchCriteriaId" : "709901D4-8D16-4C05-ADC5-FEB2D3862C34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kcm.trellix.com/corporate/index?page=content&id=SB10396",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kcm.trellix.com/corporate/index?page=content&id=SB10396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0977",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2023-04-03T16:15:07.530",
      "lastModified" : "2024-11-21T07:38:13.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unavailable.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trellix:agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.8",
            "matchCriteriaId" : "709901D4-8D16-4C05-ADC5-FEB2D3862C34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kcm.trellix.com/corporate/index?page=content&id=SB10396",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kcm.trellix.com/corporate/index?page=content&id=SB10396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28834",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-03T17:15:06.883",
      "lastModified" : "2024-11-21T07:56:07.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server is an open source personal cloud server. Nextcloud Server 24.0.0 until 24.0.6 and 25.0.0 until 25.0.4, as well as Nextcloud Enterprise Server 23.0.0 until 23.0.11, 24.0.0 until 24.0.6, and 25.0.0 until 25.0.4, have an information disclosure vulnerability. A user was able to get the full data directory path of the Nextcloud server from an API endpoint. By itself this information is not problematic as it can also be guessed for most common setups, but it could speed up other unknown attacks in the future if the information is known. Nextcloud Server 24.0.6 and 25.0.4 and Nextcloud Enterprise Server 23.0.11, 24.0.6, and 25.0.4 contain patches for this issue. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-212"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.14",
            "matchCriteriaId" : "8C96D16D-F7EB-4674-A02A-FD5AC82CAC57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.10",
            "matchCriteriaId" : "302FFA48-9204-4112-BF23-6182ED62F193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.10",
            "matchCriteriaId" : "3D2D0CEB-437C-4ABA-9915-EFCB776E7ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.4",
            "matchCriteriaId" : "282F04F1-B4E4-4DC2-82CA-55DB39A3F373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.4",
            "matchCriteriaId" : "E14A1D06-7AB2-40C2-806F-7EE34595DAF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5w64-6c42-rgcv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/issues/33883",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36094",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1690510",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5w64-6c42-rgcv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/issues/33883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/36094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1690510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28836",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-03T17:15:06.957",
      "lastModified" : "2024-11-21T07:56:07.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wagtail is an open source content management system built on Django. Starting in version 1.5 and prior to versions 4.1.4 and 4.2.2, a stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views within the Wagtail admin interface. A user with a limited-permission editor account for the Wagtail admin could potentially craft pages and documents that, when viewed by a user with higher privileges, could perform actions with that user's credentials. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin, and only affects sites with ModelAdmin enabled. For page, the vulnerability is in the \"Choose a parent page\" ModelAdmin view (`ChooseParentView`), available when managing pages via ModelAdmin. For documents, the vulnerability is in the ModelAdmin Inspect view (`InspectView`) when displaying document fields. Patched versions have been released as Wagtail 4.1.4 and Wagtail 4.2.2. Site owners who are unable to upgrade to the new versions can disable or override the corresponding functionality."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5",
            "versionEndExcluding" : "4.1.4",
            "matchCriteriaId" : "2431A916-407F-441E-BCBC-880EDF09596C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2.2",
            "matchCriteriaId" : "0B1B8BD9-78D3-4032-95EB-E0FFF890198D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.wagtail.org/en/stable/reference/contrib/modeladmin/chooseparentview.html#customising-chooseparentview",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.wagtail.org/en/stable/reference/contrib/modeladmin/inspectview.html#enabling-customising-inspectview",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/5be2b1ed55fd7259dfdf2c82e7701dba407b8b62",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/bc84bf9815610cfbf8db3b6050c7ddcbaa4b9713",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/eefc3381d37b476791610e5d30594fae443f33af",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/ff806ab173a504395fdfb3139eb0a29444ab4b91",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/releases/tag/v4.2.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/security/advisories/GHSA-5286-f2rf-35c2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.wagtail.org/en/stable/reference/contrib/modeladmin/chooseparentview.html#customising-chooseparentview",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.wagtail.org/en/stable/reference/contrib/modeladmin/inspectview.html#enabling-customising-inspectview",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/5be2b1ed55fd7259dfdf2c82e7701dba407b8b62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/bc84bf9815610cfbf8db3b6050c7ddcbaa4b9713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/eefc3381d37b476791610e5d30594fae443f33af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/ff806ab173a504395fdfb3139eb0a29444ab4b91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/releases/tag/v4.2.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/security/advisories/GHSA-5286-f2rf-35c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28837",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-03T17:15:07.030",
      "lastModified" : "2024-11-21T07:56:07.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wagtail is an open source content management system built on Django. Prior to versions 4.1.4 and 4.2.2, a memory exhaustion bug exists in Wagtail's handling of uploaded images and documents. For both images and documents, files are loaded into memory during upload for additional processing. A user with access to upload images or documents through the Wagtail admin interface could upload a file so large that it results in a crash of denial of service.\n\nThe vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. It can only be exploited by admin users with permission to upload images or documents.\n\nImage uploads are restricted to 10MB by default, however this validation only happens on the frontend and on the backend after the vulnerable code. \n\nPatched versions have been released as Wagtail 4.1.4 and Wagtail 4.2.2). Site owners who are unable to upgrade to the new versions are encouraged to add extra protections outside of Wagtail to limit the size of uploaded files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.4",
            "matchCriteriaId" : "764BBD94-5ED5-4206-A7E7-7AD763A592B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2",
            "versionEndExcluding" : "4.2.2",
            "matchCriteriaId" : "0B1B8BD9-78D3-4032-95EB-E0FFF890198D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.wagtail.org/en/stable/reference/settings.html#wagtailimages-max-upload-size",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/3c0c64642b9e5b8d28b111263c7f4bddad6c3880",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/c9d2fcd650a88d76ae122646142245e5927a9165",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/cfa11bbe00dbe7ce8cd4c0bbfe2a898a690df2bf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/d4022310cbe497993459c3136311467c7ac6329a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/releases/tag/v4.1.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/releases/tag/v4.2.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/security/advisories/GHSA-33pv-vcgh-jfg9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.wagtail.org/en/stable/reference/settings.html#wagtailimages-max-upload-size",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/3c0c64642b9e5b8d28b111263c7f4bddad6c3880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/c9d2fcd650a88d76ae122646142245e5927a9165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/cfa11bbe00dbe7ce8cd4c0bbfe2a898a690df2bf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/commit/d4022310cbe497993459c3136311467c7ac6329a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/releases/tag/v4.1.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/releases/tag/v4.2.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/security/advisories/GHSA-33pv-vcgh-jfg9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28850",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-03T18:15:07.873",
      "lastModified" : "2024-11-21T07:56:09.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore Perspective Editor provides an editor for Pimcore that allows users to add/remove/edit custom views and perspectives. This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Version 1.5.1 has a patch. As a workaround, one may apply the patch manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:perspective_editor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.1",
            "matchCriteriaId" : "E7B02DB3-2320-44C0-A8DA-89655E4C0001"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/perspective-editor/pull/121.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/perspective-editor/security/advisories/GHSA-fq8q-55v3-2986",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/5529f51e-e40f-46f1-887b-c9dbebab4f06/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/perspective-editor/pull/121.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/perspective-editor/security/advisories/GHSA-fq8q-55v3-2986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/5529f51e-e40f-46f1-887b-c9dbebab4f06/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28851",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-03T18:15:07.927",
      "lastModified" : "2024-11-21T07:56:09.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Silverstripe Form Capture provides a method to capture simple silverstripe forms and an admin interface for users. Starting in version 0.2.0 and prior to versions 1.0.2, 1.1.0, 2.2.5, and 3.1.1, improper escaping when presenting stored form submissions allowed for an attacker to perform a Cross-Site Scripting attack. The vulnerability was initially patched in version 1.0.2, and version 1.1.0 includes this patch. The bug was then accidentally re-introduced during a merge error, and has been re-patched in versions 2.2.5 and 3.1.1. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigfork:silverstripe_form_capture:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.2.0",
            "versionEndIncluding" : "0.2.3",
            "matchCriteriaId" : "212038C7-1028-471A-B933-7BDE489A0398"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigfork:silverstripe_form_capture:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.2.5",
            "matchCriteriaId" : "EEF0BE67-DE68-401D-A907-5756CD459F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigfork:silverstripe_form_capture:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1E1D9F-0BCB-4736-98D2-28053C4AA005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigfork:silverstripe_form_capture:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF5F41A-9AE8-4676-BA10-F9EABCA5CC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigfork:silverstripe_form_capture:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34B5EC54-C8E7-42C1-825F-FD2F22B15932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigfork:silverstripe_form_capture:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCEB607B-2B30-403F-B666-51B656700C15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigfork/silverstripe-form-capture/commit/5b3aa39dd1eef042f173167b0fa4d3f717971772",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bigfork/silverstripe-form-capture/security/advisories/GHSA-38h6-gmr2-j4wx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/bigfork/silverstripe-form-capture/commit/5b3aa39dd1eef042f173167b0fa4d3f717971772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bigfork/silverstripe-form-capture/security/advisories/GHSA-38h6-gmr2-j4wx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28854",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-03T18:15:07.987",
      "lastModified" : "2024-11-21T07:56:09.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nophp is a PHP web framework. Prior to version 0.0.1, nophp is vulnerable to shell command injection on httpd user. A patch was made available at commit e5409aa2d441789cbb35f6b119bef97ecc3986aa on 2023-03-30. Users should update index.php to 2023-03-30 or later or, as a workaround, add a function such as `env_patchsample230330.php` to env.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nophp_project:nophp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.0.1",
            "matchCriteriaId" : "FEB4ED43-154C-4441-ADEE-0F655940A473"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/paijp/nophp/commit/e5409aa2d441789cbb35f6b119bef97ecc3986aa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/paijp/nophp/releases/tag/v0.0.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/paijp/nophp/security/advisories/GHSA-9858-q3c2-9wwm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/paijp/nophp/commit/e5409aa2d441789cbb35f6b119bef97ecc3986aa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/paijp/nophp/releases/tag/v0.0.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/paijp/nophp/security/advisories/GHSA-9858-q3c2-9wwm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-03T21:15:07.237",
      "lastModified" : "2025-02-18T17:15:18.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Twitter Recommendation Algorithm through ec83d01 allows attackers to cause a denial of service (reduction of reputation score) by arranging for multiple Twitter accounts to coordinate negative signals regarding a target account, such as unfollowing, muting, blocking, and reporting, as exploited in the wild in March and April 2023. NOTE: Vendor states that allowing users to unfollow, mute, block, and report tweets and accounts and the impact of these negative engagements on Twitter’s ranking algorithm is a conscious design decision, rather than a security vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twitter:recommendation_algorithm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2023-03-31",
            "matchCriteriaId" : "B1F035D4-D0F8-409D-B6CB-4B9F0E568294"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/twitter/the-algorithm/issues/1386",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/twitter/the-algorithm/tree/ec83d01dcaebf369444d75ed04b3625a0a645eb9",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://steventey.com/blog/twitter-algorithm",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://twitter.com/Kaptain_Kobold/status/1642379706925477888",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/aakashg0/status/1641976913165180929",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/elonmusk/status/1642324821324230657",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/twitter/the-algorithm/issues/1386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/twitter/the-algorithm/tree/ec83d01dcaebf369444d75ed04b3625a0a645eb9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://steventey.com/blog/twitter-algorithm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://twitter.com/Kaptain_Kobold/status/1642379706925477888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/aakashg0/status/1641976913165180929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/elonmusk/status/1642324821324230657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1611",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-03T22:15:06.967",
      "lastModified" : "2025-02-13T15:15:13.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.13",
            "versionEndExcluding" : "5.10.177",
            "matchCriteriaId" : "4528DBDD-F4E2-42CB-A24E-94F8669AB405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15",
            "versionEndExcluding" : "5.15.106",
            "matchCriteriaId" : "35F48AA0-B61E-4650-837F-1DABC0338F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndExcluding" : "6.1.23",
            "matchCriteriaId" : "168D4F38-A434-4148-B81D-D0B3C4E78204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.2.10",
            "matchCriteriaId" : "5178A008-E2D6-4093-BCD4-8A80523EE39E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4F76C298-81DC-43E4-8FC9-DC005A2116EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB349B2-3F78-4197-882B-90ADB3BF645A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC88830-A9BC-4607-B572-A4B502FC9FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "476CB3A5-D022-4F13-AAEF-CB6A5785516A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "21D6F467-B848-453E-B1A4-BEF940E413A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F0FC3-CE52-4BA1-BA51-22F783938431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "3583026A-27EC-4A4C-850A-83F2AF970673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "DC271202-7570-4505-89A4-D602D47BFD00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D413BB6D-4F74-4C7D-9163-47786619EF53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2181342",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2f1a6be12ab6c8470d5776e68644726c94257c54",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5QCM6XO4HSPLGR3DFYWFRIA3GCBIHZR4/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWECAZ7V7EPSXMINO6Q6KWNKDY2CO6ZW/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lore.kernel.org/linux-btrfs/35b9a70650ea947387cf352914a8774b4f7e8a6f.1679481128.git.fdmanana%40suse.com/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2181342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2f1a6be12ab6c8470d5776e68644726c94257c54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5QCM6XO4HSPLGR3DFYWFRIA3GCBIHZR4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWECAZ7V7EPSXMINO6Q6KWNKDY2CO6ZW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lore.kernel.org/linux-btrfs/35b9a70650ea947387cf352914a8774b4f7e8a6f.1679481128.git.fdmanana%40suse.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24724",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-03T22:15:07.023",
      "lastModified" : "2025-02-18T15:15:13.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross site scripting (XSS) vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface (SASAdmin). For the product release, the reported version is 9.4_M2 and the fixed version is 9.4_M3. For the SAS release, the reported version is 9.4 TS1M2 and the fixed version is 9.4 TS1M3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sas:web_administration_interface:9.4:m2:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1EEEDF-15AD-428E-9434-89C81E5F2881"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40williamamorim256/stored-xss-vulnerability-discovered-in-sas-9-4-admin-console-5680e9e4062c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://owasp.org/www-community/attacks/xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.sas.com/kb/55/539.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://medium.com/%40williamamorim256/stored-xss-vulnerability-discovered-in-sas-9-4-admin-console-5680e9e4062c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://owasp.org/www-community/attacks/xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.sas.com/kb/55/539.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-03T22:15:07.060",
      "lastModified" : "2025-02-18T17:15:16.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesnet:libyang:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.164",
            "versionEndIncluding" : "2.1.30",
            "matchCriteriaId" : "45E8D3A2-7CA5-4C1C-B0EB-6AD5BC13D455"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CESNET/libyang/issues/1979",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6NQZHCJG3SBMFOQNIPRZGKDK3ARHLTTB/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2VWGCMYKQH4BTFEHX5VYEXXOPIKKFHS/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/CESNET/libyang/issues/1979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6NQZHCJG3SBMFOQNIPRZGKDK3ARHLTTB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2VWGCMYKQH4BTFEHX5VYEXXOPIKKFHS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0225",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-03T23:15:06.907",
      "lastModified" : "2025-02-18T16:15:14.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en Samba. Una comprobación de acceso incompleta en dnsHostName permite a usuarios autenticados pero sin privilegios eliminar este atributo de cualquier objeto del directorio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.17.0",
            "versionEndExcluding" : "4.17.7",
            "matchCriteriaId" : "2F914D5D-6211-4CF3-87AB-71284AD225A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A6E955-CE26-405F-9468-4557A256CA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E9604B46-FDA2-4CA1-971F-315AFD250033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C209E4C-098B-4D49-A21B-AC8154FE3D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2849132A-18B1-4A49-8B2E-8B6DCFCC0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "F657608C-18FB-49FA-A73E-F9BF5CD95B17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202309-06",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230406-0007/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2023-0225.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230406-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2023-0225.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0614",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-03T23:15:06.957",
      "lastModified" : "2025-02-13T15:15:12.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC."
      }, {
        "lang" : "es",
        "value" : "La corrección en 4.6.16, 4.7.9, 4.8.4 y 4.9.7 para CVE-2018-10919 Confidential Attribute Disclosure meidante filtros LDAP era insuficiente y un atacante podría ser capaz de obtener claves confidenciales de recuperación de BitLocker desde un Samba AD DC."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.16.10",
            "matchCriteriaId" : "4199E7A4-284A-45D7-84C7-AF0141FD94EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.17.0",
            "versionEndExcluding" : "4.17.7",
            "matchCriteriaId" : "2F914D5D-6211-4CF3-87AB-71284AD225A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A6E955-CE26-405F-9468-4557A256CA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E9604B46-FDA2-4CA1-971F-315AFD250033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C209E4C-098B-4D49-A21B-AC8154FE3D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2849132A-18B1-4A49-8B2E-8B6DCFCC0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "F657608C-18FB-49FA-A73E-F9BF5CD95B17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXBPYIA4VWNOD437NAHZ3NXKAETLFB5S/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-06",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230406-0007/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2023-0614.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXBPYIA4VWNOD437NAHZ3NXKAETLFB5S/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230406-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2023-0614.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0922",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-03T23:15:07.000",
      "lastModified" : "2025-02-13T15:15:12.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection."
      }, {
        "lang" : "es",
        "value" : "La herramienta de administración Samba AD DC, cuando opera contra un servidor LDAP remoto, enviará por defecto contraseñas nuevas o restablecidas a través de una conexión firmada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.16.10",
            "matchCriteriaId" : "4199E7A4-284A-45D7-84C7-AF0141FD94EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.17.0",
            "versionEndExcluding" : "4.17.7",
            "matchCriteriaId" : "2F914D5D-6211-4CF3-87AB-71284AD225A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A6E955-CE26-405F-9468-4557A256CA8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E9604B46-FDA2-4CA1-971F-315AFD250033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C209E4C-098B-4D49-A21B-AC8154FE3D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2849132A-18B1-4A49-8B2E-8B6DCFCC0501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:4.18.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "F657608C-18FB-49FA-A73E-F9BF5CD95B17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXBPYIA4VWNOD437NAHZ3NXKAETLFB5S/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-06",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230406-0007/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2023-0922.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXBPYIA4VWNOD437NAHZ3NXKAETLFB5S/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230406-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2023-0922.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1579",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-03T23:15:07.043",
      "lastModified" : "2025-02-13T15:15:12.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCD75E60-93B1-44A8-8788-22AE01DA2AD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202309-15",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0009/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=29988",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=11d171f1910b508a81d21faa087ad1af573407d8",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=29988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=11d171f1910b508a81d21faa087ad1af573407d8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T02:15:07.113",
      "lastModified" : "2025-02-13T16:15:39.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The hashing algorithm of ChurchCRM v4.5.3 utilizes a non-random salt value which allows attackers to use precomputed hash tables or dictionary attacks to crack the hashed passwords."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A21E4C-1CE8-4C97-9374-DD8EBDB942D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ChurchCRM/CRM/issues/6449",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM/issues/6449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26976",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T02:15:07.157",
      "lastModified" : "2025-02-13T16:15:40.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac6_firmware:15.03.05.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5D3A56-30DB-40CB-A5BC-F14FA83E9BCE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00830EE1-D0BB-462E-9F15-4E59560C14B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/AC6/205_1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/AC6/205_1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1768",
      "sourceIdentifier" : "security@checkmk.com",
      "published" : "2023-04-04T07:15:11.697",
      "lastModified" : "2024-11-21T07:39:52.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@checkmk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@checkmk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-446"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5D63367A-3B90-462E-B6AD-1CB5721FD45E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E2E954-B3C3-4CC0-B2C8-0E2BEEC93016"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:b10:*:*:*:*:*:*",
            "matchCriteriaId" : "1638594A-84F1-44F6-BB30-D4CC73ECDA38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:b11:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB84DA0-9033-4771-B293-80D283539F00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:b12:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2757BF-E3B7-487A-8929-0208D3B0D3CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "B5193296-508C-400E-868B-A0D86D178042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "F01E79D2-EFA4-4A7E-A286-3E86F52B429D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "D12A6070-0542-4293-AE13-85D4E81E1672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:b5:*:*:*:*:*:*",
            "matchCriteriaId" : "6AF633FE-DE7C-4548-9ED2-880E915FC33C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:b6:*:*:*:*:*:*",
            "matchCriteriaId" : "62F02BC2-7010-4038-B381-0B8A83930E83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:b7:*:*:*:*:*:*",
            "matchCriteriaId" : "0E3BC8A3-56DE-4EE6-9AD2-26C6005DE2BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:b8:*:*:*:*:*:*",
            "matchCriteriaId" : "CB7C73EF-F306-4114-AD71-04BB7A5FD974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:b9:*:*:*:*:*:*",
            "matchCriteriaId" : "F15190EF-E3F5-4AD1-B748-C0E63C8CB741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "30F84B89-7EC6-44E6-A164-4C170379D55C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA94D2F-F27C-4DF6-84AE-8ED1BBC7F61E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "71CF8EFD-17F6-4D9A-961A-4B949A6C8B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "B04DC2A8-CF05-4FB2-AE2F-AE07943B998D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3BECA6-983C-436E-A635-4E1FB9080E56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "51A9A2B4-3693-490A-94E2-64E1DB795646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "C14AB385-8A9F-46FA-A1C5-4A4A45C1B7F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p16:*:*:*:*:*:*",
            "matchCriteriaId" : "EC41CC5F-F088-4E65-B076-35665F0F6C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "D599652E-9F70-4F9E-B8E9-99AB09EE851B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "6DABDE38-A3AF-4DD2-928A-8B3A0AA054A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p19:*:*:*:*:*:*",
            "matchCriteriaId" : "EC636B76-B050-4B73-A524-21862B020797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "D49B1D63-8FDD-45FD-99F0-AA9E4FBCCB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p20:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFA4AF4-8395-4BBB-BA78-7116AC1DCDE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p21:*:*:*:*:*:*",
            "matchCriteriaId" : "5565C1C5-5C23-4449-AB87-49A304382387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p22:*:*:*:*:*:*",
            "matchCriteriaId" : "78320525-F346-4419-81E3-4A47BD17C808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p23:*:*:*:*:*:*",
            "matchCriteriaId" : "EA91018D-DA38-4026-9F47-383F16C85031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p24:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DBEF67-A9AE-46D5-89D0-076CDB1AA06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p25:*:*:*:*:*:*",
            "matchCriteriaId" : "63E87316-1CB2-4CF4-B379-4284C8C39053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p26:*:*:*:*:*:*",
            "matchCriteriaId" : "75925C19-FBF4-4908-B8AD-E19E13B665DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p27:*:*:*:*:*:*",
            "matchCriteriaId" : "66FC7193-674F-42AA-8064-93786B5474C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p28:*:*:*:*:*:*",
            "matchCriteriaId" : "94BBC4B2-8AE6-4CCC-B194-5A4F9335AA84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p29:*:*:*:*:*:*",
            "matchCriteriaId" : "438E3BD0-93B3-4687-9E85-A08A5545FEB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "9CCE5845-1B77-4E97-B508-41400F4E1F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "3FCED94F-7683-40FE-B511-F1F49CDD1F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4E70EC-3D46-40CE-AD59-597EFD721014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "12E695A8-9A1E-4D7A-AB3B-AAC2CF777773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "653632A8-E700-404A-ADB2-B3A50253ECB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "60733789-DDA3-4819-A9F1-70B76AC715CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:1.6.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "D90DBA66-EF97-4CE9-AD4C-3A82F70D2250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EDFDCA-0778-4540-B1D5-D3A986258028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "54031390-D7E7-4A14-AA2F-923768B3685F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B7E35F-5A07-424E-AA09-AC54104D612B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4AC302-C8F5-4A2B-A73A-982D0AA2495A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "7A058C71-C39E-4109-B570-4A061013D033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*",
            "matchCriteriaId" : "22BCFA79-B3D6-4FFF-A3D3-8C4C97AF17C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1703D9-8EEB-432D-90E2-F847CDC4C204"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4C72BA-6D78-4911-83E4-4DABB2CAC47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*",
            "matchCriteriaId" : "081FD127-1066-4019-B521-9FADB85DBD4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1A4F005-4823-4B2B-B4EF-4EFDB04CFB9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "357240B1-F0DA-4FA8-B782-D998951F4B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "2F828F54-04E2-4B98-91A7-B09ED833E88B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "A4B8B300-8264-40AB-A839-7EACB988163B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "EB76A8DF-C870-482F-A488-DB2917ABD971"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "04947B1B-CF67-4C11-8FE3-6C17FD35E2EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "591AEC3C-2F48-4E91-9881-42EEDD039C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "C5CA04C8-2C80-4C7E-B329-3FFCBEDEE663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p16:*:*:*:*:*:*",
            "matchCriteriaId" : "47A1C5AC-C8B7-495A-A5F4-CD4790358A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "B87D8B46-5B04-460D-BBA1-BB19234DA19D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "C59EA30A-0B7D-4E58-A503-8C2F16B45004"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p19:*:*:*:*:*:*",
            "matchCriteriaId" : "F2849E4C-09D1-48A5-B28E-F7A4CD3E8967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E5549E-3272-478D-85D0-6F53EE731183"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p20:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0EA35B-EBFF-4E6F-BD2E-4BE165E81A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p21:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2C76F2-D457-4C7C-BE76-515CA45CA161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p22:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5A374E-56C5-4EBA-967C-CDFE6A967DFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p23:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4568F0-8CCD-4517-B4E9-7E2CA228D659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p24:*:*:*:*:*:*",
            "matchCriteriaId" : "96893FF5-B85E-45AF-9020-5D767E954D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p25:*:*:*:*:*:*",
            "matchCriteriaId" : "425ABB56-3A2E-40E3-9701-E638F16E6ADD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p26:*:*:*:*:*:*",
            "matchCriteriaId" : "9EEF6054-B3B5-4AAC-B24B-147A38564992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p27:*:*:*:*:*:*",
            "matchCriteriaId" : "462C2826-237E-4061-8F14-3DE09CE9952C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p28:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE8F008-1FC0-416C-B0D4-5A560CF985F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p29:*:*:*:*:*:*",
            "matchCriteriaId" : "53AA0AB2-E814-4378-9486-D9192293C1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "D884D3AF-7D57-4DF6-82E8-556C35319ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p30:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6A123B-D6D3-4C46-9595-4D8138FC31C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p31:*:*:*:*:*:*",
            "matchCriteriaId" : "4245029F-D95D-4364-BB29-8C60F5461070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p32:*:*:*:*:*:*",
            "matchCriteriaId" : "C67473D2-A96B-4ACD-B248-A0AF2E3C9738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p33:*:*:*:*:*:*",
            "matchCriteriaId" : "B22FDFE4-844F-449B-88D7-E7EDC92EC752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p34:*:*:*:*:*:*",
            "matchCriteriaId" : "01D13D8E-61F2-406C-8EE5-FDDD9BDCCF71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "528BAFA3-ED39-45B5-8C81-A6FD76DDB49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "02DA7C50-7360-4679-93A5-92C8DC5E8E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "71B49D90-9522-46C6-8948-B9C21CEA473C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "98C29296-D1F3-45A2-BF0A-22333150F416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "339226E6-532F-4FE2-A543-6B166A9BA7F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.0.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "986FDFA6-BE12-4268-9B90-F7D469BBE517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE224D8-742B-4D1F-ABBE-3DDA3EA5C5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6FCE7B-7ECE-42A4-82C5-12A647B0CCC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "923AA113-D5E7-4F78-88BA-B72EF250F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "B1984F57-A313-48AC-B8F9-F352D82824D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "A38DB527-72A6-40B8-B46F-B8E78BFFDB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b5:*:*:*:*:*:*",
            "matchCriteriaId" : "67643E11-91A1-4580-BC4C-574074C862CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b6:*:*:*:*:*:*",
            "matchCriteriaId" : "350B7E0F-D234-4D7C-91E4-F35E73579A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b7:*:*:*:*:*:*",
            "matchCriteriaId" : "DE58ACA9-8078-46A7-8487-C06E4E38F372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b8:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D8CF4D-E1F8-4D8D-A8A9-1783CAC869E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b9:*:*:*:*:*:*",
            "matchCriteriaId" : "58B0B051-7D3C-4EC7-96B0-38A1CC108D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A741-AAF2-43EE-8272-9239133A01E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F275A3-A99E-40E1-BD77-694FA568541F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "3A44BF1A-5BE0-4412-B51D-055445758B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "A31BAE94-9096-4320-AC19-AA204E8EC08D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0784EA-98E8-4490-B97B-894F188A223D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "A56A901F-1040-4DB9-9BE3-FE1999C514CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "58A904FC-C015-469D-8502-E678D5FDBD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p16:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5D109C-60AA-4FA4-9B10-2191AAF109F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "37297866-24BB-4044-8744-EC0A8C29F152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D4A171-CCB3-43B8-8B70-78610423E7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA8F776-A724-48FC-B7EF-13788BC69753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p20:*:*:*:*:*:*",
            "matchCriteriaId" : "46F42A22-99F2-4DF5-9B00-3123396F87AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p21:*:*:*:*:*:*",
            "matchCriteriaId" : "1C59D4D3-D526-4E6B-B3AA-FE485D030190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p22:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5CAE6-DC8B-47B3-84A0-D79B0C33EB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p23:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9E0D89-79E2-476A-8A3E-8443316BC310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p24:*:*:*:*:*:*",
            "matchCriteriaId" : "38EA0591-C30B-4102-8A06-1B922FD3A0C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p25:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9AF0D3-8DD6-4EC7-BB33-54401D4025FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "076463AA-195F-4CD6-861B-72FE1C8A407F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "63043834-98E5-47C2-91F1-41B98270ABCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF745D0-2EA6-4414-90BC-99D3ED08BB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "4823087F-D7FA-4594-8FD3-412DE5EA1F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "6429F9CE-D477-4CFF-B6E0-4BF11B61ED0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "A50C58F9-94ED-4D85-8331-2D81F8E0760A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6AC0BD-FB65-4FAA-B344-66F87F16F8B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.2.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C66704F1-0B5E-4B43-8748-987022F378F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.2.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "B068974F-6F67-4CBB-B567-FCED86E28F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.2.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "EA70F36A-EEF6-48DC-B15E-055D0DE8A052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.2.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "B2017F38-38DB-4E96-B34F-160BC731CBBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribe29:checkmk:1.6.0b10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE29788-9815-47C5-88CC-039E82348482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribe29:checkmk:1.6.0b11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF943CDA-131A-4951-9281-C0F7711C511B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribe29:checkmk:1.6.0p10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA770FD-D758-4590-9A6E-5A87E137C53E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribe29:checkmk:1.6.0p11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B75CFABF-93B3-46C4-A78E-5E160FB2D9A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribe29:checkmk:1.6.0p12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA90BF5B-3277-422C-A8AF-1562903970D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribe29:checkmk:1.6.0p13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE41BD2C-203A-4482-9FFB-E2116E222100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribe29:checkmk:1.6.0p14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECB3F23B-1D5C-4299-8F07-0B371C9803E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribe29:checkmk:1.6.0p15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EBDA72-FB06-40DE-9116-44F4BC3BB5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribe29:checkmk:1.6.0p16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BF55580-2393-4DC6-88F5-9B0C6797FD21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribe29:checkmk:1.6.0p17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6786541D-CB3B-432D-8D0F-05178237FE4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribe29:checkmk:1.6.0p18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E668FDEE-6503-4FF5-BA24-DD84180CB38A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://checkmk.com/werk/15423",
        "source" : "security@checkmk.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://checkmk.com/werk/15423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1728",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-04-04T09:15:07.343",
      "lastModified" : "2024-11-21T07:39:46.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted Upload of File with Dangerous Type vulnerability in Fernus Informatics LMS allows OS Command Injection, Server Side Include (SSI) Injection.This issue affects LMS: before 23.04.03.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fernus:learning_management_systems:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.04.03",
            "matchCriteriaId" : "B6F83193-191B-4AD9-9127-70437657E652"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0194",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1826",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-04T09:15:07.977",
      "lastModified" : "2024-11-21T07:39:58.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file php-ocls\\admin\\system_info\\index.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-224841 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171790/Online-Computer-And-Laptop-Store-1.0-Shell-Upload.html",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224841",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224841",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171790/Online-Computer-And-Laptop-Store-1.0-Shell-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1671",
      "sourceIdentifier" : "security-alert@sophos.com",
      "published" : "2023-04-04T10:15:07.197",
      "lastModified" : "2025-10-27T17:00:49.127",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@sophos.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-11-16",
      "cisaActionDue" : "2023-12-07",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Sophos Web Appliance Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:web_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.10.4",
            "matchCriteriaId" : "55F9D349-CF04-4983-818B-C98E4A515E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html",
        "source" : "security-alert@sophos.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce",
        "source" : "security-alert@sophos.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-1671",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1827",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-04T10:15:07.240",
      "lastModified" : "2024-11-21T07:39:58.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Centralized Covid Vaccination Records System 1.0 and classified as critical. This vulnerability affects unknown code of the file /vaccinated/admin/maintenance/manage_location.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224842 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centralized_covid_vaccination_records_system_project:centralized_covid_vaccination_records_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "615123BA-DAB9-4F62-A432-602EFEBE4E6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZERO-XX-ONE/bug_report/blob/main/SQLi.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224842",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224842",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ZERO-XX-ONE/bug_report/blob/main/SQLi.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.224842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25940",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-04-04T11:15:06.960",
      "lastModified" : "2024-11-21T07:50:29.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell PowerScale OneFS version 9.5.0.0 contains improper link resolution before file access vulnerability in isi_gather_info. A high privileged local attacker could potentially exploit this vulnerability, leading to system takeover and it breaks the compliance mode guarantees.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:9.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4277818-0438-42C0-AA90-FFDA2F57AD92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25941",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-04-04T11:15:07.073",
      "lastModified" : "2024-11-21T07:50:29.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to Denial of service, escalation of privileges, and information disclosure. This vulnerability breaks the compliance mode guarantee.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0.0",
            "versionEndIncluding" : "9.1.0.28",
            "matchCriteriaId" : "2CEB3F0B-81C0-4C19-BA99-FAFE92E8AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.1.0",
            "versionEndExcluding" : "9.2.1.22",
            "matchCriteriaId" : "F74C69F0-4D52-40B1-BE85-13F93B7A8805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0.0",
            "versionEndExcluding" : "9.4.0.13",
            "matchCriteriaId" : "755F9436-7563-4365-B230-7F552F404FBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25942",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-04-04T11:15:07.137",
      "lastModified" : "2024-11-21T07:50:29.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability. A malicious network user with low privileges could potentially exploit this vulnerability in SMB, leading to a potential denial of service.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-664"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0.0",
            "versionEndIncluding" : "9.1.0.28",
            "matchCriteriaId" : "2CEB3F0B-81C0-4C19-BA99-FAFE92E8AD7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.1.0",
            "versionEndExcluding" : "9.2.1.22",
            "matchCriteriaId" : "F74C69F0-4D52-40B1-BE85-13F93B7A8805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0.0",
            "versionEndExcluding" : "9.4.0.13",
            "matchCriteriaId" : "755F9436-7563-4365-B230-7F552F404FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:9.5.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4277818-0438-42C0-AA90-FFDA2F57AD92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23685",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-04T12:15:07.127",
      "lastModified" : "2024-11-21T07:46:39.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in RadiusTheme Portfolio – WordPress Portfolio plugin <= 2.8.10 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:radiustheme:portfolio:*:*:*:*:free:wordpress:*:*",
            "versionEndExcluding" : "2.8.11",
            "matchCriteriaId" : "42A2DB90-5B6C-48D1-A919-435BAB822BE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/tlp-portfolio/wordpress-portfolio-wordpress-portfolio-plugin-plugin-2-8-10-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/tlp-portfolio/wordpress-portfolio-wordpress-portfolio-plugin-plugin-2-8-10-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23686",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-04T12:15:07.180",
      "lastModified" : "2024-11-21T07:46:39.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Brett Shumaker Simple Staff List plugin <= 2.2.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_staff_list_project:simple_staff_list:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.2.3",
            "matchCriteriaId" : "6832852E-33CF-4F38-A290-BA81B9609E5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/simple-staff-list/wordpress-simple-staff-list-plugin-2-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/simple-staff-list/wordpress-simple-staff-list-plugin-2-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23821",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-04T12:15:07.227",
      "lastModified" : "2024-11-21T07:46:53.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marcin Pietrzak Interactive Polish Map plugin <= 1.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interactive_polish_map_project:interactive_polish_map:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.1",
            "matchCriteriaId" : "9E220763-AE62-46B2-A43F-93FE3F9160CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/interactive-polish-map/wordpress-interactive-polish-map-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/interactive-polish-map/wordpress-interactive-polish-map-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23878",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-04T12:15:07.280",
      "lastModified" : "2025-05-07T13:35:15.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS plugin <= 4.3.9 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weplugins:wp_maps:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.4.0",
            "matchCriteriaId" : "BB5534BB-CDEA-4111-939A-668241FCAB4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-google-map-plugin/wordpress-wordpress-plugin-for-google-maps-wp-maps-plugin-4-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-google-map-plugin/wordpress-wordpress-plugin-for-google-maps-wp-maps-plugin-4-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23870",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-04T13:15:08.480",
      "lastModified" : "2024-11-21T07:47:00.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Responsive Vertical Icon Menu plugin <= 1.5.8 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdevart:responsive_vertical_icon_menu:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.9",
            "matchCriteriaId" : "154CE58F-1B2D-4656-83EE-E64C85ED7184"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wpdevart-vertical-menu/wordpress-responsive-vertical-icon-menu-plugin-1-5-8-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wpdevart-vertical-menu/wordpress-responsive-vertical-icon-menu-plugin-1-5-8-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23977",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-04T13:15:08.543",
      "lastModified" : "2024-11-21T07:47:11.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Team Heateor WordPress Social Comments Plugin for Vkontakte Comments and Disqus Comments plugin <= 1.6.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:heateor:social_comments:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.6.2",
            "matchCriteriaId" : "8C7F1D1C-D440-45C4-9E60-E04574201949"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/heateor-social-comments/wordpress-vkontakte-comments-and-disqus-comments-plugin-1-6-1-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/heateor-social-comments/wordpress-vkontakte-comments-and-disqus-comments-plugin-1-6-1-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T13:15:08.603",
      "lastModified" : "2025-02-13T16:15:38.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ATLauncher <= 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlauncher:atlauncher:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.27.0",
            "matchCriteriaId" : "A592E033-92AD-4A94-8744-72215652DB32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ATLauncher/ATLauncher/security/advisories/GHSA-7cff-8xv4-mvx6",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ATLauncher/ATLauncher/security/advisories/GHSA-7cff-8xv4-mvx6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T13:15:08.643",
      "lastModified" : "2025-02-13T16:15:38.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PolyMC Launcher <= 1.4.3 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polymc:polymc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0",
            "matchCriteriaId" : "713C07FA-DA6B-4BB3-A55C-D364169F3D38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PolyMC/PolyMC/security/advisories/GHSA-3rfr-g9g9-7gx2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PolyMC/PolyMC/security/advisories/GHSA-3rfr-g9g9-7gx2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T13:15:08.680",
      "lastModified" : "2025-02-13T16:15:38.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run commands as the `daemon` user on a sipXcom server can overwrite a service file, and escalate their privileges to `root`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coredial:sipxcom:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.04",
            "matchCriteriaId" : "F16B7292-ED43-42A4-B038-1D9C522B9821"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://seclists.org/fulldisclosure/2023/Mar/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2023/Mar/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25356",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T13:15:08.713",
      "lastModified" : "2025-02-13T16:15:38.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CoreDial sipXcom up to and including 21.04 is vulnerable to Improper Neutralization of Argument Delimiters in a Command. XMPP users are able to inject arbitrary arguments into a system command, which can be used to read files from, and write files to, the sipXcom server. This can also be leveraged to gain remote command execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coredial:sipxcom:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.04",
            "matchCriteriaId" : "F16B7292-ED43-42A4-B038-1D9C522B9821"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://seclists.org/fulldisclosure/2023/Mar/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2023/Mar/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T13:15:08.750",
      "lastModified" : "2025-02-13T16:15:40.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete takeover."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:greenpacket:wr-1200_firmware:m-idu-1.6.0.3_v1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F69A52A-01CA-4791-B471-733961EDE20B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:greenpacket:wr-1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13725B7D-8B6B-49DB-A515-1078840AD967"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:greenpacket:ot-235_firmware:m-idu-1.6.0.3_v1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B039D93-BD35-450C-A5D6-53BA29802806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:greenpacket:ot-235_firmware:mh-46360-2.0.3-r5-gp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "427F138A-9616-4ADE-B9D2-69D65DC73F5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:greenpacket:ot-235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ECABF5E-5EAB-4D04-9BDB-284286FBD1D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lionelmusonza/CVE-2023-26866",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lionelmusonza/CVE-2023-26866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28848",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T13:15:08.797",
      "lastModified" : "2024-11-21T07:56:09.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "user_oidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform. A vulnerability in versions 1.0.0 until 1.3.0 effectively allowed an attacker to bypass the state protection as they could just copy the expected state token from the first request to their second request. Users should upgrade user_oidc to 1.3.0 to receive a patch for the issue. No known workarounds are available."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:user_oidc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "A40E2FB4-3276-4DBF-B194-DB09CBF65201"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-52hv-xw32-wf7f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/user_oidc/pull/580",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1878381",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-52hv-xw32-wf7f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/user_oidc/pull/580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1878381",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28997",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T13:15:08.867",
      "lastModified" : "2025-11-03T19:15:41.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server administrator can recover and modify the contents of end-to-end encrypted files. Users should upgrade the Nextcloud Desktop client to 3.6.5 to receive a patch. No known workarounds are available."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.4,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-323"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:desktop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.6.5",
            "matchCriteriaId" : "F1D69443-506B-4A0C-92F4-880BA513B520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_DanieleCoppola.pdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/desktop/pull/5324",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-4p33-rw27-j5fc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_DanieleCoppola.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/desktop/pull/5324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-4p33-rw27-j5fc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/09/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28998",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T13:15:08.937",
      "lastModified" : "2024-11-21T07:56:21.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files, recover the folder structure, and add new files.​ Users should upgrade the Nextcloud Desktop client to 3.6.5 to receive a patch. No known workarounds are available."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.4,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-325"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:desktop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.6.5",
            "matchCriteriaId" : "F1D69443-506B-4A0C-92F4-880BA513B520"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_DanieleCoppola.pdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/desktop/pull/5323",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-jh3g-wpwv-cqgr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_DanieleCoppola.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/desktop/pull/5323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-jh3g-wpwv-cqgr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28999",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T13:15:09.003",
      "lastModified" : "2024-11-21T07:56:22.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until 3.25.0, and Nextcloud iOS app 3.0.5 until 4.8.0, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files, recover the folder structure and add new files.​ This issue is fixed in Nextcloud Desktop 3.8.0, Nextcloud Android 3.25.0, and Nextcloud iOS 4.8.0. No known workarounds are available."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.4,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-325"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:desktop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.8.0",
            "matchCriteriaId" : "F4EEF1B4-66BE-4127-A87F-E92ACCF8897D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud:*:*:*:*:iphone_os:*:*:*",
            "versionStartIncluding" : "3.0.5",
            "versionEndExcluding" : "4.8.0",
            "matchCriteriaId" : "CAC80EF2-7FAF-4730-938F-3F5D3C137F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud:*:*:*:*:android:*:*:*",
            "versionStartIncluding" : "3.13.0",
            "versionEndExcluding" : "3.25.0",
            "matchCriteriaId" : "012EE253-E69E-406B-8B84-D04F13940620"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_DanieleCoppola.pdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/desktop/pull/5560",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8875-wxww-3rr8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_DanieleCoppola.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/desktop/pull/5560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8875-wxww-3rr8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29000",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T13:15:09.067",
      "lastModified" : "2024-11-21T07:56:22.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.7.0, by trusting that the server will return a certificate that belongs to the keypair of the user, a malicious server could get the desktop client to encrypt files with a key known to the attacker. This issue is fixed in Nextcloud Desktop 3.7.0. No known workarounds are available."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:desktop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.7.0",
            "matchCriteriaId" : "098D966E-8898-4879-8DC2-49C7DF80EFB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/desktop/pull/4949",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h82x-98q3-7534",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1679267",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/nextcloud/desktop/pull/4949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h82x-98q3-7534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1679267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26437",
      "sourceIdentifier" : "security@open-xchange.com",
      "published" : "2023-04-04T15:15:08.880",
      "lastModified" : "2025-02-13T17:16:12.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial of service vulnerability in PowerDNS Recursor allows authoritative servers to be marked unavailable.This issue affects Recursor: through 4.6.5, through 4.7.4 , through 4.8.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@open-xchange.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L",
            "baseScore" : 3.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6.6",
            "matchCriteriaId" : "5ADA5151-D48E-462A-B05B-74F93F7BC93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.7.0",
            "versionEndExcluding" : "4.7.5",
            "matchCriteriaId" : "515C04D7-C041-429A-BDDE-B27D9F49E57B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.8.0",
            "versionEndExcluding" : "4.8.4",
            "matchCriteriaId" : "1B8A7A13-5283-42CA-A2A0-9B44BEBD81C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2023-02.html",
        "source" : "security@open-xchange.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CN7VMRYKZHG2UDUAK326LXD3JY7NO3LR/",
        "source" : "security@open-xchange.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHPD6SIQOG7245GXFQHPUEI4AZ6Y3KD6/",
        "source" : "security@open-xchange.com"
      }, {
        "url" : "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2023-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CN7VMRYKZHG2UDUAK326LXD3JY7NO3LR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHPD6SIQOG7245GXFQHPUEI4AZ6Y3KD6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:08.940",
      "lastModified" : "2025-02-13T16:15:39.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow vulnerability found in tinyTIFF v.3.0 allows a local attacker to cause a denial of service via the TinyTiffReader_readNextFrame function in tinytiffreader.c file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinytiff_project:tinytiff:3.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6431A9DC-17CF-44B2-858F-48734F6BF20E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/Security-Issue-Report-of-TinyTIFF/blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jkriege2/TinyTIFF/issues/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/10cksYiqiyinHangzhouTechnology/Security-Issue-Report-of-TinyTIFF/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jkriege2/TinyTIFF/issues/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26750",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:08.983",
      "lastModified" : "2025-02-13T16:15:39.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability found in Yii Framework Yii 2 Framework before v.2.0.47 allows the a remote attacker to execute arbitrary code via the runAction function. NOTE: the software maintainer's position is that the vulnerability is in third-party code, not in the framework."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yiiframework:yii:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.47",
            "matchCriteriaId" : "D9E60D1F-4C63-434D-866C-8D1D1E5A5ACD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yiisoft/yii2/issues/19755",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/yiisoft/yii2/issues/19755#issuecomment-1426155955",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/yiisoft/yii2/issues/19755#issuecomment-1505390813",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/yiisoft/yii2/issues/19755#issuecomment-1505560351",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/yiisoft/yii2/issues/19755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/yiisoft/yii2/issues/19755#issuecomment-1426155955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/yiisoft/yii2/issues/19755#issuecomment-1505390813",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/yiisoft/yii2/issues/19755#issuecomment-1505560351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.020",
      "lastModified" : "2024-11-21T07:51:55.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the assets/php/upload.php endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monitorr:monitorr:1.7.6m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2ED07C-59E4-46E4-A33E-BB43B3B370F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171705/Monitorr-1.7.6-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/Monitorr/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Monitorr/Monitorr",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Monitorr/Monitorr/blob/3ebfd915bfb02aae2ded08c5e4ba6b1bea3009f2/assets/php/upload.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://twitter.com/retrymp3",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171705/Monitorr-1.7.6-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/Monitorr/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Monitorr/Monitorr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Monitorr/Monitorr/blob/3ebfd915bfb02aae2ded08c5e4ba6b1bea3009f2/assets/php/upload.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://twitter.com/retrymp3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.063",
      "lastModified" : "2025-02-13T16:15:39.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting vulnerability found in Monitorr v.1.7.6 allows a remote attacker to execute arbitrary code via the title parameter of the post_receiver-services.php file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monitorr:monitorr:1.7.6m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF2ED07C-59E4-46E4-A33E-BB43B3B370F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171705/Monitorr-1.7.6-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Monitorr",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Monitorr/Monitorr",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Monitorr/Monitorr/blob/3ebfd915bfb02aae2ded08c5e4ba6b1bea3009f2/assets/php/post_receiver-services.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://twitter.com/retrymp3",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171705/Monitorr-1.7.6-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Monitorr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Monitorr/Monitorr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Monitorr/Monitorr/blob/3ebfd915bfb02aae2ded08c5e4ba6b1bea3009f2/assets/php/post_receiver-services.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://twitter.com/retrymp3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.103",
      "lastModified" : "2025-02-13T16:15:39.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting vulnerability found in : louislam Uptime Kuma v.1.19.6 and before allows a remote attacker to execute arbitrary commands via the description, title, footer, and incident creation parameter of the status_page.js endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uptime_kuma_project:uptime_kuma:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.19.6",
            "matchCriteriaId" : "02BD1652-2AD6-4EF0-B6C9-A0DBE5DBE0B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171699/Uptime-Kuma-1.19.6-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/louislam/uptime-kuma/issues/2186",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171699/Uptime-Kuma-1.19.6-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/louislam/uptime-kuma/issues/2186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.143",
      "lastModified" : "2025-02-13T16:15:40.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via ql_atfwd."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:quectel:ag550qcn_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A55646F2-8E05-487F-B384-1ADD6E3A9EDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:quectel:ag550qcn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281E5B6B-343B-46B7-813A-B2DCBEE2CD68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/closethe/AG550QCN_CommandInjection_ql_atfwd/blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/closethe/AG550QCN_CommandInjection_ql_atfwd/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26991",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.183",
      "lastModified" : "2025-02-12T16:15:37.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swf_ReadSWF2 function in lib/rfxswf.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/196",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27734",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.223",
      "lastModified" : "2025-02-14T17:15:14.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Eteran edb-debugger v.1.3.0 allows a local attacker to causea denial of service via the collect_symbols function in plugins/BinaryInfo/symbols.cpp."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edb-debugger_project:edb-debugger:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B123EC4-BA99-4DB4-81CC-41E76D867349"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eteran/edb-debugger/pull/834/commits/32f325f4016e0090f76934320173581860f090be",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/eteran/edb-debugger/pull/834/commits/32f325f4016e0090f76934320173581860f090be",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.260",
      "lastModified" : "2025-02-14T17:15:14.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Wondershare Technology Co, Ltd Edrawmind v.10.0.6 allows a remote attacker to executea arbitrary commands via the WindowsCodescs.dll file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:edrawmind:10.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6633FCBB-522B-40A4-9A21-343D97902AEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liong007/Wondershare/issues/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/liong007/Wondershare/issues/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.297",
      "lastModified" : "2025-02-13T22:15:09.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Wondershare Technology Co, Ltd Filmora v.12.0.9 allows a remote attacker to execute arbitrary commands via the filmora_setup_full846.exe."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:filmora:12.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9B71B6-1D23-417B-A9BE-5CDE818C541B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liong007/Wondershare/issues/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/liong007/Wondershare/issues/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.337",
      "lastModified" : "2025-02-13T22:15:09.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Wondershare Technology Co., Ltd UniConverter v.14.0.0 allows a remote attacker to execute arbitrary commands via the uniconverter14_64bit_setup_full14204.exe file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:uniconverter:14.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49F8E9E0-6BAC-4BB3-A747-EC2C2C236DD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liong007/Wondershare/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/liong007/Wondershare/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.373",
      "lastModified" : "2025-02-13T22:15:09.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Wondershare Technology Co., Ltd DemoCreator v.6.0.0 allows a remote attacker to execute arbitrary commands via the democreator_setup_full7743.exe file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:democreator:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "431B11E8-83EB-49F4-B4AC-D3C82EBB1341"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liong007/Wondershare/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/liong007/Wondershare/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.413",
      "lastModified" : "2025-02-13T22:15:09.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Wondershare Technology Co.,Ltd MobileTrans v.4.0.2 allows a remote attacker to execute arbitrary commands via the mobiletrans_setup_full5793.exe file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:mobiletrans:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "789C61FF-A3B2-4448-A3AD-302019AFD3DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liong007/Wondershare/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/liong007/Wondershare/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.450",
      "lastModified" : "2025-02-13T22:15:09.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Wondershare Technology Co.,Ltd Repairit v.3.5.4 allows a remote attacker to execute arbitrary commands via the repairit_setup_full5913.exe file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:repairit:3.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F2C379-DF6C-478D-94F7-09BD9B0EB394"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liong007/Wondershare/issues/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/liong007/Wondershare/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.490",
      "lastModified" : "2025-02-13T22:15:10.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Wondershare Technology Co.,Ltd Recoverit v.10.6.3 allows a remote attacker to execute arbitrary commands via the recoverit_setup_full4134.exe file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:recoverit:10.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3909290-98E9-48B9-B435-2893AB84063A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liong007/Wondershare/issues/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/liong007/Wondershare/issues/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.530",
      "lastModified" : "2025-02-13T22:15:10.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Wondershare Technology Co.,Ltd Anireel 1.5.4 allows a remote attacker to execute arbitrary commands via the anireel_setup_full9589.exe file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:anireel:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B1CEDA-9E43-4C31-A627-BDDEB2587FF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liong007/Wondershare/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/liong007/Wondershare/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.567",
      "lastModified" : "2025-02-13T21:15:12.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Wondershare Technology Co.,Ltd Dr.Fone v.12.4.9 allows a remote attacker to execute arbitrary commands via the drfone_setup_full3360.exe file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:dr.fone:12.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A27B3A7A-5599-4038-821A-5D4109C37AC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liong007/Wondershare/issues/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/liong007/Wondershare/issues/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.613",
      "lastModified" : "2025-02-13T21:15:12.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Wondershare Technology Co.,Ltd PDFelement v9.1.1 allows a remote attacker to execute arbitrary commands via the pdfelement-pro_setup_full5239.exe file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:pdfelement:9.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD08948C-F4D4-43F9-BE3A-17226085F935"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liong007/Wondershare/issues/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/liong007/Wondershare/issues/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.660",
      "lastModified" : "2025-02-13T21:15:12.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Wondershare Technology Co.,Ltd PDF Reader v.1.0.1 allows a remote attacker to execute arbitrary commands via the pdfreader_setup_full13143.exe file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:pdf_reader:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA5F732-5323-487A-AE22-533879A0D63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liong007/Wondershare/issues/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/liong007/Wondershare/issues/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.710",
      "lastModified" : "2025-02-13T16:15:41.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Wondershare Technology Co.,Ltd Edraw-max v.12.0.4 allows a remote attacker to execute arbitrary commands via the edraw-max_setup_full5371.exe file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:edraw-max:12.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "359788D1-D37B-4D52-8497-AF39A0F4FCEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liong007/Wondershare/issues/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/liong007/Wondershare/issues/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T15:15:09.763",
      "lastModified" : "2025-02-13T21:15:13.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote attacker to execute arbitrary commands via the wondershareCC_setup_full10819.exe file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:creative_centerr:1.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0855BB-41BB-4370-89F0-F61BCCF850C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liong007/Wondershare/issues/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/liong007/Wondershare/issues/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26974",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T16:15:07.307",
      "lastModified" : "2025-02-13T16:15:40.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08C9965-4A6C-48FA-BB93-1D138699DCB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/overXsky/IrfanviewPoc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/overXsky/IrfanviewPoc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27487",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T16:15:07.343",
      "lastModified" : "2024-11-21T07:53:00.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, the client may bypass JSON Web Token (JWT) checks and forge fake original paths. The header `x-envoy-original-path` should be an internal header, but Envoy does not remove this header from the request at the beginning of request processing when it is sent from an untrusted client. The faked header would then be used for trace logs and grpc logs, as well as used in the URL used for `jwt_authn` checks if the `jwt_authn` filter is used, and any other upstream use of the x-envoy-original-path header. Attackers may forge a trusted `x-envoy-original-path` header. Versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9 have patches for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22.9",
            "matchCriteriaId" : "DAD93214-C958-4A69-9291-15D1C22CFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndExcluding" : "1.23.6",
            "matchCriteriaId" : "17BFB303-DA5A-4E83-93F7-3C1EA340E434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.24.0",
            "versionEndExcluding" : "1.24.4",
            "matchCriteriaId" : "92B633B8-FA4A-4630-9302-96F2C8336E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.25.0",
            "versionEndExcluding" : "1.25.3",
            "matchCriteriaId" : "8AFC6741-6FDF-47F6-A4AF-B5F5233ABB71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/envoyproxy/envoy/security/advisories/GHSA-5375-pq35-hf2g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/envoyproxy/envoy/security/advisories/GHSA-5375-pq35-hf2g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T16:15:07.407",
      "lastModified" : "2025-02-13T17:16:15.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD1A7B09-9031-4E54-A24F-3237C054166B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC68046-2F08-40D1-B158-89D8D9263541"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63C0D9AC-BD23-48C9-83E7-301DEC06E583"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72ADEBB-ED72-4A5B-BB27-95EDE43F8116"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F66A096-7BA3-47D6-98F4-879C3A4C1FFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE202894-D48A-4B9E-B3BD-28529967A0B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172177/Shannon-Baseband-Integer-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172177/Shannon-Baseband-Integer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://semiconductor.samsung.com/processor/mobile-processor/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/processor/modem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1748",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-04T17:15:07.060",
      "lastModified" : "2024-11-21T07:39:49.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to the Nexx Home mobile application or the affected firmware could view the credentials and access the MQ Telemetry Server (MQTT) server and the ability to remotely control garage doors or smart plugs for any customer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxal-100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxal100v-p1-9-1",
            "matchCriteriaId" : "ECEB2E75-CBB4-4698-8362-E299B360D230"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxal-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A105A0A9-453D-4FEC-A892-90DF700AF48F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxg-100b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxg100bv-p3-4-1",
            "matchCriteriaId" : "CFED44C1-D08F-485F-9613-2FF354646544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxg-100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19767CB6-01EC-4D9A-B879-622D97659C41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxpg-100w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxpg100cv4-0-0",
            "matchCriteriaId" : "705949CF-FA4F-4D31-A125-897E4738FD60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxpg-100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BABBFCE0-C690-4867-9416-5C9E453A6B1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxg-200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxg200v-p3-4-1",
            "matchCriteriaId" : "5D3856AF-F315-4D54-A415-23D870E57FDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxg-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23E0481-74FD-4F0C-926C-D303DF9F9E68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1749",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-04T17:15:07.117",
      "lastModified" : "2024-11-21T07:39:49.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxal-100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxal100v-p1-9-1",
            "matchCriteriaId" : "ECEB2E75-CBB4-4698-8362-E299B360D230"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxal-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A105A0A9-453D-4FEC-A892-90DF700AF48F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxg-100b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxg100bv-p3-4-1",
            "matchCriteriaId" : "CFED44C1-D08F-485F-9613-2FF354646544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxg-100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19767CB6-01EC-4D9A-B879-622D97659C41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxpg-100w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxpg100cv4-0-0",
            "matchCriteriaId" : "705949CF-FA4F-4D31-A125-897E4738FD60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxpg-100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BABBFCE0-C690-4867-9416-5C9E453A6B1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxg-200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxg200v-p3-4-1",
            "matchCriteriaId" : "5D3856AF-F315-4D54-A415-23D870E57FDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxg-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23E0481-74FD-4F0C-926C-D303DF9F9E68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1750",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-04T17:15:07.173",
      "lastModified" : "2024-11-21T07:39:49.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxal-100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxal100v-p1-9-1",
            "matchCriteriaId" : "ECEB2E75-CBB4-4698-8362-E299B360D230"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxal-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A105A0A9-453D-4FEC-A892-90DF700AF48F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxg-100b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxg100bv-p3-4-1",
            "matchCriteriaId" : "CFED44C1-D08F-485F-9613-2FF354646544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxg-100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19767CB6-01EC-4D9A-B879-622D97659C41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxpg-100w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxpg100cv4-0-0",
            "matchCriteriaId" : "705949CF-FA4F-4D31-A125-897E4738FD60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxpg-100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BABBFCE0-C690-4867-9416-5C9E453A6B1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxg-200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxg200v-p3-4-1",
            "matchCriteriaId" : "5D3856AF-F315-4D54-A415-23D870E57FDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxg-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23E0481-74FD-4F0C-926C-D303DF9F9E68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1751",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-04T17:15:07.227",
      "lastModified" : "2024-11-21T07:39:49.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization header belongs to the device attempting to associate. This could allow any authorized user to receive alarm information and signals meant for other devices which leak a deviceId."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxal-100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxal100v-p1-9-1",
            "matchCriteriaId" : "ECEB2E75-CBB4-4698-8362-E299B360D230"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxal-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A105A0A9-453D-4FEC-A892-90DF700AF48F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxg-100b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxg100bv-p3-4-1",
            "matchCriteriaId" : "CFED44C1-D08F-485F-9613-2FF354646544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxg-100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19767CB6-01EC-4D9A-B879-622D97659C41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxpg-100w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxpg100cv4-0-0",
            "matchCriteriaId" : "705949CF-FA4F-4D31-A125-897E4738FD60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxpg-100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BABBFCE0-C690-4867-9416-5C9E453A6B1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxg-200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxg200v-p3-4-1",
            "matchCriteriaId" : "5D3856AF-F315-4D54-A415-23D870E57FDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxg-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23E0481-74FD-4F0C-926C-D303DF9F9E68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1752",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-04T17:15:07.277",
      "lastModified" : "2024-11-21T07:39:49.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxal-100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxal100v-p1-9-1",
            "matchCriteriaId" : "ECEB2E75-CBB4-4698-8362-E299B360D230"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxal-100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A105A0A9-453D-4FEC-A892-90DF700AF48F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxg-100b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxg100bv-p3-4-1",
            "matchCriteriaId" : "CFED44C1-D08F-485F-9613-2FF354646544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxg-100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19767CB6-01EC-4D9A-B879-622D97659C41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxpg-100w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxpg100cv4-0-0",
            "matchCriteriaId" : "705949CF-FA4F-4D31-A125-897E4738FD60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxpg-100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BABBFCE0-C690-4867-9416-5C9E453A6B1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:getnexx:nxg-200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "nxg200v-p3-4-1",
            "matchCriteriaId" : "5D3856AF-F315-4D54-A415-23D870E57FDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:getnexx:nxg-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23E0481-74FD-4F0C-926C-D303DF9F9E68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T18:15:07.000",
      "lastModified" : "2025-02-14T17:15:13.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting vulnerability found in Ehuacui BBS allows attackers to cause a denial of service via a crafted payload in the login parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.3
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ehuacui-bbs_project:ehuacui-bbs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "692FA4B7-DA8E-4481-A26C-34EFF01BD306"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/ehuacui/ehuacui-bbs/issues/I6GDCB",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ehuacui/ehuacui-bbs/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/ehuacui/ehuacui-bbs/issues/I6GDCB",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ehuacui/ehuacui-bbs/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T18:15:07.043",
      "lastModified" : "2025-02-18T18:15:14.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameter(s)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teacms_project:teacms:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D996D2D-6075-45D2-B3D7-9EA005FCCE1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/xiaobingby/TeaCMS/issues/I6GDRU",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/xiaobingby/TeaCMS/issues/I6SXAF",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/xiaobingby/TeaCMS/issues/I6GDRU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/xiaobingby/TeaCMS/issues/I6SXAF",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27488",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T18:15:07.083",
      "lastModified" : "2024-11-21T07:53:00.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, escalation of privileges is possible when `failure_mode_allow: true` is configured for `ext_authz` filter. For affected components that are used for logging and/or visibility, requests may not be logged by the receiving service.\n\nWhen Envoy was configured to use ext_authz, ext_proc, tap, ratelimit filters, and grpc access log service and an http header with non-UTF-8 data was received, Envoy would generate an invalid protobuf message and send it to the configured service. The receiving service would typically generate an error when decoding the protobuf message. For ext_authz that was configured with ``failure_mode_allow: true``, the request would have been allowed in this case. For the other services, this could have resulted in other unforeseen errors such as a lack of visibility into requests. \n\nAs of versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, Envoy by default sanitizes the values sent in gRPC service calls to be valid UTF-8, replacing data that is not valid UTF-8 with a `!` character. This behavioral change can be temporarily reverted by setting runtime guard `envoy.reloadable_features.service_sanitize_non_utf8_strings` to false. As a workaround, one may set `failure_mode_allow: false` for `ext_authz`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22.9",
            "matchCriteriaId" : "DAD93214-C958-4A69-9291-15D1C22CFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndExcluding" : "1.23.6",
            "matchCriteriaId" : "17BFB303-DA5A-4E83-93F7-3C1EA340E434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.24.0",
            "versionEndExcluding" : "1.24.4",
            "matchCriteriaId" : "92B633B8-FA4A-4630-9302-96F2C8336E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.25.0",
            "versionEndExcluding" : "1.25.3",
            "matchCriteriaId" : "8AFC6741-6FDF-47F6-A4AF-B5F5233ABB71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/envoyproxy/envoy/security/advisories/GHSA-9g5w-hqr3-w2ph",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/envoyproxy/envoy/security/advisories/GHSA-9g5w-hqr3-w2ph",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27491",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T19:15:07.150",
      "lastModified" : "2024-11-21T07:53:00.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Envoy is an open source edge and service proxy designed for cloud-native applications. Compliant HTTP/1 service should reject malformed request lines. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, There is a possibility that non compliant HTTP/1 service may allow malformed requests, potentially leading to a bypass of security policies. This issue is fixed in versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22.9",
            "matchCriteriaId" : "DAD93214-C958-4A69-9291-15D1C22CFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndExcluding" : "1.23.6",
            "matchCriteriaId" : "17BFB303-DA5A-4E83-93F7-3C1EA340E434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.24.0",
            "versionEndExcluding" : "1.24.4",
            "matchCriteriaId" : "92B633B8-FA4A-4630-9302-96F2C8336E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.25.0",
            "versionEndExcluding" : "1.25.3",
            "matchCriteriaId" : "8AFC6741-6FDF-47F6-A4AF-B5F5233ABB71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://datatracker.ietf.org/doc/html/rfc9113#section-8.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://datatracker.ietf.org/doc/html/rfc9114#section-4.3.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/envoyproxy/envoy/security/advisories/GHSA-5jmv-cw9p-f9rp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.rfc-editor.org/rfc/rfc9110#section-5.6.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://datatracker.ietf.org/doc/html/rfc9113#section-8.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://datatracker.ietf.org/doc/html/rfc9114#section-4.3.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/envoyproxy/envoy/security/advisories/GHSA-5jmv-cw9p-f9rp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.rfc-editor.org/rfc/rfc9110#section-5.6.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27492",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T19:15:07.217",
      "lastModified" : "2024-11-21T07:53:00.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, the Lua filter is vulnerable to denial of service. Attackers can send large request bodies for routes that have Lua filter enabled and trigger crashes.\n\nAs of versions versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, Envoy no longer invokes the Lua coroutine if the filter has been reset. As a workaround for those whose Lua filter is buffering all requests/ responses, mitigate by using the buffer filter to avoid triggering the local reply in the Lua filter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22.9",
            "matchCriteriaId" : "DAD93214-C958-4A69-9291-15D1C22CFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndExcluding" : "1.23.6",
            "matchCriteriaId" : "17BFB303-DA5A-4E83-93F7-3C1EA340E434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.24.0",
            "versionEndExcluding" : "1.24.4",
            "matchCriteriaId" : "92B633B8-FA4A-4630-9302-96F2C8336E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.25.0",
            "versionEndExcluding" : "1.25.3",
            "matchCriteriaId" : "8AFC6741-6FDF-47F6-A4AF-B5F5233ABB71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/envoyproxy/envoy/security/advisories/GHSA-wpc2-2jp6-ppg2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/envoyproxy/envoy/security/advisories/GHSA-wpc2-2jp6-ppg2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1840",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-04T20:15:07.390",
      "lastModified" : "2026-04-08T17:16:53.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Sp*tify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.07 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:followmedarling:spotify-play-button-for-wordpress:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.07",
            "matchCriteriaId" : "60E7F4E5-D32E-453E-BCBD-626E93BA1A1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2893653%40spotify-play-button-for-wordpress%2Ftrunk&old=2870608%40spotify-play-button-for-wordpress%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/308f6887-7c1c-4efd-85e2-b71bb6d26dab?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2893653%40spotify-play-button-for-wordpress%2Ftrunk&old=2870608%40spotify-play-button-for-wordpress%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/308f6887-7c1c-4efd-85e2-b71bb6d26dab?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27493",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T20:15:07.463",
      "lastModified" : "2024-11-21T07:53:01.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, Envoy does not sanitize or escape request properties when generating request headers. This can lead to characters that are illegal in header values to be sent to the upstream service. In the worst case, it can cause upstream service to interpret the original request as two pipelined requests, possibly bypassing the intent of Envoy’s security policy. Versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9 contain a patch. As a workaround, disable adding request headers based on the downstream request properties, such as downstream certificate properties."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22.9",
            "matchCriteriaId" : "DAD93214-C958-4A69-9291-15D1C22CFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndExcluding" : "1.23.6",
            "matchCriteriaId" : "17BFB303-DA5A-4E83-93F7-3C1EA340E434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.24.0",
            "versionEndExcluding" : "1.24.4",
            "matchCriteriaId" : "92B633B8-FA4A-4630-9302-96F2C8336E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.25.0",
            "versionEndExcluding" : "1.25.3",
            "matchCriteriaId" : "8AFC6741-6FDF-47F6-A4AF-B5F5233ABB71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/envoyproxy/envoy/security/advisories/GHSA-w5w5-487h-qv8q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/envoyproxy/envoy/security/advisories/GHSA-w5w5-487h-qv8q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27496",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T20:15:07.520",
      "lastModified" : "2024-11-21T07:53:01.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, the OAuth filter assumes that a `state` query param is present on any response that looks like an OAuth redirect response. Sending it a request with the URI path equivalent to the redirect path, without the `state` parameter, will lead to abnormal termination of Envoy process. Versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9 contain a patch. The issue can also be mitigated by locking down OAuth traffic, disabling the filter, or by filtering traffic before it reaches the OAuth filter (e.g. via a lua script). \n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22.9",
            "matchCriteriaId" : "DAD93214-C958-4A69-9291-15D1C22CFD3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.23.0",
            "versionEndExcluding" : "1.23.6",
            "matchCriteriaId" : "17BFB303-DA5A-4E83-93F7-3C1EA340E434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.24.0",
            "versionEndExcluding" : "1.24.4",
            "matchCriteriaId" : "92B633B8-FA4A-4630-9302-96F2C8336E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.25.0",
            "versionEndExcluding" : "1.25.3",
            "matchCriteriaId" : "8AFC6741-6FDF-47F6-A4AF-B5F5233ABB71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/envoyproxy/envoy/security/advisories/GHSA-j79q-2g66-2xv5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/envoyproxy/envoy/security/advisories/GHSA-j79q-2g66-2xv5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0265",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-04-04T22:15:07.217",
      "lastModified" : "2025-02-13T17:15:54.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uvdesk:community-skeleton:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C159BF6D-AB94-485F-AB26-2717FDAC0752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/supply/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uvdesk/community-skeleton",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/supply/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uvdesk/community-skeleton",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0325",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-04-04T22:15:07.273",
      "lastModified" : "2025-02-13T17:15:54.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uvdesk:community-skeleton:1.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C159BF6D-AB94-485F-AB26-2717FDAC0752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/labrinth/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uvdesk/community-skeleton/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/labrinth/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uvdesk/community-skeleton/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1810",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-04T22:15:07.317",
      "lastModified" : "2024-11-21T07:39:56.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "A9213D4B-0D26-4E22-9995-995F1DD38C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1414018",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1414018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1811",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-04T22:15:07.363",
      "lastModified" : "2024-11-21T07:39:56.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "A9213D4B-0D26-4E22-9995-995F1DD38C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1420510",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1420510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1812",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-04T22:15:07.400",
      "lastModified" : "2024-11-21T07:39:57.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "A9213D4B-0D26-4E22-9995-995F1DD38C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1418224",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1418224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1813",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-04T22:15:07.440",
      "lastModified" : "2024-11-21T07:39:57.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Extensions in Google Chrome prior to 112.0.5615.49 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "A9213D4B-0D26-4E22-9995-995F1DD38C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1423258",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1423258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1814",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-04T22:15:07.477",
      "lastModified" : "2024-11-21T07:39:57.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass download checking via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "A9213D4B-0D26-4E22-9995-995F1DD38C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1417325",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1417325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1815",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-04T22:15:07.517",
      "lastModified" : "2024-11-21T07:39:57.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "A9213D4B-0D26-4E22-9995-995F1DD38C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1278708",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1278708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1816",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-04T22:15:07.553",
      "lastModified" : "2024-11-21T07:39:57.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially perform navigation spoofing via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "A9213D4B-0D26-4E22-9995-995F1DD38C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1413919",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1413919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1817",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-04T22:15:07.587",
      "lastModified" : "2024-11-21T07:39:57.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Intents in Google Chrome on Android prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "A9213D4B-0D26-4E22-9995-995F1DD38C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1418061",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1418061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1818",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-04T22:15:07.623",
      "lastModified" : "2024-11-21T07:39:57.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "A9213D4B-0D26-4E22-9995-995F1DD38C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1223346",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1223346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1819",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-04T22:15:07.663",
      "lastModified" : "2024-11-21T07:39:57.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "A9213D4B-0D26-4E22-9995-995F1DD38C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1406588",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1406588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1820",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-04T22:15:07.697",
      "lastModified" : "2024-11-21T07:39:58.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "A9213D4B-0D26-4E22-9995-995F1DD38C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1408120",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1408120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1821",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-04T22:15:07.733",
      "lastModified" : "2024-11-21T07:39:58.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in WebShare in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "A9213D4B-0D26-4E22-9995-995F1DD38C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1413618",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1413618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1822",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-04T22:15:07.770",
      "lastModified" : "2024-11-21T07:39:58.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect security UI in Navigation in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "A9213D4B-0D26-4E22-9995-995F1DD38C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1066555",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1066555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1823",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-04T22:15:07.810",
      "lastModified" : "2024-11-21T07:39:58.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in FedCM in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "A9213D4B-0D26-4E22-9995-995F1DD38C28"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1406900",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1406900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28840",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T22:15:07.853",
      "lastModified" : "2024-11-21T07:56:07.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby, is commonly referred to as *Docker*.\n\nSwarm Mode, which is compiled in and delivered by default in dockerd and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code.\n\nThe overlay network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes.\n\nEncrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption.\n\nWhen setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the u32 iptables extension provided by the xt_u32 kernel module to directly filter on a VXLAN packet's VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN.\n\nTwo iptables rules serve to filter incoming VXLAN datagrams with a VNI that corresponds to an encrypted network and discards unencrypted datagrams. The rules are appended to the end of the INPUT filter chain, following any rules that have been previously set by the system administrator. Administrator-set rules take precedence over the rules Moby sets to discard unencrypted VXLAN datagrams, which can potentially admit unencrypted datagrams that should have been discarded.\n\nThe injection of arbitrary Ethernet frames can enable a Denial of Service attack. A sophisticated attacker may be able to establish a UDP or TCP connection by way of the container’s outbound gateway that would otherwise be blocked by a stateful firewall, or carry out other escalations beyond simple injection by smuggling packets into the overlay network.\n\nPatches are available in Moby releases 23.0.3 and 20.10.24. As Mirantis Container Runtime's 20.10 releases are numbered differently, users of that platform should update to 20.10.16.\n\nSome workarounds are available. Close the VXLAN port (by default, UDP port 4789) to incoming traffic at the Internet boundary to prevent all VXLAN packet injection, and/or ensure that the `xt_u32` kernel module is available on all nodes of the Swarm cluster."
      }, {
        "lang" : "es",
        "value" : "Moby es un framework de contenedores de código abierto desarrollado por Docker Inc. que se distribuye como Docker, Mirantis Container Runtime y varios otros proyectos/productos posteriores. El componente Moby daemon (`dockerd`), que se desarrolla como moby/moby, se conoce comúnmente como *Docker*. El modo Swarm, que se compila y entrega de forma predeterminada en Dockerd y, por lo tanto, está presente en la mayoría de las principales versiones de Moby, es un orquestador de contenedores integrado y simple que se implementa mediante una combinación de SwarmKit y código de red de soporte. El controlador de red superpuesta es una característica central del modo Swarm, que proporciona LAN virtuales aisladas que permiten la comunicación entre contenedores y servicios en todo el clúster. Este controlador es una implementación/usuario de VXLAN, que encapsula tramas de capa de enlace (Ethernet) en datagramas UDP que etiquetan la trama con un ID de red VXLAN (VNI) que identifica la red superpuesta de origen. Además, el controlador de red superpuesta admite un modo cifrado opcional, desactivado de forma predeterminada, que resulta especialmente útil cuando los paquetes VXLAN atraviesan una red que no es de confianza entre nodos. Las redes superpuestas cifradas funcionan encapsulando los datagramas VXLAN mediante el uso del protocolo IPsec Encapsulating Security Payload en modo Transporte. Al implementar la encapsulación IPSec, las redes superpuestas cifradas obtienen propiedades adicionales de autenticación de origen mediante prueba criptográfica, integridad de datos mediante suma de verificación y confidencialidad mediante cifrado. Al configurar un endpoint en una red superpuesta cifrada, Moby instala tres reglas de iptables (firewall del kernel de Linux) que aplican IPSec tanto entrante como saliente. Estas reglas se basan en la extensión u32 iptables proporcionada por el módulo del kernel xt_u32 para filtrar directamente el campo VNI de un paquete VXLAN, de modo que las garantías IPSec se puedan aplicar en redes superpuestas cifradas sin interferir con otras redes superpuestas u otros usuarios de VXLAN. Dos reglas de iptables sirven para filtrar datagramas VXLAN entrantes con un VNI que corresponde a una red cifrada y descarta los datagramas no cifrados. Las reglas se agregan al final de la cadena de filtros de ENTRADA, siguiendo las reglas que haya establecido previamente el administrador del sistema. Las reglas establecidas por el administrador tienen prioridad sobre las reglas que Moby establece para descartar datagramas VXLAN no cifrados, que potencialmente pueden admitir datagramas no cifrados que deberían haberse descartado. La inyección de tramas Ethernet arbitrarias puede permitir un ataque de denegación de servicio. Un atacante sofisticado puede establecer una conexión UDP o TCP a través de la puerta de enlace de salida del contenedor que, de otro modo, sería bloqueada por un firewall con estado, o llevar a cabo otras escaladas más allá de la simple inyección mediante el contrabando de paquetes en la red superpuesta. Los parches están disponibles en las versiones 23.0.3 y 20.10.24 de Moby. Como las versiones 20.10 de Mirantis Container Runtime tienen numeración diferente, los usuarios de esa plataforma deben actualizar a la versión 20.10.16. Algunos workarounds están disponibles. Cierre el puerto VXLAN (de forma predeterminada, el puerto UDP 4789) al tráfico entrante en el límite de Internet para evitar toda inyección de paquetes VXLAN y/o asegúrese de que el módulo del kernel `xt_u32` esté disponible en todos los nodos del clúster Swarm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-420"
        }, {
          "lang" : "en",
          "value" : "CWE-636"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        }, {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "20.10.24",
            "matchCriteriaId" : "E7027BE5-D31C-40E5-81A4-A91028A687B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.3",
            "matchCriteriaId" : "911C8E32-9EC6-4AAD-93CD-C1880D06E3AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/moby/libnetwork/security/advisories/GHSA-gvm4-2qqg-m333",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/issues/43382",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/pull/45118",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-232p-vwff-86mp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-33pg-m6jh-5237",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-6wrf-mxfj-pf5p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/moby/libnetwork/security/advisories/GHSA-gvm4-2qqg-m333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/issues/43382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/pull/45118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-232p-vwff-86mp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-33pg-m6jh-5237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-6wrf-mxfj-pf5p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28841",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T22:15:07.937",
      "lastModified" : "2024-11-21T07:56:08.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly referred to as *Docker*.\n\nSwarm Mode, which is compiled in and delivered by default in `dockerd` and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code.\n\nThe `overlay` network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with the VXLAN metadata, including a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes.\n\nEncrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption.\n\nWhen setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the `u32` iptables extension provided by the `xt_u32` kernel module to directly filter on a VXLAN packet's VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN.\n\nAn iptables rule designates outgoing VXLAN datagrams with a VNI that corresponds to an encrypted overlay network for IPsec encapsulation.\n\nEncrypted overlay networks on affected platforms silently transmit unencrypted data. As a result, `overlay` networks may appear to be functional, passing traffic as expected, but without any of the expected confidentiality or data integrity guarantees.\n\nIt is possible for an attacker sitting in a trusted position on the network to read all of the application traffic that is moving across the overlay network, resulting in unexpected secrets or user data disclosure. Thus, because many database protocols, internal APIs, etc. are not protected by a second layer of encryption, a user may use Swarm encrypted overlay networks to provide confidentiality, which due to this vulnerability this is no longer guaranteed.\n\nPatches are available in Moby releases 23.0.3, and 20.10.24. As Mirantis Container Runtime's 20.10 releases are numbered differently, users of that platform should update to 20.10.16.\n\nSome workarounds are available. Close the VXLAN port (by default, UDP port 4789) to outgoing traffic at the Internet boundary in order to prevent unintentionally leaking unencrypted traffic over the Internet, and/or ensure that the `xt_u32` kernel module is available on all nodes of the Swarm cluster."
      }, {
        "lang" : "es",
        "value" : "Moby es un framework de contenedores de código abierto desarrollado por Docker Inc. que se distribuye como Docker, Mirantis Container Runtime y varios otros proyectos/productos posteriores. El componente Moby daemon (`dockerd`), que se desarrolla como moby/moby, se conoce comúnmente como *Docker*. El modo Swarm, que se compila y entrega de forma predeterminada en \"dockerd\" y, por lo tanto, está presente en la mayoría de las principales versiones de Moby, es un orquestador de contenedores simple e integrado que se implementa mediante una combinación de SwarmKit y código de red de soporte. El controlador de red \"superpuesto\" es una característica central del modo Swarm, que proporciona LAN virtuales aisladas que permiten la comunicación entre contenedores y servicios en todo el clúster. Este controlador es una implementación/usuario de VXLAN, que encapsula tramas de capa de enlace (Ethernet) en datagramas UDP que etiquetan la trama con los metadatos de VXLAN, incluido un ID de red VXLAN (VNI) que identifica la red superpuesta de origen. Además, el controlador de red superpuesta admite un modo cifrado opcional, desactivado de forma predeterminada, que resulta especialmente útil cuando los paquetes VXLAN atraviesan una red que no es de confianza entre nodos. Las redes superpuestas cifradas funcionan encapsulando los datagramas VXLAN mediante el uso del protocolo IPsec Encapsulating Security Payload en modo Transporte. Al implementar la encapsulación IPSec, las redes superpuestas cifradas obtienen propiedades adicionales de autenticación de origen mediante prueba criptográfica, integridad de datos mediante suma de verificación y confidencialidad mediante cifrado.Al configurar un endpoint en una red superpuesta cifrada, Moby instala tres reglas de iptables (firewall del kernel de Linux) que aplican IPSec tanto entrante como saliente. Estas reglas se basan en la extensión iptables `u32` proporcionada por el módulo del kernel `xt_u32` para filtrar directamente el campo VNI de un paquete VXLAN, de modo que las garantías IPSec se puedan aplicar en redes superpuestas cifradas sin interferir con otras redes superpuestas u otros usuarios de VXLAN. Una regla de iptables designa datagramas VXLAN salientes con un VNI que corresponde a una red superpuesta cifrada para encapsulación IPsec. Las redes superpuestas cifradas en las plataformas afectadas transmiten silenciosamente datos no cifrados. Como resultado, las redes \"superpuestas\" pueden parecer funcionales, pasando el tráfico como se esperaba, pero sin ninguna de las garantías esperadas de confidencialidad o integridad de los datos. Es posible que un atacante ubicado en una posición confiable en la red lea todo el tráfico de aplicaciones que se mueve a través de la red superpuesta, lo que resulta en secretos inesperados o divulgación de datos del usuario. Por lo tanto, debido a que muchos protocolos de bases de datos, API internas, etc. no están protegidos por una segunda capa de cifrado, un usuario puede utilizar redes superpuestas cifradas Swarm para proporcionar confidencialidad, que debido a esta vulnerabilidad ya no está garantizada. Los parches están disponibles en las versiones 23.0.3 y 20.10.24 de Moby. Como las versiones 20.10 de Mirantis Container Runtime tienen numeración diferente, los usuarios de esa plataforma deben actualizar a la versión 20.10.16. Algunos workarounds están disponibles. Cierre el puerto VXLAN (de forma predeterminada, el puerto UDP 4789) al tráfico saliente en el límite de Internet para evitar fugas involuntarias de tráfico no cifrado a través de Internet y/o asegúrese de que el módulo del kernel `xt_u32` esté disponible en todos los nodos del grupo Swarm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        }, {
          "lang" : "en",
          "value" : "CWE-636"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        }, {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "20.10.24",
            "matchCriteriaId" : "E7027BE5-D31C-40E5-81A4-A91028A687B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.3",
            "matchCriteriaId" : "911C8E32-9EC6-4AAD-93CD-C1880D06E3AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/moby/libnetwork/blob/d9fae4c73daf76c3b0f77e14b45b8bf612ba764d/drivers/overlay/encryption.go#L205-L207",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/moby/libnetwork/security/advisories/GHSA-gvm4-2qqg-m333",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/issues/43382",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/pull/45118",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-232p-vwff-86mp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-33pg-m6jh-5237",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-6wrf-mxfj-pf5p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/moby/libnetwork/blob/d9fae4c73daf76c3b0f77e14b45b8bf612ba764d/drivers/overlay/encryption.go#L205-L207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/moby/libnetwork/security/advisories/GHSA-gvm4-2qqg-m333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/issues/43382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/pull/45118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-232p-vwff-86mp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-33pg-m6jh-5237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-6wrf-mxfj-pf5p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28842",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T22:15:08.007",
      "lastModified" : "2024-11-21T07:56:08.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly referred to as *Docker*.\n\nSwarm Mode, which is compiled in and delivered by default in `dockerd` and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code.\n\nThe `overlay` network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with the VXLAN metadata, including a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes.\n\nEncrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption.\n\nWhen setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the `u32` iptables extension provided by the `xt_u32` kernel module to directly filter on a VXLAN packet's VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN.\n\nThe `overlay` driver dynamically and lazily defines the kernel configuration for the VXLAN network on each node as containers are attached and detached. Routes and encryption parameters are only defined for destination nodes that participate in the network. The iptables rules that prevent encrypted overlay networks from accepting unencrypted packets are not created until a peer is available with which to communicate.\n\nEncrypted overlay networks silently accept cleartext VXLAN datagrams that are tagged with the VNI of an encrypted overlay network. As a result, it is possible to inject arbitrary Ethernet frames into the encrypted overlay network by encapsulating them in VXLAN datagrams. The implications of this can be quite dire, and GHSA-vwm3-crmr-xfxw should be referenced for a deeper exploration.\n\nPatches are available in Moby releases 23.0.3, and 20.10.24. As Mirantis Container Runtime's 20.10 releases are numbered differently, users of that platform should update to 20.10.16.\n\nSome workarounds are available. In multi-node clusters, deploy a global ‘pause’ container for each encrypted overlay network, on every node. For a single-node cluster, do not use overlay networks of any sort. Bridge networks provide the same connectivity on a single node and have no multi-node features. The Swarm ingress feature is implemented using an overlay network, but can be disabled by publishing ports in `host` mode instead of `ingress` mode (allowing the use of an external load balancer), and removing the `ingress` network. If encrypted overlay networks are in exclusive use, block UDP port 4789 from traffic that has not been validated by IPSec."
      }, {
        "lang" : "es",
        "value" : "Moby) es un framework de contenedores de código abierto desarrollado por Docker Inc. que se distribuye como Docker, Mirantis Container Runtime y varios otros proyectos/productos posteriores. El componente Moby daemon (`dockerd`), que se desarrolla como moby/moby, se conoce comúnmente como *Docker*. El modo Swarm, que se compila y entrega de forma predeterminada en \"dockerd\" y, por lo tanto, está presente en la mayoría de las principales versiones de Moby, es un orquestador de contenedores simple e integrado que se implementa mediante una combinación de SwarmKit y soportando un código de red. El controlador de red \"superpuesto\" es una característica central del modo Swarm, que proporciona LAN virtuales aisladas que permiten la comunicación entre contenedores y servicios en todo el clúster. Este controlador es una implementación/usuario de VXLAN, que encapsula tramas de capa de enlace (Ethernet) en datagramas UDP que etiquetan la trama con los metadatos de VXLAN, incluido un ID de red VXLAN (VNI) que identifica la red superpuesta de origen. Además, el controlador de red superpuesta admite un modo cifrado opcional, desactivado de forma predeterminada, que resulta especialmente útil cuando los paquetes VXLAN atraviesan una red que no es de confianza entre nodos. Las redes superpuestas cifradas funcionan encapsulando los datagramas VXLAN mediante el uso del protocolo IPsec Encapsulating Security Payload en modo Transporte. Al implementar la encapsulación IPSec, las redes superpuestas cifradas obtienen propiedades adicionales de autenticación de origen mediante prueba criptográfica, integridad de datos mediante suma de verificación y confidencialidad mediante cifrado. Al configurar un endpoint en una red superpuesta cifrada, Moby instala tres reglas de iptables (firewall del kernel de Linux) que aplican IPSec tanto entrante como saliente. Estas reglas se basan en la extensión iptables `u32` proporcionada por el módulo del kernel `xt_u32` para filtrar directamente el campo VNI de un paquete VXLAN, de modo que las garantías IPSec se puedan aplicar en redes superpuestas cifradas sin interferir con otras redes superpuestas u otros usuarios de VXLAN. El controlador `overlay` define de forma dinámica y perezosa la configuración del kernel para la red VXLAN en cada nodo a medida que los contenedores se conectan y desconectan. Las rutas y los parámetros de cifrado solo se definen para los nodos de destino que participan en la red. Las reglas de iptables que impiden que las redes superpuestas cifradas acepten paquetes no cifrados no se crean hasta que haya un interlocutor disponible con el que comunicarse. Las redes superpuestas cifradas aceptan silenciosamente datagramas VXLAN de texto sin cifrar etiquetados con el VNI de una red superpuesta cifrada. Como resultado, es posible inyectar tramas Ethernet arbitrarias en la red superpuesta cifrada encapsulándolas en datagramas VXLAN. Las implicaciones de esto pueden ser bastante nefastas, y se debe hacer referencia a GHSA-vwm3-crmr-xfxw para una exploración más profunda. Los parches están disponibles en las versiones 23.0.3 y 20.10.24 de Moby. Como las versiones 20.10 de Mirantis Container Runtime tienen numeración diferente, los usuarios de esa plataforma deben actualizar a la versión 20.10.16. Algunos workarounds están disponibles. En clústeres de múltiples nodos, implemente un contenedor de \"pausa\" global para cada red superpuesta cifrada, en cada nodo. Para un clúster de un solo nodo, no utilice redes superpuestas de ningún tipo. Las redes puente brindan la misma conectividad en un solo nodo y no tienen funciones de múltiples nodos. La función de ingreso de Swarm se implementa usando una red superpuesta, pero se puede deshabilitar publicando puertos en modo \"host\" en lugar del modo \"ingress\" (permitiendo el uso de un balanceador de carga externo) y eliminando la red de \"ingress\". Si las redes superpuestas cifradas son de uso exclusivo, bloquee el puerto UDP 4789 del tráfico que no haya sido validado por IPSec."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-420"
        }, {
          "lang" : "en",
          "value" : "CWE-636"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "20.10.24",
            "matchCriteriaId" : "E7027BE5-D31C-40E5-81A4-A91028A687B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.3",
            "matchCriteriaId" : "911C8E32-9EC6-4AAD-93CD-C1880D06E3AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/moby/libnetwork/security/advisories/GHSA-gvm4-2qqg-m333",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-232p-vwff-86mp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-33pg-m6jh-5237",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-6wrf-mxfj-pf5p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/moby/libnetwork/security/advisories/GHSA-gvm4-2qqg-m333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-232p-vwff-86mp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-33pg-m6jh-5237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-6wrf-mxfj-pf5p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28853",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T22:15:08.087",
      "lastModified" : "2024-11-21T07:56:09.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mastodon is a free, open-source social network server based on ActivityPub Mastodon allows configuration of LDAP for authentication. Starting in version 2.5.0 and prior to versions 3.5.8, 4.0.4, and 4.1.2, the LDAP query made during login is insecure and the attacker can perform LDAP injection attack to leak arbitrary attributes from LDAP database. This issue is fixed in versions 3.5.8, 4.0.4, and 4.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-90"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "3.5.8",
            "matchCriteriaId" : "7719057A-5D61-40B5-9F17-BAE36C43C90A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "EAB7A197-9D83-4A92-BF6C-A9DBA50E1DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joinmastodon:mastodon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "F3BC1F07-C0F6-42E6-B967-F1A536F84767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/07/06/6",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/mastodon/mastodon/blob/94cbd808b5b3e7999c7e77dc724b7e8c9dd2bdec/app/models/concerns/ldap_authenticable.rb#L7-L14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/blob/94cbd808b5b3e7999c7e77dc724b7e8c9dd2bdec/config/initializers/devise.rb#L398-L414",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/pull/24379",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v3.5.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.0.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.1.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/security/advisories/GHSA-38g9-pfm9-gfqv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/07/06/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/mastodon/mastodon/blob/94cbd808b5b3e7999c7e77dc724b7e8c9dd2bdec/app/models/concerns/ldap_authenticable.rb#L7-L14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/blob/94cbd808b5b3e7999c7e77dc724b7e8c9dd2bdec/config/initializers/devise.rb#L398-L414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/pull/24379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v3.5.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.0.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/releases/tag/v4.1.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mastodon/mastodon/security/advisories/GHSA-38g9-pfm9-gfqv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29003",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-04T22:15:08.157",
      "lastModified" : "2024-11-21T07:56:22.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SvelteKit is a web development framework. The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a `+server.js` file, containing endpoint handlers for different HTTP methods.\n\nSvelteKit provides out-of-the-box cross-site request forgery (CSRF) protection to its users. While the implementation does a sufficient job in mitigating common CSRF attacks, prior to version 1.15.1, the protection can be bypassed by simply specifying a different `Content-Type` header value.\n\nIf abused, this issue will allow malicious requests to be submitted from third-party domains, which can allow execution of operations within the context of the victim's session, and in extreme scenarios can lead to unauthorized access to users’ accounts.\n\nSvelteKit 1.15.1 updates the `is_form_content_type` function call in the CSRF protection logic to include `text/plain`. As additional hardening of the CSRF protection mechanism against potential method overrides, SvelteKit 1.15.1 is now performing validation on `PUT`, `PATCH` and `DELETE` methods as well. This latter hardening is only needed to protect users who have put in some sort of `?_method= override` feature themselves in their `handle` hook, so that the request that resolve sees could be `PUT`/`PATCH`/`DELETE` when the browser issues a `POST` request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        }, {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svelte:sveltekit:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.15.1",
            "matchCriteriaId" : "54383DF7-6A34-4582-8DE1-9E27DF1AE9E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sveltejs/kit/commit/bb2253d51d00aba2e4353952d4fb0dcde6c77123",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sveltejs/kit/releases/tag/%40sveltejs%2Fkit%401.15.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/sveltejs/kit/security/advisories/GHSA-5p75-vc5g-8rv2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/sveltejs/kit/commit/bb2253d51d00aba2e4353952d4fb0dcde6c77123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sveltejs/kit/releases/tag/%40sveltejs%2Fkit%401.15.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/sveltejs/kit/security/advisories/GHSA-5p75-vc5g-8rv2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0357",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-04-04T23:15:07.153",
      "lastModified" : "2025-02-13T17:15:54.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application does not correctly validate the attachments sent by customers in the ticket."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helpy.io:helpy:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7548AEC-F6A1-40AE-8378-B5A1BFB8A8BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/quayle/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/helpyio/helpy/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/quayle/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/helpyio/helpy/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0480",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-04-04T23:15:07.193",
      "lastModified" : "2025-02-13T17:15:55.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance administrator's account. This is possible because the application is vulnerable to CSRF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vitalpbx:vitalpbx:3.2.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "C0349C89-A58F-4D2A-AAE1-39C3DCAD0550"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/sharp/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vitalpbx.com/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/sharp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vitalpbx.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0486",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-04-04T23:15:07.233",
      "lastModified" : "2025-02-13T17:15:55.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance's administrator account via a malicious link. This is possible because the application is vulnerable to XSS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vitalpbx:vitalpbx:3.2.3:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "C0349C89-A58F-4D2A-AAE1-39C3DCAD0550"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/smith/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vitalpbx.com/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/smith/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vitalpbx.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0738",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-04-04T23:15:07.273",
      "lastModified" : "2025-02-13T16:15:37.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is possible because the application returns malicious user input in the response with the content-type set to text/html."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orangescrum:orangescrum:2.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563467F2-799D-404D-89D2-A6B5B6092614"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/eilish/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Orangescrum/orangescrum/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/eilish/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Orangescrum/orangescrum/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0835",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-04-04T23:15:07.310",
      "lastModified" : "2025-02-13T16:15:37.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:markdown-pdf_project:markdown-pdf:11.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C034325B-A20A-4993-AB87-17B50E7E8B1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/relsb/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/markdown-pdf/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/relsb/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/markdown-pdf/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-04T23:15:07.347",
      "lastModified" : "2025-11-04T19:15:42.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ascii_load_sockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit f748277, can abort upon a connection from a local, scoped IPv6 address."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensmtpd:opensmtpd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.0",
            "matchCriteriaId" : "35EC43DF-70E4-4B31-8881-E79D09432151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDBEB9A-DA9B-4384-8C56-599ED2B8D7DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openbsd:openbsd:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E6EC6AC-E2DE-4166-A762-AB6A88DF1C1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/smtpd/envelope.c.diff?r1=1.49&r2=1.49.4.1&f=h",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/smtpd/envelope.c.diff?r1=1.50&r2=1.50.4.1&f=h",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/smtpd/envelope.c.diff?r1=1.50&r2=1.51&f=h",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/7.1/common/024_smtpd.patch.sig",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/020_smtpd.patch.sig",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenSMTPD/OpenSMTPD/commit/41d0eae481f538956b1f1fbadfb535043454061f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openbsd/src/commit/f748277ed1fc7065ae8998d61ed78b9ab1e55fae",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GZBNQBHCM6PIOUR6I5GEQS35XYT2NX6T/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0006/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/smtpd/envelope.c.diff?r1=1.49&r2=1.49.4.1&f=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/smtpd/envelope.c.diff?r1=1.50&r2=1.50.4.1&f=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/smtpd/envelope.c.diff?r1=1.50&r2=1.51&f=h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/7.1/common/024_smtpd.patch.sig",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/020_smtpd.patch.sig",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenSMTPD/OpenSMTPD/commit/41d0eae481f538956b1f1fbadfb535043454061f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openbsd/src/commit/f748277ed1fc7065ae8998d61ed78b9ab1e55fae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GZBNQBHCM6PIOUR6I5GEQS35XYT2NX6T/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GZBNQBHCM6PIOUR6I5GEQS35XYT2NX6T/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-05T02:15:37.340",
      "lastModified" : "2025-02-12T17:15:18.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:langchain:langchain:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.0.131",
            "matchCriteriaId" : "7C55CEFC-7C13-4D07-A223-1C5E9F7BBF25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hwchase17/langchain/issues/1026",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/hwchase17/langchain/issues/814",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/hwchase17/langchain/pull/1119",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://twitter.com/rharang/status/1641899743608463365/photo/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/hwchase17/langchain/issues/1026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/hwchase17/langchain/issues/814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/hwchase17/langchain/pull/1119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://twitter.com/rharang/status/1641899743608463365/photo/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0382",
      "sourceIdentifier" : "security@m-files.com",
      "published" : "2023-04-05T07:15:07.377",
      "lastModified" : "2026-02-23T09:16:13.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1\n\n due to uncontrolled memory consumption."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@m-files.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@m-files.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m-files:m-files_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.4.12528.1",
            "matchCriteriaId" : "03195A81-08F5-4937-B73E-FBCA8AC5EC5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://empower.m-files.com/security-advisories/CVE-2023-0382",
        "source" : "security@m-files.com"
      }, {
        "url" : "https://product.m-files.com/security-advisories/cve-2023-0382/",
        "source" : "security@m-files.com"
      }, {
        "url" : "https://www.m-files.com/about/trust-center/security-advisories/cve-2023-0382/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1845",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-05T07:15:07.567",
      "lastModified" : "2024-11-21T07:40:00.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Online Payroll System 1.0. This affects an unknown part of the file /admin/employee_row.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224985 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_payroll_system_project:online_payroll_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D10E9E6-74EA-40B0-9565-21C4CB430EDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%202.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224985",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224985",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%202.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1846",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-05T07:15:07.647",
      "lastModified" : "2024-11-21T07:40:00.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Online Payroll System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/deduction_row.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224986 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_payroll_system_project:online_payroll_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D10E9E6-74EA-40B0-9565-21C4CB430EDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%204.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224986",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224986",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%204.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1847",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-05T07:15:07.707",
      "lastModified" : "2024-11-21T07:40:00.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Payroll System 1.0 and classified as critical. This issue affects some unknown processing of the file attendance.php. The manipulation of the argument employee leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224987."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_payroll_system_project:online_payroll_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D10E9E6-74EA-40B0-9565-21C4CB430EDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%201.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224987",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224987",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%201.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1848",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-05T07:15:07.773",
      "lastModified" : "2024-11-21T07:40:00.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/attendance_row.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224988."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_payroll_system_project:online_payroll_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D10E9E6-74EA-40B0-9565-21C4CB430EDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%203.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224988",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224988",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%203.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1849",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-05T08:15:07.370",
      "lastModified" : "2024-11-21T07:40:01.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cashadvance_row.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224989 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_payroll_system_project:online_payroll_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D10E9E6-74EA-40B0-9565-21C4CB430EDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%205.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224989",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224989",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%205.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1850",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-05T08:15:07.423",
      "lastModified" : "2024-11-21T07:40:01.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-224990 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_payroll_system_project:online_payroll_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D10E9E6-74EA-40B0-9565-21C4CB430EDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%206.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224990",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224990",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%206.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1851",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-05T08:15:07.480",
      "lastModified" : "2024-11-21T07:40:01.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in SourceCodester Online Payroll System 1.0. This affects an unknown part of the file /admin/employee_add.php. The manipulation of the argument of leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224991."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_payroll_system_project:online_payroll_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D10E9E6-74EA-40B0-9565-21C4CB430EDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%207.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224991",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224991",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%207.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1852",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-05T08:15:07.537",
      "lastModified" : "2024-11-21T07:40:01.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in SourceCodester Online Payroll System 1.0. This vulnerability affects unknown code of the file /admin/deduction_edit.php. The manipulation of the argument description leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-224992."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_payroll_system_project:online_payroll_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D10E9E6-74EA-40B0-9565-21C4CB430EDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%208.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224992",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224992",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%208.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1853",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-05T08:15:07.587",
      "lastModified" : "2024-11-21T07:40:01.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in SourceCodester Online Payroll System 1.0. This issue affects some unknown processing of the file /admin/employee_edit.php. The manipulation of the argument of leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224993 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_payroll_system_project:online_payroll_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D10E9E6-74EA-40B0-9565-21C4CB430EDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%209.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224993",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224993",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%209.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1854",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-05T08:15:07.640",
      "lastModified" : "2024-11-21T07:40:01.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-224994 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_graduate_tracer_system_project:online_graduate_tracer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9A6FC0-9440-489D-AD8D-3FF732389484"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Jlan45/OGTSFCOIA/blob/main/unauthorizedaccess.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224994",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224994",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Jlan45/OGTSFCOIA/blob/main/unauthorizedaccess.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1856",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-05T08:15:07.700",
      "lastModified" : "2024-11-21T07:40:01.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/transactions/track_shipment.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224995."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:air_cargo_management_system_project:air_cargo_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D90CD3-B8A3-4899-AFE1-43A81B5EE02C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Hackergrave/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224995",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224995",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Hackergrave/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224995",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1857",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-05T08:15:07.750",
      "lastModified" : "2024-11-21T07:40:01.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/?page=product/manage_product&id=2. The manipulation of the argument Product Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224996."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/v2ish1yan/mycve/blob/main/ocls.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224996",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224996",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/v2ish1yan/mycve/blob/main/ocls.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26536",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-05T08:15:07.807",
      "lastModified" : "2024-11-21T07:51:42.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Jonk @ Follow me Darling Sp*tify Play Button for WordPress plugin <= 2.05 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:followmedarling:spotify-play-button-for-wordpress:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.06",
            "matchCriteriaId" : "0EA3EA6B-DC68-4AE4-A3A7-6CA98B1D3DDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/spotify-play-button-for-wordpress/wordpress-sp-tify-play-button-for-wordpress-plugin-2-05-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/spotify-play-button-for-wordpress/wordpress-sp-tify-play-button-for-wordpress-plugin-2-05-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28069",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-04-05T08:15:07.863",
      "lastModified" : "2024-11-21T07:54:20.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell Streaming Data Platform prior to 1.4 contains Open Redirect vulnerability. A remote unauthenticated attacker can phish the legitimate user to redirect to malicious website leading to information disclosure and launch of phishing attacks.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:streaming_data_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4",
            "matchCriteriaId" : "C5CB6F9E-CC60-411F-9BFA-76A53E1A0F73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000204266/dsa-2022-258-dell-streaming-data-platform-security-update-for-multiple-third-party-component-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000204266/dsa-2022-258-dell-streaming-data-platform-security-update-for-multiple-third-party-component-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1858",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-05T09:15:08.597",
      "lastModified" : "2024-11-21T07:40:02.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-224997 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:earnings_and_expense_tracker_app_project:earnings_and_expense_tracker_app:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D10ECCE-7EF3-48CA-83AE-14390AEB502E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.224997",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224997",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1860",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-05T09:15:09.053",
      "lastModified" : "2024-11-21T07:40:02.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Keysight IXIA Hawkeye 3.3.16.28. It has been declared as problematic. This vulnerability affects unknown code of the file /licenses. The manipulation of the argument view with the input teste\"><script>alert(%27c4ng4c3ir0%27)</script> leads to cross site scripting. The attack can be initiated remotely. VDB-224998 is the identifier assigned to this vulnerability. NOTE: Vendor did not respond if and how they may handle this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keysight:hawkeye:3.3.16.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D34965A-AD39-4DB4-96B2-3E215DFC61A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.224998",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224998",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.224998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.224998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-05T13:15:06.963",
      "lastModified" : "2025-02-13T17:16:12.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Veritas NetBackUp OpsCenter Version 9.1.0.1 is vulnerable to Reflected Cross-site scripting (XSS). The Web App fails to adequately sanitize special characters. By leveraging this issue, an attacker is able to cause arbitrary HTML and JavaScript code to be executed in a user's browser."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:netbackup_opscenter:9.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12B7BE59-4AEB-41E2-B556-CF279E220DC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IthacaLabs/Veritas-Technologies",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20NetBackUp%20OpsCenter%20Version%209.1.0.1/Reflected%20XSS/XSS.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20NetBackUp%20OpsCenter%20Version%209.1.0.1/Reflected%20XSS/XSS_CVE-2023-26789.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IthacaLabs/Veritas-Technologies",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20NetBackUp%20OpsCenter%20Version%209.1.0.1/Reflected%20XSS/XSS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20NetBackUp%20OpsCenter%20Version%209.1.0.1/Reflected%20XSS/XSS_CVE-2023-26789.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1865",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-05T14:15:07.080",
      "lastModified" : "2026-04-08T18:17:54.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when  resetting plugin settings via the yrc_nuke GET parameter in versions up to, and including, 1.2.3. This makes it possible for unauthenticated attackers to delete YouTube channels from the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plugin:yourchannel:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "B6B01621-9BF4-4C88-997E-DCF7294A2508"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/yourchannel/trunk/YourChannel.php?rev=2844975#L772",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2896634%40yourchannel%2Ftrunk&old=2844975%40yourchannel%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/yourchannel/",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/34817e32-d5a3-403a-85f0-1d60af8945de?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/yourchannel/trunk/YourChannel.php?rev=2844975#L772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/plugins/yourchannel/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/34817e32-d5a3-403a-85f0-1d60af8945de?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1866",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-05T14:15:07.147",
      "lastModified" : "2026-04-08T18:17:55.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect nonce validation on the clearKeys function. This makes it possible for unauthenticated attackers to reset the plugin's channel settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plugin:yourchannel:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "B6B01621-9BF4-4C88-997E-DCF7294A2508"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/yourchannel/trunk/YourChannel.php?rev=2844975#L107",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2899070/yourchannel/trunk?contextall=1&old=2896634&old_path=%2Fyourchannel%2Ftrunk",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/45851efe-2584-4b5e-8e4c-24f289d3bc32?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/yourchannel/trunk/YourChannel.php?rev=2844975#L107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/45851efe-2584-4b5e-8e4c-24f289d3bc32?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1867",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-05T14:15:07.203",
      "lastModified" : "2026-04-08T18:17:55.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to change the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plugin:yourchannel:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "B6B01621-9BF4-4C88-997E-DCF7294A2508"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/yourchannel/trunk/YourChannel.php?rev=2844975#L426",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2899070/yourchannel/trunk?contextall=1&old=2896634&old_path=%2Fyourchannel%2Ftrunk",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/yourchannel/",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4c20db2d-f73d-4e52-a275-ab1975ae4b17?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/yourchannel/trunk/YourChannel.php?rev=2844975#L426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/plugins/yourchannel/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4c20db2d-f73d-4e52-a275-ab1975ae4b17?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1868",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-05T14:15:07.253",
      "lastModified" : "2026-04-08T18:17:55.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when clearing the plugin cache via the yrc_clear_cache GET parameter in versions up to, and including, 1.2.3. This makes it possible for unauthenticated attackers to clear the plugin's cache."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plugin:yourchannel:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "B6B01621-9BF4-4C88-997E-DCF7294A2508"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/yourchannel/trunk/YourChannel.php?rev=2844975#L768",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2896634/yourchannel/trunk?contextall=1&old=2844975&old_path=%2Fyourchannel%2Ftrunk",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/yourchannel/",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/541d202b-f3ed-44d8-93a6-e158209db885?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/yourchannel/trunk/YourChannel.php?rev=2844975#L768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/plugins/yourchannel/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/541d202b-f3ed-44d8-93a6-e158209db885?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1869",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-05T14:15:07.310",
      "lastModified" : "2026-04-08T19:18:07.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YourChannel  plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrative-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plugin:yourchannel:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "B6B01621-9BF4-4C88-997E-DCF7294A2508"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2899732%40yourchannel&new=2899732%40yourchannel&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/yourchannel/",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a81d5615-0b96-4d89-a525-7e80a10a9317?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2899732%40yourchannel&new=2899732%40yourchannel&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wordpress.org/plugins/yourchannel/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a81d5615-0b96-4d89-a525-7e80a10a9317?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1870",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-05T14:15:07.363",
      "lastModified" : "2026-04-08T19:18:08.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect nonce validation on the saveLang function. This makes it possible for unauthenticated attackers to change the plugin's quick language translation settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plugin:yourchannel:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "B6B01621-9BF4-4C88-997E-DCF7294A2508"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/yourchannel/trunk/YourChannel.php?rev=2844975#L498",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2899070/yourchannel/trunk?contextall=1&old=2896634&old_path=%2Fyourchannel%2Ftrunk",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/yourchannel/",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c1cec0b1-b77c-4d21-a3d2-c79fd3250bb0?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/yourchannel/trunk/YourChannel.php?rev=2844975#L498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/plugins/yourchannel/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c1cec0b1-b77c-4d21-a3d2-c79fd3250bb0?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1871",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-05T14:15:07.420",
      "lastModified" : "2026-04-08T19:18:08.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect nonce validation on the deleteLang function. This makes it possible for unauthenticated attackers to reset the plugin's quick language translation settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plugin:yourchannel:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "B6B01621-9BF4-4C88-997E-DCF7294A2508"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/yourchannel/trunk/YourChannel.php?rev=2844975#L505",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2899070/yourchannel/trunk?contextall=1&old=2896634&old_path=%2Fyourchannel%2Ftrunk",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://wordpress.org/plugins/yourchannel/",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f7ae863c-4638-49ab-bb1f-52346884c3aa?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/yourchannel/trunk/YourChannel.php?rev=2844975#L505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://wordpress.org/plugins/yourchannel/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f7ae863c-4638-49ab-bb1f-52346884c3aa?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-05T14:15:07.480",
      "lastModified" : "2024-11-21T07:49:25.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection vulnerability in Mybatis plus below 3.5.3.1 allows remote attackers to execute arbitrary SQL commands via the tenant ID valuer. NOTE: the vendor's position is that this can only occur in a misconfigured application; the documentation discusses how to develop applications that avoid SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybatis:mybatis:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.3.1",
            "matchCriteriaId" : "66C1940B-A0AA-479F-9999-815D73607093"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://baomidou.com/reference/about-cve/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/FCncdn/MybatisPlusTenantPluginSQLInjection-POC/blob/master/Readme.en.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://baomidou.com/reference/about-cve/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/FCncdn/MybatisPlusTenantPluginSQLInjection-POC/blob/master/Readme.en.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-05T14:15:07.517",
      "lastModified" : "2025-02-13T16:15:39.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/ajax.php?action=login."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dynamic_transaction_queuing_system_project:dynamic_transaction_queuing_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "343AF08A-237C-4FBC-90F1-BD676061D7A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ctg503/bug_report/blob/main/vendors/oretnom23/dynamic-transaction-queuing-system/SQLi-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ctg503/bug_report/blob/main/vendors/oretnom23/dynamic-transaction-queuing-system/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26857",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-05T14:15:07.547",
      "lastModified" : "2025-02-13T16:15:40.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in /admin/ajax.php?action=save_uploads of Dynamic Transaction Queuing System v1.0 allows attackers to execute arbitrary code via a crafted PHP file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dynamic_transaction_queuing_system_project:dynamic_transaction_queuing_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "343AF08A-237C-4FBC-90F1-BD676061D7A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ctg503/bug_report/blob/main/vendors/oretnom23/dynamic-transaction-queuing-system/RCE-1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ctg503/bug_report/blob/main/vendors/oretnom23/dynamic-transaction-queuing-system/RCE-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20021",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T15:15:06.760",
      "lastModified" : "2024-11-21T07:40:22.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid Administrator privileges on the affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "36722B6C-64A5-4D00-94E1-442878C37A35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-os-injection-pxhKsDM",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-os-injection-pxhKsDM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28632",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-05T15:15:06.870",
      "lastModified" : "2024-11-21T07:55:42.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a free asset and IT management software package. Starting in version 0.83 and prior to versions 9.5.13 and 10.0.7, an authenticated user can modify emails of any user, and can therefore takeover another user account through the \"forgotten password\" feature. By modifying emails, the user can also receive sensitive data through GLPI notifications. Versions 9.5.13 and 10.0.7 contain a patch for this issue. As a workaround, account takeover can be prevented by deactivating all notifications related to `Forgotten password?` event. However, it will not prevent unauthorized modification of any user emails."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.83",
            "versionEndExcluding" : "9.5.13",
            "matchCriteriaId" : "5E08B07C-B076-4801-981E-10FAAF719351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.7",
            "matchCriteriaId" : "D2989977-4BC4-4420-A342-3BF0E09591FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-7pwm-pg76-3q9x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-7pwm-pg76-3q9x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1412",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2023-04-05T16:15:07.220",
      "lastModified" : "2024-11-21T07:39:08.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unprivileged (non-admin) user can exploit an Improper Access Control vulnerability in the Cloudflare WARP Client for Windows (<= 2022.12.582.0) to perform privileged operations with SYSTEM context by working with a combination of opportunistic locks (oplock) and symbolic links (which can both be created by an unprivileged user).\n\nAfter installing the Cloudflare WARP Client (admin privileges required), an MSI-Installer is placed under C:\\Windows\\Installer. The vulnerability lies in the repair function of this MSI.\n\nImpactAn unprivileged (non-admin) user can exploit this vulnerability to perform privileged operations with SYSTEM context, including deleting arbitrary files and reading arbitrary file content. This can lead to a variety of attacks, including the manipulation of system files and privilege escalation.\n\nPatchesA new installer with a fix that addresses this vulnerability was released in version 2023.3.381.0. While the WARP Client itself is not vulnerable (only the installer), users are encouraged to upgrade to the latest version and delete any older installers present in their systems.\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cloudflare.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cloudflare.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudflare:warp:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "2023.3.381.0",
            "matchCriteriaId" : "B8FB60C0-986F-4205-9EE1-05C745FEF2AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developers.cloudflare.com/warp-client/get-started/windows/",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cloudflare/advisories/security/advisories/GHSA-hgxh-48m3-3gq7",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/release",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://developers.cloudflare.com/warp-client/get-started/windows/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cloudflare/advisories/security/advisories/GHSA-hgxh-48m3-3gq7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/release",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1756",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T16:15:07.273",
      "lastModified" : "2024-11-21T07:39:50.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/ca75f4688a8b0f14d5d0697b9f4b6ea66088f726",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e495b443-b328-42f5-aed5-d68b929b4cb9",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/ca75f4688a8b0f14d5d0697b9f4b6ea66088f726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e495b443-b328-42f5-aed5-d68b929b4cb9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1757",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T16:15:07.317",
      "lastModified" : "2024-11-21T07:39:50.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/5061e5841be6c218ebb0de0cbf7b7f195dc46d19",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/584a200a-6ff8-4d53-a3c0-e7893edff60c",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/5061e5841be6c218ebb0de0cbf7b7f195dc46d19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/584a200a-6ff8-4d53-a3c0-e7893edff60c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1758",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T16:15:07.367",
      "lastModified" : "2024-11-21T07:39:50.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository thorsten/phpmyfaq prior to 3.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-75"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/f3380f46c464d1bc6f3ded29213c79be0de8fc57",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/0854328e-eb00-41a3-9573-8da8f00e369c",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/f3380f46c464d1bc6f3ded29213c79be0de8fc57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/0854328e-eb00-41a3-9573-8da8f00e369c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1788",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T16:15:07.417",
      "lastModified" : "2024-11-21T07:39:54.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firefly-iii:firefly_iii:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.0",
            "matchCriteriaId" : "FA167125-E496-4A5D-A371-E0C25A00CEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firefly-iii:firefly_iii:6.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2597736-BA8C-489E-91B6-80EB9010CF4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firefly-iii:firefly_iii:6.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "020B0289-B89A-470E-83E0-FD47D6C93F25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firefly-iii:firefly_iii:6.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7A2308-6695-4162-9DF9-8FAE1679DA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firefly-iii:firefly_iii:6.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "54A82F93-1143-416F-AA28-31A5EAB45C8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/firefly-iii/firefly-iii/commit/68f398f97cbe1870fc098d8460bf903b9c3fab30",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/79323c9e-e0e5-48ef-bd19-d0b09587ccb2",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/firefly-iii/firefly-iii/commit/68f398f97cbe1870fc098d8460bf903b9c3fab30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/79323c9e-e0e5-48ef-bd19-d0b09587ccb2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20022",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T16:15:07.547",
      "lastModified" : "2024-11-21T07:40:22.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid Administrator privileges on the affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "36722B6C-64A5-4D00-94E1-442878C37A35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-os-injection-pxhKsDM",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-os-injection-pxhKsDM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20023",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T16:15:07.593",
      "lastModified" : "2024-11-21T07:40:22.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid Administrator privileges on the affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "36722B6C-64A5-4D00-94E1-442878C37A35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-os-injection-pxhKsDM",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-os-injection-pxhKsDM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20030",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T16:15:07.637",
      "lastModified" : "2024-11-21T07:40:23.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access sensitive information, conduct a server-side request forgery (SSRF) attack through an affected device, or negatively impact the responsiveness of the web-based management interface itself. This vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by uploading a crafted XML file that contains references to external entities. A successful exploit could allow the attacker to retrieve files from the local system, resulting in the disclosure of confidential information. A successful exploit could also cause the web application to perform arbitrary HTTP requests on behalf of the attacker or consume memory resources to reduce the availability of the web-based management interface. To successfully exploit this vulnerability, an attacker would need valid Super Admin or Policy Admin credentials."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2",
            "matchCriteriaId" : "8CCF107C-A742-4362-B5B6-BF8D26D85353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "36722B6C-64A5-4D00-94E1-442878C37A35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxe-inj-GecEHY58",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxe-inj-GecEHY58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20068",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T16:15:07.680",
      "lastModified" : "2024-11-21T07:40:28.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Prime Infrastructure Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by persuading a user of the web-based management interface on an affected device to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or to access sensitive, browser-based information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.10.3",
            "matchCriteriaId" : "27E0CC45-5CFF-4ABC-9E69-6B7119B697C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pi-xss-PU6dnfD9",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pi-xss-PU6dnfD9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20073",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T16:15:07.720",
      "lastModified" : "2024-11-21T07:40:29.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement mechanisms in the context of file uploads. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to upload arbitrary files to the affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.03.29",
            "matchCriteriaId" : "D6DC9B66-238D-4E9C-A0D6-9AFD09549101"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4411AC-2A74-4315-BA6B-D7E1AA538BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.03.29",
            "matchCriteriaId" : "02D7BEBD-B700-452C-A2F1-70009217F42F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E55019-F969-4ACD-A6C8-1D2EE05F8EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.03.29",
            "matchCriteriaId" : "43A9B296-5632-49B9-8830-6C27EF1710A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E91E68B-CBE9-462E-82D4-6F588B8E84E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.03.29",
            "matchCriteriaId" : "61989F1E-A4C9-450D-AF26-B2178108A260"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5120BAB7-FB3A-481E-9ECD-48341846AFBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-afu-EXxwA65V",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-afu-EXxwA65V",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22291",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-04-05T16:15:07.880",
      "lastModified" : "2024-11-21T07:44:27.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to an attempt to free a stack pointer, which causes memory corruption. An attacker can provide a malicious file to trigger this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-590"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro_2022:1.0.1.57600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06455E2A-BB74-437E-85AC-3DAC51ED78F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN79149117/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2022-1687",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN79149117/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2022-1687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22660",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2023-04-05T16:15:07.983",
      "lastModified" : "2024-11-21T07:45:09.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain LayoutBox stream record types. A specially crafted document can cause a buffer overflow, leading to memory corruption, which can result in arbitrary code execution.To trigger this vulnerability, the victim would need to open a malicious, attacker-created document."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:justsystems:ichitaro_2022:1.0.1.57600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06455E2A-BB74-437E-85AC-3DAC51ED78F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN79149117/",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1722",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN79149117/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28633",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-05T16:15:08.040",
      "lastModified" : "2024-11-21T07:55:42.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a free asset and IT management software package. Starting in version 0.84 and prior to versions 9.5.13 and 10.0.7, usage of RSS feeds is subject to server-side request forgery (SSRF). In case the remote address is not a valid RSS feed, an RSS autodiscovery feature is triggered. This feature does not check safety or URLs. Versions 9.5.13 and 10.0.7 contain a patch for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.84",
            "versionEndExcluding" : "9.5.13",
            "matchCriteriaId" : "D7C5D95C-F093-4B44-BF03-837C1D882066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.7",
            "matchCriteriaId" : "D2989977-4BC4-4420-A342-3BF0E09591FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/commit/e2819da64c9075050805a44c834e1f4dc621a982",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-r57v-j88m-rwwf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/commit/e2819da64c9075050805a44c834e1f4dc621a982",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-r57v-j88m-rwwf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29389",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-05T16:15:08.100",
      "lastModified" : "2025-02-12T16:15:38.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged \"Key is validated\" messages via CAN Injection, as exploited in the wild in (for example) July 2022."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:toyota:rav4_firmware:2021:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F36E9A-6C18-45DD-AB29-41CB33C99D2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:toyota:rav4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C484E0F-6B8A-4820-828D-141487E8EC39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kentindell.github.io/2023/04/03/can-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=35452963",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://kentindell.github.io/2023/04/03/can-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=35452963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1876",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T17:15:06.920",
      "lastModified" : "2023-11-07T04:05:16.493",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1877",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T17:15:06.983",
      "lastModified" : "2024-11-21T07:40:04.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command Injection in GitHub repository microweber/microweber prior to 1.3.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.3",
            "matchCriteriaId" : "846F2D65-6C3F-4D7E-902B-774E7890DCC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/microweber/microweber/commit/93a906d0bf096c3ab1674012a90c88d101e76c8d",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/71fe4b3b-20ac-448c-8191-7b99d7ffaf55",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/microweber/microweber/commit/93a906d0bf096c3ab1674012a90c88d101e76c8d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/71fe4b3b-20ac-448c-8191-7b99d7ffaf55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1878",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T17:15:07.037",
      "lastModified" : "2024-11-21T07:40:04.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/e018823f8e3bca103c11e5a98b0dd469e41ed417",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/93f981a3-231d-460d-a239-bb960e8c2fdc",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/e018823f8e3bca103c11e5a98b0dd469e41ed417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/93f981a3-231d-460d-a239-bb960e8c2fdc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1879",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T17:15:07.083",
      "lastModified" : "2024-11-21T07:40:04.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/0dc8e527c375007cd4b8dbf61f7167393a6f6e91",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/1dc7f818-c8ea-4f80-b000-31b48a426334",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/0dc8e527c375007cd4b8dbf61f7167393a6f6e91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/1dc7f818-c8ea-4f80-b000-31b48a426334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1880",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T17:15:07.133",
      "lastModified" : "2024-11-21T07:40:04.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/bbc5d4aa4a4375c14e34dd9fcad2042066fe476d",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ece5f051-674e-4919-b998-594714910f9e",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/bbc5d4aa4a4375c14e34dd9fcad2042066fe476d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/ece5f051-674e-4919-b998-594714910f9e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1881",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T17:15:07.177",
      "lastModified" : "2024-11-21T07:40:04.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.3",
            "matchCriteriaId" : "846F2D65-6C3F-4D7E-902B-774E7890DCC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/microweber/microweber/commit/8d039de2d615956f6df8df0bb1045ff3be88f183",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d5ebc2bd-8638-41c4-bf72-7c906c601344",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/microweber/microweber/commit/8d039de2d615956f6df8df0bb1045ff3be88f183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/d5ebc2bd-8638-41c4-bf72-7c906c601344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1882",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T17:15:07.227",
      "lastModified" : "2024-11-21T07:40:04.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/49db615c300ae0f87795f20570f6f5bdccb1d2f2",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/8ab09a1c-cfd5-4ce0-aae3-d33c93318957",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/49db615c300ae0f87795f20570f6f5bdccb1d2f2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/8ab09a1c-cfd5-4ce0-aae3-d33c93318957",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1883",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T17:15:07.273",
      "lastModified" : "2024-11-21T07:40:04.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/db77df888178766987398597d4f153831c62a503",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2f1e417d-cf64-4cfb-954b-3a9cb2f38191",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/db77df888178766987398597d4f153831c62a503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2f1e417d-cf64-4cfb-954b-3a9cb2f38191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1884",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T17:15:07.323",
      "lastModified" : "2024-11-21T07:40:04.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/7f0f921de74c88038826c46bbd2a123518d9d611",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/dda73cb6-9344-4822-97a1-2e31efb6a73e",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/7f0f921de74c88038826c46bbd2a123518d9d611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/dda73cb6-9344-4822-97a1-2e31efb6a73e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1885",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T17:15:07.370",
      "lastModified" : "2024-11-21T07:40:05.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/fecc803ab9c3e82718c4bcea7fe919d7a22ec024",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/bce84c02-abb2-474f-a67b-1468c9dcabb8",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/fecc803ab9c3e82718c4bcea7fe919d7a22ec024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/bce84c02-abb2-474f-a67b-1468c9dcabb8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1886",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T17:15:07.420",
      "lastModified" : "2024-11-21T07:40:05.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/27eaaae16850694634ac52416a0bd38b35d7330a",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/b7d244b7-5ac3-4964-81ee-8dbb5bb5e33a",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/27eaaae16850694634ac52416a0bd38b35d7330a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/b7d244b7-5ac3-4964-81ee-8dbb5bb5e33a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1887",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-05T17:15:07.473",
      "lastModified" : "2024-11-21T07:40:05.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to 3.1.12."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-840"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/400d9cd988d3287515c56b2ad6343026966f1a89",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e4a58835-96b5-412c-a17e-3ceed30231e1",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/400d9cd988d3287515c56b2ad6343026966f1a89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e4a58835-96b5-412c-a17e-3ceed30231e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20051",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T17:15:07.530",
      "lastModified" : "2024-11-21T07:40:26.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Vector Packet Processor (VPP) of Cisco Packet Data Network Gateway (PGW) could allow an unauthenticated, remote attacker to stop ICMP traffic from being processed over an IPsec connection. This vulnerability is due to the VPP improperly handling a malformed packet. An attacker could exploit this vulnerability by sending a malformed Encapsulating Security Payload (ESP) packet over an IPsec connection. A successful exploit could allow the attacker to stop ICMP traffic over an IPsec connection and cause a denial of service (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:packet_data_network_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.28.0",
            "matchCriteriaId" : "552C22E2-0330-4A5B-B2C3-861A7BBE3CCD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746254AC-B039-432C-AA5C-A82260E57AD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_5500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "301681DF-2A9E-4A91-9918-4A46153ADC01"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EF0299-16A7-446D-855D-BFF91EE65534"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pdng-dos-KmzwEy2Q",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pdng-dos-KmzwEy2Q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28634",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-05T17:15:07.580",
      "lastModified" : "2024-11-21T07:55:42.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a free asset and IT management software package. Starting in version 0.83 and prior to versions 9.5.13 and 10.0.7, a user who has the Technician profile could see and generate a Personal token for a Super-Admin. Using such token it is possible to negotiate a GLPI session and hijack the Super-Admin account, resulting in a Privilege Escalation. Versions 9.5.13 and 10.0.7 contain a patch for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.83",
            "versionEndExcluding" : "9.5.13",
            "matchCriteriaId" : "5E08B07C-B076-4801-981E-10FAAF719351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.7",
            "matchCriteriaId" : "D2989977-4BC4-4420-A342-3BF0E09591FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-4279-rxmh-gf39",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-4279-rxmh-gf39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20124",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T18:15:07.590",
      "lastModified" : "2024-11-21T07:40:36.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not released software updates that address this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC05438-3064-4FB6-9177-9EA60C8E250C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A39236-B032-46BB-94D0-3E0E3E557BC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E699C11F-3C7C-420D-9243-5CD2A6B98EF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF65E38-D812-4F6E-903C-05E203F3E9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C17C5F-4EB7-4859-8127-AE027A72CB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F1C458-0EF3-4AD6-9055-355711F3751E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv01x_rv32x_rce-nzAGWWDD",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv01x_rv32x_rce-nzAGWWDD",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20127",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T18:15:07.640",
      "lastModified" : "2024-11-21T07:40:37.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-27"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "0A1E29E3-1327-4E6B-B068-7B5289A4F0A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "612F8E5C-6C18-4DE8-A548-8F24A5B10948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932E6B00-78B5-4A0E-B87E-4993D6491C34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.8.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "608240CD-CD6C-42A3-9590-7F37B35EDC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1AA925-3BF0-4D8B-BB39-E6DBBAD2CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.9.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EA458C15-66E7-4976-8805-A10608BF7C9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20128",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T18:15:07.687",
      "lastModified" : "2024-11-21T07:40:37.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by sending malicious input to an affected device. A successful exploit could allow the attacker to execute arbitrary commands as the root user on the underlying Linux operating system of the affected device. To exploit these vulnerabilities, an attacker would need to have valid Administrator credentials on the affected device. Cisco has not released software updates to address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-146"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C17C5F-4EB7-4859-8127-AE027A72CB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F1C458-0EF3-4AD6-9055-355711F3751E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv32x-cmdinject-cKQsZpxL",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv32x-cmdinject-cKQsZpxL",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20129",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T18:15:07.747",
      "lastModified" : "2024-11-21T07:40:37.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-27"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "0A1E29E3-1327-4E6B-B068-7B5289A4F0A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "612F8E5C-6C18-4DE8-A548-8F24A5B10948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932E6B00-78B5-4A0E-B87E-4993D6491C34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.8.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "608240CD-CD6C-42A3-9590-7F37B35EDC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1AA925-3BF0-4D8B-BB39-E6DBBAD2CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.9.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EA458C15-66E7-4976-8805-A10608BF7C9F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.2.5",
            "matchCriteriaId" : "FFEE5D43-E3D7-463E-A20D-F812E6B3E770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1",
            "versionEndExcluding" : "5.1.4.2",
            "matchCriteriaId" : "80D67146-B941-4FFA-894C-8032E94E0285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0.2.1",
            "matchCriteriaId" : "A644AE0B-420A-4673-B8E5-D41A5FDB2852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndExcluding" : "6.1.1.1",
            "matchCriteriaId" : "93E92BB5-14F3-4B5A-B546-7101E1B77AAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20130",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T18:15:07.803",
      "lastModified" : "2024-11-21T07:40:37.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-27"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "0A1E29E3-1327-4E6B-B068-7B5289A4F0A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "612F8E5C-6C18-4DE8-A548-8F24A5B10948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932E6B00-78B5-4A0E-B87E-4993D6491C34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.8.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "608240CD-CD6C-42A3-9590-7F37B35EDC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1AA925-3BF0-4D8B-BB39-E6DBBAD2CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.9.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EA458C15-66E7-4976-8805-A10608BF7C9F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.2.5",
            "matchCriteriaId" : "FFEE5D43-E3D7-463E-A20D-F812E6B3E770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1",
            "versionEndExcluding" : "5.1.4.2",
            "matchCriteriaId" : "80D67146-B941-4FFA-894C-8032E94E0285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0.2.1",
            "matchCriteriaId" : "A644AE0B-420A-4673-B8E5-D41A5FDB2852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndExcluding" : "6.1.1.1",
            "matchCriteriaId" : "93E92BB5-14F3-4B5A-B546-7101E1B77AAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20131",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T18:15:07.853",
      "lastModified" : "2024-11-21T07:40:37.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-27"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7",
            "matchCriteriaId" : "0A1E29E3-1327-4E6B-B068-7B5289A4F0A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "612F8E5C-6C18-4DE8-A548-8F24A5B10948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932E6B00-78B5-4A0E-B87E-4993D6491C34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.8.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "608240CD-CD6C-42A3-9590-7F37B35EDC53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1AA925-3BF0-4D8B-BB39-E6DBBAD2CF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:3.9.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EA458C15-66E7-4976-8805-A10608BF7C9F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.2.5",
            "matchCriteriaId" : "FFEE5D43-E3D7-463E-A20D-F812E6B3E770"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1",
            "versionEndExcluding" : "5.1.4.2",
            "matchCriteriaId" : "80D67146-B941-4FFA-894C-8032E94E0285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0.2.1",
            "matchCriteriaId" : "A644AE0B-420A-4673-B8E5-D41A5FDB2852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndExcluding" : "6.1.1.1",
            "matchCriteriaId" : "93E92BB5-14F3-4B5A-B546-7101E1B77AAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20132",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T18:15:07.907",
      "lastModified" : "2024-11-21T07:40:37.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this advisory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81774C03-0884-44C6-80EF-DC882BF44C84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wbx-sxss-fupl-64uHbcm5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wbx-sxss-fupl-64uHbcm5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20134",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T18:15:07.957",
      "lastModified" : "2024-11-21T07:40:38.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this advisory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81774C03-0884-44C6-80EF-DC882BF44C84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wbx-sxss-fupl-64uHbcm5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wbx-sxss-fupl-64uHbcm5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20152",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T18:15:08.003",
      "lastModified" : "2024-11-21T07:40:40.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid Administrator privileges on the affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "36722B6C-64A5-4D00-94E1-442878C37A35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-injection-2XbOg9Dg",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-injection-2XbOg9Dg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28636",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-05T18:15:08.230",
      "lastModified" : "2024-11-21T07:55:42.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a free asset and IT management software package. Starting in version 0.60 and prior to versions 9.5.13 and 10.0.7, a vulnerability allows an administrator to create a malicious external link. This issue is fixed in versions 9.5.13 and 10.0.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.60",
            "versionEndExcluding" : "9.5.13",
            "matchCriteriaId" : "7B645ED8-37B8-4C72-BCAD-F9A5E736117C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.7",
            "matchCriteriaId" : "D2989977-4BC4-4420-A342-3BF0E09591FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-55pm-mc2m-pq46",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-55pm-mc2m-pq46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28639",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-05T18:15:08.310",
      "lastModified" : "2024-11-21T07:55:43.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a free asset and IT management software package. Starting in version 0.85 and prior to versions 9.5.13 and 10.0.7, a malicious link can be crafted by an unauthenticated user. It will be able to exploit a reflected XSS in case any authenticated user opens the crafted link. This issue is fixed in versions 9.5.13 and 10.0.7."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.85",
            "versionEndExcluding" : "9.5.13",
            "matchCriteriaId" : "9B6B5A31-CA54-4907-A9FA-C11B71200EE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.7",
            "matchCriteriaId" : "D2989977-4BC4-4420-A342-3BF0E09591FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-r93q-chh5-jgh4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-r93q-chh5-jgh4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28838",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-05T18:15:08.383",
      "lastModified" : "2024-11-21T07:56:07.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a free asset and IT management software package. Starting in version 0.50 and prior to versions 9.5.13 and 10.0.7, a SQL Injection vulnerability allow users with access rights to statistics or reports to extract all data from database and, in some cases, write a webshell on the server. Versions 9.5.13 and 10.0.7 contain a patch for this issue. As a workaround, remove `Assistance > Statistics` and `Tools > Reports` read rights from every user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.50",
            "versionEndExcluding" : "9.5.13",
            "matchCriteriaId" : "1CF13071-59F4-4F4F-A7AC-F81E3D120363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.7",
            "matchCriteriaId" : "D2989977-4BC4-4420-A342-3BF0E09591FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-2c7r-gf38-358f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-2c7r-gf38-358f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28849",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-05T18:15:08.447",
      "lastModified" : "2024-11-21T07:56:09.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.7, GLPI inventory endpoint can be used to drive a SQL injection attack. It can also be used to store malicious code that could be used to perform XSS attack. By default, GLPI inventory endpoint requires no authentication. Version 10.0.7 contains a patch for this issue. As a workaround, disable native inventory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.7",
            "matchCriteriaId" : "D2989977-4BC4-4420-A342-3BF0E09591FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-9r84-jpg3-h4m6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-9r84-jpg3-h4m6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28852",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-05T18:15:08.520",
      "lastModified" : "2024-11-21T07:56:09.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to versions 9.5.13 and 10.0.7, a user with dashboard administration rights may hack the dashboard form to store malicious code that will be executed when other users will use the related dashboard. Versions 9.5.13 and 10.0.7 contain a patch for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.0",
            "versionEndExcluding" : "9.5.13",
            "matchCriteriaId" : "7C78B679-EE57-44C0-88A6-4D71E4FFB116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.7",
            "matchCriteriaId" : "D2989977-4BC4-4420-A342-3BF0E09591FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.13",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-65gq-p8hg-7m92",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/10.0.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-65gq-p8hg-7m92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28855",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-05T18:15:08.583",
      "lastModified" : "2024-11-21T07:56:09.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to versions 1.13.1 and 1.20.4, lack of access control check allows any authenticated user to write data to any fields container, including those to which they have no configured access. Versions 1.13.1 and 1.20.4 contain a patch for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teclib-edition:fields:*:*:*:*:*:glpi:*:*",
            "versionEndExcluding" : "1.13.1",
            "matchCriteriaId" : "89C87DD6-157A-4B3B-8C3D-F6AFC6FB2C3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teclib-edition:fields:*:*:*:*:*:glpi:*:*",
            "versionStartIncluding" : "1.20.0",
            "versionEndExcluding" : "1.20.4",
            "matchCriteriaId" : "FE8E4B2B-DB2A-4D0F-96AA-651FB7BEE330"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pluginsGLPI/fields/commit/784260be7db185bb1e7d66b299997238c4c0205d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pluginsGLPI/fields/releases/tag/1.13.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pluginsGLPI/fields/releases/tag/1.20.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pluginsGLPI/fields/security/advisories/GHSA-52vv-hm4x-8584",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pluginsGLPI/fields/commit/784260be7db185bb1e7d66b299997238c4c0205d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pluginsGLPI/fields/releases/tag/1.13.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pluginsGLPI/fields/releases/tag/1.20.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/pluginsGLPI/fields/security/advisories/GHSA-52vv-hm4x-8584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29006",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-05T18:15:08.657",
      "lastModified" : "2024-11-21T07:56:22.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Order GLPI plugin allows users to manage order management within GLPI. Starting with version 1.8.0 and prior to versions 2.7.7 and 2.10.1, an authenticated user that has access to standard interface can craft an URL that can be used to execute a system command. Versions 2.7.7 and 2.10.1 contain a patch for this issue. As a workaround, delete the `ajax/dropdownContact.php` file from the plugin."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:order:*:*:*:*:*:glpi:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "2.7.7",
            "matchCriteriaId" : "09602A38-560F-4C72-8933-63F97DA318D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:order:2.10.0:*:*:*:*:glpi:*:*",
            "matchCriteriaId" : "88E31548-BD8B-46ED-8CD9-48F1E615369A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pluginsGLPI/order/commit/c78e64b95e54d5e47d9835984c93049f245b579e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pluginsGLPI/order/security/advisories/GHSA-xfx2-qx2r-3wwm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pluginsGLPI/order/commit/c78e64b95e54d5e47d9835984c93049f245b579e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pluginsGLPI/order/security/advisories/GHSA-xfx2-qx2r-3wwm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0670",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-04-05T19:15:07.693",
      "lastModified" : "2025-02-13T20:15:46.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ulearn version a5a7ca20de859051ea0470542844980a66dfc05d allows an attacker with administrator permissions to obtain remote code execution on the server through the image upload functionality. This occurs because the application does not validate that the uploaded image is actually an image."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ulearn_project:ulearn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74BDAFAA-CF85-4E22-9D2D-9854EE613A78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/scott/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/scott/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/scott/",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1522",
      "sourceIdentifier" : "security@genetec.com",
      "published" : "2023-04-05T19:15:07.737",
      "lastModified" : "2025-02-12T16:15:34.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in the Hardware Inventory report of Security Center 5.11.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genetec:security_center:-:*:*:*:saas:*:*:*",
            "matchCriteriaId" : "BC6A00E1-99F4-45AD-BCF9-2FF49A6914BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genetec:security_center:5.11.2:*:*:*:-:*:*:*",
            "matchCriteriaId" : "4E268371-964A-4886-A5E9-9678F487C950"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.genetec.com/blog/data-protection/high-severity-vulnerability-affecting-the-hardware-inventory-report-task-of-security-center",
        "source" : "security@genetec.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.genetec.com/blog/data-protection/high-severity-vulnerability-affecting-the-hardware-inventory-report-task-of-security-center",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1838",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-05T19:15:07.793",
      "lastModified" : "2024-11-21T07:39:59.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.13",
            "versionEndExcluding" : "4.14.317",
            "matchCriteriaId" : "4656B60F-29E8-4D7E-B827-28CC2223B5C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.245",
            "matchCriteriaId" : "239757EB-B2DF-4DD4-8EEE-97141186DA12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.196",
            "matchCriteriaId" : "87FC1554-2185-4ED6-BF1C-293AA14FFC32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.118",
            "matchCriteriaId" : "CA790029-5DF7-42D7-962E-C810540457A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.42",
            "matchCriteriaId" : "555641B6-5319-4C13-9CC9-50B1CCF9E816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "5.17.10",
            "matchCriteriaId" : "6D0772F5-6B38-4D6C-B29E-A04E7CC5CB9F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lore.kernel.org/netdev/20220516084213.26854-1-jasowang%40redhat.com/T/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0003/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lore.kernel.org/netdev/20220516084213.26854-1-jasowang%40redhat.com/T/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20096",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:07.840",
      "lastModified" : "2024-11-21T07:40:32.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack. This vulnerability is due to insufficient input validation of user-supplied data. An attacker could exploit this vulnerability by entering crafted text into various input fields within the web-based management interface. A successful exploit could allow the attacker to perform a stored XSS attack, which could allow the execution of scripts within the context of other users of the interface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_express:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.5\\(1\\)su3",
            "matchCriteriaId" : "C681E933-5015-4FFA-A5D0-0068CEDAC84E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uccx-xss-GO9L9xxr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uccx-xss-GO9L9xxr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20102",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:07.880",
      "lastModified" : "2024-11-21T07:40:33.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system. This vulnerability is due to insufficient sanitization of user-provided data that is parsed into system memory. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the administrator user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_network_analytics:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4.1",
            "matchCriteriaId" : "2F159605-C93D-4A6E-B9A1-B8AE6E9B268A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:stealthwatch_management_console_2200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FC4568E-20F3-43D4-8658-6A742C47F5E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:stealthwatch_management_console_2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB9D17FE-41BC-43EB-B729-25AB3BD126DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-stealthsmc-rce-sfNBPjcS",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-stealthsmc-rce-sfNBPjcS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20103",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:07.927",
      "lastModified" : "2024-11-21T07:40:33.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code as a root user on an affected device. This vulnerability is due to insufficient validation of user input to the web interface. An attacker could exploit this vulnerability by uploading a crafted file to an affected device. A successful exploit could allow the attacker to execute code on the affected device. To exploit this vulnerability, an attacker would need to have valid Administrator credentials on the affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_network_analytics:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4.2",
            "matchCriteriaId" : "4D68A3DE-3644-440F-B4C7-E75CC00275E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-stealth-rce-BDwXFK9C",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-stealth-rce-BDwXFK9C",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20117",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:07.970",
      "lastModified" : "2024-11-21T07:40:35.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by sending malicious input to an affected device. A successful exploit could allow the attacker to execute arbitrary commands as the root user on the underlying Linux operating system of the affected device. To exploit these vulnerabilities, an attacker would need to have valid Administrator credentials on the affected device. Cisco has not released software updates to address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-146"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:1.5.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71B1E3F-F7DE-4B0A-8304-0980B6EDB776"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:1.5.1.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55476CAD-BDB3-46CB-95A0-74BA8F49A5D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv32x-cmdinject-cKQsZpxL",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv32x-cmdinject-cKQsZpxL",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20121",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:08.030",
      "lastModified" : "2024-11-21T07:40:36.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain root privileges on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.1",
            "matchCriteriaId" : "86005B29-2168-4D94-AFAC-43973E2CA19F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "36722B6C-64A5-4D00-94E1-442878C37A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.10.4",
            "matchCriteriaId" : "5CC17E6B-D7AB-40D7-AEC5-F5B555AC4D7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-adeos-MLAyEcvk",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-adeos-MLAyEcvk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20122",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:08.087",
      "lastModified" : "2024-11-21T07:40:36.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain root privileges on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "36722B6C-64A5-4D00-94E1-442878C37A35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-adeos-MLAyEcvk",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-adeos-MLAyEcvk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20123",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:08.147",
      "lastModified" : "2024-11-21T07:40:36.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the offline access mode of Cisco Duo Two-Factor Authentication for macOS and Duo Authentication for Windows Logon and RDP could allow an unauthenticated, physical attacker to replay valid user session credentials and gain unauthorized access to an affected macOS or Windows device. This vulnerability exists because session credentials do not properly expire. An attacker could exploit this vulnerability by replaying previously used multifactor authentication (MFA) codes to bypass MFA protection. A successful exploit could allow the attacker to gain unauthorized access to the affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.4,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:duo:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "2.0.1",
            "matchCriteriaId" : "3C6AE093-7607-46BD-912D-69CD7159B2DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:duo_authentication_for_windows_logon_and_rdp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.2",
            "matchCriteriaId" : "616F3F42-8D28-4EAB-A5D3-89AF123FE830"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-replay-knuNKd",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-replay-knuNKd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20137",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:08.663",
      "lastModified" : "2024-11-21T07:40:38.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1462E9-4464-492C-8B91-6E020B9DCB23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E01122-CD88-4096-958A-8699B2A3DC3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A620D1C-1FBB-46C9-9904-1FC6342ED85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA568A8-286F-4588-B946-6F9C97E08BCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B7DECE-18C4-45AE-AF5C-657A4795C7F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20138",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:08.727",
      "lastModified" : "2024-11-21T07:40:38.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1462E9-4464-492C-8B91-6E020B9DCB23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E01122-CD88-4096-958A-8699B2A3DC3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A620D1C-1FBB-46C9-9904-1FC6342ED85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA568A8-286F-4588-B946-6F9C97E08BCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B7DECE-18C4-45AE-AF5C-657A4795C7F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20139",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:08.780",
      "lastModified" : "2024-11-21T07:40:38.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1462E9-4464-492C-8B91-6E020B9DCB23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E01122-CD88-4096-958A-8699B2A3DC3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A620D1C-1FBB-46C9-9904-1FC6342ED85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA568A8-286F-4588-B946-6F9C97E08BCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B7DECE-18C4-45AE-AF5C-657A4795C7F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20140",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:08.830",
      "lastModified" : "2024-11-21T07:40:38.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1462E9-4464-492C-8B91-6E020B9DCB23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E01122-CD88-4096-958A-8699B2A3DC3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A620D1C-1FBB-46C9-9904-1FC6342ED85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA568A8-286F-4588-B946-6F9C97E08BCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B7DECE-18C4-45AE-AF5C-657A4795C7F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20141",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:08.877",
      "lastModified" : "2024-11-21T07:40:38.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1462E9-4464-492C-8B91-6E020B9DCB23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E01122-CD88-4096-958A-8699B2A3DC3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A620D1C-1FBB-46C9-9904-1FC6342ED85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA568A8-286F-4588-B946-6F9C97E08BCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B7DECE-18C4-45AE-AF5C-657A4795C7F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20142",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:08.920",
      "lastModified" : "2024-11-21T07:40:39.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1462E9-4464-492C-8B91-6E020B9DCB23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E01122-CD88-4096-958A-8699B2A3DC3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A620D1C-1FBB-46C9-9904-1FC6342ED85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA568A8-286F-4588-B946-6F9C97E08BCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B7DECE-18C4-45AE-AF5C-657A4795C7F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20143",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:08.973",
      "lastModified" : "2024-11-21T07:40:39.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1462E9-4464-492C-8B91-6E020B9DCB23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E01122-CD88-4096-958A-8699B2A3DC3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A620D1C-1FBB-46C9-9904-1FC6342ED85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA568A8-286F-4588-B946-6F9C97E08BCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B7DECE-18C4-45AE-AF5C-657A4795C7F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20144",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:09.017",
      "lastModified" : "2024-11-21T07:40:39.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1462E9-4464-492C-8B91-6E020B9DCB23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E01122-CD88-4096-958A-8699B2A3DC3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A620D1C-1FBB-46C9-9904-1FC6342ED85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA568A8-286F-4588-B946-6F9C97E08BCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B7DECE-18C4-45AE-AF5C-657A4795C7F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20145",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:09.060",
      "lastModified" : "2024-11-21T07:40:39.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1462E9-4464-492C-8B91-6E020B9DCB23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E01122-CD88-4096-958A-8699B2A3DC3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A620D1C-1FBB-46C9-9904-1FC6342ED85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA568A8-286F-4588-B946-6F9C97E08BCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B7DECE-18C4-45AE-AF5C-657A4795C7F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20146",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:09.107",
      "lastModified" : "2024-11-21T07:40:39.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1462E9-4464-492C-8B91-6E020B9DCB23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E01122-CD88-4096-958A-8699B2A3DC3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A620D1C-1FBB-46C9-9904-1FC6342ED85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA568A8-286F-4588-B946-6F9C97E08BCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B7DECE-18C4-45AE-AF5C-657A4795C7F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20147",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:09.167",
      "lastModified" : "2024-11-21T07:40:39.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1462E9-4464-492C-8B91-6E020B9DCB23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E01122-CD88-4096-958A-8699B2A3DC3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A620D1C-1FBB-46C9-9904-1FC6342ED85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA568A8-286F-4588-B946-6F9C97E08BCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B7DECE-18C4-45AE-AF5C-657A4795C7F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20148",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:09.220",
      "lastModified" : "2024-11-21T07:40:39.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC05438-3064-4FB6-9177-9EA60C8E250C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A39236-B032-46BB-94D0-3E0E3E557BC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E699C11F-3C7C-420D-9243-5CD2A6B98EF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF65E38-D812-4F6E-903C-05E203F3E9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C17C5F-4EB7-4859-8127-AE027A72CB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F1C458-0EF3-4AD6-9055-355711F3751E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20149",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:09.277",
      "lastModified" : "2024-11-21T07:40:40.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC05438-3064-4FB6-9177-9EA60C8E250C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A39236-B032-46BB-94D0-3E0E3E557BC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E699C11F-3C7C-420D-9243-5CD2A6B98EF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF65E38-D812-4F6E-903C-05E203F3E9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C17C5F-4EB7-4859-8127-AE027A72CB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F1C458-0EF3-4AD6-9055-355711F3751E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20150",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:09.317",
      "lastModified" : "2024-11-21T07:40:40.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC05438-3064-4FB6-9177-9EA60C8E250C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A39236-B032-46BB-94D0-3E0E3E557BC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E699C11F-3C7C-420D-9243-5CD2A6B98EF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF65E38-D812-4F6E-903C-05E203F3E9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C17C5F-4EB7-4859-8127-AE027A72CB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F1C458-0EF3-4AD6-9055-355711F3751E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20151",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:09.373",
      "lastModified" : "2024-11-21T07:40:40.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC05438-3064-4FB6-9177-9EA60C8E250C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A39236-B032-46BB-94D0-3E0E3E557BC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E699C11F-3C7C-420D-9243-5CD2A6B98EF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EF65E38-D812-4F6E-903C-05E203F3E9F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C17C5F-4EB7-4859-8127-AE027A72CB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F1C458-0EF3-4AD6-9055-355711F3751E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-vqz7gC8W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20153",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-05T19:15:09.467",
      "lastModified" : "2024-11-21T07:40:40.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid Administrator privileges on the affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "36722B6C-64A5-4D00-94E1-442878C37A35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-injection-2XbOg9Dg",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-injection-2XbOg9Dg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-05T19:15:09.517",
      "lastModified" : "2025-02-13T16:15:41.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4510:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB66864-2B10-4693-89C5-F13AADCAF0D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4511:*:*:*:*:*:*",
            "matchCriteriaId" : "36A2372E-DD10-455D-90C9-C8B5EBA52D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4520:*:*:*:*:*:*",
            "matchCriteriaId" : "212A1978-367C-417E-B887-6C957B76578C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4522:*:*:*:*:*:*",
            "matchCriteriaId" : "1261129B-F0FD-4849-A8D9-9CBD99910FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4531:*:*:*:*:*:*",
            "matchCriteriaId" : "087A729A-A175-4CE5-AF87-510E51125C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4540:*:*:*:*:*:*",
            "matchCriteriaId" : "EFBB3F80-C322-4015-897D-12736CED3077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4543:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D55605-AD61-4D63-BCA9-CAD95020813E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4544:*:*:*:*:*:*",
            "matchCriteriaId" : "327F7E10-4704-46D9-A82A-8E799181D0DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4550:*:*:*:*:*:*",
            "matchCriteriaId" : "F515AB67-A302-4A95-BC99-F7F26BA67B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4560:*:*:*:*:*:*",
            "matchCriteriaId" : "97E1E2BD-1AE1-4128-84B3-80A5F8D74A4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4570:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D9FAD8-419D-4489-AAF7-96953CDB595B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4571:*:*:*:*:*:*",
            "matchCriteriaId" : "04373F72-E36E-4EFD-8215-C6CF44464DF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4572:*:*:*:*:*:*",
            "matchCriteriaId" : "126040DD-08A6-45B4-8A41-E47DAF8716FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4580:*:*:*:*:*:*",
            "matchCriteriaId" : "595F8E5F-068B-4526-A76F-D40EADC56135"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4590:*:*:*:*:*:*",
            "matchCriteriaId" : "C8608BDC-21B0-4C4C-9C1E-540FDCA13671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4591:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA24300-1217-4DFA-8247-CF1B83B47C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:4592:*:*:*:*:*:*",
            "matchCriteriaId" : "AE175D32-95D7-451F-88C0-492B4C827CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5000:*:*:*:*:*:*",
            "matchCriteriaId" : "9B826420-BD33-4C0F-A0C8-E614AFA0AE5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5001:*:*:*:*:*:*",
            "matchCriteriaId" : "DAD07524-564F-4559-9F6D-EB8961380A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5002:*:*:*:*:*:*",
            "matchCriteriaId" : "76480E2A-FD99-4902-99D3-847136451618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5010:*:*:*:*:*:*",
            "matchCriteriaId" : "D117C2AE-B396-46AD-9421-23750F9D6CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5011:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9F5FCF-BECA-424C-86C8-4769797AEB3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5020:*:*:*:*:*:*",
            "matchCriteriaId" : "6A014DF4-0353-4117-927B-C7950D92EEF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5021:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6163AF-1A41-4372-8D9B-985BB338B9F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5022:*:*:*:*:*:*",
            "matchCriteriaId" : "2387D138-C8F5-4DC1-A51E-629F9D96F4ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5030:*:*:*:*:*:*",
            "matchCriteriaId" : "0504B6B8-AFA0-418E-AA86-057F4FD01466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5032:*:*:*:*:*:*",
            "matchCriteriaId" : "78CA1BE6-6ACF-42B4-B603-9764A8B81555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5040:*:*:*:*:*:*",
            "matchCriteriaId" : "69866794-C599-49F7-8071-789DA3308AF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5041:*:*:*:*:*:*",
            "matchCriteriaId" : "850DCAC9-D98E-40C1-A748-88E257F09388"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B406DA-32D5-4343-B859-FB463B01CFE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5100:*:*:*:*:*:*",
            "matchCriteriaId" : "4523A4D2-1E40-4A14-81D7-820A2C81C90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5101:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C03D7C-0EEC-4C66-8705-F69909483048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5102:*:*:*:*:*:*",
            "matchCriteriaId" : "9431C11F-E153-4298-8A1B-2CDF677A1428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5103:*:*:*:*:*:*",
            "matchCriteriaId" : "557B4FD6-B1BD-47B4-87B8-7096B99695B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5104:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2EF829-DA42-4C87-AB14-B03BD0AFB177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5105:*:*:*:*:*:*",
            "matchCriteriaId" : "C74D8FDF-04B3-4B03-9110-27683E2329FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5106:*:*:*:*:*:*",
            "matchCriteriaId" : "5C376A34-DC80-4080-9B53-37D954B6F00F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5107:*:*:*:*:*:*",
            "matchCriteriaId" : "4613CD78-8A7D-4382-9975-1BE698E6C2CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5108:*:*:*:*:*:*",
            "matchCriteriaId" : "9F32937B-9B1D-495F-812A-BEBAF3C67540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5109:*:*:*:*:*:*",
            "matchCriteriaId" : "5683B22F-54D1-4C53-8378-3500ADB4AD2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5110:*:*:*:*:*:*",
            "matchCriteriaId" : "08147E4E-6064-44D6-AF7C-1EB584A7CD60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5111:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B110D0-A1BF-486B-A5C4-5927877C1258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5112:*:*:*:*:*:*",
            "matchCriteriaId" : "1C52392E-72C9-4F74-AECE-B20C0259E37D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5113:*:*:*:*:*:*",
            "matchCriteriaId" : "38A4BE4A-B607-483E-AE79-8FF17BEF60B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5114:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2ABFA6-4506-42F8-B458-9EB83C8312DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5115:*:*:*:*:*:*",
            "matchCriteriaId" : "B19B98B7-85D3-4D44-9853-1CD69586BF30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1:5116:*:*:*:*:*:*",
            "matchCriteriaId" : "8A012C70-3CD6-46C7-AEE7-9D5763C5AC87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.2:5200:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFDF89F-54BE-4D72-B95D-12127D8B35A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.2:5201:*:*:*:*:*:*",
            "matchCriteriaId" : "E4DD32D9-A0CA-4434-A8CF-121942FDF152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.2:5202:*:*:*:*:*:*",
            "matchCriteriaId" : "F86FFDB3-B19E-438E-8E5C-6D4994A29B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.2:5203:*:*:*:*:*:*",
            "matchCriteriaId" : "EB4C9B9E-2D26-4850-BAC4-7ABD3C8AE8BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.2:5204:*:*:*:*:*:*",
            "matchCriteriaId" : "4921142A-2D9F-40BE-9640-44037667FB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.2:5205:*:*:*:*:*:*",
            "matchCriteriaId" : "0909BEDE-D384-4719-87C7-4748E70669D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.2:5206:*:*:*:*:*:*",
            "matchCriteriaId" : "43969BCD-92A9-4181-9BE7-9A370FF0EA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.2:5207:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C20F0D-43FD-4313-89DF-F2BCA271C1D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5300:*:*:*:*:*:*",
            "matchCriteriaId" : "190837F9-E545-4576-8660-76837BFBA127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5301:*:*:*:*:*:*",
            "matchCriteriaId" : "6C379810-C027-4443-BA2F-C72A0AFE9074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5302:*:*:*:*:*:*",
            "matchCriteriaId" : "BCF031DE-E118-4DF5-9699-6F14B7B3C6A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5303:*:*:*:*:*:*",
            "matchCriteriaId" : "970C0BA4-6CA9-4304-BAC0-68B2403DCD9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5304:*:*:*:*:*:*",
            "matchCriteriaId" : "6191E179-7D42-4D9A-AF78-B87DBC198B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5305:*:*:*:*:*:*",
            "matchCriteriaId" : "01FC1A37-2AB7-4212-A93A-58021592FF67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5306:*:*:*:*:*:*",
            "matchCriteriaId" : "96287289-2736-4197-B325-9D58EFDD6A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5307:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCC8D28-C586-4E55-B7CD-A7116F5F65CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5308:*:*:*:*:*:*",
            "matchCriteriaId" : "E2437FCD-F77F-4103-914C-20C54C3E088A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5309:*:*:*:*:*:*",
            "matchCriteriaId" : "45F52278-27B0-431E-8FF0-E3A5F68D513D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5310:*:*:*:*:*:*",
            "matchCriteriaId" : "E231C429-0C6D-4DA6-8D89-DB888493F741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5311:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C72CCF-41A6-423D-AB08-DF6FA53E4F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5312:*:*:*:*:*:*",
            "matchCriteriaId" : "999D1D05-D8D7-445E-AAF7-B14769001928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5313:*:*:*:*:*:*",
            "matchCriteriaId" : "CC29D099-13A7-48F5-8A8A-6A564B972D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5314:*:*:*:*:*:*",
            "matchCriteriaId" : "AFAACD50-F964-48EB-8C71-856501FA5BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5315:*:*:*:*:*:*",
            "matchCriteriaId" : "E52DD6D8-DCB5-470E-9F77-653552A5436B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5316:*:*:*:*:*:*",
            "matchCriteriaId" : "1E41D887-5E33-4D94-9C9C-7385D7D777E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5317:*:*:*:*:*:*",
            "matchCriteriaId" : "352966E5-E938-4FA4-A41B-2D95C0E233ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5318:*:*:*:*:*:*",
            "matchCriteriaId" : "2C234A10-9D5A-4C47-92F1-82DA80F5B310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5319:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1516F7-D152-4D9C-92D3-4BD68D77475A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5320:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDFB075-FA1B-47B9-B2EC-80228C20F042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5321:*:*:*:*:*:*",
            "matchCriteriaId" : "9A55F076-4CED-4BFC-B87D-A2AE950F78CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5322:*:*:*:*:*:*",
            "matchCriteriaId" : "50ACF821-D09A-40B9-95A6-BC8DED3460D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5323:*:*:*:*:*:*",
            "matchCriteriaId" : "E0949C30-651A-4646-B215-38AE86F719F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5324:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA8E108-49A7-4281-A938-ED1C1E4890B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5325:*:*:*:*:*:*",
            "matchCriteriaId" : "3B631D21-372B-4B68-B467-F1A5616C5325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5326:*:*:*:*:*:*",
            "matchCriteriaId" : "26BC3F05-FC81-45E4-9D23-864C9B9FF47F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5327:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF87A7-2A53-418D-BB27-D55B10564894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5328:*:*:*:*:*:*",
            "matchCriteriaId" : "9343B338-953B-4E7D-9CD2-00781FFE3972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5329:*:*:*:*:*:*",
            "matchCriteriaId" : "9966E015-590E-4CAD-AEE9-F06E1B34A789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3:5330:*:*:*:*:*:*",
            "matchCriteriaId" : "F3CD27A7-D7B8-4E7E-9F61-F5BCDC0DD007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.4:5400:*:*:*:*:*:*",
            "matchCriteriaId" : "04BB508C-91EA-43A3-B4AC-A7591801F387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7C6C9325-7A0B-4CFF-BBFB-39C1C6F7B0E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5500:*:*:*:*:*:*",
            "matchCriteriaId" : "2B71FA9F-0FC4-4D12-B595-AC529878BC7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5501:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B5A2E3-4F3D-48CC-A2F0-65B9AD2530F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5502:*:*:*:*:*:*",
            "matchCriteriaId" : "0979E79B-936C-4787-8E0A-9F7F43A8A748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5503:*:*:*:*:*:*",
            "matchCriteriaId" : "673E69A8-71BA-49EC-B1AE-931736C6BF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5504:*:*:*:*:*:*",
            "matchCriteriaId" : "141FB02E-695F-484E-8FF6-C334C11F7CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5505:*:*:*:*:*:*",
            "matchCriteriaId" : "C3CF5C1A-6C97-47BA-BF7E-977E3C938DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5506:*:*:*:*:*:*",
            "matchCriteriaId" : "79BEA328-C2CB-4CFA-8CF8-C8B70A37DF07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5507:*:*:*:*:*:*",
            "matchCriteriaId" : "942DC320-20A3-4CBF-BF94-390A9163FC02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5508:*:*:*:*:*:*",
            "matchCriteriaId" : "A42F5F45-4BF6-4076-AC36-F3EDDAC665A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5509:*:*:*:*:*:*",
            "matchCriteriaId" : "600E4C41-B1E1-468D-BA1A-489D0CE5F565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5510:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3BE5B8-37E1-4BB9-A59E-9F3F36BABDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5511:*:*:*:*:*:*",
            "matchCriteriaId" : "E41D8FA9-5D9D-4102-B117-40354F847403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5512:*:*:*:*:*:*",
            "matchCriteriaId" : "8E620B19-0286-4723-91C4-848B6C453509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5513:*:*:*:*:*:*",
            "matchCriteriaId" : "9274C66F-E6AA-4ABD-BF52-3BCCA75821EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5514:*:*:*:*:*:*",
            "matchCriteriaId" : "C7D6AFFF-645C-42D0-ADC9-9D4852B0E5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5515:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A0FC78-73CE-48CE-BD68-74C095F5B052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5516:*:*:*:*:*:*",
            "matchCriteriaId" : "74D85A59-40DE-4DF6-8F41-53BC9EF56DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5517:*:*:*:*:*:*",
            "matchCriteriaId" : "88B2C298-9BB4-4E2E-A1BF-6A4688248FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5518:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5AB70E-BAD0-4C09-9328-89EF049E5C9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5519:*:*:*:*:*:*",
            "matchCriteriaId" : "BF029B3F-93BE-44D3-B8E8-65F18A4F6632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5520:*:*:*:*:*:*",
            "matchCriteriaId" : "C054330B-8344-437B-893F-AD844BCA3CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5:5521:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7A820D-17C3-4F20-B4C4-9068F9594786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.6:5600:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA0897C-62CE-401A-B940-4CA47A0BDF2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.6:5601:*:*:*:*:*:*",
            "matchCriteriaId" : "63F66EA4-1DF6-4EE8-A42C-86D32B82F3BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.6:5602:*:*:*:*:*:*",
            "matchCriteriaId" : "269B1711-8110-4177-8CF2-AD9F1D9E20AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.6:5603:*:*:*:*:*:*",
            "matchCriteriaId" : "39DFD696-3A7F-4003-9F87-458891B787E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.6:5604:*:*:*:*:*:*",
            "matchCriteriaId" : "C15E39AA-79CE-48A7-9629-AC75EC444B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.6:5605:*:*:*:*:*:*",
            "matchCriteriaId" : "2592E246-7208-4CC5-8004-D2AEAB45380C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.6:5606:*:*:*:*:*:*",
            "matchCriteriaId" : "967CA03D-EB7F-4FA7-8FDA-42EEBA2EF6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.6:5607:*:*:*:*:*:*",
            "matchCriteriaId" : "41EB109A-9CF3-498C-93B2-07A31D3CB09A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:5607:*:*:*:*:*:*",
            "matchCriteriaId" : "FE8675BC-B0AA-4067-B079-FCAE97519B0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:5700:*:*:*:*:*:*",
            "matchCriteriaId" : "76008ABA-2A6F-4EF9-B9F4-3CA996C1C5DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:5701:*:*:*:*:*:*",
            "matchCriteriaId" : "7C9E0FFE-2C4E-4157-B6CB-D547DE62E8E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:5702:*:*:*:*:*:*",
            "matchCriteriaId" : "73FB7AA8-4BA9-49D4-A950-C33FA4C59CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:5703:*:*:*:*:*:*",
            "matchCriteriaId" : "B8115A1F-DFFA-4C7D-90A7-1C7585FA1F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:5704:*:*:*:*:*:*",
            "matchCriteriaId" : "59408AE1-F8C3-48A7-BF31-ABB4173E42D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:5705:*:*:*:*:*:*",
            "matchCriteriaId" : "0DB0AFE4-2631-4A5E-BC08-1CF733FD7457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:5706:*:*:*:*:*:*",
            "matchCriteriaId" : "82FD8A24-2D01-4D2A-ADDE-51EBCC189332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:5707:*:*:*:*:*:*",
            "matchCriteriaId" : "3CDD178D-9CE8-4FC9-8388-BB89DC949924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:5708:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3F2942-54CE-41A9-909B-8D5CE515A7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:5709:*:*:*:*:*:*",
            "matchCriteriaId" : "996B4FAB-C1FA-42D9-BAB2-EC4CD2394D67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:5710:*:*:*:*:*:*",
            "matchCriteriaId" : "20D1E7EE-8977-4010-AF5D-843A44853363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "09718DA2-31D3-4CC3-B95D-6A8BE6233700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5800:*:*:*:*:*:*",
            "matchCriteriaId" : "A217F6ED-BC7F-46B7-9D43-D75A3D416322"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5801:*:*:*:*:*:*",
            "matchCriteriaId" : "562397B8-DF54-4585-81B4-3F89816CC8BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5802:*:*:*:*:*:*",
            "matchCriteriaId" : "319E6B84-4D6C-45D2-BF5A-8461202C4463"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5803:*:*:*:*:*:*",
            "matchCriteriaId" : "73DD6611-26EA-44A9-8FAC-0C4A91CAAB1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5804:*:*:*:*:*:*",
            "matchCriteriaId" : "B964F5EA-427D-46D5-AE73-3BEBFE42A4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5805:*:*:*:*:*:*",
            "matchCriteriaId" : "94E70435-5332-48F3-9602-FCA1EFB617BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5806:*:*:*:*:*:*",
            "matchCriteriaId" : "AC040DA3-91BB-41CD-ADE3-D2AA0537516D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5807:*:*:*:*:*:*",
            "matchCriteriaId" : "8E71EE09-F2D6-4981-A962-14DAC49A9A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5808:*:*:*:*:*:*",
            "matchCriteriaId" : "4709685D-CCF0-4444-99B8-4DC6E3D53A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5809:*:*:*:*:*:*",
            "matchCriteriaId" : "13599F95-25B2-4C21-8174-DA966A49249B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5810:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CB6693-492A-4607-9D9C-15C746E12864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5811:*:*:*:*:*:*",
            "matchCriteriaId" : "35238419-A73A-4333-9F3D-481FAA1D167C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5812:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7FEAF1-A4A5-480C-8BA4-0217E6CE63C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5813:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0B4F11-A1E8-4D21-9707-8639A3040840"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5814:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFE9B07-00B7-4211-ADD8-198B7BD4B93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5815:*:*:*:*:*:*",
            "matchCriteriaId" : "7F229F49-EA44-4D0A-855B-FC586CE8CFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5816:*:*:*:*:*:*",
            "matchCriteriaId" : "07AED2F0-F527-4B4A-82FC-F571899F3738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "86396EFE-E4E1-42DB-A206-9D44B977DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6000:*:*:*:*:*:*",
            "matchCriteriaId" : "1ECD4B6F-D157-4AA6-A288-AF85ECFE3D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6001:*:*:*:*:*:*",
            "matchCriteriaId" : "89042E18-91F4-4EB7-9276-251A94529D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6002:*:*:*:*:*:*",
            "matchCriteriaId" : "0215A848-4170-42E0-9711-E9922CE82CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6003:*:*:*:*:*:*",
            "matchCriteriaId" : "4E738DAF-2E66-4D0F-9A8E-B988A51E17DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6004:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D87211-8D8F-420A-AAAC-296FCD214CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6005:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C120A3-C62A-4F39-BB9C-546C7AC57D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6006:*:*:*:*:*:*",
            "matchCriteriaId" : "301FC0FF-8064-470E-BFAA-CC54078D1044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6007:*:*:*:*:*:*",
            "matchCriteriaId" : "AAAF70B7-53FA-41EF-8558-EAC27EF35AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6008:*:*:*:*:*:*",
            "matchCriteriaId" : "821E2F3D-5B0C-4985-9934-F80E163EC1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6009:*:*:*:*:*:*",
            "matchCriteriaId" : "0FFD43E2-8C28-4423-8660-8C9FC996C339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6012:*:*:*:*:*:*",
            "matchCriteriaId" : "E9497B19-1845-44C5-8868-332DDE6DD1D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6013:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A5D3A5-E2C6-43A3-9142-F5FE23BCB3E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B2320EEE-367C-4CE1-8AC4-048B97DE71F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6100:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E5484A-D834-4C7A-962C-C78CF0CDAA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6101:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA21683-29F7-44EB-84C6-D29C6C64DE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6102:*:*:*:*:*:*",
            "matchCriteriaId" : "7BE0B72F-2963-4666-9A82-7812BFB52DB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6103:*:*:*:*:*:*",
            "matchCriteriaId" : "85DD7E26-B9C5-4DCC-8F50-F5884AF61105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6104:*:*:*:*:*:*",
            "matchCriteriaId" : "AC37608E-E61B-4333-8358-50C8377A1ABF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6105:*:*:*:*:*:*",
            "matchCriteriaId" : "C13EF458-FE95-49E5-9A13-04C96C3F114A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6106:*:*:*:*:*:*",
            "matchCriteriaId" : "12919644-3D85-488C-89A3-58A1FB31279D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6107:*:*:*:*:*:*",
            "matchCriteriaId" : "75206A94-9155-48D7-A378-5020877B8B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6108:*:*:*:*:*:*",
            "matchCriteriaId" : "E50CF265-DE6F-4281-8300-06D54185AA43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6109:*:*:*:*:*:*",
            "matchCriteriaId" : "EB577C00-1412-4F87-B91A-5E956EB2213F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6110:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7681FA-FC15-49CE-9288-3C4E361F4D21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6111:*:*:*:*:*:*",
            "matchCriteriaId" : "80F12A94-93C5-4442-8FB3-4E02E4DECCEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6112:*:*:*:*:*:*",
            "matchCriteriaId" : "17270CDC-C800-4B5A-BEAA-83AF455BBBEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6113:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFE53B1-7736-4560-8FEF-AA0F56FEACF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6114:*:*:*:*:*:*",
            "matchCriteriaId" : "C5491174-9BE3-4FBF-AEF5-6A313E2CEBA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6115:*:*:*:*:*:*",
            "matchCriteriaId" : "E407C5F1-43D0-4B5D-A3B8-A48A7024CCB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6116:*:*:*:*:*:*",
            "matchCriteriaId" : "2EC89DCA-D24A-46BB-8086-C306BB4CDABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6117:*:*:*:*:*:*",
            "matchCriteriaId" : "45BEF834-4A4B-4CB0-BEBF-73A03FDAC773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6118:*:*:*:*:*:*",
            "matchCriteriaId" : "E319DA11-0C76-4F52-A197-FFBF4F30BB55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6119:*:*:*:*:*:*",
            "matchCriteriaId" : "B928577F-3183-4305-9009-A8C6970477D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6120:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6F33B5-418E-4B38-81EB-090E4F3AF89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6121:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD9B2CF-8EBE-454D-8A81-873C0A8ACAA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6122:*:*:*:*:*:*",
            "matchCriteriaId" : "D3EFB734-E7F3-482E-9A64-DD1A0A6B1E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6123:*:*:*:*:*:*",
            "matchCriteriaId" : "C15CB1F2-9172-48D6-AD64-EFBC97AB87B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6200:*:*:*:*:*:*",
            "matchCriteriaId" : "BAFCD8BD-07E4-4AD3-B802-9A6D2254777A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6201:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E4E7ED-317B-471D-B387-24BFE504FD48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6202:*:*:*:*:*:*",
            "matchCriteriaId" : "1518C214-71A7-4C97-BA40-95D98E0C78BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6203:*:*:*:*:*:*",
            "matchCriteriaId" : "247ED04D-E067-4A18-8514-9CD635DF4F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6204:*:*:*:*:*:*",
            "matchCriteriaId" : "8AC2C862-7709-44BF-9D0C-1BD63B381001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6205:*:*:*:*:*:*",
            "matchCriteriaId" : "1E936706-E1D6-496A-8395-96706AF32F19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6206:*:*:*:*:*:*",
            "matchCriteriaId" : "CA25E9BB-DDB9-438C-890A-61264C10BFF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6207:*:*:*:*:*:*",
            "matchCriteriaId" : "D71FF123-F797-4E0D-8167-DD4563733879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6208:*:*:*:*:*:*",
            "matchCriteriaId" : "1156F671-D6BD-4FA2-924F-1802F157A025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6209:*:*:*:*:*:*",
            "matchCriteriaId" : "C7ABB8B4-1CBF-4437-A751-B51F2B061C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6210:*:*:*:*:*:*",
            "matchCriteriaId" : "E870D833-28A7-45E1-9A6B-26A33D66B507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6211:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E0ED07-E432-47FD-A2B5-6F591FF2A64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6212:*:*:*:*:*:*",
            "matchCriteriaId" : "73E7D08E-E2AA-48AE-ABFF-0E46026B47FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6213:*:*:*:*:*:*",
            "matchCriteriaId" : "430B78F8-F860-4911-9F7E-710386BF2166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6214:*:*:*:*:*:*",
            "matchCriteriaId" : "E926BB96-B0F6-4FC7-BACE-F658FA63F868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6215:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DC4C8C-41C8-45B2-A077-FB325F80E22F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6216:*:*:*:*:*:*",
            "matchCriteriaId" : "FB581F7E-EF4C-4BFF-AA29-1875F0280BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6217:*:*:*:*:*:*",
            "matchCriteriaId" : "016F55FB-5F14-451F-9F93-479426146925"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.manageengine.com/products/self-service-password/advisory/CVE-2023-28342.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.manageengine.com/products/self-service-password/advisory/CVE-2023-28342.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0319",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-05T20:15:07.403",
      "lastModified" : "2025-02-11T17:15:14.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting from 13.6 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1, allowing to read environment names supposed to be restricted to project memebers only."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.6.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "0E6E5C40-20A6-46DE-BEF9-141EC41D25C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.6.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "E23868FF-759F-4813-8193-01AC30479C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "130F61DA-5561-49A8-8024-88D12819F2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "E10FDADF-D6E5-402E-8834-F9BD274FBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7803BD85-A126-49E0-8DEC-3D0E98A0CAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7D831DA8-EE49-41A1-AE77-E8B51E8458A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0319.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/388096",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1817586",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0319.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/388096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1817586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0523",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-05T20:15:07.443",
      "lastModified" : "2025-02-10T22:15:30.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting from 15.6 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1. An XSS was possible via a malicious email address for certain instances."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.6.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "482B0E4F-5230-4787-96C7-FB28AC313B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.6.0",
            "versionEndIncluding" : "15.8.5",
            "matchCriteriaId" : "C3DFF460-CB1C-4C61-82DC-DE932FB42484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "130F61DA-5561-49A8-8024-88D12819F2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "E10FDADF-D6E5-402E-8834-F9BD274FBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7803BD85-A126-49E0-8DEC-3D0E98A0CAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7D831DA8-EE49-41A1-AE77-E8B51E8458A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0523.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/389487",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1842867",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0523.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/389487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1842867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0842",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-04-05T20:15:07.493",
      "lastModified" : "2025-09-24T12:15:28.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the __proto__ property to be edited."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xml2js_project:xml2js:0.4.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BD0806-8B12-4AE6-B83D-95A30A40E3C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/myers/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Leonidas-from-XIV/node-xml2js/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Leonidas-from-XIV/node-xml2js/releases/tag/0.6.2",
        "source" : "help@fluidattacks.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/03/msg00013.html",
        "source" : "help@fluidattacks.com"
      }, {
        "url" : "https://fluidattacks.com/advisories/myers/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Leonidas-from-XIV/node-xml2js/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/03/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0944",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-04-05T20:15:07.527",
      "lastModified" : "2025-02-13T19:15:11.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bhima version 1.27.0 allows an authenticated attacker with regular user permissions to update arbitrary user session data such as username, email and password. This is possible because the application is vulnerable to IDOR, it does not correctly validate user permissions with respect to certain actions that can be performed by the user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imaworldhealth:bhima:1.27.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AABD5894-92F1-4A9F-B434-62FB29A5A670"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/stewart/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IMA-WorldHealth/bhima/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/stewart/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IMA-WorldHealth/bhima/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0959",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-04-05T20:15:07.557",
      "lastModified" : "2025-02-13T19:15:12.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bhima version 1.27.0 allows a remote attacker to update the privileges of any account registered in the application via a malicious link sent to an administrator. This is possible because the application is vulnerable to CSRF."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imaworldhealth:bhima:1.27.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AABD5894-92F1-4A9F-B434-62FB29A5A670"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/calamaro/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IMA-WorldHealth/bhima/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/calamaro/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IMA-WorldHealth/bhima/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0967",
      "sourceIdentifier" : "help@fluidattacks.com",
      "published" : "2023-04-05T20:15:07.590",
      "lastModified" : "2025-02-13T21:15:11.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bhima version 1.27.0 allows an attacker authenticated with normal user permissions to view sensitive data of other application users and data that should only be viewed by the administrator. This is possible because the application is vulnerable to IDOR, it does not properly validate user permissions with respect to certain actions the user can perform."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imaworldhealth:bhima:1.27.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AABD5894-92F1-4A9F-B434-62FB29A5A670"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fluidattacks.com/advisories/ingrosso/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/IMA-WorldHealth/bhima/",
        "source" : "help@fluidattacks.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://fluidattacks.com/advisories/ingrosso/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/IMA-WorldHealth/bhima/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1098",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-05T20:15:07.623",
      "lastModified" : "2025-02-10T21:15:14.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 will allow an admin to leak password from repository mirror configuration."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-535"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "13C36E7B-CBC2-449D-B035-1F956BDFA0CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "DD4E75D8-6385-450C-879B-2E0C3A6DF6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "130F61DA-5561-49A8-8024-88D12819F2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "E10FDADF-D6E5-402E-8834-F9BD274FBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7803BD85-A126-49E0-8DEC-3D0E98A0CAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7D831DA8-EE49-41A1-AE77-E8B51E8458A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1098.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/383745",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1784294",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1098.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/383745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1784294",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1582",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-05T20:15:07.663",
      "lastModified" : "2025-02-13T15:15:13.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attacker with user privilege to cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7",
            "matchCriteriaId" : "C3821E00-CCBB-4CD4-AD2C-D47DFF2F5A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.7:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "83CE3BF3-F57D-4AF6-AD37-D29434787772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.7:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAE09B2-58C0-42B8-ACDA-578904723270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.7:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "59EEFC0E-2E5A-4113-A58D-2EE2CC7CFA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.7:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC0A9A2-D528-49AA-AB7F-37C5EA7AB76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.7:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "512FF86F-0B8C-4DEB-9041-8BD384DD2E58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.7:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "F1AB4A11-C03C-4ABB-B596-0EB3B0F1A8DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.7:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "9D26AE9C-D49F-4FE9-8A6A-5A7199B7436E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lore.kernel.org/linux-mm/Yg6ac8WlwtnDH6M0%40kroah.com/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lore.kernel.org/linux-mm/Yg6ac8WlwtnDH6M0%40kroah.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1733",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-05T20:15:07.707",
      "lastModified" : "2025-02-10T21:15:14.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service condition exists in the Prometheus server bundled with GitLab affecting all versions from 11.10 to 15.8.5, 15.9 to 15.9.4 and 15.10 to 15.10.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "11.10.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "1B9565EF-8F06-4BAB-A386-0E0190B69C7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "11.10.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "D6FCCE23-6B2E-4683-A8A2-CE70011BE7B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "130F61DA-5561-49A8-8024-88D12819F2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "E10FDADF-D6E5-402E-8834-F9BD274FBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7803BD85-A126-49E0-8DEC-3D0E98A0CAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7D831DA8-EE49-41A1-AE77-E8B51E8458A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1733.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/392665",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1723124",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1733.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/392665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1723124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1782",
      "sourceIdentifier" : "security@hashicorp.com",
      "published" : "2023-04-05T20:15:07.763",
      "lastModified" : "2024-11-21T07:39:53.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hashicorp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hashicorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.5.0",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "CF6C682F-831D-4514-9D9A-F23081D65DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.5.0",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "90D15FCA-79C3-49CF-9816-6862E9A5A7A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-12-nomad-unauthenticated-client-agent-http-request-privilege-escalation/52375",
        "source" : "security@hashicorp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-12-nomad-unauthenticated-client-agent-http-request-privilege-escalation/52375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1855",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-05T20:15:07.817",
      "lastModified" : "2025-02-12T16:15:34.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3",
            "matchCriteriaId" : "3769AA63-B0A8-4EF1-96F9-6A6A6B305A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9",
            "versionEndExcluding" : "4.14.311",
            "matchCriteriaId" : "70A6B40D-3273-4B2D-AEBF-CA44F5F971FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.279",
            "matchCriteriaId" : "8E21A6F0-EF6A-4BB1-BEC0-09275FA55481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.238",
            "matchCriteriaId" : "5FF05A65-6B32-4A9C-905D-6E0F17C6803B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.176",
            "matchCriteriaId" : "7DA7FEF3-FE10-4D78-94E4-BDCDA7371DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.104",
            "matchCriteriaId" : "EB8A3D70-3EE1-4B1C-8A21-21CA7356DCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.21",
            "matchCriteriaId" : "1F1CA6A9-8F4D-408D-9116-868EC067DCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.2.8",
            "matchCriteriaId" : "4011EC6B-7786-4709-B765-186FA31D6F7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F0FC3-CE52-4BA1-BA51-22F783938431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "3583026A-27EC-4A4C-850A-83F2AF970673"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/torvalds/linux/commit/cb090e64cf25602b9adaf32d5dfc9c8bec493cd1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lore.kernel.org/all/20230318122758.2140868-1-linux%40roeck-us.net/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/cb090e64cf25602b9adaf32d5dfc9c8bec493cd1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lore.kernel.org/all/20230318122758.2140868-1-linux%40roeck-us.net/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-05T20:15:07.887",
      "lastModified" : "2025-02-11T20:15:32.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in readium-js v0.32.0 allows attackers to execute arbitrary code via uploading a crafted EPUB file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:readium:readium-js:0.32.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B10A68EF-B461-4AB9-AFE6-420743368741"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://infosec.zeyu2001.com/2023/readiumjs-cloud-reader-everybody-gets-an-xss",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://infosec.zeyu2001.com/2023/readiumjs-cloud-reader-everybody-gets-an-xss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-05T20:15:07.970",
      "lastModified" : "2025-02-13T21:15:12.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jfinal CMS v5.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /system/dict/list."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jflyfox:jfinal_cms:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AADB59E-0655-468D-ACEC-D5C2338F212E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Threonic/a262c19ed5027e5a7fe0b97b62b10a08",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/Threonic/a262c19ed5027e5a7fe0b97b62b10a08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0450",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-05T21:15:07.097",
      "lastModified" : "2024-11-21T07:37:12.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting from 8.1 to 15.8.5, and from 15.9 to 15.9.4, and from 15.10 to 15.10.1. It was possible to add a branch with an ambiguous name that could be used to social engineer users."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "8B1B32A5-101D-42DD-98CF-2BA5F0D1A5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "4967C233-160A-4FFC-998E-5FD654FB25FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "130F61DA-5561-49A8-8024-88D12819F2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "E10FDADF-D6E5-402E-8834-F9BD274FBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7803BD85-A126-49E0-8DEC-3D0E98A0CAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7D831DA8-EE49-41A1-AE77-E8B51E8458A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0450.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/388962",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1831547",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0450.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/388962",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1831547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0838",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-05T21:15:07.153",
      "lastModified" : "2025-02-10T21:15:13.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting versions starting from 15.1 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1. A maintainer could modify a webhook URL to leak masked webhook secrets by adding a new parameter to the url. This addresses an incomplete fix for CVE-2022-4342."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "8A5E15F9-D6D7-4BD7-A4BC-D46D6EBF07B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "FFE0EC05-6B4D-4AC8-A25F-EBFAC6629CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "130F61DA-5561-49A8-8024-88D12819F2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "E10FDADF-D6E5-402E-8834-F9BD274FBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7803BD85-A126-49E0-8DEC-3D0E98A0CAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7D831DA8-EE49-41A1-AE77-E8B51E8458A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0838.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/391685",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1871136",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0838.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/391685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1871136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1071",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-05T21:15:07.200",
      "lastModified" : "2025-02-10T21:15:13.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions from 15.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. Due to improper permissions checks it was possible for an unauthorised user to remove an issue from an epic."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.5.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "6DEC473C-C2BF-40DE-8A27-8039EA332061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.5.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "80A8CAD3-BB1E-431E-A8F8-329F47E669C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "130F61DA-5561-49A8-8024-88D12819F2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "E10FDADF-D6E5-402E-8834-F9BD274FBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7803BD85-A126-49E0-8DEC-3D0E98A0CAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7D831DA8-EE49-41A1-AE77-E8B51E8458A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1071.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/385434",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1071.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/385434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1167",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-05T21:15:07.243",
      "lastModified" : "2025-02-10T21:15:14.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "12.3.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "FCE75D34-B6C7-4275-9630-8AEEFE40263A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "E10FDADF-D6E5-402E-8834-F9BD274FBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7D831DA8-EE49-41A1-AE77-E8B51E8458A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1167.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/392715",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1167.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/392715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1417",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-05T21:15:07.283",
      "lastModified" : "2025-02-11T16:15:31.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible for an unauthorised user to add child epics linked to victim's epic in an unrelated group."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "130F61DA-5561-49A8-8024-88D12819F2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "E10FDADF-D6E5-402E-8834-F9BD274FBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7803BD85-A126-49E0-8DEC-3D0E98A0CAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7D831DA8-EE49-41A1-AE77-E8B51E8458A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1417.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/396720",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1892200",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1417.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/396720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1892200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1708",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-05T21:15:07.327",
      "lastModified" : "2025-02-10T21:15:14.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1 where non-printable characters gets copied from clipboard, allowing unexpected commands to be executed on victim machine."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "89ADE59C-825E-4291-8FD7-80859A8BEB78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "5A1F89C2-298A-4388-8792-AD6907E795CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "130F61DA-5561-49A8-8024-88D12819F2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "E10FDADF-D6E5-402E-8834-F9BD274FBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7803BD85-A126-49E0-8DEC-3D0E98A0CAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7D831DA8-EE49-41A1-AE77-E8B51E8458A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1708.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/387185",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1805604",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1708.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/387185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1805604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1710",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-05T21:15:07.367",
      "lastModified" : "2025-02-10T21:15:14.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A sensitive information disclosure vulnerability in GitLab affecting all versions from 15.0 prior to 15.8.5, 15.9 prior to 15.9.4 and 15.10 prior to 15.10.1 allows an attacker to view the count of internal notes for a given issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "674B9329-1779-40F7-97EF-B49DC0506B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.8.5",
            "matchCriteriaId" : "2DA9CDF4-F3AE-41DA-A39A-FB2AA887CB53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "130F61DA-5561-49A8-8024-88D12819F2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "E10FDADF-D6E5-402E-8834-F9BD274FBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7803BD85-A126-49E0-8DEC-3D0E98A0CAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7D831DA8-EE49-41A1-AE77-E8B51E8458A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1710.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/388242",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1829768",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1710.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/388242",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1829768",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1787",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-05T21:15:07.410",
      "lastModified" : "2025-02-10T21:15:15.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A search timeout could be triggered if a specific HTML payload was used in the issue description."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "130F61DA-5561-49A8-8024-88D12819F2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "15.9.0",
            "versionEndExcluding" : "15.9.4",
            "matchCriteriaId" : "E10FDADF-D6E5-402E-8834-F9BD274FBE2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "7803BD85-A126-49E0-8DEC-3D0E98A0CAE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "7D831DA8-EE49-41A1-AE77-E8B51E8458A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1787.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/394817",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1787.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/394817",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23815",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T05:15:07.200",
      "lastModified" : "2024-11-21T07:46:53.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Alan Jackson Multi-column Tag Map plugin <= 17.0.24 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:multi-column_tag_map_project:multi-column_tag_map:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "17.0.25",
            "matchCriteriaId" : "D5EAFB36-724F-4E09-BB19-27F0CA349F8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/multi-column-tag-map/wordpress-multi-column-tag-map-plugin-17-0-24-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/multi-column-tag-map/wordpress-multi-column-tag-map-plugin-17-0-24-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23981",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T05:15:07.303",
      "lastModified" : "2024-11-21T07:47:12.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud Conversational Forms for ChatBot plugin <= 1.1.6 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quantumcloud:conversational_forms_for_chatbot:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.7",
            "matchCriteriaId" : "DD80AD69-58D0-4358-AEED-09F89DA29C73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/conversational-forms/wordpress-conversational-forms-for-chatbot-plugin-1-1-6-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/conversational-forms/wordpress-conversational-forms-for-chatbot-plugin-1-1-6-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23982",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T05:15:07.360",
      "lastModified" : "2024-11-21T07:47:12.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPGear.Pro WPFrom Email plugin <= 1.8.8 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfrom_email_project:wpfrom_email:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.9",
            "matchCriteriaId" : "FFF05865-D887-494F-8BF1-9A0F4F50EC3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wpfrom-email/wordpress-wpfrom-email-plugin-1-8-8-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wpfrom-email/wordpress-wpfrom-email-plugin-1-8-8-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-06T05:15:07.417",
      "lastModified" : "2025-02-13T21:15:13.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A denial of service (process hang) can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip3_project:bzip3:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "EB15180E-FDF7-4F85-997B-9A0838917ADE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kspalaiologos/bzip3/compare/1.2.3...1.3.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/issues/95",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2023-29415",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/compare/1.2.3...1.3.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/issues/95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2023-29415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-06T05:15:07.460",
      "lastModified" : "2025-02-13T21:15:13.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A bz3_decode_block out-of-bounds write can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip3_project:bzip3:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "EB15180E-FDF7-4F85-997B-9A0838917ADE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kspalaiologos/bzip3/commit/bfa5bf82b53715dfedf048e5859a46cf248668ff",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/compare/1.2.3...1.3.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/issues/92",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/commit/bfa5bf82b53715dfedf048e5859a46cf248668ff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/compare/1.2.3...1.3.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/issues/92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-06T05:15:07.500",
      "lastModified" : "2024-11-21T07:57:01.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in libbzip3.a in bzip3 1.2.2. There is a bz3_decompress out-of-bounds read in certain situations where buffers passed to bzip3 do not contain enough space to be filled with decompressed data. NOTE: the vendor's perspective is that the observed behavior can only occur for a contract violation, and thus the report is invalid."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip3_project:bzip3:1.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC31610-0B46-4521-8F29-2A29C4C1B808"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kspalaiologos/bzip3/issues/97",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/issues/97",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-06T05:15:07.540",
      "lastModified" : "2025-03-05T20:16:04.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an xwrite out-of-bounds read."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip3_project:bzip3:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "6FD980D9-5ECE-4C1A-B631-DBDB8E983FF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kspalaiologos/bzip3/commit/aae16d107f804f69000c09cd92027a140968cc9d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/issues/92",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/commit/aae16d107f804f69000c09cd92027a140968cc9d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/issues/92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-06T05:15:07.577",
      "lastModified" : "2025-03-05T20:16:05.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a bz3_decode_block out-of-bounds read."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip3_project:bzip3:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "6FD980D9-5ECE-4C1A-B631-DBDB8E983FF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kspalaiologos/bzip3/commit/8ec8ce7d3d58bf42dabc47e4cc53aa27051bd602",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/issues/92",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/commit/8ec8ce7d3d58bf42dabc47e4cc53aa27051bd602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/issues/92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-06T05:15:07.613",
      "lastModified" : "2025-03-05T19:15:34.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a crash caused by an invalid memmove in bz3_decode_block."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip3_project:bzip3:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "6FD980D9-5ECE-4C1A-B631-DBDB8E983FF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kspalaiologos/bzip3/commit/bb06deb85f1c249838eb938e0dab271d4194f8fa",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/issues/92",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/commit/bb06deb85f1c249838eb938e0dab271d4194f8fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/issues/92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-06T05:15:07.653",
      "lastModified" : "2025-02-12T17:15:18.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an out-of-bounds write in bz3_decode_block."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bzip3_project:bzip3:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.3",
            "matchCriteriaId" : "6FD980D9-5ECE-4C1A-B631-DBDB8E983FF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/issues/94",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kspalaiologos/bzip3/issues/94",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23971",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T06:15:08.387",
      "lastModified" : "2024-11-21T07:47:11.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodePeople WP Time Slots Booking Form plugin <= 1.1.81 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codepeople:wp_time_slots_booking_form:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.81",
            "matchCriteriaId" : "3D03AE96-B8B2-4E51-AEBE-8F0CB2E38C48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-time-slots-booking-form/wordpress-wp-time-slots-booking-form-plugin-1-1-81-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-time-slots-booking-form/wordpress-wp-time-slots-booking-form-plugin-1-1-81-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23972",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T06:15:08.687",
      "lastModified" : "2024-11-21T07:47:11.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin <= 0.8.39 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdevart:social_like_box_and_page:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.8.39",
            "matchCriteriaId" : "2919A1CF-28F5-4821-B269-4282A051AA76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/like-box/wordpress-social-like-box-and-page-by-wpdevart-plugin-0-8-39-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/like-box/wordpress-social-like-box-and-page-by-wpdevart-plugin-0-8-39-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23979",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T06:15:08.880",
      "lastModified" : "2024-11-21T07:47:12.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fullworksplugins:quick_event_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "9.7.5",
            "matchCriteriaId" : "4B4745F0-6309-45C9-9A83-5F72674E6F4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/quick-event-manager/wordpress-quick-event-manager-plugin-9-7-4-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/quick-event-manager/wordpress-quick-event-manager-plugin-9-7-4-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23987",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T06:15:09.067",
      "lastModified" : "2026-04-28T19:19:36.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPEverest User Registration plugin <= 2.3.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpeverest:user_registration:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.3.1",
            "matchCriteriaId" : "65DCB0CD-3FB2-4C5C-9C07-C1F7F37D19F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/user-registration/wordpress-user-registration-custom-registration-form-login-form-and-user-profile-for-wordpress-plugin-2-3-0-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/user-registration/wordpress-user-registration-custom-registration-form-login-form-and-user-profile-for-wordpress-plugin-2-3-0-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25542",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-04-06T07:15:06.777",
      "lastModified" : "2024-11-21T07:49:41.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell Trusted Device Agent, versions prior to 5.3.0, contain(s) an improper installation permissions vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to escalated privileges.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:trusted_device_agent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.3.0",
            "matchCriteriaId" : "A58B21F0-F401-4D61-A646-C1A58A6AEBEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000209461/dsa-2023-074",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000209461/dsa-2023-074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28046",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-04-06T07:15:06.960",
      "lastModified" : "2024-11-21T07:54:11.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local low privilege attacker could potentially exploit this vulnerability, leading to the deletion of arbitrary files on the operating system with high privileges.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-272"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:display_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "3032AF92-97A1-4693-96D3-59595D1D3CEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000211727/dsa-2023",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000211727/dsa-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23980",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T08:15:07.170",
      "lastModified" : "2024-11-21T07:47:12.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MailOptin Popup Builder Team MailOptin plugin <= 1.2.54.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mailoptin:mailoptin:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.54.1",
            "matchCriteriaId" : "6BBA142A-044A-4F65-965A-CA159CC94FA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/mailoptin/wordpress-mailoptin-plugin-1-2-54-0-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/mailoptin/wordpress-mailoptin-plugin-1-2-54-0-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23996",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T08:15:07.243",
      "lastModified" : "2024-11-21T07:47:13.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.3 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:properfraction:profilepress:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.5.4",
            "matchCriteriaId" : "31C3AB55-5F5D-4219-B69C-81F43D62D109"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-user-avatar/wordpress-paid-membership-ecommerce-registration-form-login-form-user-profile-paywall-restrict-content-profilepress-plugin-4-5-3-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-user-avatar/wordpress-paid-membership-ecommerce-registration-form-login-form-user-profile-paywall-restrict-content-profilepress-plugin-4-5-3-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23998",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T08:15:07.300",
      "lastModified" : "2024-11-21T07:47:14.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikRentCar Car Rental Management System plugin <= 1.3.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e4jconnect:vikrentcar:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.1",
            "matchCriteriaId" : "87BE8C57-F38E-4EFC-8BED-064940DD4AF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/vikrentcar/wordpress-vikrentcar-car-rental-management-system-plugin-1-3-0-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/vikrentcar/wordpress-vikrentcar-car-rental-management-system-plugin-1-3-0-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24001",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T08:15:07.353",
      "lastModified" : "2026-03-03T18:43:17.450",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yannick Lefebvre Modal Dialog plugin <= 3.5.9 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ylefebvre:modal_dialog:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.5.10",
            "matchCriteriaId" : "A20F3E9B-75DD-485E-B8B2-46399EF27B57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/modal-dialog/wordpress-modal-dialog-plugin-3-5-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/modal-dialog/wordpress-modal-dialog-plugin-3-5-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24006",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T08:15:07.403",
      "lastModified" : "2024-11-21T07:47:15.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Link Software LLC WP Terms Popup plugin <= 2.6.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linksoftwarellc:wp_terms_popup:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.6.1",
            "matchCriteriaId" : "686AC167-3F37-49F0-92E8-E25A99F1E0DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-terms-popup/wordpress-wp-terms-popup-terms-and-conditions-and-privacy-policy-wordpress-popups-plugin-2-6-0-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-terms-popup/wordpress-wp-terms-popup-terms-and-conditions-and-privacy-policy-wordpress-popups-plugin-2-6-0-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1802",
      "sourceIdentifier" : "security@docker.com",
      "published" : "2023-04-06T09:15:07.030",
      "lastModified" : "2024-11-21T07:39:56.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed. A targeted network sniffing attack can lead to a disclosure of sensitive information. Only users who have Access Experimental Features enabled and have logged in to a private registry are affected. \n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@docker.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@docker.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:desktop:4.17.0:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "D7217294-76FA-466D-A46E-85076F041746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:desktop:4.17.1:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "DBBD80F7-7DA0-4B5C-A384-C817C777F585"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.docker.com/desktop/release-notes/#4180",
        "source" : "security@docker.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/docker/for-win/issues/13344",
        "source" : "security@docker.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://docs.docker.com/desktop/release-notes/#4180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/docker/for-win/issues/13344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24002",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T09:15:07.497",
      "lastModified" : "2024-11-21T07:47:14.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt plugin <= 2.6.3 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdevart:youtube_embed\\,_playlist_and_popup:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.6.4",
            "matchCriteriaId" : "4F6D9B90-9A2F-41BB-A668-9347865B52A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/youtube-video-player/wordpress-youtube-embed-playlist-and-popup-by-wpdevart-plugin-2-6-3-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/youtube-video-player/wordpress-youtube-embed-playlist-and-popup-by-wpdevart-plugin-2-6-3-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24003",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T09:15:07.577",
      "lastModified" : "2024-11-21T07:47:14.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Timersys WP Popups – WordPress Popup plugin <= 2.1.4.8 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timersys:wp_popups:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.4.9",
            "matchCriteriaId" : "13042C13-0A54-40EE-8853-D7420791690B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-popups-lite/wordpress-wp-popups-wordpress-popup-builder-plugin-2-1-4-8-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-popups-lite/wordpress-wp-popups-wordpress-popup-builder-plugin-2-1-4-8-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24004",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T09:15:07.647",
      "lastModified" : "2024-11-21T07:47:14.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Image and Video Lightbox, Image PopUp plugin <= 2.1.5 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdevart:download_image_and_video_lightbox\\,_image_popup:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.6",
            "matchCriteriaId" : "C21EE111-7E78-4A64-A13E-968F4AE87E5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/lightbox-popup/wordpress-image-and-video-lightbox-image-popup-plugin-2-1-5-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/lightbox-popup/wordpress-image-and-video-lightbox-image-popup-plugin-2-1-5-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0652",
      "sourceIdentifier" : "cna@cloudflare.com",
      "published" : "2023-04-06T10:15:07.167",
      "lastModified" : "2024-11-21T07:37:33.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WARP Client for Windows (<= 2022.12.582.0) allowed a malicious attacker to forge the destination of the hardlink and escalate privileges, overwriting SYSTEM protected files.\nAs Cloudflare WARP client for Windows (up to version 2022.5.309.0) allowed creation of mount points from its ProgramData folder, during installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cloudflare.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@cloudflare.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudflare:warp:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "2023.3.381.0",
            "matchCriteriaId" : "B8FB60C0-986F-4205-9EE1-05C745FEF2AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developers.cloudflare.com/warp-client/get-started/windows/",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cloudflare/advisories/security/advisories/GHSA-xmhj-9p83-xvw9",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/release",
        "source" : "cna@cloudflare.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://developers.cloudflare.com/warp-client/get-started/windows/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cloudflare/advisories/security/advisories/GHSA-xmhj-9p83-xvw9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/release",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23898",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T11:15:06.827",
      "lastModified" : "2024-11-21T07:47:03.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeThemes Blocksy Companion plugin <= 1.8.67 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:creativethemes:blocksy_companion:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.68",
            "matchCriteriaId" : "3964CE5F-08B9-487D-A76D-45166714376E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/blocksy-companion/wordpress-blocksy-companion-plugin-1-8-67-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/blocksy-companion/wordpress-blocksy-companion-plugin-1-8-67-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24383",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T11:15:06.890",
      "lastModified" : "2024-11-21T07:47:45.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Namaste! LMS plugin <= 2.5.9.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kibokolabs:namaste\\!_lms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.5.9.2",
            "matchCriteriaId" : "BC4CAE6C-0B40-42F2-972C-B76402EE68D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/namaste-lms/wordpress-namaste-lms-plugin-2-5-9-1-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/namaste-lms/wordpress-namaste-lms-plugin-2-5-9-1-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24387",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T11:15:06.943",
      "lastModified" : "2024-11-21T07:47:45.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Organization chart plugin <= 1.4.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdevart:organization_chart:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.5",
            "matchCriteriaId" : "E2BA4460-E71E-40AE-BA06-FD9B6EF776A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/organization-chart/wordpress-wpdevart-organization-chart-plugin-1-4-4-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/organization-chart/wordpress-wpdevart-organization-chart-plugin-1-4-4-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24403",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T11:15:06.990",
      "lastModified" : "2026-04-28T19:19:40.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP For The Win bbPress Voting plugin <= 2.1.11.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpforthewin:bbpress_voting:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.11.1",
            "matchCriteriaId" : "9F3582D7-1049-4643-8299-1F596FCB7172"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/bbp-voting/wordpress-bbpress-voting-plugin-2-1-11-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/bbp-voting/wordpress-bbpress-voting-plugin-2-1-11-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24411",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T11:15:07.050",
      "lastModified" : "2024-11-21T07:47:48.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kerry Kline BNE Testimonials plugin <= 2.0.7 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bnecreative:bne_testimonials:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.8",
            "matchCriteriaId" : "EA2D494B-D6F2-40EF-B1A0-B8731D07BE8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/bne-testimonials/wordpress-bne-testimonials-plugin-2-0-7-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/bne-testimonials/wordpress-bne-testimonials-plugin-2-0-7-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1908",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-06T13:15:08.790",
      "lastModified" : "2024-11-21T07:40:07.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/categories/view_category.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225150 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_mobile_comparison_website_project:simple_mobile_comparison_website:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819E4A1A-2355-4222-A684-B625872A8A54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Kerkong/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225150",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225150",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kerkong/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23801",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T13:15:08.860",
      "lastModified" : "2024-11-21T07:46:51.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Really Simple Google Tag Manager plugin <= 1.0.6 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:really_simple_google_tag_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.7",
            "matchCriteriaId" : "E35EB56D-0E14-4379-9A47-4944A39BC8CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/really-simple-google-tag-manager/wordpress-really-simple-google-tag-manager-plugin-1-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/really-simple-google-tag-manager/wordpress-really-simple-google-tag-manager-plugin-1-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0750",
      "sourceIdentifier" : "vulnerability@ncsc.ch",
      "published" : "2023-04-06T14:15:07.913",
      "lastModified" : "2024-11-21T07:37:45.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yellobrik PEC-1864 implements authentication checks via javascript in the frontend interface.  When the device can be accessed over the network an attacker could bypass authentication.\n\n\n\n\nThis would allow an attacker to : \n- Change the password, resulting in a DOS of the users\n\n- Change the streaming source, compromising the integrity of the stream\n\n- Change the streaming destination, compromising the confidentiality of the stream\n\n\n\n\n\n\n\n\nThis issue affects Yellowbrik: PEC 1864. No patch has been issued by the manufacturer as this model was discontinued.\n\n\n\n\n\n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "vulnerability@ncsc.ch",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vulnerability@ncsc.ch",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-602"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lynx-technik:yellobrik_pec_1864_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D15174-B673-4FC9-A6A1-3AFCF7887840"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lynx-technik:yellobrik_pec_1864:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE5B4F1-4DFB-4FD3-92D5-43152E93ACAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lynx-technik.com/support/solutions/articles/1000317081-pec-1864-web-ui-for-configuration",
        "source" : "vulnerability@ncsc.ch",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lynx-technik.com/support/solutions/articles/1000317081-pec-1864-web-ui-for-configuration",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23891",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T14:15:07.980",
      "lastModified" : "2024-11-21T07:47:02.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in OceanWP Ocean Extra plugin <= 2.1.1 versions. Needs the OceanWP theme installed and activated."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oceanwp:ocean_extra:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.2",
            "matchCriteriaId" : "C264B315-A71F-4A65-8668-A61D6B907878"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/ocean-extra/wordpress-ocean-extra-plugin-2-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/ocean-extra/wordpress-ocean-extra-plugin-2-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24374",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T14:15:08.043",
      "lastModified" : "2024-11-21T07:47:44.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Photon WP Material Design Icons for Page Builders plugin <= 1.4.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:material_design_icons_for_page_builders_project:material_design_icons_for_page_builders:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "2F410A52-6A1B-4FD2-821F-CD106A652F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/material-design-icons-for-elementor/wordpress-material-design-icons-for-page-builders-plugin-1-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/material-design-icons-for-elementor/wordpress-material-design-icons-for-page-builders-plugin-1-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24378",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T14:15:08.107",
      "lastModified" : "2024-11-21T07:47:44.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Codeat Glossary plugin <= 2.1.27 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeat:glossary:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.28",
            "matchCriteriaId" : "6743507F-E3A5-48F8-8E6F-B97FBAD9D1E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/glossary-by-codeat/wordpress-glossary-plugin-2-1-27-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/glossary-by-codeat/wordpress-glossary-plugin-2-1-27-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24396",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T14:15:08.167",
      "lastModified" : "2024-11-21T07:47:46.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.11 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vikwp:vikbooking_hotel_booking_engine_\\&_pms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.12",
            "matchCriteriaId" : "6CCACC17-5DD2-4233-9E86-D2E18B998FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/vikbooking/wordpress-vikbooking-plugin-1-5-11-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/vikbooking/wordpress-vikbooking-plugin-1-5-11-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25062",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-06T14:15:08.237",
      "lastModified" : "2024-11-21T07:49:01.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.2.8 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pinpoint:pinpoint_booking_system:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.9.9.2.9",
            "matchCriteriaId" : "CC4096F6-FA1C-4A17-B0FB-44A0BA9F15F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/booking-system/wordpress-pinpoint-booking-system-plugin-2-9-9-2-8-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/booking-system/wordpress-pinpoint-booking-system-plugin-2-9-9-2-8-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1912",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T15:15:08.837",
      "lastModified" : "2026-04-08T19:18:08.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Limit Login Attempts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its lock logging feature in versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever an administrator accesses the plugin's settings page. This only works when the plugin prioritizes use of the X-FORWARDED-FOR header, which can be configured in its settings."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:limit_login_attempts_project:limit_login_attempts:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.7.1",
            "matchCriteriaId" : "BE282D7B-D155-4E0B-BBF5-27879D0F1BBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=551920%40limit-login-attempts%2Ftags%2F1.7.1&new=2893850%40limit-login-attempts%2Ftags%2F1.7.2",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.pluginvulnerabilities.com/2018/03/09/one-of-the-ten-most-popular-wordpress-plugins-isnt-needed-and-introduces-a-vulnerability-on-some-websites-using-it/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/blog/2023/04/update-now-severe-vulnerability-impacting-600000-sites-patched-in-limit-login-attempts/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cb8c80fc-3b51-4003-b221-6f02e74bead0?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171824/WordPress-Limit-Login-Attempts-1.7.1-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=551920%40limit-login-attempts%2Ftags%2F1.7.1&new=2893850%40limit-login-attempts%2Ftags%2F1.7.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.pluginvulnerabilities.com/2018/03/09/one-of-the-ten-most-popular-wordpress-plugins-isnt-needed-and-introduces-a-vulnerability-on-some-websites-using-it/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/cb8c80fc-3b51-4003-b221-6f02e74bead0?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1913",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T15:15:08.903",
      "lastModified" : "2026-04-08T19:18:09.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Maps Widget for Google Maps for WordPress is vulnerable to Stored Cross-Site Scripting via widget settings in versions up to, and including, 4.24 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webfactoryltd:maps_widget_for_google_maps:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.24",
            "matchCriteriaId" : "EDD8F294-0B1E-44FC-B905-9199CD7A849D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2893821%40google-maps-widget%2Ftrunk&old=2876127%40google-maps-widget%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/de871598-e4e7-49f6-8530-68243544c06c?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2893821%40google-maps-widget%2Ftrunk&old=2876127%40google-maps-widget%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/de871598-e4e7-49f6-8530-68243544c06c?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22985",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-06T15:15:08.960",
      "lastModified" : "2025-02-13T21:15:12.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcecodester Simple Guestbook Management System version 1 is vulnerable to Cross Site Scripting (XSS) via Name, Referrer, Location, and Comments."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_guestbook_management_system_project:simple_guestbook_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74D5405E-4BBD-44BF-887D-5C219D95194E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourcecodester.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://medium.com/%40ivirajjadhav/cve-2023-22985-8869852685b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://sourcecodester.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://medium.com/%40ivirajjadhav/cve-2023-22985-8869852685b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24534",
      "sourceIdentifier" : "security@golang.org",
      "published" : "2023-04-06T16:15:07.657",
      "lastModified" : "2025-02-12T18:15:19.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate substantially more memory than required to hold the parsed headers. An attacker can exploit this behavior to cause an HTTP server to allocate large amounts of memory from a small request, potentially leading to memory exhaustion and a denial of service. With fix, header parsing now correctly allocates only the memory required to hold parsed headers."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.8",
            "matchCriteriaId" : "5932E25E-7F00-4D6E-AFF8-4C5797AE628B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.20.0",
            "versionEndExcluding" : "1.20.3",
            "matchCriteriaId" : "66CADC8B-8F8A-493C-8819-852F0AE224AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://go.dev/cl/481994",
        "source" : "security@golang.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://go.dev/issue/58975",
        "source" : "security@golang.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8",
        "source" : "security@golang.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2023-1704",
        "source" : "security@golang.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-09",
        "source" : "security@golang.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0007/",
        "source" : "security@golang.org"
      }, {
        "url" : "https://go.dev/cl/481994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://go.dev/issue/58975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2023-1704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24536",
      "sourceIdentifier" : "security@golang.org",
      "published" : "2023-04-06T16:15:07.710",
      "lastModified" : "2025-02-12T18:15:20.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multipart.Reader.ReadForm limits the total memory a parsed multipart form can consume. ReadForm can undercount the amount of memory consumed, leading it to accept larger inputs than intended. 2. Limiting total memory does not account for increased pressure on the garbage collector from large numbers of small allocations in forms with many parts. 3. ReadForm can allocate a large number of short-lived buffers, further increasing pressure on the garbage collector. The combination of these factors can permit an attacker to cause an program that parses multipart forms to consume large amounts of CPU and memory, potentially resulting in a denial of service. This affects programs that use mime/multipart.Reader.ReadForm, as well as form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. With fix, ReadForm now does a better job of estimating the memory consumption of parsed forms, and performs many fewer short-lived allocations. In addition, the fixed mime/multipart.Reader imposes the following limits on the size of parsed forms: 1. Forms parsed with ReadForm may contain no more than 1000 parts. This limit may be adjusted with the environment variable GODEBUG=multipartmaxparts=. 2. Form parts parsed with NextPart and NextRawPart may contain no more than 10,000 header fields. In addition, forms parsed with ReadForm may contain no more than 10,000 header fields across all parts. This limit may be adjusted with the environment variable GODEBUG=multipartmaxheaders=."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.8",
            "matchCriteriaId" : "5932E25E-7F00-4D6E-AFF8-4C5797AE628B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.20.0",
            "versionEndExcluding" : "1.20.3",
            "matchCriteriaId" : "66CADC8B-8F8A-493C-8819-852F0AE224AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://go.dev/cl/482075",
        "source" : "security@golang.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://go.dev/cl/482076",
        "source" : "security@golang.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://go.dev/cl/482077",
        "source" : "security@golang.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://go.dev/issue/59153",
        "source" : "security@golang.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8",
        "source" : "security@golang.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2023-1705",
        "source" : "security@golang.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-09",
        "source" : "security@golang.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0007/",
        "source" : "security@golang.org"
      }, {
        "url" : "https://go.dev/cl/482075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://go.dev/cl/482076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://go.dev/cl/482077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://go.dev/issue/59153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2023-1705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24537",
      "sourceIdentifier" : "security@golang.org",
      "published" : "2023-04-06T16:15:07.753",
      "lastModified" : "2025-02-12T17:15:13.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.8",
            "matchCriteriaId" : "5932E25E-7F00-4D6E-AFF8-4C5797AE628B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.20.0",
            "versionEndExcluding" : "1.20.3",
            "matchCriteriaId" : "66CADC8B-8F8A-493C-8819-852F0AE224AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://go.dev/cl/482078",
        "source" : "security@golang.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://go.dev/issue/59180",
        "source" : "security@golang.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8",
        "source" : "security@golang.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2023-1702",
        "source" : "security@golang.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-09",
        "source" : "security@golang.org"
      }, {
        "url" : "https://go.dev/cl/482078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://go.dev/issue/59180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2023-1702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20241129-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24538",
      "sourceIdentifier" : "security@golang.org",
      "published" : "2023-04-06T16:15:07.800",
      "lastModified" : "2025-02-12T17:15:14.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to terminate the literal, injecting arbitrary Javascript code into the Go template. As ES6 template literals are rather complex, and themselves can do string interpolation, the decision was made to simply disallow Go template actions from being used inside of them (e.g. \"var a = {{.}}\"), since there is no obviously safe way to allow this behavior. This takes the same approach as github.com/google/safehtml. With fix, Template.Parse returns an Error when it encounters templates like this, with an ErrorCode of value 12. This ErrorCode is currently unexported, but will be exported in the release of Go 1.21. Users who rely on the previous behavior can re-enable it using the GODEBUG flag jstmpllitinterp=1, with the caveat that backticks will now be escaped. This should be used with caution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.8",
            "matchCriteriaId" : "5932E25E-7F00-4D6E-AFF8-4C5797AE628B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.20.0",
            "versionEndExcluding" : "1.20.3",
            "matchCriteriaId" : "66CADC8B-8F8A-493C-8819-852F0AE224AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://go.dev/cl/482079",
        "source" : "security@golang.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://go.dev/issue/59234",
        "source" : "security@golang.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8",
        "source" : "security@golang.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2023-1703",
        "source" : "security@golang.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-09",
        "source" : "security@golang.org"
      }, {
        "url" : "https://go.dev/cl/482079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://go.dev/issue/59234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://pkg.go.dev/vuln/GO-2023-1703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20241115-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-06T16:15:07.843",
      "lastModified" : "2025-11-03T18:14:16.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de pérdida de memoria en el controlador del kernel de GPU de Mali en el controlador del kernel de GPU de Midgard todas las versiones de r6p0 a r32p0, el controlador del kernel de GPU de Bifrost todas las versiones de r0p0 a r42p0, el controlador del kernel de GPU de Valhall todas las versiones de r19p0 a r42p0 y el controlador del kernel de GPU de Avalon todas las versiones de r41p0 a r42p0 permite que un usuario sin privilegios realice operaciones de procesamiento de GPU válidas que exponen metadatos confidenciales del kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "cisaExploitAdd" : "2023-04-07",
      "cisaActionDue" : "2023-04-28",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Arm Mali GPU Kernel Driver Information Disclosure Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r41p0",
            "versionEndExcluding" : "r43p0",
            "matchCriteriaId" : "574A1E71-2B1E-48D4-AA93-974B4E34C64F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r0p0",
            "versionEndExcluding" : "r43p0",
            "matchCriteriaId" : "C7205027-9AE7-4095-B0A7-B1ECA71ACCAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:midgard_gpu_kernel_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r6p0",
            "versionEndIncluding" : "r32p0",
            "matchCriteriaId" : "ABA04388-28FC-4F87-85F4-B7FD0B553611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r19p0",
            "versionEndExcluding" : "r43p0",
            "matchCriteriaId" : "38BF4620-6A5C-4034-8D17-BC1AC5F8C711"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cybersecurity-help.cz/vdb/SB2023033049",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cybersecurity-help.cz/vulnerabilities/74210/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cybersecurity-help.cz/vdb/SB2023033049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cybersecurity-help.cz/vulnerabilities/74210/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-26083",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0580",
      "sourceIdentifier" : "cybersecurity@ch.abb.com",
      "published" : "2023-04-06T17:15:10.050",
      "lastModified" : "2024-11-21T07:37:26.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application.\nOf the services that make up the My Control System (on-premise) application, the following ones are affected by this vulnerability:\nUser Interface\nSystem Monitoring1\nAsset Inventory\n\n\n\n\nThis issue affects My Control System (on-premise): from 5.0;0 through 5.13.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@ch.abb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@ch.abb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:abb:my_control_system:*:*:*:*:on-premise:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.13",
            "matchCriteriaId" : "AD49BB9B-889A-4DB5-82F8-9B886E912338"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://search.abb.com/library/Download.aspx?DocumentID=7PAA007893&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "cybersecurity@ch.abb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://search.abb.com/library/Download.aspx?DocumentID=7PAA007893&LanguageCode=en&DocumentPartId=&Action=Launch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29008",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-06T17:15:10.547",
      "lastModified" : "2024-11-21T07:56:23.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a `+server.js` file, containing endpoint handlers for different HTTP methods.\n\nSvelteKit provides out-of-the-box cross-site request forgery (CSRF) protection to its users. The protection is implemented at `kit/src/runtime/server/respond.js`. While the implementation does a sufficient job of mitigating common CSRF attacks, the protection can be bypassed in versions prior to 1.15.2 by simply specifying an upper-cased `Content-Type` header value. The browser will not send uppercase characters, but this check does not block all expected CORS requests.\n\nIf abused, this issue will allow malicious requests to be submitted from third-party domains, which can allow execution of operations within the context of the victim's session, and in extreme scenarios can lead to unauthorized access to users’ accounts. This may lead to all POST operations requiring authentication being allowed in the following cases: If the target site sets `SameSite=None` on its auth cookie and the user visits a malicious site in a Chromium-based browser; if the target site doesn't set the `SameSite` attribute explicitly and the user visits a malicious site with Firefox/Safari with tracking protections turned off; and/or if the user is visiting a malicious site with a very outdated browser.\n\nSvelteKit 1.15.2 contains a patch for this issue. It is also recommended to explicitly set `SameSite` to a value other than `None` on authentication cookies especially if the upgrade cannot be done in a timely manner."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svelte:sveltekit:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.15.2",
            "matchCriteriaId" : "744553CC-471B-437B-B811-E5512A7E5C60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sveltejs/kit/commit/ba436c6685e751d968a960fbda65f24cf7a82e9f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sveltejs/kit/security/advisories/GHSA-gv7g-x59x-wf8f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/sveltejs/kit/commit/ba436c6685e751d968a960fbda65f24cf7a82e9f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sveltejs/kit/security/advisories/GHSA-gv7g-x59x-wf8f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29010",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-06T17:15:10.620",
      "lastModified" : "2024-11-21T07:56:23.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Budibase is a low code platform for creating internal tools, workflows, and admin panels. Versions prior to 2.4.3 (07 March 2023) are vulnerable to Server-Side Request Forgery. This can lead to an attacker gaining access to a Budibase AWS secret key. Users of Budibase cloud need to take no action. Self-host users who run Budibase on the public internet and are using a cloud provider that allows HTTP access to metadata information should ensure that when they deploy Budibase live, their internal metadata endpoint is not exposed."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:budibase:budibase:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "7DA598A0-C33D-4253-B2B6-195E95BB5F4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Budibase/budibase/commits/develop?after=93d6939466aec192043d8ac842e754f65fdf2e8a+594&branch=develop&qualified_name=refs%2Fheads%2Fdevelop",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Budibase/budibase/releases/tag/v2.4.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Budibase/budibase/security/advisories/GHSA-9xg2-9mcv-985p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Budibase/budibase/commits/develop?after=93d6939466aec192043d8ac842e754f65fdf2e8a+594&branch=develop&qualified_name=refs%2Fheads%2Fdevelop",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Budibase/budibase/releases/tag/v2.4.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/Budibase/budibase/security/advisories/GHSA-9xg2-9mcv-985p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20652",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:08.353",
      "lastModified" : "2025-02-13T16:15:37.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628168; Issue ID: ALPS07589135."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6731:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF784DB-3560-4045-BB32-F12DCF4C43B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C27948-65A7-4B1E-9F10-6744D176A5C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D808EF4D-0A54-4324-8341-240F7AFABC40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757cd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EDB89E-8140-4202-97B3-9D7337E90FDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757ch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C5CC4F-DA66-4980-A4BB-693987431A38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8192:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422634C7-D280-4664-AEE2-AA5B6723B836"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8871:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F80793-01B7-403A-A5F4-031F82FAC77A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C450B83A-913C-4E5B-B025-11071B6824D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20653",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:08.407",
      "lastModified" : "2025-02-13T16:15:37.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628168; Issue ID: ALPS07589144."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6731:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF784DB-3560-4045-BB32-F12DCF4C43B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C27948-65A7-4B1E-9F10-6744D176A5C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D808EF4D-0A54-4324-8341-240F7AFABC40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757cd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EDB89E-8140-4202-97B3-9D7337E90FDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757ch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C5CC4F-DA66-4980-A4BB-693987431A38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8192:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422634C7-D280-4664-AEE2-AA5B6723B836"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8871:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F80793-01B7-403A-A5F4-031F82FAC77A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C450B83A-913C-4E5B-B025-11071B6824D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20654",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:08.453",
      "lastModified" : "2025-03-17T19:15:15.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628168; Issue ID: ALPS07589148."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6731:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF784DB-3560-4045-BB32-F12DCF4C43B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C27948-65A7-4B1E-9F10-6744D176A5C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D808EF4D-0A54-4324-8341-240F7AFABC40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757cd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EDB89E-8140-4202-97B3-9D7337E90FDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757ch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C5CC4F-DA66-4980-A4BB-693987431A38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8192:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422634C7-D280-4664-AEE2-AA5B6723B836"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8871:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F80793-01B7-403A-A5F4-031F82FAC77A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C450B83A-913C-4E5B-B025-11071B6824D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20655",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:08.503",
      "lastModified" : "2025-03-17T19:15:15.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203022; Issue ID: ALPS07203022."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2715:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA252F20-1BB7-4654-972C-F257F37396A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5FE245-6346-4078-A3D0-E5F79BB636B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639C5BDE-2E83-427A-BAB7-85EA9348AC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4452EFCF-5733-40A0-8726-F8E33E569411"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582F1041-CD84-4763-AD6F-E08DD11F689F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8192:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422634C7-D280-4664-AEE2-AA5B6723B836"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED210E64-6CE7-42B1-849E-68C0E22521F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D98FBE1C-D57B-49D9-9C4E-8A133A0C1C89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE14B46-C1CA-465F-8578-059FA2ED30EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8871:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F80793-01B7-403A-A5F4-031F82FAC77A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C450B83A-913C-4E5B-B025-11071B6824D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20656",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:08.557",
      "lastModified" : "2025-03-17T19:15:15.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In geniezone, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07571494; Issue ID: ALPS07571494."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20657",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:08.620",
      "lastModified" : "2025-03-17T19:15:16.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In mtee, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07571485; Issue ID: ALPS07571485."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20658",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:08.693",
      "lastModified" : "2025-03-17T19:15:16.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07537393; Issue ID: ALPS07180396."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED210E64-6CE7-42B1-849E-68C0E22521F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20659",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:08.763",
      "lastModified" : "2025-03-17T19:15:16.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588413; Issue ID: ALPS07588413."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987749DE-6EE9-401A-B2D4-B1680CAD0376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC506285-78EF-47B7-A990-FB7D2ED20885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D1586A-C49F-4655-8AC4-F4096B679869"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C79211-F064-499D-914E-0BACD038FBF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E400AB9-B82A-4449-8789-35112940270F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639C5BDE-2E83-427A-BAB7-85EA9348AC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8169:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5375050-4568-4919-BFE3-A72E1C7E65A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582F1041-CD84-4763-AD6F-E08DD11F689F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5E73E0-EF8D-4659-B447-66474BC05708"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE18D5C2-0423-4CE5-86E7-69E7BB131BBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513F8951-3099-444A-9755-C3A75720EFD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C79211-F064-499D-914E-0BACD038FBF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E400AB9-B82A-4449-8789-35112940270F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20660",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:08.817",
      "lastModified" : "2025-03-17T19:15:16.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588383; Issue ID: ALPS07588383."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987749DE-6EE9-401A-B2D4-B1680CAD0376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC506285-78EF-47B7-A990-FB7D2ED20885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D1586A-C49F-4655-8AC4-F4096B679869"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639C5BDE-2E83-427A-BAB7-85EA9348AC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582F1041-CD84-4763-AD6F-E08DD11F689F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5E73E0-EF8D-4659-B447-66474BC05708"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE18D5C2-0423-4CE5-86E7-69E7BB131BBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26573298-76BC-49FE-8D99-CF03ED01B185"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513F8951-3099-444A-9755-C3A75720EFD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20661",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:08.870",
      "lastModified" : "2025-03-17T19:15:17.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560782; Issue ID: ALPS07560782."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987749DE-6EE9-401A-B2D4-B1680CAD0376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC506285-78EF-47B7-A990-FB7D2ED20885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D1586A-C49F-4655-8AC4-F4096B679869"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639C5BDE-2E83-427A-BAB7-85EA9348AC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582F1041-CD84-4763-AD6F-E08DD11F689F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5E73E0-EF8D-4659-B447-66474BC05708"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE18D5C2-0423-4CE5-86E7-69E7BB131BBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26573298-76BC-49FE-8D99-CF03ED01B185"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513F8951-3099-444A-9755-C3A75720EFD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20662",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:08.923",
      "lastModified" : "2025-03-17T19:15:17.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560765; Issue ID: ALPS07560765."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987749DE-6EE9-401A-B2D4-B1680CAD0376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC506285-78EF-47B7-A990-FB7D2ED20885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D1586A-C49F-4655-8AC4-F4096B679869"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639C5BDE-2E83-427A-BAB7-85EA9348AC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582F1041-CD84-4763-AD6F-E08DD11F689F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5E73E0-EF8D-4659-B447-66474BC05708"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE18D5C2-0423-4CE5-86E7-69E7BB131BBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26573298-76BC-49FE-8D99-CF03ED01B185"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513F8951-3099-444A-9755-C3A75720EFD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20663",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:08.973",
      "lastModified" : "2025-02-13T16:15:37.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560741; Issue ID: ALPS07560741."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987749DE-6EE9-401A-B2D4-B1680CAD0376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC506285-78EF-47B7-A990-FB7D2ED20885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D1586A-C49F-4655-8AC4-F4096B679869"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639C5BDE-2E83-427A-BAB7-85EA9348AC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582F1041-CD84-4763-AD6F-E08DD11F689F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5E73E0-EF8D-4659-B447-66474BC05708"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE18D5C2-0423-4CE5-86E7-69E7BB131BBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26573298-76BC-49FE-8D99-CF03ED01B185"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513F8951-3099-444A-9755-C3A75720EFD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20664",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.023",
      "lastModified" : "2025-02-13T15:15:13.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In gz, there is a possible double free due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07505952; Issue ID: ALPS07505952."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26573298-76BC-49FE-8D99-CF03ED01B185"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8871:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F80793-01B7-403A-A5F4-031F82FAC77A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C450B83A-913C-4E5B-B025-11071B6824D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20665",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.077",
      "lastModified" : "2025-02-13T15:15:13.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628604; Issue ID: ALPS07628604."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20666",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.130",
      "lastModified" : "2025-02-13T15:15:14.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310651; Issue ID: ALPS07292173."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED210E64-6CE7-42B1-849E-68C0E22521F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20670",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.183",
      "lastModified" : "2025-02-13T15:15:14.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648710; Issue ID: ALPS07648710."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2715:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA252F20-1BB7-4654-972C-F257F37396A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5FE245-6346-4078-A3D0-E5F79BB636B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED210E64-6CE7-42B1-849E-68C0E22521F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26573298-76BC-49FE-8D99-CF03ED01B185"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8871:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F80793-01B7-403A-A5F4-031F82FAC77A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C450B83A-913C-4E5B-B025-11071B6824D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20674",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.227",
      "lastModified" : "2025-03-05T20:15:43.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588569; Issue ID: ALPS07588552."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987749DE-6EE9-401A-B2D4-B1680CAD0376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC506285-78EF-47B7-A990-FB7D2ED20885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D1586A-C49F-4655-8AC4-F4096B679869"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639C5BDE-2E83-427A-BAB7-85EA9348AC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8169:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5375050-4568-4919-BFE3-A72E1C7E65A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582F1041-CD84-4763-AD6F-E08DD11F689F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5E73E0-EF8D-4659-B447-66474BC05708"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE18D5C2-0423-4CE5-86E7-69E7BB131BBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5126E05-25DC-4EF7-8DDE-BBA38A7547FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513F8951-3099-444A-9755-C3A75720EFD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C79211-F064-499D-914E-0BACD038FBF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E400AB9-B82A-4449-8789-35112940270F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20675",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.267",
      "lastModified" : "2025-02-13T21:15:12.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588569; Issue ID: ALPS07588569."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987749DE-6EE9-401A-B2D4-B1680CAD0376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC506285-78EF-47B7-A990-FB7D2ED20885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D1586A-C49F-4655-8AC4-F4096B679869"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639C5BDE-2E83-427A-BAB7-85EA9348AC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8169:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5375050-4568-4919-BFE3-A72E1C7E65A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582F1041-CD84-4763-AD6F-E08DD11F689F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5E73E0-EF8D-4659-B447-66474BC05708"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE18D5C2-0423-4CE5-86E7-69E7BB131BBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5126E05-25DC-4EF7-8DDE-BBA38A7547FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513F8951-3099-444A-9755-C3A75720EFD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C79211-F064-499D-914E-0BACD038FBF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E400AB9-B82A-4449-8789-35112940270F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20676",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.313",
      "lastModified" : "2025-02-12T16:15:35.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588569; Issue ID: ALPS07628518."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987749DE-6EE9-401A-B2D4-B1680CAD0376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC506285-78EF-47B7-A990-FB7D2ED20885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D1586A-C49F-4655-8AC4-F4096B679869"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639C5BDE-2E83-427A-BAB7-85EA9348AC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8169:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5375050-4568-4919-BFE3-A72E1C7E65A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582F1041-CD84-4763-AD6F-E08DD11F689F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5E73E0-EF8D-4659-B447-66474BC05708"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE18D5C2-0423-4CE5-86E7-69E7BB131BBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5126E05-25DC-4EF7-8DDE-BBA38A7547FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513F8951-3099-444A-9755-C3A75720EFD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C79211-F064-499D-914E-0BACD038FBF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E400AB9-B82A-4449-8789-35112940270F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20677",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.357",
      "lastModified" : "2024-11-21T07:41:20.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588413; Issue ID: ALPS07588436."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987749DE-6EE9-401A-B2D4-B1680CAD0376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC506285-78EF-47B7-A990-FB7D2ED20885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D1586A-C49F-4655-8AC4-F4096B679869"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639C5BDE-2E83-427A-BAB7-85EA9348AC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8169:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5375050-4568-4919-BFE3-A72E1C7E65A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582F1041-CD84-4763-AD6F-E08DD11F689F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5E73E0-EF8D-4659-B447-66474BC05708"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE18D5C2-0423-4CE5-86E7-69E7BB131BBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5126E05-25DC-4EF7-8DDE-BBA38A7547FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513F8951-3099-444A-9755-C3A75720EFD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C79211-F064-499D-914E-0BACD038FBF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E400AB9-B82A-4449-8789-35112940270F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20679",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.400",
      "lastModified" : "2025-02-12T16:15:35.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588413; Issue ID: ALPS07588453."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987749DE-6EE9-401A-B2D4-B1680CAD0376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC506285-78EF-47B7-A990-FB7D2ED20885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D1586A-C49F-4655-8AC4-F4096B679869"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639C5BDE-2E83-427A-BAB7-85EA9348AC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8169:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5375050-4568-4919-BFE3-A72E1C7E65A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582F1041-CD84-4763-AD6F-E08DD11F689F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5E73E0-EF8D-4659-B447-66474BC05708"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE18D5C2-0423-4CE5-86E7-69E7BB131BBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5126E05-25DC-4EF7-8DDE-BBA38A7547FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513F8951-3099-444A-9755-C3A75720EFD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C79211-F064-499D-914E-0BACD038FBF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E400AB9-B82A-4449-8789-35112940270F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20680",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.443",
      "lastModified" : "2025-02-12T16:15:35.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In adsp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664785; Issue ID: ALPS07664785."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5126E05-25DC-4EF7-8DDE-BBA38A7547FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20681",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.497",
      "lastModified" : "2025-02-12T16:15:35.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In adsp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07696134; Issue ID: ALPS07696134."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3E2B84-DAFE-4E11-B23B-026F719475F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781wifi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1B2D4B-C7C3-420C-9361-6C056B4BCA9E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791wifi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "720F4AA0-6AAE-465F-8F50-F11DD11B5FA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797wifi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD3FB61-EA42-4D3D-9867-7EBCD0B8F647"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20682",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.560",
      "lastModified" : "2025-02-12T16:15:35.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441605; Issue ID: ALPS07441605."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987749DE-6EE9-401A-B2D4-B1680CAD0376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC506285-78EF-47B7-A990-FB7D2ED20885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yoctoproject:yocto:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00D1586A-C49F-4655-8AC4-F4096B679869"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7933:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727F29FD-E8DA-46F1-9C98-9D194E981E38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639C5BDE-2E83-427A-BAB7-85EA9348AC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8169:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5375050-4568-4919-BFE3-A72E1C7E65A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582F1041-CD84-4763-AD6F-E08DD11F689F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE5E73E0-EF8D-4659-B447-66474BC05708"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8532:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE18D5C2-0423-4CE5-86E7-69E7BB131BBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8695:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5126E05-25DC-4EF7-8DDE-BBA38A7547FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513F8951-3099-444A-9755-C3A75720EFD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt5221:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "518D4593-D5E2-489C-92C3-343716A621E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C79211-F064-499D-914E-0BACD038FBF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E400AB9-B82A-4449-8789-35112940270F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DEA745-47A8-43F1-A1B2-F53F651A99EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32AFEA0A-FFE2-4EA9-8B51-7E3E75DE65CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20684",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.617",
      "lastModified" : "2025-02-12T16:15:35.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671069; Issue ID: ALPS07671069."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C450B83A-913C-4E5B-B025-11071B6824D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20685",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.663",
      "lastModified" : "2025-02-12T16:15:36.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608575; Issue ID: ALPS07608575."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C450B83A-913C-4E5B-B025-11071B6824D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20686",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.710",
      "lastModified" : "2025-02-12T16:15:36.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07570826; Issue ID: ALPS07570826."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20687",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.757",
      "lastModified" : "2025-02-12T16:15:36.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07570772; Issue ID: ALPS07570772."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20688",
      "sourceIdentifier" : "security@mediatek.com",
      "published" : "2023-04-06T18:15:09.810",
      "lastModified" : "2025-02-12T16:15:36.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441821; Issue ID: ALPS07441821."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt2715:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA252F20-1BB7-4654-972C-F257F37396A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6731:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BF784DB-3560-4045-BB32-F12DCF4C43B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C82E144B-0BAD-47E1-A657-3A5880988FE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E76B29F-007E-4445-B3F3-3FDC054FEB84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7362AED0-47F2-4D48-A292-89F717F0697E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C27948-65A7-4B1E-9F10-6744D176A5C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D808EF4D-0A54-4324-8341-240F7AFABC40"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757cd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64EDB89E-8140-4202-97B3-9D7337E90FDE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6757ch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C5CC4F-DA66-4980-A4BB-693987431A38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F726F486-A86F-4215-AD93-7A07A071844A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C445EB80-6021-4E26-B74E-1B4B6910CE48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F19C76A-50DF-4ACA-BACA-07157B4D838B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06CD97E1-8A76-48B4-9780-9698EF5A960F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4D2AED-C713-407F-A34A-52C3D8F65835"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBA369B8-8E23-492B-82CC-23114E6A5D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EEE021-6B2A-47A0-AC6B-55525A40D718"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E0A4F-072F-474C-B94C-8114ABE05639"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9B0D82-82C1-4A77-A016-329B99C45F49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366F1912-756B-443E-9962-224937DD7DFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328DA6BE-1303-4646-89B7-2EC8DC444532"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704BE5CE-AE08-4432-A8B0-4C8BD62148AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15E2EC3F-9FB3-488B-B1C1-2793A416C755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD64413C-C774-4C4F-9551-89E1AA9469EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B787DC3-8E5A-4968-B20B-37B6257FAAE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "213B5C7F-D965-4312-9CDF-4F06FA77D401"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B5FE245-6346-4078-A3D0-E5F79BB636B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE2FC35-716A-4706-97BA-5DB165041580"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8169:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5375050-4568-4919-BFE3-A72E1C7E65A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4452EFCF-5733-40A0-8726-F8E33E569411"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "582F1041-CD84-4763-AD6F-E08DD11F689F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8183:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23F65D7B-31A1-4D94-82E9-254A7A6D7BE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8192:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422634C7-D280-4664-AEE2-AA5B6723B836"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED210E64-6CE7-42B1-849E-68C0E22521F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793B7F88-79E7-4031-8AD0-35C9BFD073C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299378ED-41CE-4966-99B1-65D2BA1215EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B774B7D7-B7DD-43A0-833F-7E39DF82CA60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D98FBE1C-D57B-49D9-9C4E-8A133A0C1C89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6606-FA23-4530-AA07-419866B74CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E6123A-7603-4EAB-AFFB-229E8A040709"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26573298-76BC-49FE-8D99-CF03ED01B185"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AACF35D-27E0-49AF-A667-13585C8B8071"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE45F606-2E75-48BC-9D1B-99D504974CBF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D09F23D-D023-4A60-B426-61251FDD8A5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "533284E5-C3AF-48D3-A287-993099DB2E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE10C121-F2AD-43D2-8FF9-A6C197858220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1505AD53-987E-4328-8E1D-F5F1EC12B677"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CD2C3EC-B62D-4616-964F-FDBE5B14A449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB05B1D-77C9-4E42-91AD-9F087413DC20"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B469BF4-5961-42E9-814B-1BE06D182E45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "637CAAD2-DCC0-4F81-B781-5D0536844CA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mediatek:mt8891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C450B83A-913C-4E5B-B025-11071B6824D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "security@mediatek.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-bulletin/April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1918",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T20:15:08.033",
      "lastModified" : "2026-04-08T17:16:53.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_preload_single_callback function. This makes it possible for unauthenticated attackers to invoke a cache building action via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "294B0615-382D-4CE9-9A59-6E33CA162783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c8034ff-cf36-498f-9efc-a4e6bbb92b2c?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c8034ff-cf36-498f-9efc-a4e6bbb92b2c?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1919",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T20:15:08.093",
      "lastModified" : "2026-04-08T17:16:54.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_preload_single_save_settings_callback function. This makes it possible for unauthenticated attackers to change cache-related settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "294B0615-382D-4CE9-9A59-6E33CA162783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/024f4058-065b-48b4-a08a-d9732d4375cd?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/024f4058-065b-48b4-a08a-d9732d4375cd?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1920",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T20:15:08.150",
      "lastModified" : "2026-04-08T19:18:09.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_purgecache_varnish_callback function. This makes it possible for unauthenticated attackers to purge the varnish cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "294B0615-382D-4CE9-9A59-6E33CA162783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c8e90994-3b5c-4ae6-a27f-890a9101b440?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/c8e90994-3b5c-4ae6-a27f-890a9101b440?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1921",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T20:15:08.203",
      "lastModified" : "2026-04-08T17:16:54.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_start_cdn_integration_ajax_request_callback function. This makes it possible for unauthenticated attackers to change cdn settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "294B0615-382D-4CE9-9A59-6E33CA162783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/17c7c61d-c110-448e-ad8a-bc1c00393524?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/17c7c61d-c110-448e-ad8a-bc1c00393524?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1922",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T20:15:08.257",
      "lastModified" : "2026-04-08T18:17:56.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_pause_cdn_integration_ajax_request_callback function. This makes it possible for unauthenticated attackers to change cdn settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "294B0615-382D-4CE9-9A59-6E33CA162783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a1743b26-861e-4a61-80de-b8cc82308228?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a1743b26-861e-4a61-80de-b8cc82308228?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1923",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T20:15:08.313",
      "lastModified" : "2026-04-08T18:17:56.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_remove_cdn_integration_ajax_request_callback function. This makes it possible for unauthenticated attackers to change cdn settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "294B0615-382D-4CE9-9A59-6E33CA162783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/49ba5cfa-c2cc-49ac-b22d-7e36ccca6ac5?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/49ba5cfa-c2cc-49ac-b22d-7e36ccca6ac5?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1924",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T20:15:08.373",
      "lastModified" : "2026-04-08T19:18:09.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_toolbar_save_settings_callback function. This makes it possible for unauthenticated attackers to change cache settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "294B0615-382D-4CE9-9A59-6E33CA162783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a87f610a-c1ef-4365-bd74-569989587d41?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/a87f610a-c1ef-4365-bd74-569989587d41?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1925",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T20:15:08.440",
      "lastModified" : "2026-04-08T17:16:54.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_clear_cache_of_allsites_callback function. This makes it possible for unauthenticated attackers to clear caches via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "294B0615-382D-4CE9-9A59-6E33CA162783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/096257a4-6ee9-41e1-8a59-4ffcd309f83c?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/096257a4-6ee9-41e1-8a59-4ffcd309f83c?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1926",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T20:15:08.497",
      "lastModified" : "2026-04-08T19:18:09.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the deleteCacheToolbar function. This makes it possible for unauthenticated attackers to perform cache deletion via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "294B0615-382D-4CE9-9A59-6E33CA162783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b793a4cb-3130-428e-9b61-8ce29fcdaf70?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b793a4cb-3130-428e-9b61-8ce29fcdaf70?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29014",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-06T20:15:08.557",
      "lastModified" : "2024-11-21T07:56:23.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A reflected cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when evaluating the LOGID parameter. An attacker could trick a user into following a specially crafted link to a Goobi viewer installation, resulting in the execution of malicious script code in the user's browser. The vulnerability has been fixed in version 23.03."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intranda:goobi_viewer_core:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.03",
            "matchCriteriaId" : "F8174D86-7F9F-4ADD-85CA-16EB572F1F26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/intranda/goobi-viewer-core/commit/c29efe60e745a94d03debc17681c4950f3917455",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-7v7g-9vx6-vcg2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/intranda/goobi-viewer-core/commit/c29efe60e745a94d03debc17681c4950f3917455",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-7v7g-9vx6-vcg2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29015",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-06T20:15:08.613",
      "lastModified" : "2024-11-21T07:56:23.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in the user comment feature of Goobi viewer core prior to version 23.03. An attacker could create a specially crafted comment, resulting in the execution of malicious script code in the user's browser when displaying the comment. The vulnerability has been fixed in version 23.03."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intranda:goobi_viewer_core:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.03",
            "matchCriteriaId" : "F8174D86-7F9F-4ADD-85CA-16EB572F1F26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/intranda/goobi-viewer-core/commit/f0ccde2d469efd9597c3062d00177a63341f2256",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-622w-995c-3c3h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/intranda/goobi-viewer-core/commit/f0ccde2d469efd9597c3062d00177a63341f2256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-622w-995c-3c3h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29016",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-06T20:15:08.667",
      "lastModified" : "2024-11-21T07:56:24.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when using nicknames. An attacker could create a user account and enter malicious scripts into their profile's nickname, resulting in the execution in the user's browser when displaying the nickname on certain pages. The vulnerability has been fixed in version 23.03."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intranda:goobi_viewer_core:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.03",
            "matchCriteriaId" : "F8174D86-7F9F-4ADD-85CA-16EB572F1F26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/intranda/goobi-viewer-core/commit/8eadb32b3fdcb775678b74d95bc3df018a5d5238",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-2r9r-8fcg-m38g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/intranda/goobi-viewer-core/commit/8eadb32b3fdcb775678b74d95bc3df018a5d5238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-2r9r-8fcg-m38g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29017",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-06T20:15:08.723",
      "lastModified" : "2024-11-21T07:56:24.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Prior to version 3.9.15, vm2 was not properly handling host objects passed to `Error.prepareStackTrace` in case of unhandled async errors. A threat actor could bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version 3.9.15 of vm2. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-913"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vm2_project:vm2:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.9.15",
            "matchCriteriaId" : "ADA32E89-C69C-4459-9515-D3F7B53EFCAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/seongil-wi/2a44e082001b959bfe304b62121fb76d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/commit/d534e5785f38307b70d3aac1945260a261a94d50",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/issues/515",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/security/advisories/GHSA-7jxr-cg7f-gpgv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/seongil-wi/2a44e082001b959bfe304b62121fb76d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/commit/d534e5785f38307b70d3aac1945260a261a94d50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/issues/515",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/security/advisories/GHSA-7jxr-cg7f-gpgv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29465",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-06T20:15:08.830",
      "lastModified" : "2025-02-12T17:15:18.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SageMath FlintQS 1.0 relies on pathnames under TMPDIR (typically world-writable), which (for example) allows a local user to overwrite files with the privileges of a different user (who is running FlintQS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sagemath:flintqs:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "872B9139-8000-4C02-BF99-6977F73FBB20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sagemath/FlintQS/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/sagemath/sage/pull/35419",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/sagemath/FlintQS/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/sagemath/sage/pull/35419",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1927",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T21:15:07.513",
      "lastModified" : "2026-04-08T18:17:56.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the deleteCssAndJsCacheToolbar function. This makes it possible for unauthenticated attackers to perform cache deletion via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "294B0615-382D-4CE9-9A59-6E33CA162783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4d3858f5-3f13-400c-acf4-eb3dc3a43308?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/4d3858f5-3f13-400c-acf4-eb3dc3a43308?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1928",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T21:15:07.567",
      "lastModified" : "2026-04-08T18:17:56.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfc_preload_single_callback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to initiate cache creation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "294B0615-382D-4CE9-9A59-6E33CA162783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/56a90042-a6c0-4487-811b-ced23c97f9f4?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/56a90042-a6c0-4487-811b-ced23c97f9f4?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1929",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T21:15:07.623",
      "lastModified" : "2026-04-08T17:16:54.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfc_purgecache_varnish_callback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to purge the varnish cache."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "294B0615-382D-4CE9-9A59-6E33CA162783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1e567aec-07e5-494a-936d-93b40d3e3043?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1e567aec-07e5-494a-936d-93b40d3e3043?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1930",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T21:15:07.680",
      "lastModified" : "2026-04-08T19:18:09.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the wpfc_clear_cache_of_allsites_callback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to delete caches."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "294B0615-382D-4CE9-9A59-6E33CA162783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bae67a68-4bd1-4b52-b3dd-af0eef014028?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/bae67a68-4bd1-4b52-b3dd-af0eef014028?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1931",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-06T21:15:07.730",
      "lastModified" : "2026-04-08T19:18:09.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the deleteCssAndJsCacheToolbar function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to perform cache deletion."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "294B0615-382D-4CE9-9A59-6E33CA162783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b4bb2d72-ff31-4220-acb3-ed17bb9229b5?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b4bb2d72-ff31-4220-acb3-ed17bb9229b5?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28500",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-06T21:15:07.797",
      "lastModified" : "2025-05-05T16:15:34.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Java insecure deserialization vulnerability in Adobe LiveCycle ES4 version 11.0 and earlier allows unauthenticated remote attackers to gain operating system code execution by submitting specially crafted Java serialized objects to a specific URL. Adobe LiveCycle ES4 version 11.0.1 and later may be vulnerable if the application is installed with Java environment 7u21 and earlier. Exploitation of the vulnerability depends on two factors: insecure deserialization methods used in the Adobe LiveCycle application, and the use of Java environments 7u21 and earlier. The code execution is performed in the context of the account that is running the Adobe LiveCycle application. If the account is privileged, exploitation provides privileged access to the operating system. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:livecycle_es4:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "3E2DACAD-C909-4BC0-AE66-4BDE51BA006F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://coastalsecurity.gitbook.io/critical-vulnerability-adobe-livecycle-es4v11.0/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://coastalsecurity.gitbook.io/critical-vulnerability-adobe-livecycle-es4v11.0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-06T23:15:07.297",
      "lastModified" : "2025-02-12T17:15:18.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atos:unify_openscape_4000:10:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0717FEEB-03EC-4F21-B798-3016BFF0A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB266EB-67B7-4007-A942-D64DB746BB2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://networks.unify.com/security/advisories/OBSO-2303-01.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://networks.unify.com/security/advisories/OBSO-2303-01.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-06T23:15:07.357",
      "lastModified" : "2025-02-12T17:15:19.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23552."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atos:unify_openscape_4000:10:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0717FEEB-03EC-4F21-B798-3016BFF0A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB266EB-67B7-4007-A942-D64DB746BB2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://networks.unify.com/security/advisories/OBSO-2303-01.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://networks.unify.com/security/advisories/OBSO-2303-01.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-06T23:15:07.403",
      "lastModified" : "2025-02-12T17:15:19.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23543."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atos:unify_openscape_4000:10:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0717FEEB-03EC-4F21-B798-3016BFF0A096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB266EB-67B7-4007-A942-D64DB746BB2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://networks.unify.com/security/advisories/OBSO-2303-01.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://networks.unify.com/security/advisories/OBSO-2303-01.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:07.647",
      "lastModified" : "2025-02-13T15:15:14.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR882 DIR882A1_FW110B02 was discovered to contain a stack overflow in the sub_48AC20 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-882_a1_firmware:110b02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9973E15-61E3-4750-933E-D30125890239"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-882_a1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E59D92CE-AF09-4F6D-962A-DB2A353343D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/D-link/blob/main/Dir882/1/1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/D-link/blob/main/Dir882/1/1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:07.687",
      "lastModified" : "2025-02-13T15:15:14.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_475FB0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que D-Link DIR878 DIR_878_FW120B05 contiene un desbordamiento de pila en la función sub_475FB0. Esta vulnerabilidad permite a los atacantes ocasionar una denegación de servicio (DoS) o ejecutar código arbitrario mediante unos parámetros manipulados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-878_firmware:1.20b05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1CD2BE2-2157-4ADA-986F-2033EF15BC56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D288C73-F89A-47FF-AF11-143C3DFDF942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/D-link/blob/main/Dir878/2/2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/D-link/blob/main/Dir878/2/2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:07.720",
      "lastModified" : "2025-02-13T15:15:15.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_48AF78 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-878_firmware:1.20b05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1CD2BE2-2157-4ADA-986F-2033EF15BC56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D288C73-F89A-47FF-AF11-143C3DFDF942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/D-link/blob/main/Dir878/1/1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/D-link/blob/main/Dir878/1/1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:07.757",
      "lastModified" : "2025-02-13T15:15:15.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_495220 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-878_firmware:1.20b05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1CD2BE2-2157-4ADA-986F-2033EF15BC56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D288C73-F89A-47FF-AF11-143C3DFDF942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/D-link/blob/main/Dir878/3/3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/D-link/blob/main/Dir878/3/3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:07.793",
      "lastModified" : "2025-02-13T15:15:15.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac5_firmware:15.03.06.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F928648-C8B2-4D37-8343-C74AABEFAB07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac5:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D141716B-56F0-4061-9D87-943B7858F2F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/1/1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/1/1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:07.827",
      "lastModified" : "2025-02-13T15:15:15.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac5_firmware:15.03.06.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F928648-C8B2-4D37-8343-C74AABEFAB07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac5:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D141716B-56F0-4061-9D87-943B7858F2F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/2/2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/2/2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:07.867",
      "lastModified" : "2025-02-13T15:15:15.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetWirelessRepeat function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac5_firmware:15.03.06.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F928648-C8B2-4D37-8343-C74AABEFAB07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac5:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D141716B-56F0-4061-9D87-943B7858F2F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/6/6.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/6/6.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:07.907",
      "lastModified" : "2025-02-12T22:15:29.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the check_param_changed function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac5_firmware:15.03.06.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F928648-C8B2-4D37-8343-C74AABEFAB07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac5:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D141716B-56F0-4061-9D87-943B7858F2F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/5/5.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/5/5.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:07.940",
      "lastModified" : "2025-02-12T21:15:11.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac5_firmware:15.03.06.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F928648-C8B2-4D37-8343-C74AABEFAB07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac5:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D141716B-56F0-4061-9D87-943B7858F2F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/4/4.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/4/4.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:07.980",
      "lastModified" : "2025-02-12T21:15:11.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac5_firmware:15.03.06.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F928648-C8B2-4D37-8343-C74AABEFAB07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac5:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D141716B-56F0-4061-9D87-943B7858F2F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/3/3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/3/3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.017",
      "lastModified" : "2025-02-12T21:15:11.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formSetFirewallCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac5_firmware:15.03.06.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F928648-C8B2-4D37-8343-C74AABEFAB07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac5:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D141716B-56F0-4061-9D87-943B7858F2F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/9/9.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/9/9.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.053",
      "lastModified" : "2025-02-12T21:15:11.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formWifiBasicSet function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac5_firmware:15.03.06.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F928648-C8B2-4D37-8343-C74AABEFAB07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac5:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D141716B-56F0-4061-9D87-943B7858F2F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/10/10.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/10/10.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.100",
      "lastModified" : "2025-02-12T21:15:11.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac5_firmware:15.03.06.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F928648-C8B2-4D37-8343-C74AABEFAB07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac5:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D141716B-56F0-4061-9D87-943B7858F2F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/8/8.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/8/8.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.140",
      "lastModified" : "2025-02-12T21:15:11.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromDhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac5_firmware:15.03.06.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F928648-C8B2-4D37-8343-C74AABEFAB07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac5:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D141716B-56F0-4061-9D87-943B7858F2F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/11/11.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/11/11.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.177",
      "lastModified" : "2025-02-12T21:15:12.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the add_white_node function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac5_firmware:15.03.06.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F928648-C8B2-4D37-8343-C74AABEFAB07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac5:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D141716B-56F0-4061-9D87-943B7858F2F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/7/7.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC5/7/7.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.213",
      "lastModified" : "2025-02-12T20:15:32.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac10_firmware:16.03.10.13_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63300018-5FDC-415E-820E-22B07C581C33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac10:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970AEBF4-2B32-4633-A75B-2D2C598C048D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/5/5.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/5/5.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27013",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.250",
      "lastModified" : "2025-02-12T20:15:32.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac10_firmware:16.03.10.13_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63300018-5FDC-415E-820E-22B07C581C33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac10:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970AEBF4-2B32-4633-A75B-2D2C598C048D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/2/2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/2/2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.287",
      "lastModified" : "2025-02-12T20:15:32.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_46AC38 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac10_firmware:16.03.10.13_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63300018-5FDC-415E-820E-22B07C581C33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac10:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970AEBF4-2B32-4633-A75B-2D2C598C048D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/10/10.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/10/10.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.323",
      "lastModified" : "2025-02-12T20:15:32.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_4A75C0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac10_firmware:16.03.10.13_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63300018-5FDC-415E-820E-22B07C581C33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac10:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970AEBF4-2B32-4633-A75B-2D2C598C048D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/4/4.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/4/4.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27016",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.360",
      "lastModified" : "2025-02-12T20:15:32.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac10_firmware:16.03.10.13_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63300018-5FDC-415E-820E-22B07C581C33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac10:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970AEBF4-2B32-4633-A75B-2D2C598C048D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/3/3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/3/3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.397",
      "lastModified" : "2024-11-21T07:52:11.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45DC58 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac10_firmware:16.03.10.13_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63300018-5FDC-415E-820E-22B07C581C33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac10:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970AEBF4-2B32-4633-A75B-2D2C598C048D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/6/6.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/6/6.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.433",
      "lastModified" : "2025-02-12T17:15:14.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45EC1C function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac10_firmware:16.03.10.13_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63300018-5FDC-415E-820E-22B07C581C33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac10:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970AEBF4-2B32-4633-A75B-2D2C598C048D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/7/7.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/7/7.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.470",
      "lastModified" : "2025-02-12T18:15:20.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_458FBC function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac10_firmware:16.03.10.13_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63300018-5FDC-415E-820E-22B07C581C33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac10:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970AEBF4-2B32-4633-A75B-2D2C598C048D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/8/8.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/8/8.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.507",
      "lastModified" : "2025-02-12T17:15:15.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac10_firmware:16.03.10.13_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63300018-5FDC-415E-820E-22B07C581C33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac10:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970AEBF4-2B32-4633-A75B-2D2C598C048D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/1/1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/1/1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T02:15:08.540",
      "lastModified" : "2025-02-12T17:15:15.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the formSetFirewallCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac10_firmware:16.03.10.13_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63300018-5FDC-415E-820E-22B07C581C33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac10:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970AEBF4-2B32-4633-A75B-2D2C598C048D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/9/9.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrizzlingSun/Tenda/blob/main/AC10/9/9.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T03:15:06.953",
      "lastModified" : "2025-02-12T21:15:12.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution (RCE) vulnerability via the component /controllers/api/user.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgyer:codefever:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-02-07",
            "matchCriteriaId" : "D693BAD0-F600-414B-B57D-6C5C26996B9E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PGYER/codefever/issues/140",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PGYER/codefever/issues/140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T03:15:06.993",
      "lastModified" : "2025-02-12T21:15:12.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "siteproxy v1.0 was discovered to contain a path traversal vulnerability via the component index.js."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siteproxy_project:siteproxy:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B89D7AB9-2277-4D84-A549-0E10761E39F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/netptop/siteproxy/issues/67",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netptop/siteproxy/issues/67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T03:15:07.030",
      "lastModified" : "2025-02-12T20:15:30.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7100ru_firmware:7.4cu.2313_b20191024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C47206-6608-4258-A2FE-D15C5637192D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7100ru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DD0831-0EB3-4F09-B4E4-6165E53AB6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26978",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T04:15:41.213",
      "lastModified" : "2025-02-12T20:15:31.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIeCfg."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a7100ru_firmware:7.4cu.2313_b20191024:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C47206-6608-4258-A2FE-D15C5637192D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a7100ru:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DD0831-0EB3-4F09-B4E4-6165E53AB6A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Am1ngl/ttt/tree/main/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T04:15:41.360",
      "lastModified" : "2025-02-11T20:15:32.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This includes the Minecraft mods folder, which results in code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bibliocraftmod:bibliocraft:*:*:*:*:*:minecraft:*:*",
            "versionEndExcluding" : "2.4.6",
            "matchCriteriaId" : "A3A97CAD-9FDB-4078-834A-CC9BF76ED45D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Exopteron/BiblioRCE",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exopteron/BiblioRCE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28051",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-04-07T08:15:07.143",
      "lastModified" : "2024-11-21T07:54:12.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell Power Manager, versions 3.10 and prior, contains an Improper Access Control vulnerability. A low-privileged attacker could potentially exploit this vulnerability to elevate privileges on the system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:power_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.11",
            "matchCriteriaId" : "0ECAA26F-6A6B-45E7-BB06-5F812E6F2090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000211891/dsa-2023-221-dell-power-manager",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000211891/dsa-2023-221-dell-power-manager",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1937",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-07T09:15:07.200",
      "lastModified" : "2024-11-21T07:40:10.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in zhenfeng13 My-Blog. Affected is an unknown function of the file /admin/configurations/userInfo. The manipulation of the argument yourAvatar/yourName/yourEmail leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-225264."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:my-blog_project:my-blog:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFC9633D-2C42-4B66-8777-8E6A211EB74E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/zhenfeng13/My-Blog/issues/I6PV4U",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225264",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.225264",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/zhenfeng13/My-Blog/issues/I6PV4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.225264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24402",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T09:15:07.670",
      "lastModified" : "2024-11-21T07:47:47.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Veribo, Roland Murg WP Booking System – Booking Calendar plugin <= 2.0.18 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpbookingsystem:wp_booking_system:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.0.18",
            "matchCriteriaId" : "B49595F7-28F3-411C-BBCB-A3B593DCF94D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-booking-system/wordpress-wp-booking-system-booking-calendar-plugin-2-0-18-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-booking-system/wordpress-wp-booking-system-booking-calendar-plugin-2-0-18-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25059",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T09:15:07.750",
      "lastModified" : "2024-11-21T07:49:01.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in avalex GmbH avalex – Automatically secure legal texts plugin <= 3.0.3 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avalex:avalex:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.0.3",
            "matchCriteriaId" : "D6B9DB7D-7715-4CFB-B119-446F8225364D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/avalex/wordpress-avalex-plugin-3-0-3-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/avalex/wordpress-avalex-plugin-3-0-3-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25061",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T09:15:07.823",
      "lastModified" : "2024-11-21T07:49:01.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kibokolabs:arigato_autoresponder_and_newsletter:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.7.1.1",
            "matchCriteriaId" : "BB95BACB-9878-412B-8DBE-B0833B176AC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/bft-autoresponder/wordpress-arigato-autoresponder-and-newsletter-plugin-2-7-1-1-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/bft-autoresponder/wordpress-arigato-autoresponder-and-newsletter-plugin-2-7-1-1-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24398",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T10:15:07.300",
      "lastModified" : "2024-11-21T07:47:47.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Snap Creek Software EZP Coming Soon Page plugin <= 1.0.7.3 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snapcreek:ezp_coming_soon_page:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.7.3",
            "matchCriteriaId" : "06CC511F-D905-4B8F-B869-614578495878"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/easy-pie-coming-soon/wordpress-ezp-coming-soon-page-plugin-1-0-7-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/easy-pie-coming-soon/wordpress-ezp-coming-soon-page-plugin-1-0-7-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25046",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T10:15:07.357",
      "lastModified" : "2024-11-21T07:49:00.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Podlove Podlove Podcast Publisher plugin <= 3.8.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podlove:podlove_podcast_publisher:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.8.2",
            "matchCriteriaId" : "79944954-B91C-4394-895C-B7E659304D39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/podlove-podcasting-plugin-for-wordpress/wordpress-podlove-podcast-publisher-plugin-3-8-2-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/podlove-podcasting-plugin-for-wordpress/wordpress-podlove-podcast-publisher-plugin-3-8-2-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25022",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T11:15:06.917",
      "lastModified" : "2024-11-21T07:48:57.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Watu Quiz plugin <= 3.3.8 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kibokolabs:watu_quiz:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.3.8",
            "matchCriteriaId" : "8A978BB6-9620-4638-A3FB-617AB8DA6B90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/watu/wordpress-watu-quiz-plugin-3-3-8-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/watu/wordpress-watu-quiz-plugin-3-3-8-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25023",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T11:15:06.983",
      "lastModified" : "2026-02-18T14:45:44.540",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saleswonder.Biz Webinar ignition plugin <= 2.14.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saleswonder:webinarignition:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.14.2",
            "matchCriteriaId" : "A1DD590D-48F5-4109-9FBF-50F159DDBC59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/webinar-ignition/wordpress-webinarignition-plugin-2-14-2-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/webinar-ignition/wordpress-webinarignition-plugin-2-14-2-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25024",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T11:15:07.043",
      "lastModified" : "2024-11-21T07:48:57.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Icegram Icegram Collect plugin <= 1.3.8 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:icegram:icegram_collect:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.8",
            "matchCriteriaId" : "A1B84B54-6631-4866-9F6B-187F57C70FB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/icegram-rainmaker/wordpress-icegram-collect-easy-form-lead-collection-and-subscription-plugin-plugin-1-3-8-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/icegram-rainmaker/wordpress-icegram-collect-easy-form-lead-collection-and-subscription-plugin-plugin-1-3-8-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25027",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T11:15:07.107",
      "lastModified" : "2024-11-21T07:48:57.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Chained Quiz plugin <= 1.3.2.5 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kibokolabs:chained_quiz:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.2.5",
            "matchCriteriaId" : "A87553BB-D962-4151-8DF5-9CC59B19EDEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/chained-quiz/wordpress-chained-quiz-plugin-1-3-2-5-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/chained-quiz/wordpress-chained-quiz-plugin-1-3-2-5-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23885",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T12:15:07.273",
      "lastModified" : "2024-11-21T07:47:02.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <= 8.0.3.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fullworksplugins:quick_contact_form:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "8.0.3.1",
            "matchCriteriaId" : "AF91DB40-3980-42E2-AE75-EAE2CBD0D090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/quick-contact-form/wordpress-quick-contact-form-plugin-8-0-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/quick-contact-form/wordpress-quick-contact-form-plugin-8-0-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23994",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T12:15:07.363",
      "lastModified" : "2024-11-21T07:47:13.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marcel Bootsman Auto Hide Admin Bar plugin <= 1.6.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auto_hide_admin_bar_project:auto_hide_admin_bar:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.6.1",
            "matchCriteriaId" : "30B75678-7F6B-4272-8EA4-00710A2AA0B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/auto-hide-admin-bar/wordpress-auto-hide-admin-bar-plugin-1-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/auto-hide-admin-bar/wordpress-auto-hide-admin-bar-plugin-1-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25020",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T12:15:07.440",
      "lastModified" : "2024-11-21T07:48:56.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kibokolabs:arigato_autoresponder_and_newsletter:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.7.1.1",
            "matchCriteriaId" : "BB95BACB-9878-412B-8DBE-B0833B176AC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/bft-autoresponder/wordpress-arigato-autoresponder-and-newsletter-plugin-2-7-1-1-cross-site-scripting-xss-2?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/bft-autoresponder/wordpress-arigato-autoresponder-and-newsletter-plugin-2-7-1-1-cross-site-scripting-xss-2?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25031",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T12:15:07.497",
      "lastModified" : "2024-11-21T07:48:58.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kibokolabs:arigato_autoresponder_and_newsletter:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.7.1",
            "matchCriteriaId" : "90AEAB3C-B4F5-44B5-961D-C84DB193BD92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/bft-autoresponder/wordpress-arigato-autoresponder-and-newsletter-plugin-2-7-1-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/bft-autoresponder/wordpress-arigato-autoresponder-and-newsletter-plugin-2-7-1-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25041",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T12:15:07.553",
      "lastModified" : "2024-11-21T07:48:59.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cththemes Monolit theme <= 2.0.6 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cththemes:monolit:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.0.6",
            "matchCriteriaId" : "FF7CF6A5-27DD-4A2B-BF04-944045722C35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/monolit/wordpress-monolit-theme-theme-2-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/monolit/wordpress-monolit-theme-theme-2-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25049",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T12:15:07.607",
      "lastModified" : "2024-11-21T07:49:00.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress plugin <= 3.3.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:implecode:ecommerce_product_catalog:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.3.4",
            "matchCriteriaId" : "DA122375-C01D-4088-AECC-D3BC01059DF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/ecommerce-product-catalog/wordpress-ecommerce-product-catalog-plugin-for-wordpress-plugin-3-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/ecommerce-product-catalog/wordpress-ecommerce-product-catalog-plugin-for-wordpress-plugin-3-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25716",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T12:15:07.663",
      "lastModified" : "2024-11-21T07:49:59.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gqevu6bsiz Announce from the Dashboard plugin <= 1.5.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:announce_from_the_dashboard_project:announce_from_the_dashboard:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "F033C785-A0E0-4E6E-89AE-BFBAA2DF56A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/announce-from-the-dashboard/wordpress-announce-from-the-dashboard-plugin-1-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/announce-from-the-dashboard/wordpress-announce-from-the-dashboard-plugin-1-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28993",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T12:15:07.717",
      "lastModified" : "2024-11-21T07:56:21.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauth.  Reflected Cross-Site Scripting (XSS) vulnerability in Ignazio Scimone Albo Pretorio On Line plugin <= 4.6.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:albo_pretorio_on_line_project:albo_pretorio_on_line:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.6.2",
            "matchCriteriaId" : "12EEFE19-2F76-469E-84D0-B09FE09B20DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/albo-pretorio-on-line/wordpress-albo-pretorio-on-line-plugin-4-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/albo-pretorio-on-line/wordpress-albo-pretorio-on-line-plugin-4-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29236",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T12:15:07.767",
      "lastModified" : "2024-11-21T07:56:44.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cththemes Outdoor theme <= 3.9.6 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cththemes:outdoor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.9.7",
            "matchCriteriaId" : "87E0A0FB-45C4-474D-822D-9C969C268DAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/outdoor/wordpress-outdoor-theme-3-9-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/outdoor/wordpress-outdoor-theme-3-9-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1726",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-04-07T13:15:07.287",
      "lastModified" : "2024-11-21T07:39:46.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proliz OBS allows Stored XSS for an authenticated user.This issue affects OBS: before 23.04.01.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prolizyazilim:student_affairs_information_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.04.01",
            "matchCriteriaId" : "9AC90D34-4E15-49DE-A774-D0F2E1568ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0205",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25464",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T13:15:07.353",
      "lastModified" : "2024-11-21T07:49:33.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in StreamWeasels Twitch Player plugin <= 2.1.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:streamweasels:twitch_player:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.1",
            "matchCriteriaId" : "B419CBAE-5D72-4D75-A000-C79249563720"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/ttv-easy-embed-player/wordpress-twitch-player-plugin-2-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/ttv-easy-embed-player/wordpress-twitch-player-plugin-2-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25702",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T13:15:07.410",
      "lastModified" : "2024-11-21T07:49:58.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fullworksplugins:quick_paypal_payments:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.7.26",
            "matchCriteriaId" : "12010A4E-509F-4E3A-B628-FC7209681430"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/quick-paypal-payments/wordpress-quick-paypal-payments-plugin-5-7-25-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/quick-paypal-payments/wordpress-quick-paypal-payments-plugin-5-7-25-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25705",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T13:15:07.460",
      "lastModified" : "2024-11-21T07:49:58.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Go Prayer WP Prayer plugin <= 1.9.6 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:goprayer:wp_prayer:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.9.7",
            "matchCriteriaId" : "CADF460B-DF7C-46B9-88E7-92B6B28FBC27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-prayer/wordpress-wp-prayer-plugin-1-9-6-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-prayer/wordpress-wp-prayer-plugin-1-9-6-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25711",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T13:15:07.513",
      "lastModified" : "2024-11-21T07:49:59.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPGlobus WPGlobus Translate Options plugin <= 2.1.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpglobus:wpglobus_translate_options:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.2.0",
            "matchCriteriaId" : "BC0989B0-27AC-41BB-A3B8-168E4F2614F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wpglobus-translate-options/wordpress-wpglobus-translate-options-plugin-2-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wpglobus-translate-options/wordpress-wpglobus-translate-options-plugin-2-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25712",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T13:15:07.567",
      "lastModified" : "2024-11-21T07:49:59.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP-Buddy Google Analytics Opt-Out plugin <= 2.3.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-buddy:google_analytics_opt-out:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.3.5",
            "matchCriteriaId" : "295D255F-D4E7-41E3-90D9-D07BDD11E53C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/google-analytics-opt-out/wordpress-opt-out-for-google-analytics-plugin-2-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/google-analytics-opt-out/wordpress-opt-out-for-google-analytics-plugin-2-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25713",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T13:15:07.620",
      "lastModified" : "2024-11-21T07:49:59.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fullworksplugins:quick_paypal_payments:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.7.26",
            "matchCriteriaId" : "12010A4E-509F-4E3A-B628-FC7209681430"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/quick-paypal-payments/wordpress-quick-paypal-payments-plugin-5-7-25-cross-site-scripting-xss-2?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/quick-paypal-payments/wordpress-quick-paypal-payments-plugin-5-7-25-cross-site-scripting-xss-2?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29094",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T13:15:07.673",
      "lastModified" : "2024-11-21T07:56:32.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin <= 1.3.20 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwebsolution:product_page_shipping_calculator_for_woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.21",
            "matchCriteriaId" : "BF94AE83-DE09-4ED6-A3D5-4FD5106DDB22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/product-page-shipping-calculator-for-woocommerce/wordpress-product-page-shipping-calculator-for-woocommerce-plugin-1-3-20-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/product-page-shipping-calculator-for-woocommerce/wordpress-product-page-shipping-calculator-for-woocommerce-plugin-1-3-20-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23799",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T14:15:07.417",
      "lastModified" : "2024-11-21T07:46:51.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Leonardo Giacone Easy Panorama plugin <= 1.1.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_panorama_project:easy_panorama:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.4",
            "matchCriteriaId" : "B2A75D87-5B3C-43F8-84DC-A9C91F2409F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/easy-panorama/wordpress-easy-panorama-plugin-1-1-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/easy-panorama/wordpress-easy-panorama-plugin-1-1-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25442",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T14:15:07.470",
      "lastModified" : "2024-11-21T07:49:31.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Marcel Pol Zeno Font Resizer plugin <= 1.7.9 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeno_font_resizer_project:zeno_font_resizer:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.0",
            "matchCriteriaId" : "08C4D7D6-3249-4A5D-8966-59B319359CFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/zeno-font-resizer/wordpress-zeno-font-resizer-plugin-1-7-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/zeno-font-resizer/wordpress-zeno-font-resizer-plugin-1-7-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27620",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T14:15:07.527",
      "lastModified" : "2024-11-21T07:53:16.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-site Scripting (XSS) vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.12 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:robogallery:robo_gallery:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.2.13",
            "matchCriteriaId" : "0BDABFDB-2BCB-4F9D-88FB-CFE799CFF978"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/robo-gallery/wordpress-robo-gallery-plugin-3-2-12-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/robo-gallery/wordpress-robo-gallery-plugin-3-2-12-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T14:15:07.577",
      "lastModified" : "2025-02-12T17:15:16.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:v100r005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C68BF-36DA-4C33-A3B0-2A727FC3DCA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6536F560-E1DD-4430-AE4D-44444C17FBB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/DelDNSHnList",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/DelDNSHnList",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T14:15:07.613",
      "lastModified" : "2025-02-12T17:15:16.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:v100r005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C68BF-36DA-4C33-A3B0-2A727FC3DCA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6536F560-E1DD-4430-AE4D-44444C17FBB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/EditvsList",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/EditvsList",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T14:15:07.650",
      "lastModified" : "2025-02-12T17:15:16.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:v100r005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C68BF-36DA-4C33-A3B0-2A727FC3DCA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6536F560-E1DD-4430-AE4D-44444C17FBB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/EdittriggerList",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/EdittriggerList",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T14:15:07.687",
      "lastModified" : "2025-02-11T20:15:32.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:v100r005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C68BF-36DA-4C33-A3B0-2A727FC3DCA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6536F560-E1DD-4430-AE4D-44444C17FBB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/DelvsList",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/DelvsList",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T14:15:07.720",
      "lastModified" : "2025-02-12T17:15:17.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:v100r005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C68BF-36DA-4C33-A3B0-2A727FC3DCA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6536F560-E1DD-4430-AE4D-44444C17FBB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/EditSTList",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/EditSTList",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27806",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T14:15:07.757",
      "lastModified" : "2025-02-12T17:15:17.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:v100r005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C68BF-36DA-4C33-A3B0-2A727FC3DCA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6536F560-E1DD-4430-AE4D-44444C17FBB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/ipqos_lanip_dellist",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/ipqos_lanip_dellist",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T14:15:07.790",
      "lastModified" : "2025-02-12T17:15:17.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:v100r005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C68BF-36DA-4C33-A3B0-2A727FC3DCA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6536F560-E1DD-4430-AE4D-44444C17FBB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/Delstlist",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/Delstlist",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T14:15:07.827",
      "lastModified" : "2025-02-12T17:15:17.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:v100r005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C68BF-36DA-4C33-A3B0-2A727FC3DCA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6536F560-E1DD-4430-AE4D-44444C17FBB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/DeltriggerList",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/DeltriggerList",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T14:15:07.860",
      "lastModified" : "2025-02-12T17:15:17.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:v100r005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91C68BF-36DA-4C33-A3B0-2A727FC3DCA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6536F560-E1DD-4430-AE4D-44444C17FBB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/ipqos_lanip_editlist",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/ipqos_lanip_editlist",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27876",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-07T14:15:07.897",
      "lastModified" : "2024-11-21T07:53:37.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM TRIRIGA 4.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.  IBM X-Force ID:  249975."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tririga_application_platform:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A670650-3CD0-4C43-82F7-32FB2AD648C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249975",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6981115",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6981115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28706",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-07T15:15:08.017",
      "lastModified" : "2024-11-21T07:55:50.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 6.0.0.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:airflow_hive_provider:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.0",
            "matchCriteriaId" : "5C62CA80-3260-4F62-93D4-6839350EE853"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/07/2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apache/airflow/pull/30212",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/dl20xxd51xvlx0zzc0wzgxfjwgtbbxo3",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/07/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apache/airflow/pull/30212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/dl20xxd51xvlx0zzc0wzgxfjwgtbbxo3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28707",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-07T15:15:08.067",
      "lastModified" : "2025-02-13T17:16:16.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apache-airflow-providers-apache-drill:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2",
            "matchCriteriaId" : "AFDE9552-37D5-4909-BBB0-C751A712CC75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/07/1",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apache/airflow/pull/30215",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/dfoj7q1nd0vhhsl8fjg63z4j6mfmdxtk",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/07/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apache/airflow/pull/30215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/dfoj7q1nd0vhhsl8fjg63z4j6mfmdxtk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28710",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-07T15:15:08.113",
      "lastModified" : "2024-11-21T07:55:51.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before 4.0.1.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:apache-airflow-providers-apache-spark:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.1",
            "matchCriteriaId" : "BE4DE758-1412-434E-983C-2ACF5053CC76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/07/3",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apache/airflow/pull/30223",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/lb9w9114ow00h2nkn8bjm106v5x1p1d2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/07/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apache/airflow/pull/30223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/lb9w9114ow00h2nkn8bjm106v5x1p1d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28781",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T15:15:08.157",
      "lastModified" : "2024-11-21T07:56:00.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cimatti:wordpress_contact_forms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.5",
            "matchCriteriaId" : "29963950-3B9E-4CC9-8457-40AF2476A354"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/contact-forms/wordpress-contact-forms-by-cimatti-plugin-1-5-4-unauth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/contact-forms/wordpress-contact-forms-by-cimatti-plugin-1-5-4-unauth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28789",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T15:15:08.213",
      "lastModified" : "2024-11-21T07:56:01.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cimatti:wordpress_contact_forms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.5",
            "matchCriteriaId" : "29963950-3B9E-4CC9-8457-40AF2476A354"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/contact-forms/wordpress-contact-forms-by-cimatti-plugin-1-5-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/contact-forms/wordpress-contact-forms-by-cimatti-plugin-1-5-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28792",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T15:15:08.267",
      "lastModified" : "2024-11-21T07:56:01.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin <= 1.0.15 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i13websolution:continuous_image_carosel_with_lightbox:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.16",
            "matchCriteriaId" : "F42F6FD0-C17D-471C-94BD-8F2CFD6CC094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/continuous-image-carousel-with-lightbox/wordpress-continuous-image-carousel-with-lightbox-plugin-1-0-15-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/continuous-image-carousel-with-lightbox/wordpress-continuous-image-carousel-with-lightbox-plugin-1-0-15-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29170",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T15:15:08.317",
      "lastModified" : "2024-11-21T07:56:39.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in PI Websolution Product Enquiry for WooCommerce, WooCommerce product catalog plugin <= 2.2.12 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwebsolution:product_enquiry_for_woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.2.13",
            "matchCriteriaId" : "70BE8D8D-2488-43F6-A533-07F4CF23519D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/enquiry-quotation-for-woocommerce/wordpress-product-enquiry-for-woocommerce-plugin-2-2-12-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/enquiry-quotation-for-woocommerce/wordpress-product-enquiry-for-woocommerce-plugin-2-2-12-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29171",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T15:15:08.363",
      "lastModified" : "2024-11-21T07:56:39.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauth. Reflected Cross-site Scripting (XSS) vulnerability in Magic Post Thumbnail plugin <= 4.1.10 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magic-post-thumbnail:magic_post_thumbnail:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.1.11",
            "matchCriteriaId" : "BAC786A0-6AF7-432E-B009-8F6D3553E3BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/magic-post-thumbnail/wordpress-magic-post-thumbnail-plugin-4-1-10-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/magic-post-thumbnail/wordpress-magic-post-thumbnail-plugin-4-1-10-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29172",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T15:15:08.420",
      "lastModified" : "2024-11-21T07:56:39.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PropertyHive plugin <= 1.5.46 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-property-hive:propertyhive:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.47",
            "matchCriteriaId" : "ED69E2BA-BAA9-4C3E-AFA3-364CE002FD3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/propertyhive/wordpress-propertyhive-plugin-1-5-46-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/propertyhive/wordpress-propertyhive-plugin-1-5-46-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29388",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-07T15:15:08.470",
      "lastModified" : "2024-11-21T07:56:58.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in impleCode Product Catalog Simple plugin <= 1.6.17 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:implecode:product_catalog_simple:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.0",
            "matchCriteriaId" : "65963796-68EF-4A0A-83CD-EEF2FB6EB38B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/post-type-x/wordpress-product-catalog-simple-plugin-1-6-17-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/post-type-x/wordpress-product-catalog-simple-plugin-1-6-17-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1909",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-07T17:15:08.287",
      "lastModified" : "2024-11-21T07:40:07.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown function of the file profile.php of the component User Profile Update Handler. The manipulation of the argument name/mobno leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225318 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:bp_monitoring_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F493132-4599-4574-81E9-346781DC55F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/report_English.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225318",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225318",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/report_English.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1940",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-07T18:15:07.057",
      "lastModified" : "2024-11-21T07:40:11.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0. This vulnerability affects unknown code of the file delete_user_query.php. The manipulation of the argument user_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225316."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_and_beautiful_shopping_cart_system_project:simple_and_beautiful_shopping_cart_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65BE6CC4-4C1E-474E-8E5E-2CC672ED60B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anchnet-security/Mkshope/blob/main/simple%20and%20beautiful%20shopping%20cart%20system%20delete_user_query.php%20has%20Sqlinjection.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225316",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225316",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/anchnet-security/Mkshope/blob/main/simple%20and%20beautiful%20shopping%20cart%20system%20delete_user_query.php%20has%20Sqlinjection.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1941",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-07T18:15:07.117",
      "lastModified" : "2024-11-21T07:40:11.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Simple and Beautiful Shopping Cart System 1.0. This issue affects some unknown processing of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225317 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_and_beautiful_shopping_cart_system_project:simple_and_beautiful_shopping_cart_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65BE6CC4-4C1E-474E-8E5E-2CC672ED60B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anchnet-security/Mkshope/blob/main/simple%20and%20beautiful%20shopping%20cart%20system%20login.php%20has%20Sqlinjection.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225317",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225317",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/anchnet-security/Mkshope/blob/main/simple%20and%20beautiful%20shopping%20cart%20system%20login.php%20has%20Sqlinjection.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1942",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-07T18:15:07.177",
      "lastModified" : "2024-11-21T07:40:11.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/?page=user of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225319."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Upload%20any%20file%20at%20the%20administrator%20profile%20upload%20location.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225319",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225319",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Upload%20any%20file%20at%20the%20administrator%20profile%20upload%20location.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23761",
      "sourceIdentifier" : "product-cna@github.com",
      "published" : "2023-04-07T19:15:06.980",
      "lastModified" : "2024-11-21T07:46:46.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users' secret gists by authenticating through an SSH certificate authority. To do so, a user had to know the secret gist's URL. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-cna@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-cna@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.18",
            "matchCriteriaId" : "D30FF55B-C5FA-431A-8E0C-7FCB872AD8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.15",
            "matchCriteriaId" : "A6A66A3A-E2CB-4B7B-BB28-FD81D8A81F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.11",
            "matchCriteriaId" : "A4C79CD6-3EA8-470D-8E35-EF53450F063B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.8",
            "matchCriteriaId" : "75E3B814-6517-4938-917D-7098FF49E301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A51A6-A24C-4989-9941-FE62E21C505D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.18",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.15",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.11",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.8",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.1",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23762",
      "sourceIdentifier" : "product-cna@github.com",
      "published" : "2023-04-07T19:15:07.057",
      "lastModified" : "2024-11-21T07:46:47.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff. To do so, an attacker would need write access to the repository and be able to correctly guess the target branch before it’s created by the code maintainer. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-cna@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-cna@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-697"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-697"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.18",
            "matchCriteriaId" : "D30FF55B-C5FA-431A-8E0C-7FCB872AD8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.15",
            "matchCriteriaId" : "A6A66A3A-E2CB-4B7B-BB28-FD81D8A81F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.11",
            "matchCriteriaId" : "A4C79CD6-3EA8-470D-8E35-EF53450F063B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.8",
            "matchCriteriaId" : "75E3B814-6517-4938-917D-7098FF49E301"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:3.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "952A51A6-A24C-4989-9941-FE62E21C505D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.18",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.15",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.11",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.8",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.1",
        "source" : "product-cna@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1801",
      "sourceIdentifier" : "security@tcpdump.org",
      "published" : "2023-04-07T21:15:06.873",
      "lastModified" : "2024-11-21T07:39:55.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@tcpdump.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcpdump:tcpdump:4.99.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2019905-B202-4083-B00E-50C5C67F9830"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/03c037bbd75588beba3ee09f26d17783d21e30bc",
        "source" : "security@tcpdump.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/7578e1c04ee280dda50c4c2813e7d55f539c6501",
        "source" : "security@tcpdump.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KOA2BJFERAC3VRQIRHJOWN4HZY4ZA7CH/",
        "source" : "security@tcpdump.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WYL5DEVHRJYF2CM5LTCZKEYFYDZAIZSN/",
        "source" : "security@tcpdump.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLLZCG23MU6O4QOG2CX3DLEL3YXP6LAI/",
        "source" : "security@tcpdump.org"
      }, {
        "url" : "https://support.apple.com/kb/HT213844",
        "source" : "security@tcpdump.org"
      }, {
        "url" : "https://support.apple.com/kb/HT213845",
        "source" : "security@tcpdump.org"
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/03c037bbd75588beba3ee09f26d17783d21e30bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/the-tcpdump-group/tcpdump/commit/7578e1c04ee280dda50c4c2813e7d55f539c6501",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KOA2BJFERAC3VRQIRHJOWN4HZY4ZA7CH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WYL5DEVHRJYF2CM5LTCZKEYFYDZAIZSN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLLZCG23MU6O4QOG2CX3DLEL3YXP6LAI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T21:15:06.920",
      "lastModified" : "2025-02-12T17:15:15.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prestashop cdesigner v3.1.3 to v3.1.8 was discovered to contain a code injection vulnerability via the component CdesignerSaverotateModuleFrontController::initContent()."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto que Prestashop cdesigner v3.1.3 a v3.1.8 contiene una vulnerabilidad de inyección de código en el componente CdesignerSaverotateModuleFrontController::initContent()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cdesigner_project:cdesigner:*:*:*:*:*:prestashop:*:*",
            "versionStartIncluding" : "3.1.3",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "755FD4F5-4A5B-47EF-9D2F-A08551548BD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://addons.prestashop.com/fr/declinaisons-personnalisation/22677-personnalisation-de-produit-product-customize.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/04/06/cdesigner-CWE434.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://addons.prestashop.com/fr/declinaisons-personnalisation/22677-personnalisation-de-produit-product-customize.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/04/06/cdesigner-CWE434.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-07T21:15:06.957",
      "lastModified" : "2025-02-12T17:15:15.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup feature which is accessible via /_admin/backup.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdidees:gdidees_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9.1",
            "matchCriteriaId" : "09AAE6B4-0C69-4428-9B58-E8F6E3943A44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Hadi999/d691e35d4f494d37ccc5638e68227606",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chamilo/pclzip",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.gdidees.eu/cms-1-0.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gist.github.com/Hadi999/d691e35d4f494d37ccc5638e68227606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chamilo/pclzip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.gdidees.eu/cms-1-0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1946",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-07T23:15:08.477",
      "lastModified" : "2024-11-21T07:40:12.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Survey Application System 1.0 and classified as problematic. This issue affects some unknown processing of the component Add New Handler. The manipulation of the argument Title with the input <script>prompt(document.domain)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225329 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:survey_application_system_project:survey_application_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7864D312-F027-4EE3-AB89-D89965CD8FD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.225329",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225329",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1947",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-07T23:15:08.547",
      "lastModified" : "2024-11-21T07:40:12.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in taoCMS 3.0.2. It has been classified as critical. Affected is an unknown function of the file /admin/admin.php. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225330 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:taogogo:taocms:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA84748C-B58B-4A72-A527-7FF567BACCC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/misak7in/cve/blob/master/taocms.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225330",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225330",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/misak7in/cve/blob/master/taocms.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-08T05:15:07.063",
      "lastModified" : "2025-05-09T20:15:37.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:screen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.0",
            "matchCriteriaId" : "C1DD0174-2A76-482F-964D-0DD75126F9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.savannah.gnu.org/cgit/screen.git/patch/?id=e9ad41bfedb4537a6f0de20f00b27c7739f168f7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://savannah.gnu.org/bugs/?63195",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/51252",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/screen.git/patch/?id=e9ad41bfedb4537a6f0de20f00b27c7739f168f7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://savannah.gnu.org/bugs/?63195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20250509-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/51252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/51252",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1948",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-08T08:15:07.033",
      "lastModified" : "2024-11-21T07:40:12.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in PHPGurukul BP Monitoring Management System 1.0. This issue affects some unknown processing of the file add-family-member.php of the component Add New Family Member Handler. The manipulation of the argument Member Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225335."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:bp_monitoring_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F493132-4599-4574-81E9-346781DC55F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/XSS_English.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225335",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225335",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/XSS_English.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1949",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-08T08:15:07.237",
      "lastModified" : "2024-11-21T07:40:12.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown function of the file change-password.php of the component Change Password Handler. The manipulation of the argument password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225336."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:bp_monitoring_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F493132-4599-4574-81E9-346781DC55F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/ChangePassword.php_SQL_English.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225336",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.225336",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/ChangePassword.php_SQL_English.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.225336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1950",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-08T08:15:07.303",
      "lastModified" : "2024-11-21T07:40:12.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file password-recovery.php of the component Password Recovery. The manipulation of the argument emailid/contactno leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225337 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:bp_monitoring_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F493132-4599-4574-81E9-346781DC55F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/password-recovery.php_SQL_English.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225337",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225337",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/password-recovery.php_SQL_English.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1951",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-08T08:15:07.357",
      "lastModified" : "2024-11-21T07:40:12.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this issue is the function delete_brand of the file /admin/maintenance/brand.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-225338 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Delete%20category%20list%20with%20SQL%20injection.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225338",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225338",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Delete%20category%20list%20with%20SQL%20injection.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1952",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-08T09:15:07.623",
      "lastModified" : "2024-11-21T07:40:12.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as critical. This affects an unknown part of the file /?p=products of the component Product Search. The manipulation of the argument search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225339."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20in%20the%20search%20bar%20on%20the%20homepage.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225339",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225339",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20in%20the%20search%20bar%20on%20the%20homepage.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1953",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-08T10:15:06.977",
      "lastModified" : "2024-11-21T07:40:13.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/sales/index.php. The manipulation of the argument date_start/date_end leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225340."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20in%20sales%20report%20query.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225340",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225340",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20in%20sales%20report%20query.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1954",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-08T10:15:07.033",
      "lastModified" : "2024-11-21T07:40:13.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been rated as critical. This issue affects the function save_inventory of the file /admin/product/manage.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225341 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20present%20at%20product%20update.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225341",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225341",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20present%20at%20product%20update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1955",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-08T10:15:07.080",
      "lastModified" : "2024-11-21T07:40:13.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is an unknown function of the file login.php of the component User Registration. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225342 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/User%20registration%20SQL%20injection.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225342",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225342",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/User%20registration%20SQL%20injection.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1956",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-08T10:15:07.127",
      "lastModified" : "2024-11-21T07:40:13.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=delete_img of the component Image Handler. The manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225343."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Any%20file%20deletion%20exists%20in%20the%20system%20management%20department.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225343",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225343",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Any%20file%20deletion%20exists%20in%20the%20system%20management%20department.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1957",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-08T11:15:06.830",
      "lastModified" : "2024-11-21T07:40:13.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=save_sub_category of the component Subcategory Handler. The manipulation of the argument sub_category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225344."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20at%20the%20newly%20added%20subcategory%20list.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225344",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225344",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20at%20the%20newly%20added%20subcategory%20list.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1958",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-08T11:15:06.890",
      "lastModified" : "2024-11-21T07:40:13.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file /classes/Master.php?f=delete_sub_category. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225345 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20present%20at%20subcategory%20deletion.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225345",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225345",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20present%20at%20subcategory%20deletion.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1959",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-08T11:15:06.943",
      "lastModified" : "2024-11-21T07:40:13.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=save_category. The manipulation of the argument category leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-225346 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20at%20the%20newly%20added%20category%20list.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225346",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225346",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20at%20the%20newly%20added%20category%20list.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1960",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-08T12:15:06.953",
      "lastModified" : "2024-11-21T07:40:13.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=delete_category. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225347."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20at%20the%20deletion%20point%20of%20the%20category%20list.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225347",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225347",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20at%20the%20deletion%20point%20of%20the%20category%20list.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1961",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-08T12:15:07.010",
      "lastModified" : "2024-11-21T07:40:14.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/?page=system_info. The manipulation of the argument System Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225348."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Cross%20site%20scripting%20attack%20at%20system%20name%20setting.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225348",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225348",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Cross%20site%20scripting%20attack%20at%20system%20name%20setting.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30450",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-08T23:15:06.930",
      "lastModified" : "2025-02-12T17:15:20.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for example) situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure (while a cluster is turned off) in order to have TLS on broker RPC ports. NOTE: the fix was also backported to the 22.2 and 22.3 branches."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redpanda:redpanda:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.1.2",
            "matchCriteriaId" : "540412CA-F1CE-41B4-BC8A-7E13F9BD95AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redpanda-data/redpanda/commit/58795aa07e88e0a63cebf4e1d9fcc717ceef0557",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redpanda-data/redpanda/commit/a839056381ea7cd71e68495854e388daf7a08ba7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redpanda-data/redpanda/commit/cf82b99457e2434d3674e424ab560fe201e6c365",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redpanda-data/redpanda/compare/v23.1.1...v23.1.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redpanda-data/redpanda/pull/7719",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redpanda-data/redpanda/commit/58795aa07e88e0a63cebf4e1d9fcc717ceef0557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redpanda-data/redpanda/commit/a839056381ea7cd71e68495854e388daf7a08ba7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redpanda-data/redpanda/commit/cf82b99457e2434d3674e424ab560fe201e6c365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redpanda-data/redpanda/compare/v23.1.1...v23.1.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/redpanda-data/redpanda/pull/7719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1962",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-09T08:15:07.437",
      "lastModified" : "2025-03-07T14:49:58.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225361 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mayurik:best_online_news_portal:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4003A826-E9DE-4786-B11B-3630A11CA41A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PEOIzEve/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225361",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225361",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PEOIzEve/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1963",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-09T08:15:07.623",
      "lastModified" : "2024-11-21T07:40:14.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php of the component Search. The manipulation of the argument searchinput leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225359."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:bank_locker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8782F27-C73C-497B-92B3-2F9DC551C233"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vsdwef/Bank-locker-Managament-System/blob/main/search-locker-details.php_SQL_English.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225359",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225359",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vsdwef/Bank-locker-Managament-System/blob/main/search-locker-details.php_SQL_English.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225359",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1964",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-09T09:15:07.077",
      "lastModified" : "2024-11-21T07:40:14.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file recovery.php of the component Password Reset. The manipulation of the argument uname/mobile leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225360."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:bank_locker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8782F27-C73C-497B-92B3-2F9DC551C233"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vsdwef/Bank-locker-Managament-System/blob/main/password-recovery.php_SQL_English.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225360",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225360",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vsdwef/Bank-locker-Managament-System/blob/main/password-recovery.php_SQL_English.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27727",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-09T20:15:56.650",
      "lastModified" : "2025-02-12T16:15:37.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_function_frame at src/njs_function.h."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:njs:0.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2784ECC5-66FE-4666-9B7B-6DC080357DEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nginx/njs/issues/617",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/nginx/njs/issues/617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27728",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-09T20:15:56.703",
      "lastModified" : "2025-02-11T20:15:32.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_dump_is_recursive at src/njs_vmcode.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:njs:0.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2784ECC5-66FE-4666-9B7B-6DC080357DEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nginx/njs/issues/618",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/nginx/njs/issues/618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27729",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-09T20:15:56.740",
      "lastModified" : "2025-02-12T16:15:37.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:njs:0.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2784ECC5-66FE-4666-9B7B-6DC080357DEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nginx/njs/issues/619",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/nginx/njs/issues/619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-09T20:15:56.780",
      "lastModified" : "2025-02-11T22:15:26.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_lvlhsh_find at src/njs_lvlhsh.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:njs:0.7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2784ECC5-66FE-4666-9B7B-6DC080357DEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nginx/njs/issues/615",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/nginx/njs/issues/615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-09T21:15:07.170",
      "lastModified" : "2025-02-11T19:15:12.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir878_firmware:1.30b08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF1D0F4-5817-413F-8B6D-C9D15D9095E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF62796E-FD7F-4DB4-82E1-E640F1973D1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-09T21:15:07.220",
      "lastModified" : "2025-02-12T17:15:15.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir878_firmware:1.30b08:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF1D0F4-5817-413F-8B6D-C9D15D9095E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF62796E-FD7F-4DB4-82E1-E640F1973D1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-09T21:15:07.263",
      "lastModified" : "2025-02-12T17:15:16.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-878_firmware:1.30b08:-:*:*:*:*:*:*",
            "matchCriteriaId" : "40DB96AF-1231-4F31-8386-495EAFEB756B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-878:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D288C73-F89A-47FF-AF11-143C3DFDF942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/4.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/4.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T02:15:06.853",
      "lastModified" : "2025-03-19T16:15:22.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.8",
            "matchCriteriaId" : "4896FE8F-5B9C-4C1A-89A7-F70F795F0DD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F0FC3-CE52-4BA1-BA51-22F783938431"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/112e66017bff7f2837030f34c2bc19501e9212d5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0007/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/112e66017bff7f2837030f34c2bc19501e9212d5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26120",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-04-10T05:15:07.003",
      "lastModified" : "2025-02-07T21:15:11.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of the package com.xuxueli:xxl-job. HTML uploaded payload executed successfully through /xxl-job-admin/user/add and /xxl-job-admin/user/update."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xuxueli:xxl-job:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D08672E-CF8B-4CCF-A855-2B522171CBA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-COMXUXUELI-3248764",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JAVA-COMXUXUELI-3248764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27602",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-10T08:15:06.967",
      "lastModified" : "2025-02-13T17:16:13.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Linkis <=1.3.1, The PublicService module uploads files without restrictions on the path to the uploaded files, and file types.\n\n\nWe recommend users upgrade the version of Linkis to version 1.3.2. \n\nFor versions \n\n<=1.3.1, we suggest turning on the file path check switch in linkis.properties\n\n`wds.linkis.workspace.filesystem.owner.check=true`\n`wds.linkis.workspace.filesystem.path.check=true`"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:linkis:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "AB515AB9-F11F-4FC1-93B5-B9ADB046B5F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/10/1",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/18/4",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/19/3",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread/wt70jfc0yfs6s5g0wg5dr5klnc48nsp1",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/18/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/19/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread/wt70jfc0yfs6s5g0wg5dr5klnc48nsp1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27603",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-10T08:15:07.133",
      "lastModified" : "2024-11-21T07:53:14.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\nIn Apache Linkis <=1.3.1, due to the Manager module engineConn material upload does not check the zip path, This is a Zip Slip issue, which will lead to a potential RCE vulnerability.\n\n\nWe recommend users upgrade the version of Linkis to version 1.3.2.\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:linkis:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "AB515AB9-F11F-4FC1-93B5-B9ADB046B5F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/6n1vlvnyn441rm02zdqc0wnpckj8ltn8",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/10/2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread/6n1vlvnyn441rm02zdqc0wnpckj8ltn8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/10/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27987",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-10T08:15:07.180",
      "lastModified" : "2024-11-21T07:53:52.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nIn Apache Linkis <=1.3.1, due to the default token generated by Linkis Gateway deployment being too simple, it is easy for attackers to obtain the default token for the attack. Generation rules should add random values.\n\n\n\n\nWe recommend users upgrade the version of Linkis to version 1.3.2 And modify the default token value. You can refer to Token authorization[1]\n https://linkis.apache.org/docs/latest/auth/token https://linkis.apache.org/docs/latest/auth/token \n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:linkis:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "AB515AB9-F11F-4FC1-93B5-B9ADB046B5F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/3cr1cz3210wzwngldwrqzm43vwhghp0p",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/10/3",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread/3cr1cz3210wzwngldwrqzm43vwhghp0p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/10/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29215",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-10T08:15:07.237",
      "lastModified" : "2025-02-13T17:16:17.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Linkis <=1.3.1, due to the lack of effective filtering\nof parameters, an attacker configuring malicious Mysql JDBC parameters in JDBC EengineConn Module will trigger a\ndeserialization vulnerability and eventually lead to remote code execution. Therefore, the parameters in the Mysql JDBC URL should be blacklisted. Versions of Apache Linkis <= 1.3.0 will be affected.\nWe recommend users upgrade the version of Linkis to version 1.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:linkis:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "AB515AB9-F11F-4FC1-93B5-B9ADB046B5F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/10/4",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/o682wz1ggq491ybvjwokxvcdtnzo76ls",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/10/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/o682wz1ggq491ybvjwokxvcdtnzo76ls",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29216",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-10T08:15:07.290",
      "lastModified" : "2025-02-13T17:16:17.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Linkis <=1.3.1, because the parameters are not\neffectively filtered, the attacker uses the MySQL data source and malicious parameters to\nconfigure a new data source to trigger a deserialization vulnerability, eventually leading to\nremote code execution.\n Versions of Apache Linkis <= 1.3.0 will be affected.\nWe recommend users upgrade the version of Linkis to version 1.3.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:linkis:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "AB515AB9-F11F-4FC1-93B5-B9ADB046B5F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/10/5",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/18vv0m32oy51nzk8tbz13qdl5569y55l",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/10/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/18vv0m32oy51nzk8tbz13qdl5569y55l",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T12:15:07.273",
      "lastModified" : "2025-02-11T17:15:19.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Sales Tracker Management System v.1.0 allows a remote attacker to access sensitive information via sales.php component of the admin/reports endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sales_tracker_management_system_project:sales_tracker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF52C94E-14A2-48E2-930E-56E6375C4846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/171692/Sales-Tracker-Management-System-1.0-Insecure-Direct-Object-Reference.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/retrymp3",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/download-code?nid=16061&title=Sales+Tracker+Management+System+using+PHP+Free+Source+Code",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16061/sales-tracker-management-system-using-php-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/171692/Sales-Tracker-Management-System-1.0-Insecure-Direct-Object-Reference.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/retrymp3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/download-code?nid=16061&title=Sales+Tracker+Management+System+using+PHP+Free+Source+Code",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16061/sales-tracker-management-system-using-php-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T13:15:06.960",
      "lastModified" : "2025-02-11T17:15:19.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the request to be sent to a completely different Domain/IP address."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:veritas:netbackup_appliance_firmware:4.1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1616D977-27C1-4AC7-B9DD-CA88EEDC3620"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IthacaLabs/Veritas-Technologies",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20Appliance%20v4.1.0.1/HHI/HHI_CVE-2023-26788.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/IthacaLabs/Veritas-Technologies",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20Appliance%20v4.1.0.1/HHI/HHI_CVE-2023-26788.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T13:15:07.037",
      "lastModified" : "2025-02-11T17:15:19.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability found in PrestaShop Igbudget v.1.0.3 and before allow a remote attacker to gain privileges via the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:save_your_carts_and_buy_later_or_send_it_project:save_your_carts_and_buy_later_or_send_it:*:*:*:*:*:prestashop:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "9940686C-A36C-4C10-B576-671082680143"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://addons.prestashop.com/en/order-management/45282-save-your-carts-and-buy-later-or-send-it.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/04/04/lgbudget.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://addons.prestashop.com/en/order-management/45282-save-your-carts-and-buy-later-or-send-it.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/04/04/lgbudget.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0156",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:08.100",
      "lastModified" : "2025-02-11T15:15:15.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not limit what log files to display in it's settings pages, allowing an authorized user (admin+) to view the contents of arbitrary files and list directories anywhere on the server (to which the web server has access). The plugin only displays the last 50 lines of the file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:updraftplus:all-in-one_security:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.1.5",
            "matchCriteriaId" : "090173AD-EF08-49D3-8017-611B0BBAAE57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/caf1dbb5-197e-41e9-8f48-ba1f2360a759",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/caf1dbb5-197e-41e9-8f48-ba1f2360a759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0157",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:08.157",
      "lastModified" : "2025-02-11T22:15:24.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not escape the content of log files before outputting it to the plugin admin page, allowing an authorized user (admin+) to plant bogus log files containing malicious JavaScript code that will be executed in the context of any administrator visiting this page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:updraftplus:all-in-one_security:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.1.5",
            "matchCriteriaId" : "090173AD-EF08-49D3-8017-611B0BBAAE57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/8248b550-6485-4108-a701-8446ffa35f06",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8248b550-6485-4108-a701-8446ffa35f06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0363",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:08.227",
      "lastModified" : "2025-02-11T16:15:30.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Scheduled Announcements Widget WordPress plugin before 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nlb-creations:scheduled_announcements_widget:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0",
            "matchCriteriaId" : "53F16977-A1C5-4B35-951E-A03E1CB4AA1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/6d332a47-e96c-455b-9e8f-db6dbb59b518",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/6d332a47-e96c-455b-9e8f-db6dbb59b518",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0422",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:08.290",
      "lastModified" : "2025-05-05T16:15:25.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Article Directory WordPress plugin through 1.3 does not properly sanitize the `publish_terms_text` setting before displaying it in the administration panel, which may enable administrators to conduct Stored XSS attacks in multisite contexts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:article_directory_project:article_directory:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "2D7F3B7F-96E5-4B6B-8ECE-448DC496305B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d57f2fb2-5251-4069-8c9a-a4af269c5e62",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d57f2fb2-5251-4069-8c9a-a4af269c5e62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0423",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:08.350",
      "lastModified" : "2025-02-11T22:15:24.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WordPress Amazon S3 Plugin WordPress plugin before 1.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress_amazon_s3_project:wordpress_amazon_s3:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "2D01B228-CCAB-4694-8C54-28AE9BE613FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/73d588d7-26ae-42e2-8282-aa02bcb109b6",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/73d588d7-26ae-42e2-8282-aa02bcb109b6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0546",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:08.423",
      "lastModified" : "2025-02-11T21:15:10.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Contact Form Plugin WordPress plugin before 4.3.25 does not properly sanitize and escape the srcdoc attribute in iframes in it's custom HTML field type, allowing a logged in user with roles as low as contributor to inject arbitrary javascript into a form which will trigger for any visitor to the form or admins previewing or editing the form."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluentforms:contact_form:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.3.25",
            "matchCriteriaId" : "C3DAC088-3DA3-4D73-962C-8F48F1770F2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/078f33cd-0f5c-46fe-b858-2107a09c6b69",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/078f33cd-0f5c-46fe-b858-2107a09c6b69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0605",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:08.487",
      "lastModified" : "2025-02-11T22:15:24.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Auto Rename Media On Upload WordPress plugin before 1.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auto_rename_media_on_upload_project:auto_rename_media_on_upload:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "FF935081-A888-40F7-B776-AED754793165"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/57267c3c-d55e-4b37-a6d0-c5cd8569625c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/57267c3c-d55e-4b37-a6d0-c5cd8569625c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0874",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:08.553",
      "lastModified" : "2025-02-11T22:15:24.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Klaviyo WordPress plugin before 3.0.10 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:klaviyo:klavio:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.0.10",
            "matchCriteriaId" : "B95F457D-8B43-4833-AD3F-5575A9555217"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/495e39db-793d-454b-9ef1-dd91cae2c49b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/495e39db-793d-454b-9ef1-dd91cae2c49b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0893",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:08.613",
      "lastModified" : "2025-02-11T16:15:30.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Time Sheets WordPress plugin before 1.29.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dcac:time_sheets:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.29.3",
            "matchCriteriaId" : "4B4F6F8B-1205-4C15-B7FD-8AA20B0DD795"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/fd6ef6ee-15e9-44ac-a2db-976393a3b71a",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/fd6ef6ee-15e9-44ac-a2db-976393a3b71a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0983",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:08.677",
      "lastModified" : "2025-02-11T22:15:24.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The stylish-cost-calculator-premium WordPress plugin before 7.9.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Stored Cross-Site Scripting which could be used against admins when viewing submissions submitted through the Email Quote Form."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stylishcostcalculator:stylish_cost_calculator:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "7.4.1",
            "matchCriteriaId" : "362729C5-5651-409E-AE7B-4B4068826A19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/73353221-3e6d-44e8-bf41-55a0fe57d81f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/73353221-3e6d-44e8-bf41-55a0fe57d81f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1120",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:08.743",
      "lastModified" : "2025-02-11T22:15:25.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibenic:simple_giveaways:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.45.1",
            "matchCriteriaId" : "46EAAF00-A09D-49FC-B1EA-EF73F281C92A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c2defd30-7e4c-4a28-8a68-282429061f3f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c2defd30-7e4c-4a28-8a68-282429061f3f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1121",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:08.837",
      "lastModified" : "2025-02-11T22:15:25.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibenic:simple_giveaways:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.45.1",
            "matchCriteriaId" : "46EAAF00-A09D-49FC-B1EA-EF73F281C92A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/7ead9fb9-d81f-47c6-a1b4-21f29183cc15",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/7ead9fb9-d81f-47c6-a1b4-21f29183cc15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1122",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:09.050",
      "lastModified" : "2025-02-11T16:15:31.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its Giveaways options, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibenic:simple_giveaways:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.45.1",
            "matchCriteriaId" : "46EAAF00-A09D-49FC-B1EA-EF73F281C92A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/71f5d630-2726-48c7-b9e5-7bebc786b561",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/71f5d630-2726-48c7-b9e5-7bebc786b561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1406",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:09.250",
      "lastModified" : "2025-02-11T22:15:25.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JetEngine WordPress plugin before 3.1.3.1 includes uploaded files without adequately ensuring that they are not executable, leading to a remote code execution vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crocoblock:jetengine_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.3.1",
            "matchCriteriaId" : "B620FBEC-E2F8-44D5-8251-B119E0A82BE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/2a81b6b1-2339-4889-9c28-1af133df8b65",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/2a81b6b1-2339-4889-9c28-1af133df8b65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1425",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:09.387",
      "lastModified" : "2025-02-11T22:15:25.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg WordPress plugin before 2.7.9.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admins"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:groundhogg:groundhogg:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.7.9.4",
            "matchCriteriaId" : "AD6075DC-F0B7-46EA-BF9F-AB953706EAA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/578f4179-e7be-4963-9379-5e694911b451",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/578f4179-e7be-4963-9379-5e694911b451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1426",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:09.517",
      "lastModified" : "2025-02-11T22:15:25.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Tiles WordPress plugin through 1.1.2 does not ensure that posts to be displayed are not draft/private, allowing any authenticated users, such as subscriber to retrieve the titles of draft and privates posts for example. AN attacker could also retrieve the title of any other type of post."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keetrax:wp_tiles:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "9740CD0D-DF8C-4D57-9B98-7D03C9818E5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/fdd79bb4-d434-4635-bb2b-84d079ecc746",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/fdd79bb4-d434-4635-bb2b-84d079ecc746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1478",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T14:15:09.640",
      "lastModified" : "2025-02-11T15:15:16.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Hummingbird WordPress plugin before 3.4.2 does not validate the generated file path for page cache files before writing them, leading to a path traversal vulnerability in the page cache module."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:incsub:hummingbird:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.4.2",
            "matchCriteriaId" : "BFDFD43C-9614-4ED9-BC16-2067720ECDC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/512a9ba4-01c0-4614-a991-efdc7fe51abe",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/512a9ba4-01c0-4614-a991-efdc7fe51abe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T14:15:09.687",
      "lastModified" : "2025-02-11T16:15:32.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /openvpn/pageswitch.htm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openwrt:luci:22.03.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2AF8349-39DE-4DE4-9781-D6F9AED1D1F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ABB-EL/external-vulnerability-disclosures/security/advisories/GHSA-9gqg-pp5p-q9hg",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openwrt/luci/commit/25983b9fa572a640a7ecd077378df2790266cd61",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openwrt/luci/commit/749268a2cad4a08722e30f66a578e254885f450f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ABB-EL/external-vulnerability-disclosures/security/advisories/GHSA-9gqg-pp5p-q9hg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openwrt/luci/commit/25983b9fa572a640a7ecd077378df2790266cd61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openwrt/luci/commit/749268a2cad4a08722e30f66a578e254885f450f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25392",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T14:15:09.723",
      "lastModified" : "2025-02-11T17:15:17.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Allegro Tech BigFlow <1.6 is vulnerable to Missing SSL Certificate Validation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:allegro:bigflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "8F252DCD-F4B0-442D-89A8-D89639E5EF70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/allegro/bigflow/pull/357",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lutrasecurity.com/en/articles/cve-2023-25392/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/allegro/bigflow/pull/357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lutrasecurity.com/en/articles/cve-2023-25392/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1381",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-10T15:15:07.237",
      "lastModified" : "2025-02-11T18:15:21.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Meta SEO WordPress plugin before 4.5.5 does not validate image file paths before attempting to manipulate the image files, leading to a PHAR deserialization vulnerability. Furthermore, the plugin contains a gadget chain which may be used in certain configurations to achieve remote code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomunited:wp_meta_seo:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.5.5",
            "matchCriteriaId" : "1AF8588E-935E-4D3B-B27D-68525FFDBC83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.wpscan.com/uncovering-a-phar-deserialization-vulnerability-in-wp-meta-seo-and-escalating-to-rce/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f140a928-d297-4bd1-8552-bfebcedba536",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.wpscan.com/uncovering-a-phar-deserialization-vulnerability-in-wp-meta-seo-and-escalating-to-rce/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f140a928-d297-4bd1-8552-bfebcedba536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T15:15:07.310",
      "lastModified" : "2025-02-12T15:15:11.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potentially dangerous file upload through the SharePoint connector."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.3",
            "versionEndExcluding" : "13.3.7646",
            "matchCriteriaId" : "50BB226D-409D-4549-931E-D6668E27CDDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.0.7736",
            "matchCriteriaId" : "6FA25F74-CF2D-4126-91F3-F60C27699AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1",
            "versionEndExcluding" : "14.1.7826",
            "matchCriteriaId" : "C672393B-15D3-4D0B-AA66-FA741EE74A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.2",
            "versionEndExcluding" : "14.2.7930",
            "matchCriteriaId" : "280EAD40-FC61-4DFC-9B4D-6600CA48DC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.3",
            "versionEndExcluding" : "14.3.8026",
            "matchCriteriaId" : "80A1112E-32F1-4A99-9517-15EC1BBF3ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-April-2023",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.progress.com/sitefinity-cms",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.progress.com/sitefinity-cms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T15:15:07.343",
      "lastModified" : "2025-02-11T16:15:38.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potential XSS by privileged users in Sitefinity to media libraries."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.3",
            "versionEndExcluding" : "13.3.7646",
            "matchCriteriaId" : "50BB226D-409D-4549-931E-D6668E27CDDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.0.7736",
            "matchCriteriaId" : "6FA25F74-CF2D-4126-91F3-F60C27699AF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1",
            "versionEndExcluding" : "14.1.7826",
            "matchCriteriaId" : "C672393B-15D3-4D0B-AA66-FA741EE74A60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.2",
            "versionEndExcluding" : "14.2.7930",
            "matchCriteriaId" : "280EAD40-FC61-4DFC-9B4D-6600CA48DC05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.3",
            "versionEndExcluding" : "14.3.8026",
            "matchCriteriaId" : "80A1112E-32F1-4A99-9517-15EC1BBF3ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-April-2023",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.progress.com/sitefinity-cms",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.progress.com/sitefinity-cms",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1969",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-10T16:15:07.043",
      "lastModified" : "2024-11-21T07:40:15.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventory/manage_stock.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-225406 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_eyewear_shop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464A3580-D632-43EB-93EF-E2A1A5736F14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Gear-D/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225406",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225406",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Gear-D/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1970",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-10T16:15:07.140",
      "lastModified" : "2024-11-21T07:40:15.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in yuan1994 tpAdmin 1.3.12. This issue affects the function Upload of the file application\\admin\\controller\\Upload.php. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225407. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tpadmin_project:tpadmin:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74A9547-6431-46C4-A7CE-27E3D13540AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tib36.github.io/2023/04/09/tpAdmin-RCE/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225407",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225407",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tib36.github.io/2023/04/09/tpAdmin-RCE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T16:15:07.200",
      "lastModified" : "2025-02-11T18:15:25.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the loadWithNewGlobal function can be used to invoke the exit and quit methods to exit the Java process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:javadelight:nashorn_sandbox:0.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B6F6D6-AB93-4DE2-944B-40499DA0AE1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:javadelight:nashorn_sandbox:0.2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261E31E2-4ABF-4F34-A3E3-DB878B460123"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/javadelight/delight-nashorn-sandbox/issues/135",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/javadelight/delight-nashorn-sandbox/issues/135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26986",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T16:15:07.237",
      "lastModified" : "2025-02-11T18:15:25.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in China Mobile OA Mailbox PC v2.9.23 allows remote attackers to execute arbitrary commands on a victim host via user interaction with a crafted EML file sent to their OA mailbox."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chinamobileltd:oa_mailbox_pc:2.9.23:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB07A10-B57E-4768-9BBB-92E906342A79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/YZLCQX/0da0a438292a5479470c52dad8210462",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/YZLCQX/Mailbox-remote-command-execution",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/YZLCQX/0da0a438292a5479470c52dad8210462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/YZLCQX/Mailbox-remote-command-execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1971",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-10T17:15:06.937",
      "lastModified" : "2024-11-21T07:40:15.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cna@vuldb.com",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in yuan1994 tpAdmin 1.3.12. Affected is the function remote of the file application\\admin\\controller\\Upload.php. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225408. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tpadmin_project:tpadmin:1.3.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74A9547-6431-46C4-A7CE-27E3D13540AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tib36.github.io/2023/04/09/tpAdmin-SSRF/",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225408",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225408",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tib36.github.io/2023/04/09/tpAdmin-SSRF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T17:15:07.030",
      "lastModified" : "2025-02-11T16:15:37.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in APUS Group Launcher v.3.10.73 and v.3.10.88 allows a remote attacker to execute arbitrary code via the FONT_FILE parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apusapps:launcher:3.10.73:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7065BDFB-6915-44B3-93E7-040078F53581"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apusapps:launcher:3.10.88:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110E36DC-759F-4AD7-86E2-16173462C03A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27650/CVE%20detail.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.apusapps.launcher",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.apusapps.com/en/launcher",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27650/CVE%20detail.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.apusapps.launcher",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.apusapps.com/en/launcher",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28205",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-04-10T19:15:07.237",
      "lastModified" : "2025-10-23T17:50:16.077",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-04-10",
      "cisaActionDue" : "2023-05-01",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Apple Multiple Products WebKit Use-After-Free Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.4.1",
            "matchCriteriaId" : "22BA2E4E-2C6C-47A8-810E-A67D1E8ABA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.5",
            "matchCriteriaId" : "968ADFDD-5716-4F75-BCA2-DD8486ED9618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.4.1",
            "matchCriteriaId" : "8C1711DE-4691-42B7-8661-51B11C3E5B98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.5",
            "matchCriteriaId" : "CE26F1A4-8813-40E4-B939-AFC1F75953CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.4.1",
            "matchCriteriaId" : "96B6C1F1-6F18-43F9-83B6-58A214525B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.3.1",
            "matchCriteriaId" : "39C8733E-1512-47A9-BC06-73276A0EFAF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213720",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213721",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213722",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213723",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28205",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28206",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2023-04-10T19:15:07.273",
      "lastModified" : "2025-10-23T18:02:39.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ]
      },
      "cisaExploitAdd" : "2023-04-10",
      "cisaActionDue" : "2023-05-01",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.5",
            "matchCriteriaId" : "968ADFDD-5716-4F75-BCA2-DD8486ED9618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.4.1",
            "matchCriteriaId" : "8C1711DE-4691-42B7-8661-51B11C3E5B98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.7.5",
            "matchCriteriaId" : "CE26F1A4-8813-40E4-B939-AFC1F75953CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.4.1",
            "matchCriteriaId" : "96B6C1F1-6F18-43F9-83B6-58A214525B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.7.6",
            "matchCriteriaId" : "2C9DAA85-84DE-4D42-A116-7630E0FDAEF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.6.5",
            "matchCriteriaId" : "8FE7C6AA-7557-4383-886E-4613FA0422F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.3.1",
            "matchCriteriaId" : "A28AA212-0560-4E94-9610-51B595DE736C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT213720",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213721",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213723",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213724",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213725",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT213725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28206",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T20:15:10.037",
      "lastModified" : "2025-02-11T16:15:32.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.232",
            "matchCriteriaId" : "10451FB6-3389-4605-A808-4DD38E5FB032"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EC3C2D-406D-4CD1-A1BF-88F63B1F6E93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A3FA9A-DB24-4269-A0A4-77CA9FF73C82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx942:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B466E76-C396-4B47-9E97-998B700F6921"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4198F4D5-A322-47EE-B892-72C3AD34F825"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx944:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E16872-A4E1-4546-918F-97239D8C88AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCF1F44-23E2-412D-B740-C4F6371BA028"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C842AC2-2A47-4C50-A0D9-E96986DBA0F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9445:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D39C09A6-FCDA-4E5B-8D8A-10A28E72A2C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "922062B4-D3B4-4F79-BF97-84A271B020B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9465:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948107F0-8F0D-461F-9438-AC6D8C7D6C84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpc.081.232",
            "matchCriteriaId" : "3EEC579E-AE23-4076-BC65-82EFAA863B78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F579ACB5-C2E8-42BD-95D2-95061A90F30D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtct.081.232",
            "matchCriteriaId" : "6C41084B-7F4F-481F-97AB-ED07D83AD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx432:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3F5A3E-2903-4761-9543-0E0FDE12E9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3142:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EECF0-E7D5-43CC-9518-948EC1141BAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtpm.081.232",
            "matchCriteriaId" : "12804945-54A6-4119-8A5E-20D52649E591"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F8E629-1386-4BE2-BB77-9E8848447C49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmm.081.232",
            "matchCriteriaId" : "4B4C1F27-EAF3-4E59-9772-55F256AA8450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB85C612-9809-42C3-A127-926BE020ACE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F532C112-9B6B-416D-9B86-F153C493804F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4606439C-2F39-48CB-BDCC-19CE0FC3A203"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D8D43A-7A81-494E-AD5A-0DC5F54C0071"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslsg.081.232",
            "matchCriteriaId" : "9E00A58D-320B-4FE6-9593-94B407E16D10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2A7AC6-85E8-47F4-A6E1-E70105053899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlsg.081.232",
            "matchCriteriaId" : "A78A08BD-F20C-4BFE-83F1-E6933A47F3E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52775C7A-5ED3-412B-9765-C8A26D7DAEDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.232",
            "matchCriteriaId" : "FE8F3B57-BF60-4D6E-A3D7-6747FCC789DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A789D5F-A457-4FE8-88AD-4697EA0D38B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDF3AF9-D84E-4491-AD76-CF03EAA10463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4B4172-AF47-4CA5-8404-2834AD1E3114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A517255B-A5DB-4724-AA30-F89CB6D0D982"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFA9698-5E53-4C15-AD28-7B330CE688E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33822D70-E578-4518-A89E-586E48F0C093"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlbd.081.232",
            "matchCriteriaId" : "9B160370-FDFF-4A27-9D30-12CDF6CBD126"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DFF38B-E948-4DFF-B4AF-5B0D2D72B8FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F2F52D-9616-47F0-A0B8-EF1DC61D88AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95DEE18-CDEA-4AB4-9B3D-C1712720C4CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B2AB4-CB58-484B-AFD0-277EABF06985"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.232",
            "matchCriteriaId" : "AF2E8636-1A16-41C1-A36C-92790926678B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF936040-A3F2-42FA-997E-3DA8461E71B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C7770D-E3F8-4754-95D0-6A231D46F158"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DBB30-746A-4103-8303-6CAF563658A9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76B6022-D160-40E4-B533-6FAC3B43B190"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87CFBE1-5158-44F3-B2E3-19CB30A241C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A77A401-9EAE-49BA-8B75-F9FF7EAB4398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D10416B-76DC-4265-970E-38EB1E17C0B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F466924-8C21-4361-B7AC-5DED39B5083D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBD07B7-AAF5-428C-B03F-7C823240219D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33285B7-DF76-4DDD-BE74-AFC12B8DFF0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms621:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455281E2-37FF-4E7C-93E8-F0DC3B0CE5F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B551EFE-75DC-4D00-BF17-D7EF249CDF2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxngm.081.232",
            "matchCriteriaId" : "F3C9D27E-A180-4E8F-AD3A-14F748BFCB8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB750119-27F6-4396-B57B-31433B7B530E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FBE71-B5A5-465E-8FB1-BCD96975AD66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.232",
            "matchCriteriaId" : "9714DFB2-71EC-48EF-8C7D-180E9CF25F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634239D9-C252-4A62-9011-EC84C350B18E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8865944-83D8-4A28-9C7D-7B4B49F7A336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E680BC56-B202-4E9D-8198-E1B6A3601A99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62FB932-5BCE-4367-A364-D02842C0016E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F495C0-11DE-4B21-8258-C1E4D45A2C0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD24F8-9ACF-4291-B1F4-3C06DC059E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70992A9D-5C32-49AB-8817-6B52C64E4E3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583FDFAC-3865-4F4C-AF65-96F38D368669"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DCC657-E900-4A93-B9C5-4194C33ECDE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CDCA43-88D9-4456-9A70-112618837BD0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.232",
            "matchCriteriaId" : "89F469FF-525C-4D44-AE59-2EDA5D1AEE15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95ACDD2C-B717-4283-9424-B5BC2BD25644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CA5145-011E-4E76-998B-272ED0CAF2F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299DED47-FE60-46FE-9097-11A3732DC436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms823:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8A8233-6CE3-4D36-B1D4-BC46ED299C10"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9233CF87-7E79-4322-B389-3D9731F60DB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.232",
            "matchCriteriaId" : "13851619-F91B-445F-8194-3D608112EE2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7641B7-4665-4DD6-954C-E4F0E5BA64BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C51550-986B-410D-BD55-083E6EC2B846"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6976E38-574A-4C73-A204-2C4AC56C5487"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4C2EF9-8328-40DF-AEB2-6AC17E541284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.232",
            "matchCriteriaId" : "98740BF5-F515-45D8-843B-263E8B35B84D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2770:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6AD09BB-1693-41BC-833C-8FA41506F257"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF88693A-50D8-471B-A50A-E8BB1CCF11A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx722:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBAD67F-64B8-4451-AFE5-FF403D659664"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A408158-0B98-41BC-86D1-FF0754936145"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9808F6E2-5D9A-4016-AE5B-FFAB814D90BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B609A2-FEFE-414E-B3C2-4961A4871FFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0AA674-75B3-4D6A-B2BB-6CC7EC6A836D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65DAFB2-F4E3-4290-8282-738BF6222B4B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7355:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BEEF7-A8FB-4951-8784-EDED0D766C9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC95D3-55D5-4BE2-94A3-148EB33D4707"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DAB6F85-C543-4D9C-B067-838C8F02AF13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DE4CF6-250C-4006-B43E-A6882B75FB31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B04C61-3778-4E64-A4EC-981107894747"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.232",
            "matchCriteriaId" : "06F77770-6E5B-4EC2-A89E-672D2F3DF6D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAD3B2F-27D5-4BEC-B077-DC4FBA003CFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A68A21-225E-423C-AAE0-14090219C821"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6035F21-30E3-4F1D-BFE4-FF85B448ACEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2767C20-AEF6-4579-9FE9-3FA29D6EAF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbn.081.232",
            "matchCriteriaId" : "FCB2FC66-BBEB-4077-A5DB-77E3E5532FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B4CB69-F0A5-481B-8299-E4F0C5A3CF35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDE9642-279D-4D7E-B84E-99F5C018CF56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3EA4D6-5864-42C8-B387-C7AAB57CBD5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbl.081.232",
            "matchCriteriaId" : "1B523A9F-CE99-476F-8327-6043D0963EAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803DB805-F722-4805-8FAF-7BBFF64D61BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D63AA7F-B09F-4EF5-A852-BD24539E8EB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstzj.081.232",
            "matchCriteriaId" : "F9DDB467-D24E-4338-A21F-9D3A4B177582"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32FC324-86F1-46FF-8BC9-D07836FF4788"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99133BE3-FCD9-4E0C-A70A-9BFAA4FE4FFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.232",
            "matchCriteriaId" : "99F6EE49-07B0-4DAF-9B0D-02CCDDCD4D4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF902A2-386C-476F-8072-6BEFC98CD714"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F3FBD9-DAC0-4899-B86B-A79216654F12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAC5415-5C09-430C-A720-6844B29DB61E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1EB502-E0F7-4919-B1E4-A74B0691DE1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E7B4F1-ABF2-450B-80EA-170FB7274CDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA90E36-F0CD-47E2-91E4-5FB7C3FFF49A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3980C15B-F3B4-4F9B-8FBA-1DF7D61C77EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9088F2C-DC67-446D-8C50-AB2FEB64DEAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc232:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A596E0-0CF5-4902-AD78-798C6DE5A1E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3E6AB1-3272-4D8E-ACB3-767DEBDCED6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.sb7.p234",
            "matchCriteriaId" : "B0B9A6AD-2F90-45B0-8529-65875C62D602"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E5518D-CB23-485A-9963-61130A5DBC50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E12878-A625-4132-829D-831626601E24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9552AFCD-342F-4609-A30A-8F8AAAC800B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C67FAF3-7FF5-4EE6-BD58-30EA076632DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn2.p234",
            "matchCriteriaId" : "50089957-05AE-4951-8DF8-FFB5786A7450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29B39AF-5995-4182-AEA2-DA2DC0B301C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780146FF-B2A1-4E36-A39D-ACA855F6B6F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475FC7BB-B0F1-4A92-A960-CBE4B5D5C3BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F346873-FAC6-4285-BAFF-F4FEF879BA74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58869BC2-4312-4400-BA25-1C8CFF6B29CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFEF4E79-54EC-44E6-A6E4-81EF6F009DA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C34B111-487D-4826-9155-1976C01A5885"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8133E135-52F0-44D9-A905-C4D658BB4FCA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn4.p234",
            "matchCriteriaId" : "1E8F237E-8099-49F5-9C01-F58F54769BAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E49B15-8841-4D2B-9330-0AF6491D50AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD27A4E-227D-4A8D-9F2E-326235632475"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8648D99B-5FCD-475F-B393-A65F23100693"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn7.p234",
            "matchCriteriaId" : "81B5117D-8682-4D4C-BF20-76864B29A059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FB7B24-D362-4C72-A611-11DB6A38ECEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21769FA-B269-4DC9-BDCE-21E22758548E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn7.p234",
            "matchCriteriaId" : "81B5117D-8682-4D4C-BF20-76864B29A059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FB7B24-D362-4C72-A611-11DB6A38ECEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21769FA-B269-4DC9-BDCE-21E22758548E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.tu.p234",
            "matchCriteriaId" : "00BAC02F-B104-4335-9872-71EA9DC14F25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493415AD-B0B0-43F0-8831-1EB1A0DA2E7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14A85F9-B2B8-4210-8FB3-33DB52803F5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C616A5-0008-4A1A-B84E-15DF697CDC9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100AF863-37A5-4265-9779-DFD3E009CC32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF515935-1118-43DC-AE2B-8382E93C7297"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB5E528-E975-4480-AE5C-7081836B9ED8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD23AA59-2714-4EE2-A9A9-70A0556B8064"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56EF54E-BEB4-463B-A5C4-C30B205AD32E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807F197F-D330-4961-B494-9C391772C4B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55FC55FD-6CF6-4F89-A3DB-5A9235F4565C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEAA1A57-2D20-4D16-8C01-55EF4450E00F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145FE266-3E30-45CC-977D-5B21EC99B44A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C00C2D0-5FC3-4ABD-A73C-F91F649694CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2402362D-E65C-4375-88ED-513BD2C59B3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5405193-EF2C-4284-AF81-F048EC328F1B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72FB99BA-D39C-4849-853B-27AFAC823456"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.sa.p234",
            "matchCriteriaId" : "95ED04DE-7AA7-4135-9894-42EAE01327F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2883713-1B32-45E8-93E6-14DD7C84F8C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.mg.p234",
            "matchCriteriaId" : "157EDA59-86CE-48CC-B225-098F5ADC7F3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92B170E-C9DC-4321-9A47-AC23FCB8E0F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8758E2D2-4289-48DD-8D1C-62F750A68EB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECF3BAC-D13A-4491-98D1-4087B0A77C44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B02A0AC-DF0E-4415-BACF-89720BA59B5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D65866F-02B7-42C6-897B-32CDFD1C4954"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D60095D-4219-4253-B297-1BD089B794ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.jd.p234",
            "matchCriteriaId" : "82E32EF0-43A5-4E35-A6CC-80A589247314"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2E669-0926-424C-8B86-9B93CE908E71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vyl.p234",
            "matchCriteriaId" : "3A31FB87-CABE-4900-85D4-FD0A05C8D2EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614C8E51-6772-4D8E-9A88-A9527F591CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7327DE-F263-45A4-A49A-60575E144B49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vy2.p234",
            "matchCriteriaId" : "A46F4F50-441D-484E-8D1F-45F94C3EAA7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBF9CF4-717D-482D-B3E7-11AD020C3D9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F356A83-68DA-48AA-8A3F-C2569B515039"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vy4.p234",
            "matchCriteriaId" : "4AC8372B-D4A4-4F85-A786-48607DEC7478"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392214B8-A623-4C97-B88E-18CA35219B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A345F94-77AB-461E-9D76-86FA91FF6EC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ADE9C7-10F5-4A7F-9D0A-44E8DC6B5CA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm2.p234",
            "matchCriteriaId" : "7CD50456-BEF5-4648-9A3F-8393A6603081"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120D793F-6E06-4BC4-BF05-AFF46A544620"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C025E9F-4499-4741-AFA8-B3F30A84F3F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm4.p234",
            "matchCriteriaId" : "8F39D5DC-3914-4DC6-BE77-5A56A798D7EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5930B1-9B1A-4C89-9B3F-79C2628CC66C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165E0437-1236-4572-8BD3-AC8EA767DFB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90B007-DEE3-496B-A475-899288F03C90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm7.p234",
            "matchCriteriaId" : "B0CDEE9E-ABEB-45A6-A87C-07AD94B5498D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0D0C1A-C7E1-4FAD-9A02-1200A9A61CCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134399DF-8233-4B0E-8995-F9F4084C9E95"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "254C6BED-F09C-4654-BCB5-B768B6C01654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.cm2.p760",
            "matchCriteriaId" : "E9980E57-2A77-46FF-8A77-1C3BF7EA4059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A0A7E6-4E78-4B26-ACF2-8D8C5C6DCDD7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.cm4.p760",
            "matchCriteriaId" : "51D8D4D6-D790-4694-B820-13BA8DF3684D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "250FDD9D-22A5-4678-8472-841806AEEBDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC24D0C-6A8A-469C-8BE9-4D1F4948FAAF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hc.p760",
            "matchCriteriaId" : "9FE57F43-3F55-417F-89A1-7447BDD50DBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CB4A43-620C-444F-8195-8C3A768E0AE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC422-7DF1-4490-A694-FF4C5F0A93ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hv.p760",
            "matchCriteriaId" : "46997857-CC0E-49CB-919D-79F679B8EC1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F49A46-CC8C-4EE8-BAC0-6B149DF6E02D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.tp.p760",
            "matchCriteriaId" : "1F6106B5-D8D9-4736-BE8E-84A49B44EE94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B41B754-388B-4C2F-80C2-AAE7F1D0E49E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.vk.p760",
            "matchCriteriaId" : "1CDA249E-AA9D-4BAD-9E51-710B83F00A3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D568DD45-4C48-4E83-B4EC-9DC993F64668"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5266B66-422E-48AC-A870-0C7126F82811"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.ny.p760",
            "matchCriteriaId" : "B8C65CCC-1305-41C5-B8EB-A0EE72EF5191"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FCC26F-68CC-40A7-954A-0064931A2CEC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690A1F9E-5C7B-4287-B79F-A524E5FB8921"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74475B2B-E33B-4F90-AB8E-BF0444141937"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.mr.p760",
            "matchCriteriaId" : "86486F32-BFD8-4C6A-B087-9B429F735923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F722053-DE00-4F16-B380-E4CE2509512E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF0681E-D245-4294-BB77-C51FA1881562"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E2A88-0160-4B36-A4F9-0AB424FBE92A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71A2E3-1F3B-4CA0-BCA3-3C0038166CA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hk.p760",
            "matchCriteriaId" : "90439A93-20DE-4FB2-BCBD-872197C7D46B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE3DE4-0F65-4591-A011-2665FE829670"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A012A8B-26D5-4C90-815E-DFE0FB98BAF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.tq.p760",
            "matchCriteriaId" : "CB254C47-6A2A-4622-A401-73C595F30AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72601869-C035-4446-9AEA-FC63F837B6D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6922B7-94AE-4CCA-A0CB-E9C6FAD6E8F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2ECE52-74AE-45BE-A2BF-E72CECE417FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "045C3434-933C-4288-A0E1-36B6A493B601"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D5E005-4175-4803-A09D-348240EC103D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.jr.p760",
            "matchCriteriaId" : "38F8D4D6-A6F2-45EE-B06B-E90C8F482E40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D700553E-6B0C-4857-9063-D1B4668349AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.sk.p838",
            "matchCriteriaId" : "DFE36C76-2AE4-41D8-A925-917C53D6EC44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c734:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1812A3ED-B326-443A-A3C7-F554322FE0BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.ske.p838",
            "matchCriteriaId" : "6EB2C85E-8635-42B2-A7CD-69DC693827AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c736:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F54A331A-97D2-4C98-8BDF-FB03D29E2A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.lbh.p838",
            "matchCriteriaId" : "77491EE3-E56B-44A1-9DDC-4C89CEF863E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:e46x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEF48A9-4DB6-4B70-960D-7DE8B0A382FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.jp.p838",
            "matchCriteriaId" : "A13F0B63-EA89-4E05-B05D-C56A3B4819B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:t65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C555BB-5B72-4B16-B1A5-EE6313F5B829"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.bs.p838",
            "matchCriteriaId" : "E9045502-41C2-445E-BEC1-46A7473F31C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x46x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA3AE69-430A-435B-9680-EEE8F964FB6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.mn.p838",
            "matchCriteriaId" : "7CF57EF2-D46E-4EF4-82EC-C0EF8A5667C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595374B9-5554-451E-A122-4DD25200C9F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.mn.p838",
            "matchCriteriaId" : "7CF57EF2-D46E-4EF4-82EC-C0EF8A5667C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595374B9-5554-451E-A122-4DD25200C9F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.fl.p838",
            "matchCriteriaId" : "4F16936B-89B6-4BE8-BE98-595D85CBFBBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x73x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D041F36B-7CC8-472E-98F2-AA96FD16D527"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lp.jb.p837",
            "matchCriteriaId" : "7DC56DB9-2942-4788-97C6-5292D5BFB494"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:w850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB4E3C5-CBCE-4713-A552-7A00AAEDA312"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lp.sp.p837",
            "matchCriteriaId" : "8DEA71E7-AA42-439F-B655-DC6E024D098C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x86x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C369427B-75A9-44FD-91D1-050CDE442ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26063.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26063.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26064",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T20:15:10.207",
      "lastModified" : "2025-02-11T16:15:33.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.232",
            "matchCriteriaId" : "10451FB6-3389-4605-A808-4DD38E5FB032"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EC3C2D-406D-4CD1-A1BF-88F63B1F6E93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A3FA9A-DB24-4269-A0A4-77CA9FF73C82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx942:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B466E76-C396-4B47-9E97-998B700F6921"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4198F4D5-A322-47EE-B892-72C3AD34F825"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx944:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E16872-A4E1-4546-918F-97239D8C88AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCF1F44-23E2-412D-B740-C4F6371BA028"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C842AC2-2A47-4C50-A0D9-E96986DBA0F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9445:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D39C09A6-FCDA-4E5B-8D8A-10A28E72A2C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "922062B4-D3B4-4F79-BF97-84A271B020B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9465:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948107F0-8F0D-461F-9438-AC6D8C7D6C84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpc.081.232",
            "matchCriteriaId" : "3EEC579E-AE23-4076-BC65-82EFAA863B78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F579ACB5-C2E8-42BD-95D2-95061A90F30D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtct.081.232",
            "matchCriteriaId" : "6C41084B-7F4F-481F-97AB-ED07D83AD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx432:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3F5A3E-2903-4761-9543-0E0FDE12E9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3142:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EECF0-E7D5-43CC-9518-948EC1141BAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtpm.081.232",
            "matchCriteriaId" : "12804945-54A6-4119-8A5E-20D52649E591"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F8E629-1386-4BE2-BB77-9E8848447C49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmm.081.232",
            "matchCriteriaId" : "4B4C1F27-EAF3-4E59-9772-55F256AA8450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB85C612-9809-42C3-A127-926BE020ACE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F532C112-9B6B-416D-9B86-F153C493804F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4606439C-2F39-48CB-BDCC-19CE0FC3A203"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D8D43A-7A81-494E-AD5A-0DC5F54C0071"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslsg.081.232",
            "matchCriteriaId" : "9E00A58D-320B-4FE6-9593-94B407E16D10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2A7AC6-85E8-47F4-A6E1-E70105053899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlsg.081.232",
            "matchCriteriaId" : "A78A08BD-F20C-4BFE-83F1-E6933A47F3E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52775C7A-5ED3-412B-9765-C8A26D7DAEDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.232",
            "matchCriteriaId" : "FE8F3B57-BF60-4D6E-A3D7-6747FCC789DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A789D5F-A457-4FE8-88AD-4697EA0D38B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDF3AF9-D84E-4491-AD76-CF03EAA10463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4B4172-AF47-4CA5-8404-2834AD1E3114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A517255B-A5DB-4724-AA30-F89CB6D0D982"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFA9698-5E53-4C15-AD28-7B330CE688E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33822D70-E578-4518-A89E-586E48F0C093"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlbd.081.232",
            "matchCriteriaId" : "9B160370-FDFF-4A27-9D30-12CDF6CBD126"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DFF38B-E948-4DFF-B4AF-5B0D2D72B8FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F2F52D-9616-47F0-A0B8-EF1DC61D88AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95DEE18-CDEA-4AB4-9B3D-C1712720C4CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B2AB4-CB58-484B-AFD0-277EABF06985"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.232",
            "matchCriteriaId" : "AF2E8636-1A16-41C1-A36C-92790926678B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF936040-A3F2-42FA-997E-3DA8461E71B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C7770D-E3F8-4754-95D0-6A231D46F158"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DBB30-746A-4103-8303-6CAF563658A9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76B6022-D160-40E4-B533-6FAC3B43B190"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87CFBE1-5158-44F3-B2E3-19CB30A241C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A77A401-9EAE-49BA-8B75-F9FF7EAB4398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D10416B-76DC-4265-970E-38EB1E17C0B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F466924-8C21-4361-B7AC-5DED39B5083D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBD07B7-AAF5-428C-B03F-7C823240219D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33285B7-DF76-4DDD-BE74-AFC12B8DFF0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms621:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455281E2-37FF-4E7C-93E8-F0DC3B0CE5F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B551EFE-75DC-4D00-BF17-D7EF249CDF2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxngm.081.232",
            "matchCriteriaId" : "F3C9D27E-A180-4E8F-AD3A-14F748BFCB8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB750119-27F6-4396-B57B-31433B7B530E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FBE71-B5A5-465E-8FB1-BCD96975AD66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.232",
            "matchCriteriaId" : "9714DFB2-71EC-48EF-8C7D-180E9CF25F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634239D9-C252-4A62-9011-EC84C350B18E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8865944-83D8-4A28-9C7D-7B4B49F7A336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E680BC56-B202-4E9D-8198-E1B6A3601A99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62FB932-5BCE-4367-A364-D02842C0016E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F495C0-11DE-4B21-8258-C1E4D45A2C0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD24F8-9ACF-4291-B1F4-3C06DC059E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70992A9D-5C32-49AB-8817-6B52C64E4E3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583FDFAC-3865-4F4C-AF65-96F38D368669"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DCC657-E900-4A93-B9C5-4194C33ECDE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CDCA43-88D9-4456-9A70-112618837BD0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.232",
            "matchCriteriaId" : "89F469FF-525C-4D44-AE59-2EDA5D1AEE15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95ACDD2C-B717-4283-9424-B5BC2BD25644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CA5145-011E-4E76-998B-272ED0CAF2F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299DED47-FE60-46FE-9097-11A3732DC436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms823:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8A8233-6CE3-4D36-B1D4-BC46ED299C10"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9233CF87-7E79-4322-B389-3D9731F60DB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.232",
            "matchCriteriaId" : "13851619-F91B-445F-8194-3D608112EE2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7641B7-4665-4DD6-954C-E4F0E5BA64BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C51550-986B-410D-BD55-083E6EC2B846"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6976E38-574A-4C73-A204-2C4AC56C5487"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4C2EF9-8328-40DF-AEB2-6AC17E541284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.232",
            "matchCriteriaId" : "98740BF5-F515-45D8-843B-263E8B35B84D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2770:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6AD09BB-1693-41BC-833C-8FA41506F257"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF88693A-50D8-471B-A50A-E8BB1CCF11A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx722:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBAD67F-64B8-4451-AFE5-FF403D659664"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A408158-0B98-41BC-86D1-FF0754936145"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9808F6E2-5D9A-4016-AE5B-FFAB814D90BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B609A2-FEFE-414E-B3C2-4961A4871FFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0AA674-75B3-4D6A-B2BB-6CC7EC6A836D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65DAFB2-F4E3-4290-8282-738BF6222B4B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7355:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BEEF7-A8FB-4951-8784-EDED0D766C9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC95D3-55D5-4BE2-94A3-148EB33D4707"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DAB6F85-C543-4D9C-B067-838C8F02AF13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DE4CF6-250C-4006-B43E-A6882B75FB31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B04C61-3778-4E64-A4EC-981107894747"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.232",
            "matchCriteriaId" : "06F77770-6E5B-4EC2-A89E-672D2F3DF6D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAD3B2F-27D5-4BEC-B077-DC4FBA003CFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A68A21-225E-423C-AAE0-14090219C821"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6035F21-30E3-4F1D-BFE4-FF85B448ACEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2767C20-AEF6-4579-9FE9-3FA29D6EAF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbn.081.232",
            "matchCriteriaId" : "FCB2FC66-BBEB-4077-A5DB-77E3E5532FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B4CB69-F0A5-481B-8299-E4F0C5A3CF35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDE9642-279D-4D7E-B84E-99F5C018CF56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3EA4D6-5864-42C8-B387-C7AAB57CBD5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbl.081.232",
            "matchCriteriaId" : "1B523A9F-CE99-476F-8327-6043D0963EAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803DB805-F722-4805-8FAF-7BBFF64D61BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D63AA7F-B09F-4EF5-A852-BD24539E8EB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstzj.081.232",
            "matchCriteriaId" : "F9DDB467-D24E-4338-A21F-9D3A4B177582"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32FC324-86F1-46FF-8BC9-D07836FF4788"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99133BE3-FCD9-4E0C-A70A-9BFAA4FE4FFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.232",
            "matchCriteriaId" : "99F6EE49-07B0-4DAF-9B0D-02CCDDCD4D4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF902A2-386C-476F-8072-6BEFC98CD714"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F3FBD9-DAC0-4899-B86B-A79216654F12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAC5415-5C09-430C-A720-6844B29DB61E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1EB502-E0F7-4919-B1E4-A74B0691DE1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E7B4F1-ABF2-450B-80EA-170FB7274CDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA90E36-F0CD-47E2-91E4-5FB7C3FFF49A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3980C15B-F3B4-4F9B-8FBA-1DF7D61C77EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9088F2C-DC67-446D-8C50-AB2FEB64DEAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc232:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A596E0-0CF5-4902-AD78-798C6DE5A1E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3E6AB1-3272-4D8E-ACB3-767DEBDCED6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.sb7.p234",
            "matchCriteriaId" : "B0B9A6AD-2F90-45B0-8529-65875C62D602"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E5518D-CB23-485A-9963-61130A5DBC50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E12878-A625-4132-829D-831626601E24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9552AFCD-342F-4609-A30A-8F8AAAC800B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C67FAF3-7FF5-4EE6-BD58-30EA076632DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn2.p234",
            "matchCriteriaId" : "50089957-05AE-4951-8DF8-FFB5786A7450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29B39AF-5995-4182-AEA2-DA2DC0B301C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780146FF-B2A1-4E36-A39D-ACA855F6B6F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475FC7BB-B0F1-4A92-A960-CBE4B5D5C3BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F346873-FAC6-4285-BAFF-F4FEF879BA74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58869BC2-4312-4400-BA25-1C8CFF6B29CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFEF4E79-54EC-44E6-A6E4-81EF6F009DA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C34B111-487D-4826-9155-1976C01A5885"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8133E135-52F0-44D9-A905-C4D658BB4FCA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn4.p234",
            "matchCriteriaId" : "1E8F237E-8099-49F5-9C01-F58F54769BAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E49B15-8841-4D2B-9330-0AF6491D50AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD27A4E-227D-4A8D-9F2E-326235632475"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8648D99B-5FCD-475F-B393-A65F23100693"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn7.p234",
            "matchCriteriaId" : "81B5117D-8682-4D4C-BF20-76864B29A059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FB7B24-D362-4C72-A611-11DB6A38ECEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21769FA-B269-4DC9-BDCE-21E22758548E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn7.p234",
            "matchCriteriaId" : "81B5117D-8682-4D4C-BF20-76864B29A059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FB7B24-D362-4C72-A611-11DB6A38ECEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21769FA-B269-4DC9-BDCE-21E22758548E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.tu.p234",
            "matchCriteriaId" : "00BAC02F-B104-4335-9872-71EA9DC14F25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493415AD-B0B0-43F0-8831-1EB1A0DA2E7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14A85F9-B2B8-4210-8FB3-33DB52803F5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C616A5-0008-4A1A-B84E-15DF697CDC9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100AF863-37A5-4265-9779-DFD3E009CC32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF515935-1118-43DC-AE2B-8382E93C7297"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB5E528-E975-4480-AE5C-7081836B9ED8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD23AA59-2714-4EE2-A9A9-70A0556B8064"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56EF54E-BEB4-463B-A5C4-C30B205AD32E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807F197F-D330-4961-B494-9C391772C4B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55FC55FD-6CF6-4F89-A3DB-5A9235F4565C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEAA1A57-2D20-4D16-8C01-55EF4450E00F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145FE266-3E30-45CC-977D-5B21EC99B44A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C00C2D0-5FC3-4ABD-A73C-F91F649694CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2402362D-E65C-4375-88ED-513BD2C59B3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5405193-EF2C-4284-AF81-F048EC328F1B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72FB99BA-D39C-4849-853B-27AFAC823456"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.sa.p234",
            "matchCriteriaId" : "95ED04DE-7AA7-4135-9894-42EAE01327F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2883713-1B32-45E8-93E6-14DD7C84F8C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.mg.p234",
            "matchCriteriaId" : "157EDA59-86CE-48CC-B225-098F5ADC7F3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92B170E-C9DC-4321-9A47-AC23FCB8E0F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8758E2D2-4289-48DD-8D1C-62F750A68EB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECF3BAC-D13A-4491-98D1-4087B0A77C44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B02A0AC-DF0E-4415-BACF-89720BA59B5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D65866F-02B7-42C6-897B-32CDFD1C4954"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D60095D-4219-4253-B297-1BD089B794ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.jd.p234",
            "matchCriteriaId" : "82E32EF0-43A5-4E35-A6CC-80A589247314"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2E669-0926-424C-8B86-9B93CE908E71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vyl.p234",
            "matchCriteriaId" : "3A31FB87-CABE-4900-85D4-FD0A05C8D2EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614C8E51-6772-4D8E-9A88-A9527F591CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7327DE-F263-45A4-A49A-60575E144B49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vy2.p234",
            "matchCriteriaId" : "A46F4F50-441D-484E-8D1F-45F94C3EAA7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBF9CF4-717D-482D-B3E7-11AD020C3D9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F356A83-68DA-48AA-8A3F-C2569B515039"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vy4.p234",
            "matchCriteriaId" : "4AC8372B-D4A4-4F85-A786-48607DEC7478"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392214B8-A623-4C97-B88E-18CA35219B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A345F94-77AB-461E-9D76-86FA91FF6EC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ADE9C7-10F5-4A7F-9D0A-44E8DC6B5CA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm2.p234",
            "matchCriteriaId" : "7CD50456-BEF5-4648-9A3F-8393A6603081"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120D793F-6E06-4BC4-BF05-AFF46A544620"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C025E9F-4499-4741-AFA8-B3F30A84F3F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm4.p234",
            "matchCriteriaId" : "8F39D5DC-3914-4DC6-BE77-5A56A798D7EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5930B1-9B1A-4C89-9B3F-79C2628CC66C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165E0437-1236-4572-8BD3-AC8EA767DFB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90B007-DEE3-496B-A475-899288F03C90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm7.p234",
            "matchCriteriaId" : "B0CDEE9E-ABEB-45A6-A87C-07AD94B5498D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0D0C1A-C7E1-4FAD-9A02-1200A9A61CCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134399DF-8233-4B0E-8995-F9F4084C9E95"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "254C6BED-F09C-4654-BCB5-B768B6C01654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.cm2.p760",
            "matchCriteriaId" : "E9980E57-2A77-46FF-8A77-1C3BF7EA4059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A0A7E6-4E78-4B26-ACF2-8D8C5C6DCDD7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.cm4.p760",
            "matchCriteriaId" : "51D8D4D6-D790-4694-B820-13BA8DF3684D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "250FDD9D-22A5-4678-8472-841806AEEBDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC24D0C-6A8A-469C-8BE9-4D1F4948FAAF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hc.p760",
            "matchCriteriaId" : "9FE57F43-3F55-417F-89A1-7447BDD50DBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CB4A43-620C-444F-8195-8C3A768E0AE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC422-7DF1-4490-A694-FF4C5F0A93ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hv.p760",
            "matchCriteriaId" : "46997857-CC0E-49CB-919D-79F679B8EC1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F49A46-CC8C-4EE8-BAC0-6B149DF6E02D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.tp.p760",
            "matchCriteriaId" : "1F6106B5-D8D9-4736-BE8E-84A49B44EE94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B41B754-388B-4C2F-80C2-AAE7F1D0E49E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.vk.p760",
            "matchCriteriaId" : "1CDA249E-AA9D-4BAD-9E51-710B83F00A3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D568DD45-4C48-4E83-B4EC-9DC993F64668"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5266B66-422E-48AC-A870-0C7126F82811"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.ny.p760",
            "matchCriteriaId" : "B8C65CCC-1305-41C5-B8EB-A0EE72EF5191"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FCC26F-68CC-40A7-954A-0064931A2CEC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690A1F9E-5C7B-4287-B79F-A524E5FB8921"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74475B2B-E33B-4F90-AB8E-BF0444141937"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.mr.p760",
            "matchCriteriaId" : "86486F32-BFD8-4C6A-B087-9B429F735923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F722053-DE00-4F16-B380-E4CE2509512E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF0681E-D245-4294-BB77-C51FA1881562"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E2A88-0160-4B36-A4F9-0AB424FBE92A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71A2E3-1F3B-4CA0-BCA3-3C0038166CA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hk.p760",
            "matchCriteriaId" : "90439A93-20DE-4FB2-BCBD-872197C7D46B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE3DE4-0F65-4591-A011-2665FE829670"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A012A8B-26D5-4C90-815E-DFE0FB98BAF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.tq.p760",
            "matchCriteriaId" : "CB254C47-6A2A-4622-A401-73C595F30AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72601869-C035-4446-9AEA-FC63F837B6D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6922B7-94AE-4CCA-A0CB-E9C6FAD6E8F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2ECE52-74AE-45BE-A2BF-E72CECE417FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "045C3434-933C-4288-A0E1-36B6A493B601"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D5E005-4175-4803-A09D-348240EC103D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.jr.p760",
            "matchCriteriaId" : "38F8D4D6-A6F2-45EE-B06B-E90C8F482E40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D700553E-6B0C-4857-9063-D1B4668349AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.sk.p838",
            "matchCriteriaId" : "DFE36C76-2AE4-41D8-A925-917C53D6EC44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c734:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1812A3ED-B326-443A-A3C7-F554322FE0BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.ske.p838",
            "matchCriteriaId" : "6EB2C85E-8635-42B2-A7CD-69DC693827AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c736:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F54A331A-97D2-4C98-8BDF-FB03D29E2A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.lbh.p838",
            "matchCriteriaId" : "77491EE3-E56B-44A1-9DDC-4C89CEF863E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:e46x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEF48A9-4DB6-4B70-960D-7DE8B0A382FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.jp.p838",
            "matchCriteriaId" : "A13F0B63-EA89-4E05-B05D-C56A3B4819B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:t65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C555BB-5B72-4B16-B1A5-EE6313F5B829"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.bs.p838",
            "matchCriteriaId" : "E9045502-41C2-445E-BEC1-46A7473F31C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x46x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA3AE69-430A-435B-9680-EEE8F964FB6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.mn.p838",
            "matchCriteriaId" : "7CF57EF2-D46E-4EF4-82EC-C0EF8A5667C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595374B9-5554-451E-A122-4DD25200C9F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.mn.p838",
            "matchCriteriaId" : "7CF57EF2-D46E-4EF4-82EC-C0EF8A5667C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595374B9-5554-451E-A122-4DD25200C9F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.fl.p838",
            "matchCriteriaId" : "4F16936B-89B6-4BE8-BE98-595D85CBFBBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x73x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D041F36B-7CC8-472E-98F2-AA96FD16D527"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lp.jb.p837",
            "matchCriteriaId" : "7DC56DB9-2942-4788-97C6-5292D5BFB494"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:w850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB4E3C5-CBCE-4713-A552-7A00AAEDA312"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lp.sp.p837",
            "matchCriteriaId" : "8DEA71E7-AA42-439F-B655-DC6E024D098C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x86x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C369427B-75A9-44FD-91D1-050CDE442ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26064.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26064.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T20:15:10.260",
      "lastModified" : "2025-02-11T16:15:34.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Lexmark devices through 2023-02-19 have an Integer Overflow."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.232",
            "matchCriteriaId" : "10451FB6-3389-4605-A808-4DD38E5FB032"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EC3C2D-406D-4CD1-A1BF-88F63B1F6E93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A3FA9A-DB24-4269-A0A4-77CA9FF73C82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx942:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B466E76-C396-4B47-9E97-998B700F6921"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4198F4D5-A322-47EE-B892-72C3AD34F825"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx944:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E16872-A4E1-4546-918F-97239D8C88AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCF1F44-23E2-412D-B740-C4F6371BA028"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C842AC2-2A47-4C50-A0D9-E96986DBA0F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9445:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D39C09A6-FCDA-4E5B-8D8A-10A28E72A2C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "922062B4-D3B4-4F79-BF97-84A271B020B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9465:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948107F0-8F0D-461F-9438-AC6D8C7D6C84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpc.081.232",
            "matchCriteriaId" : "3EEC579E-AE23-4076-BC65-82EFAA863B78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F579ACB5-C2E8-42BD-95D2-95061A90F30D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtct.081.232",
            "matchCriteriaId" : "6C41084B-7F4F-481F-97AB-ED07D83AD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx432:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3F5A3E-2903-4761-9543-0E0FDE12E9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3142:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EECF0-E7D5-43CC-9518-948EC1141BAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtpm.081.232",
            "matchCriteriaId" : "12804945-54A6-4119-8A5E-20D52649E591"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F8E629-1386-4BE2-BB77-9E8848447C49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmm.081.232",
            "matchCriteriaId" : "4B4C1F27-EAF3-4E59-9772-55F256AA8450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB85C612-9809-42C3-A127-926BE020ACE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F532C112-9B6B-416D-9B86-F153C493804F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4606439C-2F39-48CB-BDCC-19CE0FC3A203"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D8D43A-7A81-494E-AD5A-0DC5F54C0071"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslsg.081.232",
            "matchCriteriaId" : "9E00A58D-320B-4FE6-9593-94B407E16D10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2A7AC6-85E8-47F4-A6E1-E70105053899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlsg.081.232",
            "matchCriteriaId" : "A78A08BD-F20C-4BFE-83F1-E6933A47F3E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52775C7A-5ED3-412B-9765-C8A26D7DAEDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.232",
            "matchCriteriaId" : "FE8F3B57-BF60-4D6E-A3D7-6747FCC789DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A789D5F-A457-4FE8-88AD-4697EA0D38B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDF3AF9-D84E-4491-AD76-CF03EAA10463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4B4172-AF47-4CA5-8404-2834AD1E3114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A517255B-A5DB-4724-AA30-F89CB6D0D982"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFA9698-5E53-4C15-AD28-7B330CE688E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33822D70-E578-4518-A89E-586E48F0C093"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlbd.081.232",
            "matchCriteriaId" : "9B160370-FDFF-4A27-9D30-12CDF6CBD126"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DFF38B-E948-4DFF-B4AF-5B0D2D72B8FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F2F52D-9616-47F0-A0B8-EF1DC61D88AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95DEE18-CDEA-4AB4-9B3D-C1712720C4CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B2AB4-CB58-484B-AFD0-277EABF06985"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.232",
            "matchCriteriaId" : "AF2E8636-1A16-41C1-A36C-92790926678B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF936040-A3F2-42FA-997E-3DA8461E71B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C7770D-E3F8-4754-95D0-6A231D46F158"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DBB30-746A-4103-8303-6CAF563658A9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76B6022-D160-40E4-B533-6FAC3B43B190"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87CFBE1-5158-44F3-B2E3-19CB30A241C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A77A401-9EAE-49BA-8B75-F9FF7EAB4398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D10416B-76DC-4265-970E-38EB1E17C0B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F466924-8C21-4361-B7AC-5DED39B5083D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBD07B7-AAF5-428C-B03F-7C823240219D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33285B7-DF76-4DDD-BE74-AFC12B8DFF0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms621:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455281E2-37FF-4E7C-93E8-F0DC3B0CE5F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B551EFE-75DC-4D00-BF17-D7EF249CDF2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxngm.081.232",
            "matchCriteriaId" : "F3C9D27E-A180-4E8F-AD3A-14F748BFCB8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB750119-27F6-4396-B57B-31433B7B530E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FBE71-B5A5-465E-8FB1-BCD96975AD66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.232",
            "matchCriteriaId" : "9714DFB2-71EC-48EF-8C7D-180E9CF25F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634239D9-C252-4A62-9011-EC84C350B18E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8865944-83D8-4A28-9C7D-7B4B49F7A336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E680BC56-B202-4E9D-8198-E1B6A3601A99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62FB932-5BCE-4367-A364-D02842C0016E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F495C0-11DE-4B21-8258-C1E4D45A2C0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD24F8-9ACF-4291-B1F4-3C06DC059E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70992A9D-5C32-49AB-8817-6B52C64E4E3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583FDFAC-3865-4F4C-AF65-96F38D368669"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DCC657-E900-4A93-B9C5-4194C33ECDE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CDCA43-88D9-4456-9A70-112618837BD0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.232",
            "matchCriteriaId" : "89F469FF-525C-4D44-AE59-2EDA5D1AEE15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95ACDD2C-B717-4283-9424-B5BC2BD25644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CA5145-011E-4E76-998B-272ED0CAF2F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299DED47-FE60-46FE-9097-11A3732DC436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms823:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8A8233-6CE3-4D36-B1D4-BC46ED299C10"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9233CF87-7E79-4322-B389-3D9731F60DB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.232",
            "matchCriteriaId" : "13851619-F91B-445F-8194-3D608112EE2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7641B7-4665-4DD6-954C-E4F0E5BA64BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C51550-986B-410D-BD55-083E6EC2B846"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6976E38-574A-4C73-A204-2C4AC56C5487"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4C2EF9-8328-40DF-AEB2-6AC17E541284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.232",
            "matchCriteriaId" : "98740BF5-F515-45D8-843B-263E8B35B84D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2770:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6AD09BB-1693-41BC-833C-8FA41506F257"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF88693A-50D8-471B-A50A-E8BB1CCF11A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx722:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBAD67F-64B8-4451-AFE5-FF403D659664"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A408158-0B98-41BC-86D1-FF0754936145"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9808F6E2-5D9A-4016-AE5B-FFAB814D90BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B609A2-FEFE-414E-B3C2-4961A4871FFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0AA674-75B3-4D6A-B2BB-6CC7EC6A836D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65DAFB2-F4E3-4290-8282-738BF6222B4B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7355:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BEEF7-A8FB-4951-8784-EDED0D766C9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC95D3-55D5-4BE2-94A3-148EB33D4707"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DAB6F85-C543-4D9C-B067-838C8F02AF13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DE4CF6-250C-4006-B43E-A6882B75FB31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B04C61-3778-4E64-A4EC-981107894747"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.232",
            "matchCriteriaId" : "06F77770-6E5B-4EC2-A89E-672D2F3DF6D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAD3B2F-27D5-4BEC-B077-DC4FBA003CFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A68A21-225E-423C-AAE0-14090219C821"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6035F21-30E3-4F1D-BFE4-FF85B448ACEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2767C20-AEF6-4579-9FE9-3FA29D6EAF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbn.081.232",
            "matchCriteriaId" : "FCB2FC66-BBEB-4077-A5DB-77E3E5532FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B4CB69-F0A5-481B-8299-E4F0C5A3CF35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDE9642-279D-4D7E-B84E-99F5C018CF56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3EA4D6-5864-42C8-B387-C7AAB57CBD5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbl.081.232",
            "matchCriteriaId" : "1B523A9F-CE99-476F-8327-6043D0963EAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803DB805-F722-4805-8FAF-7BBFF64D61BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D63AA7F-B09F-4EF5-A852-BD24539E8EB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstzj.081.232",
            "matchCriteriaId" : "F9DDB467-D24E-4338-A21F-9D3A4B177582"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32FC324-86F1-46FF-8BC9-D07836FF4788"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99133BE3-FCD9-4E0C-A70A-9BFAA4FE4FFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.232",
            "matchCriteriaId" : "99F6EE49-07B0-4DAF-9B0D-02CCDDCD4D4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF902A2-386C-476F-8072-6BEFC98CD714"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F3FBD9-DAC0-4899-B86B-A79216654F12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAC5415-5C09-430C-A720-6844B29DB61E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1EB502-E0F7-4919-B1E4-A74B0691DE1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E7B4F1-ABF2-450B-80EA-170FB7274CDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA90E36-F0CD-47E2-91E4-5FB7C3FFF49A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3980C15B-F3B4-4F9B-8FBA-1DF7D61C77EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9088F2C-DC67-446D-8C50-AB2FEB64DEAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc232:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A596E0-0CF5-4902-AD78-798C6DE5A1E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3E6AB1-3272-4D8E-ACB3-767DEBDCED6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.sb7.p234",
            "matchCriteriaId" : "B0B9A6AD-2F90-45B0-8529-65875C62D602"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E5518D-CB23-485A-9963-61130A5DBC50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E12878-A625-4132-829D-831626601E24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9552AFCD-342F-4609-A30A-8F8AAAC800B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C67FAF3-7FF5-4EE6-BD58-30EA076632DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn2.p234",
            "matchCriteriaId" : "50089957-05AE-4951-8DF8-FFB5786A7450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29B39AF-5995-4182-AEA2-DA2DC0B301C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780146FF-B2A1-4E36-A39D-ACA855F6B6F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475FC7BB-B0F1-4A92-A960-CBE4B5D5C3BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F346873-FAC6-4285-BAFF-F4FEF879BA74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58869BC2-4312-4400-BA25-1C8CFF6B29CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFEF4E79-54EC-44E6-A6E4-81EF6F009DA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C34B111-487D-4826-9155-1976C01A5885"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8133E135-52F0-44D9-A905-C4D658BB4FCA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn4.p234",
            "matchCriteriaId" : "1E8F237E-8099-49F5-9C01-F58F54769BAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E49B15-8841-4D2B-9330-0AF6491D50AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD27A4E-227D-4A8D-9F2E-326235632475"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8648D99B-5FCD-475F-B393-A65F23100693"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn7.p234",
            "matchCriteriaId" : "81B5117D-8682-4D4C-BF20-76864B29A059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FB7B24-D362-4C72-A611-11DB6A38ECEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21769FA-B269-4DC9-BDCE-21E22758548E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn7.p234",
            "matchCriteriaId" : "81B5117D-8682-4D4C-BF20-76864B29A059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FB7B24-D362-4C72-A611-11DB6A38ECEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21769FA-B269-4DC9-BDCE-21E22758548E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.tu.p234",
            "matchCriteriaId" : "00BAC02F-B104-4335-9872-71EA9DC14F25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493415AD-B0B0-43F0-8831-1EB1A0DA2E7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14A85F9-B2B8-4210-8FB3-33DB52803F5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C616A5-0008-4A1A-B84E-15DF697CDC9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100AF863-37A5-4265-9779-DFD3E009CC32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF515935-1118-43DC-AE2B-8382E93C7297"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB5E528-E975-4480-AE5C-7081836B9ED8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD23AA59-2714-4EE2-A9A9-70A0556B8064"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56EF54E-BEB4-463B-A5C4-C30B205AD32E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807F197F-D330-4961-B494-9C391772C4B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55FC55FD-6CF6-4F89-A3DB-5A9235F4565C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEAA1A57-2D20-4D16-8C01-55EF4450E00F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145FE266-3E30-45CC-977D-5B21EC99B44A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C00C2D0-5FC3-4ABD-A73C-F91F649694CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2402362D-E65C-4375-88ED-513BD2C59B3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5405193-EF2C-4284-AF81-F048EC328F1B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72FB99BA-D39C-4849-853B-27AFAC823456"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.sa.p234",
            "matchCriteriaId" : "95ED04DE-7AA7-4135-9894-42EAE01327F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2883713-1B32-45E8-93E6-14DD7C84F8C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.mg.p234",
            "matchCriteriaId" : "157EDA59-86CE-48CC-B225-098F5ADC7F3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92B170E-C9DC-4321-9A47-AC23FCB8E0F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8758E2D2-4289-48DD-8D1C-62F750A68EB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECF3BAC-D13A-4491-98D1-4087B0A77C44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B02A0AC-DF0E-4415-BACF-89720BA59B5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D65866F-02B7-42C6-897B-32CDFD1C4954"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D60095D-4219-4253-B297-1BD089B794ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.jd.p234",
            "matchCriteriaId" : "82E32EF0-43A5-4E35-A6CC-80A589247314"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2E669-0926-424C-8B86-9B93CE908E71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vyl.p234",
            "matchCriteriaId" : "3A31FB87-CABE-4900-85D4-FD0A05C8D2EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614C8E51-6772-4D8E-9A88-A9527F591CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7327DE-F263-45A4-A49A-60575E144B49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vy2.p234",
            "matchCriteriaId" : "A46F4F50-441D-484E-8D1F-45F94C3EAA7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBF9CF4-717D-482D-B3E7-11AD020C3D9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F356A83-68DA-48AA-8A3F-C2569B515039"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vy4.p234",
            "matchCriteriaId" : "4AC8372B-D4A4-4F85-A786-48607DEC7478"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392214B8-A623-4C97-B88E-18CA35219B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A345F94-77AB-461E-9D76-86FA91FF6EC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ADE9C7-10F5-4A7F-9D0A-44E8DC6B5CA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm2.p234",
            "matchCriteriaId" : "7CD50456-BEF5-4648-9A3F-8393A6603081"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120D793F-6E06-4BC4-BF05-AFF46A544620"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C025E9F-4499-4741-AFA8-B3F30A84F3F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm4.p234",
            "matchCriteriaId" : "8F39D5DC-3914-4DC6-BE77-5A56A798D7EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5930B1-9B1A-4C89-9B3F-79C2628CC66C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165E0437-1236-4572-8BD3-AC8EA767DFB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90B007-DEE3-496B-A475-899288F03C90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm7.p234",
            "matchCriteriaId" : "B0CDEE9E-ABEB-45A6-A87C-07AD94B5498D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0D0C1A-C7E1-4FAD-9A02-1200A9A61CCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134399DF-8233-4B0E-8995-F9F4084C9E95"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "254C6BED-F09C-4654-BCB5-B768B6C01654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.cm2.p760",
            "matchCriteriaId" : "E9980E57-2A77-46FF-8A77-1C3BF7EA4059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A0A7E6-4E78-4B26-ACF2-8D8C5C6DCDD7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.cm4.p760",
            "matchCriteriaId" : "51D8D4D6-D790-4694-B820-13BA8DF3684D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "250FDD9D-22A5-4678-8472-841806AEEBDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC24D0C-6A8A-469C-8BE9-4D1F4948FAAF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hc.p760",
            "matchCriteriaId" : "9FE57F43-3F55-417F-89A1-7447BDD50DBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CB4A43-620C-444F-8195-8C3A768E0AE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC422-7DF1-4490-A694-FF4C5F0A93ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hv.p760",
            "matchCriteriaId" : "46997857-CC0E-49CB-919D-79F679B8EC1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F49A46-CC8C-4EE8-BAC0-6B149DF6E02D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.tp.p760",
            "matchCriteriaId" : "1F6106B5-D8D9-4736-BE8E-84A49B44EE94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B41B754-388B-4C2F-80C2-AAE7F1D0E49E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.vk.p760",
            "matchCriteriaId" : "1CDA249E-AA9D-4BAD-9E51-710B83F00A3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D568DD45-4C48-4E83-B4EC-9DC993F64668"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5266B66-422E-48AC-A870-0C7126F82811"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.ny.p760",
            "matchCriteriaId" : "B8C65CCC-1305-41C5-B8EB-A0EE72EF5191"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FCC26F-68CC-40A7-954A-0064931A2CEC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690A1F9E-5C7B-4287-B79F-A524E5FB8921"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74475B2B-E33B-4F90-AB8E-BF0444141937"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.mr.p760",
            "matchCriteriaId" : "86486F32-BFD8-4C6A-B087-9B429F735923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F722053-DE00-4F16-B380-E4CE2509512E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF0681E-D245-4294-BB77-C51FA1881562"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E2A88-0160-4B36-A4F9-0AB424FBE92A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71A2E3-1F3B-4CA0-BCA3-3C0038166CA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hk.p760",
            "matchCriteriaId" : "90439A93-20DE-4FB2-BCBD-872197C7D46B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE3DE4-0F65-4591-A011-2665FE829670"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A012A8B-26D5-4C90-815E-DFE0FB98BAF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.tq.p760",
            "matchCriteriaId" : "CB254C47-6A2A-4622-A401-73C595F30AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72601869-C035-4446-9AEA-FC63F837B6D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6922B7-94AE-4CCA-A0CB-E9C6FAD6E8F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2ECE52-74AE-45BE-A2BF-E72CECE417FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "045C3434-933C-4288-A0E1-36B6A493B601"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D5E005-4175-4803-A09D-348240EC103D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.jr.p760",
            "matchCriteriaId" : "38F8D4D6-A6F2-45EE-B06B-E90C8F482E40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D700553E-6B0C-4857-9063-D1B4668349AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.sk.p838",
            "matchCriteriaId" : "DFE36C76-2AE4-41D8-A925-917C53D6EC44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c734:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1812A3ED-B326-443A-A3C7-F554322FE0BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.ske.p838",
            "matchCriteriaId" : "6EB2C85E-8635-42B2-A7CD-69DC693827AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c736:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F54A331A-97D2-4C98-8BDF-FB03D29E2A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.lbh.p838",
            "matchCriteriaId" : "77491EE3-E56B-44A1-9DDC-4C89CEF863E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:e46x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEF48A9-4DB6-4B70-960D-7DE8B0A382FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.jp.p838",
            "matchCriteriaId" : "A13F0B63-EA89-4E05-B05D-C56A3B4819B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:t65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C555BB-5B72-4B16-B1A5-EE6313F5B829"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.bs.p838",
            "matchCriteriaId" : "E9045502-41C2-445E-BEC1-46A7473F31C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x46x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA3AE69-430A-435B-9680-EEE8F964FB6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.mn.p838",
            "matchCriteriaId" : "7CF57EF2-D46E-4EF4-82EC-C0EF8A5667C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595374B9-5554-451E-A122-4DD25200C9F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.mn.p838",
            "matchCriteriaId" : "7CF57EF2-D46E-4EF4-82EC-C0EF8A5667C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595374B9-5554-451E-A122-4DD25200C9F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.fl.p838",
            "matchCriteriaId" : "4F16936B-89B6-4BE8-BE98-595D85CBFBBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x73x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D041F36B-7CC8-472E-98F2-AA96FD16D527"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lp.jb.p837",
            "matchCriteriaId" : "7DC56DB9-2942-4788-97C6-5292D5BFB494"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:w850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB4E3C5-CBCE-4713-A552-7A00AAEDA312"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lp.sp.p837",
            "matchCriteriaId" : "8DEA71E7-AA42-439F-B655-DC6E024D098C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x86x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C369427B-75A9-44FD-91D1-050CDE442ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26065.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26065.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T20:15:10.323",
      "lastModified" : "2025-02-11T16:15:34.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.232",
            "matchCriteriaId" : "10451FB6-3389-4605-A808-4DD38E5FB032"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EC3C2D-406D-4CD1-A1BF-88F63B1F6E93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A3FA9A-DB24-4269-A0A4-77CA9FF73C82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx942:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B466E76-C396-4B47-9E97-998B700F6921"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4198F4D5-A322-47EE-B892-72C3AD34F825"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx944:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E16872-A4E1-4546-918F-97239D8C88AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCF1F44-23E2-412D-B740-C4F6371BA028"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C842AC2-2A47-4C50-A0D9-E96986DBA0F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9445:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D39C09A6-FCDA-4E5B-8D8A-10A28E72A2C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "922062B4-D3B4-4F79-BF97-84A271B020B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9465:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948107F0-8F0D-461F-9438-AC6D8C7D6C84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpc.081.232",
            "matchCriteriaId" : "3EEC579E-AE23-4076-BC65-82EFAA863B78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F579ACB5-C2E8-42BD-95D2-95061A90F30D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtct.081.232",
            "matchCriteriaId" : "6C41084B-7F4F-481F-97AB-ED07D83AD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx432:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3F5A3E-2903-4761-9543-0E0FDE12E9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3142:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EECF0-E7D5-43CC-9518-948EC1141BAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtpm.081.232",
            "matchCriteriaId" : "12804945-54A6-4119-8A5E-20D52649E591"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F8E629-1386-4BE2-BB77-9E8848447C49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmm.081.232",
            "matchCriteriaId" : "4B4C1F27-EAF3-4E59-9772-55F256AA8450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB85C612-9809-42C3-A127-926BE020ACE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F532C112-9B6B-416D-9B86-F153C493804F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4606439C-2F39-48CB-BDCC-19CE0FC3A203"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D8D43A-7A81-494E-AD5A-0DC5F54C0071"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslsg.081.232",
            "matchCriteriaId" : "9E00A58D-320B-4FE6-9593-94B407E16D10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2A7AC6-85E8-47F4-A6E1-E70105053899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlsg.081.232",
            "matchCriteriaId" : "A78A08BD-F20C-4BFE-83F1-E6933A47F3E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52775C7A-5ED3-412B-9765-C8A26D7DAEDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.232",
            "matchCriteriaId" : "FE8F3B57-BF60-4D6E-A3D7-6747FCC789DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A789D5F-A457-4FE8-88AD-4697EA0D38B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDF3AF9-D84E-4491-AD76-CF03EAA10463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4B4172-AF47-4CA5-8404-2834AD1E3114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A517255B-A5DB-4724-AA30-F89CB6D0D982"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFA9698-5E53-4C15-AD28-7B330CE688E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33822D70-E578-4518-A89E-586E48F0C093"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlbd.081.232",
            "matchCriteriaId" : "9B160370-FDFF-4A27-9D30-12CDF6CBD126"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DFF38B-E948-4DFF-B4AF-5B0D2D72B8FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F2F52D-9616-47F0-A0B8-EF1DC61D88AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95DEE18-CDEA-4AB4-9B3D-C1712720C4CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B2AB4-CB58-484B-AFD0-277EABF06985"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.232",
            "matchCriteriaId" : "AF2E8636-1A16-41C1-A36C-92790926678B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF936040-A3F2-42FA-997E-3DA8461E71B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C7770D-E3F8-4754-95D0-6A231D46F158"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DBB30-746A-4103-8303-6CAF563658A9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76B6022-D160-40E4-B533-6FAC3B43B190"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87CFBE1-5158-44F3-B2E3-19CB30A241C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A77A401-9EAE-49BA-8B75-F9FF7EAB4398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D10416B-76DC-4265-970E-38EB1E17C0B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F466924-8C21-4361-B7AC-5DED39B5083D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBD07B7-AAF5-428C-B03F-7C823240219D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33285B7-DF76-4DDD-BE74-AFC12B8DFF0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms621:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455281E2-37FF-4E7C-93E8-F0DC3B0CE5F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B551EFE-75DC-4D00-BF17-D7EF249CDF2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxngm.081.232",
            "matchCriteriaId" : "F3C9D27E-A180-4E8F-AD3A-14F748BFCB8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB750119-27F6-4396-B57B-31433B7B530E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FBE71-B5A5-465E-8FB1-BCD96975AD66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.232",
            "matchCriteriaId" : "9714DFB2-71EC-48EF-8C7D-180E9CF25F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634239D9-C252-4A62-9011-EC84C350B18E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8865944-83D8-4A28-9C7D-7B4B49F7A336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E680BC56-B202-4E9D-8198-E1B6A3601A99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62FB932-5BCE-4367-A364-D02842C0016E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F495C0-11DE-4B21-8258-C1E4D45A2C0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD24F8-9ACF-4291-B1F4-3C06DC059E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70992A9D-5C32-49AB-8817-6B52C64E4E3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583FDFAC-3865-4F4C-AF65-96F38D368669"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DCC657-E900-4A93-B9C5-4194C33ECDE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CDCA43-88D9-4456-9A70-112618837BD0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.232",
            "matchCriteriaId" : "89F469FF-525C-4D44-AE59-2EDA5D1AEE15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95ACDD2C-B717-4283-9424-B5BC2BD25644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CA5145-011E-4E76-998B-272ED0CAF2F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299DED47-FE60-46FE-9097-11A3732DC436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms823:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8A8233-6CE3-4D36-B1D4-BC46ED299C10"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9233CF87-7E79-4322-B389-3D9731F60DB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.232",
            "matchCriteriaId" : "13851619-F91B-445F-8194-3D608112EE2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7641B7-4665-4DD6-954C-E4F0E5BA64BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C51550-986B-410D-BD55-083E6EC2B846"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6976E38-574A-4C73-A204-2C4AC56C5487"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4C2EF9-8328-40DF-AEB2-6AC17E541284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.232",
            "matchCriteriaId" : "98740BF5-F515-45D8-843B-263E8B35B84D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2770:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6AD09BB-1693-41BC-833C-8FA41506F257"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF88693A-50D8-471B-A50A-E8BB1CCF11A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx722:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBAD67F-64B8-4451-AFE5-FF403D659664"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A408158-0B98-41BC-86D1-FF0754936145"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9808F6E2-5D9A-4016-AE5B-FFAB814D90BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B609A2-FEFE-414E-B3C2-4961A4871FFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0AA674-75B3-4D6A-B2BB-6CC7EC6A836D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65DAFB2-F4E3-4290-8282-738BF6222B4B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7355:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BEEF7-A8FB-4951-8784-EDED0D766C9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC95D3-55D5-4BE2-94A3-148EB33D4707"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DAB6F85-C543-4D9C-B067-838C8F02AF13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DE4CF6-250C-4006-B43E-A6882B75FB31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B04C61-3778-4E64-A4EC-981107894747"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.232",
            "matchCriteriaId" : "06F77770-6E5B-4EC2-A89E-672D2F3DF6D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAD3B2F-27D5-4BEC-B077-DC4FBA003CFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A68A21-225E-423C-AAE0-14090219C821"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6035F21-30E3-4F1D-BFE4-FF85B448ACEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2767C20-AEF6-4579-9FE9-3FA29D6EAF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbn.081.232",
            "matchCriteriaId" : "FCB2FC66-BBEB-4077-A5DB-77E3E5532FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B4CB69-F0A5-481B-8299-E4F0C5A3CF35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDE9642-279D-4D7E-B84E-99F5C018CF56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3EA4D6-5864-42C8-B387-C7AAB57CBD5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbl.081.232",
            "matchCriteriaId" : "1B523A9F-CE99-476F-8327-6043D0963EAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803DB805-F722-4805-8FAF-7BBFF64D61BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D63AA7F-B09F-4EF5-A852-BD24539E8EB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstzj.081.232",
            "matchCriteriaId" : "F9DDB467-D24E-4338-A21F-9D3A4B177582"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32FC324-86F1-46FF-8BC9-D07836FF4788"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99133BE3-FCD9-4E0C-A70A-9BFAA4FE4FFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.232",
            "matchCriteriaId" : "99F6EE49-07B0-4DAF-9B0D-02CCDDCD4D4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF902A2-386C-476F-8072-6BEFC98CD714"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F3FBD9-DAC0-4899-B86B-A79216654F12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAC5415-5C09-430C-A720-6844B29DB61E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1EB502-E0F7-4919-B1E4-A74B0691DE1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E7B4F1-ABF2-450B-80EA-170FB7274CDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA90E36-F0CD-47E2-91E4-5FB7C3FFF49A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3980C15B-F3B4-4F9B-8FBA-1DF7D61C77EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9088F2C-DC67-446D-8C50-AB2FEB64DEAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc232:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A596E0-0CF5-4902-AD78-798C6DE5A1E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3E6AB1-3272-4D8E-ACB3-767DEBDCED6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.sb7.p234",
            "matchCriteriaId" : "B0B9A6AD-2F90-45B0-8529-65875C62D602"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E5518D-CB23-485A-9963-61130A5DBC50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E12878-A625-4132-829D-831626601E24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9552AFCD-342F-4609-A30A-8F8AAAC800B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C67FAF3-7FF5-4EE6-BD58-30EA076632DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn2.p234",
            "matchCriteriaId" : "50089957-05AE-4951-8DF8-FFB5786A7450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29B39AF-5995-4182-AEA2-DA2DC0B301C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780146FF-B2A1-4E36-A39D-ACA855F6B6F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475FC7BB-B0F1-4A92-A960-CBE4B5D5C3BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F346873-FAC6-4285-BAFF-F4FEF879BA74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58869BC2-4312-4400-BA25-1C8CFF6B29CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFEF4E79-54EC-44E6-A6E4-81EF6F009DA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C34B111-487D-4826-9155-1976C01A5885"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8133E135-52F0-44D9-A905-C4D658BB4FCA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn4.p234",
            "matchCriteriaId" : "1E8F237E-8099-49F5-9C01-F58F54769BAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E49B15-8841-4D2B-9330-0AF6491D50AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD27A4E-227D-4A8D-9F2E-326235632475"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8648D99B-5FCD-475F-B393-A65F23100693"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn7.p234",
            "matchCriteriaId" : "81B5117D-8682-4D4C-BF20-76864B29A059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FB7B24-D362-4C72-A611-11DB6A38ECEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21769FA-B269-4DC9-BDCE-21E22758548E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn7.p234",
            "matchCriteriaId" : "81B5117D-8682-4D4C-BF20-76864B29A059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FB7B24-D362-4C72-A611-11DB6A38ECEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21769FA-B269-4DC9-BDCE-21E22758548E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.tu.p234",
            "matchCriteriaId" : "00BAC02F-B104-4335-9872-71EA9DC14F25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493415AD-B0B0-43F0-8831-1EB1A0DA2E7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14A85F9-B2B8-4210-8FB3-33DB52803F5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C616A5-0008-4A1A-B84E-15DF697CDC9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100AF863-37A5-4265-9779-DFD3E009CC32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF515935-1118-43DC-AE2B-8382E93C7297"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB5E528-E975-4480-AE5C-7081836B9ED8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD23AA59-2714-4EE2-A9A9-70A0556B8064"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56EF54E-BEB4-463B-A5C4-C30B205AD32E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807F197F-D330-4961-B494-9C391772C4B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55FC55FD-6CF6-4F89-A3DB-5A9235F4565C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEAA1A57-2D20-4D16-8C01-55EF4450E00F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145FE266-3E30-45CC-977D-5B21EC99B44A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C00C2D0-5FC3-4ABD-A73C-F91F649694CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2402362D-E65C-4375-88ED-513BD2C59B3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5405193-EF2C-4284-AF81-F048EC328F1B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72FB99BA-D39C-4849-853B-27AFAC823456"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.sa.p234",
            "matchCriteriaId" : "95ED04DE-7AA7-4135-9894-42EAE01327F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2883713-1B32-45E8-93E6-14DD7C84F8C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.mg.p234",
            "matchCriteriaId" : "157EDA59-86CE-48CC-B225-098F5ADC7F3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92B170E-C9DC-4321-9A47-AC23FCB8E0F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8758E2D2-4289-48DD-8D1C-62F750A68EB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECF3BAC-D13A-4491-98D1-4087B0A77C44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B02A0AC-DF0E-4415-BACF-89720BA59B5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D65866F-02B7-42C6-897B-32CDFD1C4954"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D60095D-4219-4253-B297-1BD089B794ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.jd.p234",
            "matchCriteriaId" : "82E32EF0-43A5-4E35-A6CC-80A589247314"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2E669-0926-424C-8B86-9B93CE908E71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vyl.p234",
            "matchCriteriaId" : "3A31FB87-CABE-4900-85D4-FD0A05C8D2EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614C8E51-6772-4D8E-9A88-A9527F591CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7327DE-F263-45A4-A49A-60575E144B49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vy2.p234",
            "matchCriteriaId" : "A46F4F50-441D-484E-8D1F-45F94C3EAA7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBF9CF4-717D-482D-B3E7-11AD020C3D9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F356A83-68DA-48AA-8A3F-C2569B515039"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vy4.p234",
            "matchCriteriaId" : "4AC8372B-D4A4-4F85-A786-48607DEC7478"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392214B8-A623-4C97-B88E-18CA35219B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A345F94-77AB-461E-9D76-86FA91FF6EC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ADE9C7-10F5-4A7F-9D0A-44E8DC6B5CA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm2.p234",
            "matchCriteriaId" : "7CD50456-BEF5-4648-9A3F-8393A6603081"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120D793F-6E06-4BC4-BF05-AFF46A544620"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C025E9F-4499-4741-AFA8-B3F30A84F3F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm4.p234",
            "matchCriteriaId" : "8F39D5DC-3914-4DC6-BE77-5A56A798D7EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5930B1-9B1A-4C89-9B3F-79C2628CC66C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165E0437-1236-4572-8BD3-AC8EA767DFB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90B007-DEE3-496B-A475-899288F03C90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm7.p234",
            "matchCriteriaId" : "B0CDEE9E-ABEB-45A6-A87C-07AD94B5498D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0D0C1A-C7E1-4FAD-9A02-1200A9A61CCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134399DF-8233-4B0E-8995-F9F4084C9E95"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "254C6BED-F09C-4654-BCB5-B768B6C01654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.cm2.p760",
            "matchCriteriaId" : "E9980E57-2A77-46FF-8A77-1C3BF7EA4059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A0A7E6-4E78-4B26-ACF2-8D8C5C6DCDD7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.cm4.p760",
            "matchCriteriaId" : "51D8D4D6-D790-4694-B820-13BA8DF3684D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "250FDD9D-22A5-4678-8472-841806AEEBDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC24D0C-6A8A-469C-8BE9-4D1F4948FAAF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hc.p760",
            "matchCriteriaId" : "9FE57F43-3F55-417F-89A1-7447BDD50DBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CB4A43-620C-444F-8195-8C3A768E0AE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC422-7DF1-4490-A694-FF4C5F0A93ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hv.p760",
            "matchCriteriaId" : "46997857-CC0E-49CB-919D-79F679B8EC1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F49A46-CC8C-4EE8-BAC0-6B149DF6E02D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.tp.p760",
            "matchCriteriaId" : "1F6106B5-D8D9-4736-BE8E-84A49B44EE94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B41B754-388B-4C2F-80C2-AAE7F1D0E49E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.vk.p760",
            "matchCriteriaId" : "1CDA249E-AA9D-4BAD-9E51-710B83F00A3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D568DD45-4C48-4E83-B4EC-9DC993F64668"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5266B66-422E-48AC-A870-0C7126F82811"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.ny.p760",
            "matchCriteriaId" : "B8C65CCC-1305-41C5-B8EB-A0EE72EF5191"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FCC26F-68CC-40A7-954A-0064931A2CEC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690A1F9E-5C7B-4287-B79F-A524E5FB8921"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74475B2B-E33B-4F90-AB8E-BF0444141937"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.mr.p760",
            "matchCriteriaId" : "86486F32-BFD8-4C6A-B087-9B429F735923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F722053-DE00-4F16-B380-E4CE2509512E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF0681E-D245-4294-BB77-C51FA1881562"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E2A88-0160-4B36-A4F9-0AB424FBE92A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71A2E3-1F3B-4CA0-BCA3-3C0038166CA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hk.p760",
            "matchCriteriaId" : "90439A93-20DE-4FB2-BCBD-872197C7D46B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE3DE4-0F65-4591-A011-2665FE829670"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A012A8B-26D5-4C90-815E-DFE0FB98BAF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.tq.p760",
            "matchCriteriaId" : "CB254C47-6A2A-4622-A401-73C595F30AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72601869-C035-4446-9AEA-FC63F837B6D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6922B7-94AE-4CCA-A0CB-E9C6FAD6E8F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2ECE52-74AE-45BE-A2BF-E72CECE417FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "045C3434-933C-4288-A0E1-36B6A493B601"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D5E005-4175-4803-A09D-348240EC103D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.jr.p760",
            "matchCriteriaId" : "38F8D4D6-A6F2-45EE-B06B-E90C8F482E40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D700553E-6B0C-4857-9063-D1B4668349AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.sk.p838",
            "matchCriteriaId" : "DFE36C76-2AE4-41D8-A925-917C53D6EC44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c734:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1812A3ED-B326-443A-A3C7-F554322FE0BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.ske.p838",
            "matchCriteriaId" : "6EB2C85E-8635-42B2-A7CD-69DC693827AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c736:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F54A331A-97D2-4C98-8BDF-FB03D29E2A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.lbh.p838",
            "matchCriteriaId" : "77491EE3-E56B-44A1-9DDC-4C89CEF863E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:e46x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEF48A9-4DB6-4B70-960D-7DE8B0A382FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.jp.p838",
            "matchCriteriaId" : "A13F0B63-EA89-4E05-B05D-C56A3B4819B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:t65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C555BB-5B72-4B16-B1A5-EE6313F5B829"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.bs.p838",
            "matchCriteriaId" : "E9045502-41C2-445E-BEC1-46A7473F31C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x46x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA3AE69-430A-435B-9680-EEE8F964FB6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.mn.p838",
            "matchCriteriaId" : "7CF57EF2-D46E-4EF4-82EC-C0EF8A5667C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595374B9-5554-451E-A122-4DD25200C9F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.mn.p838",
            "matchCriteriaId" : "7CF57EF2-D46E-4EF4-82EC-C0EF8A5667C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595374B9-5554-451E-A122-4DD25200C9F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.fl.p838",
            "matchCriteriaId" : "4F16936B-89B6-4BE8-BE98-595D85CBFBBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x73x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D041F36B-7CC8-472E-98F2-AA96FD16D527"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lp.jb.p837",
            "matchCriteriaId" : "7DC56DB9-2942-4788-97C6-5292D5BFB494"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:w850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB4E3C5-CBCE-4713-A552-7A00AAEDA312"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lp.sp.p837",
            "matchCriteriaId" : "8DEA71E7-AA42-439F-B655-DC6E024D098C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x86x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C369427B-75A9-44FD-91D1-050CDE442ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26066.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26066.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T20:15:10.387",
      "lastModified" : "2025-02-11T16:15:35.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.232",
            "matchCriteriaId" : "10451FB6-3389-4605-A808-4DD38E5FB032"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EC3C2D-406D-4CD1-A1BF-88F63B1F6E93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A3FA9A-DB24-4269-A0A4-77CA9FF73C82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx942:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B466E76-C396-4B47-9E97-998B700F6921"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4198F4D5-A322-47EE-B892-72C3AD34F825"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx944:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E16872-A4E1-4546-918F-97239D8C88AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCF1F44-23E2-412D-B740-C4F6371BA028"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C842AC2-2A47-4C50-A0D9-E96986DBA0F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9445:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D39C09A6-FCDA-4E5B-8D8A-10A28E72A2C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "922062B4-D3B4-4F79-BF97-84A271B020B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9465:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948107F0-8F0D-461F-9438-AC6D8C7D6C84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpc.081.232",
            "matchCriteriaId" : "3EEC579E-AE23-4076-BC65-82EFAA863B78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F579ACB5-C2E8-42BD-95D2-95061A90F30D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtct.081.232",
            "matchCriteriaId" : "6C41084B-7F4F-481F-97AB-ED07D83AD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx432:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3F5A3E-2903-4761-9543-0E0FDE12E9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3142:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EECF0-E7D5-43CC-9518-948EC1141BAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtpm.081.232",
            "matchCriteriaId" : "12804945-54A6-4119-8A5E-20D52649E591"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F8E629-1386-4BE2-BB77-9E8848447C49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmm.081.232",
            "matchCriteriaId" : "4B4C1F27-EAF3-4E59-9772-55F256AA8450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB85C612-9809-42C3-A127-926BE020ACE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F532C112-9B6B-416D-9B86-F153C493804F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4606439C-2F39-48CB-BDCC-19CE0FC3A203"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D8D43A-7A81-494E-AD5A-0DC5F54C0071"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslsg.081.232",
            "matchCriteriaId" : "9E00A58D-320B-4FE6-9593-94B407E16D10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2A7AC6-85E8-47F4-A6E1-E70105053899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlsg.081.232",
            "matchCriteriaId" : "A78A08BD-F20C-4BFE-83F1-E6933A47F3E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52775C7A-5ED3-412B-9765-C8A26D7DAEDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.232",
            "matchCriteriaId" : "FE8F3B57-BF60-4D6E-A3D7-6747FCC789DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A789D5F-A457-4FE8-88AD-4697EA0D38B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDF3AF9-D84E-4491-AD76-CF03EAA10463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4B4172-AF47-4CA5-8404-2834AD1E3114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A517255B-A5DB-4724-AA30-F89CB6D0D982"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFA9698-5E53-4C15-AD28-7B330CE688E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33822D70-E578-4518-A89E-586E48F0C093"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlbd.081.232",
            "matchCriteriaId" : "9B160370-FDFF-4A27-9D30-12CDF6CBD126"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DFF38B-E948-4DFF-B4AF-5B0D2D72B8FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F2F52D-9616-47F0-A0B8-EF1DC61D88AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95DEE18-CDEA-4AB4-9B3D-C1712720C4CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B2AB4-CB58-484B-AFD0-277EABF06985"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.232",
            "matchCriteriaId" : "AF2E8636-1A16-41C1-A36C-92790926678B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF936040-A3F2-42FA-997E-3DA8461E71B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C7770D-E3F8-4754-95D0-6A231D46F158"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DBB30-746A-4103-8303-6CAF563658A9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76B6022-D160-40E4-B533-6FAC3B43B190"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87CFBE1-5158-44F3-B2E3-19CB30A241C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A77A401-9EAE-49BA-8B75-F9FF7EAB4398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D10416B-76DC-4265-970E-38EB1E17C0B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F466924-8C21-4361-B7AC-5DED39B5083D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBD07B7-AAF5-428C-B03F-7C823240219D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33285B7-DF76-4DDD-BE74-AFC12B8DFF0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms621:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455281E2-37FF-4E7C-93E8-F0DC3B0CE5F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B551EFE-75DC-4D00-BF17-D7EF249CDF2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxngm.081.232",
            "matchCriteriaId" : "F3C9D27E-A180-4E8F-AD3A-14F748BFCB8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB750119-27F6-4396-B57B-31433B7B530E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FBE71-B5A5-465E-8FB1-BCD96975AD66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.232",
            "matchCriteriaId" : "9714DFB2-71EC-48EF-8C7D-180E9CF25F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634239D9-C252-4A62-9011-EC84C350B18E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8865944-83D8-4A28-9C7D-7B4B49F7A336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E680BC56-B202-4E9D-8198-E1B6A3601A99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62FB932-5BCE-4367-A364-D02842C0016E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F495C0-11DE-4B21-8258-C1E4D45A2C0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD24F8-9ACF-4291-B1F4-3C06DC059E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70992A9D-5C32-49AB-8817-6B52C64E4E3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583FDFAC-3865-4F4C-AF65-96F38D368669"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DCC657-E900-4A93-B9C5-4194C33ECDE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CDCA43-88D9-4456-9A70-112618837BD0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.232",
            "matchCriteriaId" : "89F469FF-525C-4D44-AE59-2EDA5D1AEE15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95ACDD2C-B717-4283-9424-B5BC2BD25644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CA5145-011E-4E76-998B-272ED0CAF2F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299DED47-FE60-46FE-9097-11A3732DC436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms823:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8A8233-6CE3-4D36-B1D4-BC46ED299C10"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9233CF87-7E79-4322-B389-3D9731F60DB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.232",
            "matchCriteriaId" : "13851619-F91B-445F-8194-3D608112EE2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7641B7-4665-4DD6-954C-E4F0E5BA64BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C51550-986B-410D-BD55-083E6EC2B846"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6976E38-574A-4C73-A204-2C4AC56C5487"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4C2EF9-8328-40DF-AEB2-6AC17E541284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.232",
            "matchCriteriaId" : "98740BF5-F515-45D8-843B-263E8B35B84D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2770:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6AD09BB-1693-41BC-833C-8FA41506F257"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF88693A-50D8-471B-A50A-E8BB1CCF11A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx722:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBAD67F-64B8-4451-AFE5-FF403D659664"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A408158-0B98-41BC-86D1-FF0754936145"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9808F6E2-5D9A-4016-AE5B-FFAB814D90BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B609A2-FEFE-414E-B3C2-4961A4871FFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0AA674-75B3-4D6A-B2BB-6CC7EC6A836D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65DAFB2-F4E3-4290-8282-738BF6222B4B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7355:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BEEF7-A8FB-4951-8784-EDED0D766C9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC95D3-55D5-4BE2-94A3-148EB33D4707"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DAB6F85-C543-4D9C-B067-838C8F02AF13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DE4CF6-250C-4006-B43E-A6882B75FB31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B04C61-3778-4E64-A4EC-981107894747"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.232",
            "matchCriteriaId" : "06F77770-6E5B-4EC2-A89E-672D2F3DF6D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAD3B2F-27D5-4BEC-B077-DC4FBA003CFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A68A21-225E-423C-AAE0-14090219C821"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6035F21-30E3-4F1D-BFE4-FF85B448ACEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2767C20-AEF6-4579-9FE9-3FA29D6EAF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbn.081.232",
            "matchCriteriaId" : "FCB2FC66-BBEB-4077-A5DB-77E3E5532FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B4CB69-F0A5-481B-8299-E4F0C5A3CF35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDE9642-279D-4D7E-B84E-99F5C018CF56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3EA4D6-5864-42C8-B387-C7AAB57CBD5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbl.081.232",
            "matchCriteriaId" : "1B523A9F-CE99-476F-8327-6043D0963EAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803DB805-F722-4805-8FAF-7BBFF64D61BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D63AA7F-B09F-4EF5-A852-BD24539E8EB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.232",
            "matchCriteriaId" : "99F6EE49-07B0-4DAF-9B0D-02CCDDCD4D4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF902A2-386C-476F-8072-6BEFC98CD714"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F3FBD9-DAC0-4899-B86B-A79216654F12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAC5415-5C09-430C-A720-6844B29DB61E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1EB502-E0F7-4919-B1E4-A74B0691DE1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E7B4F1-ABF2-450B-80EA-170FB7274CDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA90E36-F0CD-47E2-91E4-5FB7C3FFF49A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3980C15B-F3B4-4F9B-8FBA-1DF7D61C77EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxnzj.081.232",
            "matchCriteriaId" : "D694AE72-D622-4D50-A03A-8844EA6B7526"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9088F2C-DC67-446D-8C50-AB2FEB64DEAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C901E4-6D93-4537-889E-96D25763AF5E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3E6AB1-3272-4D8E-ACB3-767DEBDCED6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.233",
            "matchCriteriaId" : "99ABCB60-7E1B-45D6-A02A-E458B548736A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBF8770-3E91-49BC-8AE9-E82E6399D802"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7BCA73-8C60-49F5-A62C-126D62A8D701"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx827:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EB1C23-D232-4248-9595-E8500B48ED09"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx86:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4948202B-2B56-4CD0-B924-AF122058B553"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc6152:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937C63CA-228C-4142-BB3A-F25A09908F92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc6153:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BDF3B6-F726-48E9-AF59-8F4CF653F233"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6BE517-427A-4335-8FCD-8A721A9E507C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E731776-CCAE-467E-9423-1155B280358B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4E2BF7-2D02-4D9C-BE01-F20FDA54DB12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpp.081.233",
            "matchCriteriaId" : "5DE7B33C-AE66-4507-AB6B-429167FEE133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c6160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48E10C08-E129-4482-92B1-67FD6C0D0407"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F7DA0B-6E3C-42E6-95DA-6DD8936D0E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs827:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B3F51DA-5CA4-41E1-9373-34232F509FED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstat_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstat.081.233",
            "matchCriteriaId" : "B874B6BB-C7EA-4D89-AC12-34141E83601C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324EC762-1276-4121-916B-9981925F242D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04BB304-0623-4018-BCCC-7B648FC8DEC1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6B2ACE-BEDB-49AD-B570-F7F43697D221"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs727:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4C7A81-DC8F-4495-AA75-FACE73D45CC5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs728:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430136AA-E687-4A32-8BDF-196E4C4246E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtat_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.233",
            "matchCriteriaId" : "DDD8D85A-F665-4261-BB6C-9C359D241D8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED5958-CE75-43F3-A7A0-2C5379EB8A13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx727:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379FF636-A26B-4588-A0E2-AFDDEAAE6BBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB82D190-FB73-4C28-B0F2-24EEEF384BB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4143:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5D6B0C-88D7-4CF2-8725-B00FA1225E42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A27B92-5F83-4280-93EA-31F115408405"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4153:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722989FF-9005-48B7-9082-E9629518E651"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstmh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstmh.081.233",
            "matchCriteriaId" : "4E1CA745-1F71-487E-AD86-6795F5FE64C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8DAABA-2FF6-4C75-AD16-B1CDD788B3B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs923:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B4F96C-E2A2-4BFA-B99B-4CE7EC663925"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs927:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0540292B-3C4E-4C29-8FEE-A8749BE23265"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstmh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstmx.081.233",
            "matchCriteriaId" : "ACCB42D5-28F3-4848-8A12-9DBBFF969CDF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c923:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E521BECF-830F-4559-89EE-1E7E0123E9FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29844B5-0CCF-4C6F-A2EC-BF30C087CCFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F864E81B-67D6-4E04-BD33-A32C92540324"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CEA4CDC-C020-42DA-8CD8-C3426F738403"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx923:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB1C634D-C6F7-4CA2-852B-B7F26BA737F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx924:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2143A2BE-0B08-49C7-A97F-F334556EF497"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9225:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFAA4B58-2CD9-413F-91BF-766FEEA27DD8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAC3F55-01E7-4D34-81F4-2C2AB02C48A5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9245:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6974241-960F-4D72-973D-A7EAA75059A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7F492E-1E68-4A72-85FB-61C46F4AB2DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9265:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBDC7821-365A-4FA1-A47A-A0FB50A278F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/174763/Lexmark-Device-Embedded-Web-Server-Remote-Code-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26067.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/174763/Lexmark-Device-Embedded-Web-Server-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26067.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T20:15:10.483",
      "lastModified" : "2025-05-05T16:15:30.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.232",
            "matchCriteriaId" : "10451FB6-3389-4605-A808-4DD38E5FB032"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EC3C2D-406D-4CD1-A1BF-88F63B1F6E93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A3FA9A-DB24-4269-A0A4-77CA9FF73C82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx942:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B466E76-C396-4B47-9E97-998B700F6921"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4198F4D5-A322-47EE-B892-72C3AD34F825"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx944:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E16872-A4E1-4546-918F-97239D8C88AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCF1F44-23E2-412D-B740-C4F6371BA028"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C842AC2-2A47-4C50-A0D9-E96986DBA0F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9445:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D39C09A6-FCDA-4E5B-8D8A-10A28E72A2C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "922062B4-D3B4-4F79-BF97-84A271B020B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9465:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948107F0-8F0D-461F-9438-AC6D8C7D6C84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpc.081.232",
            "matchCriteriaId" : "3EEC579E-AE23-4076-BC65-82EFAA863B78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F579ACB5-C2E8-42BD-95D2-95061A90F30D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtct.081.232",
            "matchCriteriaId" : "6C41084B-7F4F-481F-97AB-ED07D83AD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx432:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3F5A3E-2903-4761-9543-0E0FDE12E9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3142:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EECF0-E7D5-43CC-9518-948EC1141BAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtpm.081.232",
            "matchCriteriaId" : "12804945-54A6-4119-8A5E-20D52649E591"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F8E629-1386-4BE2-BB77-9E8848447C49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmm.081.232",
            "matchCriteriaId" : "4B4C1F27-EAF3-4E59-9772-55F256AA8450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB85C612-9809-42C3-A127-926BE020ACE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F532C112-9B6B-416D-9B86-F153C493804F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4606439C-2F39-48CB-BDCC-19CE0FC3A203"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D8D43A-7A81-494E-AD5A-0DC5F54C0071"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslsg.081.232",
            "matchCriteriaId" : "9E00A58D-320B-4FE6-9593-94B407E16D10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2A7AC6-85E8-47F4-A6E1-E70105053899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlsg.081.232",
            "matchCriteriaId" : "A78A08BD-F20C-4BFE-83F1-E6933A47F3E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52775C7A-5ED3-412B-9765-C8A26D7DAEDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.232",
            "matchCriteriaId" : "FE8F3B57-BF60-4D6E-A3D7-6747FCC789DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A789D5F-A457-4FE8-88AD-4697EA0D38B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDF3AF9-D84E-4491-AD76-CF03EAA10463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4B4172-AF47-4CA5-8404-2834AD1E3114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A517255B-A5DB-4724-AA30-F89CB6D0D982"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFA9698-5E53-4C15-AD28-7B330CE688E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33822D70-E578-4518-A89E-586E48F0C093"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlbd.081.232",
            "matchCriteriaId" : "9B160370-FDFF-4A27-9D30-12CDF6CBD126"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DFF38B-E948-4DFF-B4AF-5B0D2D72B8FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F2F52D-9616-47F0-A0B8-EF1DC61D88AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95DEE18-CDEA-4AB4-9B3D-C1712720C4CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B2AB4-CB58-484B-AFD0-277EABF06985"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.232",
            "matchCriteriaId" : "AF2E8636-1A16-41C1-A36C-92790926678B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF936040-A3F2-42FA-997E-3DA8461E71B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C7770D-E3F8-4754-95D0-6A231D46F158"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DBB30-746A-4103-8303-6CAF563658A9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76B6022-D160-40E4-B533-6FAC3B43B190"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87CFBE1-5158-44F3-B2E3-19CB30A241C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A77A401-9EAE-49BA-8B75-F9FF7EAB4398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D10416B-76DC-4265-970E-38EB1E17C0B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F466924-8C21-4361-B7AC-5DED39B5083D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBD07B7-AAF5-428C-B03F-7C823240219D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33285B7-DF76-4DDD-BE74-AFC12B8DFF0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms621:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455281E2-37FF-4E7C-93E8-F0DC3B0CE5F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B551EFE-75DC-4D00-BF17-D7EF249CDF2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxngm.081.232",
            "matchCriteriaId" : "F3C9D27E-A180-4E8F-AD3A-14F748BFCB8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB750119-27F6-4396-B57B-31433B7B530E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FBE71-B5A5-465E-8FB1-BCD96975AD66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.232",
            "matchCriteriaId" : "9714DFB2-71EC-48EF-8C7D-180E9CF25F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634239D9-C252-4A62-9011-EC84C350B18E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8865944-83D8-4A28-9C7D-7B4B49F7A336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E680BC56-B202-4E9D-8198-E1B6A3601A99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62FB932-5BCE-4367-A364-D02842C0016E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F495C0-11DE-4B21-8258-C1E4D45A2C0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD24F8-9ACF-4291-B1F4-3C06DC059E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70992A9D-5C32-49AB-8817-6B52C64E4E3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583FDFAC-3865-4F4C-AF65-96F38D368669"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DCC657-E900-4A93-B9C5-4194C33ECDE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CDCA43-88D9-4456-9A70-112618837BD0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.232",
            "matchCriteriaId" : "89F469FF-525C-4D44-AE59-2EDA5D1AEE15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95ACDD2C-B717-4283-9424-B5BC2BD25644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CA5145-011E-4E76-998B-272ED0CAF2F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299DED47-FE60-46FE-9097-11A3732DC436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms823:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8A8233-6CE3-4D36-B1D4-BC46ED299C10"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9233CF87-7E79-4322-B389-3D9731F60DB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.232",
            "matchCriteriaId" : "13851619-F91B-445F-8194-3D608112EE2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7641B7-4665-4DD6-954C-E4F0E5BA64BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C51550-986B-410D-BD55-083E6EC2B846"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6976E38-574A-4C73-A204-2C4AC56C5487"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4C2EF9-8328-40DF-AEB2-6AC17E541284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.232",
            "matchCriteriaId" : "98740BF5-F515-45D8-843B-263E8B35B84D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2770:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6AD09BB-1693-41BC-833C-8FA41506F257"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF88693A-50D8-471B-A50A-E8BB1CCF11A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx722:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBAD67F-64B8-4451-AFE5-FF403D659664"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A408158-0B98-41BC-86D1-FF0754936145"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9808F6E2-5D9A-4016-AE5B-FFAB814D90BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B609A2-FEFE-414E-B3C2-4961A4871FFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0AA674-75B3-4D6A-B2BB-6CC7EC6A836D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65DAFB2-F4E3-4290-8282-738BF6222B4B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7355:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BEEF7-A8FB-4951-8784-EDED0D766C9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC95D3-55D5-4BE2-94A3-148EB33D4707"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DAB6F85-C543-4D9C-B067-838C8F02AF13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DE4CF6-250C-4006-B43E-A6882B75FB31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B04C61-3778-4E64-A4EC-981107894747"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.232",
            "matchCriteriaId" : "06F77770-6E5B-4EC2-A89E-672D2F3DF6D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAD3B2F-27D5-4BEC-B077-DC4FBA003CFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A68A21-225E-423C-AAE0-14090219C821"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6035F21-30E3-4F1D-BFE4-FF85B448ACEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2767C20-AEF6-4579-9FE9-3FA29D6EAF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbn.081.232",
            "matchCriteriaId" : "FCB2FC66-BBEB-4077-A5DB-77E3E5532FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B4CB69-F0A5-481B-8299-E4F0C5A3CF35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDE9642-279D-4D7E-B84E-99F5C018CF56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3EA4D6-5864-42C8-B387-C7AAB57CBD5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbl.081.232",
            "matchCriteriaId" : "1B523A9F-CE99-476F-8327-6043D0963EAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803DB805-F722-4805-8FAF-7BBFF64D61BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D63AA7F-B09F-4EF5-A852-BD24539E8EB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.232",
            "matchCriteriaId" : "99F6EE49-07B0-4DAF-9B0D-02CCDDCD4D4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF902A2-386C-476F-8072-6BEFC98CD714"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F3FBD9-DAC0-4899-B86B-A79216654F12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAC5415-5C09-430C-A720-6844B29DB61E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1EB502-E0F7-4919-B1E4-A74B0691DE1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E7B4F1-ABF2-450B-80EA-170FB7274CDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA90E36-F0CD-47E2-91E4-5FB7C3FFF49A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3980C15B-F3B4-4F9B-8FBA-1DF7D61C77EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxnzj.081.232",
            "matchCriteriaId" : "D694AE72-D622-4D50-A03A-8844EA6B7526"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9088F2C-DC67-446D-8C50-AB2FEB64DEAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C901E4-6D93-4537-889E-96D25763AF5E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3E6AB1-3272-4D8E-ACB3-767DEBDCED6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.233",
            "matchCriteriaId" : "99ABCB60-7E1B-45D6-A02A-E458B548736A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBF8770-3E91-49BC-8AE9-E82E6399D802"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7BCA73-8C60-49F5-A62C-126D62A8D701"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx827:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EB1C23-D232-4248-9595-E8500B48ED09"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx86:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4948202B-2B56-4CD0-B924-AF122058B553"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc6152:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937C63CA-228C-4142-BB3A-F25A09908F92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc6153:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BDF3B6-F726-48E9-AF59-8F4CF653F233"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6BE517-427A-4335-8FCD-8A721A9E507C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E731776-CCAE-467E-9423-1155B280358B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4E2BF7-2D02-4D9C-BE01-F20FDA54DB12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpp.081.233",
            "matchCriteriaId" : "5DE7B33C-AE66-4507-AB6B-429167FEE133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c6160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48E10C08-E129-4482-92B1-67FD6C0D0407"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F7DA0B-6E3C-42E6-95DA-6DD8936D0E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs827:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B3F51DA-5CA4-41E1-9373-34232F509FED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstat_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstat.081.233",
            "matchCriteriaId" : "B874B6BB-C7EA-4D89-AC12-34141E83601C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324EC762-1276-4121-916B-9981925F242D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04BB304-0623-4018-BCCC-7B648FC8DEC1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6B2ACE-BEDB-49AD-B570-F7F43697D221"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs727:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4C7A81-DC8F-4495-AA75-FACE73D45CC5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs728:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430136AA-E687-4A32-8BDF-196E4C4246E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtat_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.233",
            "matchCriteriaId" : "DDD8D85A-F665-4261-BB6C-9C359D241D8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED5958-CE75-43F3-A7A0-2C5379EB8A13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx727:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379FF636-A26B-4588-A0E2-AFDDEAAE6BBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB82D190-FB73-4C28-B0F2-24EEEF384BB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4143:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5D6B0C-88D7-4CF2-8725-B00FA1225E42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A27B92-5F83-4280-93EA-31F115408405"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4153:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722989FF-9005-48B7-9082-E9629518E651"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstmh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstmh.081.233",
            "matchCriteriaId" : "4E1CA745-1F71-487E-AD86-6795F5FE64C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8DAABA-2FF6-4C75-AD16-B1CDD788B3B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs923:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B4F96C-E2A2-4BFA-B99B-4CE7EC663925"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs927:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0540292B-3C4E-4C29-8FEE-A8749BE23265"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/174763/Lexmark-Device-Embedded-Web-Server-Remote-Code-Execution.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26068.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/174763/Lexmark-Device-Embedded-Web-Server-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26068.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T20:15:10.557",
      "lastModified" : "2025-02-11T17:15:18.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.232",
            "matchCriteriaId" : "10451FB6-3389-4605-A808-4DD38E5FB032"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EC3C2D-406D-4CD1-A1BF-88F63B1F6E93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A3FA9A-DB24-4269-A0A4-77CA9FF73C82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx942:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B466E76-C396-4B47-9E97-998B700F6921"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4198F4D5-A322-47EE-B892-72C3AD34F825"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx944:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E16872-A4E1-4546-918F-97239D8C88AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCF1F44-23E2-412D-B740-C4F6371BA028"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C842AC2-2A47-4C50-A0D9-E96986DBA0F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9445:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D39C09A6-FCDA-4E5B-8D8A-10A28E72A2C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "922062B4-D3B4-4F79-BF97-84A271B020B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9465:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948107F0-8F0D-461F-9438-AC6D8C7D6C84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpc.081.232",
            "matchCriteriaId" : "3EEC579E-AE23-4076-BC65-82EFAA863B78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F579ACB5-C2E8-42BD-95D2-95061A90F30D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtct.081.232",
            "matchCriteriaId" : "6C41084B-7F4F-481F-97AB-ED07D83AD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx432:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3F5A3E-2903-4761-9543-0E0FDE12E9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3142:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EECF0-E7D5-43CC-9518-948EC1141BAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtpm.081.232",
            "matchCriteriaId" : "12804945-54A6-4119-8A5E-20D52649E591"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F8E629-1386-4BE2-BB77-9E8848447C49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmm.081.232",
            "matchCriteriaId" : "4B4C1F27-EAF3-4E59-9772-55F256AA8450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB85C612-9809-42C3-A127-926BE020ACE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F532C112-9B6B-416D-9B86-F153C493804F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4606439C-2F39-48CB-BDCC-19CE0FC3A203"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D8D43A-7A81-494E-AD5A-0DC5F54C0071"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslsg.081.232",
            "matchCriteriaId" : "9E00A58D-320B-4FE6-9593-94B407E16D10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2A7AC6-85E8-47F4-A6E1-E70105053899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlsg.081.232",
            "matchCriteriaId" : "A78A08BD-F20C-4BFE-83F1-E6933A47F3E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52775C7A-5ED3-412B-9765-C8A26D7DAEDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.232",
            "matchCriteriaId" : "FE8F3B57-BF60-4D6E-A3D7-6747FCC789DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A789D5F-A457-4FE8-88AD-4697EA0D38B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDF3AF9-D84E-4491-AD76-CF03EAA10463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4B4172-AF47-4CA5-8404-2834AD1E3114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A517255B-A5DB-4724-AA30-F89CB6D0D982"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFA9698-5E53-4C15-AD28-7B330CE688E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33822D70-E578-4518-A89E-586E48F0C093"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlbd.081.232",
            "matchCriteriaId" : "9B160370-FDFF-4A27-9D30-12CDF6CBD126"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DFF38B-E948-4DFF-B4AF-5B0D2D72B8FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F2F52D-9616-47F0-A0B8-EF1DC61D88AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95DEE18-CDEA-4AB4-9B3D-C1712720C4CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B2AB4-CB58-484B-AFD0-277EABF06985"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.232",
            "matchCriteriaId" : "AF2E8636-1A16-41C1-A36C-92790926678B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF936040-A3F2-42FA-997E-3DA8461E71B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C7770D-E3F8-4754-95D0-6A231D46F158"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DBB30-746A-4103-8303-6CAF563658A9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76B6022-D160-40E4-B533-6FAC3B43B190"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87CFBE1-5158-44F3-B2E3-19CB30A241C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A77A401-9EAE-49BA-8B75-F9FF7EAB4398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D10416B-76DC-4265-970E-38EB1E17C0B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F466924-8C21-4361-B7AC-5DED39B5083D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBD07B7-AAF5-428C-B03F-7C823240219D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33285B7-DF76-4DDD-BE74-AFC12B8DFF0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms621:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455281E2-37FF-4E7C-93E8-F0DC3B0CE5F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B551EFE-75DC-4D00-BF17-D7EF249CDF2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxngm.081.232",
            "matchCriteriaId" : "F3C9D27E-A180-4E8F-AD3A-14F748BFCB8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB750119-27F6-4396-B57B-31433B7B530E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FBE71-B5A5-465E-8FB1-BCD96975AD66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.232",
            "matchCriteriaId" : "9714DFB2-71EC-48EF-8C7D-180E9CF25F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634239D9-C252-4A62-9011-EC84C350B18E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8865944-83D8-4A28-9C7D-7B4B49F7A336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E680BC56-B202-4E9D-8198-E1B6A3601A99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62FB932-5BCE-4367-A364-D02842C0016E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F495C0-11DE-4B21-8258-C1E4D45A2C0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD24F8-9ACF-4291-B1F4-3C06DC059E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70992A9D-5C32-49AB-8817-6B52C64E4E3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583FDFAC-3865-4F4C-AF65-96F38D368669"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DCC657-E900-4A93-B9C5-4194C33ECDE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CDCA43-88D9-4456-9A70-112618837BD0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.232",
            "matchCriteriaId" : "89F469FF-525C-4D44-AE59-2EDA5D1AEE15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95ACDD2C-B717-4283-9424-B5BC2BD25644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CA5145-011E-4E76-998B-272ED0CAF2F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299DED47-FE60-46FE-9097-11A3732DC436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms823:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8A8233-6CE3-4D36-B1D4-BC46ED299C10"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9233CF87-7E79-4322-B389-3D9731F60DB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.232",
            "matchCriteriaId" : "13851619-F91B-445F-8194-3D608112EE2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7641B7-4665-4DD6-954C-E4F0E5BA64BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C51550-986B-410D-BD55-083E6EC2B846"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6976E38-574A-4C73-A204-2C4AC56C5487"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4C2EF9-8328-40DF-AEB2-6AC17E541284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.232",
            "matchCriteriaId" : "98740BF5-F515-45D8-843B-263E8B35B84D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2770:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6AD09BB-1693-41BC-833C-8FA41506F257"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF88693A-50D8-471B-A50A-E8BB1CCF11A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx722:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBAD67F-64B8-4451-AFE5-FF403D659664"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A408158-0B98-41BC-86D1-FF0754936145"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9808F6E2-5D9A-4016-AE5B-FFAB814D90BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B609A2-FEFE-414E-B3C2-4961A4871FFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0AA674-75B3-4D6A-B2BB-6CC7EC6A836D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65DAFB2-F4E3-4290-8282-738BF6222B4B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7355:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BEEF7-A8FB-4951-8784-EDED0D766C9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC95D3-55D5-4BE2-94A3-148EB33D4707"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DAB6F85-C543-4D9C-B067-838C8F02AF13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DE4CF6-250C-4006-B43E-A6882B75FB31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B04C61-3778-4E64-A4EC-981107894747"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.232",
            "matchCriteriaId" : "06F77770-6E5B-4EC2-A89E-672D2F3DF6D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAD3B2F-27D5-4BEC-B077-DC4FBA003CFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A68A21-225E-423C-AAE0-14090219C821"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6035F21-30E3-4F1D-BFE4-FF85B448ACEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2767C20-AEF6-4579-9FE9-3FA29D6EAF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbn.081.232",
            "matchCriteriaId" : "FCB2FC66-BBEB-4077-A5DB-77E3E5532FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B4CB69-F0A5-481B-8299-E4F0C5A3CF35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDE9642-279D-4D7E-B84E-99F5C018CF56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3EA4D6-5864-42C8-B387-C7AAB57CBD5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbl.081.232",
            "matchCriteriaId" : "1B523A9F-CE99-476F-8327-6043D0963EAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803DB805-F722-4805-8FAF-7BBFF64D61BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D63AA7F-B09F-4EF5-A852-BD24539E8EB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.232",
            "matchCriteriaId" : "99F6EE49-07B0-4DAF-9B0D-02CCDDCD4D4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF902A2-386C-476F-8072-6BEFC98CD714"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F3FBD9-DAC0-4899-B86B-A79216654F12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAC5415-5C09-430C-A720-6844B29DB61E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1EB502-E0F7-4919-B1E4-A74B0691DE1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E7B4F1-ABF2-450B-80EA-170FB7274CDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA90E36-F0CD-47E2-91E4-5FB7C3FFF49A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3980C15B-F3B4-4F9B-8FBA-1DF7D61C77EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxnzj.081.232",
            "matchCriteriaId" : "D694AE72-D622-4D50-A03A-8844EA6B7526"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9088F2C-DC67-446D-8C50-AB2FEB64DEAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C901E4-6D93-4537-889E-96D25763AF5E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3E6AB1-3272-4D8E-ACB3-767DEBDCED6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpp.081.233",
            "matchCriteriaId" : "99ABCB60-7E1B-45D6-A02A-E458B548736A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EBF8770-3E91-49BC-8AE9-E82E6399D802"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A7BCA73-8C60-49F5-A62C-126D62A8D701"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx827:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5EB1C23-D232-4248-9595-E8500B48ED09"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx86:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4948202B-2B56-4CD0-B924-AF122058B553"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc6152:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937C63CA-228C-4142-BB3A-F25A09908F92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc6153:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BDF3B6-F726-48E9-AF59-8F4CF653F233"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6BE517-427A-4335-8FCD-8A721A9E507C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E731776-CCAE-467E-9423-1155B280358B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc8163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4E2BF7-2D02-4D9C-BE01-F20FDA54DB12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpp.081.233",
            "matchCriteriaId" : "5DE7B33C-AE66-4507-AB6B-429167FEE133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c6160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48E10C08-E129-4482-92B1-67FD6C0D0407"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F7DA0B-6E3C-42E6-95DA-6DD8936D0E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs827:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B3F51DA-5CA4-41E1-9373-34232F509FED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstat_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstat.081.233",
            "matchCriteriaId" : "B874B6BB-C7EA-4D89-AC12-34141E83601C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324EC762-1276-4121-916B-9981925F242D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04BB304-0623-4018-BCCC-7B648FC8DEC1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6B2ACE-BEDB-49AD-B570-F7F43697D221"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs727:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4C7A81-DC8F-4495-AA75-FACE73D45CC5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs728:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "430136AA-E687-4A32-8BDF-196E4C4246E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtat_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtat.081.233",
            "matchCriteriaId" : "DDD8D85A-F665-4261-BB6C-9C359D241D8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED5958-CE75-43F3-A7A0-2C5379EB8A13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx727:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "379FF636-A26B-4588-A0E2-AFDDEAAE6BBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB82D190-FB73-4C28-B0F2-24EEEF384BB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4143:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD5D6B0C-88D7-4CF2-8725-B00FA1225E42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74A27B92-5F83-4280-93EA-31F115408405"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4153:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "722989FF-9005-48B7-9082-E9629518E651"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstmh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstmh.081.233",
            "matchCriteriaId" : "4E1CA745-1F71-487E-AD86-6795F5FE64C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs921:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8DAABA-2FF6-4C75-AD16-B1CDD788B3B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs923:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B4F96C-E2A2-4BFA-B99B-4CE7EC663925"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs927:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0540292B-3C4E-4C29-8FEE-A8749BE23265"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26069.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26069.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T20:15:10.637",
      "lastModified" : "2025-02-11T17:15:18.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtpc.081.232",
            "matchCriteriaId" : "10451FB6-3389-4605-A808-4DD38E5FB032"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1EC3C2D-406D-4CD1-A1BF-88F63B1F6E93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A3FA9A-DB24-4269-A0A4-77CA9FF73C82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx942:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B466E76-C396-4B47-9E97-998B700F6921"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4198F4D5-A322-47EE-B892-72C3AD34F825"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx944:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E16872-A4E1-4546-918F-97239D8C88AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCF1F44-23E2-412D-B740-C4F6371BA028"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C842AC2-2A47-4C50-A0D9-E96986DBA0F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9445:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D39C09A6-FCDA-4E5B-8D8A-10A28E72A2C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "922062B4-D3B4-4F79-BF97-84A271B020B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc9465:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948107F0-8F0D-461F-9438-AC6D8C7D6C84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstpc.081.232",
            "matchCriteriaId" : "3EEC579E-AE23-4076-BC65-82EFAA863B78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs943:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F579ACB5-C2E8-42BD-95D2-95061A90F30D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtct.081.232",
            "matchCriteriaId" : "6C41084B-7F4F-481F-97AB-ED07D83AD0FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx432:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3F5A3E-2903-4761-9543-0E0FDE12E9B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3142:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EECF0-E7D5-43CC-9518-948EC1141BAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtpm.081.232",
            "matchCriteriaId" : "12804945-54A6-4119-8A5E-20D52649E591"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F8E629-1386-4BE2-BB77-9E8848447C49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtmm.081.232",
            "matchCriteriaId" : "4B4C1F27-EAF3-4E59-9772-55F256AA8450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB85C612-9809-42C3-A127-926BE020ACE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F532C112-9B6B-416D-9B86-F153C493804F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4606439C-2F39-48CB-BDCC-19CE0FC3A203"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4352:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D8D43A-7A81-494E-AD5A-0DC5F54C0071"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslsg.081.232",
            "matchCriteriaId" : "9E00A58D-320B-4FE6-9593-94B407E16D10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2A7AC6-85E8-47F4-A6E1-E70105053899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlsg.081.232",
            "matchCriteriaId" : "A78A08BD-F20C-4BFE-83F1-E6933A47F3E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2236:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52775C7A-5ED3-412B-9765-C8A26D7DAEDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mslbd.081.232",
            "matchCriteriaId" : "FE8F3B57-BF60-4D6E-A3D7-6747FCC789DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A789D5F-A457-4FE8-88AD-4697EA0D38B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEDF3AF9-D84E-4491-AD76-CF03EAA10463"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4B4172-AF47-4CA5-8404-2834AD1E3114"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A517255B-A5DB-4724-AA30-F89CB6D0D982"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFA9698-5E53-4C15-AD28-7B330CE688E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33822D70-E578-4518-A89E-586E48F0C093"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxlbd.081.232",
            "matchCriteriaId" : "9B160370-FDFF-4A27-9D30-12CDF6CBD126"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44DFF38B-E948-4DFF-B4AF-5B0D2D72B8FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F2F52D-9616-47F0-A0B8-EF1DC61D88AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D95DEE18-CDEA-4AB4-9B3D-C1712720C4CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B2AB4-CB58-484B-AFD0-277EABF06985"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngm.081.232",
            "matchCriteriaId" : "AF2E8636-1A16-41C1-A36C-92790926678B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF936040-A3F2-42FA-997E-3DA8461E71B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09C7770D-E3F8-4754-95D0-6A231D46F158"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DBB30-746A-4103-8303-6CAF563658A9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C76B6022-D160-40E4-B533-6FAC3B43B190"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87CFBE1-5158-44F3-B2E3-19CB30A241C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A77A401-9EAE-49BA-8B75-F9FF7EAB4398"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D10416B-76DC-4265-970E-38EB1E17C0B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F466924-8C21-4361-B7AC-5DED39B5083D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CBD07B7-AAF5-428C-B03F-7C823240219D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33285B7-DF76-4DDD-BE74-AFC12B8DFF0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms621:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455281E2-37FF-4E7C-93E8-F0DC3B0CE5F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B551EFE-75DC-4D00-BF17-D7EF249CDF2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxngm.081.232",
            "matchCriteriaId" : "F3C9D27E-A180-4E8F-AD3A-14F748BFCB8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2338:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB750119-27F6-4396-B57B-31433B7B530E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1FBE71-B5A5-465E-8FB1-BCD96975AD66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgm.081.232",
            "matchCriteriaId" : "9714DFB2-71EC-48EF-8C7D-180E9CF25F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "634239D9-C252-4A62-9011-EC84C350B18E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8865944-83D8-4A28-9C7D-7B4B49F7A336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E680BC56-B202-4E9D-8198-E1B6A3601A99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D62FB932-5BCE-4367-A364-D02842C0016E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F495C0-11DE-4B21-8258-C1E4D45A2C0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BCD24F8-9ACF-4291-B1F4-3C06DC059E8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70992A9D-5C32-49AB-8817-6B52C64E4E3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1242:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583FDFAC-3865-4F4C-AF65-96F38D368669"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm1246:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DCC657-E900-4A93-B9C5-4194C33ECDE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92CDCA43-88D9-4456-9A70-112618837BD0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "msngw.081.232",
            "matchCriteriaId" : "89F469FF-525C-4D44-AE59-2EDA5D1AEE15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:b2865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95ACDD2C-B717-4283-9424-B5BC2BD25644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CA5145-011E-4E76-998B-272ED0CAF2F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "299DED47-FE60-46FE-9097-11A3732DC436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms823:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8A8233-6CE3-4D36-B1D4-BC46ED299C10"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms825:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9233CF87-7E79-4322-B389-3D9731F60DB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mstgw.081.232",
            "matchCriteriaId" : "13851619-F91B-445F-8194-3D608112EE2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7641B7-4665-4DD6-954C-E4F0E5BA64BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35C51550-986B-410D-BD55-083E6EC2B846"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6976E38-574A-4C73-A204-2C4AC56C5487"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4C2EF9-8328-40DF-AEB2-6AC17E541284"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "mxtgw.081.232",
            "matchCriteriaId" : "98740BF5-F515-45D8-843B-263E8B35B84D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mb2770:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6AD09BB-1693-41BC-833C-8FA41506F257"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF88693A-50D8-471B-A50A-E8BB1CCF11A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx722:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBAD67F-64B8-4451-AFE5-FF403D659664"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx725:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A408158-0B98-41BC-86D1-FF0754936145"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx822:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9808F6E2-5D9A-4016-AE5B-FFAB814D90BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx826:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B609A2-FEFE-414E-B3C2-4961A4871FFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5365:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0AA674-75B3-4D6A-B2BB-6CC7EC6A836D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65DAFB2-F4E3-4290-8282-738BF6222B4B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7355:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BEEF7-A8FB-4951-8784-EDED0D766C9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAEC95D3-55D5-4BE2-94A3-148EB33D4707"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DAB6F85-C543-4D9C-B067-838C8F02AF13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5DE4CF6-250C-4006-B43E-A6882B75FB31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B04C61-3778-4E64-A4EC-981107894747"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbl.081.232",
            "matchCriteriaId" : "06F77770-6E5B-4EC2-A89E-672D2F3DF6D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCAD3B2F-27D5-4BEC-B077-DC4FBA003CFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A68A21-225E-423C-AAE0-14090219C821"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6035F21-30E3-4F1D-BFE4-FF85B448ACEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cslbn.081.232",
            "matchCriteriaId" : "836B22BA-C775-4AD3-8682-D5B50D874257"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2767C20-AEF6-4579-9FE9-3FA29D6EAF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbn.081.232",
            "matchCriteriaId" : "FCB2FC66-BBEB-4077-A5DB-77E3E5532FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B4CB69-F0A5-481B-8299-E4F0C5A3CF35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FDE9642-279D-4D7E-B84E-99F5C018CF56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D3EA4D6-5864-42C8-B387-C7AAB57CBD5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxlbl.081.232",
            "matchCriteriaId" : "1B523A9F-CE99-476F-8327-6043D0963EAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803DB805-F722-4805-8FAF-7BBFF64D61BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc3326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D63AA7F-B09F-4EF5-A852-BD24539E8EB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cxtzj.081.232",
            "matchCriteriaId" : "99F6EE49-07B0-4DAF-9B0D-02CCDDCD4D4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF902A2-386C-476F-8072-6BEFC98CD714"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44F3FBD9-DAC0-4899-B86B-A79216654F12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAC5415-5C09-430C-A720-6844B29DB61E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1EB502-E0F7-4919-B1E4-A74B0691DE1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E7B4F1-ABF2-450B-80EA-170FB7274CDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2235:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA90E36-F0CD-47E2-91E4-5FB7C3FFF49A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc4240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3980C15B-F3B4-4F9B-8FBA-1DF7D61C77EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cstzj.081.232",
            "matchCriteriaId" : "F9DDB467-D24E-4338-A21F-9D3A4B177582"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A32FC324-86F1-46FF-8BC9-D07836FF4788"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs622:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99133BE3-FCD9-4E0C-A70A-9BFAA4FE4FFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "csnzj.081.232",
            "matchCriteriaId" : "25568A12-16B8-42D4-9EB2-6E8A15A82432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EC168E-ABDE-4EFB-9049-98D85E337E4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28502B-8F3B-4A56-AAEC-DE10D79BE26C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2535:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F3E6955-15E7-4E8F-A595-72E8BF5D95CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575D4001-506A-4A21-A119-AE4FEAF67765"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E5D64FB-3315-4D74-A324-5BF11AF2209C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9088F2C-DC67-446D-8C50-AB2FEB64DEAD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc232:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99A596E0-0CF5-4902-AD78-798C6DE5A1E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mc2425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3E6AB1-3272-4D8E-ACB3-767DEBDCED6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.sb7.p234",
            "matchCriteriaId" : "B0B9A6AD-2F90-45B0-8529-65875C62D602"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00E5518D-CB23-485A-9963-61130A5DBC50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E12878-A625-4132-829D-831626601E24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9552AFCD-342F-4609-A30A-8F8AAAC800B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C67FAF3-7FF5-4EE6-BD58-30EA076632DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn2.p234",
            "matchCriteriaId" : "50089957-05AE-4951-8DF8-FFB5786A7450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B29B39AF-5995-4182-AEA2-DA2DC0B301C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780146FF-B2A1-4E36-A39D-ACA855F6B6F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475FC7BB-B0F1-4A92-A960-CBE4B5D5C3BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F346873-FAC6-4285-BAFF-F4FEF879BA74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58869BC2-4312-4400-BA25-1C8CFF6B29CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFEF4E79-54EC-44E6-A6E4-81EF6F009DA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C34B111-487D-4826-9155-1976C01A5885"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8133E135-52F0-44D9-A905-C4D658BB4FCA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn4.p234",
            "matchCriteriaId" : "1E8F237E-8099-49F5-9C01-F58F54769BAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E49B15-8841-4D2B-9330-0AF6491D50AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD27A4E-227D-4A8D-9F2E-326235632475"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8648D99B-5FCD-475F-B393-A65F23100693"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn7.p234",
            "matchCriteriaId" : "81B5117D-8682-4D4C-BF20-76864B29A059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FB7B24-D362-4C72-A611-11DB6A38ECEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21769FA-B269-4DC9-BDCE-21E22758548E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.dn7.p234",
            "matchCriteriaId" : "81B5117D-8682-4D4C-BF20-76864B29A059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FB7B24-D362-4C72-A611-11DB6A38ECEF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21769FA-B269-4DC9-BDCE-21E22758548E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.tu.p234",
            "matchCriteriaId" : "00BAC02F-B104-4335-9872-71EA9DC14F25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "493415AD-B0B0-43F0-8831-1EB1A0DA2E7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14A85F9-B2B8-4210-8FB3-33DB52803F5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C616A5-0008-4A1A-B84E-15DF697CDC9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "100AF863-37A5-4265-9779-DFD3E009CC32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF515935-1118-43DC-AE2B-8382E93C7297"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DB5E528-E975-4480-AE5C-7081836B9ED8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD23AA59-2714-4EE2-A9A9-70A0556B8064"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D56EF54E-BEB4-463B-A5C4-C30B205AD32E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807F197F-D330-4961-B494-9C391772C4B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55FC55FD-6CF6-4F89-A3DB-5A9235F4565C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEAA1A57-2D20-4D16-8C01-55EF4450E00F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "145FE266-3E30-45CC-977D-5B21EC99B44A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C00C2D0-5FC3-4ABD-A73C-F91F649694CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2402362D-E65C-4375-88ED-513BD2C59B3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5405193-EF2C-4284-AF81-F048EC328F1B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72FB99BA-D39C-4849-853B-27AFAC823456"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.sa.p234",
            "matchCriteriaId" : "95ED04DE-7AA7-4135-9894-42EAE01327F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2883713-1B32-45E8-93E6-14DD7C84F8C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.mg.p234",
            "matchCriteriaId" : "157EDA59-86CE-48CC-B225-098F5ADC7F3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92B170E-C9DC-4321-9A47-AC23FCB8E0F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8758E2D2-4289-48DD-8D1C-62F750A68EB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECF3BAC-D13A-4491-98D1-4087B0A77C44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B02A0AC-DF0E-4415-BACF-89720BA59B5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D65866F-02B7-42C6-897B-32CDFD1C4954"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D60095D-4219-4253-B297-1BD089B794ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.jd.p234",
            "matchCriteriaId" : "82E32EF0-43A5-4E35-A6CC-80A589247314"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA2E669-0926-424C-8B86-9B93CE908E71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vyl.p234",
            "matchCriteriaId" : "3A31FB87-CABE-4900-85D4-FD0A05C8D2EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "614C8E51-6772-4D8E-9A88-A9527F591CB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7327DE-F263-45A4-A49A-60575E144B49"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vy2.p234",
            "matchCriteriaId" : "A46F4F50-441D-484E-8D1F-45F94C3EAA7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDBF9CF4-717D-482D-B3E7-11AD020C3D9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F356A83-68DA-48AA-8A3F-C2569B515039"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.vy4.p234",
            "matchCriteriaId" : "4AC8372B-D4A4-4F85-A786-48607DEC7478"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392214B8-A623-4C97-B88E-18CA35219B6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A345F94-77AB-461E-9D76-86FA91FF6EC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46ADE9C7-10F5-4A7F-9D0A-44E8DC6B5CA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm2.p234",
            "matchCriteriaId" : "7CD50456-BEF5-4648-9A3F-8393A6603081"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120D793F-6E06-4BC4-BF05-AFF46A544620"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C025E9F-4499-4741-AFA8-B3F30A84F3F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm4.p234",
            "matchCriteriaId" : "8F39D5DC-3914-4DC6-BE77-5A56A798D7EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5930B1-9B1A-4C89-9B3F-79C2628CC66C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "165E0437-1236-4572-8BD3-AC8EA767DFB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE90B007-DEE3-496B-A475-899288F03C90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lw80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lw80.gm7.p234",
            "matchCriteriaId" : "B0CDEE9E-ABEB-45A6-A87C-07AD94B5498D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A0D0C1A-C7E1-4FAD-9A02-1200A9A61CCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "134399DF-8233-4B0E-8995-F9F4084C9E95"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "254C6BED-F09C-4654-BCB5-B768B6C01654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.cm2.p760",
            "matchCriteriaId" : "E9980E57-2A77-46FF-8A77-1C3BF7EA4059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A0A7E6-4E78-4B26-ACF2-8D8C5C6DCDD7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.cm4.p760",
            "matchCriteriaId" : "51D8D4D6-D790-4694-B820-13BA8DF3684D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "250FDD9D-22A5-4678-8472-841806AEEBDA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC24D0C-6A8A-469C-8BE9-4D1F4948FAAF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hc.p760",
            "matchCriteriaId" : "9FE57F43-3F55-417F-89A1-7447BDD50DBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CB4A43-620C-444F-8195-8C3A768E0AE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30DFC422-7DF1-4490-A694-FF4C5F0A93ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hv.p760",
            "matchCriteriaId" : "46997857-CC0E-49CB-919D-79F679B8EC1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88F49A46-CC8C-4EE8-BAC0-6B149DF6E02D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.tp.p760",
            "matchCriteriaId" : "1F6106B5-D8D9-4736-BE8E-84A49B44EE94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B41B754-388B-4C2F-80C2-AAE7F1D0E49E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.vk.p760",
            "matchCriteriaId" : "1CDA249E-AA9D-4BAD-9E51-710B83F00A3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D568DD45-4C48-4E83-B4EC-9DC993F64668"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5266B66-422E-48AC-A870-0C7126F82811"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.ny.p760",
            "matchCriteriaId" : "B8C65CCC-1305-41C5-B8EB-A0EE72EF5191"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FCC26F-68CC-40A7-954A-0064931A2CEC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690A1F9E-5C7B-4287-B79F-A524E5FB8921"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74475B2B-E33B-4F90-AB8E-BF0444141937"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.mr.p760",
            "matchCriteriaId" : "86486F32-BFD8-4C6A-B087-9B429F735923"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F722053-DE00-4F16-B380-E4CE2509512E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACF0681E-D245-4294-BB77-C51FA1881562"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66E2A88-0160-4B36-A4F9-0AB424FBE92A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C71A2E3-1F3B-4CA0-BCA3-3C0038166CA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.hk.p760",
            "matchCriteriaId" : "90439A93-20DE-4FB2-BCBD-872197C7D46B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE3DE4-0F65-4591-A011-2665FE829670"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A012A8B-26D5-4C90-815E-DFE0FB98BAF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.tq.p760",
            "matchCriteriaId" : "CB254C47-6A2A-4622-A401-73C595F30AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72601869-C035-4446-9AEA-FC63F837B6D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6922B7-94AE-4CCA-A0CB-E9C6FAD6E8F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2ECE52-74AE-45BE-A2BF-E72CECE417FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "045C3434-933C-4288-A0E1-36B6A493B601"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D5E005-4175-4803-A09D-348240EC103D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lhs60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lhs60.jr.p760",
            "matchCriteriaId" : "38F8D4D6-A6F2-45EE-B06B-E90C8F482E40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D700553E-6B0C-4857-9063-D1B4668349AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.sk.p838",
            "matchCriteriaId" : "DFE36C76-2AE4-41D8-A925-917C53D6EC44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c734:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1812A3ED-B326-443A-A3C7-F554322FE0BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.ske.p838",
            "matchCriteriaId" : "6EB2C85E-8635-42B2-A7CD-69DC693827AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:c736:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F54A331A-97D2-4C98-8BDF-FB03D29E2A50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.lbh.p838",
            "matchCriteriaId" : "77491EE3-E56B-44A1-9DDC-4C89CEF863E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:e46x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEF48A9-4DB6-4B70-960D-7DE8B0A382FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.jp.p838",
            "matchCriteriaId" : "A13F0B63-EA89-4E05-B05D-C56A3B4819B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:t65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C555BB-5B72-4B16-B1A5-EE6313F5B829"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.bs.p838",
            "matchCriteriaId" : "E9045502-41C2-445E-BEC1-46A7473F31C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x46x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA3AE69-430A-435B-9680-EEE8F964FB6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.mn.p838",
            "matchCriteriaId" : "7CF57EF2-D46E-4EF4-82EC-C0EF8A5667C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595374B9-5554-451E-A122-4DD25200C9F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.mn.p838",
            "matchCriteriaId" : "7CF57EF2-D46E-4EF4-82EC-C0EF8A5667C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x65x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595374B9-5554-451E-A122-4DD25200C9F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lr.fl.p838",
            "matchCriteriaId" : "4F16936B-89B6-4BE8-BE98-595D85CBFBBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x73x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D041F36B-7CC8-472E-98F2-AA96FD16D527"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lp.jb.p837",
            "matchCriteriaId" : "7DC56DB9-2942-4788-97C6-5292D5BFB494"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:w850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB4E3C5-CBCE-4713-A552-7A00AAEDA312"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lexmark:lp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "lp.sp.p837",
            "matchCriteriaId" : "8DEA71E7-AA42-439F-B655-DC6E024D098C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lexmark:x86x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C369427B-75A9-44FD-91D1-050CDE442ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26070.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://publications.lexmark.com/publications/security-alerts/CVE-2023-26070.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lexmark.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T20:15:10.770",
      "lastModified" : "2025-02-11T17:15:19.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reuse an object that has been freed. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendesign:drawings_sdk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2024.1",
            "matchCriteriaId" : "A52911C5-169E-46B6-B4FC-B8EFD21954B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26466",
      "sourceIdentifier" : "security@pega.com",
      "published" : "2023-04-10T21:15:07.140",
      "lastModified" : "2024-11-21T07:51:33.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A user with non-Admin access can change a configuration file on the client to modify the Server URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@pega.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@pega.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pega:synchronization_engine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.1",
            "versionEndExcluding" : "3.1.30",
            "matchCriteriaId" : "259F5666-5993-4554-86F7-3D5803449B3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.pega.com/support-doc/pega-security-advisory-b23-robotics-and-workforce-intelligence-local-privilege",
        "source" : "security@pega.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.pega.com/support-doc/pega-security-advisory-b23-robotics-and-workforce-intelligence-local-privilege",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T21:15:07.220",
      "lastModified" : "2025-02-11T17:15:19.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting vulnerability found in Sales Tracker Management System v.1.0 allows a remote attacker to gain privileges via the product list function in the Master.php file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sales_tracker_management_system_project:sales_tracker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF52C94E-14A2-48E2-930E-56E6375C4846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/171686/Sales-Tracker-Management-System-1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/retrymp3",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16061/sales-tracker-management-system-using-php-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/users/tips23",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/171686/Sales-Tracker-Management-System-1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://twitter.com/retrymp3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16061/sales-tracker-management-system-using-php-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/users/tips23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T21:15:07.267",
      "lastModified" : "2025-05-05T16:15:32.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:g103_firmware:1.0.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20B50B9D-605D-4DE4-9785-FAA62019C25E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:g103:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1530E06E-43D9-44DE-9569-D5A6B1647378"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/B2eFly/Router/blob/main/Tenda/G103/1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/B2eFly/Router/blob/main/Tenda/G103/1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T21:15:07.307",
      "lastModified" : "2025-02-11T16:15:37.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary code via a crafted file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdidees:gdidees_cms:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F501DB2B-AE5D-4190-B54F-3F03241D7DA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Hadi999/4bc173bfb802c229b9bb397fa906847b",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvd.nist.gov/vuln/detail/CVE-2022-40797",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://salsa.debian.org/php-team/php/-/blob/dc253886b5b2e9bc8d9e36db787abb083a667fd8/debian/php-cgi.conf#L5-6",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.gdidees.eu/cms-1-0.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://gist.github.com/Hadi999/4bc173bfb802c229b9bb397fa906847b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvd.nist.gov/vuln/detail/CVE-2022-40797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://salsa.debian.org/php-team/php/-/blob/dc253886b5b2e9bc8d9e36db787abb083a667fd8/debian/php-cgi.conf#L5-6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.gdidees.eu/cms-1-0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28093",
      "sourceIdentifier" : "security@pega.com",
      "published" : "2023-04-10T21:15:07.343",
      "lastModified" : "2024-11-21T07:54:23.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A user with a compromised configuration can start an unsigned binary as a service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@pega.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@pega.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pega:synchronization_engine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.1",
            "versionEndExcluding" : "3.1.30",
            "matchCriteriaId" : "259F5666-5993-4554-86F7-3D5803449B3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.pega.com/support-doc/pega-security-advisory-b23-robotics-and-workforce-intelligence-local-privilege",
        "source" : "security@pega.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.pega.com/support-doc/pega-security-advisory-b23-robotics-and-workforce-intelligence-local-privilege",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29005",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-10T21:15:07.397",
      "lastModified" : "2025-03-07T14:37:51.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flask-AppBuilder versions before 4.3.0 lack rate limiting which can allow an attacker to brute-force user credentials. Version 4.3.0 includes the ability to enable rate limiting using `AUTH_RATE_LIMITED = True`, `RATELIMIT_ENABLED = True`, and setting an `AUTH_RATE_LIMIT`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dpgaspar:flask-appbuilder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.0",
            "matchCriteriaId" : "3AE0DD8F-06FA-4C1A-8896-D35F188E264D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://flask-limiter.readthedocs.io/en/stable/configuration.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-9hcr-9hcv-x6pv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://flask-limiter.readthedocs.io/en/stable/configuration.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-9hcr-9hcv-x6pv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1668",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-10T22:15:09.133",
      "lastModified" : "2025-04-23T17:16:28.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudbase:open_vswitch:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5.0",
            "versionEndExcluding" : "2.13.11",
            "matchCriteriaId" : "48C1C5E9-E256-43FD-9797-12F07441AAB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudbase:open_vswitch:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.14.0",
            "versionEndExcluding" : "2.14.9",
            "matchCriteriaId" : "A83DDD27-28AF-4ADA-9B8F-6573F29E9E22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudbase:open_vswitch:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.15.0",
            "versionEndExcluding" : "2.15.8",
            "matchCriteriaId" : "CB75186B-4FB7-473D-B249-5A023DA1FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudbase:open_vswitch:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.16.0",
            "versionEndExcluding" : "2.16.7",
            "matchCriteriaId" : "CD2D922F-E28D-4777-B0A9-814996568D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudbase:open_vswitch:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.17.0",
            "versionEndExcluding" : "2.17.6",
            "matchCriteriaId" : "B88C4B2D-F726-46E4-8021-42C5770CF91B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudbase:open_vswitch:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.4",
            "matchCriteriaId" : "92486D94-C16D-4422-986D-CC4BCC01F98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudbase:open_vswitch:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1AC9C8-68B9-413F-866F-46B279906B08"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932D137F-528B-4526-9A89-CD59FA1AB0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC81071-B46D-4F5D-AC25-B4A4CCC20C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3000D2-35DF-4A93-9FC0-1AD3AB8349B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack_platform:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7076B1E-0529-43CC-828B-45C2ED11F9F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBD7A51-0590-4DDF-8249-5AFA8D645CB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:fast_datapath:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A63D05D-BFAF-484B-BA49-5F5E399CDA02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*",
            "matchCriteriaId" : "053C1B35-3869-41C2-9551-044182DE0A64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2137666",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00000.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2GUNS3WSJG4TUDKZ5L7FXGJMVOD6EJZ/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-16",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5387",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/06/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Mitigation", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2137666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2GUNS3WSJG4TUDKZ5L7FXGJMVOD6EJZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1916",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-10T22:15:09.223",
      "lastModified" : "2024-11-21T07:40:08.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.5.0",
            "matchCriteriaId" : "0971DCAA-6393-477C-A3EF-D5A6BEF0E67F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/536%2C",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/537",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://support.apple.com/kb/HT213844",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/536",
        "source" : "nvd@nist.gov",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/536%2C",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gitlab.com/libtiff/libtiff/-/issues/537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://support.apple.com/kb/HT213844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24721",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-10T22:15:09.283",
      "lastModified" : "2025-02-11T16:15:32.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary web scripts or HTML."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liveaction:livesp:21.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57F8965-C04C-4C43-A7E9-BD77911CEF3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://liveaction.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/marcovntr/CVE/blob/main/2023/CVE-2023-24721/CVE-2023-24721.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://liveaction.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/marcovntr/CVE/blob/main/2023/CVE-2023-24721/CVE-2023-24721.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26467",
      "sourceIdentifier" : "security@pega.com",
      "published" : "2023-04-10T22:15:09.330",
      "lastModified" : "2024-11-21T07:51:33.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A man in the middle can redirect traffic to a malicious server in a compromised configuration."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@pega.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@pega.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pega:synchronization_engine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.1",
            "versionEndExcluding" : "3.1.30",
            "matchCriteriaId" : "259F5666-5993-4554-86F7-3D5803449B3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.pega.com/support-doc/pega-security-advisory-b23-robotics-and-workforce-intelligence-local-privilege",
        "source" : "security@pega.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.pega.com/support-doc/pega-security-advisory-b23-robotics-and-workforce-intelligence-local-privilege",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29192",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-10T22:15:09.397",
      "lastModified" : "2024-11-21T07:56:41.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SilverwareGames.io versions before 1.2.19 allow users with access to the game upload panel to edit download links for games uploaded by other developers. This has been fixed in version 1.2.19."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverwaregames:silverwaregames:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.19",
            "matchCriteriaId" : "ADB3A74A-835F-4226-A2D7-827CA7B4FF16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mesosoi/silverwaregames-io-issue-tracker/security/advisories/GHSA-m6h6-wph7-498f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mesosoi/silverwaregames-io-issue-tracker/security/advisories/GHSA-m6h6-wph7-498f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T01:15:07.030",
      "lastModified" : "2025-02-11T17:15:15.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /system/sshkeys.js."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openwrt:openwrt:22.03.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19481FF4-3DF2-4BC0-9D38-619C80F8C1E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ABB-EL/external-vulnerability-disclosures/security/advisories/GHSA-7vqh-2r8q-rjg2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openwrt/luci/commit/0186d7eae0e123a409e9919a83fdfecc7945c984",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openwrt/luci/commit/588381e2111079265cc3b20af33507052f1b58cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openwrt/luci/commit/aa7938d4cb3a3f889dead894ea19334ad07ade51",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ABB-EL/external-vulnerability-disclosures/security/advisories/GHSA-7vqh-2r8q-rjg2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openwrt/luci/commit/0186d7eae0e123a409e9919a83fdfecc7945c984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openwrt/luci/commit/588381e2111079265cc3b20af33507052f1b58cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/openwrt/luci/commit/aa7938d4cb3a3f889dead894ea19334ad07ade51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T01:15:07.070",
      "lastModified" : "2025-02-11T16:15:37.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the SharedPreference files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dualspace:super_security:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1655B8-5A70-4CA2-B515-63E1A2C1C5E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.dualspace.com/pc/en/products.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://apkpure.com/cn/super-security-virus-cleaner/com.ludashi.security",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27191/CVE%20detail.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.dualspace.com/pc/en/products.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://apkpure.com/cn/super-security-virus-cleaner/com.ludashi.security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27191/CVE%20detail.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T01:15:07.110",
      "lastModified" : "2025-02-10T21:15:15.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "71A91D5D-BA60-4FAC-92D7-DD477399A552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16300:*:*:*:*:*:*",
            "matchCriteriaId" : "725F03D7-8655-4C2C-8BC8-BD81A657E53C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16310:*:*:*:*:*:*",
            "matchCriteriaId" : "716C228E-FEB8-41D3-A290-BA4DB9D51717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16320:*:*:*:*:*:*",
            "matchCriteriaId" : "C73EC9D6-B2AD-4E68-B429-EBF9EA2A7618"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2023-28340.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2023-28340.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T01:15:07.143",
      "lastModified" : "2025-02-10T21:15:15.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "3B59BA41-4B35-4045-93B0-3C680F030E45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:15.9:build15990:*:*:*:*:*:*",
            "matchCriteriaId" : "F17AAB7B-79D3-4431-917D-83678ACBFAC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16300:*:*:*:*:*:*",
            "matchCriteriaId" : "725F03D7-8655-4C2C-8BC8-BD81A657E53C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16310:*:*:*:*:*:*",
            "matchCriteriaId" : "716C228E-FEB8-41D3-A290-BA4DB9D51717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16320:*:*:*:*:*:*",
            "matchCriteriaId" : "C73EC9D6-B2AD-4E68-B429-EBF9EA2A7618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16330:*:*:*:*:*:*",
            "matchCriteriaId" : "6251408C-2192-44E7-A8D8-92EE97BC3D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16340:*:*:*:*:*:*",
            "matchCriteriaId" : "9F50F891-EA20-4DAC-A100-C80FC455FF15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2023-28341.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2023-28341.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1903",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T03:15:07.023",
      "lastModified" : "2024-11-21T07:40:06.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP HCM Fiori App My Forms (Fiori 2.0) - version 605, does not perform necessary authorization checks for an authenticated user exposing the restricted header data.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:hcm_fiori_app_my_forms:605:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7985AB58-1B92-4957-B8A2-435BCF324A3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3301457",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3301457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24527",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T03:15:07.250",
      "lastModified" : "2024-11-21T07:48:03.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will enable them to access but not modify server settings and data with no effect on availability and integrity.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_java_for_deploy_service:7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06895FE7-C543-49BB-9772-F3E709767D77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3287784",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3287784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26458",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T03:15:07.340",
      "lastModified" : "2024-11-21T07:51:31.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and modification.The disclosed information is for Diagnostics Agent Connection via Java SCS Message Server of an SAP Solution Manager system and can only be accessed by authenticated SAP Landscape Management users, but they can escalate their privileges to the SAP Solution Manager system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:landscape_management:3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B1698BA9-F0F4-4DC9-9A03-CDF9A09D2FD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3312733",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3312733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27267",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T03:15:07.427",
      "lastModified" : "2024-11-21T07:52:33.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing authentication and insufficient input validation, the OSCommand Bridge of SAP Diagnostics Agent - version 720, allows an attacker with deep knowledge of the system to execute scripts on all connected Diagnostics Agents. On successful exploitation, the attacker can completely compromise confidentiality, integrity and availability of the system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:diagnostics_agent:720:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E17B5-5924-49AC-A1A2-18D574048C11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3305369",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3305369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27497",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T03:15:07.487",
      "lastModified" : "2024-11-21T07:53:01.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - version 720, allows an attacker to execute malicious scripts on all connected Diagnostics Agents running on Windows. On successful exploitation, the attacker can completely compromise confidentiality, integrity and availability of the system.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:diagnostics_agent:720:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E17B5-5924-49AC-A1A2-18D574048C11"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3305369",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3305369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27499",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T03:15:07.547",
      "lastModified" : "2024-11-21T07:53:01.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP GUI for HTML - versions KERNEL 7.22, 7.53, 7.54, 7.77, 7.81, 7.85, 7.89, 7.91, KRNL64UC, 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT does not sufficiently encode user-controlled inputs, resulting in a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could craft a malicious URL and lure the victim to click, the script supplied by the attacker will execute in the victim user's browser. The information from the victim's web browser can either be modified or read and sent to the attacker.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:7.22ext:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AFBCEC-649C-4389-85C2-6C245290E91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16B3C589-DF11-459D-8A3F-1A1FD2265022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:7.53:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E8CB869-C342-4362-9A4A-298F0B5F4003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:7.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92EBF7BA-BB05-4946-9CA8-E170AB80ECA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:7.77:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E7439E-F4D6-45EA-99FC-C9B34D4D590E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:7.81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "252DCEF2-8DDF-467F-8869-B69A0A3426F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:7.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BC578BE-2308-491E-9D56-6B45AFF0FCFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:7.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C5C5010-9631-4C70-AD90-A0D16B03BFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:7.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E1807BC-8549-438A-BF6F-DD15C660CCF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:krnl64uc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F6FABE8-A600-491F-AF0A-049F5E5C1E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:krnl64uc_7.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23257C18-B75C-471C-9EAF-1E86DEE845FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3275458",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3275458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27897",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T03:15:07.613",
      "lastModified" : "2024-11-21T07:53:39.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SAP CRM - versions 700, 701, 702, 712, 713, an attacker who is authenticated with a non-administrative role and a common remote execution authorization can use a vulnerable interface to execute an application function to perform actions which they would not normally be permitted to perform. Depending on the function executed, the attack can can have limited impact on confidentiality and integrity of non-critical user or application data and application availability.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082053C1-23F5-43E1-B2FD-5ECDE3EFC101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1827CD2E-82B5-4D80-B606-ECEA9977905E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33C39D15-9A98-4051-A086-A08EB3E3776D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:712:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6F69C1-E6CD-4B48-BE75-66BC355EA643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management:713:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E8FBB3-92C7-4B2A-8A4E-E30EB6B64F7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3309056",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3309056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28761",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T03:15:07.680",
      "lastModified" : "2024-11-21T07:55:57.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SAP NetWeaver Enterprise Portal - version 7.50, an unauthenticated attacker can attach to an open interface and make use of an open API to access a service which will enable them to access or modify server settings and data, leading to limited impact on confidentiality and integrity.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_enterprise_portal:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F9D76-39D6-4D5E-BFAE-892CB8C30A79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3289994",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3289994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28763",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T03:15:07.733",
      "lastModified" : "2024-11-21T07:55:57.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker authenticated as a non-administrative user to craft a request with certain parameters which can consume the server's resources sufficiently to make it unavailable over the network without any user interaction.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416C064-BB8A-4230-A761-84A93E017F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72491771-4492-4902-9F0C-CE6A60BAA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421A5354-F764-402B-A3A4-2D746EACEB46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:791:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312DBCA5-D3F6-4F42-B632-34759D799856"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3296378",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3296378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28765",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T03:15:07.797",
      "lastModified" : "2024-11-21T07:55:57.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, can get access to lcmbiar file and further decrypt the file. After this attacker can gain access to BI user’s passwords and depending on the privileges of the BI user, the attacker can perform operations that can completely compromise the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence:420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BA0DF9-D893-4AF9-923E-E47EA5C02C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence:430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CBCF48-5478-4EE5-8F69-6E59EFDB707D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3298961",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3298961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29108",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T03:15:07.867",
      "lastModified" : "2024-11-21T07:56:33.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handling. This may enable access to backend applications from unwanted sources.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-923"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform_kernel:7.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B284F5-7F46-4764-8B24-8D4C88E211B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform_kernel:7.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA6FA84-0C5C-457C-99F1-60D89E6BD13C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform_kernel:7.91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD0218F-2104-414D-B0C1-2EFD5A01A602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:web_dispatcher:7.85:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F74EE4D5-E968-4851-89E6-4152F64930F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:web_dispatcher:7.89:*:*:*:*:*:*:*",
            "matchCriteriaId" : "097ED3E8-49B1-497E-BD43-28C397FBEAE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3315312",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3315312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29109",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T03:15:07.927",
      "lastModified" : "2024-11-21T07:56:33.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows an Excel formula injection. An authorized attacker can inject arbitrary Excel formulas into fields like the Tooltip of the Custom Hints List. Once the victim opens the downloaded Excel document, the formula will be executed. As a result, an attacker can cause limited impact on the confidentiality and integrity of the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform:75c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0145C4-663F-4E0F-B271-515EFB130D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform:75d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5406CCCC-4E8D-42A8-BFD9-771401C5DDE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform:75e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E59595-19DE-419C-8BBC-058332762E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:application_interface_framework:aif_703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2DF820-BD94-4DD5-8749-2890F3EFBF69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:application_interface_framework:aifx_702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843B1EB2-F292-40D0-AD04-591EA3FF7103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:basis:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B5F69B-F93F-47F2-BCB7-4BEDED40E11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:basis:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B92D5C1-F724-4551-8365-0BBCE0956306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1045AD04-714D-4CC7-8153-6E3C00172A0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3115598",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3115598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29110",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T04:16:07.663",
      "lastModified" : "2024-11-21T07:56:34.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows the usage HTML tags. An authorized attacker can use some of the basic HTML codes such as heading, basic formatting and lists, then an attacker can inject images from the foreign domains. After successful exploitations, an attacker can cause limited impact on the confidentiality and integrity of the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform:75c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0145C4-663F-4E0F-B271-515EFB130D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform:75d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5406CCCC-4E8D-42A8-BFD9-771401C5DDE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:abap_platform:75e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E59595-19DE-419C-8BBC-058332762E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:application_interface_framework:aif_703:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2DF820-BD94-4DD5-8749-2890F3EFBF69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:application_interface_framework:aifx_702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843B1EB2-F292-40D0-AD04-591EA3FF7103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:basis:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B5F69B-F93F-47F2-BCB7-4BEDED40E11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:basis:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B92D5C1-F724-4551-8365-0BBCE0956306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A444336-BCF2-4F87-B24E-F93E2801EE89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:s4core:101:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1045AD04-714D-4CC7-8153-6E3C00172A0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3113349",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3113349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29111",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T04:16:08.080",
      "lastModified" : "2024-11-21T07:56:34.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SAP AIF (ODATA service) - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:application_interface_framework:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7E119A5-D458-4D50-84CE-20EA8A6FB5C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:application_interface_framework:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1900BC31-342B-41A0-8089-BEA03983E02A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3117978",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3117978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29112",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T04:16:08.247",
      "lastModified" : "2024-11-21T07:56:34.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SAP Application Interface (Message Monitoring) - versions 600, 700, allows an authorized attacker to input links or headings with custom CSS classes into a comment. The comment will render links and custom CSS classes as HTML objects. After successful exploitations, an attacker can cause limited impact on the confidentiality and integrity of the application.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:application_interface:600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D78AB09-DE01-4A6F-81F5-C1FD8B344310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:application_interface:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A3C656-9C51-4AA5-BDB2-FFD04DB45195"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3114489",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3114489",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29185",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T04:16:08.423",
      "lastModified" : "2024-11-21T07:56:40.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver AS for ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an attacker authenticated as a non-administrative user to craft a request with certain parameters in certain circumstances which can consume the server's resources sufficiently to make it unavailable over the network without any user interaction.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C730F7F7-B228-4D3E-BC02-33EE5D695D69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE253C97-C802-476B-81FB-BA4FC15B433C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD414F-0C97-4657-BF48-11DA3A83850E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C167C76A-0F85-47F3-A90E-8DA4EA8C3B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF90E047-B917-4C52-8A5B-99BFA094E90D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE99B15-44F0-47A1-AD2F-D92BCCA940F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00F292E-E761-47AA-A82D-456CBA829BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4662F413-B285-4310-AA7C-D8AD60E024DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D5B33D-9FFE-4492-8879-5738CD963D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C50935-7C21-4248-A707-60E08FA860DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4032AD23-8EFE-4A7B-84C3-B658F8F639DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:756:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A880DFD9-F853-476C-8D1C-C0B4CEC421A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_as_abap_business_server_pages:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CBA26E7-9DB8-4960-8528-7D382B2C4C9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3303060",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3303060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29186",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T04:16:08.610",
      "lastModified" : "2024-11-21T07:56:40.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SAP NetWeaver (BI CONT ADDON) - versions 707, 737, 747, 757, an attacker can exploit a directory traversal flaw in a report to upload and overwrite files on the SAP server. Data cannot be read but if a remote attacker has sufficient (administrative) privileges then potentially critical OS files can be overwritten making the system unavailable.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:707:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D78B8-88C3-424E-A0D6-32ABD6748E9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:737:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4997817-2FC9-4256-A892-CAA64DC58E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:747:*:*:*:*:*:*:*",
            "matchCriteriaId" : "780CB238-BD3C-4DEE-AFC6-DC403C8C3AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:757:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FEBCDDF-4828-45D1-A81D-FFB50261DBCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3305907",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3305907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29187",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T04:16:08.747",
      "lastModified" : "2024-11-21T07:56:40.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup (Software Installation Program) - version 9.0, resulting in a privilege escalation running code as administrator of the very same Windows PC. A successful attack depends on various preconditions beyond the attackers control.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:sapsetup:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138405C1-CBDA-4DDA-8B38-941774D4C0E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3311624",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3311624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29189",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2023-04-11T04:16:09.283",
      "lastModified" : "2024-11-21T07:56:41.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated attacker to modify HTTP verbs used in requests to the web server. This application is exposed over the network and successful exploitation can lead to exposure of form fields\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_s4fnd:102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E0DA63-3FA7-4CC4-A14E-852A632C41BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_s4fnd:103:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378861FE-CD5D-49A9-8245-538A91190064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_s4fnd:104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA1262DB-E4C8-4298-B423-5EF859CE722F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_s4fnd:105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D85325-56C8-4043-BDA8-C94FE946B912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714452CB-D258-4BB8-A275-A860F644C505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F220D25-9344-482A-A36C-9D743EA55DE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0075805-C6FC-4E0D-9E1B-6ABA3A69F6C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48791122-7265-4C51-8AEB-DEBC199F9A7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:746:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EEA160-B4B4-45E9-84C8-C26E52D6F329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:747:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BDBE717-ADB6-4080-A198-E468080F82B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:748:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8775BD-EAB8-4F08-B65D-35B704C0E36B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BFCEADC-7359-470F-A412-5B2808CF6069"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:customer_relationship_management_webclient_ui:801:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A387786F-F4F6-44FC-B969-6FB92A1AA096"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3269352",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3269352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26121",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-04-11T05:15:07.127",
      "lastModified" : "2025-02-10T16:15:33.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper sanitization of its parameter content."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safe-eval_project:safe-eval:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.4.1",
            "matchCriteriaId" : "CD03CFC7-7F8B-4C4F-AAC0-F3924E4EAB65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/seongil-wi/9d9fc0cc5b7b130419cd45827e59c4f9",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/28",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-SAFEEVAL-3373062",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/seongil-wi/9d9fc0cc5b7b130419cd45827e59c4f9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-SAFEEVAL-3373062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26122",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-04-11T05:15:07.180",
      "lastModified" : "2025-02-07T17:15:25.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype pollution exploitation.\rExploiting this vulnerability might result in remote code execution (\"RCE\").\r\r**Vulnerable functions:**\r\r__defineGetter__, stack(), toLocaleString(), propertyIsEnumerable.call(),  valueOf()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-265"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safe-eval_project:safe-eval:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.4.1",
            "matchCriteriaId" : "CD03CFC7-7F8B-4C4F-AAC0-F3924E4EAB65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/seongil-wi/2db6cb884e10137a93132b7f74879cce",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/27",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/31",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/32",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/33",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/34",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/35",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-SAFEEVAL-3373064",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/seongil-wi/2db6cb884e10137a93132b7f74879cce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hacksparrow/safe-eval/issues/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-JS-SAFEEVAL-3373064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T05:15:07.393",
      "lastModified" : "2025-10-27T14:56:50.397",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored survey or response data."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-04-13",
      "cisaActionDue" : "2023-05-04",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Novi Survey Insecure Deserialization Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3rdmill:novi_survey:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.9.43676",
            "matchCriteriaId" : "C1D0E9E5-7AEA-4606-95EF-1A5909DCCFD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://novisurvey.net/blog/novi-survey-security-advisory-apr-2023.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://novisurvey.net/blog/novi-survey-security-advisory-apr-2023.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-29492",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22282",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:07.230",
      "lastModified" : "2025-02-11T18:15:21.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WAB-MAT Ver.5.0.0.8 and earlier starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquoted, if a malicious executable is placed on a certain path, the executable may be executed with the privilege of the Windows service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elecom:wab-mat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.2.2",
            "matchCriteriaId" : "965DA183-B579-4702-A144-BC076A95DF10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN35246979/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20230324-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN35246979/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20230324-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22429",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:07.657",
      "lastModified" : "2025-02-11T18:15:21.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Android App 'Wolt Delivery: Food and more' version 4.27.2 and earlier uses hard-coded credentials (API key for an external service), which may allow a local attacker to obtain the hard-coded API key via reverse-engineering the application binary."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wolt:wolt_delivery:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "4.28.0",
            "matchCriteriaId" : "0F6315DA-79A2-4BF3-A5D0-E4A8331AE8C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN64453490/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.wolt.android&hl=en_US&gl=US",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN64453490/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.wolt.android&hl=en_US&gl=US",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23572",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:07.707",
      "lastModified" : "2025-02-11T16:15:31.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9200ps2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2467CC-06FB-4220-87C1-5117130533E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9200ps2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82181448-D761-42C1-B12A-0E4CA1F3159B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9200ps3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5DABF2-D178-4656-8B67-23D3EA1231C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9200ps3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42A6A5E-D0E0-4109-BC23-5CA02D16371A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-8200c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4F642E-839B-4680-86FD-257AF02A78C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-8200c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA73BA5C-5CC6-49B6-8CA4-FCDD9D7E660D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2C805A-DB32-456F-942F-9AE806897E8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F218CCB1-3A09-4253-8245-3D1922BFFF6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9600s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3D5AB5-D7C2-4C0F-ACC9-CCD66B5F880F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9600s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CBDC9D-DE92-4858-9B09-6E2FDABDE81E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54EDEE9F-BB5E-4CA1-BA65-3A234BCAF741"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D19015-CBE5-4187-9212-9C3E9FD46D8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-8500c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25664A4-AC37-456A-AA6C-4CCFC9FD051D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-8500c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B39276-FFD8-4002-BBF1-96263F4C7E98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-8700ps3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23CC4031-9428-436B-82FE-790D29372456"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-8700ps3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43409AE7-5890-4ED6-B1D2-5EEEEA6A7B8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9800c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA0B236-D200-4F65-9278-DBDE731DC19E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9800c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923B0881-04EC-4ACE-A196-97143D8CCB9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s5500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E19669C-EFE7-43B7-9264-F5F872C9F9EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s5500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DE8047-F931-4DF7-83CD-B567232FD856"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9200b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27E59192-8E4B-44BF-8764-A1D683554B6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9200b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E815116A-A790-460A-B0D7-30C0376895AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9200c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597F4D76-996B-43FC-ABDF-5D383EB7C104"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9200c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219114BE-B93D-4796-85BD-7EB5CC766168"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s4500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEE72EF-E072-4294-B617-1C4F9F691004"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s4500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156577C4-27B8-40CF-9BFC-2C0BD54DF7DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s6500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C2D41EE-AFA8-4AA2-A3FC-D7F5613A0BB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D64770B-3989-4C33-97F7-645FEC8CAFB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEFAE2ED-347D-4532-A7A3-1D0EB32C8450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9266AA07-2E96-475C-AA71-4511C0D81F76"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3952A34A-22A7-48CE-927D-C7ECEA3E1FB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7FF69D-AA65-4F9F-91A3-E1E869145DE6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s4000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110C7EF0-3605-47D3-B881-320223465F51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5936CAE-AB38-43B5-8D5F-3021D3ABDA80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s6000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "356AB944-0878-4F62-9EA7-C6CDE1D97233"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8808171E-9B61-457B-8EEA-3C2BB10AB3F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156B2070-F623-4108-A009-7C45E8F4B2C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC0AD65-9A7C-4070-850E-1A1AE7F89A64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s5300r_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D30936A-D4B7-4FA6-B871-193ED448FD90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s5300r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41357A40-3794-4474-B67F-66213C24082E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s300n_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9683FA5F-A3D5-4498-8F06-32CBDD08C829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s300n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE2D9B7-2974-4D5C-BCBD-91386266EC5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s310n_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F78CCF-3BE7-411A-A046-FE3C429865F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s310n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5774BE40-F4A7-4F9E-91D3-C6B6EDDCCD89"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s3000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E967B34B-EA9D-438E-B746-7FDF6C4E9296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D35903-E149-4868-BB5B-0660D42C89DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s3000r_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A036105-97B5-4331-BF06-3A9D99BF0767"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s3000r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7272C1-FC56-493A-9020-FC2D5D6CDB10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s3000z_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFFDAC0-6E06-4B86-ABAE-BBEF9B70964F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s3000z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E83CE5-8151-4223-9B79-E7807B4ABB7D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s3000ps_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8636E5E-CBC1-4DE3-887B-64537154139A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s3000ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A84E2766-1EED-451B-93DB-BD32073428B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s7500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1C2F4A-9719-45B8-803D-79AA0E0F7E89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D506E56D-7092-4DF4-934B-A44D9265DBED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s7500ps_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690F9F1D-84FB-48E4-8F48-2973BF746CF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s7500ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444C5342-12DE-40DB-B599-719EF573AF2A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s3500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C28AFB5-DC3D-48D4-93C3-937FFB5246A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69416624-4970-4110-AED6-A1CB53545FCE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s4200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0751C954-6AF7-4D38-98A3-A3713D80AC03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44CFC5D4-1A13-4ECC-B18F-B98D0A821902"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s9000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B567C7C-8EBE-439B-B3C4-E03E2702F0D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F564A9-5881-4286-A173-5BF4757A5D94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s7100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9752EDB-DF05-448F-8A7B-8E4AA770AC53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s7100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9098B3-FF59-4BE7-B296-33A6084C6D48"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s8100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F40D37-CFA4-4D56-83EF-CCD335DC39CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s8100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF738BE8-36B7-469C-8045-47F8F12A744F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75113141-A6FD-4F13-A172-2836B1F72BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8A9B37-1BD7-4A63-8BC1-5EF15F7A47AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw1s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8394A7CF-BC0A-4E68-AE56-523B51ABB525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw1s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "777E1D4F-7E8C-436F-B409-92439D469C5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071A1443-8D06-49C8-BFA4-C96697FF5501"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0165B6BA-3A57-4FD1-8449-3EB60B7F3161"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw2ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505B10B2-7DE3-4F17-85E2-F08B421B0718"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw2ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A35E5-5CE8-476C-9BF0-0B9085129AEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw2s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848D436B-9A78-468E-BA1F-821343C2D46E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA863F4F-DC37-4159-8D52-4F8405E9E093"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw2sac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C90F25C-0388-4BC7-A867-F610DE1ED926"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw2sac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B7C6AC-C377-4495-BCB9-4C9D70DF9DC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3B0379-EFC2-4AF6-9A02-806DA794A0C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33D55B-A451-465E-91C6-6BF7DED1DF90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw3s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E55507C-FACE-4434-8550-D6328D6F0558"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9946D6D4-1802-408F-823B-466A1F732599"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8778909C-9511-4F6D-AF41-0CBBD07A1B32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2EE5EF-EB0F-4DF2-BFDD-A525573E7072"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw7_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CEC5FD-BCE0-4401-8C75-D16D4786CD23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEC32575-1261-4259-94CE-FF230BF34B9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw7u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99B45A5-205F-4AE7-BFA8-45192427E5D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw7u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2EF813-8028-42FC-9634-49A671158B71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw7s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E00F842-2072-45CA-A540-94DCFFA6FBB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw7s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25651E8-DBC5-4193-94A7-96CC327072B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:pa-w11g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88991B53-1A9E-4F4E-B274-EEF31F9F8BD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:pa-w11g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4588A7EF-D86B-4C72-8088-3241F31A4A86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:pa-w11g2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4F2ADD-A6C7-4D55-978C-CA23E9DEF823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:pa-w11g2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932A2A32-16BC-4909-B7AF-99B1EEC2C5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:esnsb1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B3C6E3-EBF9-456C-A818-3E9A37EF784C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:esnsb1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D87F9ED-453E-4D25-BDE1-264F0CC67424"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:esnsb2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF411385-C2CC-4736-82EF-128B8FFABA94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:esnsb2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2A92C2-C46B-4465-9F41-3BAA975615C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:esifnw1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811E5759-5C52-4BD1-89AE-FC14B729391C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:esifnw1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3AEB3C-49BE-4BF9-850B-CE83A0B25F61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN82424996/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.epson.jp/support/misc_t/230308_oshirase.htm",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN82424996/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.epson.jp/support/misc_t/230308_oshirase.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23575",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:07.753",
      "lastModified" : "2025-02-11T16:15:31.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass access restriction and access Network Maintenance page, which may result in obtaining the network information of the product. The affected products and versions are as follows: M2M Gateway with the firmware Ver.3.7.10 and earlier (CPS-MG341-ADSC1-111, CPS-MG341-ADSC1-931, CPS-MG341G-ADSC1-111, CPS-MG341G-ADSC1-930, and CPS-MG341G5-ADSC1-931), M2M Controller Integrated Type with firmware Ver.3.7.6 and earlier versions (CPS-MC341-ADSC1-111, CPS-MC341-ADSC1-931, CPS-MC341-ADSC2-111, CPS-MC341G-ADSC1-110, CPS-MC341Q-ADSC1-111, CPS-MC341-DS1-111, CPS-MC341-DS11-111, CPS-MC341-DS2-911, and CPS-MC341-A1-111), and M2M Controller Configurable Type with firmware Ver.3.8.8 and earlier versions (CPS-MCS341-DS1-111, CPS-MCS341-DS1-131, CPS-MCS341G-DS1-130, CPS-MCS341G5-DS1-130, and CPS-MCS341Q-DS1-131)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341-adsc1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "946A1696-7212-4787-A93C-7B6EDE53D996"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341-adsc1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9638515-553F-477E-9673-0CABD9151E35"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341-adsc1-931_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "56B10D03-57E7-455E-8E8E-AD3582D24D6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341-adsc1-931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72421FDB-FCDB-428E-82A0-3C7ED662E77E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341g-adsc1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "D5849A88-069E-433D-BED6-2C74B3F6E30B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341g-adsc1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E2F1D4-BA1E-4069-87DC-9DD0216AB7FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341g-adsc1-930_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "604E57A1-850D-4FF0-8D4E-67717FA2EFF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341g-adsc1-930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8027E77D-4F44-482D-9748-815FECCC94E6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341g5-adsc1-931_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "17D8495F-D070-43BB-8CE1-EC3692B40F2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341g5-adsc1-931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27224ED7-6205-4E2D-B452-6329C6B58EAF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-adsc1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "23CD1E0D-AE78-4498-8817-5C1FCDF4B921"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-adsc1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7EE4F3-F8F1-4BC5-B5FA-69D92D389793"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-adsc1-931_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "65F5FA0E-C040-4CA6-A53F-DC9EDAA4EFE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-adsc1-931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E492A7-E7AC-458B-9952-408D915C9AC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-adsc2-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "80DAF840-FFCC-4E4F-A964-A0D3D9761E2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-adsc2-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A79518B9-A98D-4D71-9F96-E8F9FF441BB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341g-adsc1-110_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "5A00EE55-8CFC-434A-B187-442F3184BCD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341g-adsc1-110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289A036E-C360-4192-BD4B-FD046B1D48D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341q-adsc1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "94F943B3-1397-48D7-BE7C-6C4A773F821E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341q-adsc1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD6F197-ED5A-4414-9CAD-666732EB1E63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-ds1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "DE3C651C-68A3-4776-826F-3CCCF8DC2C24"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-ds1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067D054D-D81A-400F-8883-AD290F4F346E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-ds11-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "14143147-D19C-4C83-A49D-D47E29B990DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-ds11-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019C8FDA-B856-4D9F-BF59-B25A8EAE4489"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-ds2-911_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "F0EF7B61-73C1-4467-AD42-A38DBF420510"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-ds2-911:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04D8729-A3A8-4FBA-A3FA-0D1C9E0CC607"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-a1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "0EB5F6C9-C2D4-4735-A3E8-9C2C59812E5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-a1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29496995-56D5-485B-9D18-6519D8486272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341-ds1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "F74B9B92-0B7D-441C-93BF-7F152CF02FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341-ds1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "791D09FA-1CBA-4334-B62D-DDE8CC4FE629"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341-ds1-131_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "4DE8075E-9645-4C32-984C-1ECA947645D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341-ds1-131:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A77D134-C344-4900-933E-DEC74F8DB29D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341g-ds1-130_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "6ECA4990-8F3D-41C7-AC96-6EA10AB58AE4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341g-ds1-130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CEA79F-F7DD-4E29-82DC-E828C27A80B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341g5-ds1-130_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "9AA64568-FE3F-4C4C-8DFF-C77B226004FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341g5-ds1-130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5B4009-93EB-462B-A9A3-A42506DDA853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341q-ds1-131_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "66D99898-0EB9-4728-8C97-476AE6BF1746"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341q-ds1-131:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A570103-F5D1-48D3-A7D1-9F8ED71B44DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU96198617/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_cps_230317_en.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=a054b3eb-da97-40d0-9598-d7f5ff4239ec#firmware",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=a1b33f0d-d32b-4549-9741-613cd37d5528#firmware",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=f832c526-dcf6-4976-85aa-f536c15a8120#firmware",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU96198617/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_cps_230317_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=a054b3eb-da97-40d0-9598-d7f5ff4239ec#firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=a1b33f0d-d32b-4549-9741-613cd37d5528#firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=f832c526-dcf6-4976-85aa-f536c15a8120#firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24464",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:07.803",
      "lastModified" : "2025-02-11T17:15:15.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arbitrary JavaScript on a legitimate user's web browser. The affected products and versions are as follows: BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2008_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "918AE700-8EE7-401E-9EE7-54F13B9FCC9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FEDF82-9FE0-4907-A163-D0E896A16669"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2016_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "20FF7B66-16D0-4326-93EC-29BFF227B1BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8FC54-F4FC-4B5C-A6D0-AE77098E3DE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2024_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "393795A5-0F47-4E11-9748-C91093CB9153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7A6A74-F800-48F9-9E1F-376558C9166F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2048_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "71730412-64CD-4EAE-92E0-47E37DAC74AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2CAFDB5-7819-458B-84B4-828C0DBEDB47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2008p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "FFEBF167-68E7-482D-94ED-A051C99482F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2008p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAB53FA-6017-4EBB-8F16-036A7A49C103"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2016p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "D649479D-4A8C-4404-8EA1-C4B45F0948BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2016p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F087DF3-EA82-4DC4-A5D1-D91C83A7E9DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2024p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "BC1F3D71-3AD7-4CF7-9F31-04276CD5A6ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2024p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFE4A4D-FC8C-4ABC-83A4-021E1779475D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU96824262/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.buffalo.jp/news/detail/20230310-01.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU96824262/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.buffalo.jp/news/detail/20230310-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24544",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:07.850",
      "lastModified" : "2025-02-11T17:15:15.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product. As a result, the product settings may be altered. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016 firmware Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gsl2024_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10-0.03",
            "matchCriteriaId" : "9E88D83D-DA44-434D-9622-06EB6B419A72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gsl2024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6C0127-807E-4E32-ADD1-E596FEAB2796"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gsl2016p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10-0.03",
            "matchCriteriaId" : "AF00B7B4-D14E-4A1E-91E4-CB50657D3967"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gsl2016p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A74F965-DDD1-4F68-A96A-0CC0456DDC77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gsl2016_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10-0.03",
            "matchCriteriaId" : "9706E727-E564-4F01-8DB3-B7E039BDBD0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gsl2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7304EE-DCE8-4B99-9AC5-A6915077F933"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2008_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "918AE700-8EE7-401E-9EE7-54F13B9FCC9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FEDF82-9FE0-4907-A163-D0E896A16669"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2016_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "20FF7B66-16D0-4326-93EC-29BFF227B1BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8FC54-F4FC-4B5C-A6D0-AE77098E3DE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2024_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "393795A5-0F47-4E11-9748-C91093CB9153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7A6A74-F800-48F9-9E1F-376558C9166F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2048_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "71730412-64CD-4EAE-92E0-47E37DAC74AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2CAFDB5-7819-458B-84B4-828C0DBEDB47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2008p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "FFEBF167-68E7-482D-94ED-A051C99482F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2008p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAB53FA-6017-4EBB-8F16-036A7A49C103"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2016p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "D649479D-4A8C-4404-8EA1-C4B45F0948BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2016p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F087DF3-EA82-4DC4-A5D1-D91C83A7E9DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2024p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "BC1F3D71-3AD7-4CF7-9F31-04276CD5A6ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2024p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFE4A4D-FC8C-4ABC-83A4-021E1779475D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2016p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.7.01",
            "matchCriteriaId" : "61BE59AE-02FF-403F-9B84-7D2332C9E760"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2016p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F087DF3-EA82-4DC4-A5D1-D91C83A7E9DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2016hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.7.01",
            "matchCriteriaId" : "843FD75B-FA2D-4BD6-944B-C7C5D57C9501"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2016hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15500665-7568-487A-874F-3E412807357F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2024p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.7.01",
            "matchCriteriaId" : "43EE1926-F5C7-48A5-979D-9EE174547146"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2024p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFE4A4D-FC8C-4ABC-83A4-021E1779475D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2024hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.7.01",
            "matchCriteriaId" : "AAB628DA-6AD4-40C7-929C-1760A3BF3F6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2024hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0549066-5805-444B-AD52-A4C579A6E88F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU96824262/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.buffalo.jp/news/detail/20230310-01.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU96824262/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.buffalo.jp/news/detail/20230310-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25755",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:07.897",
      "lastModified" : "2025-02-11T17:15:18.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the bounds of a memory buffer (CWE-119) due to improper check of its data size when processing a project file. If a user of Screen Creator Advance 2 opens a specially crafted project file, information may be disclosed and/or arbitrary code may be executed."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.1.4",
            "matchCriteriaId" : "4F27CC9E-BD6F-48DA-99C4-ACDBF387105B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jtekt:screen_creator_advance_2:0.1.1.4:build01:*:*:*:*:*:*",
            "matchCriteriaId" : "8925669F-2A1C-440A-A685-1438A5C17BDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU99710864/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202303315311/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU99710864/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.electronics.jtekt.co.jp/en/topics/202303315311/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25950",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:07.937",
      "lastModified" : "2025-02-11T16:15:32.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request. As a result, the attacker may obtain sensitive information or cause a denial-of-service (DoS) condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.1",
            "versionEndIncluding" : "2.6.7",
            "matchCriteriaId" : "2B5851EB-42FF-48AB-AB3B-25CB8C671475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haproxy:haproxy:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C053BE-78C8-475F-8D2B-56FAD7B0E0D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.haproxy.org/?p=haproxy-2.7.git%3Ba=commit%3Bh=3ca4223c5e1f18a19dc93b0b09ffdbd295554d46",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://jvn.jp/en/jp/JVN38170084/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.haproxy.org/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://git.haproxy.org/?p=haproxy-2.7.git%3Ba=commit%3Bh=3ca4223c5e1f18a19dc93b0b09ffdbd295554d46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://jvn.jp/en/jp/JVN38170084/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.haproxy.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25955",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:07.980",
      "lastModified" : "2025-02-10T16:15:33.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlit:national_land_numerical_information_data_conversion_tool:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422303FC-41B4-4AD0-8BE0-EEAF6F036DC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN75742861/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nlftp.mlit.go.jp/i_news.html#news4",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN75742861/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://nlftp.mlit.go.jp/i_news.html#news4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26588",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:08.020",
      "lastModified" : "2025-02-11T21:15:11.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016 firmware Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gsl2024_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10-0.03",
            "matchCriteriaId" : "9E88D83D-DA44-434D-9622-06EB6B419A72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gsl2024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6C0127-807E-4E32-ADD1-E596FEAB2796"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gsl2016p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10-0.03",
            "matchCriteriaId" : "AF00B7B4-D14E-4A1E-91E4-CB50657D3967"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gsl2016p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A74F965-DDD1-4F68-A96A-0CC0456DDC77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gsl2016_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10-0.03",
            "matchCriteriaId" : "9706E727-E564-4F01-8DB3-B7E039BDBD0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gsl2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7304EE-DCE8-4B99-9AC5-A6915077F933"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2008_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "918AE700-8EE7-401E-9EE7-54F13B9FCC9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4FEDF82-9FE0-4907-A163-D0E896A16669"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2016_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "20FF7B66-16D0-4326-93EC-29BFF227B1BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8FC54-F4FC-4B5C-A6D0-AE77098E3DE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2024_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "393795A5-0F47-4E11-9748-C91093CB9153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7A6A74-F800-48F9-9E1F-376558C9166F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2048_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "71730412-64CD-4EAE-92E0-47E37DAC74AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2CAFDB5-7819-458B-84B4-828C0DBEDB47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2008p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "FFEBF167-68E7-482D-94ED-A051C99482F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2008p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAB53FA-6017-4EBB-8F16-036A7A49C103"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2016p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "D649479D-4A8C-4404-8EA1-C4B45F0948BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2016p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F087DF3-EA82-4DC4-A5D1-D91C83A7E9DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2024p_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.10.01",
            "matchCriteriaId" : "BC1F3D71-3AD7-4CF7-9F31-04276CD5A6ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2024p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFE4A4D-FC8C-4ABC-83A4-021E1779475D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gsl2005_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.12-0.01",
            "matchCriteriaId" : "E175AFB1-7E81-4F9C-8C03-82266782B17E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gsl2005:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8054FFA-DEE8-46F4-825F-B3D509133D72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gsl2008_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.12-0.01",
            "matchCriteriaId" : "082E0FC7-A771-4C52-9D8A-14B035D9B1B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gsl2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7229C3AA-E8D9-42FD-A0AE-1895C77B4355"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gsl2005p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11-0.01",
            "matchCriteriaId" : "0F1FF8BF-80A4-48CE-A73B-FA2B95D9307A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gsl2005p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "131C554E-A21F-4EA4-B53F-97AA49D02016"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gsl2008p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.11-0.01",
            "matchCriteriaId" : "481B6E6E-F31A-441B-92BB-483D66C03564"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gsl2008p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD2A10E8-DB72-4322-BC69-FA879ADBF9FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2016p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.7.01",
            "matchCriteriaId" : "61BE59AE-02FF-403F-9B84-7D2332C9E760"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2016p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F087DF3-EA82-4DC4-A5D1-D91C83A7E9DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2016hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.7.01",
            "matchCriteriaId" : "843FD75B-FA2D-4BD6-944B-C7C5D57C9501"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2016hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15500665-7568-487A-874F-3E412807357F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2024p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.7.01",
            "matchCriteriaId" : "43EE1926-F5C7-48A5-979D-9EE174547146"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2024p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFE4A4D-FC8C-4ABC-83A4-021E1779475D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bs-gs2024hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.7.01",
            "matchCriteriaId" : "AAB628DA-6AD4-40C7-929C-1760A3BF3F6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bs-gs2024hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0549066-5805-444B-AD52-A4C579A6E88F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU96824262/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.buffalo.jp/news/detail/20230310-01.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU96824262/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.buffalo.jp/news/detail/20230310-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26593",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:08.067",
      "lastModified" : "2025-02-10T19:15:36.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If an attacker who can login or access the computer where the affected product is installed tampers the password file stored in the computer, the user privilege which CENTUM managed may be escalated. As a result, the control system may be operated with the escalated user privilege. To exploit this vulnerability, the following prerequisites must be met: (1)An attacker has obtained user credentials where the affected product is installed, (2)CENTUM Authentication Mode is used for user authentication when CENTUM VP is used. The affected products and versions are as follows: CENTUM CS 1000, CENTUM CS 3000 (Including CENTUM CS 3000 Entry Class) R2.01.00 to R3.09.50, CENTUM VP (Including CENTUM VP Entry Class) R4.01.00 to R4.03.00, R5.01.00 to R5.04.20, and R6.01.00 and later, B/M9000 CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R7.04.51 and R8.01.01 and later"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:b\\/m9000_vp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r6.01.01",
            "versionEndIncluding" : "r7.04.51",
            "matchCriteriaId" : "BFB7BFFC-DD4C-480F-84C0-552982A0C0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:b\\/m9000_vp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r8.01.01",
            "matchCriteriaId" : "2E598505-F0AB-4752-AFC7-5C64DF26FF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:b\\/m9000cs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r5.04.01",
            "versionEndIncluding" : "r5.05.01",
            "matchCriteriaId" : "1F2FE8C0-18CB-4D76-8287-743554CE7C44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:centum_cs_1000:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r2.01.00",
            "versionEndIncluding" : "r3.09.50",
            "matchCriteriaId" : "DE15C1F0-43CB-45AD-86FA-B6BEB897E88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:centum_cs_3000:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r2.01.00",
            "versionEndIncluding" : "r3.09.50",
            "matchCriteriaId" : "E566F3FA-B3A4-467A-8F9C-A988DCDDABF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:centum_cs_3000_entry_class:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r2.01.00",
            "versionEndIncluding" : "r3.09.50",
            "matchCriteriaId" : "3A40BBD9-478C-4441-A9E6-953433C547B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:centum_vp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r4.01.00",
            "versionEndIncluding" : "r4.03.00",
            "matchCriteriaId" : "80CB728F-623F-4284-B337-15A40A8497BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:centum_vp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r5.01.00",
            "versionEndIncluding" : "r5.04.20",
            "matchCriteriaId" : "29370D5F-14C3-4A72-B315-F410FED14AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:centum_vp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r6.01.00",
            "matchCriteriaId" : "4DAB0E32-C52A-45C5-AE41-90E4BA186FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:centum_vp_entry_class:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r4.01.00",
            "versionEndIncluding" : "r4.02.00",
            "matchCriteriaId" : "9A36B940-A7DF-4388-AB66-9C048525646D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:centum_vp_entry_class:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r5.01.00",
            "versionEndIncluding" : "r5.04.20",
            "matchCriteriaId" : "32B4A888-BFDD-4E51-934B-BD35C584F073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:centum_vp_entry_class:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r6.01.00",
            "matchCriteriaId" : "3F4B8DCD-FE30-486C-A9AD-8BC31F48F7C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:exaopc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r1.01.00",
            "versionEndIncluding" : "r1.20.00",
            "matchCriteriaId" : "68410A9F-F9E8-48B5-AAEB-22F64F6195A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:exaopc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r2.01.00",
            "versionEndIncluding" : "r2.10.00",
            "matchCriteriaId" : "D8F4A94E-6179-4769-BCB1-F7588BE4763B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yokogawa:exaopc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r3.01.00",
            "matchCriteriaId" : "2B3D8BED-A853-4D07-80E9-A1B46C1F65DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU98775218/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU98775218/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27389",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:08.110",
      "lastModified" : "2025-02-10T22:15:30.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker with an administrative privilege to apply a specially crafted Firmware update file, alter the information, cause a denial-of-service (DoS) condition, and/or execute arbitrary code. The affected products and versions are as follows: M2M Gateway with the firmware Ver.3.7.10 and earlier (CPS-MG341-ADSC1-111, CPS-MG341-ADSC1-931, CPS-MG341G-ADSC1-111, CPS-MG341G-ADSC1-930, and CPS-MG341G5-ADSC1-931), M2M Controller Integrated Type with firmware Ver.3.7.6 and earlier versions (CPS-MC341-ADSC1-111, CPS-MC341-ADSC1-931, CPS-MC341-ADSC2-111, CPS-MC341G-ADSC1-110, CPS-MC341Q-ADSC1-111, CPS-MC341-DS1-111, CPS-MC341-DS11-111, CPS-MC341-DS2-911, and CPS-MC341-A1-111), and M2M Controller Configurable Type with firmware Ver.3.8.8 and earlier versions (CPS-MCS341-DS1-111, CPS-MCS341-DS1-131, CPS-MCS341G-DS1-130, CPS-MCS341G5-DS1-130, and CPS-MCS341Q-DS1-131)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341-adsc1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "946A1696-7212-4787-A93C-7B6EDE53D996"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341-adsc1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9638515-553F-477E-9673-0CABD9151E35"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341-adsc1-931_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "56B10D03-57E7-455E-8E8E-AD3582D24D6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341-adsc1-931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72421FDB-FCDB-428E-82A0-3C7ED662E77E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341g-adsc1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "D5849A88-069E-433D-BED6-2C74B3F6E30B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341g-adsc1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E2F1D4-BA1E-4069-87DC-9DD0216AB7FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341g-adsc1-930_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "604E57A1-850D-4FF0-8D4E-67717FA2EFF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341g-adsc1-930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8027E77D-4F44-482D-9748-815FECCC94E6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341g5-adsc1-931_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "17D8495F-D070-43BB-8CE1-EC3692B40F2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341g5-adsc1-931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27224ED7-6205-4E2D-B452-6329C6B58EAF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-adsc1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "23CD1E0D-AE78-4498-8817-5C1FCDF4B921"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-adsc1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7EE4F3-F8F1-4BC5-B5FA-69D92D389793"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-adsc1-931_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "65F5FA0E-C040-4CA6-A53F-DC9EDAA4EFE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-adsc1-931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E492A7-E7AC-458B-9952-408D915C9AC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-adsc2-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "80DAF840-FFCC-4E4F-A964-A0D3D9761E2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-adsc2-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A79518B9-A98D-4D71-9F96-E8F9FF441BB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341g-adsc1-110_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "5A00EE55-8CFC-434A-B187-442F3184BCD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341g-adsc1-110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289A036E-C360-4192-BD4B-FD046B1D48D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341q-adsc1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "94F943B3-1397-48D7-BE7C-6C4A773F821E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341q-adsc1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD6F197-ED5A-4414-9CAD-666732EB1E63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-ds1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "DE3C651C-68A3-4776-826F-3CCCF8DC2C24"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-ds1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067D054D-D81A-400F-8883-AD290F4F346E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-ds11-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "14143147-D19C-4C83-A49D-D47E29B990DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-ds11-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019C8FDA-B856-4D9F-BF59-B25A8EAE4489"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-ds2-911_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "F0EF7B61-73C1-4467-AD42-A38DBF420510"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-ds2-911:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04D8729-A3A8-4FBA-A3FA-0D1C9E0CC607"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-a1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "0EB5F6C9-C2D4-4735-A3E8-9C2C59812E5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-a1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29496995-56D5-485B-9D18-6519D8486272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341-ds1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "F74B9B92-0B7D-441C-93BF-7F152CF02FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341-ds1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "791D09FA-1CBA-4334-B62D-DDE8CC4FE629"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341-ds1-131_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "4DE8075E-9645-4C32-984C-1ECA947645D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341-ds1-131:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A77D134-C344-4900-933E-DEC74F8DB29D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341g-ds1-130_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "6ECA4990-8F3D-41C7-AC96-6EA10AB58AE4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341g-ds1-130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CEA79F-F7DD-4E29-82DC-E828C27A80B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341g5-ds1-130_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "9AA64568-FE3F-4C4C-8DFF-C77B226004FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341g5-ds1-130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5B4009-93EB-462B-A9A3-A42506DDA853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341q-ds1-131_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "66D99898-0EB9-4728-8C97-476AE6BF1746"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341q-ds1-131:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A570103-F5D1-48D3-A7D1-9F8ED71B44DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU96198617/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_cps_230317_en.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=a054b3eb-da97-40d0-9598-d7f5ff4239ec#firmware",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=a1b33f0d-d32b-4549-9741-613cd37d5528#firmware",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=f832c526-dcf6-4976-85aa-f536c15a8120#firmware",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU96198617/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_cps_230317_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=a054b3eb-da97-40d0-9598-d7f5ff4239ec#firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=a1b33f0d-d32b-4549-9741-613cd37d5528#firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=f832c526-dcf6-4976-85aa-f536c15a8120#firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27520",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:08.157",
      "lastModified" : "2025-02-10T22:15:31.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9200ps2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D2467CC-06FB-4220-87C1-5117130533E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9200ps2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82181448-D761-42C1-B12A-0E4CA1F3159B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9200ps3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5DABF2-D178-4656-8B67-23D3EA1231C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9200ps3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42A6A5E-D0E0-4109-BC23-5CA02D16371A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-8200c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4F642E-839B-4680-86FD-257AF02A78C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-8200c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA73BA5C-5CC6-49B6-8CA4-FCDD9D7E660D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE2C805A-DB32-456F-942F-9AE806897E8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F218CCB1-3A09-4253-8245-3D1922BFFF6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9600s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C3D5AB5-D7C2-4C0F-ACC9-CCD66B5F880F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9600s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70CBDC9D-DE92-4858-9B09-6E2FDABDE81E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54EDEE9F-BB5E-4CA1-BA65-3A234BCAF741"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D19015-CBE5-4187-9212-9C3E9FD46D8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-8500c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25664A4-AC37-456A-AA6C-4CCFC9FD051D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-8500c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B39276-FFD8-4002-BBF1-96263F4C7E98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-8700ps3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23CC4031-9428-436B-82FE-790D29372456"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-8700ps3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43409AE7-5890-4ED6-B1D2-5EEEEA6A7B8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9800c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA0B236-D200-4F65-9278-DBDE731DC19E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9800c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "923B0881-04EC-4ACE-A196-97143D8CCB9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s5500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E19669C-EFE7-43B7-9264-F5F872C9F9EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s5500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DE8047-F931-4DF7-83CD-B567232FD856"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9200b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27E59192-8E4B-44BF-8764-A1D683554B6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9200b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E815116A-A790-460A-B0D7-30C0376895AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-9200c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "597F4D76-996B-43FC-ABDF-5D383EB7C104"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-9200c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219114BE-B93D-4796-85BD-7EB5CC766168"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s4500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEE72EF-E072-4294-B617-1C4F9F691004"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s4500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156577C4-27B8-40CF-9BFC-2C0BD54DF7DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s6500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C2D41EE-AFA8-4AA2-A3FC-D7F5613A0BB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D64770B-3989-4C33-97F7-645FEC8CAFB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEFAE2ED-347D-4532-A7A3-1D0EB32C8450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9266AA07-2E96-475C-AA71-4511C0D81F76"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3952A34A-22A7-48CE-927D-C7ECEA3E1FB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7FF69D-AA65-4F9F-91A3-E1E869145DE6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s4000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110C7EF0-3605-47D3-B881-320223465F51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5936CAE-AB38-43B5-8D5F-3021D3ABDA80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s6000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "356AB944-0878-4F62-9EA7-C6CDE1D97233"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8808171E-9B61-457B-8EEA-3C2BB10AB3F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156B2070-F623-4108-A009-7C45E8F4B2C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC0AD65-9A7C-4070-850E-1A1AE7F89A64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s5300r_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D30936A-D4B7-4FA6-B871-193ED448FD90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s5300r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41357A40-3794-4474-B67F-66213C24082E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s300n_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9683FA5F-A3D5-4498-8F06-32CBDD08C829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s300n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE2D9B7-2974-4D5C-BCBD-91386266EC5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s310n_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F78CCF-3BE7-411A-A046-FE3C429865F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s310n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5774BE40-F4A7-4F9E-91D3-C6B6EDDCCD89"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s3000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E967B34B-EA9D-438E-B746-7FDF6C4E9296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D35903-E149-4868-BB5B-0660D42C89DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s3000r_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A036105-97B5-4331-BF06-3A9D99BF0767"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s3000r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7272C1-FC56-493A-9020-FC2D5D6CDB10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s3000z_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BFFDAC0-6E06-4B86-ABAE-BBEF9B70964F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s3000z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E83CE5-8151-4223-9B79-E7807B4ABB7D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s3000ps_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8636E5E-CBC1-4DE3-887B-64537154139A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s3000ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A84E2766-1EED-451B-93DB-BD32073428B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s7500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1C2F4A-9719-45B8-803D-79AA0E0F7E89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D506E56D-7092-4DF4-934B-A44D9265DBED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s7500ps_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690F9F1D-84FB-48E4-8F48-2973BF746CF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s7500ps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "444C5342-12DE-40DB-B599-719EF573AF2A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s3500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C28AFB5-DC3D-48D4-93C3-937FFB5246A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69416624-4970-4110-AED6-A1CB53545FCE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s4200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0751C954-6AF7-4D38-98A3-A3713D80AC03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44CFC5D4-1A13-4ECC-B18F-B98D0A821902"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s9000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B567C7C-8EBE-439B-B3C4-E03E2702F0D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22F564A9-5881-4286-A173-5BF4757A5D94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s7100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9752EDB-DF05-448F-8A7B-8E4AA770AC53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s7100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9098B3-FF59-4BE7-B296-33A6084C6D48"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:lp-s8100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F40D37-CFA4-4D56-83EF-CCD335DC39CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:lp-s8100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF738BE8-36B7-469C-8045-47F8F12A744F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75113141-A6FD-4F13-A172-2836B1F72BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF8A9B37-1BD7-4A63-8BC1-5EF15F7A47AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw1s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8394A7CF-BC0A-4E68-AE56-523B51ABB525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw1s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "777E1D4F-7E8C-436F-B409-92439D469C5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071A1443-8D06-49C8-BFA4-C96697FF5501"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0165B6BA-3A57-4FD1-8449-3EB60B7F3161"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw2ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "505B10B2-7DE3-4F17-85E2-F08B421B0718"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw2ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A35E5-5CE8-476C-9BF0-0B9085129AEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw2s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848D436B-9A78-468E-BA1F-821343C2D46E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA863F4F-DC37-4159-8D52-4F8405E9E093"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw2sac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C90F25C-0388-4BC7-A867-F610DE1ED926"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw2sac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B7C6AC-C377-4495-BCB9-4C9D70DF9DC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw3_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3B0379-EFC2-4AF6-9A02-806DA794A0C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF33D55B-A451-465E-91C6-6BF7DED1DF90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw3s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E55507C-FACE-4434-8550-D6328D6F0558"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9946D6D4-1802-408F-823B-466A1F732599"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw6_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8778909C-9511-4F6D-AF41-0CBBD07A1B32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D2EE5EF-EB0F-4DF2-BFDD-A525573E7072"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw7_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3CEC5FD-BCE0-4401-8C75-D16D4786CD23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEC32575-1261-4259-94CE-FF230BF34B9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw7u_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F99B45A5-205F-4AE7-BFA8-45192427E5D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw7u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2EF813-8028-42FC-9634-49A671158B71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:prifnw7s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E00F842-2072-45CA-A540-94DCFFA6FBB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:prifnw7s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A25651E8-DBC5-4193-94A7-96CC327072B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:pa-w11g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88991B53-1A9E-4F4E-B274-EEF31F9F8BD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:pa-w11g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4588A7EF-D86B-4C72-8088-3241F31A4A86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:pa-w11g2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4F2ADD-A6C7-4D55-978C-CA23E9DEF823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:pa-w11g2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932A2A32-16BC-4909-B7AF-99B1EEC2C5F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:esnsb1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0B3C6E3-EBF9-456C-A818-3E9A37EF784C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:esnsb1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D87F9ED-453E-4D25-BDE1-264F0CC67424"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:esnsb2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF411385-C2CC-4736-82EF-128B8FFABA94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:esnsb2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2A92C2-C46B-4465-9F41-3BAA975615C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:esifnw1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "811E5759-5C52-4BD1-89AE-FC14B729391C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:esifnw1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3AEB3C-49BE-4BF9-850B-CE83A0B25F61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-t3250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEBF7D9-F349-45C2-973C-C1EE7C051BCC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-t3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A43CA3-D654-45BF-A4D2-863EEA1C7551"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-t3255_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25291ACE-EE6A-4B4C-BA80-173E7AD39579"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-t3255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7CAD28-A473-4CCD-B729-2B806B2FD03E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-t5250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1CDB90-638E-4A59-A1E4-CF482E7588FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-t5250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D1769E0-A8C8-463C-89C5-D10C841EC39E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-t5255_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A721C880-FC91-4812-8171-27B42398CD04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-t5255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF3B92AF-254F-4166-9568-ABA3DFFE1C4A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-t7250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F22A2BEF-4F67-4C7D-B65C-5DD348A9CF3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-t7250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90CC7D13-3CD0-4233-A60A-76FBDB97269B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-t7255_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7B5DBA-8ECB-43C2-A24A-58D88BC6EC6C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-t7255:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E97E9DD-FA5A-42FA-83E5-BBD68B628BC3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-t5250d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "336B785D-217F-4290-9E5B-B0F4DF6855B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-t5250d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4AD4DD2-B2FD-4EF3-B9CF-11F5BE4F0307"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-t5255d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60B6BFC-6FB5-4CDD-AC1A-AD1ADDD52EBF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-t5255d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18B0B92-9E9B-4BD0-9CBE-BC00675E80D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-t7250d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F12BBB-22AC-49E7-A426-F200F64F957E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-t7250d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F65C66-591A-45D4-93D1-15BE140FE6CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-t7255d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97356DF2-A6DA-43E9-A447-58BA4644A03D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-t7255d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4845C734-052D-4D5E-9035-A0D6D9CDB37E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-p5050_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9B209C-DE6A-44F7-8AD3-E86E20A2D303"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-p5050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B25ACF8D-BFF9-4D6F-B43C-3E8239993861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-p7050_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5ACE27F-7119-4226-B8D5-1E7BB91DF968"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-p7050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "928D6510-B96B-44BA-A143-00145568BFAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-p9050_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE33021-A07C-4DF5-9135-9D77AD111B5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-p9050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52F35CB-6A55-4EAE-A69E-3410FD5BA87F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-p6050_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC29443-D5EA-4EC5-A820-1407D24F6D01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-p6050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38AC4C2D-508E-493E-BA1E-EB2E8DEFF56E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-p8050_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A438DD59-36AD-4FA3-8BC5-F528B28BDCDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-p8050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EFDBCB3-A1BA-414D-A6D7-E76CB15740FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-p20050_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309AEC0C-FE74-49EA-95E5-D80125975D8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-p20050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40390086-348D-4F0F-914D-BF3050857B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-s80650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01171697-81DB-41B1-BFF1-F1076E8053B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-s80650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6933F880-AB58-48D1-9C4E-63513229029B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-s60650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C617C74E-F258-40BE-BA94-0F2895C2B63F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-s60650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AFF2A65-6833-4292-BEED-DA8B33CB99FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-s40650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034E01F9-1E5E-4A58-AC6D-9C1690DB7512"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-s40650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57A9FCD3-8667-4758-B842-AB885BB483D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-s60650l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "506747BA-46F2-4C1A-B585-EC2A683B28DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-s60650l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B9B84FA-3FA5-4F39-B6FE-32D9A5C40457"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-s80650l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73658033-68E3-433F-BC88-8931E05579A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-s80650l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C25F0FE-2908-4992-867C-885C6E9BF555"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-f7200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BEC7CA-1E2E-4999-BB0B-7BE8A6187885"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-f7200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3F384D4-AFAF-437F-91A4-A71181776006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-f6350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC643A6D-0DED-4871-B9AD-9438EEC0FF7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-f6350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB11C28D-DE36-4466-91F1-1EDE2483286B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-f9450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678CD33E-5991-42E4-833C-123002DFBE29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-f9450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A30FEA-347B-4813-A474-8A2AC9A72BDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-f9450h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7CB93F-9AE6-443A-B107-64398D802568"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-f9450h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937A1289-F176-4F7D-A25D-3ABC3836E7A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-f2150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48C0B343-51F7-4260-AABA-D574C42C78DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-f2150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1759F4C-B859-40D7-930B-340F27025EC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-c7500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63480BAC-98D8-4FF3-8B3E-1A0744611404"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-c7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A17183-3957-4C3E-A39B-5D6CDC8CA94F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-c3500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C23BEE-E943-4B64-A5E8-1A08B96B019C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-c3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C45EA-2C9F-42BC-93E3-D69A1019A3FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:tm-c3400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1FBAD6A-BDD0-45BE-B5A4-2F95018D82CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:tm-c3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FEC892-E33F-4C42-BA81-E1F8B39AD719"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-b510_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61C9685D-2AC9-4582-A514-2E194D842FE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-b510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "937EAE89-12CA-43CE-A657-CECDA17B1B87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-b500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD792E1-E930-41B1-AC29-E00315712C96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-b500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D434E2DE-0A81-44C2-8E5D-44B93A9A841F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-5800_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC434A0F-4730-4B55-BAB8-D1EC5577C99D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13742472-844D-4BB7-B9F8-158AAA23B21A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-5002_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2C1BF08-6BD5-4BC8-86FD-237DCDEB603A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-5002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18ACFDE-18F3-4C04-831A-272BED8F7C9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-5v_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838CB740-A426-4588-87A6-4AF8F4619321"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-5v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C5B24D1-A087-476A-A97D-F6C7CD2D4EA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-7v_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1096CE3-CCD8-4B32-B05E-5357C8500950"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-7v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0324C560-7461-428F-862F-B31393CF221A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-px7v2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D2B4707-7C56-4A01-BB27-50B982269DBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-px7v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7881224-1C80-4622-860E-DC38A2A179C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-px5v2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73483FC2-8D7E-4843-AE2F-C46FD9640607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-px5v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EB96757-FED8-4020-97FF-62D1BF91F610"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-px3v_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0583FF8-920E-4FD2-BD9D-6B94581356B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-px3v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C12591F-C1ED-4A94-946C-C64F5674CD9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-6250s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01C8A8D-EEC8-4A1D-AC27-16F03F17ECF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-6250s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BA8B7C-058D-45AD-B0EB-977D93EEDE15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-6550_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47CA973C-9EAC-4F45-AEFD-580CB9FEE46A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-6550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2152E3E9-36F6-4B61-8E61-4FE3B9615942"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-7500n_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44166131-A486-46BE-A4FC-D4BCD53941A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-7500n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E36363-E6B3-4D03-B00C-DF1456646EC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-7550_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B19074E5-3632-400E-B37C-D0F02AAC09EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-7550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40BF13A-7413-4869-B8D5-CFC5FBF02BCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-7550s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C92464-2C7F-43FD-96E2-99B860798645"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-7550s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C706E8A2-2D28-4AB2-A359-861357186853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-9500n_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C61D48-FCAF-4398-AD85-0A36B0943C85"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-9500n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C21A2FA9-5F0A-4FCA-9989-294FAD49F83C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-9550_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D7B657-83AC-4971-815C-EC3AC93C67D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-9550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BA96849-132E-4CB9-8AE8-7C671F5BF3AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-9550s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E555DDC-DFA0-4A7A-BCDF-9D0C3180B5F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-9550s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB31DEE1-5BE6-416B-BD7D-3B5E62A67F20"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-20000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86F0CBF0-5979-4AD9-A568-2A33EB11B05F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-20000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F7677F-504D-47F7-8B68-C3ECD078F660"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:stylus_pro_gs6000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC9A7C90-F3B8-4FE4-8C2B-8FC0D1E5B48A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:stylus_pro_gs6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6857C95A-E438-4B70-BF2E-F29AB093D3D3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-w8000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0A1C63-B75C-43D0-8850-B9DFE36BD838"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-w8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22C261CF-7693-45F8-B79F-9D89D65F3A84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-f8000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "733993C4-7557-4E4B-8CBA-004B2F017983"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-f8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2265F72-454A-4299-886F-21EB20379C13"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-f8000m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06B9C73-08DE-4210-B47E-983B618C4D5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-f8000m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DF680C7-2F0A-4C8A-83DD-CB880091EB83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-f10000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5ED994D-570F-4922-8EAF-7ADDE7506AAC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-f10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803B0E90-3233-4DB3-8BB1-66D61A312243"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-h6000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82A989D-5E12-4F74-AAE9-E3B5764055B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-h6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA5428A-532E-440D-B700-55AA4C1C81C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-h7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D5D73F-8EB6-4D6D-8FAE-CACFCAF9D325"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-h7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC5C3A24-75E3-4727-8AE0-1BC97980DE36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-h8000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69B188BC-23F2-4EDA-BB4A-02DBBC000E5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-h8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C22C7835-75C1-4219-9B97-923EAF0BC7AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-h9000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD335AC-6154-48F2-A816-D2118C352C88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-h9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948DCEAB-C8C1-4545-B350-A269D0783B8F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:px-h10000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4596331D-CFBF-44C9-AEB4-DBBD511B18C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:px-h10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86A102DA-B436-46AF-AC21-E08EB7B7433D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-t3050_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2284A13D-2145-49F2-9CA4-F12BE49497AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-t3050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA90C9C0-35AB-459F-A7A5-E6E3D036C98A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-t5050_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6827D372-A973-48E0-92EC-C2EF4B58CC8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-t5050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B829E6-8F8B-4275-BF64-9484854EDCB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-t7050_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6746D8A-FEAC-45B4-B001-A47740A0FE74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-t7050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059FB526-67DB-4730-8266-C54201907128"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-p10050_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15DAE8C0-EFB4-444D-9608-4D3E234374BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-p10050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA06C7-8307-45EE-A0CF-E810F72198AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-s30650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1AE0AD-BA29-4A04-9BC9-78B72A797B47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-s30650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F0363D-387C-4E21-9CF3-F8E1262407DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-s50650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08B5E389-F8CC-4B0B-8DE7-96BC94CA7CE1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-s50650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1BB5B35-D178-4400-8576-DC044F450AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-s70650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F1941D-05A1-427D-A3A3-EA8926F5A7D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-s70650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EBA3ACB-FB48-4CF2-9A60-B53D2DFD9BC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-f6000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04AEA08A-6682-48F5-B9BA-BB7BD2D7CA15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-f6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78160B24-C0E3-4A51-98C1-05A245CB44EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-f7100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87B0871-8793-4F00-AB48-4BD3F3E57778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-f7100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDF75F63-7C92-4736-B9F7-FC06A262826E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-f6200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43AA33DC-0B9C-425D-ACE6-2718E5AB2376"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-f6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23FBBF34-E2EA-4199-B249-AA51D7D42C59"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-f9200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88336041-CC87-4E00-A36D-BB5BBF7502FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-f9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "596CBD53-5D46-404B-A171-DC059ACD9C40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-f9350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A2AD63-BDEC-4FE5-9E33-986EF1F32C1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-f9350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69F393F7-5C6D-4487-8BFA-65D888251D57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:epson:sc-f2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D207C39-C5B6-4B6A-B6DF-51AD0F16E814"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:epson:sc-f2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0661987-14BE-47D7-B604-0A9BD793BEEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN82424996/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.epson.jp/support/misc_t/230308_oshirase.htm",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN82424996/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.epson.jp/support/misc_t/230308_oshirase.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27917",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:08.200",
      "lastModified" : "2025-02-10T22:15:31.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenance page to execute arbitrary OS commands with a root privilege. The affected products and versions are as follows: M2M Gateway with the firmware Ver.3.7.10 and earlier (CPS-MG341-ADSC1-111, CPS-MG341-ADSC1-931, CPS-MG341G-ADSC1-111, CPS-MG341G-ADSC1-930, and CPS-MG341G5-ADSC1-931), M2M Controller Integrated Type with firmware Ver.3.7.6 and earlier versions (CPS-MC341-ADSC1-111, CPS-MC341-ADSC1-931, CPS-MC341-ADSC2-111, CPS-MC341G-ADSC1-110, CPS-MC341Q-ADSC1-111, CPS-MC341-DS1-111, CPS-MC341-DS11-111, CPS-MC341-DS2-911, and CPS-MC341-A1-111), and M2M Controller Configurable Type with firmware Ver.3.8.8 and earlier versions (CPS-MCS341-DS1-111, CPS-MCS341-DS1-131, CPS-MCS341G-DS1-130, CPS-MCS341G5-DS1-130, and CPS-MCS341Q-DS1-131)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341-adsc1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "946A1696-7212-4787-A93C-7B6EDE53D996"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341-adsc1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9638515-553F-477E-9673-0CABD9151E35"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341-adsc1-931_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "56B10D03-57E7-455E-8E8E-AD3582D24D6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341-adsc1-931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72421FDB-FCDB-428E-82A0-3C7ED662E77E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341g-adsc1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "D5849A88-069E-433D-BED6-2C74B3F6E30B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341g-adsc1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E2F1D4-BA1E-4069-87DC-9DD0216AB7FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341g-adsc1-930_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "604E57A1-850D-4FF0-8D4E-67717FA2EFF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341g-adsc1-930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8027E77D-4F44-482D-9748-815FECCC94E6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mg341g5-adsc1-931_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.10",
            "matchCriteriaId" : "17D8495F-D070-43BB-8CE1-EC3692B40F2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mg341g5-adsc1-931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27224ED7-6205-4E2D-B452-6329C6B58EAF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-adsc1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "23CD1E0D-AE78-4498-8817-5C1FCDF4B921"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-adsc1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7EE4F3-F8F1-4BC5-B5FA-69D92D389793"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-adsc1-931_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "65F5FA0E-C040-4CA6-A53F-DC9EDAA4EFE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-adsc1-931:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E492A7-E7AC-458B-9952-408D915C9AC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-adsc2-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "80DAF840-FFCC-4E4F-A964-A0D3D9761E2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-adsc2-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A79518B9-A98D-4D71-9F96-E8F9FF441BB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341g-adsc1-110_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "5A00EE55-8CFC-434A-B187-442F3184BCD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341g-adsc1-110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289A036E-C360-4192-BD4B-FD046B1D48D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341q-adsc1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "94F943B3-1397-48D7-BE7C-6C4A773F821E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341q-adsc1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD6F197-ED5A-4414-9CAD-666732EB1E63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-ds1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "DE3C651C-68A3-4776-826F-3CCCF8DC2C24"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-ds1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "067D054D-D81A-400F-8883-AD290F4F346E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-ds11-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "14143147-D19C-4C83-A49D-D47E29B990DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-ds11-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019C8FDA-B856-4D9F-BF59-B25A8EAE4489"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-ds2-911_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "F0EF7B61-73C1-4467-AD42-A38DBF420510"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-ds2-911:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04D8729-A3A8-4FBA-A3FA-0D1C9E0CC607"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mc341-a1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.7.6",
            "matchCriteriaId" : "0EB5F6C9-C2D4-4735-A3E8-9C2C59812E5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mc341-a1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29496995-56D5-485B-9D18-6519D8486272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341-ds1-111_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "F74B9B92-0B7D-441C-93BF-7F152CF02FBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341-ds1-111:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "791D09FA-1CBA-4334-B62D-DDE8CC4FE629"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341-ds1-131_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "4DE8075E-9645-4C32-984C-1ECA947645D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341-ds1-131:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A77D134-C344-4900-933E-DEC74F8DB29D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341g-ds1-130_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "6ECA4990-8F3D-41C7-AC96-6EA10AB58AE4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341g-ds1-130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CEA79F-F7DD-4E29-82DC-E828C27A80B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341g5-ds1-130_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "9AA64568-FE3F-4C4C-8DFF-C77B226004FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341g5-ds1-130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5B4009-93EB-462B-A9A3-A42506DDA853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:cps-mcs341q-ds1-131_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.8.8",
            "matchCriteriaId" : "66D99898-0EB9-4728-8C97-476AE6BF1746"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:cps-mcs341q-ds1-131:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A570103-F5D1-48D3-A7D1-9F8ED71B44DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU96198617/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_cps_230317_en.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=a054b3eb-da97-40d0-9598-d7f5ff4239ec#firmware",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=a1b33f0d-d32b-4549-9741-613cd37d5528#firmware",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=f832c526-dcf6-4976-85aa-f536c15a8120#firmware",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU96198617/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_cps_230317_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=a054b3eb-da97-40d0-9598-d7f5ff4239ec#firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=a1b33f0d-d32b-4549-9741-613cd37d5528#firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.contec.com/download/donwload-list/?itemid=f832c526-dcf6-4976-85aa-f536c15a8120#firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28368",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-11T09:15:08.247",
      "lastModified" : "2025-02-10T21:15:15.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential information for the affected device may be obtained."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1391"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:t2600g-28sq_firmware:20190530:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54026FF9-55C5-4501-B05C-0D6C8C6BC108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:t2600g-28sq_firmware:20200304:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D57EA613-F481-46AC-80C4-F851EC1C18CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:t2600g-28sq:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69D673B-718C-47FB-AE3F-E503EFE4DBBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN62420378/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tp-link.com/en/support/download/t2600g-28sq/#Firmware",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN62420378/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tp-link.com/en/support/download/t2600g-28sq/#Firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1974",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-11T10:15:17.980",
      "lastModified" : "2024-11-21T07:40:15.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1230"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.8",
            "matchCriteriaId" : "E4BF738D-18A6-4996-8D3A-D56829F96F93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/ac3f2f047ee00b4edaea7530e570ab67ff87cd6a",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/852781c6-9cc8-4d25-9336-bf3cb8ee3439",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/ac3f2f047ee00b4edaea7530e570ab67ff87cd6a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/852781c6-9cc8-4d25-9336-bf3cb8ee3439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1975",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-11T10:15:18.037",
      "lastModified" : "2024-11-21T07:40:15.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.8",
            "matchCriteriaId" : "E4BF738D-18A6-4996-8D3A-D56829F96F93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/ac3f2f047ee00b4edaea7530e570ab67ff87cd6a",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/829cab7a-4ed7-465c-aa96-29f4f73dbfff",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/ac3f2f047ee00b4edaea7530e570ab67ff87cd6a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/829cab7a-4ed7-465c-aa96-29f4f73dbfff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23588",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-04-11T10:15:18.097",
      "lastModified" : "2024-11-21T07:46:29.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in SIMATIC IPC1047 (All versions), SIMATIC IPC1047E (All versions with maxView Storage Manager < 4.09.00.25611 on Windows), SIMATIC IPC647D (All versions), SIMATIC IPC647E (All versions with maxView Storage Manager < 4.09.00.25611 on Windows), SIMATIC IPC847D (All versions), SIMATIC IPC847E (All versions with maxView Storage Manager < 4.09.00.25611 on Windows). The Adaptec Maxview application on affected devices is using a non-unique TLS certificate across installations to protect the communication from the local browser to the local application.\r\nA local attacker may use this key to decrypt intercepted local traffic between the browser and the application and could perform a man-in-the-middle attack in order to modify data in transit."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc647d_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43337EC1-0BF8-40B3-88BC-38F06EF48DC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc647d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EF28FB-BAB3-4710-9D25-25F67ACADC60"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc847d_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681C8A24-C3AC-4CF4-8283-DAC337909CC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc847d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8F37D88-E086-4060-8420-BD0F8D8FF580"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_ipc1047_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5DA20C3-90EE-4355-99FC-BACE6F77C56C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc1047:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E959C97-838B-41F6-BD73-AA5073975075"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microchip:maxview_storage_manager:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "4.09.00.25611",
            "matchCriteriaId" : "77C02716-54AE-4545-AB8C-4760F92271A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc1047e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F2895E-AFB0-4516-B549-93CCD5BB5814"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc647e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E430C4C5-D887-47C6-B50F-66EEE9519151"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_ipc847e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1157418C-14C4-43C4-B63E-7E98D868A94F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-511182.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-511182.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26293",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-04-11T10:15:18.157",
      "lastModified" : "2024-11-21T07:51:04.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 6), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tia_portal:15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB7DAF87-8685-402D-B8AF-30E3DBC8B37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tia_portal:16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85B6CBCC-CBF6-45F3-A475-FF154208E58C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tia_portal:17:-:*:*:*:*:*:*",
            "matchCriteriaId" : "85EDE398-4E18-4F39-9F00-66E9EDB17AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tia_portal:17:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4DFB46-947A-4156-B760-5754D3A502B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tia_portal:17:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "4A46017D-5AF4-4063-92E8-83228CCDEB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tia_portal:17:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "903EA460-9F1F-4BB1-AAF4-9B17A864892A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tia_portal:17:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "D63A193B-18EB-4399-8528-BC58C88CB19C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tia_portal:17:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "931BB5EB-D243-4E06-844B-567B899905F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tia_portal:18:-:*:*:*:*:*:*",
            "matchCriteriaId" : "50C20804-6D7D-49AB-8789-625CA57C077B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-116924.html",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-116924.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-116924.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27464",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-04-11T10:15:18.223",
      "lastModified" : "2024-11-21T07:52:57.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix Forgot Password (Mendix 8 compatible) (All versions < V4.1.1), Mendix Forgot Password (Mendix 9 compatible) (All versions < V5.1.1). The affected versions of the module contain an observable response discrepancy issue that could allow an attacker to retrieve sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-204"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:forgot_password:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.1",
            "matchCriteriaId" : "3C89CB05-677F-421D-8B89-3E0BFF89EE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:forgot_password:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.1.1",
            "matchCriteriaId" : "7E439E0B-C5B9-4686-9258-D23A8CB75AAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:forgot_password:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.1.1",
            "matchCriteriaId" : "7D8F298E-CF76-44EB-96D3-67DF5E0ABEF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-699404.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-699404.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28489",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-04-11T10:15:18.280",
      "lastModified" : "2024-11-21T07:55:12.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). Affected devices are vulnerable to command injection via the web server port 443/tcp, if the parameter “Remote Operation” is enabled. The parameter is disabled by default.\r\nThe vulnerability could allow an unauthenticated remote attacker to perform arbitrary code execution on the device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:cp-8031_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cpci85_v05",
            "matchCriteriaId" : "CA401321-A9D1-48B1-A1B3-219AE95C64AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:cp-8031:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D24F9EDC-DA14-477D-B9C1-C9BF56E9B057"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:cp-8050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "cpci85_v05",
            "matchCriteriaId" : "CE2E15ED-C2B8-4FBD-9B34-8FD0C73FAB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:cp-8050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929EF3DE-C8E6-49DA-98C0-13AB4C966AA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/173370/Siemens-A8000-CP-8050-CP-8031-Code-Execution-Command-Injection.html",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Jul/14",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-472454.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173370/Siemens-A8000-CP-8050-CP-8031-Code-Execution-Command-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Jul/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-472454.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28766",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-04-11T10:15:18.337",
      "lastModified" : "2025-11-11T21:15:34.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7KE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA82 (CP100) (All versions < V8.90), SIPROTEC 5 7SA82 (CP150) (All versions < V9.40), SIPROTEC 5 7SA86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD82 (CP100) (All versions < V8.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.40), SIPROTEC 5 7SD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.40), SIPROTEC 5 7SK85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL82 (CP100) (All versions < V8.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.40), SIPROTEC 5 7SL86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SS85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7ST85 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SX82 (CP150) (All versions < V9.40), SIPROTEC 5 7SX85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UM85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT82 (CP100) (All versions < V8.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.40), SIPROTEC 5 7UT85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VK87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.40), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.40). Affected devices lack proper validation of http request parameters of the hosted web service.\r\nAn unauthenticated remote attacker could send specially crafted packets that could cause denial of service condition of the target device."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en \nSIPROTEC 5 6MD85 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 6MD86 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 6MD89 ( CP300) (Todas las versiones &gt;= V7.80 &lt; V9.60), \nSIPROTEC 5 6MU85 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7KE85 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7SA82 (CP100) (Todas las versiones), \nSIPROTEC 5 7SA82 (CP150) (Todas las versiones &lt; V9.40), \nSIPROTEC 5 7SA86 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40 ), \nSIPROTEC 5 7SA87 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7SD82 (CP100) (Todas las versiones), \nSIPROTEC 5 7SD82 (CP150) (Todas las versiones &lt; V9.40), \nSIPROTEC 5 7SD86 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7SD87 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7SJ81 (CP100) (Todas las versiones), \nSIPROTEC 5 7SJ81 (CP150) (Todas las versiones &lt; V9.40), \nSIPROTEC 5 7SJ82 (CP100) (Todas las versiones), \nSIPROTEC 5 7SJ82 (CP150) (Todas las versiones &lt; V9.40), \nSIPROTEC 5 7SJ85 (CP300) (Todas las versiones &gt; = V7.80 &lt; V9.40), \nSIPROTEC 5 7SJ86 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7SK82 (CP100) (Todas las versiones), \nSIPROTEC 5 7SK82 (CP150) (Todas las versiones &lt; V9.40), \nSIPROTEC 5 7SK85 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7SL82 (CP100) (Todas las versiones), \nSIPROTEC 5 7SL82 (CP150) (Todas las versiones &lt; V9.40 ), \nSIPROTEC 5 7SL86 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7SL87 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7SS85 (CP300) (Todas versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7ST85 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.60), \nSIPROTEC 5 7ST86 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40 ), \nSIPROTEC 5 7SX82 (CP150) (Todas las versiones &lt; V9.40), \nSIPROTEC 5 7SX85 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7UM85 (CP300) (Todas las versiones &gt;= V7. 80 &lt; V9.40), \nSIPROTEC 5 7UT82 (CP100) (Todas las versiones), \nSIPROTEC 5 7UT82 (CP150) (Todas las versiones &lt; V9.40), \nSIPROTEC 5 7UT85 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9. 40), \nSIPROTEC 5 7UT86 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7UT87 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7VE85 (CP300) ( Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7VK87 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9.40), \nSIPROTEC 5 7VU85 (CP300) (Todas las versiones &gt;= V7.80 &lt; V9. 40), \nSIPROTEC 5 Communication Module ETH-BA-2EL (todas las versiones &lt; V9.40), \nSIPROTEC 5 Communication Module ETH-BB-2FO (todas las versiones &lt; V9.40), \nSIPROTEC 5 Communication Module ETH-BD-2FO (todas versiones &lt; V9.40), \nSIPROTEC 5 Compact 7SX800 (CP050) (Todas las versiones &lt; V9.40). \n\nLos dispositivos afectados carecen de una validación adecuada de los parámetros de solicitud http del servicio web alojado. Un atacante remoto no autenticado podría enviar paquetes especialmente manipulados que podrían provocar una condición de denegación de servicio del dispositivo objetivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_6md85_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0D29DB-48A2-4A00-8B91-F336CC5E4FBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_6md85:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CC1B1C-9EB5-4235-BC3C-D20F39567A69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_6md85_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "6C1C2A76-380A-4121-8A73-6A0EF336C8D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_6md85:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A111316-A19F-47CD-87CB-860C90205A90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_6md86_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4BC292-1845-4F87-85EF-FA227CA6BA0A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_6md86:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "640BF11A-A17B-4F8B-9D2B-1C1D2D4075BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_6md86_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "0D248593-B211-419C-B0EA-883AB75AB191"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_6md86:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31902FCD-60CD-48BF-9783-423D99AFA813"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_6md89_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F75F3B-AA90-463B-AFB0-7D25BDADE3F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_6md89:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7084F2B-5865-4ED1-9A6A-E369FC0F1BEB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_6mu85_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "546B673C-FBCC-4449-A1B7-1F5B25AC0F15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_6mu85:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1452A607-3CD5-4928-AB0B-169B262703E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7ke85_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EACDE50E-CD2D-482A-B662-7ACF6BC09311"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7ke85:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC91C797-4849-4A3B-8100-E2AFE3B4272E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7ke85_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "61C2EDD8-8466-4B0E-BCC3-20FD36C3E114"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7ke85:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C327E6-E0C8-430C-A314-E3D1A60A6809"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sa82_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A81C84C-AA56-480C-85FF-8BF0B13BA278"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sa82:cp100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC0B29E-2407-4473-81AB-647648E2B05A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sa82_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "BD24BEEE-813D-48A5-AB8A-D91F095493C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sa82:cp150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F61F485-9A80-45A3-BD5A-6526916EC0EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sa86_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90068748-1128-46DA-A0A1-8712FAB0DC7F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sa86:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08B16445-C707-4D26-8C8A-F1166F85A64B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sa86_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "952F74A7-D7DA-4253-8850-5449044D42E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sa86:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1DCC8A-5795-4253-A111-5C0EF29FB4B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sa87_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9C7421C-2DBE-44A7-83BB-C073F8BAC848"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sa87:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE5CD98-00BD-4AEA-8E3F-2A8AE215AAFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sa87_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "5532456A-2CED-47E0-961F-1734C5AE5049"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sa87:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDD47A1D-993D-449D-9E23-8D0A5D9B14E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sd82_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1D59E9-63FA-473C-860E-4ACBD0D0B77F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sd82:cp100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D3E5539-B71B-453E-8397-C2A714646D51"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sd82_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "694F4536-1802-49B5-8823-743F174E844D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sd82:cp150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9CD8B78-EC91-4507-A0F8-3159935DFE42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sd86_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2077F31A-5938-402F-B8AF-44E26CE9634D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sd86:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C88252DD-84A0-4245-BF75-5A59061FC45F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sd86_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "46965175-C2E4-492A-9ADC-4653EFB82A66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sd86:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9C43FC0-76C8-4E52-9AFE-5498F54BF1D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sd87_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B9852DB-ED49-415B-AE21-4A974F4FEB74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sd87:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3296A090-50EE-4203-8D19-8610D0784037"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sd87_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "09B91947-FC3A-4E55-BA46-FC79ECED1EB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sd87:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8F3C87-242C-4606-B139-5E64BBAB18D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sj81_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D0B011-FDC2-4C8B-9DB2-BC3A64A3C9AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sj81:cp100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8FD72B-E34D-4F7E-ADDF-00955A58299F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sj81_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "8A1F7FD7-EA88-424B-9B5B-25DE5D62BC3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sj81:cp150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EB411D-D0AA-4CDD-BDBB-C3D90F9C53ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sj82_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2D1FE4-499C-47C1-B47F-904DE2DC32F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sj82:cp100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83094A08-9EFC-4CB8-BFF6-20C17F3E1682"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sj82_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "5B8B47A5-EFFE-4F0E-8BBA-9AEF6D629920"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sj82:cp150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC03BAAF-4507-483F-BF1A-67D8944638A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sj85_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95686A74-193F-4016-AAF0-E24B60735EFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sj85:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AFB2251-7B60-49B6-A9C6-98F47FADE02D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sj85_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "CD3FA333-6DC9-4C9F-81C3-D72AF6DE6DE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sj85:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466A7D08-762C-4F17-BC44-A81876D24074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sj86_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0913FC3-7E96-4B12-B576-C7592873EC56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sj86:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2D8944-6F54-4528-A2EE-56F54454F941"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sj86_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "AF51F61C-E0C9-40C0-BB97-AC75DA4894EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sj86:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E80208-787F-49BD-88C9-A5F51D7FA367"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sk82_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DD37B3-6C4D-4362-A87B-1DB570B34F71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sk82:cp100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08ABC5D4-F8CF-47D7-B482-8E6771DD3213"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sk82_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "AA40B67E-C7F0-4DDA-9C33-058FF2770630"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sk82:cp150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0A9451D-AC58-4CC5-BE77-18DF5C7A4A47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sk85_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4393A068-93FF-4597-88BE-DDA15B3CC374"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sk85:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF56A2EE-6D67-4C60-88A1-7ADB77B89088"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sk85_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "52E922D9-98DD-4EB0-9EC4-31A958C29A2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sk85:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D919812-54DF-4861-B809-861197F597CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sl82_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44762C83-76EB-48C8-9A17-4EA22814DB83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sl82:cp100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0D9D58-C0A1-4634-887A-0A62117AAC2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sl82_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "D673C294-90F4-4132-A0C1-D243105CC29F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sl82:cp150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289B2058-EF26-4965-A713-344E278CC5D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sl86_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D7D1187-7ACD-4DCC-ADAD-7653E9BEFC17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sl86:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B437991-E019-41BD-AAA0-BE663CC0BD53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sl86_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "79272FA8-7DC9-421B-84A0-21ADE2DCB3CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sl86:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49C49601-7A9B-47AC-AFC0-D37674E520A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sl87_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55CBD184-8088-473B-8542-F48156BC7369"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sl87:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F979441B-57A5-427B-B67C-04267322F2F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sl87_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "EC53C37E-C0FE-4BAD-B20A-6B8BB8866310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sl87:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB997A05-826D-4E4D-9FE9-05EBAFD7C9F4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7ss85_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA3FBC65-B49F-4EA3-982D-4D3FC1046E30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7ss85:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E229DA19-6D09-4D5C-9FBD-15009F36CFBC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7ss85_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "BB620012-EE24-4F5E-A77C-DD865E5CEAF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7ss85:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2354C161-5D95-43DD-8735-70EAFFB96A35"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7st85_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E658244-116E-41AF-9638-E0D7CCD4F158"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7st85:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE32C2B7-4EA5-44E3-A8A8-122AE1C937C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7st85_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E658244-116E-41AF-9638-E0D7CCD4F158"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7st85:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DDE4AA1-E4A6-4A86-9826-BBFC7A076F95"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sx85_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "6A08C3E4-9299-40B3-8BF2-B9D4A2CCF2C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sx85:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A07BC72-9EA0-4D12-A9F8-8E3E8E522F94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7um85_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "1DC448F2-0323-4AB4-BCE6-77D19167A33D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7um85:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176D2DA2-3429-4CE3-A7CB-F1EBA54ADC24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7ut82_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F140ED12-5A00-4B1C-B03A-5E1946980D3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7ut82:cp100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01B099AA-77B5-4A8A-BB1E-E30C754A047A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7ut82_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "23E9564B-E66D-40BC-B9CD-5F5E74C6D852"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7ut82:cp150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83EC770-F876-4518-A625-742268FAC1C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7ut85_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F27AA82-CB13-466F-88F6-87509B01C83E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7ut85:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "563D1E66-BECC-4A8A-A002-3CCCBB7F4DE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7ut85_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "11D09EFC-CD9D-4CD2-9F35-4FBA023AABD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7ut85:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD4C3BC9-0D67-46D0-9033-F5D9BB4E27A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7ut86_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30CCFCC0-EB3E-4437-9A74-FF5787F69A0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7ut86:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99CEF9BE-987E-40A5-A1CA-55A5F52899F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7ut86_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "A1CC685C-7E61-4BDD-B84A-B9F2D11A1AA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7ut86:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120ADDE5-167C-482F-8DD4-FD90B0C79027"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7ut87_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EFF5E81-800A-42D9-8899-152E84F28987"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7ut87:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E830FAFE-60D8-4758-843B-31058C682656"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7ut87_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "12B8CDA6-745F-492B-A132-F99E22743B38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7ut87:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADEE1942-0B7F-439C-829B-B92F300EC76B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7ve85_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "FAC0590E-5E3D-41CC-8022-7D845A3DAC98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7ve85:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A39EFCE-2926-4E58-8521-18DC7A5246B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7vk87_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5FBA4A-650A-4162-90FE-89DA95C09918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7vk87:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16390127-25E5-4188-9977-9A1F1A085F33"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7vk87_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "D8BD59C0-C5AD-472F-B19E-07BFF388B81A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7vk87:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435A96CD-B713-46D0-882D-5F78DD8769A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_communication_module_ethba2el_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "F5E4E495-29B0-43B3-9D47-32380FF4C089"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_communication_module_ethba2el:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF3C9BB-2A5E-4C19-BB2B-85466A339559"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_communication_module_ethbb2fo_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "3FDEAB27-F510-4C90-83B9-5745785BCF9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_communication_module_ethbb2fo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DCC99B-0D05-4434-9234-099FE3125971"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_communication_module_ethbd2fo_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "A9F4733E-350E-4C18-8CD9-2AFE73AD7277"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_communication_module_ethbd2fo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE48BEE-223F-4E50-B013-36577693B6F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_compact_7sx800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "ECA4C229-AEE6-43C9-BD07-DA54B38BFD7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_compact_7sx800:cp050:*:*:*:*:*:*:*",
            "matchCriteriaId" : "839E7AF3-C681-4882-8F06-8FC1E7B520C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sa84_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784DAA71-3A20-4B48-B3ED-EAA65C416E79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sa84:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4E0986C-40CE-4E22-A0C0-84CF9EC3FD57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sd84_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1FAB3D-2D2A-493B-9542-14801D6AE6FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sd84:cp200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FB92824-0B69-40E1-B7A1-72DDCA9B291C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7st86_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CA1260-07CC-46C3-9BEE-6280B1E13536"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7st86:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B361049-BC5B-40D1-AA49-B7D6F2E8383E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7sx82_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "F1DE6142-B1D8-4924-9862-30B03F5CD945"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7sx82:cp150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C83A0C3-3636-4C59-AC23-2B0210714790"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siprotec_5_7vu85_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.40",
            "matchCriteriaId" : "220636C3-4856-4FDB-A69B-69058F8F5975"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siprotec_5_7vu85:cp300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A123C1A-8A14-437D-8591-3F550CE9128D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-322980.html",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-322980.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-322980.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-322980.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28828",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-04-11T10:15:18.393",
      "lastModified" : "2024-11-21T07:56:06.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:polarion_alm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2304.0",
            "matchCriteriaId" : "0B04B897-3DD0-4715-9BE0-D5AF4E008B14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-632164.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-632164.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29053",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-04-11T10:15:18.460",
      "lastModified" : "2025-02-26T21:15:16.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.0.0). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:jt_open_toolkit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.3.2.0",
            "matchCriteriaId" : "0A65E71E-121E-48BC-9BBE-304283754B13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:jt_utilities:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.3.0.0",
            "matchCriteriaId" : "3DABFF55-82E0-4FEE-A064-03CE6B364819"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-642810.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-642810.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29054",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2023-04-11T10:15:18.517",
      "lastModified" : "2024-11-21T07:56:27.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2IRT (All versions < V5.5.2), SCALANCE X202-2P IRT (All versions < V5.5.2), SCALANCE X202-2P IRT PRO (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT (All versions < V5.5.2), SCALANCE X204IRT PRO (All versions < V5.5.2), SCALANCE XF201-3P IRT (All versions < V5.5.2), SCALANCE XF202-2P IRT (All versions < V5.5.2), SCALANCE XF204-2BA IRT (All versions < V5.5.2), SCALANCE XF204IRT (All versions < V5.5.2), SIPLUS NET SCALANCE X202-2P IRT (All versions < V5.5.2). The SSH server on affected devices is configured to offer weak ciphers by default.\r\n\r\nThis could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data\r\npassed over the connection between legitimate clients and the affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x200-4p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "22AB35F0-99D8-4E09-B76B-5CEA0F2916D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x200-4p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9CBC72-92D9-4B3A-884F-33124C457016"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x201-3p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "04EC0D48-53B2-42B4-B008-976664B31161"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x201-3p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3268CF75-6DAB-416A-B19B-2A8F95C268CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x201-3p_irt_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "72870433-6CC1-4574-B8E4-A456A348A6C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x201-3p_irt_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492E8AC1-338B-4AC3-90C7-1FADCD4528C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x202-2irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "D2177B7B-099A-40E5-BA2F-C7CB4DAA7EEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x202-2irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B1D979-038F-42F4-AB7D-E0664D051B4E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x202-2irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "D2177B7B-099A-40E5-BA2F-C7CB4DAA7EEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x202-2irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B1D979-038F-42F4-AB7D-E0664D051B4E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x202-2p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "799E0913-E071-4136-96F0-27FF40FD7D22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x202-2p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB62730-E759-455A-A308-F9DB084B35B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x202-2p_irt_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "C3C17B6E-FE1B-4A56-89C2-6B1060B09139"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x202-2p_irt_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4726901-34BF-4F70-80A6-71648A4A29FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "9D66C306-B0E0-4000-AD3C-80E20E538726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6716DCDE-BD3F-4BA2-A66A-A0C14C6A3C15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "9D66C306-B0E0-4000-AD3C-80E20E538726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6716DCDE-BD3F-4BA2-A66A-A0C14C6A3C15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204irt_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "F812AD70-3AEB-4F35-B8B1-C0D76AE1C1D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204irt_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1769DB7A-F832-4D89-8ED0-8677F750059D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf201-3p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "6835BD4D-2EE0-4484-A5F1-6B4C472F2C57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf201-3p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41614C70-97B4-44C8-A441-530A413A26F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf202-2p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "6E5244AF-43E2-4A2B-AD60-4F54394D636D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf202-2p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6751FB7D-C72C-4321-B535-5880FE696FC3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "71460FAA-58B5-44BD-8C3F-85919D4ADDEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf204-2ba_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E6AFAA-B903-47BB-B0F3-7650B039C0FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf204irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "5917B7D6-894F-487D-8CD5-12542CC6693A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf204irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E5489B-277A-4D02-B4AB-4DB65969EED2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:siplus_net_scalance_x202-2p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "B0D2E73C-B605-4DD3-AD04-85CF154E95A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:siplus_net_scalance_x202-2p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C3504F0-D0F4-4106-824E-A87E46DADC3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-479249.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-479249.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1976",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-11T11:15:08.207",
      "lastModified" : "2024-11-21T07:40:15.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-263"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:answer:answer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6",
            "matchCriteriaId" : "BC30C65B-0A27-4181-94A2-75BDAD7D7145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/469bcabf-b315-4750-b63c-82ac86d153de",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/469bcabf-b315-4750-b63c-82ac86d153de",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T12:15:07.657",
      "lastModified" : "2025-02-11T16:15:36.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesnet:libyang:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.164",
            "versionEndIncluding" : "2.1.30",
            "matchCriteriaId" : "45E8D3A2-7CA5-4C1C-B0EB-6AD5BC13D455"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CESNET/libyang/issues/1987",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/CESNET/libyang/issues/1987",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T12:15:07.700",
      "lastModified" : "2025-02-11T16:15:37.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdownload.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gdidees:gdidees_cms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.9.1",
            "matchCriteriaId" : "09AAE6B4-0C69-4428-9B58-E8F6E3943A44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171894/GDidees-CMS-3.9.1-Local-File-Disclosure-Directory-Traversal.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gist.github.com/Hadi999/516aa25b953b0cba57089a0c11b1305b",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge-base.secureflag.com/vulnerabilities/unrestricted_file_download/unrestricted_file_download_vulnerability.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gdidees.eu/cms-1-0.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171894/GDidees-CMS-3.9.1-Local-File-Disclosure-Directory-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gist.github.com/Hadi999/516aa25b953b0cba57089a0c11b1305b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://knowledge-base.secureflag.com/vulnerabilities/unrestricted_file_download/unrestricted_file_download_vulnerability.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gdidees.eu/cms-1-0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://packetstorm.news/files/id/171894",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T12:15:07.740",
      "lastModified" : "2025-02-10T22:15:31.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in POWERAMP audioplayer build 925 bundle play and build 954 allows a remote attacker to gain privileges via the reverb and EQ preset parameters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerampapp:poweramp:-:build_925:*:*:*:android:*:*",
            "matchCriteriaId" : "0FC55470-173F-4E8E-80BB-DD0F2C76C94F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerampapp:poweramp:-:build_954:*:*:*:android:*:*",
            "matchCriteriaId" : "1799C130-D43D-4B71-BD81-8000F6225B78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27645/CVE%20detail.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.maxmpz.audioplayer",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://powerampapp.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27645/CVE%20detail.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.maxmpz.audioplayer",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://powerampapp.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0645",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-04-11T14:15:07.590",
      "lastModified" : "2024-11-21T07:37:32.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit  https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libjxl_project:libjxl:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.1",
            "matchCriteriaId" : "30A57BDB-FA83-4502-B7BC-2671A50DFC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libjxl/libjxl/pull/2101",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/libjxl/libjxl/pull/2101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T14:15:07.677",
      "lastModified" : "2025-02-11T16:15:36.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RST_STREAM frames. As a result, the memory and CPU usage are high which can lead to a Denial of Service (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper:h2:0.2.4:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "54D7E5A6-2BD2-423F-B2BF-0A6A801C9AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper:hyper:0.13.7:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "9845E21C-7B0F-4770-A63E-D89A428CC393"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hyperium/hyper/issues/2877",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHBAE7LQARMPUEEV4TWET4D7G6WCWBUD/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZYRZ5Y2ALATKKPIITAFAJIS4TR4LUAHO/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/hyperium/hyper/issues/2877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHBAE7LQARMPUEEV4TWET4D7G6WCWBUD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZYRZ5Y2ALATKKPIITAFAJIS4TR4LUAHO/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28062",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-04-11T14:15:07.710",
      "lastModified" : "2024-11-21T07:54:18.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell PPDM versions 19.12, 19.11 and 19.10, contain an improper access control vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability to bypass intended access restrictions and perform unauthorized actions.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-648"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerprotect_data_manager:19.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34130ADE-3AE2-4361-AB55-804AB1345670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerprotect_data_manager:19.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9359611A-8438-4D2E-AEC3-9F1C747755A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:powerprotect_data_manager:19.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6561482F-D852-4D74-8680-F55CF841E4F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000212242/dsa-2023-137-dell-powerprotect-data-manager-security-update-for-proprietary-code-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000212242/dsa-2023-137-dell-powerprotect-data-manager-security-update-for-proprietary-code-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1552",
      "sourceIdentifier" : "GEPowerCVD@ge.com",
      "published" : "2023-04-11T15:15:10.397",
      "lastModified" : "2024-11-21T07:39:25.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ToolboxST prior to version 7.10 is affected by a deserialization vulnerability. An attacker with local access to an HMI or who has conducted a social engineering attack on an authorized operator could execute code in a Toolbox user's context through the deserialization of an untrusted configuration file. Two CVSS scores have been provided to capture the differences between the two aforementioned attack vectors. \n\nCustomers are advised to update to ToolboxST 7.10 which can be found in ControlST 7.10. If unable to update at this time customers should ensure they are following the guidance laid out in GE Gas Power's Secure Deployment Guide (GEH-6839). Customers should ensure they are not running ToolboxST as an Administrative user. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "GEPowerCVD@ge.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ge:toolboxst:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.10",
            "matchCriteriaId" : "8D1460BD-43AF-4C48-A19C-C423264A921B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ge.com/content/dam/cyber_security/global/en_US/pdfs/2023-03-23_ToolboxST_Deserialization_of_Untrusted_Configuration_Data.pdf",
        "source" : "GEPowerCVD@ge.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ge.com/content/dam/cyber_security/global/en_US/pdfs/2023-03-23_ToolboxST_Deserialization_of_Untrusted_Configuration_Data.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T15:15:10.463",
      "lastModified" : "2025-02-11T16:15:31.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Snippet-box 1.0.0 is vulnerable to Cross Site Scripting (XSS). Remote attackers can render arbitrary web script or HTML from the \"Snippet code\" form field."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snippet_box_project:snippet_box:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4605EE8-CAAB-4C06-9DA0-6F9A0F829713"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/go-compile/security-advisories/blob/master/CVE-2023-23277.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pawelmalak/snippet-box",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pawelmalak/snippet-box/issues/57",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/go-compile/security-advisories/blob/master/CVE-2023-23277.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pawelmalak/snippet-box",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pawelmalak/snippet-box/issues/57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26845",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T15:15:10.510",
      "lastModified" : "2025-02-10T16:15:33.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Request Forgery (CSRF) in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencats:opencats:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F839A2-62A3-4354-B031-E6AC9A6FFAC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cassis-sec/CVE/tree/main/2023/CVE-2023-26845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://opencats.org",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/cassis-sec/CVE/tree/main/2023/CVE-2023-26845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://opencats.org",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26846",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T15:15:10.547",
      "lastModified" : "2025-02-11T16:15:36.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencats:opencats:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F839A2-62A3-4354-B031-E6AC9A6FFAC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cassis-sec/CVE/tree/main/2023/CVE-2023-26846",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://opencats.org",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/cassis-sec/CVE/tree/main/2023/CVE-2023-26846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://opencats.org",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T15:15:10.590",
      "lastModified" : "2025-02-11T16:15:36.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencats:opencats:0.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F839A2-62A3-4354-B031-E6AC9A6FFAC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cassis-sec/CVE/tree/main/2023/CVE-2023-26847",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://opencats.org",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/cassis-sec/CVE/tree/main/2023/CVE-2023-26847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://opencats.org",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T15:15:10.630",
      "lastModified" : "2025-02-11T21:15:11.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the key_wifi_safe_net_check_url, KEY_Cirus_scan_whitelist and KEY_AD_NEW_USER_AVOID_TIME parameters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dualspace:super_security:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1655B8-5A70-4CA2-B515-63E1A2C1C5E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.dualspace.com/pc/en/products.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://apkpure.com/cn/super-security-virus-cleaner/com.ludashi.security",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27192/CVE%20detail.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.dualspace.com/pc/en/products.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://apkpure.com/cn/super-security-virus-cleaner/com.ludashi.security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27192/CVE%20detail.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30465",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-11T15:15:10.673",
      "lastModified" : "2025-02-13T17:16:24.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the \"orderType\" parameter and the ordering of the returned content using an SQL injection attack, an attacker can extract the username of the   user with ID 1 from the \"user\" table, one character at a time.  Users are advised to upgrade to Apache InLong's 1.6.0 or cherry-pick [1] to solve it.\n \n https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html \n\n[1]  https://github.com/apache/inlong/issues/7529 https://github.com/apache/inlong/issues/7529"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:inlong:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305A709-61D9-4070-A08A-B70E49A61794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:inlong:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "899C3A43-FC72-4DAB-9CD1-61257F56DE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/11/2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/mrh4nr3jrlbj6nxkn4q8hddbfh1pnok0",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/11/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/mrh4nr3jrlbj6nxkn4q8hddbfh1pnok0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1983",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-11T17:15:07.963",
      "lastModified" : "2024-11-21T07:40:16.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manage_product.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-225530 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sales_tracker_management_system_project:sales_tracker_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF52C94E-14A2-48E2-930E-56E6375C4846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/graywar1/bug_report/blob/main/SQLi.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225530",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225530",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/graywar1/bug_report/blob/main/SQLi.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22635",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-04-11T17:15:08.043",
      "lastModified" : "2024-11-21T07:45:05.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions,  6.2 all versions, 6.0 all versions, 5.6 all versions, 5.4 all versions, 5.2 all versions, 5.0 all versions and 4.0 all versions may allow a local attacker to escalate their privileges via modifying the installer upon upgrade."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "5.6.6",
            "matchCriteriaId" : "9042C015-3FBF-43C0-9E0A-10C761AF1B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.4.10",
            "matchCriteriaId" : "38117A67-11E8-4928-8450-E9B85265747A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.8",
            "matchCriteriaId" : "C1EA50D1-71A4-4687-B921-54B66A1E1BBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-481",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22641",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-04-11T17:15:08.100",
      "lastModified" : "2024-11-21T07:45:06.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.9, FortiOS versions 6.4.0 through 6.4.12, FortiOS all versions 6.2, FortiOS all versions 6.0, FortiProxy version 7.2.0 through 7.2.2, FortiProxy version 7.0.0 through 7.0.8, FortiProxy all versions 2.0, FortiProxy all versions 1.2, FortiProxy all versions 1.1, FortiProxy all versions 1.0 allows an authenticated attacker to execute unauthorized code or commands via specially crafted requests."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "2.0.12",
            "matchCriteriaId" : "176E9BB3-EAC8-48BF-B7E0-B5F1A59DB01E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.9",
            "matchCriteriaId" : "E9463F12-5733-4BBD-9A19-FAF05E3F8686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.3",
            "matchCriteriaId" : "2DE32DAA-88FE-4134-84CC-8C071F92D5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.4.13",
            "matchCriteriaId" : "0C012F20-C335-46E8-B626-1634DB044942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.11",
            "matchCriteriaId" : "8870AB06-C50F-452A-952C-30DE7860264E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.4",
            "matchCriteriaId" : "7582B2FF-8EDC-4599-96F3-CFA7BAE1FCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-479",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22642",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-04-11T17:15:08.150",
      "lastModified" : "2024-11-21T07:45:06.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the remote FortiGuard server hosting outbreakalert ressources."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.8",
            "versionEndExcluding" : "6.4.11",
            "matchCriteriaId" : "95A5C854-E6E1-4DEA-943C-BD30D03C30FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.6",
            "matchCriteriaId" : "C6E67CE7-98F2-47E5-84DE-401CB95800AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.2",
            "matchCriteriaId" : "12767150-C085-41ED-A645-83BFE7E846E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.8",
            "versionEndExcluding" : "6.4.11",
            "matchCriteriaId" : "611FEDBD-269C-4C5D-AAAD-D2E90944C07E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.6",
            "matchCriteriaId" : "B79A616E-1B6A-4EA9-BF8E-133AD03C1D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.2",
            "matchCriteriaId" : "C654DFBA-E3B0-4865-9088-13385A428E78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-502",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-22-502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27995",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2023-04-11T17:15:08.197",
      "lastModified" : "2024-11-21T07:53:53.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiSOAR 7.3.0 through 7.3.1 allows an authenticated, remote attacker to execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@fortinet.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.3.2",
            "matchCriteriaId" : "E640925A-832A-4458-9322-F8753C66A1F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/psirt/FG-IR-23-051",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/psirt/FG-IR-23-051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1939",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-04-11T18:15:58.447",
      "lastModified" : "2025-02-10T19:15:36.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "No access control for the OTP key \n\n on OTP entries\n\n in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:linux:*:*",
            "versionEndIncluding" : "2022.3.2.0",
            "matchCriteriaId" : "4F3171EE-56B5-4A43-AC2A-5B240D2510FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "2022.3.33.0",
            "matchCriteriaId" : "E03C94F7-13B7-437F-9C4D-0FE41B267CDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0009",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1980",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-04-11T18:15:58.503",
      "lastModified" : "2025-02-10T19:15:36.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Two factor \n\nauthentication\n\nbypass on login in Devolutions Remote Desktop Manager 2022.3.35 and earlier allow user to cancel the two factor authentication via the application user interface and open entries."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2022.3.35",
            "matchCriteriaId" : "82E5A2F1-AEE2-47E4-A3EF-6DDBD824768B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0009",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1984",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-11T18:15:58.547",
      "lastModified" : "2024-11-21T07:40:16.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Complaint Management System 1.0. This vulnerability affects unknown code of the file /users/check_availability.php of the component POST Parameter Handler. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225532."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:complaint_management_system_project:complaint_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FB2709-4441-4348-A5AB-C7257108803E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/qinyiqun/bug_report/blob/main/SQLi.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225532",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225532",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/qinyiqun/bug_report/blob/main/SQLi.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1985",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-11T18:15:58.633",
      "lastModified" : "2024-11-21T07:40:17.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. This issue affects the function save_brand of the file /classes/Master.php?f=save_brand. The manipulation of the argument name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225533 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/1-SQL%20injection%20exists%20at%20the%20location%20where%20the%20brand%20list%20is%20added.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225533",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225533",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/1-SQL%20injection%20exists%20at%20the%20location%20where%20the%20brand%20list%20is%20added.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1986",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-11T19:15:08.397",
      "lastModified" : "2024-11-21T07:40:17.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function delete_order of the file /classes/master.php?f=delete_order. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225534 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/3-SQL%20injection%20exists%20at%20order%20deletion%20point.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225534",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225534",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/3-SQL%20injection%20exists%20at%20order%20deletion%20point.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1987",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-11T19:15:08.497",
      "lastModified" : "2024-11-21T07:40:17.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is the function update_order_status of the file /classes/Master.php?f=update_order_status. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225535."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/4-SQL%20injection%20present%20at%20order%20status%20update.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225535",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225535",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/4-SQL%20injection%20present%20at%20order%20status%20update.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1988",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-11T19:15:08.570",
      "lastModified" : "2024-11-21T07:40:17.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/?page=maintenance/brand. The manipulation of the argument Brand Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225536."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/5-%20There%20is%20a%20storage%20type%20cross%20site%20scripting%20attack%20at%20the%20brand%20name.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225536",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225536",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/5-%20There%20is%20a%20storage%20type%20cross%20site%20scripting%20attack%20at%20the%20brand%20name.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1989",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-11T21:15:15.503",
      "lastModified" : "2024-11-21T07:40:17.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in btsdio_remove in drivers\\bluetooth\\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished job, may cause a race problem leading to a UAF on hdev devices."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.24",
            "versionEndExcluding" : "4.14.312",
            "matchCriteriaId" : "427B7B10-3552-45F1-AB2C-0883AA9C0498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.280",
            "matchCriteriaId" : "B8449DA5-0637-406C-99C3-84AF4CB5F3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.240",
            "matchCriteriaId" : "2C5F51A3-AEBF-4E51-AA58-D8C8B4554A86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.177",
            "matchCriteriaId" : "9FED8369-E7A1-48C6-9700-6ADEDEC371F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.105",
            "matchCriteriaId" : "0888AE70-CB0A-45C0-B9BD-A5371244C8DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.22",
            "matchCriteriaId" : "642B6F99-95C6-47F5-A9B1-5C45FE08CAD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.2.9",
            "matchCriteriaId" : "914F22DD-1E6F-4B0A-A14D-3A9F068F6761"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=f132c2d13088",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0004/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5492",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=f132c2d13088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21554",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:15.597",
      "lastModified" : "2024-11-21T07:43:04.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21554",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21727",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:16.070",
      "lastModified" : "2024-11-21T07:43:31.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21727",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21729",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:17.067",
      "lastModified" : "2024-11-21T07:43:31.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21729",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21769",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:17.133",
      "lastModified" : "2025-01-01T02:15:12.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21769",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22612",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:17.627",
      "lastModified" : "2025-02-11T18:15:21.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malformed arguments, resulting in memory corruption in SMM."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.0a.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5460231-7E69-4C57-B181-C18A939ED15D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.18.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0EF705B-3C79-4972-9E28-BD19B3145598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.28.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E32BE0E-BA2B-48E3-B9DA-9DDD625FFED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.37.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF923E3-CC99-454A-921F-50C29CAE4EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.45.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1DE977-6288-4AC8-8A07-1025422E94FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.53.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB625C43-BC20-42DF-991A-83BFF79B45AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge/SA-2023019",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge/SA-2023019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22614",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:17.680",
      "lastModified" : "2025-02-11T20:15:31.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard updates. An attacker can induce memory corruption in SMM by supplying malformed inputs to the BIOS Guard SMI handler."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.42.52.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94959F4D-ACDF-4A60-A685-CBD767A2F7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.43.01.0026:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE92C570-EA0B-4690-851E-1A5A55318292"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.43.12.0056:*:*:*:*:*:*:*",
            "matchCriteriaId" : "360DD0A8-A74E-48DC-B786-47883545AE68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.44.34.0054:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF5DC875-3A03-4494-A0FD-9FF2C4F36150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.44.45.0015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "647EDD1B-C1E9-40AA-A1C5-200E9A22551C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.44.45.0028:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC773CA7-D0C5-4C3E-AA7A-8F22CDE745CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge/SA-2023020",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge/SA-2023020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22615",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:17.733",
      "lastModified" : "2025-02-11T21:15:10.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can pass an address in the RCX save state register that overlaps SMRAM, thereby coercing an IHISI subfunction handler to overwrite private SMRAM."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.37.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF923E3-CC99-454A-921F-50C29CAE4EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.45.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1DE977-6288-4AC8-8A07-1025422E94FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.53.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB625C43-BC20-42DF-991A-83BFF79B45AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.insyde.com/security-pledge",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge/SA-2023021",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge/SA-2023021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22808",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:17.780",
      "lastModified" : "2025-02-11T21:15:11.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:avalon_android_gralloc_module:r41p0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67593436-D11F-4B81-8C20-42AD1B5B3172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:bifrost_android_gralloc_module:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r24p0",
            "versionEndIncluding" : "r41p0",
            "matchCriteriaId" : "936DFAF1-4A4C-485F-B76A-54513974D6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arm:valhall_android_gralloc_module:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "r24p0",
            "versionEndIncluding" : "r41p0",
            "matchCriteriaId" : "7D7AE93F-35BE-45A7-BF2D-10A17A4FC540"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23375",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:17.843",
      "lastModified" : "2024-11-21T07:46:03.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft ODBC and OLE DB Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:odbc:*:*:*:*:*:sql_server:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.10.3.1",
            "matchCriteriaId" : "EEC2F33D-4A28-48DB-9CE9-D09328F9AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:odbc:*:*:*:*:*:sql_server:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndExcluding" : "18.2.1.1",
            "matchCriteriaId" : "082B2A88-8D5B-4CB4-B680-E67B4B3B7A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ole_db:*:*:*:*:*:sql_server:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndExcluding" : "18.6.5",
            "matchCriteriaId" : "E956B277-ACC8-4C60-9E64-C165C102EA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ole_db:*:*:*:*:*:sql_server:*:*",
            "versionStartIncluding" : "19.1.0",
            "versionEndExcluding" : "19.3.0",
            "matchCriteriaId" : "1A598DB7-3859-47A8-AE86-B42A6AE9712F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23375",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23375",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23384",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:18.047",
      "lastModified" : "2024-11-21T07:46:04.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SQL Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2008:r2_sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "591E0A15-4D5F-443A-8197-8D67D57A71C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2008:sp4:*:*:*:*:x64:*",
            "matchCriteriaId" : "AFB72B42-2FDD-4B20-BEA6-5ABC3B3D98DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2012:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BD8F6C-FD88-483F-95E8-16F7A6BCFCC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "03C65D96-44D0-4411-8B84-961973F1E4D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2016:sp3:*:*:*:*:x64:*",
            "matchCriteriaId" : "39A3D29F-0BE0-4F78-9970-58BB355775DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2017:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "2FF9FC32-3E6E-4256-B6BD-C4EF1932CA18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "9144F644-A3D4-440C-8978-257E71204617"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2022:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "6CB7AD22-F27B-4807-88F1-02ED420421D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23384",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24860",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:18.613",
      "lastModified" : "2025-02-28T21:15:20.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Defender Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.20200.4",
            "matchCriteriaId" : "821D2304-26E3-4513-8548-DF7F2D552ABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24860",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24883",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:18.893",
      "lastModified" : "2024-11-21T07:48:42.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24883",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24884",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:19.000",
      "lastModified" : "2024-11-21T07:48:42.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24884",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24885",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:19.070",
      "lastModified" : "2024-11-21T07:48:42.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24885",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24886",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:19.137",
      "lastModified" : "2024-11-21T07:48:42.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24886",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24887",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:19.210",
      "lastModified" : "2024-11-21T07:48:42.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24887",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24893",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:19.317",
      "lastModified" : "2024-11-21T07:48:43.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.77.0",
            "matchCriteriaId" : "F911EB64-F0F8-4C5F-997D-6F64727A4555"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24893",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24912",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:19.443",
      "lastModified" : "2024-11-21T07:48:45.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Graphics Component Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24912",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24914",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:19.577",
      "lastModified" : "2024-11-21T07:48:45.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Win32k Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24914",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24924",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:20.020",
      "lastModified" : "2024-11-21T07:48:46.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24924",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24924",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24925",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:20.110",
      "lastModified" : "2024-11-21T07:48:46.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24925",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24926",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:20.200",
      "lastModified" : "2024-11-21T07:48:46.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24926",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24927",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:20.290",
      "lastModified" : "2024-11-21T07:48:46.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24927",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24928",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:20.373",
      "lastModified" : "2024-11-21T07:48:47.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24928",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24929",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:20.453",
      "lastModified" : "2024-11-21T07:48:47.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24929",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24931",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:20.540",
      "lastModified" : "2024-11-21T07:48:47.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Secure Channel Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24931",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24935",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:20.613",
      "lastModified" : "2025-02-28T20:15:41.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Spoofing Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.49",
            "matchCriteriaId" : "03CE0E50-266C-4841-85F6-55F880F82444"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24935",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25407",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:20.687",
      "lastModified" : "2025-02-11T17:15:17.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. Restricted users have read access to administrator credentials."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aten:pe8108_firmware:2.4.232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C393B3F-BAEC-4F0A-8B42-CC5050F1D2A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aten:pe8108:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1829D7C6-F46E-44B5-AACF-32707ABF5CCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25409",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:20.743",
      "lastModified" : "2025-02-11T17:15:17.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. Restricted users have access to other users outlets."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aten:pe8108_firmware:2.4.232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C393B3F-BAEC-4F0A-8B42-CC5050F1D2A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aten:pe8108:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1829D7C6-F46E-44B5-AACF-32707ABF5CCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25411",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:20.810",
      "lastModified" : "2025-02-11T17:15:17.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aten PE8108 2.4.232 is vulnerable to Cross Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aten:pe8108_firmware:2.4.232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C393B3F-BAEC-4F0A-8B42-CC5050F1D2A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aten:pe8108:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1829D7C6-F46E-44B5-AACF-32707ABF5CCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25413",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:20.870",
      "lastModified" : "2025-02-11T17:15:18.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Telnet and SNMP credentials."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aten:pe8108_firmware:2.4.232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C393B3F-BAEC-4F0A-8B42-CC5050F1D2A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aten:pe8108:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1829D7C6-F46E-44B5-AACF-32707ABF5CCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:20.947",
      "lastModified" : "2025-02-11T17:15:18.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aten PE8108 2.4.232 is vulnerable to denial of service (DOS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aten:pe8108_firmware:2.4.232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C393B3F-BAEC-4F0A-8B42-CC5050F1D2A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aten:pe8108:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1829D7C6-F46E-44B5-AACF-32707ABF5CCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25415",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:21.013",
      "lastModified" : "2025-02-11T17:15:18.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Event Notification configuration."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aten:pe8108_firmware:2.4.232:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C393B3F-BAEC-4F0A-8B42-CC5050F1D2A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aten:pe8108:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1829D7C6-F46E-44B5-AACF-32707ABF5CCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:21.067",
      "lastModified" : "2025-02-11T16:15:35.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OXID eShop 6.2.x before 6.4.4 and 6.5.x before 6.5.2 allows session hijacking, leading to partial access of a customer's account by an attacker, due to an improper check of the user agent."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.5.2",
            "matchCriteriaId" : "A08356DD-0191-49D0-B40D-10A40F76FE97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.5.2",
            "matchCriteriaId" : "647995CA-8027-41BD-853F-DF360285D876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oxidforge:oxid_eshop:*:*:*:*:professional:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.5.2",
            "matchCriteriaId" : "9F07FF13-8A44-4607-87AA-37A4FD9F5E30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.oxid-esales.com/de/security/security-bulletins.html#security-bulletin-2023-001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.oxid-esales.com/de/security/security-bulletins.html#security-bulletin-2023-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:21.617",
      "lastModified" : "2025-02-11T16:15:35.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a client ntpq process, but cannot attack ntpd."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "D300A755-9809-4469-8C08-20CB451C83A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26551",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26551",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:21.660",
      "lastModified" : "2025-02-11T16:15:35.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "D300A755-9809-4469-8C08-20CB451C83A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26552",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26552",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:21.723",
      "lastModified" : "2025-02-11T16:15:35.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack ntpd."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "D300A755-9809-4469-8C08-20CB451C83A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26553",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:21.777",
      "lastModified" : "2025-02-11T16:15:36.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\\0' character. An adversary may be able to attack a client ntpq process, but cannot attack ntpd."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "D300A755-9809-4469-8C08-20CB451C83A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26554",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26554",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:21.830",
      "lastModified" : "2025-02-11T21:15:11.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntp:ntp:4.2.8:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "D300A755-9809-4469-8C08-20CB451C83A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26555",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506546409",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY2SVYH4MKPAXEYHCCXD3Z6VGINLSVHK/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3VHEHHWCTYSB7HVJLYPVK4RPJZ5LX52/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506546409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY2SVYH4MKPAXEYHCCXD3Z6VGINLSVHK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3VHEHHWCTYSB7HVJLYPVK4RPJZ5LX52/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28216",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:22.320",
      "lastModified" : "2024-11-21T07:54:37.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28216",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28217",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:22.393",
      "lastModified" : "2024-11-21T07:54:37.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Network Address Translation (NAT) Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28217",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28218",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:22.467",
      "lastModified" : "2024-11-21T07:54:37.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28218",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28219",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:22.537",
      "lastModified" : "2024-11-21T07:54:37.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Layer 2 Tunneling Protocol Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28219",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28220",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:22.610",
      "lastModified" : "2024-11-21T07:54:37.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Layer 2 Tunneling Protocol Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28220",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28221",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:22.700",
      "lastModified" : "2024-11-21T07:54:38.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Error Reporting Service Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28221",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28222",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:22.763",
      "lastModified" : "2024-11-21T07:54:38.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28222",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28223",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:22.840",
      "lastModified" : "2024-11-21T07:54:38.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows  Domain Name Service Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28223",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28224",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:22.947",
      "lastModified" : "2024-11-21T07:54:38.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28224",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28225",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:23.060",
      "lastModified" : "2024-11-21T07:54:38.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows NTLM Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28225",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28226",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:23.137",
      "lastModified" : "2024-11-21T07:54:38.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Enroll Engine Security Feature Bypass Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28226",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28227",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:23.223",
      "lastModified" : "2024-11-21T07:54:38.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Bluetooth Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28227",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28228",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:23.300",
      "lastModified" : "2024-11-21T07:54:39.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Spoofing Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28228",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28229",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:23.387",
      "lastModified" : "2025-10-28T14:09:40.947",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows CNG Key Isolation Service Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-10-04",
      "cisaActionDue" : "2023-10-25",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28229",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28229",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28231",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:23.463",
      "lastModified" : "2024-11-21T07:54:39.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DHCP Server Service Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28231",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28232",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:23.563",
      "lastModified" : "2024-11-21T07:54:39.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28232",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28233",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:23.707",
      "lastModified" : "2024-11-21T07:54:39.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Secure Channel Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28233",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28234",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:23.787",
      "lastModified" : "2024-11-21T07:54:39.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Secure Channel Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28234",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28235",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:23.877",
      "lastModified" : "2024-11-21T07:54:39.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Lock Screen Security Feature Bypass Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28235",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28236",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:23.983",
      "lastModified" : "2024-11-21T07:54:40.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28236",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28237",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:24.117",
      "lastModified" : "2024-11-21T07:54:40.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28237",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28237",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28238",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:24.203",
      "lastModified" : "2024-11-21T07:54:40.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28238",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28240",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:24.277",
      "lastModified" : "2024-11-21T07:54:40.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Network Load Balancing Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28240",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28241",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:24.377",
      "lastModified" : "2024-11-21T07:54:40.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28241",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28243",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:24.457",
      "lastModified" : "2024-11-21T07:54:40.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28243",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28244",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:24.537",
      "lastModified" : "2024-11-21T07:54:41.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kerberos Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28244",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28246",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:24.617",
      "lastModified" : "2024-11-21T07:54:41.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Registry Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28246",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28247",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:24.700",
      "lastModified" : "2024-11-21T07:54:41.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Network File System Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28247",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28248",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:24.803",
      "lastModified" : "2024-11-21T07:54:41.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28248",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28249",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:24.883",
      "lastModified" : "2024-11-21T07:54:41.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Boot Manager Security Feature Bypass Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28249",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28250",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:24.987",
      "lastModified" : "2024-11-21T07:54:41.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28250",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28252",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:25.137",
      "lastModified" : "2025-10-28T14:09:36.813",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Common Log File System Driver Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Elevación de Privilegios de Windows Common Log File System Driver"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-04-11",
      "cisaActionDue" : "2023-05-02",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28252",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/174668/Windows-Common-Log-File-System-Driver-clfs.sys-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28252",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28253",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:25.207",
      "lastModified" : "2024-11-21T07:54:42.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28253",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28254",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:25.273",
      "lastModified" : "2024-11-21T07:54:42.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28254",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28255",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:25.340",
      "lastModified" : "2024-11-21T07:54:42.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28255",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28256",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:25.417",
      "lastModified" : "2024-11-21T07:54:42.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28256",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28260",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:25.493",
      "lastModified" : "2024-11-21T07:54:42.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : ".NET DLL Hijacking Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.16",
            "matchCriteriaId" : "5FCFC39D-83CC-4BFA-9BF3-4F7B9675A354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.5",
            "matchCriteriaId" : "45897753-77F8-4ABA-BF4E-E68E851DF330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.0.21",
            "matchCriteriaId" : "06B7E408-A6EC-4556-A535-3F3340F314F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.2",
            "versionEndExcluding" : "17.2.15",
            "matchCriteriaId" : "78A2B957-0654-45EF-ADE4-EEDA380D4583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.4",
            "versionEndExcluding" : "17.4.7",
            "matchCriteriaId" : "6CFF8AF1-4BEE-4CED-ADB5-8B7DE3C6A6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5",
            "versionEndExcluding" : "17.5.4",
            "matchCriteriaId" : "4D305BC5-DF3E-45FE-9421-385D6A1E9EFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28260",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28262",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:25.563",
      "lastModified" : "2024-11-21T07:54:43.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.11.26",
            "matchCriteriaId" : "D6B51259-1136-4B2D-8E02-76EF121FE9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.0.21",
            "matchCriteriaId" : "06B7E408-A6EC-4556-A535-3F3340F314F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.2",
            "versionEndExcluding" : "17.2.15",
            "matchCriteriaId" : "78A2B957-0654-45EF-ADE4-EEDA380D4583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.4",
            "versionEndExcluding" : "17.4.7",
            "matchCriteriaId" : "6CFF8AF1-4BEE-4CED-ADB5-8B7DE3C6A6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5",
            "versionEndExcluding" : "17.5.4",
            "matchCriteriaId" : "4D305BC5-DF3E-45FE-9421-385D6A1E9EFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28262",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28263",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:25.627",
      "lastModified" : "2024-11-21T07:54:43.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-170"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.11.26",
            "matchCriteriaId" : "D6B51259-1136-4B2D-8E02-76EF121FE9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.0.21",
            "matchCriteriaId" : "06B7E408-A6EC-4556-A535-3F3340F314F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.2",
            "versionEndExcluding" : "17.2.15",
            "matchCriteriaId" : "78A2B957-0654-45EF-ADE4-EEDA380D4583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.4",
            "versionEndExcluding" : "17.4.7",
            "matchCriteriaId" : "6CFF8AF1-4BEE-4CED-ADB5-8B7DE3C6A6E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5",
            "versionEndExcluding" : "17.5.4",
            "matchCriteriaId" : "4D305BC5-DF3E-45FE-9421-385D6A1E9EFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28263",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28266",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:25.710",
      "lastModified" : "2024-11-21T07:54:43.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Common Log File System Driver Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28266",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28267",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:25.777",
      "lastModified" : "2025-07-07T18:48:35.783",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Desktop Protocol Client Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:remote_desktop_client:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "1.2.4157",
            "matchCriteriaId" : "D0516855-3209-4E71-8F4A-5AEC5B8C220C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28267",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28268",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:25.860",
      "lastModified" : "2024-11-21T07:54:43.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netlogon RPC Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28268",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28269",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:25.927",
      "lastModified" : "2024-11-21T07:54:43.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Boot Manager Security Feature Bypass Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28269",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28270",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:26.050",
      "lastModified" : "2024-11-21T07:54:43.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Lock Screen Security Feature Bypass Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28270",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28271",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:26.120",
      "lastModified" : "2024-11-21T07:54:44.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Memory Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28271",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28272",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:26.217",
      "lastModified" : "2024-11-21T07:54:44.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28272",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28273",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:26.290",
      "lastModified" : "2024-11-21T07:54:44.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Clip Service Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28273",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28274",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:26.383",
      "lastModified" : "2024-11-21T07:54:44.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Win32k Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28274",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28275",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:26.473",
      "lastModified" : "2024-11-21T07:54:44.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28275",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28276",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:26.557",
      "lastModified" : "2024-11-21T07:54:44.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Group Policy Security Feature Bypass Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19869",
            "matchCriteriaId" : "F7AA917B-149D-4462-85A6-E1E8D4AF7836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28276",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28277",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:26.650",
      "lastModified" : "2024-11-21T07:54:45.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28277",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28278",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:26.730",
      "lastModified" : "2024-11-21T07:54:45.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-591"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28278",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28284",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:26.817",
      "lastModified" : "2025-02-28T20:15:42.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "112.0.1722.34",
            "matchCriteriaId" : "4C624C8A-A4CB-47C0-A3EC-D679D9897469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28284",
        "source" : "secure@microsoft.com",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28285",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:26.897",
      "lastModified" : "2025-01-01T02:15:27.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28285",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173127/Microsoft-Office-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://packetstormsecurity.com/files/173140/Microsoft-365-MSO-2305-Build-16.0.16501.20074-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28288",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:27.017",
      "lastModified" : "2025-01-01T02:15:28.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Spoofing Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:-:*:*:*:subscription:*:*:*",
            "matchCriteriaId" : "AC8BB33F-44C4-41FE-8B17-68E3C4B38142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "157CBD57-8A1B-4B57-8371-88EF4254A663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28288",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173126/Microsoft-SharePoint-Enterprise-Server-2016-Spoofing.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28291",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:27.117",
      "lastModified" : "2024-11-21T07:54:46.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Raw Image Extension Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:raw_image_extension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.60611.0",
            "matchCriteriaId" : "8D9D1918-77CE-4EC6-AFAC-6FFFAC2CC4C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFD13A6-A390-4400-9029-2F4058CA17E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F513002-D8C1-4D3A-9F79-4B52498F67E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4793BFB-2E4E-4067-87A5-4B8749025CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:raw_image_extension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.60612.0",
            "matchCriteriaId" : "C657556D-78C4-4ED5-8322-18CB038FF1D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB4AE761-6FAC-4000-A63D-42CE3FAB8412"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28291",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28292",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:27.217",
      "lastModified" : "2024-11-21T07:54:46.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Raw Image Extension Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:raw_image_extension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.60611.0",
            "matchCriteriaId" : "8D9D1918-77CE-4EC6-AFAC-6FFFAC2CC4C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFD13A6-A390-4400-9029-2F4058CA17E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F513002-D8C1-4D3A-9F79-4B52498F67E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4793BFB-2E4E-4067-87A5-4B8749025CA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:raw_image_extension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.60612.0",
            "matchCriteriaId" : "C657556D-78C4-4ED5-8322-18CB038FF1D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB4AE761-6FAC-4000-A63D-42CE3FAB8412"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28292",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28293",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:27.317",
      "lastModified" : "2025-01-01T02:15:28.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "68752EF8-4FF0-42FA-B6B3-981CA97AA418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28293",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173135/Microsoft-Windows-11-22h2-Kernel-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28296",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:27.407",
      "lastModified" : "2024-11-21T07:54:46.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.9.54",
            "matchCriteriaId" : "5DA31D6C-5369-40DC-99F8-90B997461BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.11.26",
            "matchCriteriaId" : "D6B51259-1136-4B2D-8E02-76EF121FE9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.0.21",
            "matchCriteriaId" : "06B7E408-A6EC-4556-A535-3F3340F314F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "17.2.0",
            "versionEndExcluding" : "17.2.15",
            "matchCriteriaId" : "16287ED1-84CC-42D7-888D-9F1C5278A93F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "17.4.0",
            "versionEndExcluding" : "17.4.7",
            "matchCriteriaId" : "C0075BF4-95C0-491C-AA2C-A7013C47EFDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.4",
            "matchCriteriaId" : "B7D4F983-B988-419C-9C94-E567E94A179E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28296",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28297",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:27.490",
      "lastModified" : "2024-11-21T07:54:46.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5648",
            "matchCriteriaId" : "960B3437-DF2C-4CF6-AF06-9AF1E6AC9EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.3887",
            "matchCriteriaId" : "A7F8B54C-4564-497A-9786-876A516219C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2486",
            "matchCriteriaId" : "9EC1EA32-6810-4092-BEBF-120FBE093A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2486",
            "matchCriteriaId" : "05BF289F-51FE-4CE5-8487-D909E4CA3D77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2486",
            "matchCriteriaId" : "127FA76C-101B-4DAB-9034-1B893016D06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1105",
            "matchCriteriaId" : "3E62759B-9029-42E8-8807-1AC4C2D00401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28297",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28298",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:27.577",
      "lastModified" : "2024-11-21T07:54:47.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28298",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28299",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:27.663",
      "lastModified" : "2024-11-21T07:54:47.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Spoofing Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.9.54",
            "matchCriteriaId" : "5DA31D6C-5369-40DC-99F8-90B997461BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.11.26",
            "matchCriteriaId" : "D6B51259-1136-4B2D-8E02-76EF121FE9A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.0.21",
            "matchCriteriaId" : "06B7E408-A6EC-4556-A535-3F3340F314F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "17.2.0",
            "versionEndExcluding" : "17.2.15",
            "matchCriteriaId" : "16287ED1-84CC-42D7-888D-9F1C5278A93F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "17.4.0",
            "versionEndExcluding" : "17.4.7",
            "matchCriteriaId" : "C0075BF4-95C0-491C-AA2C-A7013C47EFDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.4",
            "matchCriteriaId" : "B7D4F983-B988-419C-9C94-E567E94A179E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28299",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28300",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:27.747",
      "lastModified" : "2024-11-21T07:54:47.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure Service Connector Security Feature Bypass Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_service_connector:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.0",
            "matchCriteriaId" : "03467099-CE74-4D7A-BDD7-B03290D1E5A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28300",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28301",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:27.840",
      "lastModified" : "2025-02-28T20:15:42.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Tampering Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "112.0.1722.34",
            "matchCriteriaId" : "4C624C8A-A4CB-47C0-A3EC-D679D9897469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28301",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28302",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:27.933",
      "lastModified" : "2025-01-01T02:15:29.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5850",
            "matchCriteriaId" : "D3845BA8-1885-4B32-A069-9CD95E9895A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.4252",
            "matchCriteriaId" : "CC646C31-F80E-4BED-B15F-671250530066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2846",
            "matchCriteriaId" : "77610DFA-2CAF-4B06-AAA8-2387233A35FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2846",
            "matchCriteriaId" : "28B6B095-4CE2-4612-A977-072C464D7157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2846",
            "matchCriteriaId" : "D8D3C91C-C19E-49D4-91DC-6C59086DE344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1817",
            "matchCriteriaId" : "672CF584-309F-4F28-9E3A-545C0138F5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22621.1555",
            "matchCriteriaId" : "F47239E8-AEB6-4E79-91DB-51238D4368B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28302",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28304",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:28.043",
      "lastModified" : "2024-11-21T07:54:47.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft ODBC and OLE DB Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:odbc:*:*:*:*:*:sql_server:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndExcluding" : "17.10.3.1",
            "matchCriteriaId" : "EEC2F33D-4A28-48DB-9CE9-D09328F9AD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:odbc:*:*:*:*:*:sql_server:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndExcluding" : "18.2.1.1",
            "matchCriteriaId" : "082B2A88-8D5B-4CB4-B680-E67B4B3B7A20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ole_db:*:*:*:*:*:sql_server:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndExcluding" : "18.6.5",
            "matchCriteriaId" : "E956B277-ACC8-4C60-9E64-C165C102EA53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ole_db:*:*:*:*:*:sql_server:*:*",
            "versionStartIncluding" : "19.1.0",
            "versionEndExcluding" : "19.3.0",
            "matchCriteriaId" : "1A598DB7-3859-47A8-AE86-B42A6AE9712F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28304",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28305",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:28.123",
      "lastModified" : "2024-11-21T07:54:48.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28305",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28306",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:28.207",
      "lastModified" : "2024-11-21T07:54:48.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28306",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28307",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:28.300",
      "lastModified" : "2024-11-21T07:54:48.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28307",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28308",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:28.370",
      "lastModified" : "2024-11-21T07:54:48.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28308",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28309",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:28.443",
      "lastModified" : "2024-11-21T07:54:48.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.0.46.15",
            "matchCriteriaId" : "3C437002-592F-4263-8C64-3481108A8043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.17.29",
            "matchCriteriaId" : "FFF3BD57-3E78-4159-87E4-EB9CD36AA278"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28309",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28311",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:28.523",
      "lastModified" : "2024-11-21T07:54:48.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Word Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28311",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28312",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:28.773",
      "lastModified" : "2024-11-21T07:54:49.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure Machine Learning Information Disclosure Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_machine_learning:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.02199.0001",
            "matchCriteriaId" : "ACB68180-FED2-41C9-AF15-CDC9CF2E24C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28312",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28313",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:29.047",
      "lastModified" : "2024-11-21T07:54:49.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:send_customer_voice_survey_from_dynamics_365:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndExcluding" : "9.0.0.7",
            "matchCriteriaId" : "6E1B86F6-CF30-47F2-9483-B9CF49926EE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28313",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28314",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-11T21:15:29.297",
      "lastModified" : "2024-11-21T07:54:49.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.0",
            "versionEndExcluding" : "9.0.46.15",
            "matchCriteriaId" : "3C437002-592F-4263-8C64-3481108A8043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*",
            "versionStartIncluding" : "9.1",
            "versionEndExcluding" : "9.1.17.29",
            "matchCriteriaId" : "FFF3BD57-3E78-4159-87E4-EB9CD36AA278"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28314",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28808",
      "sourceIdentifier" : "hsrc@hikvision.com",
      "published" : "2023-04-11T21:15:29.723",
      "lastModified" : "2024-11-21T07:56:03.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "hsrc@hikvision.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "hsrc@hikvision.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-a71024_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.8-8",
            "matchCriteriaId" : "293E1004-ED96-49D9-A137-3F0FF9D737E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-a71024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F8B1C7-B988-49CF-89D0-09017B4DCEBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-a71048_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.8-8",
            "matchCriteriaId" : "7F4543AF-5F7F-4288-B48D-7BA8090BFC0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-a71048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B0871C6-9FE4-45DE-B2F6-65AD12D91FE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-a71072r_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.8-8",
            "matchCriteriaId" : "9239541E-45D6-4DDB-9ED5-78BCE8081DD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-a71072r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9EDB1F-99FE-49BE-B41F-8F844FC3A974"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-a80624s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.8-8",
            "matchCriteriaId" : "A0F8168D-436F-4E27-B43A-360516B25567"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-a80624s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E737EC-4796-465E-AD67-A267E81FB790"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-a81016s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.8-8",
            "matchCriteriaId" : "834FDC2D-9BE7-4FD9-BE47-534CC491412F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-a81016s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE0F6B8-F8E8-474E-BFF4-02687D7C0E55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-a72024_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.8-8",
            "matchCriteriaId" : "7E53CBF5-C3B7-432D-AE4D-E737BCCBDCD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-a72024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E10B92A9-17C9-4529-B41A-89E49715BC30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-a72072r_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F5B78E7-C39C-4806-9A39-390E0185D427"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-a72072r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC39D52-7658-4082-AF6C-1FE5CD65B03B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-a80316s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.8-8",
            "matchCriteriaId" : "7B00C9DB-29C6-4998-95DE-7932AAF07F8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-a80316s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78FAC011-76C8-4EAB-A8B7-89E5269CAA66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-a82024d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.8-8",
            "matchCriteriaId" : "51774330-FFE5-4541-9758-F3E9375FC1BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-a82024d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2216B1-E331-400F-A708-AA0E49B7C046"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-a71024_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.4",
            "matchCriteriaId" : "FCCEFC5B-58F0-427D-94E9-7EA73DB01FBF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-a71024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F8B1C7-B988-49CF-89D0-09017B4DCEBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-a71048r-cvs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.4",
            "matchCriteriaId" : "2D93B293-5F58-4973-A6E1-09ECFE0E5765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-a71048r-cvs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A598604F-924B-4678-B70C-5C961FFB0F17"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hikvision:ds-a72072r_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.8-8",
            "matchCriteriaId" : "5A107658-2606-4FE7-8DF0-32E8C820A281"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hikvision:ds-a72072r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC39D52-7658-4082-AF6C-1FE5CD65B03B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-cluster-stor/",
        "source" : "hsrc@hikvision.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-cluster-stor/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29576",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T21:15:30.510",
      "lastModified" : "2025-02-10T20:15:41.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_TrunAtom::SetDataOffset(int) function in Ap4TrunAtom.h."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axiosys:bento4:1.6.0-639:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A003FBD1-339C-409D-A304-7FEE97E23250"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/844",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/Bento4/mp4decrypt/sigv/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/Bento4/mp4decrypt/sigv/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22613",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-11T22:15:07.660",
      "lastModified" : "2025-02-11T20:15:31.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An attacker could invoke an SMI handler with a malformed pointer in RCX that overlaps SMRAM, resulting in SMM memory corruption."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.27.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF2D092-D7B1-496B-BF62-512E87CF5992"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.36.37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F46B2E5-D56C-48CA-B670-28A1184CCBE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.44.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D7138EB-F30F-4CF4-944C-90A15007307A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:05.52.45:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4009D6A5-6C19-451A-942C-BFE9EDA37931"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge/SA-2023023",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge/SA-2023023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30512",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T06:15:07.580",
      "lastModified" : "2025-02-07T21:15:11.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-cluster-role and can thus list all secrets, including the admin secret."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:cubefs:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.1",
            "matchCriteriaId" : "E2F0AB22-1991-4482-B099-06E0D9A11629"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cubefs/cubefs/issues/1882",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cubefs/cubefs/issues/1882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1829",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-04-12T12:15:07.080",
      "lastModified" : "2025-02-13T17:16:00.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root.\nWe recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.14.308",
            "matchCriteriaId" : "C56CFB26-8D6C-4A3D-99C5-DA43FA59DB77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.276",
            "matchCriteriaId" : "C902FC54-DDBD-4DA6-BFEF-26889A267464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.235",
            "matchCriteriaId" : "13DD5E68-8CB4-46EE-9A8F-C7F6C1A84430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.173",
            "matchCriteriaId" : "4D810CFB-B7C5-493C-B98A-0D5F0D8A47B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.100",
            "matchCriteriaId" : "6D7E5BB5-018B-46B7-A2C4-1ADB75099822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "C8D24FD5-5A98-4042-9419-39DCFCBEFFF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.2.5",
            "matchCriteriaId" : "0575B33B-A320-4E51-84CA-10C937341E02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c710f75256bb3cf05ac7b1672c82b92c43f3d28",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://kernel.dance/#8c710f75256bb3cf05ac7b1672c82b92c43f3d28",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0001/",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c710f75256bb3cf05ac7b1672c82b92c43f3d28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://kernel.dance/#8c710f75256bb3cf05ac7b1672c82b92c43f3d28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T13:15:07.370",
      "lastModified" : "2025-02-10T17:15:16.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5. The Save State register is not checked before use. The IhisiSmm driver does not check the value of a save state register before use. Due to insufficient input validation, an attacker can corrupt SMRAM."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2",
            "versionEndIncluding" : "5.5",
            "matchCriteriaId" : "65CB2167-2D7C-4C37-BABB-139525DAD682"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge/SA-2023022",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.insyde.com/security-pledge/SA-2023022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T13:15:07.573",
      "lastModified" : "2025-02-08T03:15:09.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seowonintech:swc-5100w_firmware:1.9.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A87515A7-7BC2-40C9-ABC7-AFBD140D78AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:seowonintech:swc-5100w_firmware:1.11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2D3D17-8900-4C3E-9A22-AD0E1564A4B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:seowonintech:swc-5100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07996E93-A808-4A07-8C3D-5734B3D971ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pastebin.com/raw/buhVV7iL",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usermanual.wiki/SEOWON-INTECH/SWC5100W",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/51311",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://pastebin.com/raw/buhVV7iL",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://usermanual.wiki/SEOWON-INTECH/SWC5100W",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/51311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29574",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T13:15:07.637",
      "lastModified" : "2025-02-08T03:15:10.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axiosys:bento4:1.6.0-639:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A003FBD1-339C-409D-A304-7FEE97E23250"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/841",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/Bento4/mp42avc/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/Bento4/mp42avc/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29580",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T13:15:07.727",
      "lastModified" : "2025-02-08T03:15:11.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasm_expr_create at /libyasm/expr.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-653"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yasm_project:yasm:1.3.0.55.g101bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A03B4FD-736D-40B7-87B0-AC4EF2660C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yasm/yasm/issues/215",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/yasm/segv/yasm_expr_create/readmd.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yasm/yasm/issues/215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/yasm/segv/yasm_expr_create/readmd.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1874",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-12T14:15:07.527",
      "lastModified" : "2026-04-08T18:17:55.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Data Access plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.3.7. This is due to a lack of authorization checks on the multiple_roles_update function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wpda_role[]' parameter during a profile update. This requires the 'Enable role management' setting to be enabled for the site."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdataaccess:wp_data_access:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "5.3.7",
            "matchCriteriaId" : "CF771291-E9AD-4AC9-95C8-068293A1E947"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-data-access/tags/5.3.7/WPDataRoles/WPDA_Roles.php#L50",
        "source" : "security@wordfence.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-data-access/tags/5.3.8/WPDataRoles/WPDA_Roles.php#L23",
        "source" : "security@wordfence.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-data-access/tags/5.3.8/WPDataRoles/WPDA_Roles.php#L50",
        "source" : "security@wordfence.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2023/04/privilege-escalation-vulnerability-patched-promptly-in-wp-data-access-wordpress-plugin/",
        "source" : "security@wordfence.com"
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8f562e33-2aef-46f0-8a65-691155ede9e7?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171825/WordPress-WP-Data-Access-5.3.7-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-data-access/tags/5.3.7/WPDataRoles/WPDA_Roles.php#L50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-data-access/tags/5.3.8/WPDataRoles/WPDA_Roles.php#L23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-data-access/tags/5.3.8/WPDataRoles/WPDA_Roles.php#L50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/8f562e33-2aef-46f0-8a65-691155ede9e7?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23591",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T14:15:07.687",
      "lastModified" : "2025-02-10T16:15:32.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:terminalfour:terminalfour:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.18.2.2",
            "matchCriteriaId" : "E79944D6-E8B2-4EBC-AF75-6120239DB488"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:terminalfour:terminalfour:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.18.3",
            "versionEndExcluding" : "8.2.18.7",
            "matchCriteriaId" : "C308F327-0943-448E-96AA-0708C2C7BA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:terminalfour:terminalfour:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0",
            "versionEndExcluding" : "8.3.11.1",
            "matchCriteriaId" : "903E401B-B503-4692-A37E-1B5E6F8B0456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:terminalfour:terminalfour:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.12",
            "versionEndExcluding" : "8.3.14.1",
            "matchCriteriaId" : "F0C42AEF-3566-490F-A5BE-D3FC0A931DC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.terminalfour.com/articles/release-notes-highlights/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.terminalfour.com/release-notes/83/15.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.terminalfour.com/articles/release-notes-highlights/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.terminalfour.com/release-notes/83/15.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T14:15:07.757",
      "lastModified" : "2025-02-10T16:15:33.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection vulnerability via the component AdvancedPopup::getPopups()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:idnovate:popup_module_\\(on_entering\\,_exit_popup\\,_add_product\\)_and_newsletter:*:*:*:*:*:prestashop:*:*",
            "versionStartIncluding" : "1.1.21",
            "versionEndExcluding" : "1.1.25",
            "matchCriteriaId" : "F3669D74-744E-4AA1-9EBF-1EE46A1EA543"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://addons.prestashop.com/en/pop-up/23773-popup-on-entry-exit-popup-add-product-and-newsletter.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/04/11/advancedpopupcreator.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://addons.prestashop.com/en/pop-up/23773-popup-on-entry-exit-popup-add-product-and-newsletter.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/04/11/advancedpopupcreator.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T14:15:07.820",
      "lastModified" : "2025-02-10T16:15:36.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service (ReDoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:voidtools:everything:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1.1022",
            "matchCriteriaId" : "EBDE8734-9ADD-410F-82A0-107D4DC3567A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/drive/folders/1BmHAGSugrFo0whDEmg6nnbaOkvE21X-p?usp=sharing",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/happy0717/CVE-2023-27704",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.voidtools.com/en-us/downloads/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://drive.google.com/drive/folders/1BmHAGSugrFo0whDEmg6nnbaOkvE21X-p?usp=sharing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/happy0717/CVE-2023-27704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.voidtools.com/en-us/downloads/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T14:15:07.903",
      "lastModified" : "2025-02-08T03:15:09.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored HTML injection vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary code via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liveaction:livesp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.1.2",
            "matchCriteriaId" : "2BDE547B-9124-40C2-8E60-2B186FB98047"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://liveaction.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://livesp.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/marcovntr/CVE/blob/main/2023/CVE-2023-27775/CVE-2023-27775.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://liveaction.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://livesp.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/marcovntr/CVE/blob/main/2023/CVE-2023-27775/CVE-2023-27775.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T15:15:12.830",
      "lastModified" : "2025-02-08T03:15:10.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tightvnc:tightvnc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.75",
            "matchCriteriaId" : "521FB7FE-6DDF-44F9-BDFD-0785D8E0093F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/nestedif/vulnerability-disclosure-privilege-escalation-tightvnc-8165208cce",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tightvnc.com/news.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://www.tightvnc.com/whatsnew.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://medium.com/nestedif/vulnerability-disclosure-privilege-escalation-tightvnc-8165208cce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tightvnc.com/news.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://www.tightvnc.com/whatsnew.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T15:15:13.233",
      "lastModified" : "2025-02-08T03:15:10.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mjs:2.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8D39F6-ACB1-46F8-87CF-1B41EFC157BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cesanta/mjs/issues/241",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_gc/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cesanta/mjs/issues/241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_gc/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1872",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-04-12T16:15:17.027",
      "lastModified" : "2025-02-13T17:16:00.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation.\n\nThe io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered.\n\nWe recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7",
            "versionEndExcluding" : "5.17",
            "matchCriteriaId" : "3F0679CB-0039-43FB-94D1-171403E75419"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.10.y&id=08681391b84da27133deefaaddefd0acfa90c2be",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Product" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.10.y&id=da24142b1ef9fd5d36b76e36bab328a5b27523e8",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0002/",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.10.y&id=08681391b84da27133deefaaddefd0acfa90c2be",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Product" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.10.y&id=da24142b1ef9fd5d36b76e36bab328a5b27523e8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T16:15:18.877",
      "lastModified" : "2025-02-10T16:15:36.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mypikpak:pikpak:1.29.2:*:*:*:*:android:*:*",
            "matchCriteriaId" : "9B6B82F8-0ABA-4DCB-A16F-ED262E14731E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/drive/folders/1Szu9pjivVtG93ceECvnoAjeSABVyfDES?usp=sharing",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/happy0717/CVE-2023-27703",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/drive/folders/1Szu9pjivVtG93ceECvnoAjeSABVyfDES?usp=sharing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/happy0717/CVE-2023-27703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28488",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T16:15:19.353",
      "lastModified" : "2025-02-08T03:15:10.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:connman:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.55",
            "versionEndIncluding" : "1.41",
            "matchCriteriaId" : "1C460340-FFB7-45B4-BDC1-A1A49B4290FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/moehw/poc_exploits/tree/master/CVE-2023-28488",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kernel.googlesource.com/pub/scm/network/connman/connman/+/99e2c16ea1cced34a5dc450d76287a1c3e762138",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00024.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5416",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/moehw/poc_exploits/tree/master/CVE-2023-28488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kernel.googlesource.com/pub/scm/network/connman/connman/+/99e2c16ea1cced34a5dc450d76287a1c3e762138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T16:15:19.603",
      "lastModified" : "2024-11-21T07:57:18.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "yasm 1.3.0.55.g101bc has a segmentation violation in the function delete_Token at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to be input validation before data reaches libyasm, or a sandbox in which the application runs."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yasm_project:yasm:1.3.0.55.g101bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A03B4FD-736D-40B7-87B0-AC4EF2660C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2186333",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/yasm/yasm/blob/master/SECURITY.md",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/yasm/yasm/issues/216",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/yasm/segv/delete_Token/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2186333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/yasm/yasm/blob/master/SECURITY.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/yasm/yasm/issues/216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/yasm/segv/delete_Token/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0004",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2023-04-12T17:15:07.043",
      "lastModified" : "2024-11-21T07:36:22.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local file deletion vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to delete files from the local file system with elevated privileges.\n\nThese files can include logs and system components that impact the integrity and availability of PAN-OS software."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.24",
            "matchCriteriaId" : "F7D77695-CFDE-4BAE-8C8B-E389CC5C7A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.17",
            "matchCriteriaId" : "89A55C5F-8E01-42C4-BE93-D683900C07BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0",
            "versionEndExcluding" : "9.1.15",
            "matchCriteriaId" : "88CE0E44-13FF-4FD0-94D2-0C0823A7A70E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.11",
            "matchCriteriaId" : "30D919C6-068E-4C81-A7A7-261F0D9E4B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.6",
            "matchCriteriaId" : "E6EB81D3-ADC7-4114-8FFB-C15780239391"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2023-0004",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2023-0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0005",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2023-04-12T17:15:07.187",
      "lastModified" : "2024-11-21T07:36:22.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to expose the plaintext values of secrets stored in the device configuration and encrypted API keys."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.24",
            "matchCriteriaId" : "F7D77695-CFDE-4BAE-8C8B-E389CC5C7A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.17",
            "matchCriteriaId" : "89A55C5F-8E01-42C4-BE93-D683900C07BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0",
            "versionEndExcluding" : "9.1.15",
            "matchCriteriaId" : "88CE0E44-13FF-4FD0-94D2-0C0823A7A70E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.12",
            "matchCriteriaId" : "71F1F86A-8158-4BE8-B509-5F50421DA829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.8",
            "matchCriteriaId" : "D3AFEEB3-529B-46D6-9812-4B80F0E39475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.3",
            "matchCriteriaId" : "16ABADCD-DC3E-4296-A91C-0DADE4693029"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2023-0005",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2023-0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0006",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2023-04-12T17:15:07.283",
      "lastModified" : "2024-11-21T07:36:22.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local file deletion vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a user to delete system files from the endpoint with elevated privileges through a race condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.13",
            "matchCriteriaId" : "5BEA67AB-65F5-4243-BF0C-3144FCD3A8DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.4",
            "matchCriteriaId" : "654DD13D-FF8F-468C-A98A-7BD81FEEFB6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:globalprotect:6.1.0:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "4ED230C2-F7FC-4CEF-BBBC-E44A68A1ADDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2023-0006",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2023-0006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26852",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T17:15:07.537",
      "lastModified" : "2025-02-10T16:15:33.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in the upload plugin of Textpattern v4.8.8 and below allows attackers to execute arbitrary code by uploading a crafted PHP file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:textpattern:textpattern:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.8",
            "matchCriteriaId" : "18B5BA56-558B-49A6-83C4-40EA5452D3B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/drive/folders/1x55FGWZydBRxFyTVIAL1ynnk1X7gfIq9?usp=sharing",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leekenghwa/CVE-2023-26852-Textpattern-v4.8.8-and-",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/textpattern/textpattern",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://drive.google.com/drive/folders/1x55FGWZydBRxFyTVIAL1ynnk1X7gfIq9?usp=sharing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leekenghwa/CVE-2023-26852-Textpattern-v4.8.8-and-",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/textpattern/textpattern",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T17:15:07.607",
      "lastModified" : "2025-02-10T16:15:34.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dsl-3782_firmware:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9622A9C-030F-4F56-B6BF-3DE54EE0E33C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dsl-3782:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F8D1900-34CB-45D3-8DF3-503E10B75E5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://d-link.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lessonsec.com/cve/cve-2023-27216/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://d-link.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lessonsec.com/cve/cve-2023-27216/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30513",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:07.777",
      "lastModified" : "2025-02-07T20:15:33.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:kubernetes:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "3909.v1f2c633e8590",
            "matchCriteriaId" : "E8A7ACE5-397B-49C5-A5EF-88F805561C1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30514",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:08.700",
      "lastModified" : "2025-02-07T20:15:33.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Azure Key Vault Plugin 187.va_cd5fecd198a_ and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:azure_key_vault:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "187.va_cd5fecd198a",
            "matchCriteriaId" : "8E910850-C7B5-43BC-A521-5A863F037007"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30515",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:08.853",
      "lastModified" : "2025-02-07T20:15:33.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Thycotic DevOps Secrets Vault Plugin 1.0.0 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:thycotic_devops_secrets_vault:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "BEEFA54B-EA59-49BA-A016-5EDCB0418D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30516",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:09.027",
      "lastModified" : "2025-02-07T19:15:23.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Image Tag Parameter Plugin 2.0 improperly introduces an option to opt out of SSL/TLS certificate validation when connecting to Docker registries, resulting in job configurations using Image Tag Parameters that were created before 2.0 having SSL/TLS certificate validation disabled by default."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:image_tag_parameter:*:*:*:*:*:jenkins:*:*",
            "versionEndExcluding" : "2.0",
            "matchCriteriaId" : "4C546B48-8D4C-42E2-BEE9-396615B042CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2840",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30517",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:09.193",
      "lastModified" : "2025-02-07T19:15:23.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier unconditionally disables SSL/TLS certificate and hostname validation when connecting to a configured NeuVector Vulnerability Scanner server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.22",
            "matchCriteriaId" : "AC4C9417-DFB2-4B44-ABC5-76966DEF424B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2841",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30518",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:09.407",
      "lastModified" : "2025-02-07T18:15:27.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins Thycotic Secret Server Plugin 1.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:thycotic_secret_server:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "820C1FD5-4B4B-46E7-B716-BDC9FBA045F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2837",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30519",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:09.760",
      "lastModified" : "2025-02-07T17:15:27.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins Quay.io trigger Plugin 0.1 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:quay.io_trigger:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "0.1",
            "matchCriteriaId" : "29356102-C87C-45B3-94E7-E0347F273FE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2849",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30520",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:09.907",
      "lastModified" : "2025-02-07T18:15:27.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Quay.io trigger Plugin 0.1 and earlier does not limit URL schemes for repository homepage URLs submitted via Quay.io trigger webhooks, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to submit crafted Quay.io trigger webhook payloads."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:quay.io_trigger:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "0.1",
            "matchCriteriaId" : "29356102-C87C-45B3-94E7-E0347F273FE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2850",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2850",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30521",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:10.077",
      "lastModified" : "2025-02-07T18:15:28.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins Assembla merge request builder Plugin 1.1.13 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:assembla_merge_request_builder:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.1.13",
            "matchCriteriaId" : "66DB01E9-5B12-4CD1-A7E5-067538F7A552"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2872",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30522",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:10.260",
      "lastModified" : "2025-02-07T17:15:27.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins Fogbugz Plugin 2.2.17 and earlier allows attackers with Item/Read permission to trigger builds of jobs specified in a 'jobname' request parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:fogbugz:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.2.17",
            "matchCriteriaId" : "1FAA5340-9CE2-4F49-8DE7-04BF8A311E8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2873",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30523",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:10.513",
      "lastModified" : "2025-02-07T17:15:28.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job config.xml files on the Jenkins controller as part of its configuration where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:report_portal:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "0.5",
            "matchCriteriaId" : "85C7C386-F579-4E25-BB3E-909BE009EAFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2945",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30524",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:10.687",
      "lastModified" : "2025-02-07T17:15:28.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attackers to observe and capture them."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1270"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:report_portal:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "0.5",
            "matchCriteriaId" : "85C7C386-F579-4E25-BB3E-909BE009EAFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2945",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30525",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:10.980",
      "lastModified" : "2025-02-07T16:15:35.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins Report Portal Plugin 0.5 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified bearer token authentication."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:report_portal:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "0.5",
            "matchCriteriaId" : "85C7C386-F579-4E25-BB3E-909BE009EAFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2950",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30526",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:11.223",
      "lastModified" : "2025-02-07T17:15:28.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins Report Portal Plugin 0.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified bearer token authentication."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:report_portal:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "0.5",
            "matchCriteriaId" : "85C7C386-F579-4E25-BB3E-909BE009EAFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2950",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30527",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:11.540",
      "lastModified" : "2025-02-07T19:15:23.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins WSO2 Oauth Plugin 1.0 and earlier stores the WSO2 Oauth client secret unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:wso2_oauth:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "EB3DFEA2-97B4-43FE-86E2-A46E1CEC729B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2992",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30528",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:11.887",
      "lastModified" : "2025-02-07T19:15:23.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins WSO2 Oauth Plugin 1.0 and earlier does not mask the WSO2 Oauth client secret on the global configuration form, increasing the potential for attackers to observe and capture it."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:wso2_oauth:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "EB3DFEA2-97B4-43FE-86E2-A46E1CEC729B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2992",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30529",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:12.197",
      "lastModified" : "2025-02-07T19:15:24.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Lucene-Search Plugin 387.v938a_ecb_f7fe9 and earlier does not require POST requests for an HTTP endpoint, allowing attackers to reindex the database."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:lucene-search:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "387.v938a_ecb_f7fe9",
            "matchCriteriaId" : "98FB59E1-020F-46B7-8AA1-4A809D364C72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3013",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30530",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:12.443",
      "lastModified" : "2025-02-07T19:15:24.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:consul_kv_builder:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.0.13",
            "matchCriteriaId" : "B36FF432-BB67-4D7A-A3C8-96FFF5BF1445"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2944",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30531",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:12.670",
      "lastModified" : "2025-02-07T19:15:24.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:consul_kv_builder:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.0.13",
            "matchCriteriaId" : "B36FF432-BB67-4D7A-A3C8-96FFF5BF1445"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2944",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30532",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2023-04-12T18:15:12.993",
      "lastModified" : "2025-02-07T17:15:28.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins TurboScript Plugin 1.3 and earlier allows attackers with Item/Read permission to trigger builds of jobs corresponding to the attacker-specified repository."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:turboscript:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "3D23A479-3155-4FC2-A1EB-D75A28FA8493"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2851",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/13/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1990",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-12T20:15:07.233",
      "lastModified" : "2025-03-19T16:15:17.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3",
            "matchCriteriaId" : "3769AA63-B0A8-4EF1-96F9-6A6A6B305A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F0FC3-CE52-4BA1-BA51-22F783938431"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lore.kernel.org/all/20230312160837.2040857-1-zyytlz.wz%40163.com/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lore.kernel.org/all/20230312160837.2040857-1-zyytlz.wz%40163.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24513",
      "sourceIdentifier" : "psirt@arista.com",
      "published" : "2023-04-12T20:15:07.963",
      "lastModified" : "2024-11-21T07:48:01.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually stop forwarding traffic."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@arista.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@arista.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arista:cloudeos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.26.0",
            "versionEndExcluding" : "4.26.9m",
            "matchCriteriaId" : "47DC93B2-147D-427E-89E5-0F8EC3D884B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arista:cloudeos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.27.0",
            "versionEndExcluding" : "4.27.8m",
            "matchCriteriaId" : "6BA01B5E-EDAB-4C30-9F2C-57C0ACB6EF02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arista:cloudeos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.28.0",
            "versionEndExcluding" : "4.28.5m",
            "matchCriteriaId" : "60CFAB31-7E8C-49E0-BDB2-ED1EF62D9303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arista:cloudeos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.29.0",
            "versionEndExcluding" : "4.29.2f",
            "matchCriteriaId" : "5E98581C-4312-4EC2-A253-73D5179DDA6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:amazon:aws_marketplace:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38DF4A9E-F836-4389-BCE4-10E5121332E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:equinix:network_edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE13E07-E588-498B-892A-48AE52E222CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:google:google_cloud_platform_marketplace:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8139E4B-24C7-4C77-A375-088C6817256D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:azure_marketplace:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18F83F7-96C2-4B36-A68F-5B8C4E41D066"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:dca-200-veos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9985E3-D496-473F-A806-022EC164EF96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/17240-security-advisory-0085",
        "source" : "psirt@arista.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/17240-security-advisory-0085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26371",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:08.603",
      "lastModified" : "2024-11-21T07:51:13.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26372",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:09.250",
      "lastModified" : "2024-11-21T07:51:13.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26373",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:09.670",
      "lastModified" : "2024-11-21T07:51:13.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26374",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:10.023",
      "lastModified" : "2024-11-21T07:51:13.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26375",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:10.227",
      "lastModified" : "2024-11-21T07:51:13.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26376",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:10.473",
      "lastModified" : "2024-11-21T07:51:13.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26377",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:11.007",
      "lastModified" : "2024-11-21T07:51:13.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26378",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:11.267",
      "lastModified" : "2024-11-21T07:51:13.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26379",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:11.567",
      "lastModified" : "2024-11-21T07:51:14.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26380",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:11.767",
      "lastModified" : "2024-11-21T07:51:14.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26381",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:12.047",
      "lastModified" : "2024-11-21T07:51:14.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26382",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:12.310",
      "lastModified" : "2024-11-21T07:51:14.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26400",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:12.710",
      "lastModified" : "2024-11-21T07:51:19.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26401",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:12.963",
      "lastModified" : "2024-11-21T07:51:19.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26404",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T20:15:13.413",
      "lastModified" : "2024-11-21T07:51:20.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.4.8",
            "matchCriteriaId" : "1EC378F8-026A-4750-88C6-C0A03E2261E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dimension/apsb23-27.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1706",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-12T21:15:14.190",
      "lastModified" : "2023-11-07T04:04:41.703",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This candidate is unused by its CNA."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1992",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-12T21:15:15.147",
      "lastModified" : "2025-11-03T22:16:03.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file"
      }, {
        "lang" : "es",
        "value" : "El fallo del disector RPCoRDMA en Wireshark 4.0.0 a 4.0.4 y 3.6.0 a 3.6.12 permite la denegación de servicio mediante la inyección de paquetes o un archivo de captura manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.13",
            "matchCriteriaId" : "02990DE8-2F8D-409E-B3D6-DCBE234BEA72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.5",
            "matchCriteriaId" : "C399FC60-C37A-459D-A981-FA41764A5D48"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1992.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18852",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EHLTD25WNQSPQNELX52UH6YLP4TBLKTT/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZA7IMATNNQPLIM6WMRPM3T5ZY24NRR2/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PFJERBHVWYLYWXO2B3V47QH66IEB6EZ3/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-02",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5429",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-09.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1992.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EHLTD25WNQSPQNELX52UH6YLP4TBLKTT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZA7IMATNNQPLIM6WMRPM3T5ZY24NRR2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PFJERBHVWYLYWXO2B3V47QH66IEB6EZ3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1993",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-12T21:15:16.183",
      "lastModified" : "2025-11-03T22:16:04.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file"
      }, {
        "lang" : "es",
        "value" : "El bucle grande del disector LISP en Wireshark 4.0.0 a 4.0.4 y 3.6.0 a 3.6.12 permite la denegación de servicio mediante inyección de paquetes o archivo de captura manipulado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.13",
            "matchCriteriaId" : "02990DE8-2F8D-409E-B3D6-DCBE234BEA72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.5",
            "matchCriteriaId" : "C399FC60-C37A-459D-A981-FA41764A5D48"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1993.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18900",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EHLTD25WNQSPQNELX52UH6YLP4TBLKTT/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZA7IMATNNQPLIM6WMRPM3T5ZY24NRR2/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PFJERBHVWYLYWXO2B3V47QH66IEB6EZ3/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-02",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5429",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-10.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1993.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EHLTD25WNQSPQNELX52UH6YLP4TBLKTT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZA7IMATNNQPLIM6WMRPM3T5ZY24NRR2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PFJERBHVWYLYWXO2B3V47QH66IEB6EZ3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24511",
      "sourceIdentifier" : "psirt@arista.com",
      "published" : "2023-04-12T21:15:16.707",
      "lastModified" : "2024-11-21T07:48:01.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This may result in the snmpd processing being terminated (causing SNMP requests to time out until snmpd is automatically restarted) and potential memory resource exhaustion for other processes on the switch. The vulnerability does not have any confidentiality or integrity impacts to the system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@arista.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@arista.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.26.0",
            "versionEndExcluding" : "4.26.10m",
            "matchCriteriaId" : "341CA00E-8BDE-4BF9-90D4-7B07FC484D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.27.0",
            "versionEndExcluding" : "4.27.9m",
            "matchCriteriaId" : "00A7CEC1-C298-4AEE-A079-550167C2AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.28.0",
            "versionEndExcluding" : "4.28.6m",
            "matchCriteriaId" : "32D876FE-C639-4870-A412-0239EA0155D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.29.0",
            "versionEndExcluding" : "4.29.2f",
            "matchCriteriaId" : "24621B26-04A1-4693-BCB4-437544C08B50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:arista:ceos-lab:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EFB5B5B-42EE-413E-9EA6-0A9C9DF4EA87"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:arista:cloudeos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362F2E0F-3D40-444F-87F3-21CA70B1AD04"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:arista:veos-lab:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B29E15-3CFB-45EC-B252-8F02CC1E589C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7010t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC3D5B4-3B6F-4F15-9CAA-B0D08B53FFC6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7010t-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CCF6152-815E-4B3C-AE4B-CA598BEBD020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7010tx-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E00C871-8EB3-4241-95F3-83A524A79FB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7010tx-48-dc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CC52FD-29BE-4037-9A7C-264ACF9F6C0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7020sr-24c2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7781CB15-3452-47D9-A961-8B09F2E9AEC1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7020sr-32c2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A31FB8-512E-43EF-8F87-E02E35F5251E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7020tr-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CBFF922-28D7-42D6-8796-91AD9A178D28"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7020tra-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561B4042-DFD3-4BC0-9C5F-74799A7E92C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050cx3-32s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FF0290-C671-4ABC-8A12-05E4D55FC4AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050cx3m-32s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828C6E4F-814A-4060-8F5E-7FF359C8739C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050qx-32s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253D74DE-97F5-40F3-B179-D2D4442C57FD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050qx2-32s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E03F9E-522F-4D9B-9267-09E2550B5465"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx-128:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895A7AFD-BE76-47F5-B67B-6279046E4274"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx-64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E258EC-EA50-4185-AA35-5D963C359E74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx-72q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1482D4FC-60B9-4C89-B892-71AA3E1031F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx2-128:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99D84E9-2229-459E-AE90-49C2EF670884"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx2-72q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D922C725-1139-4DD4-92FC-9FF15E35CE62"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx3-48c8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE35C17F-0C60-4A40-9949-D4C5D94D1D7A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx3-48yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07BA078E-30B7-4E2C-B240-BF64E98143E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx3-48yc12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBFD0706-CACB-40FA-A41B-46B39C6E1D33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx3-48yc8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5951D243-CB68-4B41-A913-D879CE502795"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx3-96yc8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73156612-D338-4E20-8C82-0E65DAA72331"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050tx-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E7CDCC-ADC6-4854-BFC4-72DA47C5F10B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050tx-64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B03678D-AD7B-4B1A-8E6A-1811DD8B1483"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050tx-72q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E803639C-13A1-48CA-A589-C83654AE454F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050tx2-128:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A495D282-D3DC-4D18-AB72-2358834C238E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050tx3-48c8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388C57D8-4B3C-4E5D-84AA-0CB7506F825A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7060cx-32s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D518C8D5-A86B-46E5-A646-8939BFA2E116"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7060cx2-32s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1608297-7079-4F3B-857E-708B74E944D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7060dx4-32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "806A01C5-231D-4F9D-A292-E9DD706A0C66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7060px4-32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC10746F-8FC0-49EF-BB9C-EC49B734DFA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7060sx2-48yc6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26582E98-B710-46D7-B8F2-9286E0592FA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7150s-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93D74C0B-E470-4D45-98E2-775DE43997DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7150s-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2CAA23-003C-43E6-87CE-61E4369C2D30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7150s-64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7445075-D130-472C-B259-6BACE678541D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7150sc-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3FA52A-3A67-4515-9790-598860102893"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7150sc-64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6336F166-FAD3-4846-84B9-45F5FAA3D437"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7160-32cq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7620401C-FB14-46F1-979B-B21194F90945"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7160-48tc6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DFC236-44B3-4EEF-8937-4F86EE99EB45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7160-48yc6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823E5569-C918-40E6-A2C5-7C415E4ADEF5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7170-32c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8EFEEA5-0FC4-4FFC-BF5D-BDBAA1B55C70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7170-32cd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2959C68-8731-4F37-B9E7-61E5936D3D8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7170-64c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6FB3395-8D13-4477-A46E-37A88272CFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7170b-64c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE3572E-A724-4057-8776-7A95528DCEE7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720df-48y:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FCDB83-38D5-4F02-97E2-BBEF891DCDD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720dp-24s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EAF795-EB62-4A86-A0FC-A09008E631A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720dp-48s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA03BA0B-BB2D-41CF-BA2E-B21604D6FBC1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720dt-24s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AE185FD-0D4D-4862-B513-BC68BF3F9F7E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720dt-48s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C2150F-2FD6-452F-8C56-7413E3EB8FDC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720dt-48y:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44A568A1-BA88-458E-B69A-0A2A6C594728"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720xp-24y6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFDBCBB-2C1A-4B88-AE28-EF63D5B9EDD2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720xp-24zy4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58757129-BF9C-4BD8-B692-BB57023F8A48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720xp-48y6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2756BB4B-1053-4EAC-AC0B-785FD5039D5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720xp-48zc2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D36540-7723-4284-A207-6BD27728CA25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720xp-96zc2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF95CB28-E010-4A1D-A746-F9DDF015868F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:722xpm-48y4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15876058-5E5D-4C87-83A3-592ADCA0AA6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:722xpm-48zy8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "426308A9-D534-4465-865C-39BC70548B00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7250qx-64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD95B3B-D655-42DC-85C2-2C6FDBCC77F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7260cx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40D14DE-BAFB-461F-9AA7-E3EDC2D8D468"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7260cx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901E5B76-0EB7-4EAD-A281-15B9F78041AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7260cx3-64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49BAE58E-F4B5-4C8F-9EEB-5A0F38A96F0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7260qx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1DE992-9BFA-4794-82F4-66F464BB384E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7260qx-64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83A3811A-EB0E-464B-86E7-0E369935A507"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr2ak-30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99506386-8D68-46F4-AEA9-4C16C16545B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr2k-60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F569286-C19F-48CB-AB24-89C4A1EB6F81"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr3-32d4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FEC18B3-7980-4EBF-8E15-F8E92DADD062"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr3-32p4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E85F7C-F33B-49C1-A526-ACC1BEF3B65C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr3-96:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E54F451-CA87-4F32-A088-AE18123CE07A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr3k-32d4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16CB1780-6DEC-4140-A771-9139C77A8A88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr3k-32p4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE9CB6-4453-4EED-B7FC-6374F9225B83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr3k-96:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98C94CB-7DFC-4CAC-9D98-B3E80BF1EE56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280dr3-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D9E9FF-564E-4B16-8070-33A366F48FE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280dr3k-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AF4A54-7568-4FE0-BE5F-02BD9FADDCE5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6466FE3-DCE8-4DA5-B893-2BA864F73BC5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280pr3-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14163D2-B236-4C78-9DB4-97DE6D996EBC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280pr3k-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057906A-B27B-4B53-97F6-3F5F35794990"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C02B50F5-B316-4081-BC9E-6F1778049096"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280r2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21CB1AAF-FC82-4A80-9932-42E8EFA3906A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60FC964C-9835-443A-A584-3A5D6022E914"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280sr3-48yc8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8143579F-AD53-4D74-AE3E-4D465DCD7A57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280sr3k-48yc8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AB0F1D-ACCA-490C-96F2-FC23A8611CB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7300x-32q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF8A65D-6FBC-4C38-8B45-418E6C5EB16C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7300x-64s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F088D51-24F4-49AD-8397-73D1EAF45F56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7300x-64t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BA5C6D-40C0-4AA3-AC10-D7F097D8EDD9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7300x3-32c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0040BDDF-D711-4619-9E96-96EFBD33CAA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7300x3-48yc4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AA716D-CAD1-4689-8A26-977A2E5F869E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7304:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61BC28B-B998-4F6A-AD70-4FF7F2E3C826"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377CFAA4-5A1A-4D42-87EF-DC57EE02388B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7316:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D65E57B-F0BA-44C5-9D2A-447961AB8220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7320x-32c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD08CBF-6F42-4F98-B413-F65C5613BE6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7368x4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161DB0D9-9BAC-4546-88D3-5547F4B6149C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7388x5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B66E706E-56FB-4A49-BD90-76A8CB6BE391"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C61DCC-D1CF-4CE5-9634-4BE3E071E83E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7500r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC651584-113E-4859-9F14-12D62F3BD626"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7500r2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583725F6-8583-425C-A847-700DBB9169E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7500r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6A4B3C-FF12-4DCD-9945-8450AD0BDEED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7500r3-24d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1BB565-2668-4242-8A00-5CC9C30B9AC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7500r3-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F1A605-8836-4A64-AC5E-ADAB34F8F104"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7500r3-36cq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A047A-9FD9-4AE1-9E47-457A46BAE3A4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7500r3k-36cq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019B0670-389B-4A4E-8C72-52202E3AA8EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7800r3-36p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19E86BF-AA91-4262-8EF9-B7FC48C6F3F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7800r3-48cq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58443CDE-33D8-4460-A861-CDC07431AA22"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7800r3k-48cq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64BE8C68-FE98-4162-A3D3-54494D5444F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:ccs-750x-48thp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2368ADC-9CC5-488C-99D9-CB46AAFB5BA2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:ccs-750x-48tp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49CE500B-C593-45EC-9C8D-7016D83684AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:ccs-750x-48zp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB062249-2B0D-4F07-9854-6C20DF5D8BB4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:ccs-750x-48zxp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2A1160-2E90-4B36-AEB0-74B7FB71D204"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/17239-security-advisory-0084",
        "source" : "psirt@arista.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/17239-security-advisory-0084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24545",
      "sourceIdentifier" : "psirt@arista.com",
      "published" : "2023-04-12T21:15:18.183",
      "lastModified" : "2024-11-21T07:48:05.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually stop forwarding traffic."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@arista.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@arista.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:cloudeos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.26.0",
            "versionEndExcluding" : "4.26.9m",
            "matchCriteriaId" : "7D1A5002-07BD-4669-A7C9-E47A28C3F39C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:cloudeos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.27.0",
            "versionEndExcluding" : "4.27.8m",
            "matchCriteriaId" : "2FEF7B98-AD0E-4DE3-912D-DDC39FE4C3D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:cloudeos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.28.0",
            "versionEndExcluding" : "4.28.5m",
            "matchCriteriaId" : "DA82CE8C-A95E-48B9-8E61-09429FFBC0DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:cloudeos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.29.0",
            "versionEndExcluding" : "4.29.2f",
            "matchCriteriaId" : "0769DED3-64E8-4EEC-95BD-CDB18C848B8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:dca-200-veos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C9985E3-D496-473F-A806-022EC164EF96"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/17240-security-advisory-0085",
        "source" : "psirt@arista.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/17240-security-advisory-0085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26395",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:18.703",
      "lastModified" : "2024-11-21T07:51:18.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader  versiones 23.001.20093  (y anteriores) y 20.005.30441 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26396",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:19.563",
      "lastModified" : "2024-11-21T07:51:18.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-379"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26397",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:20.183",
      "lastModified" : "2024-11-21T07:51:19.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26405",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:20.810",
      "lastModified" : "2024-11-21T07:51:20.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26406",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:21.370",
      "lastModified" : "2024-11-21T07:51:20.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26407",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:21.823",
      "lastModified" : "2024-11-21T07:51:20.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26408",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:22.317",
      "lastModified" : "2024-11-21T07:51:21.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26417",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:22.867",
      "lastModified" : "2024-11-21T07:51:22.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26418",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:23.650",
      "lastModified" : "2024-11-21T07:51:22.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26419",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:24.130",
      "lastModified" : "2024-11-21T07:51:22.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26420",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:24.740",
      "lastModified" : "2024-11-21T07:51:23.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26421",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:25.290",
      "lastModified" : "2024-11-21T07:51:23.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Integer Underflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26422",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:25.963",
      "lastModified" : "2024-11-21T07:51:23.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26423",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:26.507",
      "lastModified" : "2024-11-21T07:51:23.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26424",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:26.820",
      "lastModified" : "2024-11-21T07:51:23.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26425",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T21:15:27.473",
      "lastModified" : "2024-11-21T07:51:23.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Reader versión 23.001.20093 (y anterior) y 20.005.30441 (y anterior) se ven afectados por una vulnerabilidad de lectura fuera de los límites al analizar un archivo manipulado, lo que podría dar como resultado una lectura más allá del final de una estructura de memoria asignada. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "828B96E4-C6FF-4151-AF23-656DEE6241F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "9914281C-06C1-464F-A441-0C8DF1C0CA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.3005",
            "versionEndIncluding" : "20.005.30441",
            "matchCriteriaId" : "103810A9-3CBB-49DC-9A1C-21038BD3E659"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "23.001.20093",
            "matchCriteriaId" : "C50F0107-1678-47AD-9192-39ABFD12D080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb23-24.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28121",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-04-12T21:15:28.057",
      "lastModified" : "2024-11-21T07:54:26.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to send requests on behalf of an elevated user, like administrator. This allows a remote, unauthenticated attacker to gain admin access on a site that has the affected version of the plugin activated."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automattic:woocommerce_payments:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "4.8.0",
            "versionEndExcluding" : "4.8.2",
            "matchCriteriaId" : "FE70E8AE-CFBB-4575-A340-DBD17C3CE853"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automattic:woocommerce_payments:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.4",
            "matchCriteriaId" : "519111D8-D787-4B95-91F3-9FCFF17723C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automattic:woocommerce_payments:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.3",
            "matchCriteriaId" : "47F55EC1-8DE8-4BB8-9D92-23510CB191FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automattic:woocommerce_payments:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.2",
            "matchCriteriaId" : "0D29E155-A3A0-446A-A414-B3CC66D6450B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automattic:woocommerce_payments:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.2",
            "matchCriteriaId" : "8AF27AE4-B382-4293-9E7A-1A06769DFF1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automattic:woopayments:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndExcluding" : "5.6.2",
            "matchCriteriaId" : "AEB22CB8-53ED-4073-ADA9-8C87B4F0176F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automattic:woopayments:4.9.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "08275EF1-5695-4CC4-A4B9-8D5429C37DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automattic:woopayments:5.3.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A4D5E491-B3BB-4D91-9DD6-845A35833F20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automattic:woopayments:5.4.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0D756027-30C4-443C-8421-62D6EFA8B2C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.woocommerce.com/2023/03/23/critical-vulnerability-detected-in-woocommerce-payments-what-you-need-to-know/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.rcesecurity.com/2023/07/patch-diffing-cve-2023-28121-to-compromise-a-woocommerce/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://developer.woocommerce.com/2023/03/23/critical-vulnerability-detected-in-woocommerce-payments-what-you-need-to-know/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.rcesecurity.com/2023/07/patch-diffing-cve-2023-28121-to-compromise-a-woocommerce/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1906",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-12T22:15:11.967",
      "lastModified" : "2025-02-10T17:15:15.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.12-84",
            "matchCriteriaId" : "77E58665-59E3-41DA-B713-A0294B8F9B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:7.1.1-4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "916BBE48-7DFE-40FA-B8DD-8AA0510883BC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB176AC3-3CDA-4DDA-9089-C67B2F73AA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-1906",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2185714",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/d7a8bdd7bb33cf8e58bc01b4a4f2ea5466f8c6b3",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-35q2-86c7-9247",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick6/commit/e30c693b37c3b41723f1469d1226a2c814ca443d",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6655G3GPS42WQM32DJHUCZALI2URQSCO/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2023-1906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2185714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/commit/d7a8bdd7bb33cf8e58bc01b4a4f2ea5466f8c6b3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-35q2-86c7-9247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick6/commit/e30c693b37c3b41723f1469d1226a2c814ca443d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6655G3GPS42WQM32DJHUCZALI2URQSCO/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1994",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2023-04-12T22:15:13.987",
      "lastModified" : "2025-11-03T22:16:04.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file"
      }, {
        "lang" : "es",
        "value" : "El fallo del disector GQUIC en Wireshark 4.0.0 a 4.0.4 y 3.6.0 a 3.6.12 permite la denegación de servicio mediante la inyección de paquetes o un archivo de captura manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.6.13",
            "matchCriteriaId" : "02990DE8-2F8D-409E-B3D6-DCBE234BEA72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.5",
            "matchCriteriaId" : "C399FC60-C37A-459D-A981-FA41764A5D48"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1994.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18947",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EHLTD25WNQSPQNELX52UH6YLP4TBLKTT/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZA7IMATNNQPLIM6WMRPM3T5ZY24NRR2/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PFJERBHVWYLYWXO2B3V47QH66IEB6EZ3/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-02",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5429",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-11.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1994.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/18947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EHLTD25WNQSPQNELX52UH6YLP4TBLKTT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZA7IMATNNQPLIM6WMRPM3T5ZY24NRR2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PFJERBHVWYLYWXO2B3V47QH66IEB6EZ3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2023-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21582",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:14.823",
      "lastModified" : "2024-11-21T07:43:07.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions version 4.5.11.187303 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.11.187658",
            "matchCriteriaId" : "118756CD-4564-4439-A9A6-057293BA5D9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb23-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb23-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22235",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:15.527",
      "lastModified" : "2024-11-21T07:44:22.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InCopy versions 18.1 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.4.1",
            "matchCriteriaId" : "F897DF4C-E065-46CE-A244-6420C8838A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndExcluding" : "18.2",
            "matchCriteriaId" : "6D210A4D-3965-4552-9DD0-AAB616CCEF21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb23-13.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb23-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26383",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:16.227",
      "lastModified" : "2024-11-21T07:51:14.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "5CC000D7-8C4F-4398-978D-AD430684095E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26384",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:16.913",
      "lastModified" : "2024-11-21T07:51:15.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "5CC000D7-8C4F-4398-978D-AD430684095E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26385",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:17.323",
      "lastModified" : "2024-11-21T07:51:15.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "5CC000D7-8C4F-4398-978D-AD430684095E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26386",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:17.887",
      "lastModified" : "2024-11-21T07:51:15.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "5CC000D7-8C4F-4398-978D-AD430684095E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26387",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:18.217",
      "lastModified" : "2024-11-21T07:51:16.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "5CC000D7-8C4F-4398-978D-AD430684095E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26388",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:18.410",
      "lastModified" : "2024-11-21T07:51:17.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "5CC000D7-8C4F-4398-978D-AD430684095E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26389",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:18.693",
      "lastModified" : "2024-11-21T07:51:17.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "5CC000D7-8C4F-4398-978D-AD430684095E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26390",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:18.887",
      "lastModified" : "2024-11-21T07:51:17.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "5CC000D7-8C4F-4398-978D-AD430684095E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26391",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:19.170",
      "lastModified" : "2024-11-21T07:51:17.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "5CC000D7-8C4F-4398-978D-AD430684095E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26392",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:19.413",
      "lastModified" : "2024-11-21T07:51:18.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "5CC000D7-8C4F-4398-978D-AD430684095E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26393",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:19.680",
      "lastModified" : "2024-11-21T07:51:18.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "5CC000D7-8C4F-4398-978D-AD430684095E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26394",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:19.917",
      "lastModified" : "2024-11-21T07:51:18.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "5CC000D7-8C4F-4398-978D-AD430684095E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26402",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:20.267",
      "lastModified" : "2024-11-21T07:51:20.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "5CC000D7-8C4F-4398-978D-AD430684095E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26403",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-12T22:15:20.613",
      "lastModified" : "2024-11-21T07:51:20.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "5CC000D7-8C4F-4398-978D-AD430684095E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22620",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T23:15:06.943",
      "lastModified" : "2025-02-10T17:15:16.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows sessionid information disclosure via an invalid authentication attempt. This can afterwards be used to bypass the device's authentication and get access to the administrative interface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securepoint:unified_threat_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3.1",
            "versionEndExcluding" : "12.2.5.1",
            "matchCriteriaId" : "4E6D6780-93EF-4206-9164-0C3D35197CF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171924/SecurePoint-UTM-12.x-Session-ID-Leak.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Apr/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2023-22620.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rcesecurity.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171924/SecurePoint-UTM-12.x-Session-ID-Leak.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Apr/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2023-22620.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rcesecurity.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22897",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-12T23:15:07.077",
      "lastModified" : "2025-02-10T16:15:32.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not used."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:securepoint:unified_threat_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3.1",
            "versionEndExcluding" : "12.2.5.1",
            "matchCriteriaId" : "4E6D6780-93EF-4206-9164-0C3D35197CF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171928/SecurePoint-UTM-12.x-Memory-Leak.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Apr/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2023-22897.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rcesecurity.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171928/SecurePoint-UTM-12.x-Memory-Leak.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Apr/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2023-22897.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rcesecurity.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2014",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-13T02:15:07.193",
      "lastModified" : "2024-11-21T07:57:45.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository microweber/microweber prior to 1.3.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.3",
            "matchCriteriaId" : "846F2D65-6C3F-4D7E-902B-774E7890DCC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/microweber/microweber/commit/1a9b904722b35b00653c6ae72dca2969149159b3",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a77bf7ed-6b61-452e-b5ee-e20017e28d1a",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/microweber/microweber/commit/1a9b904722b35b00653c6ae72dca2969149159b3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/a77bf7ed-6b61-452e-b5ee-e20017e28d1a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25954",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2023-04-13T04:15:42.547",
      "lastModified" : "2025-02-07T17:15:24.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vulnerable to improper intent handling. When a malicious app is installed on the victim user's Android device, the app may send an intent and direct the affected app to download malicious files or apps to the device without notification."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kyocera:mobile_print:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "3.2.0.230119",
            "matchCriteriaId" : "707E2FE3-3905-438C-B99D-68ED1A7B313D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:triumph-adler:mobile_print:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "3.2.0.230119",
            "matchCriteriaId" : "9AF4FB63-4E20-471D-82FF-98CC7E1F27F9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:olivetti:mobile_print:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "3.2.0.230119",
            "matchCriteriaId" : "E3E7E34D-C04F-4957-89E9-F788BC0B6797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU98434809/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.kyocera.kyoprint",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.kyocera.kyoprintolivetti",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.kyocera.kyoprinttautax",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2023-04-11.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU98434809/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.kyocera.kyoprint",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.kyocera.kyoprintolivetti",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.kyocera.kyoprinttautax",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2023-04-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1842",
      "sourceIdentifier" : "psirt@honeywell.com",
      "published" : "2023-04-13T07:15:20.957",
      "lastModified" : "2023-11-07T04:05:04.657",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20118",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2023-04-13T07:15:21.080",
      "lastModified" : "2025-10-28T13:59:03.593",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device.\r\n\r This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device.\r\n\r Cisco has not and will not release software updates that address this vulnerability.   However, administrators may disable the affected feature as described in the Workarounds [\"#workarounds\"] section.\r\n\r  {{value}} [\"%7b%7bvalue%7d%7d\"])}]]"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2025-03-03",
      "cisaActionDue" : "2025-03-24",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Cisco Small Business RV Series Routers Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1462E9-4464-492C-8B91-6E020B9DCB23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "701E3CF5-15C0-419A-97A8-9BD2C55D74AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85E01122-CD88-4096-958A-8699B2A3DC3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A620D1C-1FBB-46C9-9904-1FC6342ED85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FC4446-22C0-4EC9-84B4-A76412680105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EA568A8-286F-4588-B946-6F9C97E08BCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596F6D4-10DA-4F29-95AD-75B60F4670D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B7DECE-18C4-45AE-AF5C-657A4795C7F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3435D601-EDA8-49FF-8841-EA6DF1518C75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20118",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21630",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2023-04-13T07:15:21.213",
      "lastModified" : "2024-11-21T07:43:14.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@qualcomm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B53119-1B2F-4978-B7F5-33B84BE73B68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEBC0C5-CAA1-475C-96C2-B8D24B2E4536"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AC8-4A01-4537-B2BD-8180C99F5C32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C16E1E-9D4A-4F20-B697-833FDCCA86FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828CFB37-76A6-4927-9D00-AF9A1C432DD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11405993-5903-4716-B452-370281034B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D527E2B1-2A46-4FBA-9F7A-F5543677C8FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8374DDB3-D484-4141-AE0C-42333D2721F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "288F637F-22F8-47CF-B67F-C798A730A1BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0996EA3-1C92-4933-BE34-9CF625E59FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE207DB-9770-40ED-961D-FDA75965826F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E23922D-C37F-476F-A623-4C1458A9156F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC40C14-3B2D-4E00-9E0F-86E6BDBF2D81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0514D433-162C-4680-8912-721D19BE6201"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8648B38-2597-401A-8F53-D582FA911569"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CD59B-8F21-4CD6-8A1A-7B37547A8715"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BC0A66-493B-43BE-B51F-640BDF2FF32E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8195p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DA4D12-7ABF-4A04-B44E-E1D68C8E58AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd680_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "831B1D9D-75E9-4D6E-9F9E-5D9BCA536075"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd680:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C941671F-CC92-407C-AD51-678479BE0E98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd778g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13286F2B-0FD1-474A-A632-1AA19B110536"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd778g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6EA3F98-0F45-44D3-9305-4F548B437011"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd888_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79219DA5-0D09-4CEF-AEFD-917F269AE7DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd888:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D30BACF-71C1-4A6D-8811-9AD708A98307"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sg4150p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9279F02F-6C30-4891-8941-97003DE9C8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sg4150p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA7BB42-305C-451F-92D8-0718DF68A012"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6225-ad_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E089DC83-3849-4671-95B9-E4C958EC79FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6225-ad:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E38F8F04-F841-492B-A555-96DBD7461380"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7315_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4508742-7D97-43D8-B8F5-041F4C588723"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7315:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8C63E8-169F-4164-BD49-348ED894813F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7325_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6874DE-6D72-4CE6-A78D-674257178B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E2BA4E-3CCC-4C35-B915-DC16E6F976DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7325-ae_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "973C7278-EA56-425A-933E-30906763A978"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7325-ae:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02698564-E791-4057-A4CB-E22075B76E1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7325-af_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C78936-5B8A-440F-A083-01AB6089209F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7325-af:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367B4E71-1390-4C89-9495-A30138B36667"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7325p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BEC725F-19B1-4078-B13D-CE624BE23344"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7325p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA43E38-A12D-49C3-B05C-A2AF07ED2710"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7350-ab_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FD6D80-8DC4-4E6D-A492-537413DA1D56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7350-ab:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFADAF33-D40E-4686-A028-84ADCE43DC57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B0798E6-68B1-4C0E-BF5B-5BC8033351A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70D909-40D1-4B66-AEA3-034F2C53FB0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8350-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D77AA64D-A9B5-473F-98FC-E5859142881D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8350-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066C3D8A-DC4C-415C-AFC1-0400325B0B10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38C0AFD-D666-423C-8903-BB026965D97C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59DBE92C-D428-4952-B94F-B46B3A627DFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8475_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CB0B0B-8448-4961-85A3-BC32A8567A21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8475:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E626A19A-DBE3-4DE9-90DA-FA3F883FF3CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1BF9BB-AF11-46A7-A71C-F7D289E76E3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B8455D6-287D-4934-8E4D-F4127A9C0449"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB599A9F-0305-4FE4-8623-0F86630FEDCB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB883BF-68B2-4C25-84DC-5DA953BFAA2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1295D869-F4DD-4766-B4AA-3513752F43B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98784DC-3143-4D38-AD28-DBBDCCAB4272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34143ABA-7D09-429F-A65C-3A33438BF62C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D56DFE3-5EF1-4B23-BBD5-0203FBF9CCEC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70292B01-617F-44AD-AF77-1AFC1450523D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA94C6D6-85DB-4031-AAF4-C399019AE16D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B17201-8185-47F1-9720-5AB4ECD11B22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FA2EB9-416F-4D69-8786-386CC73978AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEF2DB6-00F5-4B07-953B-EF58B31267F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120E8F0F-EBEB-4565-9927-2D473F783EF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6E9038-9B18-4958-BE1E-215901C9B4B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36D3274-F8D0-49C5-A6D5-95F5DC6D1950"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BFB25F-013B-48E3-99FF-3E8687F94423"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF676C5B-838B-446C-A689-6A25AB8A87E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5DB2B8-25E1-4C0F-8AFB-7627FF9A04E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6740:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BB21B3F-6D07-4B45-8A71-DC5490176296"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6750_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EE21BA-7178-4D69-852D-2322844FC6B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9BACB28-F6EA-445A-B74F-0C3881FE59CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn685x-1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A07C2049-B227-4849-85D0-B53D690C7697"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn685x-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D2DB07-B72B-4D44-A373-0C7EAB35F388"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn685x-5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3CF46D-E1CB-447E-8371-15C3F49B1AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn685x-5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74FDAF1-82D0-4136-BF97-25C56FCEE77C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn785x-1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41266FF-5555-4522-AD55-6A7CF8BA33D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn785x-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9C428C-7470-4178-9029-3234086D93F1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn785x-5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04EA12D4-24E2-4FE9-8CD6-06A8E36DEB2F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn785x-5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AED978B-0330-4B9B-B662-AA8E9E621996"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15307882-7039-43E9-9BA3-035045988B99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA85B322-E593-4499-829A-CC6D70BAE884"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11B69595-E488-4590-A150-CE5BE08B5E13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80BC68E-7476-4A40-9F48-53722FE9A5BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B36F4B2-BAA3-45AD-9967-0EB482C99708"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2021",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-13T12:15:08.793",
      "lastModified" : "2024-11-21T07:57:46.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teampass:teampass:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.3",
            "matchCriteriaId" : "AD416596-A9B2-401B-A908-13AC544DB078"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nilsteampassnet/teampass/commit/77c541a0151841d1f4ceb0a84ca391e1b526d58d",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2e31082d-7aeb-46ff-84d6-9561758e3bf0",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/nilsteampassnet/teampass/commit/77c541a0151841d1f4ceb0a84ca391e1b526d58d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2e31082d-7aeb-46ff-84d6-9561758e3bf0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T14:15:08.277",
      "lastModified" : "2024-11-21T07:53:32.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the delete_file() function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bloofox:bloofoxcms:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50AFAD87-F6BD-4415-A89B-9B7D175DACDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://bloofox.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/jspring996",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/jspring996/PHPcodecms/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.bloofox.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://bloofox.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/jspring996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/jspring996/PHPcodecms/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.bloofox.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T14:15:08.810",
      "lastModified" : "2024-11-21T07:57:19.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bloofox v0.5.2 was discovered to contain a SQL injection vulnerability via the component /index.php?mode=content&page=pages&action=edit&eid=1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bloofox:bloofoxcms:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50AFAD87-F6BD-4415-A89B-9B7D175DACDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jspring996/PHPcodecms/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jspring996/PHPcodecms/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T14:15:08.970",
      "lastModified" : "2025-02-07T16:15:35.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lmxcms:lmxcms:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36D0C7D-0C6D-4FEF-B74A-07EEB8BDBC2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jspring996/PHPcodecms/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/jspring996/PHPcodecms/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30630",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T16:15:07.930",
      "lastModified" : "2025-03-04T22:15:36.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly)."
      }, {
        "lang" : "es",
        "value" : "Dmidecode antes de la versión 3.5 permite que el comando -dump-bin sobrescriba un archivo local. Esto tiene relevancia en seguridad porque, por ejemplo, la ejecución de Dmidecode mediante `sudo` resulta plausible. NOTA: Terceros han indicado que la corrección implementada en la versión 3.5 no aborda adecuadamente la vulnerabilidad. El argumento es que el parche propuesto previene que dmidecode escriba en un archivo existente. Sin embargo, hay múltiples vectores de ataque que no requieren sobreescritura de un archivo existente para lograr una escalada de privilegios similar (por ejemplo, crear un nuevo archivo en /etc/cron.hourly)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nongnu:dmidecode:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5",
            "matchCriteriaId" : "16BBE303-AF11-4F4C-B912-963A708ADA30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=6ca381c1247c81f74e1ca4e7706f70bdda72e6f2",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=d8cfbc808f387e87091c25e7d5b8c2bb348bb206",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/adamreiser/dmiwrite",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.nongnu.org/archive/html/dmidecode-devel/2023-03/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=6ca381c1247c81f74e1ca4e7706f70bdda72e6f2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=d8cfbc808f387e87091c25e7d5b8c2bb348bb206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/adamreiser/dmiwrite",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.nongnu.org/archive/html/dmidecode-devel/2023-03/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T17:15:16.570",
      "lastModified" : "2025-02-07T17:15:26.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amsystem:am_presencia:3.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E530D1-7184-4AD9-A36F-48841C4E298F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://alo.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://amsystem.es/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.google.com/document/d/1kGzmc6AOCfRzJf9mDz4emkhQj84Y1XemmAMZjYK32-o/edit?usp=sharing",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portalempleado.alosuite.com/home",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://alo.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://amsystem.es/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://docs.google.com/document/d/1kGzmc6AOCfRzJf9mDz4emkhQj84Y1XemmAMZjYK32-o/edit?usp=sharing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portalempleado.alosuite.com/home",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T18:15:07.133",
      "lastModified" : "2025-02-07T17:15:24.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in TigerGraph Enterprise Free Edition 3.x. Data loading jobs in gsql_server, created by any user with designer permissions, can read sensitive data from arbitrary locations."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-669"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-669"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigergraph:tigergraph:*:*:*:*:cloud:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndIncluding" : "3.7.0",
            "matchCriteriaId" : "21504B22-FFB6-41B8-BC59-B52961A02563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigergraph:tigergraph:*:*:*:*:enterprise_free:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndIncluding" : "3.7.0",
            "matchCriteriaId" : "C58A6CA3-7B3A-40F3-AEFB-8209963454C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.tigergraph.com/forum/c/tg-community/announcements/35",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://neo4j.com/security/cve-2023-22950/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://dev.tigergraph.com/forum/c/tg-community/announcements/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://neo4j.com/security/cve-2023-22950/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T18:15:13.573",
      "lastModified" : "2025-02-07T17:15:26.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClient_setOrigin() at /client/client_control.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mz-automation:libiec61850:1.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D608A908-8E8B-4501-B682-FCF5BFBA972C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mz-automation/libiec61850/commit/79a8eaf26070e02044afc4b2ffbfe777dfdf3e0b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/mz-automation/libiec61850/issues/442",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/mz-automation/libiec61850/commit/79a8eaf26070e02044afc4b2ffbfe777dfdf3e0b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/mz-automation/libiec61850/issues/442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T19:15:08.120",
      "lastModified" : "2025-02-07T17:15:24.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in TigerGraph Enterprise Free Edition 3.x. There is unsecured read access to an SSH private key. Any code that runs as the tigergraph user is able to read the SSH private key. With this, an attacker is granted password-less SSH access to all machines in the TigerGraph cluster."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigergraph:tigergraph:*:*:*:*:cloud:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndIncluding" : "3.7.0",
            "matchCriteriaId" : "21504B22-FFB6-41B8-BC59-B52961A02563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigergraph:tigergraph:*:*:*:*:enterprise_free:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndIncluding" : "3.7.0",
            "matchCriteriaId" : "C58A6CA3-7B3A-40F3-AEFB-8209963454C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.tigergraph.com/forum/c/tg-community/announcements/35",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://neo4j.com/security/cve-2023-22948/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://dev.tigergraph.com/forum/c/tg-community/announcements/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://neo4j.com/security/cve-2023-22948/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26263",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T19:15:08.610",
      "lastModified" : "2025-02-07T17:15:25.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity (XXE) attacks in the /MIMBWebServices/license endpoint of the remote harvesting server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:talend:data_catalog:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0-20230110",
            "matchCriteriaId" : "BB32F19D-90B5-4281-A58A-119C1552ADE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talend.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.talend.com/security/incident-response/#CVE-2023-26264",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://talend.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.talend.com/security/incident-response/#CVE-2023-26264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T19:15:08.787",
      "lastModified" : "2025-02-07T16:15:34.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE) attacks in the license parsing code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:talend:data_catalog:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0-20220907",
            "matchCriteriaId" : "46FEE883-C448-483F-B667-A2B370760519"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talend.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.talend.com/security/incident-response/#CVE-2023-26264",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://talend.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.talend.com/security/incident-response/#CVE-2023-26264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T19:15:11.680",
      "lastModified" : "2025-02-07T17:15:27.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "B9D72627-17F9-427E-907B-56EA0A498131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*",
            "matchCriteriaId" : "736740CB-A328-4163-BAC4-6C881A24C8B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*",
            "matchCriteriaId" : "9B806083-7309-4215-AF81-DCC4D90B7876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*",
            "matchCriteriaId" : "A741CDA8-D1A8-4F83-AE54-7D3D3C433825"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*",
            "matchCriteriaId" : "09563D6F-690B-4C7A-BA25-52D009724A74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:*",
            "matchCriteriaId" : "30FAC23B-831E-4904-AB3B-85A3C068CEB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:*",
            "matchCriteriaId" : "9347D3CF-B5D1-4ACE-83E1-73748EF15120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:*",
            "matchCriteriaId" : "322E0562-4586-4DF4-A935-C2447883495B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:*",
            "matchCriteriaId" : "EB9151D6-BD21-4268-9371-FF702C1AD84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:*",
            "matchCriteriaId" : "B371E93E-7C85-42DD-AA7F-9B43D8D02963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:*",
            "matchCriteriaId" : "094EEFA4-BD16-4F79-8133-62F9E2C8C675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5A6297-98E3-45C8-95FB-7F4E65D133BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:*",
            "matchCriteriaId" : "93C96678-34B7-4FCE-9DBD-1A7B3E0943BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9B9E88-919F-4CF7-99DC-72E50BDF65A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:*",
            "matchCriteriaId" : "7848B31C-AB51-486B-8655-7D7A060BAFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:*",
            "matchCriteriaId" : "1CFB5C4A-B717-4CC2-AE03-336C63D17B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:*",
            "matchCriteriaId" : "456D49D7-F04D-4003-B429-8D5504959D04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:*",
            "matchCriteriaId" : "BB788440-904B-430E-BF5B-12ADA816477E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:*",
            "matchCriteriaId" : "876CC4D6-9546-4D39-965A-EF5A4AF4AD93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:*",
            "matchCriteriaId" : "85432FE8-946F-448D-A92A-FF549EDC52F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:*",
            "matchCriteriaId" : "813E1389-A949-427C-92C6-3974702FEA5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7131:*:*:*:*:*:*",
            "matchCriteriaId" : "34A48841-EA09-4917-A6FF-DF645B581426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7140:*:*:*:*:*:*",
            "matchCriteriaId" : "1C042646-9D36-4712-9E5D-40E55FCF7C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7141:*:*:*:*:*:*",
            "matchCriteriaId" : "9E6CD67A-7F5A-4F29-B563-7E4D72A1149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7150:*:*:*:*:*:*",
            "matchCriteriaId" : "77A0C792-A8B7-48F8-9AD7-96B0CBAD4EBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7151:*:*:*:*:*:*",
            "matchCriteriaId" : "7E53B3CB-4351-4E24-B80C-D62CC483D4D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7160:*:*:*:*:*:*",
            "matchCriteriaId" : "0068E901-62D2-4C4D-96F8-7823B0DF7DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7161:*:*:*:*:*:*",
            "matchCriteriaId" : "CF70BA56-3478-4DA5-B013-4D9B820D2219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7162:*:*:*:*:*:*",
            "matchCriteriaId" : "28E1833F-24C8-44EC-9B66-4D832AB1C9AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7163:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCA2AF7-8732-4095-BB6F-6F40EADD7449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7170:*:*:*:*:*:*",
            "matchCriteriaId" : "54247785-E55A-407D-A667-1734E7C84DF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7171:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8887B2-D378-4A7D-B678-9B2C68953E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7180:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD4EAD7-275A-4467-9217-102051BE49C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172755/ManageEngine-ADManager-Plus-Command-Injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-29084.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172755/ManageEngine-ADManager-Plus-Command-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-29084.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1271",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-13T20:15:07.227",
      "lastModified" : "2023-11-07T04:02:58.960",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Duplicate. Please use CVE-2023-24421."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20863",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-04-13T20:15:07.777",
      "lastModified" : "2025-02-07T17:15:23.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vmware.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-917"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.24",
            "matchCriteriaId" : "95C221C0-3C34-4EAE-B591-A8F6BFFBAC4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.27",
            "matchCriteriaId" : "3A3076BA-B232-4621-B633-9D496FF8246A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.8",
            "matchCriteriaId" : "EEAC4B8F-5F24-479F-908C-CE405EA4B5ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20240524-0015/",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://spring.io/security/cve-2023-20863",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240524-0015/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://spring.io/security/cve-2023-20863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20866",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-04-13T20:15:08.263",
      "lastModified" : "2025-02-07T17:15:24.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes sensitive information to those who have access to the application logs and can be used for session hijacking. Specifically, an application is vulnerable if it is using HeaderHttpSessionIdResolver."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vmware.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_session:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1779D321-04BD-4FAA-A743-35D9DE97CC75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://spring.io/security/cve-2023-20866",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://spring.io/security/cve-2023-20866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T20:15:08.570",
      "lastModified" : "2025-02-07T17:15:24.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in TigerGraph Enterprise Free Edition 3.x. It creates an authentication token for internal systems use. This token can be read from the configuration file. Using this token on the REST API provides an attacker with anonymous admin-level privileges on all REST API endpoints."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigergraph:cloud:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51757E82-0551-48EB-9F73-7141B03D6D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigergraph:tigergraph_enterprise:3.7.0:*:*:*:free:-:*:*",
            "matchCriteriaId" : "E4FF3A96-AA5F-4DA6-BBE9-37C5A1C11279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigergraph:tigergraph_enterprise:3.7.0:*:*:*:free:docker:*:*",
            "matchCriteriaId" : "35459185-6569-4F54-B338-0355DF5ECC50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.tigergraph.com/forum/c/tg-community/announcements/35",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://neo4j.com/security/cve-2023-22951/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://dev.tigergraph.com/forum/c/tg-community/announcements/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://neo4j.com/security/cve-2023-22951/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24509",
      "sourceIdentifier" : "psirt@arista.com",
      "published" : "2023-04-13T20:15:08.843",
      "lastModified" : "2024-11-21T07:48:00.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a privilege escalation. Valid user credentials are required in order to exploit this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@arista.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@arista.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.23",
            "versionEndIncluding" : "4.23.13m",
            "matchCriteriaId" : "498704F8-24D4-48C9-A5CB-4A8F7054AA49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.24.0",
            "versionEndExcluding" : "4.24.11m",
            "matchCriteriaId" : "8923F137-B1BA-49FF-A100-AD357966EE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.25.0",
            "versionEndExcluding" : "4.25.10m",
            "matchCriteriaId" : "4D6EA8CE-BAA4-4B4D-8A9F-A65018FC6B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.26.0",
            "versionEndExcluding" : "4.26.9m",
            "matchCriteriaId" : "659190E5-DFB0-4172-BD6F-1B9E22533CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.27.0",
            "versionEndExcluding" : "4.27.7m",
            "matchCriteriaId" : "20966F67-1C70-458C-A4EF-02612345DE48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.28.0",
            "versionEndExcluding" : "4.28.4m",
            "matchCriteriaId" : "1F57FAA3-518C-498C-9580-19A207C8F176"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:704x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7C0C33F-72A7-41CA-A666-1CEC9F0FE02F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7304x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C6E0C9-7F81-4CE3-BD46-7939667E5969"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7304x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78FE473B-CA6E-4E8D-8DBF-676B1ECBB185"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7308x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A8ABF1-ADF4-474D-B01B-8BB271E1263E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7316x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73ECE6D6-12E5-4396-9C19-3B2E08E13147"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7324x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8862F74-E399-41EE-A081-62D99A7C1755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7328x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F16261D-639F-4CAB-BDA6-EF3F277E663C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7504r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1F369D-93BF-4259-99F5-97FBEF79BBA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7504r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8387CCEA-F00C-4F1F-B966-ACF8B16F1D22"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7508r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35978B6-889C-47DB-971B-B2A12FF537E0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7508r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55AE2A1C-A4FD-423B-A77E-2E24C2310A6A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7512r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2360E039-5F12-4210-8578-7EBDA4575A6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7512r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B0D708-B426-4CA1-BE87-08BD14B7EACE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7516r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D45E5E5-7EB9-41E7-8EEE-570E6646EDDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:755x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585E3617-2B1F-4E58-853A-0E9703B91B80"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:758x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13B1D90C-73CC-49A2-B202-B07D96226729"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7804r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54F3D32-5A07-4791-90BF-96BD8A24C2F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7808r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F078B04-2DA0-4A4B-BB1A-408DC14CB61F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7812r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B99200-EC76-404E-9900-5D1DC3B9A758"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7816r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A172A49-1A0E-464B-BDDD-A8F52856D595"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/16985-security-advisory-0082",
        "source" : "psirt@arista.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/16985-security-advisory-0082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26398",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-13T20:15:11.583",
      "lastModified" : "2024-11-21T07:51:19.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.4.0",
            "matchCriteriaId" : "C34A6269-F595-4124-9E69-32CDE2FD5B6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26409",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-13T20:15:12.013",
      "lastModified" : "2024-11-21T07:51:21.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.4.0",
            "matchCriteriaId" : "C34A6269-F595-4124-9E69-32CDE2FD5B6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26410",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-13T20:15:12.363",
      "lastModified" : "2024-11-21T07:51:21.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.4.0",
            "matchCriteriaId" : "C34A6269-F595-4124-9E69-32CDE2FD5B6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26411",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-13T20:15:12.963",
      "lastModified" : "2024-11-21T07:51:21.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.4.0",
            "matchCriteriaId" : "C34A6269-F595-4124-9E69-32CDE2FD5B6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26412",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-13T20:15:13.357",
      "lastModified" : "2024-11-21T07:51:21.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.4.0",
            "matchCriteriaId" : "C34A6269-F595-4124-9E69-32CDE2FD5B6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26413",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-13T20:15:13.847",
      "lastModified" : "2024-11-21T07:51:21.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.4.0",
            "matchCriteriaId" : "C34A6269-F595-4124-9E69-32CDE2FD5B6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26414",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-13T20:15:14.340",
      "lastModified" : "2024-11-21T07:51:22.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.4.0",
            "matchCriteriaId" : "C34A6269-F595-4124-9E69-32CDE2FD5B6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26415",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-13T20:15:14.650",
      "lastModified" : "2024-11-21T07:51:22.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.4.0",
            "matchCriteriaId" : "C34A6269-F595-4124-9E69-32CDE2FD5B6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26416",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2023-04-13T20:15:15.157",
      "lastModified" : "2024-11-21T07:51:22.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:substance_3d_designer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.4.0",
            "matchCriteriaId" : "C34A6269-F595-4124-9E69-32CDE2FD5B6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/substance3d_designer/apsb23-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T20:15:15.620",
      "lastModified" : "2025-02-07T17:15:25.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auto_dealer_management_system_project:auto_dealer_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE7F9BB-FEDE-4E66-B32B-AA76D90D9809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://auto.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://gist.github.com/Flower-fertilizer/9c615b0fe5f9589b0d41be1ece7cb28f",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15371/auto-dealer-management-system-phpoop-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://auto.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://gist.github.com/Flower-fertilizer/9c615b0fe5f9589b0d41be1ece7cb28f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15371/auto-dealer-management-system-phpoop-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T20:15:15.803",
      "lastModified" : "2025-02-07T17:15:25.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2 handshake is intercepted."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:blackvue:dr750-2ch_lte_firmware:1.012_2022.10.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B52FB9F3-AB7B-4227-A2AE-1D646F2DFEB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:blackvue:dr750-2ch_lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E5CB84-04EB-4971-A887-42F114BAAEDD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:blackvue:dr750-2ch_ir_lte_firmware:1.012_2022.10.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124BB4E3-698A-4228-BBFE-6953F1B9A9C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:blackvue:dr750-2ch_ir_lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D929A81-C40D-40BB-980C-C197CA1AFF31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blackvue.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/eyJhb/blackvue-cve-2022",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eyJhb/blackvue-cve-2023",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://shop.blackvue.com/product/dr750-2ch-ir-lte/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blackvue.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/eyJhb/blackvue-cve-2022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eyJhb/blackvue-cve-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://shop.blackvue.com/product/dr750-2ch-ir-lte/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T20:15:16.157",
      "lastModified" : "2025-02-07T17:15:25.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web server. This vulnerability allows attackers to access sensitive information such as configurations and recordings."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:blackvue:dr750-2ch_lte_firmware:1.012_2022.10.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B52FB9F3-AB7B-4227-A2AE-1D646F2DFEB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:blackvue:dr750-2ch_lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E5CB84-04EB-4971-A887-42F114BAAEDD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:blackvue:dr750-2ch_ir_lte_firmware:1.012_2022.10.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124BB4E3-698A-4228-BBFE-6953F1B9A9C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:blackvue:dr750-2ch_ir_lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D929A81-C40D-40BB-980C-C197CA1AFF31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blackvue.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/eyJhb/blackvue-cve-2022",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eyJhb/blackvue-cve-2023",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://shop.blackvue.com/product/dr750-2ch-ir-lte/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blackvue.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/eyJhb/blackvue-cve-2022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eyJhb/blackvue-cve-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://shop.blackvue.com/product/dr750-2ch-ir-lte/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27748",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T20:15:16.470",
      "lastModified" : "2025-02-07T17:15:26.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded firmware. This can allow attackers to upload crafted firmware which contains backdoors and enables arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:blackvue:dr750-2ch_lte_firmware:1.012_2022.10.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B52FB9F3-AB7B-4227-A2AE-1D646F2DFEB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:blackvue:dr750-2ch_lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E5CB84-04EB-4971-A887-42F114BAAEDD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:blackvue:dr750-2ch_ir_lte_firmware:1.012_2022.10.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124BB4E3-698A-4228-BBFE-6953F1B9A9C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:blackvue:dr750-2ch_ir_lte:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D929A81-C40D-40BB-980C-C197CA1AFF31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blackvue.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/eyJhb/blackvue-cve-2022",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eyJhb/blackvue-cve-2023",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://shop.blackvue.com/product/dr750-2ch-ir-lte/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blackvue.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/eyJhb/blackvue-cve-2022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eyJhb/blackvue-cve-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://shop.blackvue.com/product/dr750-2ch-ir-lte/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29573",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T20:15:16.690",
      "lastModified" : "2025-02-07T17:15:27.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axiosys:bento4:1.6.0-639:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A003FBD1-339C-409D-A304-7FEE97E23250"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/840",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/Bento4/mp4info/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/Bento4/mp4info/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1326",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2023-04-13T23:15:07.180",
      "lastModified" : "2024-11-21T07:38:55.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@ubuntu.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@ubuntu.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:apport:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.26.0",
            "matchCriteriaId" : "9C318FA9-3356-49C8-A8F8-06A20616D446"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "902B8056-9E37-443B-8905-8AA93E2447FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "359012F1-2C63-415A-88B8-6726A87830DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:22.10:*:*:*:-:*:*:*",
            "matchCriteriaId" : "47842532-D2B6-44CB-ADE2-4AC8630A4D8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/canonical/apport/commit/e5f78cc89f1f5888b6a56b785dddcb0364c48ecb",
        "source" : "security@ubuntu.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://ubuntu.com/security/notices/USN-6018-1",
        "source" : "security@ubuntu.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/canonical/apport/commit/e5f78cc89f1f5888b6a56b785dddcb0364c48ecb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://ubuntu.com/security/notices/USN-6018-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T23:15:11.180",
      "lastModified" : "2025-02-07T17:15:28.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TiKV 6.1.2 allows remote attackers to cause a denial of service (fatal error) upon an attempt to get a timestamp from the Placement Driver."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tikv:tikv:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FFDE5-14DD-4D92-9C55-203FA9E6B7F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tikv/tikv/issues/14516",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/tikv/tikv/issues/14516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T23:15:11.650",
      "lastModified" : "2025-02-07T17:15:29.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TiKV 6.1.2 allows remote attackers to cause a denial of service (fatal error, with RpcStatus UNAVAILABLE for \"not leader\") upon an attempt to start a node in a situation where the context deadline is exceeded"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tikv:tikv:6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FFDE5-14DD-4D92-9C55-203FA9E6B7F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tikv/tikv/issues/14517",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/tikv/tikv/issues/14517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-13T23:15:11.933",
      "lastModified" : "2025-02-07T17:15:29.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Baidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic/atomic_server. NOTE: installations with brpc-0.14.0 and later are unaffected."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:baidu:braft:1.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6D70A8-0E73-4E39-B685-20A2EE9B2D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/baidu/braft/issues/393",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/baidu/braft/issues/393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T00:15:06.993",
      "lastModified" : "2025-02-07T16:15:34.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Diasoft File Replication Pro 7.5.0 allows attackers to escalate privileges by replacing a legitimate file with a Trojan horse that will be executed as LocalSystem. This occurs because %ProgramFiles%\\FileReplicationPro allows Everyone:(F) access."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filereplicationpro:file_replication_pro:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B1A8D7-89B1-4958-A0E4-F4F4DF15F344"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171879/File-Replication-Pro-7.5.0-Insecure-Permissions-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.filereplicationpro.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171879/File-Replication-Pro-7.5.0-Insecure-Permissions-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.filereplicationpro.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T00:15:18.190",
      "lastModified" : "2025-02-07T17:15:29.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atos:unify_openscape_bcf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10",
            "versionEndExcluding" : "10r10.7.0",
            "matchCriteriaId" : "860FB40B-EFA9-4231-86A4-3E04DBCF0B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atos:unify_openscape_branch:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10",
            "versionEndExcluding" : "10r3.1.2",
            "matchCriteriaId" : "2933BF75-7C65-49AB-A903-888B7DEE8DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atos:unify_openscape_session_border_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10",
            "versionEndExcluding" : "10r3.1.3",
            "matchCriteriaId" : "64637558-A00A-40D0-BDF7-A7EC84F91ED1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://networks.unify.com/security/advisories/OBSO-2303-02.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.news.de/technik/856818957/unify-openscape-sbc-und-openscape-branch-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://networks.unify.com/security/advisories/OBSO-2303-02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.news.de/technik/856818957/unify-openscape-sbc-und-openscape-branch-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T01:15:07.127",
      "lastModified" : "2024-11-21T07:53:38.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Export User plugin through 2.0 for MyBB allows XSS during the process of an admin generating DSGVO data for a user, via the Custom User Title, Location, or Bio field. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:export_user_project:export_user:*:*:*:*:*:mybb:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "82774F36-77AF-4FD0-A0A2-593854C52332"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171421/MyBB-Export-User-2.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.mybb.com/mods.php?action=view&pid=1408",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://community.mybb.com/user-121250.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171421/MyBB-Export-User-2.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://community.mybb.com/mods.php?action=view&pid=1408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://community.mybb.com/user-121250.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T01:15:08.367",
      "lastModified" : "2025-02-06T22:15:34.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndExcluding" : "1.4.4",
            "matchCriteriaId" : "5DCA3F77-10E1-47E7-8CCF-EEF3956A4960"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://irssi.org/security/irssi_sa_2023_03.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/30/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://irssi.org/security/irssi_sa_2023_03.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/03/30/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29491",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T01:15:08.570",
      "lastModified" : "2025-11-04T19:15:42.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:ncurses:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "869BBAB1-FACC-4D19-AB7C-5FDBE33212D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/19/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/19/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0009/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/kb/HT213843",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/kb/HT213844",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.apple.com/kb/HT213845",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/12/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/13/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/19/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/19/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/12/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/13/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2034",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-14T01:15:08.847",
      "lastModified" : "2024-11-21T07:57:48.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted Upload of File with Dangerous Type in GitHub repository froxlor/froxlor prior to 2.0.14."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.14",
            "matchCriteriaId" : "26DAE5E7-9A76-4E78-89EE-83348E930583"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/froxlor/froxlor/commit/f36bc61fc74c85a21c8d31448198b11f96eb3bc6",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/aba6beaa-570e-4523-8128-da4d8e374ef6",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/froxlor/froxlor/commit/f36bc61fc74c85a21c8d31448198b11f96eb3bc6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/aba6beaa-570e-4523-8128-da4d8e374ef6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T02:15:09.133",
      "lastModified" : "2025-02-07T16:15:35.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Atropim 1.5.26 is vulnerable to Directory Traversal."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atrocore:atropim:1.5.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8649DEF-7FDB-4058-8172-A4F00210D184"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/atrocore/atrocore-1.5.26",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/atrocore/atrocore-1.5.26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T02:15:12.920",
      "lastModified" : "2025-02-06T22:15:35.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:purchase_order_management_project:purchase_order_management:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF676D7D-79D2-4292-AA28-A935677CA3B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://brightsec.com/blog/file-inclusion-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Purchase-Order-Management-1.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://brightsec.com/blog/file-inclusion-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Purchase-Order-Management-1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29622",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T02:15:13.047",
      "lastModified" : "2025-02-07T17:15:27.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchase_order/admin/login.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:purchase_order_management_project:purchase_order_management:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF676D7D-79D2-4292-AA28-A935677CA3B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Purchase-Order-Management-1.0/SQLi",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://portswigger.net/web-security/sql-injection",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Purchase-Order-Management-1.0/SQLi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://portswigger.net/web-security/sql-injection",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29623",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T02:15:13.157",
      "lastModified" : "2025-02-26T21:15:17.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the password parameter at /purchase_order/classes/login.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:purchase_order_management_project:purchase_order_management:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF676D7D-79D2-4292-AA28-A935677CA3B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Purchase-Order-Management-1.0/XSS-Reflected",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://portswigger.net/web-security/cross-site-scripting/reflected",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Purchase-Order-Management-1.0/XSS-Reflected",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://portswigger.net/web-security/cross-site-scripting/reflected",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29625",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T02:15:13.270",
      "lastModified" : "2025-02-10T16:15:36.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Employee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:employee_performance_evaluation_system_project:employee_performance_evaluation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B185E8-CBB4-42FA-A6F7-49DB639870A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Employee-Performance-Evaluation-1.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Employee-Performance-Evaluation-1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29626",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T02:15:13.383",
      "lastModified" : "2025-02-06T22:15:35.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yoga Class Registration System 1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at /admin/login.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoga_class_registration_system_project:yoga_class_registration_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC6CA18-C062-4016-BFD9-45A66C7AEEA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Yoga-Class-Registration%20-1.0-2023%20-%20Multiple-SQLi",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Yoga-Class-Registration%20-1.0-2023%20-%20Multiple-SQLi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29627",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T02:15:13.457",
      "lastModified" : "2025-02-06T22:15:35.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Pizza Ordering v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_project:online_pizza_ordering:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E8BCD1-AD00-4A14-BD00-5B70F9BDD339"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Online-Pizza-Ordering-1.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://portswigger.net/web-security/file-upload",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Online-Pizza-Ordering-1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://portswigger.net/web-security/file-upload",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1285",
      "sourceIdentifier" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
      "published" : "2023-04-14T03:15:07.003",
      "lastModified" : "2024-11-21T07:38:49.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are \"16\" allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition in Ethernet communication by sending a large number of specially crafted packets to any UDP port when GC-ENET-COM is configured as a Modbus TCP Server. The communication resumes only when the power of the main unit is turned off and on or when the GC-ENET-COM is hot-swapped from the main unit.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-364"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:gc-enet-com_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A0AA732-9C55-45CA-A049-5D8BC40926A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:gc-enet-com:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5D1352-A15E-43A5-9CF7-374E4DA7A080"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mitsubishielectric.in/fa/cnc-pdf/DoS_in_Ethernet_Communication_Extension_Unit_GC_ENET_COM_of_GOC35_Series.pdf",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-15",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://mitsubishielectric.in/fa/cnc-pdf/DoS_in_Ethernet_Communication_Extension_Unit_GC_ENET_COM_of_GOC35_Series.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26123",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-04-14T05:15:13.867",
      "lastModified" : "2025-02-06T21:15:18.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting (XSS) such that the SetClipboardText API does not properly escape the ' character, allowing attacker-controlled input to break out of the string and execute arbitrary JavaScript via emscripten_run_script function.\r\r**Note:** This vulnerability is present only when compiling raylib for PLATFORM_WEB. All the other Desktop/Mobile/Embedded platforms are not affected."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raylib:raylib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.0",
            "matchCriteriaId" : "CEDAAF81-EA14-4AEF-9C38-FB3063261835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/raysan5/raylib/commit/b436c8d7e5346a241b00511a11585936895d959d",
        "source" : "report@snyk.io",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/raysan5/raylib/issues/2954",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/raysan5/raylib/releases/tag/4.5.0",
        "source" : "report@snyk.io",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-UNMANAGED-RAYSAN5RAYLIB-5421188",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/raysan5/raylib/commit/b436c8d7e5346a241b00511a11585936895d959d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/raysan5/raylib/issues/2954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/raysan5/raylib/releases/tag/4.5.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.snyk.io/vuln/SNYK-UNMANAGED-RAYSAN5RAYLIB-5421188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2035",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T07:15:06.920",
      "lastModified" : "2024-11-21T07:57:48.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Campcodes Video Sharing Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file signup.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225913 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes_video_sharing_website_project:campcodes_video_sharing_website:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75184CAA-866D-4920-8792-63CFDD55B6CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Video%20Sharing%20Website/Video%20Sharing%20Website%20vuln%203.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225913",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225913",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Video%20Sharing%20Website/Video%20Sharing%20Website%20vuln%203.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2036",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T07:15:07.040",
      "lastModified" : "2024-11-21T07:57:48.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Video Sharing Website 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file upload.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-225914 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes_video_sharing_website_project:campcodes_video_sharing_website:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75184CAA-866D-4920-8792-63CFDD55B6CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Video%20Sharing%20Website/Video%20Sharing%20Website%20vuln%204.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225914",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225914",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Video%20Sharing%20Website/Video%20Sharing%20Website%20vuln%204.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2037",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T08:15:07.367",
      "lastModified" : "2024-11-21T07:57:48.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Video Sharing Website 1.0. It has been classified as critical. This affects an unknown part of the file watch.php. The manipulation of the argument code leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225915."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes_video_sharing_website_project:campcodes_video_sharing_website:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75184CAA-866D-4920-8792-63CFDD55B6CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Video%20Sharing%20Website/Video%20Sharing%20Website%20vuln%201.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225915",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225915",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Video%20Sharing%20Website/Video%20Sharing%20Website%20vuln%201.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2038",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T08:15:07.430",
      "lastModified" : "2024-11-21T07:57:48.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Video Sharing Website 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin_class.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225916."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes_video_sharing_website_project:campcodes_video_sharing_website:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75184CAA-866D-4920-8792-63CFDD55B6CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Video%20Sharing%20Website/Video%20Sharing%20Website%20vuln%202.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225916",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225916",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Video%20Sharing%20Website/Video%20Sharing%20Website%20vuln%202.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2039",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T08:15:07.497",
      "lastModified" : "2024-11-21T07:57:48.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in novel-plus 3.6.2. It has been rated as critical. This issue affects some unknown processing of the file /author/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225917 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad en novel-plus 3.6.2. Ha sido calificado como crítico. Este problema afecta a un procesamiento desconocido del archivo /author/list?limit=10&amp;offset=0&amp;order=desc. La manipulación del argumento sort conduce a la inyección sql. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. El identificador VDB-225917 se asignó a esta vulnerabilidad. NOTA: Se contactó primeramente con el proveedor sobre esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xxyopen:novel-plus:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8784DC3-1BFE-4C21-B764-13F6C7CC28BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yece688/yece/blob/main/Novel-Plus%20Code%20audit2.0.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225917",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225917",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yece688/yece/blob/main/Novel-Plus%20Code%20audit2.0.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1863",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-04-14T09:15:06.967",
      "lastModified" : "2024-11-21T07:40:02.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection.This issue affects Water Metering Software: before 23.04.06.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eskom:el_terminali_\\(su_okuma\\)_uygulamalarimiz:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.04.06",
            "matchCriteriaId" : "315F7D6B-55E6-4ACD-928D-D95F97F8322C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0225",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0225",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2040",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T09:15:07.453",
      "lastModified" : "2024-11-21T07:57:48.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /news/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225918 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad clasificada como crítica en novel-plus 3.6.2. Afectado es una función desconocida del archivo /news/list?limit=10&amp;offset=0&amp;order=desc. La manipulación del argumento sort conduce a la inyección sql. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. VDB-225918 es el identificador asignado a esta vulnerabilidad. NOTA: Se contactó primeramente con el proveedor acerca de esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xxyopen:novel-plus:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8784DC3-1BFE-4C21-B764-13F6C7CC28BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/morty-py/morty/blob/main/Novel-Plus3.6.2%20sqli.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225918",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225918",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/morty-py/morty/blob/main/Novel-Plus3.6.2%20sqli.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2041",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T09:15:07.540",
      "lastModified" : "2024-11-21T07:57:49.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in novel-plus 3.6.2. Affected by this vulnerability is an unknown functionality of the file /category/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225919. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad clasificada como crítica se encontró en novel-plus 3.6.2. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo /category/list?limit=10&amp;offset=0&amp;order=desc. La manipulación  del argumento sort conduce a la inyección sql. El ataque se puede lanzar de forma remota. El exploit ha sido divulgado al público y puede ser utilizado. El identificador asociado de esta vulnerabilidad es VDB-225919. NOTA: Se contactó primeramente con el proveedor acerca de esta divulgación, pero no respondió de ninguna manera."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xxyopen:novel-plus:3.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8784DC3-1BFE-4C21-B764-13F6C7CC28BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/langove/llov/blob/main/Novel-Plus%20code%20audit.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225919",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225919",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/langove/llov/blob/main/Novel-Plus%20code%20audit.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2042",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T10:15:09.837",
      "lastModified" : "2024-11-21T07:57:49.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0. Affected by this issue is some unknown functionality of the component JDBC Server Handler. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "LOW",
            "vulnIntegrityImpact" : "LOW",
            "vulnAvailabilityImpact" : "LOW",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datagear:datagear:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.1",
            "matchCriteriaId" : "4F00AF95-2684-4B32-81F7-3FBEBE908314"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yangyanglo/ForCVE/blob/main/2023-0x06.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225920",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225920",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?submit.109292",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://github.com/yangyanglo/ForCVE/blob/main/2023-0x06.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2043",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T10:15:09.897",
      "lastModified" : "2024-11-21T07:57:49.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/customerdb/operator.svc/a of the component Edit Handler. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-225921 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:assaabloy:control_id_rhid:23.3.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A366CF3-4B70-48AD-B74C-C6E6D9802976"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.225921",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225921",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2044",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T10:15:09.943",
      "lastModified" : "2024-11-21T07:57:49.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Control iD iDSecure 4.7.29.1 and classified as problematic. This vulnerability affects unknown code of the component Dispositivos Page. The manipulation of the argument IP-DNS leads to cross site scripting. The attack can be initiated remotely. VDB-225922 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:assaabloy:control_id_idsecure:4.7.29.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85347922-965A-4CF6-998B-88BDF21CF899"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.225922",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225922",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2047",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T11:15:06.943",
      "lastModified" : "2026-03-18T14:00:50.847",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Advanced Online Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument voter leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225932."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:advanced_online_voting_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D45DEC-8B0D-4BC9-BAC8-D185783F570F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%201.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225932",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225932",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%201.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2048",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T11:15:07.020",
      "lastModified" : "2026-03-18T14:00:21.337",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/voters_row.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225933 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:advanced_online_voting_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D45DEC-8B0D-4BC9-BAC8-D185783F570F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%202.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225933",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225933",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%202.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2049",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T11:15:07.077",
      "lastModified" : "2026-03-18T14:00:37.343",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/ballot_up.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-225934 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:advanced_online_voting_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D45DEC-8B0D-4BC9-BAC8-D185783F570F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%203.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225934",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225934",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%203.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1617",
      "sourceIdentifier" : "cybersecurity@ch.abb.com",
      "published" : "2023-04-14T12:15:07.377",
      "lastModified" : "2024-11-21T07:39:33.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 (VNC-Server modules).  This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on the functionality provided in the visualization.\nThis issue affects B&R VC4: from 3.* through 3.96.7, from 4.0* through 4.06.7, from 4.1* through 4.16.3, from 4.2* through 4.26.8, from 4.3* through 4.34.6, from 4.4* through 4.45.1, from 4.5* through 4.45.3, from 4.7* through 4.72.9.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@ch.abb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@ch.abb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:br-automation:vc4:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.96.8",
            "matchCriteriaId" : "C94CCB17-792C-4B9E-9EB2-5AC0888CF3DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:br-automation:vc4:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.06.4",
            "matchCriteriaId" : "96C5BD56-2064-4219-970C-8AEDA8F85D20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:br-automation:vc4:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10.0",
            "versionEndIncluding" : "4.16.3",
            "matchCriteriaId" : "EF05318D-11E2-40D4-9556-8A83D0B6ABEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:br-automation:vc4:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20.0",
            "versionEndIncluding" : "4.26.8",
            "matchCriteriaId" : "115D84EC-19BD-4CAD-9BAD-6FE9A56E14A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:br-automation:vc4:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30.0",
            "versionEndExcluding" : "4.34.7",
            "matchCriteriaId" : "B28066C3-3BF0-4D87-B847-7DA3F126E39F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:br-automation:vc4:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.40.0",
            "versionEndIncluding" : "4.45.1",
            "matchCriteriaId" : "7C048F8F-7D8F-4CC3-91F9-631A3F96A533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:br-automation:vc4:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50.0",
            "versionEndIncluding" : "4.53.0",
            "matchCriteriaId" : "A56A6BDA-4BC1-4D06-98F2-8CE089F07E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:br-automation:vc4:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.70.0",
            "versionEndExcluding" : "4.73.0",
            "matchCriteriaId" : "2E56F00F-57F9-407E-92A4-E03CDD074522"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.br-automation.com/downloads_br_productcatalogue/assets/1681046878970-en-original-1.0.pdf",
        "source" : "cybersecurity@ch.abb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.br-automation.com/downloads_br_productcatalogue/assets/1681046878970-en-original-1.0.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T12:15:07.437",
      "lastModified" : "2024-11-21T07:51:53.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The login page of Revive Adserver v5.4.1 is vulnerable to brute force attacks. NOTE: The vendor's position is that this is effectively mitigated by rate limits and password-quality features."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revive:adserver:5.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666A0DBC-C63F-4A10-8733-417D57203275"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2024/Apr/27",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://googleinformationsworld.blogspot.com/2023/04/revive-adserver-541-vulnerable-to-brute.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.esecforte.com/login-page-brute-force-attack/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.revive-adserver.com/security/response-to-cve-2023-26756/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2024/Apr/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://googleinformationsworld.blogspot.com/2023/04/revive-adserver-541-vulnerable-to-brute.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.esecforte.com/login-page-brute-force-attack/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.revive-adserver.com/security/response-to-cve-2023-26756/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T12:15:07.477",
      "lastModified" : "2025-02-07T16:15:35.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in DUALSPACE v.1.1.3 allows a local attacker to gain privileges via the key_ad_new_user_avoid_time field."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dualspace:space_clean_\\&_super_cleaner:1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D70182-C424-46B1-8A12-BE39CDD71164"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.dualspace.com/pc/en/products.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://apkpure.com/cn/space-clean-super-cleaner/com.ludashi.xsuperclean",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27193/CVE%20detail.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.dualspace.com/pc/en/products.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://apkpure.com/cn/space-clean-super-cleaner/com.ludashi.xsuperclean",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27193/CVE%20detail.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T12:15:07.530",
      "lastModified" : "2025-02-10T16:15:34.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in POWERAMP 925-bundle-play and Poweramp 954-uni allows a remote attacker to cause a denial of service via the Rescan button in Queue and Select Folders button in Library"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerampapp:poweramp:925-bundle-play:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52946060-005F-4B1C-A07C-BA273CFCFB6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerampapp:poweramp:954-uni:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70873310-3C54-46CD-9BA7-DD819372CA02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27643/CVE%20detail.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.maxmpz.audioplayer",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://powerampapp.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27643/CVE%20detail.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.maxmpz.audioplayer",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://powerampapp.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T12:15:07.570",
      "lastModified" : "2025-02-10T16:15:35.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timmystudios:change_color_of_keypad:1.275.1.277:*:*:*:*:android:*:*",
            "matchCriteriaId" : "B3A62F3C-E911-475D-98D1-1F4E2DF185CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corporate.timmystudios.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27648/CVE%20detail.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.jb.gokeyboard.theme.twchangecolorofkeypad",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://corporate.timmystudios.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27648/CVE%20detail.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.jb.gokeyboard.theme.twchangecolorofkeypad",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T12:15:07.610",
      "lastModified" : "2025-02-10T16:15:35.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability found in Trusted Tools Free Music v.2.1.0.47, v.2.0.0.46, v.1.9.1.45, v.1.8.2.43 allows a remote attacker to cause a denial of service via the search history table"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestools:trusted_tools_free_music:1.8.2.43:*:*:*:*:android:*:*",
            "matchCriteriaId" : "FDB594D3-6AE8-4A50-B5FA-97E742372718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestools:trusted_tools_free_music:1.9.1.45:*:*:*:*:android:*:*",
            "matchCriteriaId" : "3D621809-C4C8-4A67-A276-47005345977F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestools:trusted_tools_free_music:2.0.0.46:*:*:*:*:android:*:*",
            "matchCriteriaId" : "47AAEB97-297B-487E-BCED-654E436BB53B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestools:trusted_tools_free_music:2.1.0.47:*:*:*:*:android:*:*",
            "matchCriteriaId" : "07CAF66F-FE4C-4247-BCCC-052D62C45145"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bestools.group/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27649/CVE%20detail.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=freemusic.download.musicplayer.mp3player",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://bestools.group/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27649/CVE%20detail.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=freemusic.download.musicplayer.mp3player",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T12:15:07.647",
      "lastModified" : "2026-03-13T19:20:52.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges via the update_info field of the _default_.xml file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egostudiogroup:super_clean:1.1.5:*:*:*:*:android:*:*",
            "matchCriteriaId" : "F5BEEBC2-D679-4E48-8BB6-6F8C2DF7A4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egostudiogroup:super_clean:1.1.9:*:*:*:*:android:*:*",
            "matchCriteriaId" : "B78674E3-CFDC-4278-AFA0-53DAAD420439"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.egostudiogroup.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://apkpure.com/cn/super-clean-phone-cleaner/com.egostudio.clean/download",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27651/CVE%20detail.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.egostudiogroup.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://apkpure.com/cn/super-clean-phone-cleaner/com.egostudio.clean/download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27651/CVE%20detail.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T12:15:07.683",
      "lastModified" : "2025-02-10T16:15:35.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a denial of service via the SharedPreference files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whoapp:who:1.0.28:*:*:*:*:android:*:*",
            "matchCriteriaId" : "D65B4915-2010-4CE5-86B5-81AA1D5118A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whoapp:who:1.0.30:*:*:*:*:android:*:*",
            "matchCriteriaId" : "CF719AC2-12A1-415E-88C5-95E00E39C80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whoapp:who:1.0.32:*:*:*:*:android:*:*",
            "matchCriteriaId" : "0D015EB8-A0C3-4B31-A735-31BC102B31D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27653/CVE%20detail.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.scorp.who",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.whoapp.live/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27653/CVE%20detail.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.scorp.who",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.whoapp.live/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27666",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T12:15:07.733",
      "lastModified" : "2025-02-10T16:15:35.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auto Dealer Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the name parameter at /classes/SystemSettings.php?f=update_settings."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:auto_dealer_management_system_project:auto_dealer_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE7F9BB-FEDE-4E66-B32B-AA76D90D9809"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://auto.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://gist.github.com/Flower-fertilizer/a1fb260c02353906f2d2808656dd1559",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15371/auto-dealer-management-system-phpoop-free-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://auto.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://gist.github.com/Flower-fertilizer/a1fb260c02353906f2d2808656dd1559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/15371/auto-dealer-management-system-phpoop-free-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29569",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T12:15:07.770",
      "lastModified" : "2025-02-06T22:15:35.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mjs:2.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8D39F6-ACB1-46F8-87CF-1B41EFC157BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cesanta/mjs/issues/239",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_ffi/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/cesanta/mjs/issues/239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_ffi/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T12:15:07.810",
      "lastModified" : "2025-02-06T22:15:35.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp4v2_project:mp4v2:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF259B4E-742A-4FD6-AFC4-30E94AA65729"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/enzo1982/mp4v2/issues/30",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/mp4v2/heap-buffer-overflow/MP4GetVideoProfileLevel/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/enzo1982/mp4v2/issues/30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/mp4v2/heap-buffer-overflow/MP4GetVideoProfileLevel/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2050",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T12:15:07.847",
      "lastModified" : "2026-03-18T14:00:03.443",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/positions_add.php. The manipulation of the argument description leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225935."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:advanced_online_voting_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D45DEC-8B0D-4BC9-BAC8-D185783F570F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%204.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225935",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225935",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%204.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2051",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T12:15:07.900",
      "lastModified" : "2026-03-18T13:57:52.267",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unknown function of the file /admin/positions_row.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225936."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:advanced_online_voting_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D45DEC-8B0D-4BC9-BAC8-D185783F570F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%205.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225936",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225936",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%205.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2052",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T12:15:07.957",
      "lastModified" : "2026-03-18T13:59:44.430",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ballot_down.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225937 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:advanced_online_voting_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D45DEC-8B0D-4BC9-BAC8-D185783F570F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%206.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225937",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225937",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%206.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T13:15:07.890",
      "lastModified" : "2025-02-07T16:15:34.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A directory traversal vulnerability in Oxygen XML Web Author before 25.0.0.3 build 2023021715 and Oxygen Content Fusion before 5.0.3 build 2023022015 allows an attacker to read files from a WEB-INF directory via a crafted HTTP request. (XML Web Author 24.1.0.3 build 2023021714 and 23.1.1.4 build 2023021715 are also fixed versions.)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sync:oxygen_content_fusion:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.3",
            "matchCriteriaId" : "C7594B8B-6BA1-4F9B-87A2-C35DBB9A4798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sync:oxygen_xml_web_author:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.1.1.4",
            "matchCriteriaId" : "63D2AEBF-3EF4-4EC9-8349-E5BB28605065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sync:oxygen_xml_web_author:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "24.0.0.0",
            "versionEndExcluding" : "24.1.0.3",
            "matchCriteriaId" : "12117098-405D-4342-A7CA-5CD709206F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sync:oxygen_xml_web_author:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "25.0.0.0",
            "versionEndExcluding" : "25.1.0.3",
            "matchCriteriaId" : "13437A78-B667-487C-B5A2-DCBF966E09EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://oxygenxml.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.oxygenxml.com/security/advisory/SYNC-2023-042301.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://oxygenxml.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.oxygenxml.com/security/advisory/SYNC-2023-042301.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26980",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T13:15:07.937",
      "lastModified" : "2024-11-21T07:52:08.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows attackers to bypass the payment software and force the OS to boot directly to Android during the boot process. NOTE: the vendor disputes this because the attack is not feasible: the home launcher will be loaded before any user applications."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pax:paydroid:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA8A6248-D723-4467-9266-49401F9D65AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pax:a920_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78295D0B-40E3-4746-AED2-81BE55F70B5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/189b1494s8RF8ksaOijKhKb-3B8gj3pLUmgn0dqg-jqs/edit",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/drive/u/0/folders/14X-XTYhkiaIVBS3zf68VigG4-imbKEuV",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://uploads.strikinglycdn.com/files/f1d54bf4-3803-480c-b4d3-0943f7dac76e/A920_EN_20200605.pdf?id=237392",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://docs.google.com/document/d/189b1494s8RF8ksaOijKhKb-3B8gj3pLUmgn0dqg-jqs/edit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://drive.google.com/drive/u/0/folders/14X-XTYhkiaIVBS3zf68VigG4-imbKEuV",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://uploads.strikinglycdn.com/files/f1d54bf4-3803-480c-b4d3-0943f7dac76e/A920_EN_20200605.pdf?id=237392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2053",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T13:15:07.977",
      "lastModified" : "2026-03-18T13:57:31.963",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in Campcodes Advanced Online Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/candidates_row.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-225938 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:advanced_online_voting_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D45DEC-8B0D-4BC9-BAC8-D185783F570F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%207.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225938",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225938",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%207.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2054",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T13:15:08.037",
      "lastModified" : "2026-03-18T13:59:14.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in Campcodes Advanced Online Voting System 1.0. This affects an unknown part of the file /admin/positions_delete.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225939."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:advanced_online_voting_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D45DEC-8B0D-4BC9-BAC8-D185783F570F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%208.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225939",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225939",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%208.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225939",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2055",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T13:15:08.087",
      "lastModified" : "2026-03-18T13:56:56.700",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Campcodes Advanced Online Voting System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/config_save.php. The manipulation of the argument title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225940."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:advanced_online_voting_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D45DEC-8B0D-4BC9-BAC8-D185783F570F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%209.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225940",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225940",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%209.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1803",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-04-14T14:15:10.553",
      "lastModified" : "2024-11-21T07:39:56.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass by Alternate Name vulnerability in DTS Electronics Redline Router firmware allows Authentication Bypass.This issue affects Redline Router: before 7.17.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-289"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redline:router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.17",
            "matchCriteriaId" : "28C4F715-F4ED-4B54-B282-D56319F8962E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0227",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1833",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-04-14T14:15:10.650",
      "lastModified" : "2024-11-21T07:39:59.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass by Primary Weakness vulnerability in DTS Electronics Redline Router firmware allows Authentication Bypass.This issue affects Redline Router: before 7.17.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redline:router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.17",
            "matchCriteriaId" : "28C4F715-F4ED-4B54-B282-D56319F8962E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0227",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T14:15:10.723",
      "lastModified" : "2025-02-07T22:15:11.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in TigerGraph Enterprise Free Edition 3.x. There is logging of user credentials. All authenticated GSQL access requests are logged by TigerGraph in multiple places. Each request includes both the username and password of the user in an easily decodable base64 form. That could allow a TigerGraph administrator to effectively harvest usernames/passwords."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigergraph:cloud:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51757E82-0551-48EB-9F73-7141B03D6D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigergraph:tigergraph_enterprise:3.7.0:*:*:*:free:-:*:*",
            "matchCriteriaId" : "E4FF3A96-AA5F-4DA6-BBE9-37C5A1C11279"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tigergraph:tigergraph_enterprise:3.7.0:*:*:*:free:docker:*:*",
            "matchCriteriaId" : "35459185-6569-4F54-B338-0355DF5ECC50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.tigergraph.com/forum/c/tg-community/announcements/35",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://neo4j.com/security/cve-2023-22949/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://dev.tigergraph.com/forum/c/tg-community/announcements/35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://neo4j.com/security/cve-2023-22949/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29798",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T14:15:10.790",
      "lastModified" : "2025-02-06T21:15:19.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:x18_firmware:9.1.0cu.2024_b20220329:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147FED55-DD5F-4AC0-B261-9FABC0498F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:x18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9B188-E15C-4915-848A-4F6C2E6EB067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sore-pail-31b.notion.site/Command-Injection-4-ea4969f635f54fe5b2f575e93443a4e0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sore-pail-31b.notion.site/Command-Injection-4-ea4969f635f54fe5b2f575e93443a4e0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T14:15:10.983",
      "lastModified" : "2024-11-21T07:57:31.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:x18_firmware:9.1.0cu.2024_b20220329:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147FED55-DD5F-4AC0-B261-9FABC0498F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:x18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9B188-E15C-4915-848A-4F6C2E6EB067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sore-pail-31b.notion.site/Command-Inject-6-3ee0faa243134ae2bc20e6670d80bada",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sore-pail-31b.notion.site/Command-Inject-6-3ee0faa243134ae2bc20e6670d80bada",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T14:15:11.170",
      "lastModified" : "2025-02-06T21:15:19.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:x18_firmware:9.1.0cu.2024_b20220329:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147FED55-DD5F-4AC0-B261-9FABC0498F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:x18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9B188-E15C-4915-848A-4F6C2E6EB067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sore-pail-31b.notion.site/Command-Injection-5-e88b72309a3c4e20b7469b3679c0c7d9",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sore-pail-31b.notion.site/Command-Injection-5-e88b72309a3c4e20b7469b3679c0c7d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29801",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T14:15:11.360",
      "lastModified" : "2025-02-06T21:15:19.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain multiple command injection vulnerabilities via the rtLogEnabled and rtLogServer parameters in the setSyslogCfg function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:x18_firmware:9.1.0cu.2024_b20220329:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147FED55-DD5F-4AC0-B261-9FABC0498F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:x18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9B188-E15C-4915-848A-4F6C2E6EB067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sore-pail-31b.notion.site/Command-Injection-2-af41252fe96244209589d4e6da9aa7b7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sore-pail-31b.notion.site/Command-Injection-2-af41252fe96244209589d4e6da9aa7b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T14:15:11.440",
      "lastModified" : "2025-02-06T21:15:19.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:x18_firmware:9.1.0cu.2021_b20220326:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C4EC7B-B486-4B77-9B71-D8DC2E42A80F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:x18_firmware:9.1.0cu.2024_b20220329:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147FED55-DD5F-4AC0-B261-9FABC0498F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:x18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9B188-E15C-4915-848A-4F6C2E6EB067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sore-pail-31b.notion.site/Command-Injection-3-8eb94b608bcd48f8aa4e983d2d1c4526",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sore-pail-31b.notion.site/Command-Injection-3-8eb94b608bcd48f8aa4e983d2d1c4526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T14:15:11.507",
      "lastModified" : "2025-02-06T21:15:19.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the pid parameter in the disconnectVPN function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:x18_firmware:9.1.0cu.2024_b20220329:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147FED55-DD5F-4AC0-B261-9FABC0498F67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:x18:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4D9B188-E15C-4915-848A-4F6C2E6EB067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sore-pail-31b.notion.site/Command-Inject-1-4a37b0679f69478285d1ba640e5f0897",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sore-pail-31b.notion.site/Command-Inject-1-4a37b0679f69478285d1ba640e5f0897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T14:15:11.560",
      "lastModified" : "2025-02-06T21:15:20.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the sys_smb_pwdmod function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:wfs-sr03w_firmware:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854223D4-C2C7-4FBE-BC0B-B2E5D2349490"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:wfs-sr03w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AAA78FA-9003-4742-A164-06FBED0A8F6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:wfs-sr03k_firmware:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F05A94-3AEB-45DE-8ED2-E00A3EB9BC0A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:wfs-sr03k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13128812-EF53-4AB7-839E-F64FD797467D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sore-pail-31b.notion.site/command-injection-WFS-SR03-7cddf0ac85e54f8ba81d9b26b00ca5cd",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sore-pail-31b.notion.site/command-injection-WFS-SR03-7cddf0ac85e54f8ba81d9b26b00ca5cd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T14:15:11.617",
      "lastModified" : "2025-02-06T21:15:20.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the pro_stor_canceltrans_handler_part_19 function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:wfs-sr03w_firmware:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854223D4-C2C7-4FBE-BC0B-B2E5D2349490"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:wfs-sr03w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AAA78FA-9003-4742-A164-06FBED0A8F6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:iodata:wfs-sr03k_firmware:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93F05A94-3AEB-45DE-8ED2-E00A3EB9BC0A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:iodata:wfs-sr03k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13128812-EF53-4AB7-839E-F64FD797467D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sore-pail-31b.notion.site/Command-Injection-2-WFS-SR03-436d09790c2f4e31b197c39711e17775",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sore-pail-31b.notion.site/Command-Injection-2-WFS-SR03-436d09790c2f4e31b197c39711e17775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29847",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T14:15:11.673",
      "lastModified" : "2025-02-06T21:15:20.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the comment_author and comment_content parameters at /post.php. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via a crafted payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aerocms_project:aerocms:0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52639E84-244D-4DA3-B1AE-6D8BA1C38863"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MegaTKC/AeroCMS/issues/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MegaTKC/AeroCMS/issues/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29850",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T14:15:11.733",
      "lastModified" : "2025-02-06T21:15:20.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slims:senayan_library_management_system:9.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3C9963-4DFA-4A7F-BA00-49754DF33343"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/slims/slims9_bulian/issues/186",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/slims/slims9_bulian/issues/186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2056",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T14:15:11.793",
      "lastModified" : "2024-11-21T07:57:51.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in DedeCMS up to 5.7.87 and classified as critical. This issue affects the function GetSystemFile of the file module_main.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225941 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.87",
            "matchCriteriaId" : "7D9A4358-E48B-4104-AC76-FCE3E8E58ACB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/ashe-king/cve/blob/master/dedecms%20rce2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225941",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225941",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/ashe-king/cve/blob/master/dedecms%20rce2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2057",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T14:15:11.877",
      "lastModified" : "2024-11-21T07:57:51.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpic_loca leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225942 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyoucms:eyoucms:1.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C9D208-DC55-4247-A439-3803E1ECF625"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sleepyvv/vul_report/blob/main/EYOUCMS/XSS1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225942",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225942",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sleepyvv/vul_report/blob/main/EYOUCMS/XSS1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2058",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T14:15:11.960",
      "lastModified" : "2024-11-21T07:57:51.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in EyouCms up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /yxcms/index.php?r=admin/extendfield/mesedit&tabid=12&id=4 of the component HTTP POST Request Handler. The manipulation of the argument web_ico leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225943."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyoucms:eyoucms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.2",
            "matchCriteriaId" : "82CF1357-2408-4F18-A255-152E5AC1AD81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sleepyvv/vul_report/blob/main/EYOUCMS/XSS2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225943",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225943",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sleepyvv/vul_report/blob/main/EYOUCMS/XSS2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28085",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-04-14T15:15:07.523",
      "lastModified" : "2025-02-06T20:15:38.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An HPE OneView Global Dashboard (OVGD) appliance dump may expose OVGD user account credentials"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:oneview_global_dashboard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.72",
            "matchCriteriaId" : "458F8B2A-D560-4497-9DD0-1C654B28B991"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04468en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04468en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28091",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-04-14T15:15:07.563",
      "lastModified" : "2025-02-06T20:15:38.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HPE OneView virtual appliance \"Migrate server hardware\" option may expose sensitive information in an HPE OneView support dump"
      }, {
        "lang" : "es",
        "value" : "La opción \"Migrate server hardware\" de los appliance virtuales HPE OneView puede exponer información sensible en un HPE volcado de soporte de OneView."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oneview:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndIncluding" : "8.1",
            "matchCriteriaId" : "B3736F7E-F57E-4C62-BD43-B179EBBBB3C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04467en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04467en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2059",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T15:15:07.600",
      "lastModified" : "2024-11-21T07:57:51.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in DedeCMS 5.7.87. It has been rated as problematic. Affected by this issue is some unknown functionality of the file uploads/include/dialog/select_templets.php. The manipulation leads to path traversal: '..\\filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225944."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-28"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dedecms:dedecms:5.7.87:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF38B3FE-16D1-459B-8BFA-67A830158D72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ATZXC-RedTeam/cve/blob/main/dedecms.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225944",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225944",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ATZXC-RedTeam/cve/blob/main/dedecms.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.225944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.225944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T15:15:07.657",
      "lastModified" : "2025-02-06T21:15:20.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has administrator privileges) by writing a malicious C# script and executing it on the server (via server settings in the administrator control panel on port 8101, by default)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartptt:smartptt_scada:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EEE6CC2-4FE5-46CD-A6F6-A498813AF78B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Toxich4/CVE-2023-30459",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://smartptt.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Toxich4/CVE-2023-30459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://smartptt.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27912",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2023-04-14T19:15:08.967",
      "lastModified" : "2025-02-06T22:15:34.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "F2568A62-E5C4-490E-81F8-544415B928DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "8D94FD09-1B96-4778-BFAD-078C8B8501B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "299634F4-D72C-4DD2-9F51-7B2AD8A92798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "D28E2A64-93A8-4421-94E8-05E080C8A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "C845EE8F-8DDA-4242-B5E1-91CEDEA163BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "A80FA213-D03D-426D-B271-25BF1BDA648E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "18DD5427-3666-4D5E-9AB9-A0236F79181E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "C22D3F40-E682-4871-B18F-E84829FBFB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "326B5CC6-1BFB-497B-863C-88874878449B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "CAD08203-9B65-4141-A35E-3B9EACFE4B54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27913",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2023-04-14T19:15:09.020",
      "lastModified" : "2025-02-06T22:15:34.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data, or execute arbitrary code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "F2568A62-E5C4-490E-81F8-544415B928DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "8D94FD09-1B96-4778-BFAD-078C8B8501B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "299634F4-D72C-4DD2-9F51-7B2AD8A92798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "D28E2A64-93A8-4421-94E8-05E080C8A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "C845EE8F-8DDA-4242-B5E1-91CEDEA163BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "A80FA213-D03D-426D-B271-25BF1BDA648E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "18DD5427-3666-4D5E-9AB9-A0236F79181E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "C22D3F40-E682-4871-B18F-E84829FBFB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "326B5CC6-1BFB-497B-863C-88874878449B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "CAD08203-9B65-4141-A35E-3B9EACFE4B54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27914",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2023-04-14T19:15:09.053",
      "lastModified" : "2025-02-06T21:15:18.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "F2568A62-E5C4-490E-81F8-544415B928DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "8D94FD09-1B96-4778-BFAD-078C8B8501B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "299634F4-D72C-4DD2-9F51-7B2AD8A92798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "D28E2A64-93A8-4421-94E8-05E080C8A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "C845EE8F-8DDA-4242-B5E1-91CEDEA163BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "A80FA213-D03D-426D-B271-25BF1BDA648E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "18DD5427-3666-4D5E-9AB9-A0236F79181E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "C22D3F40-E682-4871-B18F-E84829FBFB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "326B5CC6-1BFB-497B-863C-88874878449B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "CAD08203-9B65-4141-A35E-3B9EACFE4B54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27915",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2023-04-14T19:15:09.090",
      "lastModified" : "2025-02-06T21:15:18.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "F2568A62-E5C4-490E-81F8-544415B928DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "8D94FD09-1B96-4778-BFAD-078C8B8501B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "299634F4-D72C-4DD2-9F51-7B2AD8A92798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "D28E2A64-93A8-4421-94E8-05E080C8A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "C845EE8F-8DDA-4242-B5E1-91CEDEA163BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "A80FA213-D03D-426D-B271-25BF1BDA648E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "18DD5427-3666-4D5E-9AB9-A0236F79181E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "C22D3F40-E682-4871-B18F-E84829FBFB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "326B5CC6-1BFB-497B-863C-88874878449B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "CAD08203-9B65-4141-A35E-3B9EACFE4B54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29013",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-14T19:15:09.127",
      "lastModified" : "2025-02-13T17:16:17.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Traefik (pronounced traffic) is a modern HTTP reverse proxy and load balancer for deploying microservices. There is a vulnerability in Go when parsing the HTTP headers, which impacts Traefik. HTTP header parsing could allocate substantially more memory than required to hold the parsed headers. This behavior could be exploited to cause a denial of service. This issue has been patched in versions 2.9.10 and 2.10.0-rc2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.10",
            "matchCriteriaId" : "D38F7D80-DDA8-421D-9C97-C3F53BA1F096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traefik:traefik:2.10.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "748FFA04-66D8-4821-B6F3-38BBE07490FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/traefik/traefik/commit/4ed3964b3586565519249bbdc55eb1b961c08c49",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/traefik/traefik/releases/tag/v2.10.0-rc2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/traefik/traefik/releases/tag/v2.9.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/traefik/traefik/security/advisories/GHSA-7hj9-rv74-5g92",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0008/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/traefik/traefik/commit/4ed3964b3586565519249bbdc55eb1b961c08c49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/traefik/traefik/releases/tag/v2.10.0-rc2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/traefik/traefik/releases/tag/v2.9.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/traefik/traefik/security/advisories/GHSA-7hj9-rv74-5g92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29018",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-14T19:15:09.187",
      "lastModified" : "2024-11-21T07:56:24.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OpenFeature Operator allows users to expose feature flags to applications. Assuming the pre-existence of a vulnerability that allows for arbitrary code execution, an attacker could leverage the lax permissions configured on `open-feature-operator-controller-manager` to escalate the privileges of any SA in the cluster. The increased privileges could be used to modify cluster state, leading to DoS, or read sensitive data, including secrets. Version 0.2.32 mitigates this issue by restricting the resources the `open-feature-operator-controller-manager` can modify."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:openfeature:*:*:*:*:*:kubernetes:*:*",
            "versionEndExcluding" : "0.2.32",
            "matchCriteriaId" : "9EDFB403-3FD6-4AE9-8F27-076A2AA98232"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open-feature/open-feature-operator/releases/tag/v0.2.32",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/open-feature/open-feature-operator/security/advisories/GHSA-cwf6-xj49-wp83",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/open-feature/open-feature-operator/releases/tag/v0.2.32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/open-feature/open-feature-operator/security/advisories/GHSA-cwf6-xj49-wp83",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29067",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2023-04-14T19:15:09.237",
      "lastModified" : "2025-02-06T21:15:18.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "F2568A62-E5C4-490E-81F8-544415B928DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "8D94FD09-1B96-4778-BFAD-078C8B8501B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "299634F4-D72C-4DD2-9F51-7B2AD8A92798"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "D28E2A64-93A8-4421-94E8-05E080C8A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "C845EE8F-8DDA-4242-B5E1-91CEDEA163BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "A80FA213-D03D-426D-B271-25BF1BDA648E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "18DD5427-3666-4D5E-9AB9-A0236F79181E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "C22D3F40-E682-4871-B18F-E84829FBFB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "326B5CC6-1BFB-497B-863C-88874878449B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2023",
            "versionEndExcluding" : "2023.1.3",
            "matchCriteriaId" : "CAD08203-9B65-4141-A35E-3B9EACFE4B54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29194",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-14T19:15:09.273",
      "lastModified" : "2024-11-21T07:56:41.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently create a keyspace containing `/` characters such that from that point on, anyone who tries to view keyspaces from VTAdmin will receive an error. Trying to list all the keyspaces using `vtctldclient GetKeyspaces` will also return an error. Note that all other keyspaces can still be administered using the CLI (vtctldclient). This issue is fixed in version 16.0.1. As a workaround, delete the offending keyspace using a CLI client (vtctldclient)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:vitess:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "1D98CFEE-5298-48D6-8FAE-ED4E137D1741"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vitessio/vitess/commit/adf10196760ad0b3991a7aa7a8580a544e6ddf88",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vitessio/vitess/commits/v0.16.1/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/vitessio/vitess/security/advisories/GHSA-735r-hv67-g38f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vitessio/vitess/commit/adf10196760ad0b3991a7aa7a8580a544e6ddf88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vitessio/vitess/commits/v0.16.1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/vitessio/vitess/security/advisories/GHSA-735r-hv67-g38f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29199",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-14T19:15:09.337",
      "lastModified" : "2024-11-21T07:56:42.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There exists a vulnerability in source code transformer (exception sanitization logic) of vm2 for versions up to 3.9.15, allowing attackers to bypass `handleException()` and leak unsanitized host exceptions which can be used to escape the sandbox and run arbitrary code in host context. A threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version `3.9.16` of `vm2`.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-913"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vm2_project:vm2:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.9.16",
            "matchCriteriaId" : "7E3BC6AA-3926-4AA9-9EE5-4B85232942A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/leesh3288/f05730165799bf56d70391f3d9ea187c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/commit/24c724daa7c09f003e556d7cd1c7a8381cb985d7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/issues/516",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/releases/tag/3.9.16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/security/advisories/GHSA-xj72-wvfv-8985",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/leesh3288/f05730165799bf56d70391f3d9ea187c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/commit/24c724daa7c09f003e556d7cd1c7a8381cb985d7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/issues/516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/releases/tag/3.9.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/security/advisories/GHSA-xj72-wvfv-8985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29529",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-14T19:15:09.400",
      "lastModified" : "2024-11-21T07:57:14.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. An attacker present in a room where an MSC3401 group call is taking place can eavesdrop on the video and audio of participants using matrix-js-sdk, without their knowledge. To affected matrix-js-sdk users, the attacker will not appear to be participating in the call. This attack is possible because matrix-js-sdk's group call implementation accepts incoming direct calls from other users, even if they have not yet declared intent to participate in the group call, as a means of resolving a race condition in call setup. Affected versions do not restrict access to the user's outbound media in this case. Legacy 1:1 calls are unaffected. This is fixed in matrix-js-sdk 24.1.0. As a workaround, users may hold group calls in private rooms where only the exact users who are expected to participate in the call are present."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix:javascript_sdk:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "24.1.0",
            "matchCriteriaId" : "F434D632-322B-4A24-A585-53A983E63A6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/matrix-js-sdk/releases/tag/v24.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-6g67-q39g-r79q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-spec-proposals/pull/3401",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-js-sdk/releases/tag/v24.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-6g67-q39g-r79q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-spec-proposals/pull/3401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2033",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-14T19:15:09.453",
      "lastModified" : "2025-10-24T14:07:47.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-04-17",
      "cisaActionDue" : "2023-05-08",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Google Chromium V8 Type Confusion Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.121",
            "matchCriteriaId" : "4A679C85-EF22-48D8-8298-28965D7B5A9D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.5",
            "matchCriteriaId" : "8D5763B2-C023-4C29-A30E-71B087A967DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:couchbase:couchbase_server:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF7BB41-6DE4-45D5-81FE-A3CC055853F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1432210",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5390",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1432210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-2033",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2073",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T19:15:09.500",
      "lastModified" : "2026-03-17T19:58:48.850",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Online Traffic Offense Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Login.php. The manipulation of the argument password leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226051."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:online_traffic_offense_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F40AD4-1B6E-45D9-B517-38C7995BC5B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Traffic%20Offense%20Management%20System/Online%20Traffic%20Offense%20Management%20System%20-%20vuln%201.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226051",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226051",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Traffic%20Offense%20Management%20System/Online%20Traffic%20Offense%20Management%20System%20-%20vuln%201.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T20:15:09.573",
      "lastModified" : "2025-02-10T16:15:34.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dualspace:lock_master:2.2.4:*:*:*:*:android:*:*",
            "matchCriteriaId" : "7D692B4D-E923-4BD3-8AC2-EF706D12D288"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.dualspace.com/pc/en/products.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://app-lock-master.en.uptodown.com/android/download",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27647/CVE%20detail.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://www.dualspace.com/pc/en/products.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://app-lock-master.en.uptodown.com/android/download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27647/CVE%20detail.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T20:15:09.613",
      "lastModified" : "2025-02-10T16:15:35.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a escalation of privileges via the TTMultiProvider component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whoapp:who:1.0.28:*:*:*:*:android:*:*",
            "matchCriteriaId" : "D65B4915-2010-4CE5-86B5-81AA1D5118A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whoapp:who:1.0.30:*:*:*:*:android:*:*",
            "matchCriteriaId" : "CF719AC2-12A1-415E-88C5-95E00E39C80A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whoapp:who:1.0.32:*:*:*:*:android:*:*",
            "matchCriteriaId" : "0D015EB8-A0C3-4B31-A735-31BC102B31D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27654/CVE%20detail.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.scorp.who",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.whoapp.live/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27654/CVE%20detail.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.scorp.who",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.whoapp.live/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29193",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-14T20:15:09.670",
      "lastModified" : "2024-11-21T07:56:41.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions. The `spicedb serve` command contains a flag named `--grpc-preshared-key` which is used to protect the gRPC API from being accessed by unauthorized requests. The values of this flag are to be considered sensitive, secret data. The `/debug/pprof/cmdline` endpoint served by the metrics service (defaulting running on port `9090`) reveals the command-line flags provided for debugging purposes. If a password is set via the `--grpc-preshared-key` then the key is revealed by this endpoint along with any other flags provided to the SpiceDB binary. This issue has been fixed in version 1.19.1.\n\n### Impact\n\nAll deployments abiding by the recommended best practices for production usage are **NOT affected**:\n- Authzed's SpiceDB Serverless\n- Authzed's SpiceDB Dedicated\n- SpiceDB Operator\n\nUsers configuring SpiceDB via environment variables are **NOT affected**.\n\nUsers **MAY be affected** if they expose their metrics port to an untrusted network and are configuring `--grpc-preshared-key` via command-line flag.\n\n### Patches\n\nTODO\n\n### Workarounds\n\nTo workaround this issue you can do one of the following:\n\n- Configure the preshared key via an environment variable (e.g. `SPICEDB_GRPC_PRESHARED_KEY=yoursecret spicedb serve`)\n- Reconfigure the `--metrics-addr` flag to bind to a trusted network (e.g. `--metrics-addr=localhost:9090`)\n- Disable the metrics service via the flag (e.g. `--metrics-enabled=false`)\n- Adopt one of the recommended deployment models: [Authzed's managed services](https://authzed.com/pricing) or the [SpiceDB Operator](https://github.com/authzed/spicedb-operator)\n\n### References\n\n- [GitHub Security Advisory issued for SpiceDB](https://github.com/authzed/spicedb/security/advisories/GHSA-cjr9-mr35-7xh6)\n- [Go issue #22085](https://github.com/golang/go/issues/22085) for documenting the risks of exposing pprof to the internet\n- [Go issue #42834](https://github.com/golang/go/issues/42834) discusses preventing pprof registration to the default serve mux\n- [semgrep rule go.lang.security.audit.net.pprof.pprof-debug-exposure](https://semgrep.dev/r?q=go.lang.security.audit.net.pprof) checks for a variation of this issue\n\n### Credit\n\nWe'd like to thank Amit Laish, a security researcher at GE Vernova for responsibly disclosing this vulnerability.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:authzed:spicedb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.1",
            "matchCriteriaId" : "2A4C3AFF-BFA8-4CDD-8429-BAE623029B9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/authzed/spicedb/commit/9bbd7d76b6eaba33fe0236014f9b175d21232999",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/authzed/spicedb/releases/tag/v1.19.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/authzed/spicedb/security/advisories/GHSA-cjr9-mr35-7xh6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/authzed/spicedb/commit/9bbd7d76b6eaba33fe0236014f9b175d21232999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/authzed/spicedb/releases/tag/v1.19.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/authzed/spicedb/security/advisories/GHSA-cjr9-mr35-7xh6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2074",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T20:15:09.733",
      "lastModified" : "2026-03-17T19:58:07.250",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Online Traffic Offense Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226052."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:online_traffic_offense_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F40AD4-1B6E-45D9-B517-38C7995BC5B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Traffic%20Offense%20Management%20System/Online%20Traffic%20Offense%20Management%20System%20-%20vuln%202.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226052",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226052",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Traffic%20Offense%20Management%20System/Online%20Traffic%20Offense%20Management%20System%20-%20vuln%202.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2075",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T20:15:09.790",
      "lastModified" : "2026-03-17T19:59:11.420",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Campcodes Online Traffic Offense Management System 1.0. This affects an unknown part of the file /admin/offenses/view_details.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226053 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:online_traffic_offense_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F40AD4-1B6E-45D9-B517-38C7995BC5B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Traffic%20Offense%20Management%20System/Online%20Traffic%20Offense%20Management%20System%20-%20vuln%203.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226053",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226053",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Traffic%20Offense%20Management%20System/Online%20Traffic%20Offense%20Management%20System%20-%20vuln%203.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2076",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T20:15:09.840",
      "lastModified" : "2026-03-17T19:57:42.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in Campcodes Online Traffic Offense Management System 1.0. This vulnerability affects unknown code of the file /classes/Users.phpp. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-226054 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:online_traffic_offense_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F40AD4-1B6E-45D9-B517-38C7995BC5B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Traffic%20Offense%20Management%20System/Online%20Traffic%20Offense%20Management%20System%20-%20vuln%204.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226054",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226054",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Traffic%20Offense%20Management%20System/Online%20Traffic%20Offense%20Management%20System%20-%20vuln%204.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2077",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-14T20:15:09.897",
      "lastModified" : "2026-03-17T19:58:31.617",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in Campcodes Online Traffic Offense Management System 1.0. This issue affects some unknown processing of the file /admin/offenses/view_details.php. The manipulation of the argument id leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226055."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:campcodes:online_traffic_offense_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F40AD4-1B6E-45D9-B517-38C7995BC5B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Traffic%20Offense%20Management%20System/Online%20Traffic%20Offense%20Management%20System%20-%20vuln%205.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226055",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226055",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Traffic%20Offense%20Management%20System/Online%20Traffic%20Offense%20Management%20System%20-%20vuln%205.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30535",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-14T20:15:09.963",
      "lastModified" : "2024-11-21T08:00:22.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Users of the Snowflake JDBC driver were vulnerable to a command injection vulnerability. An attacker could set up a malicious, publicly accessible server which responds to the SSO URL with an attack payload. If the attacker then tricked a user into visiting the maliciously crafted connection URL, the user’s local machine would render the malicious payload, leading to a remote code execution. The vulnerability was patched on March 17, 2023 as part of Snowflake JDBC driver Version 3.13.29. All users should immediately upgrade the Snowflake JDBC driver to the latest version: 3.13.29."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snowflake:snowflake_jdbc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.13.29",
            "matchCriteriaId" : "2C12185B-14E0-42E1-8801-81139230AD2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.snowflake.com/s/article/JDBC-Driver-Release-Notes",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/snowflakedb/snowflake-jdbc/security/advisories/GHSA-4g3j-c4wg-6j7x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.snowflake.com/s/article/JDBC-Driver-Release-Notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/snowflakedb/snowflake-jdbc/security/advisories/GHSA-4g3j-c4wg-6j7x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T21:15:08.153",
      "lastModified" : "2025-02-07T22:15:11.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web conferencing component of Mitel MiCollab through 9.6.2.9 could allow an unauthenticated attacker to download a shared file via a crafted request - including the exact path and filename - due to improper authentication control. A successful exploit could allow access to sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitel:micollab:*:*:*:*:*:-:*:*",
            "versionEndExcluding" : "9.7",
            "matchCriteriaId" : "FF74B19D-40E1-483C-A558-7F867B48B6A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0002",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T21:15:08.193",
      "lastModified" : "2025-02-07T21:15:11.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP status line."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2E6EE0-4271-43A3-9439-49F332D1FE1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9B26D9-AA50-4652-AFC0-A6AC966B4770"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFB4DF2-B55C-45BD-9073-56299E19B6DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5954D95-E12B-487D-9744-361566788A2D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_9110_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1896BFF-D709-481B-AD4F-37D1A8B30C06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_9110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6748EF2-3C63-41CD-B3D1-4B3FEC614B40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172288/Shannon-Baseband-SIP-Status-Line-Stack-Buffer-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172288/Shannon-Baseband-SIP-Status-Line-Stack-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29086",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T21:15:08.243",
      "lastModified" : "2025-02-07T21:15:11.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP Min-SE header."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2E6EE0-4271-43A3-9439-49F332D1FE1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9B26D9-AA50-4652-AFC0-A6AC966B4770"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFB4DF2-B55C-45BD-9073-56299E19B6DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5954D95-E12B-487D-9744-361566788A2D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_9110_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1896BFF-D709-481B-AD4F-37D1A8B30C06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_9110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6748EF2-3C63-41CD-B3D1-4B3FEC614B40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172293/Shannon-Baseband-SIP-Min-SE-Header-Stack-Buffer-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172293/Shannon-Baseband-SIP-Min-SE-Header-Stack-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29087",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T21:15:08.293",
      "lastModified" : "2025-02-07T15:15:16.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP Retry-After header."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2E6EE0-4271-43A3-9439-49F332D1FE1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9B26D9-AA50-4652-AFC0-A6AC966B4770"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFB4DF2-B55C-45BD-9073-56299E19B6DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5954D95-E12B-487D-9744-361566788A2D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_9110_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1896BFF-D709-481B-AD4F-37D1A8B30C06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_9110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6748EF2-3C63-41CD-B3D1-4B3FEC614B40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172295/Shannon-Baseband-SIP-Retry-After-Header-Heap-Buffer-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172295/Shannon-Baseband-SIP-Retry-After-Header-Heap-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T21:15:08.337",
      "lastModified" : "2025-02-07T15:15:16.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP Session-Expires header."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2E6EE0-4271-43A3-9439-49F332D1FE1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9B26D9-AA50-4652-AFC0-A6AC966B4770"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFB4DF2-B55C-45BD-9073-56299E19B6DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5954D95-E12B-487D-9744-361566788A2D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_9110_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1896BFF-D709-481B-AD4F-37D1A8B30C06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_9110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6748EF2-3C63-41CD-B3D1-4B3FEC614B40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172289/Shannon-Baseband-SIP-Session-Expires-Header-Stack-Buffer-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172289/Shannon-Baseband-SIP-Session-Expires-Header-Stack-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T21:15:08.400",
      "lastModified" : "2025-02-07T15:15:16.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding SIP multipart messages."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2E6EE0-4271-43A3-9439-49F332D1FE1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9B26D9-AA50-4652-AFC0-A6AC966B4770"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFB4DF2-B55C-45BD-9073-56299E19B6DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5954D95-E12B-487D-9744-361566788A2D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_9110_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1896BFF-D709-481B-AD4F-37D1A8B30C06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_9110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6748EF2-3C63-41CD-B3D1-4B3FEC614B40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172292/Shannon-Baseband-Negative-Size-Memcpy-Out-Of-Bounds-Read.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172292/Shannon-Baseband-Negative-Size-Memcpy-Out-Of-Bounds-Read.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T21:15:08.447",
      "lastModified" : "2025-02-07T15:15:16.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP Via header."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2E6EE0-4271-43A3-9439-49F332D1FE1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9B26D9-AA50-4652-AFC0-A6AC966B4770"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFB4DF2-B55C-45BD-9073-56299E19B6DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5954D95-E12B-487D-9744-361566788A2D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_9110_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1896BFF-D709-481B-AD4F-37D1A8B30C06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_9110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6748EF2-3C63-41CD-B3D1-4B3FEC614B40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172287/Shannon-Baseband-Via-Header-Decoder-Stack-Buffer-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172287/Shannon-Baseband-Via-Header-Decoder-Stack-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T21:15:08.493",
      "lastModified" : "2025-02-06T22:15:34.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP URI."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1173"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_5300_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2E6EE0-4271-43A3-9439-49F332D1FE1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9B26D9-AA50-4652-AFC0-A6AC966B4770"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFB4DF2-B55C-45BD-9073-56299E19B6DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5954D95-E12B-487D-9744-361566788A2D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_9110_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1896BFF-D709-481B-AD4F-37D1A8B30C06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_9110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6748EF2-3C63-41CD-B3D1-4B3FEC614B40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:exynos_auto_t5123_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F27BAE-A171-42BF-BAC5-90922780525A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_auto_t5123:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A1895B4-8B31-492E-B4D8-4DC5130C536A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172282/Shannon-Baseband-SIP-URI-Decoder-Stack-Buffer-Overflow.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172282/Shannon-Baseband-SIP-URI-Decoder-Stack-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2004",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-14T21:15:08.547",
      "lastModified" : "2023-11-07T04:11:40.947",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2008",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-14T21:15:08.597",
      "lastModified" : "2025-05-05T16:15:35.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.19",
            "matchCriteriaId" : "E74E9AF8-BDF5-4917-A9CA-0AAD8E13149B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.202",
            "matchCriteriaId" : "F90471AA-9F14-4DC3-9688-99E9F537D3F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.127",
            "matchCriteriaId" : "758A1E17-EBCF-401B-83C7-B682D38D61BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.51",
            "matchCriteriaId" : "B43F7696-8D52-482D-9080-84279B0CB38C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "5.18.8",
            "matchCriteriaId" : "0172D3FA-DDEB-482A-A270-4A1495A8798C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.19:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9D759CCF-9E1B-41B2-81AA-CB580C5F3EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8547FC-C849-4F1B-804B-A93AE2F04A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F3068028-F453-4A1C-B80F-3F5609ACEF60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2186862",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/05b252cccb2e5c3f56119d25de684b4f810ba4",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0007/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-441/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2186862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/05b252cccb2e5c3f56119d25de684b4f810ba4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-441/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24934",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-14T22:15:07.433",
      "lastModified" : "2024-11-21T07:48:47.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Defender Security Feature Bypass Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:malware_protection_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.18.2303.8",
            "matchCriteriaId" : "5CED330B-A74F-464A-8F49-722EA41968A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24934",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29383",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-14T22:15:07.680",
      "lastModified" : "2025-11-03T20:16:01.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shadow_project:shadow:4.13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B0C1D0-9CF5-451D-B3B3-750B64FD7575"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shadow-maint/shadow/commit/e5905c4b84d4fb90aefcd96ee618411ebfac663d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/shadow-maint/shadow/pull/687",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-29383-abusing-linux-chfn-to-misrepresent-etc-passwd/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=31797",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/shadow-maint/shadow/commit/e5905c4b84d4fb90aefcd96ee618411ebfac663d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/shadow-maint/shadow/pull/687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/04/msg00026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-29383-abusing-linux-chfn-to-misrepresent-etc-passwd/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=31797",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-15T00:15:07.487",
      "lastModified" : "2025-02-07T22:15:12.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named \"public\" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrusted client certificate during EAP-TLS. A server is affected only if it loads plugins that implement TLS-based EAP methods (EAP-TLS, EAP-TTLS, EAP-PEAP, or EAP-TNC). This is fixed in 5.9.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:5.9.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "482D37B7-BF04-40BB-B0BB-6DCA3F73BC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strongswan:strongswan:5.9.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F93C7004-3899-4267-BFF0-9171A9C905E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strongswan/strongswan/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0010/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.strongswan.org/blog/2023/03/02/strongswan-vulnerability-%28cve-2023-26463%29.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/strongswan/strongswan/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230517-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.strongswan.org/blog/2023/03/02/strongswan-vulnerability-%28cve-2023-26463%29.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-15T00:15:07.527",
      "lastModified" : "2025-02-10T16:15:34.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10. The troubleshooting_logs_download.php log file download functionality does not check the session cookie. Thus, an attacker can download all log files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:dg3450_firmware:ar01.02.056.18_041520_711.ncs.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2371D0A5-AC99-4CBD-B052-518272F2C45D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:dg3450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BED3D5-B845-4898-850D-29FF69A8E8E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec-consult.com/en/vulnerability-lab/advisories/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-arris-dg3450-cable-gateway/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://sec-consult.com/en/vulnerability-lab/advisories/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-arris-dg3450-cable-gateway/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-15T00:15:07.560",
      "lastModified" : "2025-02-10T16:15:34.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in CommScope Arris DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10. A reflected XSS vulnerability was discovered in the https_redirect.php web page via the page parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:commscope:dg3450_firmware:ar01.02.056.18_041520_711.ncs.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2371D0A5-AC99-4CBD-B052-518272F2C45D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:commscope:dg3450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BED3D5-B845-4898-850D-29FF69A8E8E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec-consult.com/en/vulnerability-lab/advisories/index.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-arris-dg3450-cable-gateway/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://sec-consult.com/en/vulnerability-lab/advisories/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-arris-dg3450-cable-gateway/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sec-consult.com/en/blog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-15T01:15:06.970",
      "lastModified" : "2025-05-05T16:15:29.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendesign:drawings_sdk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.6",
            "matchCriteriaId" : "178B0588-1D9B-408B-9612-BD50CA51E7CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-15T01:15:07.007",
      "lastModified" : "2025-05-05T16:15:29.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendesign:drawings_sdk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.6",
            "matchCriteriaId" : "178B0588-1D9B-408B-9612-BD50CA51E7CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-15T01:15:07.043",
      "lastModified" : "2024-11-21T07:48:13.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.15.13",
            "matchCriteriaId" : "82BC32FC-2B1F-4FD4-A368-DD37D7FCBA7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.2.8",
            "matchCriteriaId" : "4911A94E-AA2F-4017-8702-0AF092FF809F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.0",
            "versionEndExcluding" : "6.4.3",
            "matchCriteriaId" : "9DC66FEF-0D94-4464-B9F8-800A1F9424C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://codereview.qt-project.org/c/qt/qtbase/+/456216",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://codereview.qt-project.org/c/qt/tqtc-qtbase/+/456217",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://codereview.qt-project.org/c/qt/tqtc-qtbase/+/456238",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://download.qt.io/official_releases/qt/5.15/CVE-2023-24607-qtbase-5.15.diff",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/qt/qtbase/commit/aaf1381eab6292aa0444a5eadcc24165b6e1c02d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.qt.io/blog/security-advisory-qt-sql-odbc-driver-plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.qt.io/blog/tag/security",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://codereview.qt-project.org/c/qt/qtbase/+/456216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://codereview.qt-project.org/c/qt/tqtc-qtbase/+/456217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://codereview.qt-project.org/c/qt/tqtc-qtbase/+/456238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://download.qt.io/official_releases/qt/5.15/CVE-2023-24607-qtbase-5.15.diff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/qt/qtbase/commit/aaf1381eab6292aa0444a5eadcc24165b6e1c02d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.qt.io/blog/security-advisory-qt-sql-odbc-driver-plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.qt.io/blog/tag/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2027",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-15T08:15:07.397",
      "lastModified" : "2026-04-08T19:18:10.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ZM Ajax Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.2. This is due to insufficient verification on the user being supplied during a Facebook login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zm_ajax_login_\\&_register_project:zm_ajax_login_\\&_register:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "4444117E-3CB8-4E93-991F-D2786B4B2A19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/zm-ajax-login-register/trunk/src/ALRSocial/ALRSocialFacebook.php#L58",
        "source" : "security@wordfence.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b10d01ec-54ef-456b-9410-ed013343a962?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/zm-ajax-login-register/trunk/src/ALRSocial/ALRSocialFacebook.php#L58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/b10d01ec-54ef-456b-9410-ed013343a962?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2089",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-15T08:15:07.603",
      "lastModified" : "2024-11-21T07:57:54.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/userprofile.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226097 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:complaint_management_system_project:complaint_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FB2709-4441-4348-A5AB-C7257108803E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/winkle175/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226097",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226097",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/winkle175/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2090",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-15T09:15:07.143",
      "lastModified" : "2024-11-21T07:57:55.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is an unknown function of the file /admin/maintenance/view_designation.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-226098 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:employee_and_visitor_gate_pass_logging_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E79823D1-656B-47ED-B919-817CF98B423B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/4O4NtFd/bug_report/blob/main/SQLI1/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226098",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226098",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/4O4NtFd/bug_report/blob/main/SQLI1/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2091",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-15T09:15:07.683",
      "lastModified" : "2024-11-21T07:57:55.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function adjust_cpufreq_scaling_governer. The manipulation leads to os command injection. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.4.13 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-226099."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 6.8,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kylinos:youker-assistant:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.4.13",
            "matchCriteriaId" : "29073978-F5AD-4818-9773-1C4D6E56461D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/i900008/vulndb/blob/main/youker-assistant_vuln.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kylinos.cn/support/loophole/patch/3375.html",
        "source" : "cna@vuldb.com"
      }, {
        "url" : "https://vuldb.com/?ctiid.226099",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226099",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/i900008/vulndb/blob/main/youker-assistant_vuln.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kylinos.cn/support/loophole/patch/3375.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://vuldb.com/?ctiid.226099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2092",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-15T10:15:07.023",
      "lastModified" : "2024-11-21T07:57:55.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Vehicle Service Management System 1.0. Affected by this issue is some unknown functionality of the file view_service.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226100."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vehicle_service_management_system_project:vehicle_service_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71872FF-70AC-422D-9FA4-3EB30246660F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%201.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226100",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226100",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%201.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2093",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-15T10:15:07.087",
      "lastModified" : "2024-11-21T07:57:55.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226101 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vehicle_service_management_system_project:vehicle_service_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71872FF-70AC-422D-9FA4-3EB30246660F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%202.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226101",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226101",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%202.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2094",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-15T11:15:06.843",
      "lastModified" : "2025-09-30T14:07:13.837",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Vehicle Service Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/mechanics/manage_mechanic.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-226102 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:vehicle_service_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49085F69-097C-4C7A-A470-9B946EBE8123"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%203.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226102",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.226102",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%203.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.226102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2095",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-15T11:15:06.910",
      "lastModified" : "2024-11-21T07:57:55.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Vehicle Service Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/maintenance/manage_category.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226103."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vehicle_service_management_system_project:vehicle_service_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71872FF-70AC-422D-9FA4-3EB30246660F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%204.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226103",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226103",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%204.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2096",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-15T11:15:06.967",
      "lastModified" : "2024-11-21T07:57:55.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/service_requests/manage_inventory.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226104."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vehicle_service_management_system_project:vehicle_service_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71872FF-70AC-422D-9FA4-3EB30246660F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%205.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226104",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226104",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%205.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2097",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-15T12:15:07.277",
      "lastModified" : "2024-11-21T07:57:55.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226105 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vehicle_service_management_system_project:vehicle_service_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71872FF-70AC-422D-9FA4-3EB30246660F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%206.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226105",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226105",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%206.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2098",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-15T12:15:07.337",
      "lastModified" : "2024-11-21T07:57:56.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /inc/topBarNav.php. The manipulation of the argument search leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-226106 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:vehicle_service_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49085F69-097C-4C7A-A470-9B946EBE8123"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%207.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226106",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226106",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%207.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2099",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-15T12:15:07.400",
      "lastModified" : "2024-11-21T07:57:56.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226107."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vehicle_service_management_system_project:vehicle_service_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B71872FF-70AC-422D-9FA4-3EB30246660F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%208.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226107",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226107",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%208.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2100",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-15T13:15:45.033",
      "lastModified" : "2024-11-21T07:57:56.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in SourceCodester Vehicle Service Management System 1.0. This vulnerability affects unknown code of the file /admin/report/index.php. The manipulation of the argument date_end leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226108."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:vehicle_service_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49085F69-097C-4C7A-A470-9B946EBE8123"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%209.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226108",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226108",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%209.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2101",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-15T13:15:45.083",
      "lastModified" : "2024-11-21T07:57:56.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up to 5.2. This issue affects the function uploadPictureByUrl of the file /mogu-picture/file/uploadPicsByUrl. The manipulation of the argument urlList leads to absolute path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226109 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-36"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mogublog_project:mogublog:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2",
            "matchCriteriaId" : "A6BBC198-704E-4815-A027-17BDF2902A11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/c3p0ooo-Yiqiyin/mogu_blog_v2/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moxi624/mogu_blog_v2/issues/97",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226109",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226109",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/c3p0ooo-Yiqiyin/mogu_blog_v2/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moxi624/mogu_blog_v2/issues/97",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2102",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-15T13:15:45.140",
      "lastModified" : "2025-02-06T16:15:36.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyappointments:easyappointments:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "063BC3E9-AA71-49D6-9CEE-F2E7E7B9D687"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alextselegidis/easyappointments/commit/bddc5cbeb7ff237a72943b304dcb01c653781767",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/dd7c04a7-a984-4387-9ac4-24596e7ece44",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alextselegidis/easyappointments/commit/bddc5cbeb7ff237a72943b304dcb01c653781767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/dd7c04a7-a984-4387-9ac4-24596e7ece44",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2103",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-15T14:15:07.587",
      "lastModified" : "2025-02-06T16:15:36.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyappointments:easyappointments:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "063BC3E9-AA71-49D6-9CEE-F2E7E7B9D687"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alextselegidis/easyappointments/commit/46a865300e94c7031cc0e315d95d3e3e56768498",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/1df09505-9923-43b9-82ef-15d94bc3f9dc",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alextselegidis/easyappointments/commit/46a865300e94c7031cc0e315d95d3e3e56768498",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/1df09505-9923-43b9-82ef-15d94bc3f9dc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2104",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-15T14:15:07.650",
      "lastModified" : "2025-02-06T16:15:36.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyappointments:easyappointments:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "063BC3E9-AA71-49D6-9CEE-F2E7E7B9D687"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alextselegidis/easyappointments/commit/75b24735767868344193fb2cc56e17ee4b9ac4be",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3099b8d1-c49c-41b8-a929-73ccded6fc7c",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alextselegidis/easyappointments/commit/75b24735767868344193fb2cc56e17ee4b9ac4be",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3099b8d1-c49c-41b8-a929-73ccded6fc7c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2105",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-15T14:15:07.703",
      "lastModified" : "2025-02-06T16:15:36.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easyappointments:easyappointments:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "063BC3E9-AA71-49D6-9CEE-F2E7E7B9D687"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alextselegidis/easyappointments/commit/7f37350fab9d729a9350d96369ff0f453cf7b840",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/de213e0b-a227-4fc3-bbe7-0b33fbf308e1",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alextselegidis/easyappointments/commit/7f37350fab9d729a9350d96369ff0f453cf7b840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/de213e0b-a227-4fc3-bbe7-0b33fbf308e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2106",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-15T14:15:07.760",
      "lastModified" : "2025-02-06T16:15:36.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Weak Password Requirements in GitHub repository janeczku/calibre-web prior to 0.6.20."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:janeczku:calibre-web:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.20",
            "matchCriteriaId" : "4CFCBA02-FCF2-4465-85CC-2A0E784C49D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/janeczku/calibre-web/commit/49e4f540c9b204c7e39b3c27ceadecd83ed60e7e",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/c3d5c647-7557-40a9-aee4-24dc14882781",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/janeczku/calibre-web/commit/49e4f540c9b204c7e39b3c27ceadecd83ed60e7e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/c3d5c647-7557-40a9-aee4-24dc14882781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2107",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-15T14:15:07.833",
      "lastModified" : "2024-11-21T07:57:57.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in IBOS 4.5.5. Affected is an unknown function of the file file/personal/del&op=recycle. The manipulation of the argument fids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-226110 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibos:ibos:4.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F678D76-48AA-4940-833F-5567D196DB7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MuRKuo/cve/blob/main/ibos%20oa%20sql.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226110",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226110",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MuRKuo/cve/blob/main/ibos%20oa%20sql.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29201",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-15T15:15:08.273",
      "lastModified" : "2024-11-21T07:56:42.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. The \"restricted\" mode of the HTML cleaner in XWiki, introduced in version 4.2-milestone-1, only escaped `<script>` and `<style>`-tags but neither attributes that can be used to inject scripts nor other dangerous HTML tags like `<iframe>`. As a consequence, any code relying on this \"restricted\" mode for security is vulnerable to JavaScript injection (\"cross-site scripting\"/XSS). When a privileged user with programming rights visits such a comment in XWiki, the malicious JavaScript code is executed in the context of the user session. This allows server-side code execution with programming rights, impacting the confidentiality, integrity and availability of the XWiki instance. This problem has been patched in XWiki 14.6 RC1 with the introduction of a filter with allowed HTML elements and attributes that is enabled in restricted mode. There are no known workarounds apart from upgrading to a version including the fix."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "14.5",
            "matchCriteriaId" : "390AF8A6-6EE7-44CA-8328-BD80FC08B565"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-commons/commit/4a185e0594d90cd4916d60aa60bb4333dc5623b2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-commons/commit/b11eae9d82cb53f32962056b5faa73f3720c6182",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-commons/security/advisories/GHSA-m3jr-cvhj-f35j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XCOMMONS-1680",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XCOMMONS-2426",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-9118",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-commons/commit/4a185e0594d90cd4916d60aa60bb4333dc5623b2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-commons/commit/b11eae9d82cb53f32962056b5faa73f3720c6182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-commons/security/advisories/GHSA-m3jr-cvhj-f35j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XCOMMONS-1680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XCOMMONS-2426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-9118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29202",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-15T15:15:08.353",
      "lastModified" : "2024-11-21T07:56:42.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. The RSS macro that is bundled in XWiki included the content of the feed items without any cleaning in the HTML output when the parameter `content` was set to `true`. This allowed arbitrary HTML and in particular also JavaScript injection and thus cross-site scripting (XSS) by specifying an RSS feed with malicious content. With the interaction of a user with programming rights, this could be used to execute arbitrary actions in the wiki, including privilege escalation, remote code execution, information disclosure, modifying or deleting content and sabotaging the wiki. The issue has been patched in XWiki 14.6 RC1, the content of the feed is now properly cleaned before being displayed. As a workaround, if the RSS macro isn't used in the wiki, the macro can be uninstalled by deleting `WEB-INF/lib/xwiki-platform-rendering-macro-rss-XX.jar`, where `XX` is XWiki's version, in the web application's directory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "1.8",
            "versionEndIncluding" : "14.5",
            "matchCriteriaId" : "6955228E-9DE6-40AF-858D-4C580A389125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:1.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E64DCC-5AC5-45EF-9865-B2C36644E503"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:1.8:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "81943BD1-9ECF-4C79-A90F-DC6ADE6B537B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:1.8:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "79C9484C-4F79-4168-8E9E-091B8730AF02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/5c7ebe47c2897e92d8f04fe2e15027e84dc3ec03",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-c885-89fw-55qr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19671",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/5c7ebe47c2897e92d8f04fe2e15027e84dc3ec03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-c885-89fw-55qr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29203",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-15T16:15:07.063",
      "lastModified" : "2024-11-21T07:56:42.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. It's possible to list some users who are normally not viewable from subwiki by requesting users on a subwiki which allows only global users with `uorgsuggest.vm`. This issue only concerns hidden users from main wiki. Note that the disclosed information are the username and the first and last name of users, no other information is leaked. The problem has been patched on XWiki 13.10.8, 14.4.3 and 14.7RC1. \n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-359"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.9",
            "versionEndExcluding" : "13.10.8",
            "matchCriteriaId" : "212154EE-E740-4FA0-A80A-0AF819B04265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.4.0",
            "versionEndExcluding" : "14.4.3",
            "matchCriteriaId" : "E7B65052-6E2D-43CB-A3BE-8FD7ACEA203D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndIncluding" : "14.6",
            "matchCriteriaId" : "3EF87600-9CF9-4F5A-8B49-CF3F015D03EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:13.9:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A9FE5D-CD8A-4A44-89D4-466C1964F5BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/pull/1883",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vvp7-r422-rx83",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20007",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/pull/1883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vvp7-r422-rx83",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29204",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-15T16:15:07.147",
      "lastModified" : "2024-11-21T07:56:42.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measures put in place to avoid open redirect by using a redirect such as `//mydomain.com` (i.e. omitting the `http:`). It was also possible to bypass it when using URL such as `http:/mydomain.com`. The problem has been patched on XWiki 13.10.10, 14.4.4 and 14.8RC1.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "13.10.10",
            "matchCriteriaId" : "FBF07EE2-1901-4F21-84BB-BCA087436E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.4.0",
            "versionEndExcluding" : "14.4.4",
            "matchCriteriaId" : "D7C557A9-7B22-40C8-BECE-CE54ECE59727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndIncluding" : "14.7",
            "matchCriteriaId" : "50228E20-0C74-454C-A331-2240EBE077A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:6.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B3CF587-6FE5-4404-BC81-CD6DE7F3442A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/e4f7f68e93cb08c25632c126356d218abf192d1e#diff-c445f288d5d63424f56ef13f65514ab4e174a72e979b53b88197c2b7def267cf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-xwph-x6xj-wggv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-10309",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19994",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/e4f7f68e93cb08c25632c126356d218abf192d1e#diff-c445f288d5d63424f56ef13f65514ab4e174a72e979b53b88197c2b7def267cf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-xwph-x6xj-wggv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-10309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19994",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29205",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-15T16:15:07.210",
      "lastModified" : "2024-11-21T07:56:42.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. The HTML macro does not systematically perform a proper neutralization of script-related html tags. As a result, any user able to use the html macro in XWiki, is able to introduce an XSS attack. This can be particularly dangerous since in a standard wiki, any user is able to use the html macro directly in their own user profile page. The problem has been patched in XWiki 14.8RC1. The patch involves the HTML macros and are systematically cleaned up whenever the user does not have the script correct. \n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "14.7",
            "matchCriteriaId" : "12D40D03-2C8B-4954-A486-520404453799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vxf7-mx22-jr24",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-18568",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vxf7-mx22-jr24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-18568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29206",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-15T16:15:07.270",
      "lastModified" : "2024-11-21T07:56:42.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. There was no check in the author of a JavaScript xobject or StyleSheet xobject added in a XWiki document, so until now it was possible for a user having only Edit Right to create such object and to craft a script allowing to perform some operations when executing by a user with appropriate rights. This has been patched in XWiki 14.9-rc-1 by only executing the script if the author of it has Script rights."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "3.0",
            "versionEndIncluding" : "14.8",
            "matchCriteriaId" : "7C491502-CE8F-4A01-8896-2461BBDC3434"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:3.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B80CC851-2324-437A-B4A5-06A5EB2FE180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:3.0:milestone_2:*:*:*:*:*:*",
            "matchCriteriaId" : "F5F1C457-1591-4025-BD49-BABB9BA9762F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:3.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "A45A230D-909F-42D3-836D-95660805B094"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:3.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "6400CA62-5250-4BA5-A94B-7D529CDBE38E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/fe65bc35d5672dd2505b7ac4ec42aec57d500fbb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-cmvg-w72j-7phx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19514",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19583",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-9119",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Permissions Required" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/fe65bc35d5672dd2505b7ac4ec42aec57d500fbb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-cmvg-w72j-7phx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19514",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-9119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29207",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-15T16:15:07.327",
      "lastModified" : "2024-11-21T07:56:42.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : " XWiki Commons are technical libraries common to several other top level XWiki projects. The Livetable Macro wasn't properly sanitizing column names, thus allowing the insertion of raw HTML code including JavaScript. This vulnerability was also exploitable via the Documents Macro that is included since XWiki 3.5M1 and doesn't require script rights, this can be demonstrated with the syntax `{{documents id=\"example\" count=\"5\" actions=\"false\" columns=\"doc.title, before<script>alert(1)</script>after\"/}}`. Therefore, this can also be exploited by users without script right and in comments. With the interaction of a user with more rights, this could be used to execute arbitrary actions in the wiki, including privilege escalation, remote code execution, information disclosure, modifying or deleting content. This has been patched in XWiki 14.9, 14.4.6, and 13.10.10.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9",
            "versionEndExcluding" : "13.10.10",
            "matchCriteriaId" : "D3DCF379-9EAE-4F14-B5F8-5616135FE4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.6",
            "matchCriteriaId" : "4DC3E3FE-42E5-412F-AD0B-6E6531319461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.9",
            "matchCriteriaId" : "E0DE5CA5-2618-434D-854A-CDAB06A713E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:1.9:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2046BD-3879-44CB-AA45-362281759A12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/65ca06c51e7a1d5a579344c7272b2cc9a9a21126",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-6vgh-9r3c-2cxp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-15205",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/65ca06c51e7a1d5a579344c7272b2cc9a9a21126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-6vgh-9r3c-2cxp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-15205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29208",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-15T16:15:07.380",
      "lastModified" : "2024-11-21T07:56:43.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. Rights added to a document are not taken into account for viewing it once it's deleted. Note that this vulnerability only impact deleted documents that where containing view rights: the view rights provided on a space of a deleted document are properly checked. The problem has been patched in XWiki 14.10 by checking the rights of current user: only admin and deleter of the document are allowed to view it."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "FB7E83A5-F68B-487F-B235-9AA7BC32B4D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.4.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FC782E27-0FE5-48CE-B1E6-896F47ACB5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10",
            "matchCriteriaId" : "569EE28C-5C86-467F-A153-DD4B9BF0053D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/d9e947559077e947315bf700c5703dfc7dd8a8d7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-4f8g-fq6x-jqrr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-16285",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/d9e947559077e947315bf700c5703dfc7dd8a8d7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-4f8g-fq6x-jqrr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-16285",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29209",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-15T17:15:07.043",
      "lastModified" : "2024-11-21T07:56:43.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible documents including the legacy notification activity macro can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the macro parameters of the legacy notification activity macro. This macro is installed by default in XWiki. The vulnerability can be exploited via every wiki page that is editable including the user's profile, but also with just view rights using the HTMLConverter that is part of the CKEditor integration which is bundled with XWiki. The vulnerability has been patched in XWiki 13.10.11, 14.4.7 and 14.10.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.9",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "B4BEEE23-0521-4EBD-AFC9-6354F89B16FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.4.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FC782E27-0FE5-48CE-B1E6-896F47ACB5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.8",
            "versionEndExcluding" : "14.10",
            "matchCriteriaId" : "1149088C-CDCC-4CE3-BA92-56B038B6839A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/94392490884635c028199275db059a4f471e57bc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9pc2-x9qf-7j2q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20258",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/94392490884635c028199275db059a4f471e57bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9pc2-x9qf-7j2q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29210",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-15T17:15:07.113",
      "lastModified" : "2024-11-21T07:56:43.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible documents including the notification preferences macros can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the user parameter of the macro that provide the notification filters. These macros are used in the user profiles and thus installed by default in XWiki. The vulnerability has been patched in XWiki 13.10.11, 14.4.7 and 14.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.4.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FC782E27-0FE5-48CE-B1E6-896F47ACB5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC7DC4E-E9FD-407B-B95F-6CBD1B5E08E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/cebf9167e4fd64a8777781fc56461e9abbe0b32a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-p9mj-v5mf-m82x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20259",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/cebf9167e4fd64a8777781fc56461e9abbe0b32a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-p9mj-v5mf-m82x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-16T04:15:08.573",
      "lastModified" : "2025-05-05T16:15:39.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.9",
            "matchCriteriaId" : "9DB8D56A-80A7-46E9-A9BD-100B7446E81A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1210329",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=06615d11cc78162dfd5116efb71f29eb29502d37",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1210329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=06615d11cc78162dfd5116efb71f29eb29502d37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29211",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-16T07:15:52.873",
      "lastModified" : "2024-11-21T07:56:43.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights `WikiManager.DeleteWiki` can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the `wikiId` url parameter. The problem has been patched on XWiki  13.10.11, 14.4.7, and 14.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.4.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FC782E27-0FE5-48CE-B1E6-896F47ACB5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC7DC4E-E9FD-407B-B95F-6CBD1B5E08E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/ba4c76265b0b8a5e2218be400d18f08393fe1428#diff-64f39f5f2cc8c6560a44e21a5cfd509ef00e8a2157cd9847c9940a2e08ea43d1R63-R64",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-w7v9-fc49-4qg4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20297",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/ba4c76265b0b8a5e2218be400d18f08393fe1428#diff-64f39f5f2cc8c6560a44e21a5cfd509ef00e8a2157cd9847c9940a2e08ea43d1R63-R64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-w7v9-fc49-4qg4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29212",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-16T07:15:53.010",
      "lastModified" : "2024-11-21T07:56:43.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with edit rights can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the included pages in the included documents edit panel. The problem has been patched on XWiki 14.4.7, and 14.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FA3A5151-58FB-48CF-BFFB-5688608200C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC7DC4E-E9FD-407B-B95F-6CBD1B5E08E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/22f249a0eb9f2a64214628217e812a994419b69f#diff-a51a252f0190274464027342b4e3eafc4ae32de4d9c17ef166e54fc5454c5689R214-R217",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-c5f4-p5wv-2475",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20293",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/22f249a0eb9f2a64214628217e812a994419b69f#diff-a51a252f0190274464027342b4e3eafc4ae32de4d9c17ef166e54fc5454c5689R214-R217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-c5f4-p5wv-2475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29214",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-16T07:15:53.070",
      "lastModified" : "2024-11-21T07:56:43.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with edit rights can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the included pages in the IncludedDocuments panel. The problem has been patched on XWiki 14.4.7, and 14.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.4.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FC782E27-0FE5-48CE-B1E6-896F47ACB5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC7DC4E-E9FD-407B-B95F-6CBD1B5E08E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/50b4d91418b4150933f0317eb4a94ceaf5b69f67",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-qx9h-c5v6-ghqh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20306",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/50b4d91418b4150933f0317eb4a94ceaf5b69f67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-qx9h-c5v6-ghqh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29506",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-16T07:15:53.123",
      "lastModified" : "2024-11-21T07:57:11.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. It was possible to inject some code using the URL of authenticated endpoints. This problem has been patched on XWiki 13.10.11, 14.4.7 and 14.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.10.8",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "516F12E7-D5E3-4F83-A912-A03EDE466BB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.4.3",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "A72B5F6F-9165-44C9-BD7D-F3EC62867BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BFB8F4B-1392-445B-8FD8-5EFE2D2DDFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC7DC4E-E9FD-407B-B95F-6CBD1B5E08E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/1943ea26c967ef868fb5f67c487d98d97cba0380",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-jjm5-5v9v-7hx2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20335",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/1943ea26c967ef868fb5f67c487d98d97cba0380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-jjm5-5v9v-7hx2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29507",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-16T07:15:53.187",
      "lastModified" : "2025-02-06T17:15:16.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. The Document script API returns directly a DocumentAuthors allowing to set any authors to the document, which in consequence can allow subsequent executions of scripts since this author is used for checking rights. The problem has been patched in XWiki 14.10 and 14.4.7 by returning a safe script API."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-648"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.4.1",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "0E89251D-0CDC-4A0E-AB27-99063F6660B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC7DC4E-E9FD-407B-B95F-6CBD1B5E08E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/905cdd7c421dbf8c565557cdc773ab1aa9028f83",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-pwfv-3cvg-9m4c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20380",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/905cdd7c421dbf8c565557cdc773ab1aa9028f83",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-pwfv-3cvg-9m4c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20380",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27610",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-16T08:15:07.427",
      "lastModified" : "2024-11-21T07:53:15.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) SQL Injection (SQLi) vulnerability in TransbankDevelopers Transbank Webpay REST plugin <= 1.6.6 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:transbank:transbank_webpay_rest:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.6.6",
            "matchCriteriaId" : "8DC08489-261D-4644-A7AB-8A6B86F75790"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/transbank-webpay-plus-rest/wordpress-transbank-webpay-rest-plugin-1-6-7-admin-sql-injection-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/transbank-webpay-plus-rest/wordpress-transbank-webpay-rest-plugin-1-6-7-admin-sql-injection-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29508",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-16T08:15:07.513",
      "lastModified" : "2025-04-11T14:50:31.367",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. A user without script rights can introduce a stored XSS by using the Live Data macro, if the last author of the content of the page has script rights. This has been patched in XWiki 14.10, 14.4.7, and 13.10.11.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.4.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FC782E27-0FE5-48CE-B1E6-896F47ACB5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC7DC4E-E9FD-407B-B95F-6CBD1B5E08E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-hmm7-6ph9-8jf2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20312",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-hmm7-6ph9-8jf2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-hmm7-6ph9-8jf2",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20312",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29509",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-16T08:15:07.577",
      "lastModified" : "2024-11-21T07:57:12.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible documents can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the `documentTree` macro parameters in  This macro is installed by default in `FlamingoThemesCode.WebHome`. This page is installed by default. The vulnerability has been patched in XWiki 13.10.11, 14.4.7 and 14.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.4.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FC782E27-0FE5-48CE-B1E6-896F47ACB5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.10:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC7DC4E-E9FD-407B-B95F-6CBD1B5E08E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/80d5be36f700adcd56b6c8eb3ed8b973f62ec0ae",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-f4v8-58f6-mwj4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20279",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/80d5be36f700adcd56b6c8eb3ed8b973f62ec0ae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-f4v8-58f6-mwj4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20279",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29511",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-16T08:15:07.630",
      "lastModified" : "2024-11-21T07:57:12.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on a page (e.g., it's own user page), can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the section ids in `XWiki.AdminFieldsDisplaySheet`. This page is installed by default. The vulnerability has been patched in XWiki versions 15.0-rc-1, 14.10.1, 14.4.8, and 13.10.11."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "1B5803AD-435C-4C3A-B7E9-5FD24D3349C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "14.0",
            "versionEndExcluding" : "14.4.8",
            "matchCriteriaId" : "B82FC6CF-7191-4609-A74C-AD5C08E5CA6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10.1",
            "matchCriteriaId" : "A0694EEC-0251-47D7-A062-7C257C408225"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D1779BB7-C939-433A-BA96-EDD1A8C31AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F79D59-2C67-4875-B50F-F2ECE52B384C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/f1e310826a19acdcdecdecdcfe171d21f24d6ede",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rfh6-mg6h-h668",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20261",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/f1e310826a19acdcdecdecdcfe171d21f24d6ede",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rfh6-mg6h-h668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2108",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-16T08:15:07.687",
      "lastModified" : "2024-11-21T07:57:57.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Judging Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file edit_contestant.php. The manipulation of the argument contestant_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226147."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:judging_management_system_project:judging_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE693B0-3497-406C-AD53-36AC05735004"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hackerzyq/mycve/blob/main/vendors/oretnom23/judging-management-system/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226147",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226147",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hackerzyq/mycve/blob/main/vendors/oretnom23/judging-management-system/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30474",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-16T08:15:07.757",
      "lastModified" : "2024-11-21T08:00:15.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Kilian Evang Ultimate Noindex Nofollow Tool II plugin <= 1.3 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_noindex_nofollow_tool_ii_project:ultimate_noindex_nofollow_tool_ii:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "94559C17-C6CB-40DA-B8D6-E90EE806804D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/ultimate-noindex-nofollow-tool-ii/wordpress-ultimate-noindex-nofollow-tool-ii-plugin-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/ultimate-noindex-nofollow-tool-ii/wordpress-ultimate-noindex-nofollow-tool-ii-plugin-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30537",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-16T08:15:07.817",
      "lastModified" : "2024-11-21T08:00:22.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with the right to add an object on a page can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the styles properties `FlamingoThemesCode.WebHome`. This page is installed by default. The vulnerability has been patched in XWiki versions 13.10.11, 14.4.7 and 14.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.6.6",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "913312A4-C37E-44E1-BEA4-58F52E260D95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "FA3A5151-58FB-48CF-BFFB-5688608200C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10",
            "matchCriteriaId" : "569EE28C-5C86-467F-A153-DD4B9BF0053D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/df596f15368342236f8899ca122af8f3df0fe2e8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vrr8-fp7c-7qgp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20280",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/df596f15368342236f8899ca122af8f3df0fe2e8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vrr8-fp7c-7qgp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30542",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-16T08:15:07.867",
      "lastModified" : "2024-11-21T08:00:23.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenZeppelin Contracts is a library for secure smart contract development. The proposal creation entrypoint (`propose`) in `GovernorCompatibilityBravo` allows the creation of proposals with a `signatures` array shorter than the `calldatas` array. This causes the additional elements of the latter to be ignored, and if the proposal succeeds the corresponding actions would eventually execute without any calldata. The `ProposalCreated` event correctly represents what will eventually execute, but the proposal parameters as queried through `getActions` appear to respect the original intended calldata. This issue has been patched in 4.8.3. As a workaround, ensure that all proposals that pass through governance have equal length `signatures` and `calldatas` parameters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openzeppelin:contracts:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndExcluding" : "4.8.3",
            "matchCriteriaId" : "411C30F2-953A-46C1-B290-F73D73742342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openzeppelin:contracts_upgradeable:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndExcluding" : "4.8.3",
            "matchCriteriaId" : "DE759E37-EAC7-4CDA-9AB1-0703E9398214"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-93hq-5wgc-jc82",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-93hq-5wgc-jc82",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22687",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-16T09:15:08.763",
      "lastModified" : "2024-11-21T07:45:13.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure Storage of Sensitive Information vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup plugin <= 1.9.4.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freesoul_deactivate_plugins_-_plugin_manager_and_cleanup_project:freesoul_deactivate_plugins_-_plugin_manager_and_cleanup:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.9.4.0",
            "matchCriteriaId" : "EF4E5CF9-1257-4AD8-B744-2CD6F7201D94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/freesoul-deactivate-plugins/wordpress-freesoul-deactivate-plugins-plugin-manager-and-cleanup-plugin-1-9-4-0-content-spoofing?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/freesoul-deactivate-plugins/wordpress-freesoul-deactivate-plugins-plugin-manager-and-cleanup-plugin-1-9-4-0-content-spoofing?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2109",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-17T01:15:06.837",
      "lastModified" : "2024-11-21T07:57:57.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.14.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chatwoot:chatwoot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.14.0",
            "matchCriteriaId" : "F819DC26-7449-451B-AA33-76B0DB9741CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chatwoot/chatwoot/commit/a06a5a574ad908b0ef2db7b47d05c3774eeb493d",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/fd5999fd-b1fd-44b4-ae2e-8f95b5c3d1b6",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chatwoot/chatwoot/commit/a06a5a574ad908b0ef2db7b47d05c3774eeb493d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/fd5999fd-b1fd-44b4-ae2e-8f95b5c3d1b6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24831",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-17T07:15:07.640",
      "lastModified" : "2024-11-21T07:48:28.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3.\n\nAttackers could login without authorization. This is fixed in 0.13.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:iotdb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.13.0",
            "versionEndIncluding" : "0.13.3",
            "matchCriteriaId" : "C5714888-09FF-447A-A4E8-056E43929606"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/3dgvzgstycf8b5hyf4z3n7cqdhcyln3l",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/3dgvzgstycf8b5hyf4z3n7cqdhcyln3l",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30770",
      "sourceIdentifier" : "security@asustor.com",
      "published" : "2023-04-17T07:15:08.300",
      "lastModified" : "2024-11-21T08:00:52.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size validation. An attacker can exploit this vulnerability to execute arbitrary code. Affected ADM versions include: 4.0.6.REG2, 4.1.0 and below as well as 4.2.0.RE71 and below."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@asustor.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@asustor.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asustor:adm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0.rib4",
            "versionEndIncluding" : "4.0.6.reg2",
            "matchCriteriaId" : "405FA5F6-2C64-4ED6-ABB6-F2A20C3E3BFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asustor:adm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0.rhu2",
            "versionEndExcluding" : "4.2.1.rge2",
            "matchCriteriaId" : "D979C00B-026E-4EAF-8197-B1E689CFEC7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asustor.com/security/security_advisory_detail?id=21",
        "source" : "security@asustor.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asustor.com/security/security_advisory_detail?id=21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1109",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2023-04-17T08:15:07.627",
      "lastModified" : "2024-11-21T07:38:28.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@cert.vde.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@cert.vde.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phoenixcontact:energy_axc_pu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "01.00.00.00",
            "versionEndIncluding" : "04.15.00.00",
            "matchCriteriaId" : "667B7404-4720-41E5-B815-9EB2376566D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:infobox_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "01.00.00.00",
            "versionEndIncluding" : "02.02.00.00",
            "matchCriteriaId" : "1BA39C5A-B6BF-49D9-AAEC-FB38478BAB9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:infobox:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA377FD-320C-4479-A34F-297ADF792DC1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:smartrtu_axc_sg_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "01.00.00.00",
            "versionEndIncluding" : "01.08.00.02",
            "matchCriteriaId" : "7191A320-C13F-45C2-8CC1-1EDF5998DCAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:smartrtu_axc_sg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "195DA1AA-4D07-4BBC-BA68-88399717FDEB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:phoenixcontact:smartrtu_axc_ig_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "01.00.00.00",
            "versionEndIncluding" : "01.02.00.01",
            "matchCriteriaId" : "37C85EE7-1CBB-4F62-9259-F9272F05155D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:phoenixcontact:smartrtu_axc_ig:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CAFD12-9630-4FB5-B802-19189B8E43C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert.vde.com/en/advisories/VDE-2023-003/",
        "source" : "info@cert.vde.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-w923-8w64-f5gh",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en/advisories/VDE-2023-003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22946",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-17T08:15:07.790",
      "lastModified" : "2024-11-21T07:45:41.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Spark versions prior to 3.4.0, applications using spark-submit can specify a 'proxy-user' to run as, limiting privileges. The application can execute code with the privileges of the submitting user, however, by providing malicious configuration-related classes on the classpath. This affects architectures relying on proxy-user, for example those using Apache Livy to manage submitted applications.\n\nUpdate to Apache Spark 3.4.0 or later, and ensure that \nspark.submit.proxyUser.allowCustomClasspathInClusterMode is set to its \ndefault of \"false\", and is not overridden by submitted applications.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:spark:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.0",
            "matchCriteriaId" : "E07052F3-5478-49EA-BF6F-25219955A29A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/yllfl25xh5tbotjmg93zrq4bzwhqc0gv",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/yllfl25xh5tbotjmg93zrq4bzwhqc0gv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30771",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-17T08:15:07.857",
      "lastModified" : "2025-02-13T17:16:25.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database.\n\nThis problem is fixed from version 0.13.4 of iotdb-web-workbench onwards."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:iotdb_web_workbench:0.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E39F78-DF04-4679-8CD3-02BAA3DB082B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/18/7",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread/08nc3dr6lshfppx0pzmz5vbggdnzpojb",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/18/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread/08nc3dr6lshfppx0pzmz5vbggdnzpojb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2017",
      "sourceIdentifier" : "info@starlabs.sg",
      "published" : "2023-04-17T11:15:42.160",
      "lastModified" : "2024-11-21T07:57:46.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server-side Template Injection (SSTI) in Shopware 6 (<= v6.4.20.0, v6.5.0.0-rc1 <= v6.5.0.0-rc4), affecting both shopware/core and shopware/platform GitHub repositories, allows remote attackers with access to a Twig environment without the Sandbox extension to bypass the validation checks in `Shopware\\Core\\Framework\\Adapter\\Twig\\SecurityExtension` and call any arbitrary PHP function and thus execute arbitrary code/commands via usage of fully-qualified names, supplied as array of strings, when referencing callables. Users are advised to upgrade to v6.4.20.1 to resolve this issue. This is a bypass of CVE-2023-22731.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@starlabs.sg",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@starlabs.sg",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        }, {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.0",
            "versionEndIncluding" : "6.4.20.0",
            "matchCriteriaId" : "8FB9ED1C-3438-4CFA-8C79-0AB0E493954D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:6.5.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "13452371-6436-4FC4-B535-B1064B3DA20A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:6.5.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "4B0D3A28-E2CF-499E-BD2B-8655E3F09791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopware:shopware:6.5.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2F1201D0-0621-4744-9D53-C0B8C5FE00D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-04-2023",
        "source" : "info@starlabs.sg",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/security/advisories/GHSA-7v2v-9rm4-7m8f",
        "source" : "info@starlabs.sg",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://starlabs.sg/advisories/23/23-2017/",
        "source" : "info@starlabs.sg",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-04-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shopware/platform/security/advisories/GHSA-7v2v-9rm4-7m8f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://starlabs.sg/advisories/23/23-2017/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1723",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-04-17T12:15:07.167",
      "lastModified" : "2024-11-21T07:39:46.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Veragroup Mobile Assistant allows SQL Injection.This issue affects Mobile Assistant: before 21.S.2343.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vegayazilim:mobile_assistant:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.s.2343",
            "matchCriteriaId" : "5B6C8695-4664-4B45-9BAC-21375EAEBDBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0228",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0277",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:37.723",
      "lastModified" : "2025-02-06T16:15:32.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WC Fields Factory WordPress plugin through 4.1.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wc_fields_factory_project:wc_fields_factory:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "4.1.5",
            "matchCriteriaId" : "362E7868-F1A5-4765-A1CC-36BDB3325E4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bulletin.iese.de/post/wc-fields-factory_1-4-5",
        "source" : "contact@wpscan.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/69ffb2f1-b291-49bf-80a8-08d03ceca53b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bulletin.iese.de/post/wc-fields-factory_1-4-5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/69ffb2f1-b291-49bf-80a8-08d03ceca53b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0367",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:37.790",
      "lastModified" : "2025-03-03T20:15:37.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pricing_tables_for_wpbakery_page_builder_project:pricing_tables_for_wpbakery_page_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "20A129D6-EF00-4A64-8E4B-17E34F90739D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d7685af2-6034-49ea-93ef-4debe72689bc",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d7685af2-6034-49ea-93ef-4debe72689bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0374",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:37.847",
      "lastModified" : "2025-02-06T17:15:14.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The W4 Post List WordPress plugin before 2.4.6 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w4_post_list_project:w4_post_list:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.4.6",
            "matchCriteriaId" : "9309060D-157E-4848-9251-82EA10EEB921"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/ddb10f2e-73b8-444c-90b2-5c84cdf6de5c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ddb10f2e-73b8-444c-90b2-5c84cdf6de5c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0764",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:37.897",
      "lastModified" : "2025-02-06T17:15:14.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription vulnerability. The attacker must have at least the privileges of the Author role."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:gallery:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.7.0",
            "matchCriteriaId" : "F42F3989-E1D7-49DD-A24E-AECC5D4495CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d48c6c50-3734-4191-9833-0d9b09b1bd8a",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d48c6c50-3734-4191-9833-0d9b09b1bd8a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0765",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:37.953",
      "lastModified" : "2025-03-05T19:15:27.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability. The attacker must have at least the privileges of an Author, and the vendor's Slider plugin (https://wordpress.org/plugins/slider-bws/) must also be installed for this vulnerability to be exploitable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bestwebsoft:gallery:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.7.0",
            "matchCriteriaId" : "F42F3989-E1D7-49DD-A24E-AECC5D4495CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/2699cefa-1cae-4ef3-ad81-7f3db3fcce25",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/2699cefa-1cae-4ef3-ad81-7f3db3fcce25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0889",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:37.997",
      "lastModified" : "2025-02-06T16:15:32.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Themeflection Numbers WordPress plugin before 2.0.1 does not have authorisation and CSRF check in an AJAX action, and does not ensure that the options to be updated belong to the plugin. As a result, it could allow any authenticated users, such as subscriber, to update arbitrary blog options, such as enabling registration and set the default role to administrator"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metagauss:themeflection_numbers:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.1",
            "matchCriteriaId" : "EE812581-9F84-4AEF-B911-7B353A217FFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c39473a7-47fc-4bce-99ad-28d03f41e74e",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c39473a7-47fc-4bce-99ad-28d03f41e74e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1274",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:38.060",
      "lastModified" : "2024-11-21T07:38:48.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pricing_tables_for_wpbakery_page_builder_project:pricing_tables_for_wpbakery_page_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "20A129D6-EF00-4A64-8E4B-17E34F90739D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/267acb2c-1a95-487f-a714-516de05d2b2f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/267acb2c-1a95-487f-a714-516de05d2b2f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1282",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:38.123",
      "lastModified" : "2025-02-06T16:15:32.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Drag and Drop Multiple File Upload PRO - Contact Form 7 Standard WordPress plugin before 2.11.1 and Drag and Drop Multiple File Upload PRO - Contact Form 7 with Remote Storage Integrations WordPress plugin before 5.0.6.4 do not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codedropz:drag_and_drop_multiple_file_upload_-_contact_form_7:*:*:*:*:standard:wordpress:*:*",
            "versionEndExcluding" : "2.11.1",
            "matchCriteriaId" : "C8B87F33-4286-4E32-99D3-A9B36571AF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codedropz:drag_and_drop_multiple_file_upload_-_contact_form_7:*:*:*:*:pro:wordpress:*:*",
            "versionEndExcluding" : "5.0.6.4",
            "matchCriteriaId" : "97A0A402-49FE-4103-A891-4D313F289667"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/8a9548c5-59ea-46b0-bfa5-a0f7a259351a",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f4b2617f-5235-4587-9eaf-d0f6bb23dc27",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8a9548c5-59ea-46b0-bfa5-a0f7a259351a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f4b2617f-5235-4587-9eaf-d0f6bb23dc27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1325",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:38.183",
      "lastModified" : "2025-03-05T19:15:27.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Easy Forms for Mailchimp WordPress plugin before 6.8.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yikesinc:easy_forms_for_mailchimp:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "6.8.7",
            "matchCriteriaId" : "D8FD6BA2-F3E8-439A-BB07-2CF2129C1F90"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5f37cbf3-2388-4582-876c-6a7b0943c2a7",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5f37cbf3-2388-4582-876c-6a7b0943c2a7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1331",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:38.240",
      "lastModified" : "2025-02-06T17:15:15.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow attackers to make logged in admins delete all the redirections through a CSRF attack."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inisev:redirection:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.5",
            "matchCriteriaId" : "EEB65A5D-6EB8-458D-8F31-8094455B5F12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/f81d9340-cf7e-46c4-b669-e61f2559cb8c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f81d9340-cf7e-46c4-b669-e61f2559cb8c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1371",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:38.290",
      "lastModified" : "2025-02-06T16:15:32.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The W4 Post List WordPress plugin before 2.4.6 does not ensure that password protected posts can be accessed before displaying their content, which could allow any authenticated users to access them"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w4_post_list_project:w4_post_list:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.4.6",
            "matchCriteriaId" : "9309060D-157E-4848-9251-82EA10EEB921"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/ad5c167e-77f7-453c-9443-df6e07705d89",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ad5c167e-77f7-453c-9443-df6e07705d89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1373",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:38.337",
      "lastModified" : "2025-02-06T17:15:15.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The W4 Post List WordPress plugin before 2.4.6 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w4_post_list_project:w4_post_list:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.4.6",
            "matchCriteriaId" : "9309060D-157E-4848-9251-82EA10EEB921"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/fa38f3e6-e04c-467c-969b-0f6736087589",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/fa38f3e6-e04c-467c-969b-0f6736087589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1413",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:38.390",
      "lastModified" : "2025-04-23T17:16:27.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP VR WordPress plugin before 8.2.9 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rextheme:wp_vr:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "8.2.9",
            "matchCriteriaId" : "FF2281C2-BE06-4375-A3BC-AE806FD10BFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/6938fee5-3510-45e6-8112-c9e2b30f6881",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/6938fee5-3510-45e6-8112-c9e2b30f6881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1427",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:38.440",
      "lastModified" : "2025-02-06T16:15:32.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "- The Photo Gallery by 10Web WordPress plugin before 1.8.15 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images anywhere in the filesystem via a path traversal vector."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:10web:photo_gallery:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.15",
            "matchCriteriaId" : "9CABF93C-D672-4711-AA74-F220C571EED2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c8917ba2-4cb3-4b09-8a49-b7c612254946",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c8917ba2-4cb3-4b09-8a49-b7c612254946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1473",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-17T13:15:38.497",
      "lastModified" : "2025-02-06T16:15:33.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Slider, Gallery, and Carousel by MetaSlider WordPress plugin 3.29.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:metaslider:slider\\,_gallery\\,_and_carousel:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.29.1",
            "matchCriteriaId" : "7DA1D9E1-87F7-4C54-BFB3-FF343C4F0A66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/a6e6c67b-7d9b-4fdb-8115-c33add7bfc3d",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/a6e6c67b-7d9b-4fdb-8115-c33add7bfc3d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27733",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-17T13:15:38.570",
      "lastModified" : "2025-02-06T16:15:34.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/sys_sql_query.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dedecms:dedecms:5.7.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81339864-0F89-4EF3-AF10-27A67FA7CC56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ephemeral1y/Vulnerability/blob/master/DedeCMS/5.7.98/DedeCMS-v5.7.98-RCE.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sha999-crypto.github.io/2023/02/28/Dedecms%20background%20SQL%20injection%20vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Ephemeral1y/Vulnerability/blob/master/DedeCMS/5.7.98/DedeCMS-v5.7.98-RCE.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sha999-crypto.github.io/2023/02/28/Dedecms%20background%20SQL%20injection%20vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27844",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-17T13:15:38.617",
      "lastModified" : "2025-02-06T16:15:34.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote attacker to gain privileges via the Dispatcher::getController component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:litextension:leurlrewrite:*:*:*:*:*:prestashop:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "D29DE05C-6756-4919-8571-F2D6F7ABAD21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/04/13/leurlrewrite.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://litextension.com/migration-services/seo-urls-migrations.html#page%232",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/04/13/leurlrewrite.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://litextension.com/migration-services/seo-urls-migrations.html#page%232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1873",
      "sourceIdentifier" : "iletisim@usom.gov.tr",
      "published" : "2023-04-17T14:15:07.627",
      "lastModified" : "2024-11-21T07:40:03.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Faturamatik Bircard allows SQL Injection.This issue affects Bircard: before 23.04.05.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "iletisim@usom.gov.tr",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "iletisim@usom.gov.tr",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faturamatik:bircard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.04.05",
            "matchCriteriaId" : "1837F935-5501-4225-B7D1-59C39DC0D0A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.faturamatik.com.tr/tr/hizmetlerimiz/bircard",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0231",
        "source" : "iletisim@usom.gov.tr",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.faturamatik.com.tr/tr/hizmetlerimiz/bircard",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.usom.gov.tr/bildirim/tr-23-0231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-17T14:15:07.967",
      "lastModified" : "2025-02-06T16:15:34.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:71note:go-bbs:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F120D7DC-82C4-4174-A9E6-361503843ED8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gobbscom/go-bbs/issues/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/gobbscom/go-bbs/issues/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1831",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2023-04-17T15:15:06.923",
      "lastModified" : "2024-11-21T07:39:59.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mattermost fails to redact from audit logs the user password during user creation and the user password hash in other operations if the experimental audit logging configuration was enabled (ExperimentalAuditSettings section in config).\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.7.3",
            "matchCriteriaId" : "FF73F9C4-BCB6-4C2A-8670-FEC62E0F1F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.8.0",
            "versionEndExcluding" : "7.8.2",
            "matchCriteriaId" : "7A56BF61-5431-49BE-8D40-7C4DF2684087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:7.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "638E6C89-8468-444A-BDBF-9A3086BBC269"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-17T15:15:07.053",
      "lastModified" : "2025-02-06T16:15:34.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "APNG_Optimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu.png."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apng_optimizer_project:apng_optimizer:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFFB0BA-1345-4278-B57D-525E05ED2772"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bitbucket.org/tiangeng_zq/cve/src/main/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://sourceforge.net/projects/apng/files/APNG_Optimizer/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://bitbucket.org/tiangeng_zq/cve/src/main/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://sourceforge.net/projects/apng/files/APNG_Optimizer/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-17T16:15:09.643",
      "lastModified" : "2025-02-06T17:15:17.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR823G_V1.0.2B05 was discovered to contain a stack overflow via the NewPassword parameters in SetPasswdSettings."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-823g_firmware:1.0.2b05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14A8546A-7F37-43D2-AD1E-DF65C6734057"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-823g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67B980AA-84BE-4D22-B4E7-7B2DBF571B65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1/boSetPasswdSettings",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1/boSetPasswdSettings",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25504",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-17T17:15:07.353",
      "lastModified" : "2025-02-13T17:16:09.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious actor who has been authenticated and granted specific permissions in Apache Superset may use the import dataset feature in order to conduct Server-Side Request Forgery\nattacks and query internal resources on behalf of the server where Superset\nis deployed. This vulnerability exists in Apache Superset versions up to and including 2.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:superset:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "20E98F0D-B484-4FA4-8273-074A75ED3227"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/18/8",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/tdnzkocfsqg2sbbornnp9g492fn4zhtx",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/18/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/tdnzkocfsqg2sbbornnp9g492fn4zhtx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27525",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-17T17:15:07.547",
      "lastModified" : "2024-11-21T07:53:05.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:superset:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "20E98F0D-B484-4FA4-8273-074A75ED3227"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/wpv7b17zjg2pmvpfkdd6nn8sco8y2q77",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/wpv7b17zjg2pmvpfkdd6nn8sco8y2q77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29004",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-17T19:15:07.377",
      "lastModified" : "2024-11-21T07:56:22.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hap-wi/roxy-wi is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A Path Traversal vulnerability was found in the current version of Roxy-WI (6.3.9.0 at the moment of writing this report). The vulnerability can be exploited via an HTTP request to /app/options.py and the config_file_name parameter. Successful exploitation of this vulnerability could allow an attacker with user level privileges to obtain the content of arbitrary files on the file server within the scope of what the server process has access to. The root-cause of the vulnerability lies in the get_config function of the /app/modules/config/config.py file, which only checks for relative path traversal, but still allows to read files from absolute locations passed via the config_file_name parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roxy-wi:roxy-wi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.9.0",
            "matchCriteriaId" : "D813035A-DE7F-4175-803E-85AF52635FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-7qqj-xhvr-46fv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-7qqj-xhvr-46fv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2130",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-17T20:15:07.243",
      "lastModified" : "2024-11-21T07:57:59.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/view_details.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-226206 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:purchase_order_management_system_project:purchase_order_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03DF14E7-752B-4DDC-9AE9-DFDE24815075"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/zitozito1/bug_report/blob/main/SQLi.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226206",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226206",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zitozito1/bug_report/blob/main/SQLi.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30769",
      "sourceIdentifier" : "disclosures@halborn.com",
      "published" : "2023-04-17T20:15:07.303",
      "lastModified" : "2024-11-21T08:00:52.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability discovered is related to the peer-to-peer (p2p) communications, attackers can craft consensus messages, send it to individual nodes and take them offline. An attacker can crawl the network peers using getaddr message and attack the unpatched nodes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "disclosures@halborn.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosures@halborn.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dogecoin:dogecoin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.14.6",
            "matchCriteriaId" : "E272CF7A-BDB4-47F9-A309-3054E004F2BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.halborn.com/blog/post/halborn-discovers-zero-day-impacting-dogecoin-and-280-networks",
        "source" : "disclosures@halborn.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.halborn.com/disclosures",
        "source" : "disclosures@halborn.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.halborn.com/blog/post/halborn-discovers-zero-day-impacting-dogecoin-and-280-networks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.halborn.com/disclosures",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25010",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2023-04-17T21:15:07.630",
      "lastModified" : "2025-02-06T16:15:33.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which may result in code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:maya_usd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.23.0",
            "matchCriteriaId" : "ED276CAF-A1FA-4499-8ABA-3699000E8D7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0003",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27906",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2023-04-17T21:15:07.687",
      "lastModified" : "2025-02-06T17:15:15.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerability which may result in code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:maya_usd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.23.0",
            "matchCriteriaId" : "ED276CAF-A1FA-4499-8ABA-3699000E8D7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0003",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27907",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2023-04-17T21:15:07.737",
      "lastModified" : "2025-02-06T17:15:15.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerability which may result in code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:maya_usd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.23.0",
            "matchCriteriaId" : "ED276CAF-A1FA-4499-8ABA-3699000E8D7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0003",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27909",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2023-04-17T21:15:07.777",
      "lastModified" : "2025-02-06T17:15:16.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code execution through maliciously crafted FBX files or information disclosure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:fbx_software_development_kit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020.0",
            "versionEndExcluding" : "2020.3.4",
            "matchCriteriaId" : "2C560264-D3D4-450F-A933-0567181A3EDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0004",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27910",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2023-04-17T21:15:07.823",
      "lastModified" : "2025-02-06T16:15:35.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:fbx_software_development_kit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020.0",
            "versionEndExcluding" : "2020.3.4",
            "matchCriteriaId" : "2C560264-D3D4-450F-A933-0567181A3EDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0004",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27911",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2023-04-17T21:15:07.870",
      "lastModified" : "2025-02-06T16:15:35.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:fbx_software_development_kit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020.0",
            "versionEndExcluding" : "2020.3.4",
            "matchCriteriaId" : "2C560264-D3D4-450F-A933-0567181A3EDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0004",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30548",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-17T21:15:07.923",
      "lastModified" : "2024-11-21T08:00:24.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gatsby-plugin-sharp is a plugin for the gatsby framework which exposes functions built on the Sharp image processing library. The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server (`gatsby develop`). It should be noted that by default gatsby develop is only accessible via the localhost 127.0.0.1, and one would need to intentionally expose the server to other interfaces to exploit this vulnerability by using server options such as --host 0.0.0.0, -H 0.0.0.0, or the GATSBY_HOST=0.0.0.0 environment variable. Attackers exploiting this vulnerability will have read access to all files within the scope of the server process. A patch has been introduced in gatsby-plugin-sharp@5.8.1 and gatsby-plugin-sharp@4.25.1 which mitigates the issue by ensuring that included paths remain within the project directory. As stated above, by default gatsby develop is only exposed to the localhost 127.0.0.1. For those using the develop server in the default configuration no risk is posed. If other ranges are required, preventing the develop server from being exposed to untrusted interfaces or IP address ranges would mitigate the risk from this vulnerability. Users are non the less encouraged to upgrade to a safe version."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gatsbyjs:gatsby:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.25.1",
            "matchCriteriaId" : "B4346971-1F00-421E-86D0-040306484F17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gatsbyjs:gatsby:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.8.1",
            "matchCriteriaId" : "8652D0D0-740D-4851-8FBB-C0D2CDBA11EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gatsbyjs/gatsby/commit/5f442081b227cc0879babb96858f970c4ce94c6b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gatsbyjs/gatsby/commit/dcf88ed01df2c26e0c93a41e1a2a840076d8247e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gatsbyjs/gatsby/security/advisories/GHSA-h2pm-378c-pcxx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gatsbyjs/gatsby/commit/5f442081b227cc0879babb96858f970c4ce94c6b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gatsbyjs/gatsby/commit/dcf88ed01df2c26e0c93a41e1a2a840076d8247e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/gatsbyjs/gatsby/security/advisories/GHSA-h2pm-378c-pcxx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1697",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:07.997",
      "lastModified" : "2024-11-21T07:39:43.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Handling of Missing Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a dcpfe process core and thereby a Denial of Service (DoS). Continued receipt of these specific frames will cause a sustained Denial of Service condition. This issue occurs when a specific malformed ethernet frame is received. This issue affects Juniper Networks Junos OS on QFX10000 Series, PTX1000 Series Series: All versions prior to 19.4R3-S10; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S6; 20.3 versions prior to 20.3R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S1; 22.1 versions prior to 22.1R2-S1, 22.1R3; 22.2 versions prior to 22.2R1-S2, 22.2R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-230"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.4",
            "matchCriteriaId" : "BEF1C9AB-1107-4A26-BB84-BDD72B4E6564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF56BB-939A-4E38-BD9E-E3198E70F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "19EAC3C9-D800-436F-8FEA-8BDFB5A9BD24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E7547-6649-436D-BC45-184417680C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9789FF8-D55C-4AF9-A250-E543A0EB826F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C238EB1-5A38-4877-8849-4A6D36918B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C21638A9-6AD8-4347-AA3F-64BC7BD71C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D621DB7F-BC6B-4A07-8803-596B3ED11CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A5620596-4DEE-41D7-A63F-224D814DAA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A8BBCEC0-5915-4F69-90FD-070A94145BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C93B13-DCEB-4861-87DC-3F1ECBAF7FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5887B680-E5A4-4A30-9543-69B42F50E8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "90AE30DB-C448-4FE9-AC11-FF0F27CDA227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6DF99D-E438-4943-BC32-F2821E72AE0B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2039C-E08C-472F-82E6-DAD3F94724B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1401145-D8EC-4DB9-9CDE-9DE6C0D000C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1453E42A-77B3-4922-8EC3-1A5668C39550"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26408465-BD6A-4416-B98E-691A5F651080"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70612",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24500",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-04-17T22:15:08.077",
      "lastModified" : "2025-02-06T16:15:33.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:electra-air:central_ac_unit_firmware:v7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5605C439-1BE7-48E8-A510-F001C45E4CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:electra-air:central_ac_unit_firmware:v8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E4228B-0204-4B35-9830-DDFADB2B893F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:electra-air:central_ac_unit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843C1D0F-04B4-4D8B-B8B3-B5F3377365ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24501",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-04-17T22:15:08.137",
      "lastModified" : "2025-02-06T17:15:15.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:electra-air:central_ac_unit_firmware:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52A1E754-7F0D-45F5-BD6B-D36496568432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:electra-air:central_ac_unit_firmware:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D140C4-3928-4CA8-901F-E7C4D77E9080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:electra-air:central_ac_unit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843C1D0F-04B4-4D8B-B8B3-B5F3377365ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24502",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-04-17T22:15:08.177",
      "lastModified" : "2025-02-06T16:15:33.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Electra Central AC unit – The unit opens an AP with an easily calculated password."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:electra-air:central_ac_unit_firmware:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52A1E754-7F0D-45F5-BD6B-D36496568432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:electra-air:central_ac_unit_firmware:v5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98D140C4-3928-4CA8-901F-E7C4D77E9080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:electra-air:central_ac_unit_firmware:v7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5605C439-1BE7-48E8-A510-F001C45E4CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:electra-air:central_ac_unit_firmware:v8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E4228B-0204-4B35-9830-DDFADB2B893F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:electra-air:central_ac_unit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843C1D0F-04B4-4D8B-B8B3-B5F3377365ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24503",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-04-17T22:15:08.220",
      "lastModified" : "2025-02-06T16:15:33.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-494"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electra-air:smart_kit_for_split_ac:osk201:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4D89A1-6E35-4FB7-9C7B-70C6A2EB35FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24504",
      "sourceIdentifier" : "cna@cyber.gov.il",
      "published" : "2023-04-17T22:15:08.267",
      "lastModified" : "2024-11-21T07:48:00.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@cyber.gov.il",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:electra-air:central_ac_unit_firmware:v7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5605C439-1BE7-48E8-A510-F001C45E4CA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:electra-air:central_ac_unit_firmware:v8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E4228B-0204-4B35-9830-DDFADB2B893F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:electra-air:central_ac_unit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843C1D0F-04B4-4D8B-B8B3-B5F3377365ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "cna@cyber.gov.il",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gov.il/en/Departments/faq/cve_advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28959",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:08.320",
      "lastModified" : "2024-11-21T07:56:17.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on QFX10002 allows an unauthenticated, adjacent attacker on the local broadcast domain sending a malformed packet to the device, causing all PFEs other than the inbound PFE to wedge and to eventually restart, resulting in a Denial of Service (DoS) condition. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue can only be triggered by sending a specific malformed packet to the device. Transit traffic does not trigger this issue. An indication of this issue occurring can be seen through the following log messages: fpc0 expr_hostbound_packet_handler: Receive pe 73? fpc0 Cmerror Op Set: PE Chip: PE0[0]: PGQ:misc_intr: 0x00000020: Enqueue of a packet with out-of-range VOQ in 192K-VOQ mode (URI: /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL) The logs list below can also be observed when this issue occurs fpc0 Error: /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL (0x210107), scope: pfe, category: functional, severity: major, module: PE Chip, type: Description for PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL fpc0 Performing action cmalarm for error /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL (0x210107) in module: PE Chip with scope: pfe category: functional level: major fpc0 Error: /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE (0x21011a), scope: pfe, category: functional, severity: fatal, module: PE Chip, type: Description for PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE fpc0 Performing action cmalarm for error /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE (0x21011a) in module: PE Chip with scope: pfe category: functional level: fatal fpc0 Performing action disable-pfe for error /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE (0x21011a) in module: PE Chip with scope: pfe category: functional level: fatal This issue affects Juniper Networks Junos OS on QFX10002: All versions prior to 19.1R3-S10; 19.4 versions prior to 19.4R3-S11; 20.2 versions prior to 20.2R3-S7; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S2; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S1, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.1",
            "matchCriteriaId" : "E46B49AE-2783-4962-9919-A0E1DDFCE4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "0B372356-D146-420B-95C3-381D0383B595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "92292C23-DC38-42F1-97C1-8416BBB60FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "59E2311C-075A-4C64-B614-728A21B17B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E2DF80-63D8-48DD-BC73-C406B7AA3C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "8120EAC3-DCCB-4429-A372-C0DAA3270A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DF81F459-915E-468C-8E82-85F1A601095B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9912E998-75FB-4EA0-8E36-0A1C38147AB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AE90D0-D502-4262-A83E-F40308A81380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "739E4B74-5769-4392-BAFE-39770B021859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "7F449CD5-9D3D-4D99-8A6F-8C7946A4F2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9C411A2E-A407-44E5-A2B2-3D049FB2DB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "283E41CB-9A90-4521-96DC-F31AA592CFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "39E44B09-7310-428C-8144-AE9DB0484D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "90AE30DB-C448-4FE9-AC11-FF0F27CDA227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3683A8F5-EE0E-4936-A005-DF7F6B75DED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1B615DBA-8C53-41D4-B264-D3EED8578471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3124DD0-9E42-4896-9060-CB7DD07FC342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E37D4694-C80B-475E-AB5B-BB431F59C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "19519212-51DD-4448-B115-8A20A40192CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC9909E-AE9F-414D-99B1-83AA04D5297B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1401145-D8EC-4DB9-9CDE-9DE6C0D000C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70584",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28960",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:08.387",
      "lastModified" : "2024-11-21T07:56:17.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Incorrect Permission Assignment for Critical Resource vulnerability in Juniper Networks Junos OS Evolved allows a local, authenticated low-privileged attacker to copy potentially malicious files into an existing Docker container on the local system. A follow-on administrator could then inadvertently start the Docker container leading to the malicious files being executed as root. This issue only affects systems with Docker configured and enabled, which is not enabled by default. Systems without Docker started are not vulnerable to this issue. This issue affects Juniper Networks Junos OS Evolved: 20.4 versions prior to 20.4R3-S5-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R3-EVO; 21.4 versions prior to 21.4R2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 19.2R1-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "247FB9DF-7EC0-4298-B27C-3235D141C1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8866D-162F-4C9B-8167-2FBA25410368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E5BC7-8607-4330-AA72-2273D32F8604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "878C81C9-A418-4A21-8FDB-2116A992679C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7451A671-A3CC-4904-8D45-947B1D3783C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0108AD20-EAE6-41D1-AE48-254C46B5388A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "44FBCA6F-EB05-4EE4-85FD-944BDAF7D81B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E554FD12-FE69-44D1-B2C9-4382F8CA4456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C1D53E-70BE-4246-89ED-1074C8C70747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B38A90A9-B739-49BE-8845-9ABF846CCC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE56A7C-BA26-405F-A640-C43AF78B0A3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "683D8EED-9F26-41E7-B69C-FE198225A8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "620B0CDD-5566-472E-B96A-31D2C12E3120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA3DC63-B290-4D15-BEF9-21DEF36CA2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E57AF-979B-4022-8AD6-B3558E06B718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "144730FB-7622-4B3D-9C47-D1B7A7FB7EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA246F0-154E-4F44-A97B-690D22FA73DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "25D6C07C-F96E-4523-BB54-7FEABFE1D1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2B70C784-534B-4FAA-A5ED-3709656E2B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC38173-44AB-43D5-8C27-CB43AD5E0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4DD04A-DE52-46BE-8C34-8DB47F7500F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE0E145-8E1C-446E-90ED-237E3B9CAF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F26369D-21B2-4C6A-98C1-492692A61283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "24003819-1A6B-4BDF-B3DF-34751C137788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D332E-9133-45B9-BB07-B33C790F737A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E907193-075E-45BC-9257-9607DB790D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF46A8-FC3A-4779-B695-2CA11D045AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "39809219-9F87-4583-9DAD-9415DD320B36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70585",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28961",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:08.457",
      "lastModified" : "2024-11-21T07:56:17.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Handling of Unexpected Data Type vulnerability in IPv6 firewall filter processing of Juniper Networks Junos OS on the ACX Series devices will prevent a firewall filter with the term 'from next-header ah' from being properly installed in the packet forwarding engine (PFE). There is no immediate indication of an incomplete firewall filter commit shown at the CLI, which could allow an attacker to send valid packets to or through the device that were explicitly intended to be dropped. An indication that the filter was not installed can be identified with the following logs: fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_rule_prepare : Config failed: Unsupported Ip-protocol 51 in the filter lo0.0-inet6-i fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_rule_prepare : Please detach the filter, remove unsupported match and re-attach fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_process_rule : Status:104 dnx_dfw_rule_prepare failed fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_process_filter : Status:104 dnx_dfw_process_rule failed fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_update_filter_in_hw : Status:104 Could not process filter(lo0.0-inet6-i) for rule expansion Unsupported match, action present. fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_create_hw_instance : Status:104 Could not program dfw(lo0.0-inet6-i) type(IFP_DFLT_INET6_Lo0_FILTER)! [104] fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_bind_shim : [104] Could not create dfw(lo0.0-inet6-i) type(IFP_DFLT_INET6_Lo0_FILTER) fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_update_resolve : [100] Failed to bind filter(3) to bind point fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_change_end : dnx_dfw_update_resolve (resolve type) failed This issue affects Juniper Networks Junos OS on ACX Series: All versions prior to 20.2R3-S7; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-241"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.2",
            "matchCriteriaId" : "9D5DC3ED-1843-467F-903D-2DB6CDFF06F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9C411A2E-A407-44E5-A2B2-3D049FB2DB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "39E44B09-7310-428C-8144-AE9DB0484D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF19CB03-4A42-48BC-A6E1-A6F56D40F422"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx1100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648CB4A2-05FA-4445-BB4F-F9285A8E8A5D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90339191-4DE3-4116-8CEC-C5440D063CEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F5683A-7DCC-4691-AD3A-F2B66684DA9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "154658D0-FE3E-43C1-8A4D-CAF67C9BCD98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E2CDA9-2379-482C-B509-D527AFE2C7D5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36729286-5080-47E8-A961-976BF64F5A93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C398D8D-AD15-422C-90DE-2EAD9B9A7DF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx5048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F8DB691-C9F4-4084-8563-642A2F63DA86"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx5096:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B58F51-4F0D-40BD-A90F-226A26F4646E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D013356B-A9FE-4301-BFEB-0D5B1AB3541D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx5448:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB7B849-D1D4-46F3-B502-5D84C5E7C3B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0730C3-5846-43E9-A9BD-8AEED356A959"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6655453A-D027-41A3-B1E9-D40A5220E4CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx6360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58626682-A25D-46B6-B2B3-493772FFBA11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3484A2-C7E4-43D1-9D47-08C531185C67"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx7100-32c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FF19E76-F26B-4111-A814-BA7E5C3F2A74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx7100-48l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F48C7E15-C23D-4E2D-9A1B-C314383C8C32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx7509:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B50EC358-F551-4F2B-9DA1-61B6412AB957"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70586",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28962",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:08.520",
      "lastModified" : "2024-11-21T07:56:17.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication vulnerability in upload-file.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to upload arbitrary files to temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to 19.4R3-S11; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S7; 20.3 version 20.3R1 and later versions; 20.4 versions prior to 20.4R3-S6; 21.1 version 21.1R1 and later versions; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S3; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S1, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.4",
            "matchCriteriaId" : "BEF1C9AB-1107-4A26-BB84-BDD72B4E6564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "7F449CD5-9D3D-4D99-8A6F-8C7946A4F2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF56BB-939A-4E38-BD9E-E3198E70F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "19EAC3C9-D800-436F-8FEA-8BDFB5A9BD24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E7547-6649-436D-BC45-184417680C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9789FF8-D55C-4AF9-A250-E543A0EB826F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C238EB1-5A38-4877-8849-4A6D36918B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C21638A9-6AD8-4347-AA3F-64BC7BD71C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D621DB7F-BC6B-4A07-8803-596B3ED11CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A5620596-4DEE-41D7-A63F-224D814DAA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A8BBCEC0-5915-4F69-90FD-070A94145BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C93B13-DCEB-4861-87DC-3F1ECBAF7FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5887B680-E5A4-4A30-9543-69B42F50E8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9C411A2E-A407-44E5-A2B2-3D049FB2DB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D7DB4B-683B-408B-8055-2C992CA43FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "283E41CB-9A90-4521-96DC-F31AA592CFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1C3B09-3800-493E-A319-57648305FE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFDCC2B-FAB5-4164-8D70-28E4DFF052AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "39E44B09-7310-428C-8144-AE9DB0484D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "90AE30DB-C448-4FE9-AC11-FF0F27CDA227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3683A8F5-EE0E-4936-A005-DF7F6B75DED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1B615DBA-8C53-41D4-B264-D3EED8578471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3124DD0-9E42-4896-9060-CB7DD07FC342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E37D4694-C80B-475E-AB5B-BB431F59C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "19519212-51DD-4448-B115-8A20A40192CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC9909E-AE9F-414D-99B1-83AA04D5297B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70587",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28963",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:08.583",
      "lastModified" : "2024-11-21T07:56:17.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authentication vulnerability in cert-mgmt.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to read arbitrary files from temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to 19.1R3-S10; 19.2 versions prior to 19.2R3-S7; 19.3 versions prior to 19.3R3-S8; 19.4 versions prior to 19.4R3-S11; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S7; 20.3 version 20.3R1 and later versions; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S5; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S3; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S1, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.4",
            "matchCriteriaId" : "BEF1C9AB-1107-4A26-BB84-BDD72B4E6564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "7F449CD5-9D3D-4D99-8A6F-8C7946A4F2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF56BB-939A-4E38-BD9E-E3198E70F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "19EAC3C9-D800-436F-8FEA-8BDFB5A9BD24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E7547-6649-436D-BC45-184417680C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9789FF8-D55C-4AF9-A250-E543A0EB826F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C238EB1-5A38-4877-8849-4A6D36918B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C21638A9-6AD8-4347-AA3F-64BC7BD71C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D621DB7F-BC6B-4A07-8803-596B3ED11CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A5620596-4DEE-41D7-A63F-224D814DAA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A8BBCEC0-5915-4F69-90FD-070A94145BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C93B13-DCEB-4861-87DC-3F1ECBAF7FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5887B680-E5A4-4A30-9543-69B42F50E8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9C411A2E-A407-44E5-A2B2-3D049FB2DB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D7DB4B-683B-408B-8055-2C992CA43FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "283E41CB-9A90-4521-96DC-F31AA592CFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1C3B09-3800-493E-A319-57648305FE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "4BFDCC2B-FAB5-4164-8D70-28E4DFF052AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "39E44B09-7310-428C-8144-AE9DB0484D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "90AE30DB-C448-4FE9-AC11-FF0F27CDA227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3683A8F5-EE0E-4936-A005-DF7F6B75DED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1B615DBA-8C53-41D4-B264-D3EED8578471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3124DD0-9E42-4896-9060-CB7DD07FC342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E37D4694-C80B-475E-AB5B-BB431F59C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "19519212-51DD-4448-B115-8A20A40192CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC9909E-AE9F-414D-99B1-83AA04D5297B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70587",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28964",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:08.653",
      "lastModified" : "2024-11-21T07:56:17.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network based, unauthenticated attacker to cause an RPD crash leading to a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. Upon receipt of a malformed BGP flowspec update, RPD will crash resulting in a Denial of Service. This issue affects Juniper Networks Junos OS: All versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S6; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2; 20.3 versions prior to 20.3R1-S1, 20.3R2; Juniper Networks Junos OS Evolved: All versions prior to 20.1R3-EVO; 20.2 versions prior to 20.2R2-EVO; 20.3 versions prior to 20.3R2-EVO;"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-130"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.1",
            "matchCriteriaId" : "7A46756B-6DBA-46F8-860B-3512CD2A10F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "2D24FDED-D8BE-4C7E-8F0E-91901FC66A84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "0A40201C-D7F4-4041-A706-12D0ED998350"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r:*:*:*:*:*:*",
            "matchCriteriaId" : "9359A058-6B77-4DEE-B28A-D5CD906EBAFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "27D9AEBC-2CA3-4E17-9543-D60B10BA2AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r:*:*:*:*:*:*",
            "matchCriteriaId" : "1B40785E-8A3C-4087-B2B9-9A2E4BEFF421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "F34512E2-7493-4EA2-8DA3-7A551514DF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "541535BD-20DC-4489-91A7-F6CBC6802352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "924C4EAC-2A52-45A9-BE0F-B62F070C3E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "2073B497-CCE0-4819-9B0A-E80E577BF13E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "6DCA0ADF-CC93-4369-95E5-B41D7301C58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "9CCA5292-4722-4FE1-8070-2CBA666F160A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "0B372356-D146-420B-95C3-381D0383B595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "92292C23-DC38-42F1-97C1-8416BBB60FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "59E2311C-075A-4C64-B614-728A21B17B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCE4EA8-DDBA-4766-BB81-E4DA29723723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "2849078A-447A-4615-94E1-58AF450ED22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C625B6-25ED-4F6C-A778-6AB7FA7901CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "84EC3EE0-F1D9-4CBB-B3FA-83C05C50EB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "122B09A3-299A-421C-9A6B-B3FEED8E19FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "55F3E730-83F2-43C2-B6DC-77BAABB2F01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "19EAC3C9-D800-436F-8FEA-8BDFB5A9BD24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.1",
            "matchCriteriaId" : "D9328851-94D1-448D-9931-695E459A4300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AED25FB6-E3FA-4543-90B2-50068D683D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F64FBB4B-7CBF-499B-A523-804857DEFAFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBE159F-5D94-4C18-B922-331586BEA2CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "A38EBFC9-ECBD-4362-82B2-04C02009E85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF7C3A8-1279-4F38-9548-85AC7D6290FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "50D38F97-81B0-4952-A1E3-0A9AA4D34820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AB827018-2009-483D-8D53-5BFCE8409BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "945442C1-C9B2-48BE-A1A6-6A8A1D0ADA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "F81E7058-986E-4DE3-959F-5E4C62A30941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "487A82C9-7B7E-4ACA-BABF-65B8504079AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA8D4D2-D49D-4F91-95E2-2A0E8599338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF37C911-1904-475A-86F7-F92F34A1A88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "37625D47-53C3-43D5-A361-A833EE06C6D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFB91E3-CAAC-429F-A869-DDD40FB0F84D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9CA997-2DDA-4808-B2AE-8804FEB798B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAE7C3A-5291-42B9-A665-0095E8559737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD9BB14-0375-4893-8CBE-42FF5DECE3E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70588",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28965",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:08.737",
      "lastModified" : "2024-11-21T07:56:18.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Check or Handling of Exceptional Conditions within the storm control feature of Juniper Networks Junos OS allows an attacker sending a high rate of traffic to cause a Denial of Service. Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition. Storm control monitors the level of applicable incoming traffic and compares it with the level specified. If the combined level of the applicable traffic exceeds the specified level, the switch drops packets for the controlled traffic types. This issue affects Juniper Networks Junos OS on QFX10002: All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R3-S11; 20.2 versions prior to 20.2R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.3",
            "matchCriteriaId" : "ECFE39BF-15FB-4129-9D8C-4F28DABB5D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "122B09A3-299A-421C-9A6B-B3FEED8E19FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "55F3E730-83F2-43C2-B6DC-77BAABB2F01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F09D3262-394A-43D1-A4ED-8887FCB20F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FEA876-302D-4F07-94E6-237C669538F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B011854A-932C-4D5C-B469-71F72608DFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "94A44054-B47B-453C-BF0F-9E071EFF6542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A4806-59AB-43D6-BFE3-A6DCE098335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "45DA4D89-1362-421F-8218-585CE5D60E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "7F449CD5-9D3D-4D99-8A6F-8C7946A4F2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF56BB-939A-4E38-BD9E-E3198E70F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1401145-D8EC-4DB9-9CDE-9DE6C0D000C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70589",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28966",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:08.817",
      "lastModified" : "2024-11-21T07:56:18.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved allows a low-privileged local attacker with shell access to modify existing files or execute commands as root. The issue is caused by improper file and directory permissions on certain system files, allowing an attacker with access to these files and folders to inject CLI commands as root. This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S5-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.4",
            "matchCriteriaId" : "0F41A7DF-2B27-4E2E-ABFC-E0510A028199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "247FB9DF-7EC0-4298-B27C-3235D141C1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8866D-162F-4C9B-8167-2FBA25410368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E5BC7-8607-4330-AA72-2273D32F8604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "878C81C9-A418-4A21-8FDB-2116A992679C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7451A671-A3CC-4904-8D45-947B1D3783C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0108AD20-EAE6-41D1-AE48-254C46B5388A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "44FBCA6F-EB05-4EE4-85FD-944BDAF7D81B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E554FD12-FE69-44D1-B2C9-4382F8CA4456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C1D53E-70BE-4246-89ED-1074C8C70747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B38A90A9-B739-49BE-8845-9ABF846CCC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE56A7C-BA26-405F-A640-C43AF78B0A3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "683D8EED-9F26-41E7-B69C-FE198225A8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "620B0CDD-5566-472E-B96A-31D2C12E3120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA3DC63-B290-4D15-BEF9-21DEF36CA2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E57AF-979B-4022-8AD6-B3558E06B718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "144730FB-7622-4B3D-9C47-D1B7A7FB7EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA246F0-154E-4F44-A97B-690D22FA73DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "25D6C07C-F96E-4523-BB54-7FEABFE1D1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2B70C784-534B-4FAA-A5ED-3709656E2B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC38173-44AB-43D5-8C27-CB43AD5E0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4DD04A-DE52-46BE-8C34-8DB47F7500F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE0E145-8E1C-446E-90ED-237E3B9CAF47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70590",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28967",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:08.890",
      "lastModified" : "2024-11-21T07:56:18.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol (BGP) software of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to send specific genuine BGP packets to a device configured with BGP to cause a Denial of Service (DoS) by crashing the Routing Protocol Daemon (rpd). This issue is triggered when the packets attempt to initiate a BGP connection before a BGP session is successfully established. Continued receipt of these specific BGP packets will cause a sustained Denial of Service condition. This issue is triggerable in both iBGP and eBGP deployments. This issue affects: Juniper Networks Junos OS 21.1 version 21.1R1 and later versions prior to 21.1R3-S5; 21.2 version 21.2R1 and later versions prior to 21.2R3-S2; 21.3 version 21.3R1 and later versions prior to 21.3R3-S2; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R3; 22.2 versions prior to 22.2R2. This issue does not affect Juniper Networks Junos OS versions prior to 21.1R1. This issue affects: Juniper Networks Junos OS Evolved 21.1-EVO version 21.1R1-EVO and later versions prior to 21.4R3-EVO; 22.1-EVO versions prior to 22.1R3-EVO; 22.2-EVO versions prior to 22.2R2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 21.1R1-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "52C3552E-798F-4719-B38D-F74E34EAAA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AE674DD3-3590-4434-B144-5AD7EB5F039D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0099BDA9-9D4B-4D6C-8234-EFD9E8C63476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D8729BC1-FB09-4E6D-A5D5-8BDC589555B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D72C3DF-4513-48AC-AAED-C1AADF0794E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8C583289-96C4-4451-A320-14CA1C390819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA43782E-0719-496E-9237-E1ABD3C4C664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "78897DD2-E161-4191-94FF-7400FB612DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "620B0CDD-5566-472E-B96A-31D2C12E3120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA3DC63-B290-4D15-BEF9-21DEF36CA2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E57AF-979B-4022-8AD6-B3558E06B718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "144730FB-7622-4B3D-9C47-D1B7A7FB7EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA246F0-154E-4F44-A97B-690D22FA73DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "25D6C07C-F96E-4523-BB54-7FEABFE1D1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2B70C784-534B-4FAA-A5ED-3709656E2B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "60448FFB-568E-4280-9261-ADD65244F31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B770C52-7E3E-4B92-9138-85DEC56F3B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E88AC378-461C-4EFA-A04B-5786FF21FE03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0AFB30-81DC-465C-9F63-D1B15EA4809A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2035F0AC-29E7-478A-A9D0-BAA3A88B3413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C34ABD4B-B045-4046-9641-66E3B2082A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC38173-44AB-43D5-8C27-CB43AD5E0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4DD04A-DE52-46BE-8C34-8DB47F7500F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE0E145-8E1C-446E-90ED-237E3B9CAF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F26369D-21B2-4C6A-98C1-492692A61283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "24003819-1A6B-4BDF-B3DF-34751C137788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D332E-9133-45B9-BB07-B33C790F737A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2A4377-D044-4E43-B6CC-B753D7F6ABD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8DAEC4F4-5748-4D36-A72B-4C62A0A30E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C76DA7A5-9320-4E21-96A2-ACE70803A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "703C73EB-2D63-4D4F-8129-239AE1E96B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8F67CE3C-3A06-487C-90DE-D5B3B1EC08A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E907193-075E-45BC-9257-9607DB790D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF46A8-FC3A-4779-B695-2CA11D045AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "39809219-9F87-4583-9DAD-9415DD320B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB299492-A919-4EBA-A62A-B3CF02FC0A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "74ED0939-D5F8-4334-9838-40F29DE3597F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C6937069-8C19-4B01-8415-ED7E9EAE2CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "750FE748-82E7-4419-A061-2DEA26E35309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "236E23E5-8B04-4081-9D97-7300DF284000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC96EA7-90A7-4838-B95D-60DBC88C7BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "97541867-C52F-40BB-9AAE-7E87ED23D789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "85CF6664-E35A-4E9B-95C0-CDC91F7F331A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D77A072D-350A-42F2-8324-7D3AC1711BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AE395C-A651-4568-88E3-3600544BF799"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1C3B09-3800-493E-A319-57648305FE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3683A8F5-EE0E-4936-A005-DF7F6B75DED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1B615DBA-8C53-41D4-B264-D3EED8578471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70591",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28968",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:08.960",
      "lastModified" : "2024-11-21T07:56:18.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep Packet Inspection-Decoder (JDPI-Decoder) Application Signature component of Junos OS's AppID service on SRX Series devices will stop the JDPI-Decoder from identifying dynamic application traffic, allowing an unauthenticated network-based attacker to send traffic to the target device using the JDPI-Decoder, designed to inspect dynamic application traffic and take action upon this traffic, to instead begin to not take action and to pass the traffic through. An example session can be seen by running the following command and evaluating the output. user@device# run show security flow session source-prefix <address/mask> extensive Session ID: <session ID>, Status: Normal, State: Active Policy name: <name of policy> Dynamic application: junos:UNKNOWN, <<<<< LOOK HERE Please note, the JDPI-Decoder and the AppID SigPack are both affected and both must be upgraded along with the operating system to address the matter. By default, none of this is auto-enabled for automatic updates. This issue affects: Juniper Networks any version of the JDPI-Decoder Engine prior to version 5.7.0-47 with the JDPI-Decoder enabled using any version of the AppID SigPack prior to version 1.550.2-31 (SigPack 3533) on Junos OS on SRX Series: All versions prior to 19.1R3-S10; 19.2 versions prior to 19.2R3-S7; 19.3 versions prior to 19.3R3-S8; 19.4 versions prior to 19.4R3-S11; 20.1 version 20.1R1 and later versions prior to 20.2R3-S7; 20.3 version 20.3R1 and later versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S5; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S3; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S1, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2;"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1325"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:appid_service_sigpack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.550.2-31",
            "matchCriteriaId" : "88CC4052-A3CE-43BD-8679-394E53D309A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:jdpi-decoder_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7.0-47",
            "matchCriteriaId" : "38342A55-48C8-425C-9FEE-A57DEE1870BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E020556B-693F-4963-BA43-3164AB50FA49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0D31FF-0812-42B8-B25E-03C35EC1B021"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06685D0E-A075-49A5-9EF4-34F0F795C8C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0B735-8C49-4B08-950A-296C9CDE43CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "0B372356-D146-420B-95C3-381D0383B595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "92292C23-DC38-42F1-97C1-8416BBB60FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "59E2311C-075A-4C64-B614-728A21B17B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E2DF80-63D8-48DD-BC73-C406B7AA3C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "8120EAC3-DCCB-4429-A372-C0DAA3270A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DF81F459-915E-468C-8E82-85F1A601095B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9912E998-75FB-4EA0-8E36-0A1C38147AB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AE90D0-D502-4262-A83E-F40308A81380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "739E4B74-5769-4392-BAFE-39770B021859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCE4EA8-DDBA-4766-BB81-E4DA29723723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "2849078A-447A-4615-94E1-58AF450ED22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C625B6-25ED-4F6C-A778-6AB7FA7901CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "84EC3EE0-F1D9-4CBB-B3FA-83C05C50EB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "920FE638-BDE6-403D-9083-2BDBF6A3326F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E38CD1E2-41F5-42D1-B915-055A497C576A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "0C816B9A-F152-4E5F-8152-73635840A89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0EA9DA-2DAD-4FA4-8CCC-E2F3D7069305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "F56182CE-376A-4B77-BB53-1E988842AEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "122B09A3-299A-421C-9A6B-B3FEED8E19FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "55F3E730-83F2-43C2-B6DC-77BAABB2F01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F09D3262-394A-43D1-A4ED-8887FCB20F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FEA876-302D-4F07-94E6-237C669538F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B011854A-932C-4D5C-B469-71F72608DFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "94A44054-B47B-453C-BF0F-9E071EFF6542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A4806-59AB-43D6-BFE3-A6DCE098335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "45DA4D89-1362-421F-8218-585CE5D60E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA350A8-9441-496C-A86C-0D209190A178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "7F449CD5-9D3D-4D99-8A6F-8C7946A4F2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF56BB-939A-4E38-BD9E-E3198E70F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "19EAC3C9-D800-436F-8FEA-8BDFB5A9BD24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E7547-6649-436D-BC45-184417680C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9789FF8-D55C-4AF9-A250-E543A0EB826F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5C238EB1-5A38-4877-8849-4A6D36918B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C21638A9-6AD8-4347-AA3F-64BC7BD71C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D621DB7F-BC6B-4A07-8803-596B3ED11CF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A5620596-4DEE-41D7-A63F-224D814DAA77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A8BBCEC0-5915-4F69-90FD-070A94145BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C93B13-DCEB-4861-87DC-3F1ECBAF7FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5887B680-E5A4-4A30-9543-69B42F50E8D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9C411A2E-A407-44E5-A2B2-3D049FB2DB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D7DB4B-683B-408B-8055-2C992CA43FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "283E41CB-9A90-4521-96DC-F31AA592CFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "14EEA504-CBC5-4F6F-889A-D505EC4BB5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1C3B09-3800-493E-A319-57648305FE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "39E44B09-7310-428C-8144-AE9DB0484D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "90AE30DB-C448-4FE9-AC11-FF0F27CDA227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3683A8F5-EE0E-4936-A005-DF7F6B75DED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1B615DBA-8C53-41D4-B264-D3EED8578471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3124DD0-9E42-4896-9060-CB7DD07FC342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E37D4694-C80B-475E-AB5B-BB431F59C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "591AA3E6-62A2-4A1A-A04C-E808F71D8B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "19519212-51DD-4448-B115-8A20A40192CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC9909E-AE9F-414D-99B1-83AA04D5297B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E020556B-693F-4963-BA43-3164AB50FA49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB0D31FF-0812-42B8-B25E-03C35EC1B021"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06685D0E-A075-49A5-9EF4-34F0F795C8C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0B735-8C49-4B08-950A-296C9CDE43CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70592",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/s/article/SRX-How-to-update-IDP-signature-database-automatically-on-a-SRX",
        "source" : "sirt@juniper.net",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.juniper.net/documentation/us/en/software/jdpi/release-notes/jdpi-decoder-release-notes-october-2022/jdpi-decoder-release-notes-october-2022.pdf",
        "source" : "sirt@juniper.net",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/s/article/SRX-How-to-update-IDP-signature-database-automatically-on-a-SRX",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.juniper.net/documentation/us/en/software/jdpi/release-notes/jdpi-decoder-release-notes-october-2022/jdpi-decoder-release-notes-october-2022.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28970",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:09.020",
      "lastModified" : "2024-11-21T07:56:18.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing on the network interfaces of Juniper Networks Junos OS on JRR200 route reflector appliances allows an adjacent, network-based attacker sending a specific packet to the device to cause a kernel crash, resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue can only be triggered by an attacker on the local broadcast domain. Packets routed to the device are unable to trigger this crash. This issue affects Juniper Networks Junos OS on JRR200: All versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S4; 21.4 versions prior to 21.4R3-S3; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S2, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2; 22.4 versions prior to 22.4R1-S1, 22.4R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.2",
            "matchCriteriaId" : "331C0F12-D9B9-483B-9EF0-28E48ED8346D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "39E44B09-7310-428C-8144-AE9DB0484D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "90AE30DB-C448-4FE9-AC11-FF0F27CDA227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "93F324AE-65D3-4CFC-AEAB-898CE1BD05CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3683A8F5-EE0E-4936-A005-DF7F6B75DED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1B615DBA-8C53-41D4-B264-D3EED8578471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3124DD0-9E42-4896-9060-CB7DD07FC342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E37D4694-C80B-475E-AB5B-BB431F59C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC0D2D2-4922-4675-8A2C-57A08D7BE334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "19519212-51DD-4448-B115-8A20A40192CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC9909E-AE9F-414D-99B1-83AA04D5297B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28E42A41-7965-456B-B0AF-9D3229CE4D4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:jrr200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8455D905-0816-49A9-8A5B-0DA9DEB50443"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70594",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70594",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28971",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:09.080",
      "lastModified" : "2024-11-21T07:56:18.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the timescaledb feature of Juniper Networks Paragon Active Assurance (PAA) (Formerly Netrounds) allows an attacker to bypass existing firewall rules and limitations used to restrict internal communcations. The Test Agents (TA) Appliance connects to the Control Center (CC) using OpenVPN. TA's are assigned an internal IP address in the 100.70.0.0/16 range. Firewall rules exists to limit communication from TA's to the CC to specific services only. OpenVPN is configured to not allow direct communication between Test Agents in the OpenVPN application itself, and routing is normally not enabled on the server running the CC application. The timescaledb feature is installed as an optional package on the Control Center. When the timescaledb container is started, this causes side-effects by bypassing the existing firewall rules and limitations for Test Agent communications. Note: This issue only affects customers hosting their own on-prem Control Center. The Paragon Active Assurance Software as a Service (SaaS) is not affected by this vulnerability since the timescaledb service is not enabled. This issue affects all on-prem versions of Juniper Networks Paragon Active Assurance prior to 4.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-923"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:paragon_active_assurance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "A3C16FC1-5FCF-46BA-A8A1-D21E90583FD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70595",
        "source" : "sirt@juniper.net",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28972",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:09.140",
      "lastModified" : "2024-11-21T07:56:18.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Link Resolution Before File Access vulnerability in console port access of Juniper Networks Junos OS on NFX Series allows an attacker to bypass console access controls. When \"set system ports console insecure\" is enabled, root login is disallowed for Junos OS as expected. However, the root password can be changed using \"set system root-authentication plain-text-password\" on NFX Series systems, leading to a possible administrative bypass with physical access to the console. Password recovery, changing the root password from a console, should not have been allowed from an insecure console. This is similar to the vulnerability described in CVE-2019-0035 but affects different platforms and in turn requires a different fix. This issue affects Juniper Networks Junos OS on NFX Series: 19.2 versions prior to 19.2R3-S7; 19.3 versions prior to 19.3R3-S8; 19.4 versions prior to 19.4R3-S12; 20.2 versions prior to 20.2R3-S8; 20.4 versions prior to 20.4R3-S7; 21.1 versions prior to 21.1R3-S5; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S2; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S1, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCE4EA8-DDBA-4766-BB81-E4DA29723723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "2849078A-447A-4615-94E1-58AF450ED22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C625B6-25ED-4F6C-A778-6AB7FA7901CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "84EC3EE0-F1D9-4CBB-B3FA-83C05C50EB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "920FE638-BDE6-403D-9083-2BDBF6A3326F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E38CD1E2-41F5-42D1-B915-055A497C576A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "0C816B9A-F152-4E5F-8152-73635840A89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0EA9DA-2DAD-4FA4-8CCC-E2F3D7069305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "F56182CE-376A-4B77-BB53-1E988842AEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "122B09A3-299A-421C-9A6B-B3FEED8E19FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "55F3E730-83F2-43C2-B6DC-77BAABB2F01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F09D3262-394A-43D1-A4ED-8887FCB20F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FEA876-302D-4F07-94E6-237C669538F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B011854A-932C-4D5C-B469-71F72608DFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "94A44054-B47B-453C-BF0F-9E071EFF6542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A4806-59AB-43D6-BFE3-A6DCE098335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "45DA4D89-1362-421F-8218-585CE5D60E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA350A8-9441-496C-A86C-0D209190A178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "7F449CD5-9D3D-4D99-8A6F-8C7946A4F2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "D85FF739-F299-479A-82F1-DB6788F3D4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF56BB-939A-4E38-BD9E-E3198E70F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9C411A2E-A407-44E5-A2B2-3D049FB2DB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7259B5-6BDC-4CB8-AB81-2375803E42E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "283E41CB-9A90-4521-96DC-F31AA592CFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "14EEA504-CBC5-4F6F-889A-D505EC4BB5B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1C3B09-3800-493E-A319-57648305FE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "39E44B09-7310-428C-8144-AE9DB0484D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "90AE30DB-C448-4FE9-AC11-FF0F27CDA227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3683A8F5-EE0E-4936-A005-DF7F6B75DED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1B615DBA-8C53-41D4-B264-D3EED8578471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B3124DD0-9E42-4896-9060-CB7DD07FC342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E37D4694-C80B-475E-AB5B-BB431F59C5E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "19519212-51DD-4448-B115-8A20A40192CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC9909E-AE9F-414D-99B1-83AA04D5297B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9AE81FA-B0F3-4F0B-A2D1-2BB590345058"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB08A27-7777-4538-ADC4-9D2F89963C13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB56048-A486-4A46-B438-CC3084BD9CB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70596",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28973",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:09.207",
      "lastModified" : "2024-11-21T07:56:19.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Authorization vulnerability in the 'sysmanctl' shell command of Juniper Networks Junos OS Evolved allows a local, authenticated attacker to execute administrative commands that could impact the integrity of the system or system availability. Administrative functions such as daemon restarting, routing engine (RE) switchover, and node shutdown can all be performed through exploitation of the 'sysmanctl' command. Access to the 'sysmanctl' command is only available from the Junos shell. Neither direct nor indirect access to 'sysmanctl' is available from the Junos CLI. This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S5-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO; 21.4 versions prior to 21.4R1-S2-EVO, 21.4R2-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.4",
            "matchCriteriaId" : "0F41A7DF-2B27-4E2E-ABFC-E0510A028199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "247FB9DF-7EC0-4298-B27C-3235D141C1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8866D-162F-4C9B-8167-2FBA25410368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E5BC7-8607-4330-AA72-2273D32F8604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "878C81C9-A418-4A21-8FDB-2116A992679C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7451A671-A3CC-4904-8D45-947B1D3783C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0108AD20-EAE6-41D1-AE48-254C46B5388A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "44FBCA6F-EB05-4EE4-85FD-944BDAF7D81B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E554FD12-FE69-44D1-B2C9-4382F8CA4456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C1D53E-70BE-4246-89ED-1074C8C70747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B38A90A9-B739-49BE-8845-9ABF846CCC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE56A7C-BA26-405F-A640-C43AF78B0A3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "683D8EED-9F26-41E7-B69C-FE198225A8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "52C3552E-798F-4719-B38D-F74E34EAAA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AE674DD3-3590-4434-B144-5AD7EB5F039D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0099BDA9-9D4B-4D6C-8234-EFD9E8C63476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D8729BC1-FB09-4E6D-A5D5-8BDC589555B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D72C3DF-4513-48AC-AAED-C1AADF0794E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8C583289-96C4-4451-A320-14CA1C390819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA43782E-0719-496E-9237-E1ABD3C4C664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "78897DD2-E161-4191-94FF-7400FB612DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "620B0CDD-5566-472E-B96A-31D2C12E3120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA3DC63-B290-4D15-BEF9-21DEF36CA2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E57AF-979B-4022-8AD6-B3558E06B718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "144730FB-7622-4B3D-9C47-D1B7A7FB7EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA246F0-154E-4F44-A97B-690D22FA73DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "25D6C07C-F96E-4523-BB54-7FEABFE1D1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2B70C784-534B-4FAA-A5ED-3709656E2B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC38173-44AB-43D5-8C27-CB43AD5E0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4DD04A-DE52-46BE-8C34-8DB47F7500F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE0E145-8E1C-446E-90ED-237E3B9CAF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E907193-075E-45BC-9257-9607DB790D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF46A8-FC3A-4779-B695-2CA11D045AEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70597",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28974",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:09.277",
      "lastModified" : "2024-11-21T07:56:19.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Check for Unusual or Exceptional Conditions vulnerability in the bbe-smgd of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). In a Broadband Edge / Subscriber Management scenario on MX Series when a specifically malformed ICMP packet addressed to the device is received from a subscriber the bbe-smgd will crash, affecting the subscriber sessions that are connecting, updating, or terminating. Continued receipt of such packets will lead to a sustained DoS condition. When this issue happens the below log can be seen if the traceoptions for the processes smg-service are enabled: BBE_TRACE(TRACE_LEVEL_INFO, \"%s: Dropped unsupported ICMP PKT ... This issue affects Juniper Networks Junos OS on MX Series: All versions prior to 19.4R3-S11; 20.2 versions prior to 20.2R3-S7; 20.3 versions prior to 20.3R3-S6; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S2; 22.1 versions prior to 22.1R2-S2, 22.1R3; 22.2 versions prior to 22.2R2; 22.3 versions prior to 22.3R1-S2, 22.3R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.4",
            "matchCriteriaId" : "BEF1C9AB-1107-4A26-BB84-BDD72B4E6564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "7F449CD5-9D3D-4D99-8A6F-8C7946A4F2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF56BB-939A-4E38-BD9E-E3198E70F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9C411A2E-A407-44E5-A2B2-3D049FB2DB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "39E44B09-7310-428C-8144-AE9DB0484D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "90AE30DB-C448-4FE9-AC11-FF0F27CDA227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3683A8F5-EE0E-4936-A005-DF7F6B75DED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "19519212-51DD-4448-B115-8A20A40192CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC9909E-AE9F-414D-99B1-83AA04D5297B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72952BFC-45B9-4379-8D9A-A10132CC34EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39DA74D-F5C7-4C11-857D-50631A110644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70599",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70599",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28975",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:09.347",
      "lastModified" : "2024-11-21T07:56:19.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Unexpected Status Code or Return Value vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated attacker with physical access to the device to cause a Denial of Service (DoS). When certain USB devices are connected to a USB port of the routing-engine (RE), the kernel will crash leading to a reboot of the device. The device will continue to crash as long as the USB device is connected. This issue affects Juniper Networks Junos OS: All versions prior to 19.4R3-S10; 20.2 versions prior to 20.2R3-S7; 20.3 versions prior to 20.3R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S2; 22.1 versions prior to 22.1R2-S2, 22.1R3; 22.2 versions prior to 22.2R2, 22.2R3; 22.3 versions prior to 22.3R1-S1, 22.3R2; 22.4 versions prior to 22.4R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-394"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.4",
            "matchCriteriaId" : "BEF1C9AB-1107-4A26-BB84-BDD72B4E6564"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF56BB-939A-4E38-BD9E-E3198E70F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9C411A2E-A407-44E5-A2B2-3D049FB2DB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "39E44B09-7310-428C-8144-AE9DB0484D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "90AE30DB-C448-4FE9-AC11-FF0F27CDA227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3683A8F5-EE0E-4936-A005-DF7F6B75DED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "19519212-51DD-4448-B115-8A20A40192CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28E42A41-7965-456B-B0AF-9D3229CE4D4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70600",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28976",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:09.420",
      "lastModified" : "2024-11-21T07:56:19.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). If specific traffic is received on MX Series and its rate exceeds the respective DDoS protection limit the ingress PFE will crash and restart. Continued receipt of this traffic will create a sustained DoS condition. This issue affects Juniper Networks Junos OS on MX Series: All versions prior to 19.1R3-S10; 19.2 versions prior to 19.2R3-S7; 19.3 versions prior to 19.3R3-S8; 19.4 versions prior to 19.4R3-S11; 20.2 versions prior to 20.2R3-S5; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S5; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.1",
            "matchCriteriaId" : "E46B49AE-2783-4962-9919-A0E1DDFCE4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "0B372356-D146-420B-95C3-381D0383B595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "92292C23-DC38-42F1-97C1-8416BBB60FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "59E2311C-075A-4C64-B614-728A21B17B1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E2DF80-63D8-48DD-BC73-C406B7AA3C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "8120EAC3-DCCB-4429-A372-C0DAA3270A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DF81F459-915E-468C-8E82-85F1A601095B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9912E998-75FB-4EA0-8E36-0A1C38147AB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AE90D0-D502-4262-A83E-F40308A81380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "739E4B74-5769-4392-BAFE-39770B021859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCE4EA8-DDBA-4766-BB81-E4DA29723723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "2849078A-447A-4615-94E1-58AF450ED22A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C625B6-25ED-4F6C-A778-6AB7FA7901CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "84EC3EE0-F1D9-4CBB-B3FA-83C05C50EB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "920FE638-BDE6-403D-9083-2BDBF6A3326F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E38CD1E2-41F5-42D1-B915-055A497C576A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "0C816B9A-F152-4E5F-8152-73635840A89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0EA9DA-2DAD-4FA4-8CCC-E2F3D7069305"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "F56182CE-376A-4B77-BB53-1E988842AEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "122B09A3-299A-421C-9A6B-B3FEED8E19FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "55F3E730-83F2-43C2-B6DC-77BAABB2F01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F09D3262-394A-43D1-A4ED-8887FCB20F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FEA876-302D-4F07-94E6-237C669538F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B011854A-932C-4D5C-B469-71F72608DFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "94A44054-B47B-453C-BF0F-9E071EFF6542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A4806-59AB-43D6-BFE3-A6DCE098335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "45DA4D89-1362-421F-8218-585CE5D60E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA350A8-9441-496C-A86C-0D209190A178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "7F449CD5-9D3D-4D99-8A6F-8C7946A4F2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "1BBF56BB-939A-4E38-BD9E-E3198E70F8E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "283E41CB-9A90-4521-96DC-F31AA592CFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5C1C3B09-3800-493E-A319-57648305FE6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "39E44B09-7310-428C-8144-AE9DB0484D1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72952BFC-45B9-4379-8D9A-A10132CC34EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39DA74D-F5C7-4C11-857D-50631A110644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70601",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28978",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:09.487",
      "lastModified" : "2024-11-21T07:56:19.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Insecure Default Initialization of Resource vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to read certain confidential information. In the default configuration it is possible to read confidential information about locally configured (administrative) users of the affected system. This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S7-EVO on pending commit???; 21.1-EVO versions prior to 21.1R3-S4-EVO on awaiting build; 21.4-EVO versions prior to 21.4R3-S1-EVO; 22.2-EVO versions prior to 22.2R3-EVO; 21.2-EVO versions prior to 21.2R3-S5-EVO on pending commit???; 21.3-EVO version 21.3R1-EVO and later versions; 22.1-EVO version 22.1R1-EVO and later versions; 22.2-EVO versions prior to 22.2R2-S1-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.4",
            "matchCriteriaId" : "0F41A7DF-2B27-4E2E-ABFC-E0510A028199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "247FB9DF-7EC0-4298-B27C-3235D141C1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8866D-162F-4C9B-8167-2FBA25410368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E5BC7-8607-4330-AA72-2273D32F8604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "878C81C9-A418-4A21-8FDB-2116A992679C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7451A671-A3CC-4904-8D45-947B1D3783C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0108AD20-EAE6-41D1-AE48-254C46B5388A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "44FBCA6F-EB05-4EE4-85FD-944BDAF7D81B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E554FD12-FE69-44D1-B2C9-4382F8CA4456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C1D53E-70BE-4246-89ED-1074C8C70747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B38A90A9-B739-49BE-8845-9ABF846CCC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE56A7C-BA26-405F-A640-C43AF78B0A3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "683D8EED-9F26-41E7-B69C-FE198225A8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "8979C85C-87DD-42B1-9CCC-BC3F7007C600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "5BDD5111-1BC2-456B-8A31-F2D252DF613C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "52C3552E-798F-4719-B38D-F74E34EAAA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AE674DD3-3590-4434-B144-5AD7EB5F039D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0099BDA9-9D4B-4D6C-8234-EFD9E8C63476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D8729BC1-FB09-4E6D-A5D5-8BDC589555B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D72C3DF-4513-48AC-AAED-C1AADF0794E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8C583289-96C4-4451-A320-14CA1C390819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA43782E-0719-496E-9237-E1ABD3C4C664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "78897DD2-E161-4191-94FF-7400FB612DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "620B0CDD-5566-472E-B96A-31D2C12E3120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA3DC63-B290-4D15-BEF9-21DEF36CA2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E57AF-979B-4022-8AD6-B3558E06B718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "144730FB-7622-4B3D-9C47-D1B7A7FB7EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA246F0-154E-4F44-A97B-690D22FA73DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "25D6C07C-F96E-4523-BB54-7FEABFE1D1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2B70C784-534B-4FAA-A5ED-3709656E2B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "60448FFB-568E-4280-9261-ADD65244F31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B770C52-7E3E-4B92-9138-85DEC56F3B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E88AC378-461C-4EFA-A04B-5786FF21FE03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0AFB30-81DC-465C-9F63-D1B15EA4809A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2035F0AC-29E7-478A-A9D0-BAA3A88B3413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4DD04A-DE52-46BE-8C34-8DB47F7500F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE0E145-8E1C-446E-90ED-237E3B9CAF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F26369D-21B2-4C6A-98C1-492692A61283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "24003819-1A6B-4BDF-B3DF-34751C137788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D332E-9133-45B9-BB07-B33C790F737A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2A4377-D044-4E43-B6CC-B753D7F6ABD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8DAEC4F4-5748-4D36-A72B-4C62A0A30E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C76DA7A5-9320-4E21-96A2-ACE70803A1CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "703C73EB-2D63-4D4F-8129-239AE1E96B2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E907193-075E-45BC-9257-9607DB790D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF46A8-FC3A-4779-B695-2CA11D045AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "39809219-9F87-4583-9DAD-9415DD320B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB299492-A919-4EBA-A62A-B3CF02FC0A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "74ED0939-D5F8-4334-9838-40F29DE3597F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C6937069-8C19-4B01-8415-ED7E9EAE2CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "97DB6DD5-F5DD-4AE1-AF2F-8DB9E18FF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "750FE748-82E7-4419-A061-2DEA26E35309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "236E23E5-8B04-4081-9D97-7300DF284000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC96EA7-90A7-4838-B95D-60DBC88C7BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "97541867-C52F-40BB-9AAE-7E87ED23D789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "85CF6664-E35A-4E9B-95C0-CDC91F7F331A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "E048A05D-882F-4B1C-BA32-3BBA3FEA31A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D77A072D-350A-42F2-8324-7D3AC1711BF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AE395C-A651-4568-88E3-3600544BF799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BE1FD4-DAD9-4357-A2E9-20E5826B0D5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81CC3480-4B65-4588-8D46-FA80A8F6D143"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70603",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28979",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:09.553",
      "lastModified" : "2024-11-21T07:56:19.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to bypass an integrity check. In a 6PE scenario and if an additional integrity check is configured, it will fail to drop specific malformed IPv6 packets, and then these packets will be forwarded to other connected networks. This issue affects Juniper Networks Junos OS: All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R3-S9; 20.2 versions prior to 20.2R3-S7; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3-S1; 21.4 versions prior to 21.4R2-S1, 21.4R3; 22.1 versions prior to 22.1R2; 22.2 versions prior to 22.2R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.3",
            "matchCriteriaId" : "ECFE39BF-15FB-4129-9D8C-4F28DABB5D83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "122B09A3-299A-421C-9A6B-B3FEED8E19FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "55F3E730-83F2-43C2-B6DC-77BAABB2F01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F09D3262-394A-43D1-A4ED-8887FCB20F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "D3FEA876-302D-4F07-94E6-237C669538F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B011854A-932C-4D5C-B469-71F72608DFCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "94A44054-B47B-453C-BF0F-9E071EFF6542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3A4806-59AB-43D6-BFE3-A6DCE098335C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "45DA4D89-1362-421F-8218-585CE5D60E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9B342307-98CF-45C9-9F08-5EB06C679B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "84429093-AB3C-4C05-B8FA-87D94091820F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "760E2418-B945-4467-BDAC-7702DDF4C4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "98097AB6-56CB-42E4-96B4-ABBD4F36553C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7844B380-7986-4B71-B1AE-22D46E5007D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF24AFC-D359-4132-A133-1F6680F7BE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "7F449CD5-9D3D-4D99-8A6F-8C7946A4F2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED73BF1A-96E4-49F1-A6AA-7B29DAA6C112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0886EFA6-47E3-4C1D-A278-D3891A487FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A209EE6F-E676-4172-8FF3-4E03748DEB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "EC395200-9A69-468A-8461-D2219B34AA0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "08584FCD-4593-4590-A988-C862295E618A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF7792C-51FF-4C6E-B5E7-F87738FE4B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "E69B0ED4-898D-4D7A-9711-8DB00EE3197B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9C411A2E-A407-44E5-A2B2-3D049FB2DB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70604",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28980",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:09.617",
      "lastModified" : "2024-11-21T07:56:19.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause Denial of Service (DoS). In a rib sharding scenario the rpd process will crash shortly after specific CLI command is issued. This issue is more likely to occur in a scenario with high route scale (>1M routes).\n\n\nThis issue affects:\nJuniper Networks Junos OS\n\n\n  *  20.2 version 20.2R3-S5 and later versions prior to 20.2R3-S6;\n  *  20.3 version 20.3R3-S2 and later versions prior to 20.3R3-S5;\n  *  20.4 version 20.4R3-S1 and later versions prior to 20.4R3-S4\n  *  21.1 version 21.1R3 and later versions prior to 21.1R3-S3;\n  *  21.2 version 21.2R1-S2, 21.2R2-S1 and later versions prior to 21.2R3-S2;\n  *  21.3 version 21.3R2 and later versions prior to 21.3R3;\n  *  21.4 versions prior to 21.4R2-S1, 21.4R3;\n  *  22.1 versions prior to 22.1R2.\n\n\n\n\nJuniper Networks Junos OS Evolved\n\n\n  *  20.4-EVO version 20.4R3-S1-EVO and later versions prior to 20.4R3-S6-EVO;\n  *  21.2-EVO version 21.2R1-S2-EVO and later versions prior to 21.2R3-S4-EVO;\n  *  21.3-EVO version 21.3R2-EVO and later versions prior to 21.3R3-S1-EVO;\n  *  21.4-EVO versions prior to 21.4R2-S1-EVO, 21.4R3-EVO;\n  *  22.1-EVO versions prior to 22.1R2-EVO.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B38A90A9-B739-49BE-8845-9ABF846CCC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE56A7C-BA26-405F-A640-C43AF78B0A3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "683D8EED-9F26-41E7-B69C-FE198225A8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "8979C85C-87DD-42B1-9CCC-BC3F7007C600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "144730FB-7622-4B3D-9C47-D1B7A7FB7EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA246F0-154E-4F44-A97B-690D22FA73DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "25D6C07C-F96E-4523-BB54-7FEABFE1D1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2B70C784-534B-4FAA-A5ED-3709656E2B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "60448FFB-568E-4280-9261-ADD65244F31A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B770C52-7E3E-4B92-9138-85DEC56F3B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E88AC378-461C-4EFA-A04B-5786FF21FE03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0AFB30-81DC-465C-9F63-D1B15EA4809A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F26369D-21B2-4C6A-98C1-492692A61283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "24003819-1A6B-4BDF-B3DF-34751C137788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D332E-9133-45B9-BB07-B33C790F737A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2A4377-D044-4E43-B6CC-B753D7F6ABD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E907193-075E-45BC-9257-9607DB790D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF46A8-FC3A-4779-B695-2CA11D045AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "39809219-9F87-4583-9DAD-9415DD320B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB299492-A919-4EBA-A62A-B3CF02FC0A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "97DB6DD5-F5DD-4AE1-AF2F-8DB9E18FF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "750FE748-82E7-4419-A061-2DEA26E35309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "236E23E5-8B04-4081-9D97-7300DF284000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC96EA7-90A7-4838-B95D-60DBC88C7BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70606",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28981",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:09.687",
      "lastModified" : "2024-11-21T07:56:20.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Input Validation vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). If the receipt of router advertisements is enabled on an interface and a specifically malformed RA packet is received, memory corruption will happen which leads to an rpd crash. This issue affects: Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S3; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2; 22.1 versions prior to 22.1R2. Juniper Networks Junos OS Evolved 20.3-EVO version 20.3R1-EVO and later versions; 20.4-EVO versions prior to 20.4R3-S6-EVO; 21.3-EVO versions prior to 21.3R3-EVO; 21.4-EVO versions prior to 21.4R2-EVO; 22.1-EVO versions prior to 22.1R2-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFB91E3-CAAC-429F-A869-DDD40FB0F84D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9CA997-2DDA-4808-B2AE-8804FEB798B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAE7C3A-5291-42B9-A665-0095E8559737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD9BB14-0375-4893-8CBE-42FF5DECE3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "423843B3-B2BE-427B-B625-4E3146D26390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "247FB9DF-7EC0-4298-B27C-3235D141C1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8866D-162F-4C9B-8167-2FBA25410368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E5BC7-8607-4330-AA72-2273D32F8604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "878C81C9-A418-4A21-8FDB-2116A992679C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7451A671-A3CC-4904-8D45-947B1D3783C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0108AD20-EAE6-41D1-AE48-254C46B5388A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "44FBCA6F-EB05-4EE4-85FD-944BDAF7D81B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E554FD12-FE69-44D1-B2C9-4382F8CA4456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C1D53E-70BE-4246-89ED-1074C8C70747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B38A90A9-B739-49BE-8845-9ABF846CCC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE56A7C-BA26-405F-A640-C43AF78B0A3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "683D8EED-9F26-41E7-B69C-FE198225A8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "8979C85C-87DD-42B1-9CCC-BC3F7007C600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC38173-44AB-43D5-8C27-CB43AD5E0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4DD04A-DE52-46BE-8C34-8DB47F7500F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE0E145-8E1C-446E-90ED-237E3B9CAF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0F26369D-21B2-4C6A-98C1-492692A61283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "24003819-1A6B-4BDF-B3DF-34751C137788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8D332E-9133-45B9-BB07-B33C790F737A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E907193-075E-45BC-9257-9607DB790D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF46A8-FC3A-4779-B695-2CA11D045AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "39809219-9F87-4583-9DAD-9415DD320B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "750FE748-82E7-4419-A061-2DEA26E35309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "236E23E5-8B04-4081-9D97-7300DF284000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "5FC96EA7-90A7-4838-B95D-60DBC88C7BC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70607",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28982",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:09.747",
      "lastModified" : "2024-11-21T07:56:20.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS). In a BGP rib sharding scenario, when an attribute of an active BGP route is updated memory will leak. As rpd memory usage increases over time the rpd process will eventually run out of memory, crash, and restart. The memory utilization can be monitored with the following CLI commands: show task memory show system processes extensive | match rpd This issue affects: Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R2. Juniper Networks Junos OS Evolved 20.3-EVO version 20.3R1-EVO and later versions; 20.4-EVO versions prior to 20.4R3-S6-EVO; 21.2-EVO versions prior to 21.2R3-EVO; 21.3-EVO versions prior to 21.3R2-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "283E41CB-9A90-4521-96DC-F31AA592CFD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFB91E3-CAAC-429F-A869-DDD40FB0F84D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9CA997-2DDA-4808-B2AE-8804FEB798B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2AAE7C3A-5291-42B9-A665-0095E8559737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2FD9BB14-0375-4893-8CBE-42FF5DECE3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "423843B3-B2BE-427B-B625-4E3146D26390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "247FB9DF-7EC0-4298-B27C-3235D141C1D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8866D-162F-4C9B-8167-2FBA25410368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E5BC7-8607-4330-AA72-2273D32F8604"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "878C81C9-A418-4A21-8FDB-2116A992679C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7451A671-A3CC-4904-8D45-947B1D3783C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0108AD20-EAE6-41D1-AE48-254C46B5388A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "44FBCA6F-EB05-4EE4-85FD-944BDAF7D81B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E554FD12-FE69-44D1-B2C9-4382F8CA4456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C1D53E-70BE-4246-89ED-1074C8C70747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B38A90A9-B739-49BE-8845-9ABF846CCC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE56A7C-BA26-405F-A640-C43AF78B0A3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "683D8EED-9F26-41E7-B69C-FE198225A8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "8979C85C-87DD-42B1-9CCC-BC3F7007C600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "620B0CDD-5566-472E-B96A-31D2C12E3120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA3DC63-B290-4D15-BEF9-21DEF36CA2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E57AF-979B-4022-8AD6-B3558E06B718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "144730FB-7622-4B3D-9C47-D1B7A7FB7EB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7BA246F0-154E-4F44-A97B-690D22FA73DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "25D6C07C-F96E-4523-BB54-7FEABFE1D1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2B70C784-534B-4FAA-A5ED-3709656E2B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC38173-44AB-43D5-8C27-CB43AD5E0B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4DD04A-DE52-46BE-8C34-8DB47F7500F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE0E145-8E1C-446E-90ED-237E3B9CAF47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70608",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28983",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:09.810",
      "lastModified" : "2024-11-21T07:56:20.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Junos OS Evolved allows an authenticated, low privileged, network based attacker to inject shell commands and execute code. This issue affects Juniper Networks Junos OS Evolved 21.4 version 21.4R1-EVO and later versions prior to 22.1R1-EVO."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E907193-075E-45BC-9257-9607DB790D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDF46A8-FC3A-4779-B695-2CA11D045AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "39809219-9F87-4583-9DAD-9415DD320B36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB299492-A919-4EBA-A62A-B3CF02FC0A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "74ED0939-D5F8-4334-9838-40F29DE3597F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C6937069-8C19-4B01-8415-ED7E9EAE2CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "97DB6DD5-F5DD-4AE1-AF2F-8DB9E18FF882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21DF05B8-EF7E-422F-8831-06904160714C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "492FCE45-68A1-4378-85D4-C4034FE0D836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "522114CC-1505-4205-B4B8-797DE1BD833B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70609",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28984",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2023-04-17T22:15:09.877",
      "lastModified" : "2024-11-21T07:56:20.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use After Free vulnerability in the Layer 2 Address Learning Manager (l2alm) of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause the Packet Forwarding Engine to crash and restart, leading to a Denial of Service (DoS). The PFE may crash when a lot of MAC learning and aging happens, but due to a Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization) that is outside the attackers direct control. This issue affects: Juniper Networks Junos OS versions prior to 19.4R3-S10 on QFX Series; 20.2 versions prior to 20.2R3-S7 on QFX Series; 20.3 versions prior to 20.3R3-S6 on QFX Series; 20.4 versions prior to 20.4R3-S5 on QFX Series; 21.1 versions prior to 21.1R3-S4 on QFX Series; 21.2 versions prior to 21.2R3-S3 on QFX Series; 21.3 versions prior to 21.3R3-S3 on QFX Series; 21.4 versions prior to 21.4R3 on QFX Series; 22.1 versions prior to 22.1R3 on QFX Series; 22.2 versions prior to 22.2R2 on QFX Series."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF52CF-F911-4615-9171-42F84429149F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "681AE183-7183-46E7-82EA-28C398FA1C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6E9627-8BF1-4BE8-844B-EE8F1C9478F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A80F23B-CD13-4745-BA92-67C23B297A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "67D4004B-1233-4258-9C7A-F05189146B44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E33F24-D480-4B5F-956D-D435A551CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E5E3FDB-3F33-4686-9B64-0152AD41939D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9C411A2E-A407-44E5-A2B2-3D049FB2DB4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "03009CC1-21AC-4A46-A747-D0C67FCD41DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A352BB7A-6F17-4E64-BC02-1A7E4CD42653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DC01F2-6DFE-4A8E-9962-5E59AA965935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA0E196-925E-4056-B411-E158702D5D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E33A522F-E35C-4473-9CBD-9C6E5A831086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E9AE26EB-699B-4B10-87E2-9E731B820F32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A29E0070-47E9-43DD-9303-C732FE8CC851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E7E8D2-5D08-492E-84FC-8803E50F2CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "7B798133-105C-448B-B06E-57327E44E478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3D361B23-A3C2-444B-BEB8-E231DA950567"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C54B047C-4B38-40C0-9855-067DCF7E48BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "38984199-E332-4A9C-A4C0-78083D052E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6526FB-2941-4D18-9B2E-472AD5A62A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "09876787-A40A-4340-9C12-8628C325353B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41615104-C17E-44DA-AB0D-6E2053BD4EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1981DE38-36B5-469D-917E-92717EE3ED53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA68ACD-AAE5-4577-B734-23AAF77BC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "65948ABC-22BB-46D5-8545-0806EDB4B86E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDB5B7D-FB37-47E3-8678-B9ED578CCA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "625BA7E6-D2AD-4A48-9B94-24328BE5B06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F462F4E3-762C-429F-8D25-5521100DD37C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "689FE1AE-7A85-4FB6-AB02-E732F23581B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "79E56DAC-75AD-4C81-9835-634B40C15DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "A0040FE2-7ECD-4755-96CE-E899BA298E0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "076AB086-BB79-4583-AAF7-A5233DFB2F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "72E2DDF6-01DF-4880-AB60-B3DA3281E88D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54010163-0810-4CF5-95FE-7E62BC6CA4F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A52AF794-B36B-43A6-82E9-628658624B0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3998DC76-F72F-4452-9150-652140B113EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E596ABD9-6ECD-48DC-B770-87B7E62EA345"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "71745D02-D226-44DC-91AD-678C85F5E6FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "6514CDE8-35DC-469F-89A3-078684D18F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4624565D-8F59-44A8-B7A8-01AD579745E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "255B6F20-D32F-42C1-829C-AE9C7923558A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "90AE30DB-C448-4FE9-AC11-FF0F27CDA227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "3683A8F5-EE0E-4936-A005-DF7F6B75DED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "19519212-51DD-4448-B115-8A20A40192CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28E42A41-7965-456B-B0AF-9D3229CE4D4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF2039C-E08C-472F-82E6-DAD3F94724B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1401145-D8EC-4DB9-9CDE-9DE6C0D000C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002-32q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E59530-3262-4BDC-915C-0B8D2EED7784"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002-60c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "626CA614-72D4-4A8B-9C38-275C7A7F8D85"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002-72q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FF30F4-3D10-4AD6-9643-5826A11C7629"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1453E42A-77B3-4922-8EC3-1A5668C39550"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26408465-BD6A-4416-B98E-691A5F651080"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF7419C-7075-4E1E-87D4-90DBDDB7968E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx3000-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C98F71-042D-412D-8064-FF8E27CAB9D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx3000-m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3110C458-EFBA-4221-9417-015B7D5874C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx3008-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0727FD0-F5A2-4156-BBDB-F4AE6E6F1B89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "858482CF-E310-4F6C-8ECC-C9BFBA3E1EC5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A336BD3-4AB0-4E9E-8AD5-E6413A5A53FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F4D44B0-E6CE-4380-8712-AC832DBCB424"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx3600-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6F6C1E3-9390-4E06-AA62-02C99447FDB4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100-96s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD0F680-ED30-48F3-A5D9-988D510CFC0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200-32c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D790AD-D00F-4FED-96FE-3046C827356B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200-48y:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9AD5C-947D-41EF-9969-FCCEB144984F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210-64c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86047DE-A0A0-4698-9414-B66C0FA7B544"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193BEBD-9436-468D-B89E-D5720603451D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportportal.juniper.net/JSA70610",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportportal.juniper.net/JSA70610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29197",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-17T22:15:09.947",
      "lastModified" : "2024-11-21T07:56:41.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline (\\n) into both the header names and values. While the specification states that \\r\\n\\r\\n is used to terminate the header list, many servers in the wild will also accept \\n\\n. This is a follow-up to CVE-2022-24775 where the fix was incomplete. The issue has been patched in versions 1.9.1 and 2.4.5. There are no known workarounds for this vulnerability. Users are advised to upgrade."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guzzlephp:psr-7:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.1",
            "matchCriteriaId" : "704750B5-E610-4CDF-AE19-64DA9B537919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guzzlephp:psr-7:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.4.5",
            "matchCriteriaId" : "DB62DA3C-0E8C-4240-9238-67D584A839D3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-24775",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/guzzle/psr7/security/advisories/GHSA-q7rv-6hp3-vh96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/guzzle/psr7/security/advisories/GHSA-wxmh-65f7-jcvw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/12/msg00028.html",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FJANWDXJZE5BGLN4MQ4FEHV5LJ6CMKQF/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O35UN4IK6VS2LXSRWUDFWY7NI73RKY2U/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.rfc-editor.org/rfc/rfc7230#section-3.2.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-24775",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/guzzle/psr7/security/advisories/GHSA-q7rv-6hp3-vh96",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/guzzle/psr7/security/advisories/GHSA-wxmh-65f7-jcvw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/12/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FJANWDXJZE5BGLN4MQ4FEHV5LJ6CMKQF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O35UN4IK6VS2LXSRWUDFWY7NI73RKY2U/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.rfc-editor.org/rfc/rfc7230#section-3.2.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29213",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-17T22:15:10.017",
      "lastModified" : "2024-11-21T07:56:43.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of `org.xwiki.platform:xwiki-platform-logging-ui` it is possible to trick a user with programming rights into visiting a constructed url where e.g., by embedding an image with this URL in a document that is viewed by a user with programming rights which will evaluate an expression in the constructed url and execute it. This issue has been addressed in versions 13.10.11, 14.4.7, and 14.10. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.2",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "F5DD0ECC-5A9D-4EA6-B86A-6FDA940D77C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "14.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "34716609-E9E2-4E29-99DD-BB68AD639A8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10",
            "matchCriteriaId" : "569EE28C-5C86-467F-A153-DD4B9BF0053D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:4.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C88F32-3EFB-4D0E-9046-D13157E6256F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:4.2:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "BC907C33-432E-4153-B1A2-9B8BF9167E1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D1779BB7-C939-433A-BA96-EDD1A8C31AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:14.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E4F79D59-2C67-4875-B50F-F2ECE52B384C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/49fdfd633ddfa346c522d2fe71754dc72c9496ca",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-4655-wh7v-3vmg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20291",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/49fdfd633ddfa346c522d2fe71754dc72c9496ca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-4655-wh7v-3vmg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30536",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-17T22:15:10.137",
      "lastModified" : "2024-11-21T08:00:22.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "slim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline (\\n) into both the header names and values. While the specification states that \\r\\n\\r\\n is used to terminate the header list, many servers in the wild will also accept \\n\\n. An attacker that is able to control the header names that are passed to Slilm-Psr7 would be able to intentionally craft invalid messages, possibly causing application errors or invalid HTTP requests being sent out with an PSR-18 HTTP client. The latter might present a denial of service vector if a remote service’s web application firewall bans the application due to the receipt of malformed requests. The issue has been patched in version 1.6.1. There are no known workarounds to this issue. Users are advised to upgrade."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slimframework:slim_psr-7:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.1",
            "matchCriteriaId" : "1CB325BE-7B88-42C4-ABF2-6AA374A0FE92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/slimphp/Slim-Psr7/commit/ed1d553225dd190875d8814c47460daed4b550bb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/slimphp/Slim-Psr7/security/advisories/GHSA-q2qj-628g-vhfw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.rfc-editor.org/rfc/rfc7230#section-3.2.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/slimphp/Slim-Psr7/commit/ed1d553225dd190875d8814c47460daed4b550bb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/slimphp/Slim-Psr7/security/advisories/GHSA-q2qj-628g-vhfw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.rfc-editor.org/rfc/rfc7230#section-3.2.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30539",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-17T22:15:10.210",
      "lastModified" : "2024-11-21T08:00:22.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud is a personal home server system. Depending on the set up tags and other workflows this issue can be used to limit access of others or being able to grant them access when there are system tag based files access control or files retention rules. It is recommended that the Nextcloud Server is upgraded to 24.0.11 or 25.0.5, the Nextcloud Enterprise Server to 21.0.9.11, 22.2.10.11, 23.0.12.6, 24.0.11 or 25.0.5, and the Nextcloud Files automated tagging app to 1.11.1, 1.12.1, 1.13.1, 1.14.2, 1.15.3 or 1.16.1. Users unable to upgrade should disable all workflow related apps. Users are advised to upgrade."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_files_automated_tagging:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.14.0",
            "versionEndExcluding" : "1.14.2",
            "matchCriteriaId" : "1C665CB5-94A9-4916-AC88-9C9F9F8A4778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_files_automated_tagging:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.15.0",
            "versionEndExcluding" : "1.15.3",
            "matchCriteriaId" : "376831D6-33D5-431A-BFFB-036784A9D08D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_files_automated_tagging:1.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C83F62E-7C71-4230-9F8E-B79C0AE821A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_files_automated_tagging:1.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A915FBA-4292-4D7A-9D13-446E95773A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_files_automated_tagging:1.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD21F977-90E4-4E1D-A5A8-2ABE9D530807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_files_automated_tagging:1.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB632467-6671-4E24-ACAA-1CF780340A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndExcluding" : "21.0.9.11",
            "matchCriteriaId" : "CCFF2EE4-A5E2-4C88-9E4E-F442E567166C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.2.10.11",
            "matchCriteriaId" : "59DDD98F-8315-4CA0-9360-E05B0B790086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.12.6",
            "matchCriteriaId" : "CE1029E7-ACE9-4547-A18D-10300912A87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.11",
            "matchCriteriaId" : "F826F841-9E60-44B7-81F0-77E552CC2BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.11",
            "matchCriteriaId" : "6A5FB4F4-16FC-4B98-897C-4DA109899A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.5",
            "matchCriteriaId" : "8B9FE0C2-3437-42C6-9F9E-84DB8AC4D3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.5",
            "matchCriteriaId" : "88FDB61B-A9D8-4762-B6DD-A6FFF347E0B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/files_automatedtagging/pull/705",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3m2f-v8x7-9w99",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/37252",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1895976",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/nextcloud/files_automatedtagging/pull/705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3m2f-v8x7-9w99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/37252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1895976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30540",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-17T22:15:10.277",
      "lastModified" : "2024-11-21T08:00:23.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Talk is a chat, video & audio call extension for Nextcloud. In affected versions a user that was added later to a conversation can use this information to get access to data that was deleted before they were added to the conversation. This issue has been patched in version 15.0.5 and it is recommended that users upgrad to 15.0.5. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:talk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.0.5",
            "matchCriteriaId" : "C024C2A5-80B9-4C9C-B895-C595C05767E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c9hr-cq65-9mjw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/spreed/pull/8985",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1894676",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c9hr-cq65-9mjw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/spreed/pull/8985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1894676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30541",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-17T22:15:10.357",
      "lastModified" : "2024-11-21T08:00:23.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenZeppelin Contracts is a library for secure smart contract development. A function in the implementation contract may be inaccessible if its selector clashes with one of the proxy's own selectors. Specifically, if the clashing function has a different signature with incompatible ABI encoding, the proxy could revert while attempting to decode the arguments from calldata. The probability of an accidental clash is negligible, but one could be caused deliberately and could cause a reduction in availability. The issue has been fixed in version 4.8.3. As a workaround if a function appears to be inaccessible for this reason, it may be possible to craft the calldata such that ABI decoding does not fail at the proxy and the function is properly proxied through."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openzeppelin:contracts:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "4.8.3",
            "matchCriteriaId" : "F5D61C00-57E7-422E-A186-495348CAB22C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openzeppelin:contracts_upgradeable:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "4.8.3",
            "matchCriteriaId" : "514E431F-3C3E-49CA-A16E-03CC1B16D236"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/pull/4154",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-mx2q-35m2-x2rh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/pull/4154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-mx2q-35m2-x2rh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30543",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-17T22:15:10.420",
      "lastModified" : "2024-11-21T08:00:23.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "@web3-react is a framework for building Ethereum Apps . In affected versions the `chainId` may be outdated if the user changes chains as part of the connection flow. This means that the value of `chainId` returned by `useWeb3React()` may be incorrect. In an application, this means that any data derived from `chainId` could be incorrect. For example, if a swapping application derives a wrapped token contract address from the `chainId` *and* a user has changed chains as part of their connection flow the application could cause the user to send funds to the incorrect address when wrapping. This issue has been addressed in PR #749 and is available in updated npm artifacts. There are no known workarounds for this issue. Users are advised to upgrade.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.2.14",
            "matchCriteriaId" : "EEBFBE76-81D0-43F6-B053-204660EA69D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:7.0.0:alpha0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "97D99617-066C-418D-94D8-4347CB79080F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:7.0.1:alpha0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "031B164B-0B30-47A5-99F9-431107CAAC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:7.0.2:alpha0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "867EF023-78A0-4DF1-9225-1A23F0B41FAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.22:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3357042F-348C-4970-AD48-45318EBA869C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.23:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "20DB4C57-49EA-4FF6-8AC6-370581D2D3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.24:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F840A555-FBFD-4BEC-A3CE-F2D42948A9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.25:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7F5BCBDC-D135-4E68-91DF-2073AD6E3F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.26:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2C6DECF6-4481-47FE-9E84-BA68AB45CB18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.27:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A4EDC936-105D-42E5-ABC4-2309970F7E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.28:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "115D9333-BAB9-4B1D-90C5-374757D77EBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.29:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "619AD668-2C0E-48A2-9EC7-4CEB4FEC8C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.30:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "60EA6555-CEC5-4726-9F27-11464168CC60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.31:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "EB7BDA79-CEFA-466D-B696-9B6B5FD46273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.32:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9B73A41C-7FF8-4C70-9E4D-D88A3B9E811A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.33:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3C320420-064D-4A99-B361-588BAC742AE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.34:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1D85B19D-9264-49F8-B472-C5E26A3E3CB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.2.14",
            "matchCriteriaId" : "E9945BED-1282-445E-A141-B64DB4B774B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:7.0.0:alpha0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "88E0A362-4D84-4BF8-82A5-119B1DBFA9E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:7.0.1:alpha0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1E311586-48D8-4B91-9C94-664BCE4DB774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:7.0.2:alpha0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E9095F45-86D2-41E7-A8E3-73CE5F2BF948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.0:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7026070E-CF9E-49CF-882E-DA832E97373E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.1:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "037304D2-EC67-4A0F-B6A7-FA6AEEB087EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.2:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7BA69DAA-B14D-457F-87DB-A16A11AC4401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.3:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "CC86A96C-F9EA-4AAA-ADF7-FE9E51759265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.4:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4B096244-8479-4D38-9D51-5050F326B529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.5:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A1FA871A-D2F0-4D62-832D-AAF9E1E65EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.6:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7F3DD9C1-4434-43A9-BA06-4BDA9B1238F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.7:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3895DD87-F00B-46CA-8940-9FA5AB2321C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.8:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "54DA795F-160A-4B14-9B1E-9C4AF2BDB290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.9:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FAC5FCA5-B513-4F33-B4A1-CF2DED498265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.10:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F560CCFA-5CC1-439E-A765-13CF408C99E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.11:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B1DAF74A-591C-488E-BBF0-3D098DE64430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.12:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0A701642-A843-45B1-8051-E324CC84F17A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.13:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9383845D-5168-400C-ADC1-1E34EEE012CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.14:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E6B03541-EB4E-4E2A-A353-497A6C7C6E8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.15:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6CE2809F-9A2B-471B-A78E-51274067A33F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.16:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "11A4D81C-3932-4DAE-B716-BA221DA3B710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.17:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DB765028-E18F-4FB2-838D-D8694A21E1C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.18:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2F60F106-CB6B-46E9-B971-DE8B0C4EB5BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.19:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BC840E7C-779D-43D7-A5CE-19C461F8A11A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.20:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2F17D287-184C-4BED-B517-055E0A7DF245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.21:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5EAB98DE-05D8-47E6-B11C-236103DD2378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.22:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6E8552BF-0D0A-4B34-A75F-35693EF8C2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.23:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F9395ADA-F9FC-4649-8DE3-38A95E25FDCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.24:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "93293BE4-5EB5-447C-A13E-777F2EEA8F42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.25:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D0EF23D5-1295-44A5-883D-53A7EA7EFC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_eip1193:8.0.26:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1987A468-04DC-46C3-A422-7FEFDBD5FEE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.2.14",
            "matchCriteriaId" : "9A952A54-631B-41CB-B6EE-949C7AB5FD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.0:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2FD59F45-0C54-489C-95EC-D5D6BCF3BE76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.1:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C821AA73-2143-45DD-8EBC-480239A1E3AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.2:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E4FCFFC4-2CDA-49EF-89D8-5D9BD42B456C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.3:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A205FCE5-74B4-4A14-882B-5CBB07A6B473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.4:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8787AAE0-BF4D-4E57-BF28-CE760AEDBAF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.5:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0BFEF4F2-8C57-416C-8C46-1F2DC6D4ADBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.6:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1FA03C82-B495-43DF-ABBE-2B81F19EFC10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.7:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "316E2F68-1C06-4264-9EDB-EF605F66FA16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.8:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "ED11C0C2-BE02-434E-9F95-76423EF75266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.9:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B6FEDEF0-F462-4C73-B6F1-C054DF5E3413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.10:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4634A2DE-5D45-44CE-AAAE-8E0095F159F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.11:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5F1B5D39-762F-4C5A-8484-D9A256BDB16F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.12:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6522CB1E-4934-4AC1-A21F-850284525822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.13:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F4E7904E-1FAB-4C67-8D1C-4C5DD337B0AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.14:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "764584DB-A387-4D03-B750-2DE84D87BC67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.15:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "54152970-56DE-4B5E-B83D-EBC49E21BC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.16:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B6B625E4-486B-4B18-9E69-942854470587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.17:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "19254D44-7BCE-4981-ADBB-3D10F9BACDAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.18:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "80479B38-2073-4A42-BEBE-E0B6DE7B3368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.19:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "187C9F7C-192D-4B44-840A-F32EDF373733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.20:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "87EF8A5D-8268-4913-9549-D9BBAB8AE0CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.21:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B79AC902-5E55-4864-AF4A-499FA84D78FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.22:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "060DAC18-584C-4D3E-99F4-C52761524551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.23:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D82E7C03-C0AC-4854-95B6-D2D352C8B683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.24:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C8A6A915-5D90-4181-97AA-3149F676D3B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.25:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D27FD8D0-8E87-47DE-B30F-D17ED01F1E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.26:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2DE0AA39-E51B-40E2-94B3-1FA051296A87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.27:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "21DF3197-787E-4A6D-A9DD-5BDF8D8BE5D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.28:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "41D3FBBD-4E4C-4EA0-8E12-4D03345238A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_metamask:8.0.29:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D29E4061-1A92-48BD-BE9F-B86797484360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.2.14",
            "matchCriteriaId" : "A12C8740-1891-4658-9A3E-9C203CBEE030"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:7.0.0:alpha0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "099E7111-3B4A-4D47-A709-51B8E65D9759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:7.0.1:alpha0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3466C3DC-A21E-45CC-A6DF-F83075051BC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:7.0.2:alpha0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5E76DC69-DFB1-4A1D-8E41-0F1482B58443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.0:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5DB50B68-080A-4959-8C6F-8D1A73C43A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.1:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D0D96752-4FAB-4449-ADE2-18E0BE8A0B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.2:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B27AE5A9-863E-4D87-890F-E47236094496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.3:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BCBDDDC3-F551-41BA-8E23-C69D5FE77C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.4:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0BFA2ED3-E3D2-42C6-8FB8-4526BFFA8880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.5:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "822B7769-961F-432A-AE9A-63E968423ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.6:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "E0F87FF4-A7D4-4024-B03D-B9B44BD56FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.7:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F42F65E7-76D0-41D3-BFFD-6A5799164BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.8:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B815323F-8B88-4A95-8750-A9713F42A92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.9:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "56B34226-45B2-44E3-838C-51FEF35DB86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.10:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9D325B50-AAD9-4512-B32C-39B1C4A22AB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.11:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "860A5001-3C21-46AF-903D-0C4C4C08DA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.12:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "613584C9-5948-4412-97C1-330C2DC36291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.13:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2172774E-4C8A-4396-B19D-7F36D6486E3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.14:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4E4E85C3-0E0C-48E7-8C04-C0EC77B66F18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.15:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3D72EF8E-E5BB-4EF6-8A51-6011BDB5B262"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.16:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3D403B3F-CB79-415B-998B-B9FFDCCF221A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.17:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "376781DD-1BBB-4F3C-BDDE-5714BBC5CA00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.18:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6B29EB85-CDB3-4967-8858-63212A341A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.19:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "2168E438-464A-4EDF-8139-C9EA7CDA55E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.20:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "64389A41-12A9-4410-A1FA-587054982C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.21:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "29028227-3240-46BC-A695-23EED253278D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.22:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F8143558-F427-4C1F-977A-6033C7A90A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.23:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A3B0CF35-F6C5-4575-AFFC-077AC35632D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.24:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "04340C0D-877D-4040-B17F-85CCD3A63572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.25:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BB50BB32-A922-45E3-A0C3-2471FE7A6B6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.26:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C2F73DAE-A07B-47DE-B55C-3047DAF0CE49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.27:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "FA9B29EC-6BFE-4C61-A1EF-B748BEF5CE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.28:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7079F6EE-59C7-4475-AE19-8E3BDFD825B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.29:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0A1C0321-0111-44FC-9F9C-4CF3748C0CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.30:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "68C33FF7-711F-4A8D-98EF-00EBBE97FA23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.31:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6CA3FB5A-F9EB-4D23-968B-75230B940AC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.32:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C2B2B665-2B94-4876-A508-3BC9D15507F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.33:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "3B57214D-E716-4902-82BE-B5511978C95E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.34:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "52B3A395-2934-4279-AFD0-446F07C5F4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.35:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "384DC229-5EDE-43A5-A6EC-36C69866AB7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.36:beta0:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D47B96E7-8AEF-4C2A-9DDB-7014A333043C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Uniswap/web3-react/pull/749",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/Uniswap/web3-react/security/advisories/GHSA-8pf3-6fgr-3g3g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Uniswap/web3-react/pull/749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/Uniswap/web3-react/security/advisories/GHSA-8pf3-6fgr-3g3g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30547",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-17T22:15:10.487",
      "lastModified" : "2024-11-21T08:00:24.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside `handleException()` which can be used to escape the sandbox and run arbitrary code in host context. This vulnerability was patched in the release of version `3.9.17` of `vm2`. There are no known workarounds for this vulnerability. Users are advised to upgrade."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vm2_project:vm2:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "3.9.16",
            "matchCriteriaId" : "6D85218D-E019-4345-8171-42A65FFA75AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/leesh3288/381b230b04936dd4d74aaf90cc8bb244",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/commit/4b22e87b102d97d45d112a0931dba1aef7eea049",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/commit/f3db4dee4d76b19869df05ba7880d638a880edd5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/security/advisories/GHSA-ch3r-j5x3-6q2m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/leesh3288/381b230b04936dd4d74aaf90cc8bb244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/commit/4b22e87b102d97d45d112a0931dba1aef7eea049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/commit/f3db4dee4d76b19869df05ba7880d638a880edd5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/patriksimek/vm2/security/advisories/GHSA-ch3r-j5x3-6q2m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2138",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-18T01:15:07.193",
      "lastModified" : "2024-11-21T07:58:00.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of Hard-coded Credentials in GitHub repository nuxtlabs/github-module prior to 1.6.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuxtlabs:nuxt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.2",
            "matchCriteriaId" : "8B79D4E0-35DF-40DF-8473-FF493C771CA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nuxtlabs/github-module/commit/5490c43f729eee60f07920bf88c0aabdc1398b6e",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/65096ef9-eafc-49da-b49a-5b88c0203ca6",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nuxtlabs/github-module/commit/5490c43f729eee60f07920bf88c0aabdc1398b6e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/65096ef9-eafc-49da-b49a-5b88c0203ca6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2119",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-18T02:15:07.083",
      "lastModified" : "2026-04-08T19:18:11.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Responsive Filterable Portfolio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.0.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i13websolution:responsive_filterable_portfolio:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.19",
            "matchCriteriaId" : "FCCE14EC-0888-4A12-AE08-CBBCB3B2FCA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-responsive-thumbnail-slider/trunk/wp-responsive-images-thumbnail-slider.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2808922%40responsive-filterable-portfolio%2Ftags%2F1.0.19&new=2899431%40responsive-filterable-portfolio%2Ftags%2F1.0.20",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e67dfe0f-ac1c-4a78-bfc9-0cfd6c3040d4?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-responsive-thumbnail-slider/trunk/wp-responsive-images-thumbnail-slider.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2808922%40responsive-filterable-portfolio%2Ftags%2F1.0.19&new=2899431%40responsive-filterable-portfolio%2Ftags%2F1.0.20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e67dfe0f-ac1c-4a78-bfc9-0cfd6c3040d4?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2120",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-18T02:15:07.160",
      "lastModified" : "2026-04-08T19:18:12.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i13websolution:thumbnail_carousel_slider:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.9",
            "matchCriteriaId" : "792DBF18-D703-4113-AC7A-27D72399664E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-responsive-thumbnail-slider/trunk/wp-responsive-images-thumbnail-slider.php",
        "source" : "security@wordfence.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2813150%40wp-responsive-thumbnail-slider%2Ftags%2F1.1.9&new=2899786%40wp-responsive-thumbnail-slider%2Ftags%2F1.1.10",
        "source" : "security@wordfence.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f4bf4e12-5cbb-45bc-938e-62163baaa15d?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/wp-responsive-thumbnail-slider/trunk/wp-responsive-images-thumbnail-slider.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2813150%40wp-responsive-thumbnail-slider%2Ftags%2F1.1.9&new=2899786%40wp-responsive-thumbnail-slider%2Ftags%2F1.1.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/f4bf4e12-5cbb-45bc-938e-62163baaa15d?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2144",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-18T11:15:07.480",
      "lastModified" : "2024-11-21T07:58:01.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Online Thesis Archiving System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/departments/view_department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226265 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_thesis_archiving_system_project:online_thesis_archiving_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBEC0A7-B8A1-4BF3-8DAE-172398A3E9AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Thesis%20Archiving%20System/Online%20Thesis%20Archiving%20System%20-%20vuln%206.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226265",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226265",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Thesis%20Archiving%20System/Online%20Thesis%20Archiving%20System%20-%20vuln%206.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2145",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-18T11:15:07.550",
      "lastModified" : "2024-11-21T07:58:01.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been classified as critical. Affected is an unknown function of the file projects_per_curriculum.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-226266 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_thesis_archiving_system_project:online_thesis_archiving_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBEC0A7-B8A1-4BF3-8DAE-172398A3E9AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Thesis%20Archiving%20System/Online%20Thesis%20Archiving%20System%20-%20vuln%201.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226266",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226266",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Thesis%20Archiving%20System/Online%20Thesis%20Archiving%20System%20-%20vuln%201.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226266",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-18T12:15:07.493",
      "lastModified" : "2025-02-06T16:15:34.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jbootfly_project:jbootfly:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7950693A-0A14-4B5C-ACEF-6E4BF9F2CA55"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/fuhai/jbootfly/issues/I6GDW8",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/yangfuhai/jbootfly/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://gitee.com/fuhai/jbootfly/issues/I6GDW8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/yangfuhai/jbootfly/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2020",
      "sourceIdentifier" : "security@checkmk.com",
      "published" : "2023-04-18T12:15:07.537",
      "lastModified" : "2024-11-21T07:57:46.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient permission checks in the REST API in Tribe29 Checkmk <= 2.1.0p27 and <= 2.2.0b4 (beta) allow unauthorized users to schedule downtimes for any host."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@checkmk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@checkmk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-280"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE224D8-742B-4D1F-ABBE-3DDA3EA5C5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6FCE7B-7ECE-42A4-82C5-12A647B0CCC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "923AA113-D5E7-4F78-88BA-B72EF250F3EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "B1984F57-A313-48AC-B8F9-F352D82824D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "A38DB527-72A6-40B8-B46F-B8E78BFFDB1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b5:*:*:*:*:*:*",
            "matchCriteriaId" : "67643E11-91A1-4580-BC4C-574074C862CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b6:*:*:*:*:*:*",
            "matchCriteriaId" : "350B7E0F-D234-4D7C-91E4-F35E73579A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b7:*:*:*:*:*:*",
            "matchCriteriaId" : "DE58ACA9-8078-46A7-8487-C06E4E38F372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b8:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D8CF4D-E1F8-4D8D-A8A9-1783CAC869E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:b9:*:*:*:*:*:*",
            "matchCriteriaId" : "58B0B051-7D3C-4EC7-96B0-38A1CC108D61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A741-AAF2-43EE-8272-9239133A01E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "A5F275A3-A99E-40E1-BD77-694FA568541F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "3A44BF1A-5BE0-4412-B51D-055445758B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "A31BAE94-9096-4320-AC19-AA204E8EC08D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "1B0784EA-98E8-4490-B97B-894F188A223D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "A56A901F-1040-4DB9-9BE3-FE1999C514CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "58A904FC-C015-469D-8502-E678D5FDBD06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p16:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5D109C-60AA-4FA4-9B10-2191AAF109F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "37297866-24BB-4044-8744-EC0A8C29F152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D4A171-CCB3-43B8-8B70-78610423E7C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA8F776-A724-48FC-B7EF-13788BC69753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p20:*:*:*:*:*:*",
            "matchCriteriaId" : "46F42A22-99F2-4DF5-9B00-3123396F87AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p21:*:*:*:*:*:*",
            "matchCriteriaId" : "1C59D4D3-D526-4E6B-B3AA-FE485D030190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p22:*:*:*:*:*:*",
            "matchCriteriaId" : "65E5CAE6-DC8B-47B3-84A0-D79B0C33EB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p23:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9E0D89-79E2-476A-8A3E-8443316BC310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p24:*:*:*:*:*:*",
            "matchCriteriaId" : "38EA0591-C30B-4102-8A06-1B922FD3A0C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p25:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9AF0D3-8DD6-4EC7-BB33-54401D4025FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p26:*:*:*:*:*:*",
            "matchCriteriaId" : "983604CC-DD2C-42A9-8B9D-A9A261CE8BA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p27:*:*:*:*:*:*",
            "matchCriteriaId" : "224960F7-695C-415B-B991-E8C01859AA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "076463AA-195F-4CD6-861B-72FE1C8A407F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "63043834-98E5-47C2-91F1-41B98270ABCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "FCF745D0-2EA6-4414-90BC-99D3ED08BB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "4823087F-D7FA-4594-8FD3-412DE5EA1F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "6429F9CE-D477-4CFF-B6E0-4BF11B61ED0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "A50C58F9-94ED-4D85-8331-2D81F8E0760A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.1.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6AC0BD-FB65-4FAA-B344-66F87F16F8B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.2.0:b1:*:*:*:*:*:*",
            "matchCriteriaId" : "B068974F-6F67-4CBB-B567-FCED86E28F22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.2.0:b2:*:*:*:*:*:*",
            "matchCriteriaId" : "EA70F36A-EEF6-48DC-B15E-055D0DE8A052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.2.0:b3:*:*:*:*:*:*",
            "matchCriteriaId" : "B2017F38-38DB-4E96-B34F-160BC731CBBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.2.0:b4:*:*:*:*:*:*",
            "matchCriteriaId" : "0949F399-371B-409C-AF9F-32690D881440"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkmk:checkmk:2.2.0:i1:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0B99A8-A124-43BD-B8AA-EECC9112346F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://checkmk.com/werk/13981",
        "source" : "security@checkmk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://checkmk.com/werk/13981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2146",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-18T12:15:07.593",
      "lastModified" : "2024-11-21T07:58:01.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226267."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_thesis_archiving_system_project:online_thesis_archiving_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBEC0A7-B8A1-4BF3-8DAE-172398A3E9AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Thesis%20Archiving%20System/Online%20Thesis%20Archiving%20System%20-%20vuln%203.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226267",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226267",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Thesis%20Archiving%20System/Online%20Thesis%20Archiving%20System%20-%20vuln%203.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2147",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-18T12:15:07.660",
      "lastModified" : "2024-11-21T07:58:01.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/students/view_details.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226268."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_thesis_archiving_system_project:online_thesis_archiving_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBEC0A7-B8A1-4BF3-8DAE-172398A3E9AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Thesis%20Archiving%20System/Online%20Thesis%20Archiving%20System%20-%20vuln%204.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226268",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226268",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Thesis%20Archiving%20System/Online%20Thesis%20Archiving%20System%20-%20vuln%204.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2148",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-18T13:15:09.257",
      "lastModified" : "2024-11-21T07:58:01.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Campcodes Online Thesis Archiving System 1.0. This affects an unknown part of the file /admin/curriculum/view_curriculum.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226269 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_thesis_archiving_system_project:online_thesis_archiving_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBEC0A7-B8A1-4BF3-8DAE-172398A3E9AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Thesis%20Archiving%20System/Online%20Thesis%20Archiving%20System%20-%20vuln%205.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226269",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226269",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Thesis%20Archiving%20System/Online%20Thesis%20Archiving%20System%20-%20vuln%205.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2149",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-18T13:15:09.330",
      "lastModified" : "2024-11-21T07:58:01.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in Campcodes Online Thesis Archiving System 1.0. This vulnerability affects unknown code of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-226270 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_thesis_archiving_system_project:online_thesis_archiving_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEBEC0A7-B8A1-4BF3-8DAE-172398A3E9AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Thesis%20Archiving%20System/Online%20Thesis%20Archiving%20System%20-%20vuln%207.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226270",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226270",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Online%20Thesis%20Archiving%20System/Online%20Thesis%20Archiving%20System%20-%20vuln%207.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2150",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-18T13:15:09.393",
      "lastModified" : "2024-11-21T07:58:01.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Task Reminder System 1.0. This issue affects some unknown processing of the file Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226271."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:task_reminder_system_project:task_reminder_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2D793D-38A9-47EE-A7AE-7DAE3441BBB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.226271",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226271",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/o46oHLvY2-E",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226271",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/o46oHLvY2-E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2151",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-18T13:15:09.467",
      "lastModified" : "2024-11-21T07:58:02.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file manage_student.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226272."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:student_study_center_desk_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD3233D-01A2-4779-9E48-F3495A5E56D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xzz0787/vul/blob/main/README.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226272",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226272",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xzz0787/vul/blob/main/README.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226272",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-18T14:15:07.383",
      "lastModified" : "2024-11-21T07:56:10.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ami:megarac_sp-x:12:-:*:*:*:*:*:*",
            "matchCriteriaId" : "781C601A-7C89-48CA-A200-E5992A9BDA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ami:megarac_sp-x:13:-:*:*:*:*:*:*",
            "matchCriteriaId" : "28ED8DD4-8626-46AC-AD64-73255EC130BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023003.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ami.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/163057",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023003.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ami.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/163057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2152",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-18T14:15:07.430",
      "lastModified" : "2024-11-21T07:58:02.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226273 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:student_study_center_desk_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD3233D-01A2-4779-9E48-F3495A5E56D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xzz0787/vul/blob/main/README.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226273",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226273",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xzz0787/vul/blob/main/README.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2153",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-18T14:15:07.503",
      "lastModified" : "2024-11-21T07:58:02.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/assets/plugins/DataTables/examples/examples_support/editable_ajax.php of the component POST Parameter Handler. The manipulation of the argument value with the input 1><script>alert(666)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-226274 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:complaint_management_system_project:complaint_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FB2709-4441-4348-A5AB-C7257108803E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/1406213367/bug_report/blob/main/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226274",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226274",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/1406213367/bug_report/blob/main/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-18T15:15:07.810",
      "lastModified" : "2025-02-06T16:15:35.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dreamer CMS 3.0.1 is vulnerable to stored Cross Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iteachyou:dreamer_cms:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64697ADD-FA27-48AD-81BF-7F1D307D3DA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/iteachyou-wjn/dreamer_cms/issues/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/iteachyou-wjn/dreamer_cms/issues/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2154",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-18T15:15:07.863",
      "lastModified" : "2024-11-21T07:58:02.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/?page=reminders/view_reminder. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226275."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:task_reminder_system_project:task_reminder_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2D793D-38A9-47EE-A7AE-7DAE3441BBB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.226275",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226275",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/teK82KkWtdA",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/teK82KkWtdA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2155",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-18T15:15:07.920",
      "lastModified" : "2024-11-21T07:58:02.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file classes/Master.php?f=save_cargo_type. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226276."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:air_cargo_management_system_project:air_cargo_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D90CD3-B8A3-4899-AFE1-43A81B5EE02C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kev6798/bug_report/blob/main/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226276",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226276",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kev6798/bug_report/blob/main/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28140",
      "sourceIdentifier" : "bugreport@qualys.com",
      "published" : "2023-04-18T16:15:09.003",
      "lastModified" : "2024-11-21T07:54:28.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nAn Executable Hijacking condition exists in the\nQualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackers\nmay load a malicious copy of a Dependency Link Library (DLL) via a local\nattack vector instead of the DLL that the application was expecting, when\nprocesses are running with escalated privileges. This vulnerability\nis bounded only to the time of uninstallation and can only be exploited\nlocally.\n\n\n\nAt the time of this disclosure, versions before 4.0 are classified as End of\nLife.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "bugreport@qualys.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "bugreport@qualys.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualys:cloud_agent:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "3.1.3.34",
            "versionEndExcluding" : "4.5.3.1",
            "matchCriteriaId" : "A3C649A1-257A-441A-A11B-33208739DABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualys.com/security-advisories/",
        "source" : "bugreport@qualys.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/security-advisories/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28141",
      "sourceIdentifier" : "bugreport@qualys.com",
      "published" : "2023-04-18T16:15:09.087",
      "lastModified" : "2024-11-21T07:54:28.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nAn NTFS Junction condition exists in the Qualys Cloud Agent\nfor Windows platform in versions before 4.8.0.31. Attackers may write files to\narbitrary locations via a local attack vector. This allows attackers to assume\nthe privileges of the process, and they may delete or otherwise on unauthorized\nfiles, allowing for the potential modification or deletion of sensitive files\nlimited only to that specific directory/file object. This vulnerability is\nbounded to the time of installation/uninstallation and can only be exploited locally.\n\n\n\nAt the time of this disclosure, versions before 4.0 are\nclassified as End of Life.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "bugreport@qualys.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "bugreport@qualys.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualys:cloud_agent:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "3.1.3.34",
            "versionEndExcluding" : "4.8.0.31",
            "matchCriteriaId" : "EA975AAE-08D4-4B1F-BA55-C9F55B32A93F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualys.com/security-advisories/",
        "source" : "bugreport@qualys.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/security-advisories/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28142",
      "sourceIdentifier" : "bugreport@qualys.com",
      "published" : "2023-04-18T16:15:09.153",
      "lastModified" : "2024-11-21T07:54:28.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA Race Condition exists in the Qualys Cloud Agent for Windows\nplatform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to\nescalate privileges limited on the local machine during uninstallation of the\nQualys Cloud Agent for Windows. Attackers may gain SYSTEM level privileges on\nthat asset to run arbitrary commands.\n\n\n\nAt the time of this disclosure, versions before 4.0 are classified as End\nof Life.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "bugreport@qualys.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "bugreport@qualys.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualys:cloud_agent:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "3.1.3.34",
            "versionEndExcluding" : "4.5.3.1",
            "matchCriteriaId" : "A3C649A1-257A-441A-A11B-33208739DABD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualys.com/security-advisories/",
        "source" : "bugreport@qualys.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualys.com/security-advisories/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28143",
      "sourceIdentifier" : "bugreport@qualys.com",
      "published" : "2023-04-18T16:15:09.223",
      "lastModified" : "2024-11-21T07:54:28.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nQualys Cloud Agent for macOS (versions 2.5.1-75 before 3.7)\ninstaller allows a local escalation of privilege bounded only to the time of\ninstallation and only on older macOSX (macOS 10.15 and older) versions.\nAttackers may exploit incorrect file permissions to give them ROOT command\nexecution privileges on the host. During the install of the PKG, a step in the\nprocess involves extracting the package and copying files to several\ndirectories. Attackers may gain writable access to files during the install of\nPKG when extraction of the package and copying files to several directories,\nenabling a local escalation of privilege.\n\n\n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "bugreport@qualys.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "bugreport@qualys.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qualys:cloud_agent:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "2.5.1-75",
            "versionEndExcluding" : "3.7",
            "matchCriteriaId" : "1FDE3FE5-9778-453F-A9EE-CC9978DEFEB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.15",
            "matchCriteriaId" : "22A86A9E-554E-48DD-A654-AC8AABED90FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://qualys.com/security-advisories",
        "source" : "bugreport@qualys.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://qualys.com/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2160",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-18T16:15:09.283",
      "lastModified" : "2024-11-21T07:58:03.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modoboa:modoboa:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "EDF096DF-1D51-43ED-9F11-D69473204DEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modoboa/modoboa/commit/130257c96a2392ada795785a91178e656e27015c",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/54fb6d6a-6b39-45b6-b62a-930260ba484b",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modoboa/modoboa/commit/130257c96a2392ada795785a91178e656e27015c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/54fb6d6a-6b39-45b6-b62a-930260ba484b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1548",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T17:15:07.130",
      "lastModified" : "2024-11-21T07:39:25.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to\nperform a denial of service through the console server service that is part of EcoStruxure Control Expert. Affected Products: EcoStruxure Control Expert (V15.1 and above)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_control_expert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1",
            "matchCriteriaId" : "F00F06FE-58DA-4882-A7E8-0D7E1597026A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-03.pdf",
        "source" : "cybersecurity@se.com"
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-03.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27976",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T17:15:07.287",
      "lastModified" : "2024-11-21T07:53:51.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause\nremote code execution when a valid user visits a malicious link provided through the web\nendpoints. Affected Products: EcoStruxure Control Expert (V15.1 and above)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_control_expert:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1",
            "matchCriteriaId" : "F00F06FE-58DA-4882-A7E8-0D7E1597026A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-03.pdf",
        "source" : "cybersecurity@se.com"
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-03.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25556",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T18:15:07.357",
      "lastModified" : "2024-11-21T07:49:43.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA CWE-287: Improper Authentication vulnerability exists that could allow a device to be\ncompromised when a key of less than seven digits is entered and the attacker has access to the\nKNX installation.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:merten_instabus_tastermodul_1fach_system_m_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07A53874-254C-4CA0-9CA8-387094723B4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:merten_instabus_tastermodul_1fach_system_m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29918B0B-9089-46B0-B86E-B78BFB5F0DB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:merten_instabus_tastermodul_2fach_system_m_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10E0A138-4F3A-434D-B52D-5EE91CD7E2EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:merten_instabus_tastermodul_2fach_system_m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4676AD5-F82E-42C0-B6A2-3D57F075C532"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:merten_tasterschnittstelle_4fach_plus_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B565DF-3403-45E2-8C12-010DAFDA308E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:merten_tasterschnittstelle_4fach_plus_firmware:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CA73BB4-92DA-49BF-89D6-B037EF16F963"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:merten_tasterschnittstelle_4fach_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46DEB9E7-1212-4BCA-8C23-72B2F45A97BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:merten_knx_argus_180\\/2\\,20m_up_system_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9D64205-D9F0-4199-8BEF-68979E7DB147"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:merten_knx_argus_180\\/2\\,20m_up_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559DECE9-5779-40B5-AF91-C97B3731AF73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:merten_jalousie-\\/schaltaktor_reg-k\\/8x\\/16x\\/10_m._hb_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F4A4D6-B1EF-41DC-B392-8BE542F473A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:merten_jalousie-\\/schaltaktor_reg-k\\/8x\\/16x\\/10_m._hb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FAF80D9-ED66-4D7A-8E1F-80D096B95DC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:merten_knx_uni-dimmaktor_ll_reg-k\\/2x230\\/300_w_firmware:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7709BD4-99D8-4155-8EDE-62D4E58096FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:merten_knx_uni-dimmaktor_ll_reg-k\\/2x230\\/300_w_firmware:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A79222B6-2823-40D8-9A4B-52140789C7F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:merten_knx_uni-dimmaktor_ll_reg-k\\/2x230\\/300_w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7716A5-1CF8-4B90-952F-64E1B160BB2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:merten_knx_schaltakt.2x6a_up_m.2_eing._firmware:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "501E6F54-418C-46A1-997B-CE3AAEBF0D2F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:merten_knx_schaltakt.2x6a_up_m.2_eing.:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2F19DC-9F7A-431D-B0F9-559A9D49F53B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-03.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-03.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29854",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-18T18:15:07.503",
      "lastModified" : "2025-03-05T19:15:35.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DirCMS 6.0.0 has a Cross Site Scripting (XSS) vulnerability in the foreground."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dircms_project:dircms:6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D793CEE0-4072-4C21-BF6E-C1B796F9ED4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/secflag/Vulnerabilitys/blob/main/DirCMS_V6.0.0_XSS_vulnerability.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/secflag/Vulnerabilitys/blob/main/DirCMS_V6.0.0_XSS_vulnerability.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-18T18:15:07.547",
      "lastModified" : "2025-02-06T15:15:12.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wbce:wbce_cms:1.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37C64E93-0C2F-4BB4-BF53-1E7F781D1116"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WBCE/WBCE_CMS/issues/544",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/WBCE/WBCE_CMS/issues/544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22294",
      "sourceIdentifier" : "security@checkmk.com",
      "published" : "2023-04-18T19:15:07.057",
      "lastModified" : "2024-11-21T07:44:28.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation in Tribe29 Checkmk Appliance before 1.6.4 allows authenticated site users to escalate privileges via incorrectly set permissions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@checkmk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@checkmk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribe29:checkmk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "741B2415-D163-4794-9769-C31EE1FCB7F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://checkmk.com/werk/9520",
        "source" : "security@checkmk.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://checkmk.com/werk/9520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22307",
      "sourceIdentifier" : "security@checkmk.com",
      "published" : "2023-04-18T19:15:07.120",
      "lastModified" : "2024-11-21T07:44:29.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local attacker to retrieve passwords via reading log files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@checkmk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@checkmk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-598"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tribe29:checkmk_appliance_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "3275F8D1-2252-4524-B04A-9F7D0B23D715"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://checkmk.com/werk/9522",
        "source" : "security@checkmk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://checkmk.com/werk/9522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21896",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:11.807",
      "lastModified" : "2024-11-21T07:43:51.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch).  Supported versions that are affected are 10 and  11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.  Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21902",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:11.900",
      "lastModified" : "2024-11-21T07:43:52.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications (component: Application).   The supported version that is affected is 8.0.8.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Behavior Detection Platform.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Financial Services Behavior Detection Platform accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.0.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBB9F8E-7374-4426-A269-FB669644538F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21903",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:11.990",
      "lastModified" : "2024-11-21T07:43:52.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Internal Tfr Domain).  Supported versions that are affected are 14.5, 14.6 and  14.7. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data as well as  unauthorized update, insert or delete access to some of Oracle Banking Virtual Account Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Virtual Account Management. CVSS 3.1 Base Score 5.3 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2696CD1-9514-405D-A3B3-8308EC1FA571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2561ED4-A3EB-48AB-BEC9-4ACFE3379606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7895E7-A8D7-4692-BE5E-1C195DA7E48E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21904",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:12.077",
      "lastModified" : "2024-11-21T07:43:52.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain).  Supported versions that are affected are 14.5, 14.6 and  14.7. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data as well as  unauthorized update, insert or delete access to some of Oracle Banking Virtual Account Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Virtual Account Management. CVSS 3.1 Base Score 5.3 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2696CD1-9514-405D-A3B3-8308EC1FA571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2561ED4-A3EB-48AB-BEC9-4ACFE3379606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7895E7-A8D7-4692-BE5E-1C195DA7E48E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21905",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:12.140",
      "lastModified" : "2024-11-21T07:43:52.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: Routing Hub).  Supported versions that are affected are 14.5, 14.6 and  14.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Banking Virtual Account Management accessible data as well as  unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2696CD1-9514-405D-A3B3-8308EC1FA571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2561ED4-A3EB-48AB-BEC9-4ACFE3379606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7895E7-A8D7-4692-BE5E-1C195DA7E48E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21906",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:12.213",
      "lastModified" : "2024-11-21T07:43:52.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: SMS Module).  Supported versions that are affected are 14.5, 14.6 and  14.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Banking Virtual Account Management accessible data as well as  unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2696CD1-9514-405D-A3B3-8308EC1FA571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2561ED4-A3EB-48AB-BEC9-4ACFE3379606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7895E7-A8D7-4692-BE5E-1C195DA7E48E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21907",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:12.280",
      "lastModified" : "2024-11-21T07:43:53.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain).  Supported versions that are affected are 14.5, 14.6 and  14.7. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data as well as  unauthorized update, insert or delete access to some of Oracle Banking Virtual Account Management accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Banking Virtual Account Management. CVSS 3.1 Base Score 6.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2696CD1-9514-405D-A3B3-8308EC1FA571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2561ED4-A3EB-48AB-BEC9-4ACFE3379606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7895E7-A8D7-4692-BE5E-1C195DA7E48E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21908",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:12.353",
      "lastModified" : "2024-11-21T07:43:53.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain).  Supported versions that are affected are 14.5, 14.6 and  14.7. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data as well as  unauthorized update, insert or delete access to some of Oracle Banking Virtual Account Management accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Banking Virtual Account Management. CVSS 3.1 Base Score 6.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2696CD1-9514-405D-A3B3-8308EC1FA571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2561ED4-A3EB-48AB-BEC9-4ACFE3379606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7895E7-A8D7-4692-BE5E-1C195DA7E48E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21909",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:12.430",
      "lastModified" : "2024-11-21T07:43:53.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: UI Framework).  Supported versions that are affected are 23.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Siebel CRM accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_crm:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "23.3",
            "matchCriteriaId" : "DFFC78F4-1D19-4D70-AE4D-769AEA9430F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21910",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:12.510",
      "lastModified" : "2024-11-21T07:43:53.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).  Supported versions that are affected are 6.4.0.0.0 and  12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:6.4.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EDBC994D-3FE6-4DEF-AE5C-26D2E3AD45BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "81DAC8C0-D342-44B5-9432-6B88D389584F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21911",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:12.583",
      "lastModified" : "2024-11-21T07:43:53.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: InnoDB). Las versiones compatibles que se ven afectadas son la 8.0.32 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o una falla frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "48EF4C61-9020-44C8-B8AF-5CF07A09CCD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21912",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:12.660",
      "lastModified" : "2024-11-21T07:43:53.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).  Supported versions that are affected are 5.7.41 and prior and  8.0.30 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.41",
            "matchCriteriaId" : "55F84AE9-A935-405E-B803-E5AFC979959E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.30",
            "matchCriteriaId" : "BDC48919-7050-4D73-87AF-C467E93ECA61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21913",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:12.727",
      "lastModified" : "2024-11-21T07:43:53.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "A17A50C3-66AA-4168-8D7D-7F3295B231BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21915",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:12.800",
      "lastModified" : "2024-11-21T07:43:53.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Book/Internal Transfer).  Supported versions that are affected are 14.5, 14.6 and  14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Banking Payments accessible data as well as  unauthorized read access to a subset of Oracle Banking Payments accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_payments:14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633E5B20-A7A7-4346-A71D-58121B006D00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_payments:14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65780EB9-EBDD-4032-A059-710F71A43326"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_payments:14.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F576EB33-E1B7-4072-8279-FA56A126F33C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21916",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:12.870",
      "lastModified" : "2024-11-21T07:43:54.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server).  Supported versions that are affected are 8.58, 8.59 and  8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AF00C6-B97F-414D-A8DF-057E6BFD8597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF191D4F-3D54-4525-AAF5-B70D3FD2F818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21917",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:12.947",
      "lastModified" : "2024-11-21T07:43:54.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.30",
            "matchCriteriaId" : "BDC48919-7050-4D73-87AF-C467E93ECA61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21918",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:13.020",
      "lastModified" : "2024-11-21T07:43:54.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Database Recovery Manager component of Oracle Database Server.  Supported versions that are affected are 19c and  21c. Easily exploitable vulnerability allows high privileged attacker having Local SYSDBA privilege with network access via Oracle Net to compromise Oracle Database Recovery Manager.  While the vulnerability is in Oracle Database Recovery Manager, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Database Recovery Manager. CVSS 3.1 Base Score 6.8 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_recovery_manager:19c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DCA3021-2423-4F09-B1B4-439F52D9F69A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_recovery_manager:21c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3212C5F6-384E-48EE-A96D-F262C4C0E267"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21919",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:13.090",
      "lastModified" : "2024-11-21T07:43:54.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: DDL). Las versiones compatibles que se ven afectadas son la 8.0.32 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o una falla frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "48EF4C61-9020-44C8-B8AF-5CF07A09CCD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21920",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:13.160",
      "lastModified" : "2024-11-21T07:43:54.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: Optimizador). Las versiones compatibles que se ven afectadas son la 8.0.32 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada de provocar un bloqueo o una falla frecuentemente repetible (DOS completo) del servidor MySQL. CVSS 3.1 Puntuación base 4.9 (impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "48EF4C61-9020-44C8-B8AF-5CF07A09CCD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21921",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:13.230",
      "lastModified" : "2024-11-21T07:43:54.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core).  Supported versions that are affected are Prior to 6.3.1.3 and  Prior to 7.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Health Sciences InForm.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Health Sciences InForm accessible data as well as  unauthorized read access to a subset of Oracle Health Sciences InForm accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_inform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.1.3",
            "matchCriteriaId" : "08A0D91B-E543-48BA-B408-F7FA61B4B35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_inform:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BCEC65-25B7-480C-860C-9D97F78CCE3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21922",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:13.307",
      "lastModified" : "2024-11-21T07:43:54.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core).  Supported versions that are affected are Prior to 6.3.1.3 and  Prior to 7.0.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Health Sciences InForm.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Health Sciences InForm accessible data as well as  unauthorized access to critical data or complete access to all Oracle Health Sciences InForm accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_inform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.1.3",
            "matchCriteriaId" : "08A0D91B-E543-48BA-B408-F7FA61B4B35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_inform:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BCEC65-25B7-480C-860C-9D97F78CCE3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21923",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:13.370",
      "lastModified" : "2024-11-21T07:43:54.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core).  Supported versions that are affected are Prior to 6.3.1.3 and  Prior to 7.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Health Sciences InForm.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Health Sciences InForm accessible data as well as  unauthorized access to critical data or complete access to all Oracle Health Sciences InForm accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Health Sciences InForm. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_inform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.1.3",
            "matchCriteriaId" : "08A0D91B-E543-48BA-B408-F7FA61B4B35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_inform:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BCEC65-25B7-480C-860C-9D97F78CCE3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21924",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:13.443",
      "lastModified" : "2024-11-21T07:43:54.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core).  Supported versions that are affected are Prior to 6.3.1.3 and  Prior to 7.0.0.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Health Sciences InForm.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Health Sciences InForm, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Health Sciences InForm accessible data as well as  unauthorized read access to a subset of Oracle Health Sciences InForm accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Health Sciences InForm. CVSS 3.1 Base Score 5.9 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_inform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.1.3",
            "matchCriteriaId" : "08A0D91B-E543-48BA-B408-F7FA61B4B35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_inform:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BCEC65-25B7-480C-860C-9D97F78CCE3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21925",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:13.510",
      "lastModified" : "2024-11-21T07:43:55.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core).  Supported versions that are affected are Prior to 6.3.1.3 and  Prior to 7.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Health Sciences InForm.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Health Sciences InForm. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_inform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.1.3",
            "matchCriteriaId" : "08A0D91B-E543-48BA-B408-F7FA61B4B35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_inform:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BCEC65-25B7-480C-860C-9D97F78CCE3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21926",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:13.587",
      "lastModified" : "2024-11-21T07:43:55.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core).  Supported versions that are affected are Prior to 6.3.1.3 and  Prior to 7.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Health Sciences InForm executes to compromise Oracle Health Sciences InForm.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Health Sciences InForm accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_inform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3.1.3",
            "matchCriteriaId" : "08A0D91B-E543-48BA-B408-F7FA61B4B35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_inform:7.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BCEC65-25B7-480C-860C-9D97F78CCE3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21927",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:13.667",
      "lastModified" : "2024-11-21T07:43:55.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).  Supported versions that are affected are Prior to 9.2.7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.7.3",
            "matchCriteriaId" : "831D2D84-3C9C-425D-82D3-494358102101"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21928",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:13.740",
      "lastModified" : "2024-11-21T07:43:55.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Solaris product of Oracle Systems (component: IPS repository daemon).   The supported version that is affected is 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Solaris accessible data. CVSS 3.1 Base Score 1.8 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 1.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21929",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:13.813",
      "lastModified" : "2024-11-21T07:43:56.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as  unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Servidor: DDL). Las versiones compatibles que se ven afectadas son la 8.0.32 y anteriores. Una vulnerabilidad fácilmente explotable permite que un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometa el servidor MySQL. Los ataques exitosos a esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar un bloqueo o un bloqueo frecuente (DOS completo) del servidor MySQL, así como una actualización, inserción o eliminación no autorizada del acceso a algunos de los datos accesibles del servidor MySQL. CVSS 3.1 Puntuación base 5.5 (impactos en integridad y disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "48EF4C61-9020-44C8-B8AF-5CF07A09CCD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21930",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:13.883",
      "lastModified" : "2024-11-21T07:43:56.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and  22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FE7FF02E-5A54-47BD-8FAC-E1F1E23CBD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "725D21E1-8FEF-492C-9CCF-75DDD286FA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:22.3.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CBC05434-18E2-43D2-901F-BA97A3A3AC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update361:*:*:*:*:*:*",
            "matchCriteriaId" : "BB648C28-DCDF-4CEE-816C-2D7EF91D2689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4C6A6B-46BA-471A-959C-D1819B5D5196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:17.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751BA15B-1950-4ABD-AFEB-B4F90587FF61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26CDEF2-A840-4957-A390-19E48AEEC70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update361:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18EEA4-9670-4EBC-8559-6766740980F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:11.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85FB47B-1A8B-4758-83A7-3AC5B74D73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:17.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B973ADC-5F00-4CC5-985F-F4E1BB9FF1EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC10C81D-E148-4208-BA86-086B935A1254"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:7-mode_transition_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF6650C-558D-45C8-AE7D-136EE70CB6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:brocade_san_navigator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25FA7A4D-B0E2-423E-8146-E221AE2D6120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAA4004-9319-478C-9D55-0E8307F872F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B199052-5732-4726-B06B-A12C70DFB891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8",
            "matchCriteriaId" : "111E81BB-7D96-44EB-ACFA-415C3F3EA62A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "90F6CEC5-2FD9-4ADB-9D86-B741C0ABCD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17",
            "versionEndIncluding" : "17.0.6",
            "matchCriteriaId" : "83395182-E46E-47FF-A781-4EF235BC83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "70892D06-6E75-4425-BBF0-4B684EC62A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A165D71-71CC-4E6A-AA4F-FF8DB5B9A5AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "7417B2BB-9AC2-4AF4-A828-C89A0735AD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0A57B5-6F88-4288-9CDE-F6613FE068D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED8559-C348-4932-B7CE-CB96976A30EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "40AC3D91-263F-4345-9FAA-0E573EA64590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "DD92AFA9-81F8-48D4-B79A-E7F066F69A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4B2F24-A730-4818-90C8-A2D90C081F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "464087F2-C285-4574-957E-CE0663F07DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9BB880-A4F6-4887-8BB9-47AA298753D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*",
            "matchCriteriaId" : "18DCFF53-B298-4534-AB5C-8A5EF59C616F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
            "matchCriteriaId" : "083419F8-FDDF-4E36-88F8-857DB317C1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A74F65-57E8-4C9A-BA96-5EF401504F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0B90FC-57B6-4315-9B29-3C36E58B2CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
            "matchCriteriaId" : "07812576-3C35-404C-A7D7-9BE9E3D76E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "00C52B1C-5447-4282-9667-9EBE0720B423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "92BB9EB0-0C12-4E77-89EE-FB77097841B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9D5DCE-2E8F-42B9-9038-AEA7E8C8CFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC0E7BB-F8B7-4369-9910-71240E4073A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*",
            "matchCriteriaId" : "551B2640-8CEC-4C24-AF8B-7A7CEF864D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE30779-48FB-451E-8CE1-F469F93B8772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*",
            "matchCriteriaId" : "60590FDE-7156-4314-A012-AA38BD2ADDC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update171:*:*:*:*:*:*",
            "matchCriteriaId" : "BE51AD3A-8331-4E8F-9DB1-7A0051731DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*",
            "matchCriteriaId" : "F24F6122-2256-41B6-9033-794C6424ED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update181:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAFA79E-8C7A-48CF-8868-11378FE4B26F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update191:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D6F19F-59B5-4BB6-AD35-013384025970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BA97BC-3ADA-465A-835B-6C3C5F416B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "B71F77A4-B7EB-47A1-AAFD-431A7D040B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update201:*:*:*:*:*:*",
            "matchCriteriaId" : "91D6BEA9-5943-44A4-946D-CEAA9BA99376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*",
            "matchCriteriaId" : "C079A3E0-44EB-4B9C-B4FC-B7621D165C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update211:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB74086-14B8-4237-8357-E0C6B5BB8313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABED20A-7C34-4E86-9AFB-F4DC9ECBB3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update221:*:*:*:*:*:*",
            "matchCriteriaId" : "00C2B9C9-1177-4DA6-96CE-55F37F383F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*",
            "matchCriteriaId" : "435CF189-0BD8-40DF-A0DC-99862CDEAF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update231:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3F367-33AD-47C3-BFDC-871A17E72C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*",
            "matchCriteriaId" : "A18F994F-72CA-4AF5-A7D1-9F5AEA286D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update241:*:*:*:*:*:*",
            "matchCriteriaId" : "78261932-7373-4F16-91E0-1A72ADBEBC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update242:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD90D3D-9B3A-4101-9A8A-5090F0A9719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*",
            "matchCriteriaId" : "B38C0276-0EBD-4E0B-BFCF-4DDECACE04E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update252:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A40B8A-D428-4008-9F21-AF21394C51D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update262:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC5B777-01E1-45EE-AF95-C3BD1F098B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update271:*:*:*:*:*:*",
            "matchCriteriaId" : "3B504718-5DCE-43B4-B19A-C6B6E7444BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "3102AA10-99A8-49A9-867E-7EEC56865680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update282:*:*:*:*:*:*",
            "matchCriteriaId" : "5A55CBC7-A7B2-4B89-8AB5-ED30DBE6814E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update291:*:*:*:*:*:*",
            "matchCriteriaId" : "15BA8A26-2CDA-442B-A549-6BE92DCCD205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update301:*:*:*:*:*:*",
            "matchCriteriaId" : "56F2883B-6A1B-4081-8877-07AF3A73F6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update302:*:*:*:*:*:*",
            "matchCriteriaId" : "98C0742E-ACDD-4DB4-8A4C-B96702C8976C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update31:*:*:*:*:*:*",
            "matchCriteriaId" : "F8483034-DD5A-445D-892F-CDE90A7D58EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update312:*:*:*:*:*:*",
            "matchCriteriaId" : "1716A5CD-1C32-4F19-9DDE-F9C7CCB6B420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update322:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB4F663-BCAF-43DB-BCC3-24C060B0CBAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update332:*:*:*:*:*:*",
            "matchCriteriaId" : "A8EF5BB8-7DAF-49B0-A11E-14E89EF7377A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update342:*:*:*:*:*:*",
            "matchCriteriaId" : "383F0B07-59BF-4744-87F2-04C98BC183B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update352:*:*:*:*:*:*",
            "matchCriteriaId" : "494C17C6-54A3-4BE6-A4FF-2D54DF2B38D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update362:*:*:*:*:*:*",
            "matchCriteriaId" : "1058ABDC-D652-4E2D-964D-C9C98FD404F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
            "matchCriteriaId" : "8279718F-878F-4868-8859-1728D13CD0D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update45:*:*:*:*:*:*",
            "matchCriteriaId" : "2C024E1A-FD2C-42E8-B227-C2AFD3040436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "4F24389D-DDD0-4204-AA24-31C920A4F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update51:*:*:*:*:*:*",
            "matchCriteriaId" : "966979BE-1F21-4729-B6B8-610F74648344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
            "matchCriteriaId" : "F8534265-33BF-460D-BF74-5F55FDE50F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update65:*:*:*:*:*:*",
            "matchCriteriaId" : "F77AFC25-1466-4E56-9D5F-6988F3288E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
            "matchCriteriaId" : "A650BEB8-E56F-4E42-9361-8D2DB083F0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update71:*:*:*:*:*:*",
            "matchCriteriaId" : "799FFECD-E80A-44B3-953D-CDB5E195F3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
            "matchCriteriaId" : "A7047507-7CAF-4A14-AA9A-5CEF806EDE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update73:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC7B179-95D3-4F94-84F6-73F1034A1AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update74:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB28526-9385-44CA-AF08-1899E6C3AE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update77:*:*:*:*:*:*",
            "matchCriteriaId" : "E26B69E4-0B43-415F-A82B-52FDCB262B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update91:*:*:*:*:*:*",
            "matchCriteriaId" : "27BC4150-70EC-462B-8FC5-20B3442CBB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
            "matchCriteriaId" : "02646989-ECD9-40AE-A83E-EFF4080C69B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77172BC0-8637-41F6-AE3B-83006D6735DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0008/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5430",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5478",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21931",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:13.963",
      "lastModified" : "2024-11-21T07:43:56.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172882/Oracle-Weblogic-PreAuth-Remote-Command-Execution.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172882/Oracle-Weblogic-PreAuth-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21932",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:14.040",
      "lastModified" : "2024-11-21T07:43:56.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: OXI).   The supported version that is affected is 5.6. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services.  While the vulnerability is in Oracle Hospitality OPERA 5 Property Services, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data as well as  unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 Property Services accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality OPERA 5 Property Services. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_opera_5_property_services:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C177E1-66B8-4AB7-A3F0-B6CCDCC28F75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21933",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:14.110",
      "lastModified" : "2024-11-21T07:43:56.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: DDL). Las versiones afectadas son 8.0.32 y anteriores. Una vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o una caída frecuentemente repetible (DOS completo) de MySQL Server. Puntuación base CVSS 3.1 4.9 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "48EF4C61-9020-44C8-B8AF-5CF07A09CCD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21934",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:14.197",
      "lastModified" : "2024-11-21T07:43:56.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java VM component of Oracle Database Server.  Supported versions that are affected are 19c and  21c. Difficult to exploit vulnerability allows low privileged attacker having User Account privilege with network access via TLS to compromise Java VM.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Java VM accessible data as well as  unauthorized access to critical data or complete access to all Java VM accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C1E05472-8F3A-4E46-90E5-50EA6D555FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:21c:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "02E34416-E767-4F61-8D2C-0D0202351F91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21935",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:14.277",
      "lastModified" : "2024-11-21T07:43:56.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer). Las versiones afectadas son 8.0.32 y anteriores. Una vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o una caída frecuentemente repetible (DOS completo) de MySQL Server. Puntuación base CVSS 3.1 4.9 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "48EF4C61-9020-44C8-B8AF-5CF07A09CCD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21936",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:14.370",
      "lastModified" : "2024-11-21T07:43:57.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).  Supported versions that are affected are Prior to 9.2.7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as  unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.7.3",
            "matchCriteriaId" : "831D2D84-3C9C-425D-82D3-494358102101"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21937",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:14.507",
      "lastModified" : "2024-11-21T07:43:57.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and  22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FE7FF02E-5A54-47BD-8FAC-E1F1E23CBD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "725D21E1-8FEF-492C-9CCF-75DDD286FA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:22.3.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CBC05434-18E2-43D2-901F-BA97A3A3AC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update361:*:*:*:*:*:*",
            "matchCriteriaId" : "BB648C28-DCDF-4CEE-816C-2D7EF91D2689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4C6A6B-46BA-471A-959C-D1819B5D5196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:17.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751BA15B-1950-4ABD-AFEB-B4F90587FF61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26CDEF2-A840-4957-A390-19E48AEEC70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update361:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18EEA4-9670-4EBC-8559-6766740980F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:11.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85FB47B-1A8B-4758-83A7-3AC5B74D73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:17.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B973ADC-5F00-4CC5-985F-F4E1BB9FF1EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC10C81D-E148-4208-BA86-086B935A1254"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:7-mode_transition_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF6650C-558D-45C8-AE7D-136EE70CB6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:brocade_san_navigator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25FA7A4D-B0E2-423E-8146-E221AE2D6120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAA4004-9319-478C-9D55-0E8307F872F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B199052-5732-4726-B06B-A12C70DFB891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8",
            "matchCriteriaId" : "111E81BB-7D96-44EB-ACFA-415C3F3EA62A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "90F6CEC5-2FD9-4ADB-9D86-B741C0ABCD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17",
            "versionEndIncluding" : "17.0.6",
            "matchCriteriaId" : "83395182-E46E-47FF-A781-4EF235BC83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "70892D06-6E75-4425-BBF0-4B684EC62A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A165D71-71CC-4E6A-AA4F-FF8DB5B9A5AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "7417B2BB-9AC2-4AF4-A828-C89A0735AD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0A57B5-6F88-4288-9CDE-F6613FE068D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED8559-C348-4932-B7CE-CB96976A30EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "40AC3D91-263F-4345-9FAA-0E573EA64590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "DD92AFA9-81F8-48D4-B79A-E7F066F69A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4B2F24-A730-4818-90C8-A2D90C081F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "464087F2-C285-4574-957E-CE0663F07DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9BB880-A4F6-4887-8BB9-47AA298753D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*",
            "matchCriteriaId" : "18DCFF53-B298-4534-AB5C-8A5EF59C616F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
            "matchCriteriaId" : "083419F8-FDDF-4E36-88F8-857DB317C1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A74F65-57E8-4C9A-BA96-5EF401504F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0B90FC-57B6-4315-9B29-3C36E58B2CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
            "matchCriteriaId" : "07812576-3C35-404C-A7D7-9BE9E3D76E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "00C52B1C-5447-4282-9667-9EBE0720B423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "92BB9EB0-0C12-4E77-89EE-FB77097841B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9D5DCE-2E8F-42B9-9038-AEA7E8C8CFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC0E7BB-F8B7-4369-9910-71240E4073A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*",
            "matchCriteriaId" : "551B2640-8CEC-4C24-AF8B-7A7CEF864D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE30779-48FB-451E-8CE1-F469F93B8772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*",
            "matchCriteriaId" : "60590FDE-7156-4314-A012-AA38BD2ADDC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update171:*:*:*:*:*:*",
            "matchCriteriaId" : "BE51AD3A-8331-4E8F-9DB1-7A0051731DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*",
            "matchCriteriaId" : "F24F6122-2256-41B6-9033-794C6424ED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update181:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAFA79E-8C7A-48CF-8868-11378FE4B26F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update191:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D6F19F-59B5-4BB6-AD35-013384025970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BA97BC-3ADA-465A-835B-6C3C5F416B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "B71F77A4-B7EB-47A1-AAFD-431A7D040B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update201:*:*:*:*:*:*",
            "matchCriteriaId" : "91D6BEA9-5943-44A4-946D-CEAA9BA99376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*",
            "matchCriteriaId" : "C079A3E0-44EB-4B9C-B4FC-B7621D165C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update211:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB74086-14B8-4237-8357-E0C6B5BB8313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABED20A-7C34-4E86-9AFB-F4DC9ECBB3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update221:*:*:*:*:*:*",
            "matchCriteriaId" : "00C2B9C9-1177-4DA6-96CE-55F37F383F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*",
            "matchCriteriaId" : "435CF189-0BD8-40DF-A0DC-99862CDEAF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update231:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3F367-33AD-47C3-BFDC-871A17E72C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*",
            "matchCriteriaId" : "A18F994F-72CA-4AF5-A7D1-9F5AEA286D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update241:*:*:*:*:*:*",
            "matchCriteriaId" : "78261932-7373-4F16-91E0-1A72ADBEBC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update242:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD90D3D-9B3A-4101-9A8A-5090F0A9719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*",
            "matchCriteriaId" : "B38C0276-0EBD-4E0B-BFCF-4DDECACE04E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update252:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A40B8A-D428-4008-9F21-AF21394C51D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update262:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC5B777-01E1-45EE-AF95-C3BD1F098B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update271:*:*:*:*:*:*",
            "matchCriteriaId" : "3B504718-5DCE-43B4-B19A-C6B6E7444BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "3102AA10-99A8-49A9-867E-7EEC56865680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update282:*:*:*:*:*:*",
            "matchCriteriaId" : "5A55CBC7-A7B2-4B89-8AB5-ED30DBE6814E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update291:*:*:*:*:*:*",
            "matchCriteriaId" : "15BA8A26-2CDA-442B-A549-6BE92DCCD205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update301:*:*:*:*:*:*",
            "matchCriteriaId" : "56F2883B-6A1B-4081-8877-07AF3A73F6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update302:*:*:*:*:*:*",
            "matchCriteriaId" : "98C0742E-ACDD-4DB4-8A4C-B96702C8976C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update31:*:*:*:*:*:*",
            "matchCriteriaId" : "F8483034-DD5A-445D-892F-CDE90A7D58EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update312:*:*:*:*:*:*",
            "matchCriteriaId" : "1716A5CD-1C32-4F19-9DDE-F9C7CCB6B420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update322:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB4F663-BCAF-43DB-BCC3-24C060B0CBAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update332:*:*:*:*:*:*",
            "matchCriteriaId" : "A8EF5BB8-7DAF-49B0-A11E-14E89EF7377A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update342:*:*:*:*:*:*",
            "matchCriteriaId" : "383F0B07-59BF-4744-87F2-04C98BC183B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update352:*:*:*:*:*:*",
            "matchCriteriaId" : "494C17C6-54A3-4BE6-A4FF-2D54DF2B38D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update362:*:*:*:*:*:*",
            "matchCriteriaId" : "1058ABDC-D652-4E2D-964D-C9C98FD404F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
            "matchCriteriaId" : "8279718F-878F-4868-8859-1728D13CD0D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update45:*:*:*:*:*:*",
            "matchCriteriaId" : "2C024E1A-FD2C-42E8-B227-C2AFD3040436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "4F24389D-DDD0-4204-AA24-31C920A4F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update51:*:*:*:*:*:*",
            "matchCriteriaId" : "966979BE-1F21-4729-B6B8-610F74648344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
            "matchCriteriaId" : "F8534265-33BF-460D-BF74-5F55FDE50F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update65:*:*:*:*:*:*",
            "matchCriteriaId" : "F77AFC25-1466-4E56-9D5F-6988F3288E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
            "matchCriteriaId" : "A650BEB8-E56F-4E42-9361-8D2DB083F0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update71:*:*:*:*:*:*",
            "matchCriteriaId" : "799FFECD-E80A-44B3-953D-CDB5E195F3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
            "matchCriteriaId" : "A7047507-7CAF-4A14-AA9A-5CEF806EDE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update73:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC7B179-95D3-4F94-84F6-73F1034A1AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update74:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB28526-9385-44CA-AF08-1899E6C3AE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update77:*:*:*:*:*:*",
            "matchCriteriaId" : "E26B69E4-0B43-415F-A82B-52FDCB262B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update91:*:*:*:*:*:*",
            "matchCriteriaId" : "27BC4150-70EC-462B-8FC5-20B3442CBB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
            "matchCriteriaId" : "02646989-ECD9-40AE-A83E-EFF4080C69B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77172BC0-8637-41F6-AE3B-83006D6735DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0008/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5430",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5478",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21938",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:14.603",
      "lastModified" : "2024-11-21T07:43:57.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and  22.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.8:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EAC60F95-C4B1-49E6-864A-DF5212E7A63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "4791BBB5-C094-45B6-A3A8-E96D3BF97DA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:22.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "E4B331E5-74F5-411E-B997-7038A1DA445D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update361:*:*:*:*:*:*",
            "matchCriteriaId" : "BB648C28-DCDF-4CEE-816C-2D7EF91D2689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4C6A6B-46BA-471A-959C-D1819B5D5196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:17.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751BA15B-1950-4ABD-AFEB-B4F90587FF61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26CDEF2-A840-4957-A390-19E48AEEC70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update361:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18EEA4-9670-4EBC-8559-6766740980F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:11.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85FB47B-1A8B-4758-83A7-3AC5B74D73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:17.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B973ADC-5F00-4CC5-985F-F4E1BB9FF1EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC10C81D-E148-4208-BA86-086B935A1254"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:7-mode_transition_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF6650C-558D-45C8-AE7D-136EE70CB6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:brocade_san_navigator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25FA7A4D-B0E2-423E-8146-E221AE2D6120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAA4004-9319-478C-9D55-0E8307F872F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B199052-5732-4726-B06B-A12C70DFB891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8",
            "matchCriteriaId" : "111E81BB-7D96-44EB-ACFA-415C3F3EA62A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "90F6CEC5-2FD9-4ADB-9D86-B741C0ABCD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17",
            "versionEndIncluding" : "17.0.6",
            "matchCriteriaId" : "83395182-E46E-47FF-A781-4EF235BC83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "70892D06-6E75-4425-BBF0-4B684EC62A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A165D71-71CC-4E6A-AA4F-FF8DB5B9A5AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "7417B2BB-9AC2-4AF4-A828-C89A0735AD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0A57B5-6F88-4288-9CDE-F6613FE068D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED8559-C348-4932-B7CE-CB96976A30EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "40AC3D91-263F-4345-9FAA-0E573EA64590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "DD92AFA9-81F8-48D4-B79A-E7F066F69A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4B2F24-A730-4818-90C8-A2D90C081F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "464087F2-C285-4574-957E-CE0663F07DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9BB880-A4F6-4887-8BB9-47AA298753D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*",
            "matchCriteriaId" : "18DCFF53-B298-4534-AB5C-8A5EF59C616F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
            "matchCriteriaId" : "083419F8-FDDF-4E36-88F8-857DB317C1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A74F65-57E8-4C9A-BA96-5EF401504F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0B90FC-57B6-4315-9B29-3C36E58B2CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
            "matchCriteriaId" : "07812576-3C35-404C-A7D7-9BE9E3D76E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "00C52B1C-5447-4282-9667-9EBE0720B423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "92BB9EB0-0C12-4E77-89EE-FB77097841B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9D5DCE-2E8F-42B9-9038-AEA7E8C8CFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC0E7BB-F8B7-4369-9910-71240E4073A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*",
            "matchCriteriaId" : "551B2640-8CEC-4C24-AF8B-7A7CEF864D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE30779-48FB-451E-8CE1-F469F93B8772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*",
            "matchCriteriaId" : "60590FDE-7156-4314-A012-AA38BD2ADDC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update171:*:*:*:*:*:*",
            "matchCriteriaId" : "BE51AD3A-8331-4E8F-9DB1-7A0051731DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*",
            "matchCriteriaId" : "F24F6122-2256-41B6-9033-794C6424ED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update181:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAFA79E-8C7A-48CF-8868-11378FE4B26F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update191:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D6F19F-59B5-4BB6-AD35-013384025970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BA97BC-3ADA-465A-835B-6C3C5F416B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "B71F77A4-B7EB-47A1-AAFD-431A7D040B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update201:*:*:*:*:*:*",
            "matchCriteriaId" : "91D6BEA9-5943-44A4-946D-CEAA9BA99376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*",
            "matchCriteriaId" : "C079A3E0-44EB-4B9C-B4FC-B7621D165C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update211:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB74086-14B8-4237-8357-E0C6B5BB8313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABED20A-7C34-4E86-9AFB-F4DC9ECBB3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update221:*:*:*:*:*:*",
            "matchCriteriaId" : "00C2B9C9-1177-4DA6-96CE-55F37F383F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*",
            "matchCriteriaId" : "435CF189-0BD8-40DF-A0DC-99862CDEAF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update231:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3F367-33AD-47C3-BFDC-871A17E72C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*",
            "matchCriteriaId" : "A18F994F-72CA-4AF5-A7D1-9F5AEA286D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update241:*:*:*:*:*:*",
            "matchCriteriaId" : "78261932-7373-4F16-91E0-1A72ADBEBC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update242:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD90D3D-9B3A-4101-9A8A-5090F0A9719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*",
            "matchCriteriaId" : "B38C0276-0EBD-4E0B-BFCF-4DDECACE04E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update252:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A40B8A-D428-4008-9F21-AF21394C51D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update262:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC5B777-01E1-45EE-AF95-C3BD1F098B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update271:*:*:*:*:*:*",
            "matchCriteriaId" : "3B504718-5DCE-43B4-B19A-C6B6E7444BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "3102AA10-99A8-49A9-867E-7EEC56865680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update282:*:*:*:*:*:*",
            "matchCriteriaId" : "5A55CBC7-A7B2-4B89-8AB5-ED30DBE6814E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update291:*:*:*:*:*:*",
            "matchCriteriaId" : "15BA8A26-2CDA-442B-A549-6BE92DCCD205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update301:*:*:*:*:*:*",
            "matchCriteriaId" : "56F2883B-6A1B-4081-8877-07AF3A73F6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update302:*:*:*:*:*:*",
            "matchCriteriaId" : "98C0742E-ACDD-4DB4-8A4C-B96702C8976C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update31:*:*:*:*:*:*",
            "matchCriteriaId" : "F8483034-DD5A-445D-892F-CDE90A7D58EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update312:*:*:*:*:*:*",
            "matchCriteriaId" : "1716A5CD-1C32-4F19-9DDE-F9C7CCB6B420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update322:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB4F663-BCAF-43DB-BCC3-24C060B0CBAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update332:*:*:*:*:*:*",
            "matchCriteriaId" : "A8EF5BB8-7DAF-49B0-A11E-14E89EF7377A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update342:*:*:*:*:*:*",
            "matchCriteriaId" : "383F0B07-59BF-4744-87F2-04C98BC183B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update352:*:*:*:*:*:*",
            "matchCriteriaId" : "494C17C6-54A3-4BE6-A4FF-2D54DF2B38D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update362:*:*:*:*:*:*",
            "matchCriteriaId" : "1058ABDC-D652-4E2D-964D-C9C98FD404F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
            "matchCriteriaId" : "8279718F-878F-4868-8859-1728D13CD0D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update45:*:*:*:*:*:*",
            "matchCriteriaId" : "2C024E1A-FD2C-42E8-B227-C2AFD3040436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "4F24389D-DDD0-4204-AA24-31C920A4F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update51:*:*:*:*:*:*",
            "matchCriteriaId" : "966979BE-1F21-4729-B6B8-610F74648344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
            "matchCriteriaId" : "F8534265-33BF-460D-BF74-5F55FDE50F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update65:*:*:*:*:*:*",
            "matchCriteriaId" : "F77AFC25-1466-4E56-9D5F-6988F3288E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
            "matchCriteriaId" : "A650BEB8-E56F-4E42-9361-8D2DB083F0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update71:*:*:*:*:*:*",
            "matchCriteriaId" : "799FFECD-E80A-44B3-953D-CDB5E195F3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
            "matchCriteriaId" : "A7047507-7CAF-4A14-AA9A-5CEF806EDE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update73:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC7B179-95D3-4F94-84F6-73F1034A1AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update74:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB28526-9385-44CA-AF08-1899E6C3AE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update77:*:*:*:*:*:*",
            "matchCriteriaId" : "E26B69E4-0B43-415F-A82B-52FDCB262B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update91:*:*:*:*:*:*",
            "matchCriteriaId" : "27BC4150-70EC-462B-8FC5-20B3442CBB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
            "matchCriteriaId" : "02646989-ECD9-40AE-A83E-EFF4080C69B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77172BC0-8637-41F6-AE3B-83006D6735DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0008/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5430",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5478",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21939",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:14.690",
      "lastModified" : "2024-11-21T07:43:57.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).  Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and  22.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FE7FF02E-5A54-47BD-8FAC-E1F1E23CBD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "725D21E1-8FEF-492C-9CCF-75DDD286FA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:22.3.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CBC05434-18E2-43D2-901F-BA97A3A3AC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update361:*:*:*:*:*:*",
            "matchCriteriaId" : "BB648C28-DCDF-4CEE-816C-2D7EF91D2689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4C6A6B-46BA-471A-959C-D1819B5D5196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:17.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751BA15B-1950-4ABD-AFEB-B4F90587FF61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26CDEF2-A840-4957-A390-19E48AEEC70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update361:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18EEA4-9670-4EBC-8559-6766740980F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:11.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85FB47B-1A8B-4758-83A7-3AC5B74D73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:17.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B973ADC-5F00-4CC5-985F-F4E1BB9FF1EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC10C81D-E148-4208-BA86-086B935A1254"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:7-mode_transition_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF6650C-558D-45C8-AE7D-136EE70CB6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:brocade_san_navigator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25FA7A4D-B0E2-423E-8146-E221AE2D6120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAA4004-9319-478C-9D55-0E8307F872F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B199052-5732-4726-B06B-A12C70DFB891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8",
            "matchCriteriaId" : "111E81BB-7D96-44EB-ACFA-415C3F3EA62A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "90F6CEC5-2FD9-4ADB-9D86-B741C0ABCD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17",
            "versionEndIncluding" : "17.0.6",
            "matchCriteriaId" : "83395182-E46E-47FF-A781-4EF235BC83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "70892D06-6E75-4425-BBF0-4B684EC62A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A165D71-71CC-4E6A-AA4F-FF8DB5B9A5AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "7417B2BB-9AC2-4AF4-A828-C89A0735AD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0A57B5-6F88-4288-9CDE-F6613FE068D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED8559-C348-4932-B7CE-CB96976A30EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "40AC3D91-263F-4345-9FAA-0E573EA64590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "DD92AFA9-81F8-48D4-B79A-E7F066F69A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4B2F24-A730-4818-90C8-A2D90C081F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "464087F2-C285-4574-957E-CE0663F07DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9BB880-A4F6-4887-8BB9-47AA298753D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*",
            "matchCriteriaId" : "18DCFF53-B298-4534-AB5C-8A5EF59C616F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
            "matchCriteriaId" : "083419F8-FDDF-4E36-88F8-857DB317C1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A74F65-57E8-4C9A-BA96-5EF401504F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0B90FC-57B6-4315-9B29-3C36E58B2CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
            "matchCriteriaId" : "07812576-3C35-404C-A7D7-9BE9E3D76E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "00C52B1C-5447-4282-9667-9EBE0720B423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "92BB9EB0-0C12-4E77-89EE-FB77097841B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9D5DCE-2E8F-42B9-9038-AEA7E8C8CFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC0E7BB-F8B7-4369-9910-71240E4073A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*",
            "matchCriteriaId" : "551B2640-8CEC-4C24-AF8B-7A7CEF864D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE30779-48FB-451E-8CE1-F469F93B8772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*",
            "matchCriteriaId" : "60590FDE-7156-4314-A012-AA38BD2ADDC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update171:*:*:*:*:*:*",
            "matchCriteriaId" : "BE51AD3A-8331-4E8F-9DB1-7A0051731DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*",
            "matchCriteriaId" : "F24F6122-2256-41B6-9033-794C6424ED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update181:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAFA79E-8C7A-48CF-8868-11378FE4B26F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update191:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D6F19F-59B5-4BB6-AD35-013384025970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BA97BC-3ADA-465A-835B-6C3C5F416B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "B71F77A4-B7EB-47A1-AAFD-431A7D040B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update201:*:*:*:*:*:*",
            "matchCriteriaId" : "91D6BEA9-5943-44A4-946D-CEAA9BA99376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*",
            "matchCriteriaId" : "C079A3E0-44EB-4B9C-B4FC-B7621D165C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update211:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB74086-14B8-4237-8357-E0C6B5BB8313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABED20A-7C34-4E86-9AFB-F4DC9ECBB3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update221:*:*:*:*:*:*",
            "matchCriteriaId" : "00C2B9C9-1177-4DA6-96CE-55F37F383F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*",
            "matchCriteriaId" : "435CF189-0BD8-40DF-A0DC-99862CDEAF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update231:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3F367-33AD-47C3-BFDC-871A17E72C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*",
            "matchCriteriaId" : "A18F994F-72CA-4AF5-A7D1-9F5AEA286D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update241:*:*:*:*:*:*",
            "matchCriteriaId" : "78261932-7373-4F16-91E0-1A72ADBEBC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update242:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD90D3D-9B3A-4101-9A8A-5090F0A9719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*",
            "matchCriteriaId" : "B38C0276-0EBD-4E0B-BFCF-4DDECACE04E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update252:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A40B8A-D428-4008-9F21-AF21394C51D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update262:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC5B777-01E1-45EE-AF95-C3BD1F098B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update271:*:*:*:*:*:*",
            "matchCriteriaId" : "3B504718-5DCE-43B4-B19A-C6B6E7444BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "3102AA10-99A8-49A9-867E-7EEC56865680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update282:*:*:*:*:*:*",
            "matchCriteriaId" : "5A55CBC7-A7B2-4B89-8AB5-ED30DBE6814E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update291:*:*:*:*:*:*",
            "matchCriteriaId" : "15BA8A26-2CDA-442B-A549-6BE92DCCD205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update301:*:*:*:*:*:*",
            "matchCriteriaId" : "56F2883B-6A1B-4081-8877-07AF3A73F6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update302:*:*:*:*:*:*",
            "matchCriteriaId" : "98C0742E-ACDD-4DB4-8A4C-B96702C8976C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update31:*:*:*:*:*:*",
            "matchCriteriaId" : "F8483034-DD5A-445D-892F-CDE90A7D58EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update312:*:*:*:*:*:*",
            "matchCriteriaId" : "1716A5CD-1C32-4F19-9DDE-F9C7CCB6B420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update322:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB4F663-BCAF-43DB-BCC3-24C060B0CBAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update332:*:*:*:*:*:*",
            "matchCriteriaId" : "A8EF5BB8-7DAF-49B0-A11E-14E89EF7377A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update342:*:*:*:*:*:*",
            "matchCriteriaId" : "383F0B07-59BF-4744-87F2-04C98BC183B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update352:*:*:*:*:*:*",
            "matchCriteriaId" : "494C17C6-54A3-4BE6-A4FF-2D54DF2B38D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update362:*:*:*:*:*:*",
            "matchCriteriaId" : "1058ABDC-D652-4E2D-964D-C9C98FD404F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
            "matchCriteriaId" : "8279718F-878F-4868-8859-1728D13CD0D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update45:*:*:*:*:*:*",
            "matchCriteriaId" : "2C024E1A-FD2C-42E8-B227-C2AFD3040436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "4F24389D-DDD0-4204-AA24-31C920A4F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update51:*:*:*:*:*:*",
            "matchCriteriaId" : "966979BE-1F21-4729-B6B8-610F74648344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
            "matchCriteriaId" : "F8534265-33BF-460D-BF74-5F55FDE50F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update65:*:*:*:*:*:*",
            "matchCriteriaId" : "F77AFC25-1466-4E56-9D5F-6988F3288E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
            "matchCriteriaId" : "A650BEB8-E56F-4E42-9361-8D2DB083F0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update71:*:*:*:*:*:*",
            "matchCriteriaId" : "799FFECD-E80A-44B3-953D-CDB5E195F3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
            "matchCriteriaId" : "A7047507-7CAF-4A14-AA9A-5CEF806EDE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update73:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC7B179-95D3-4F94-84F6-73F1034A1AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update74:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB28526-9385-44CA-AF08-1899E6C3AE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update77:*:*:*:*:*:*",
            "matchCriteriaId" : "E26B69E4-0B43-415F-A82B-52FDCB262B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update91:*:*:*:*:*:*",
            "matchCriteriaId" : "27BC4150-70EC-462B-8FC5-20B3442CBB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
            "matchCriteriaId" : "02646989-ECD9-40AE-A83E-EFF4080C69B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77172BC0-8637-41F6-AE3B-83006D6735DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0008/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5430",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5478",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21940",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:14.787",
      "lastModified" : "2024-11-21T07:43:57.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).  Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Components Services). Las versiones afectadas son 8.0.32 y anteriores. Una vulnerabilidad difícil de explotar permite a un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o caída frecuentemente repetible (DOS completo) de MySQL Server. Puntuación base CVSS 3.1 4.4 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "48EF4C61-9020-44C8-B8AF-5CF07A09CCD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21941",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:14.853",
      "lastModified" : "2024-11-21T07:43:57.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).  Supported versions that are affected are 6.4.0.0.0 and  12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:6.4.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6CEFA51-E2C5-4F07-952D-F8F46C928092"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274A0CF5-41E8-42E0-9931-F7372A65B9C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21942",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:14.927",
      "lastModified" : "2024-11-21T07:43:57.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in Oracle Essbase (component: Security and Provisioning).   The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:essbase:21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B00764-1419-402C-8AA4-63DB686AA714"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21943",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:14.997",
      "lastModified" : "2024-11-21T07:43:57.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in Oracle Essbase (component: Security and Provisioning).   The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:essbase:21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B00764-1419-402C-8AA4-63DB686AA714"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21944",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:15.070",
      "lastModified" : "2024-11-21T07:43:57.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in Oracle Essbase (component: Security and Provisioning).   The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:essbase:21.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B00764-1419-402C-8AA4-63DB686AA714"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21945",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:15.147",
      "lastModified" : "2024-11-21T07:43:58.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer). Las versiones afectadas son 8.0.32 y anteriores. Una vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o una caída frecuentemente repetible (DOS completo) de MySQL Server. Puntuación base CVSS 3.1 4.9 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "48EF4C61-9020-44C8-B8AF-5CF07A09CCD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21946",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:15.230",
      "lastModified" : "2024-11-21T07:43:58.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer). Las versiones afectadas son 8.0.32 y anteriores. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o una caída frecuentemente repetible (DOS completo) de MySQL Server. CVSS 3.1 Base Score 6.5 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "48EF4C61-9020-44C8-B8AF-5CF07A09CCD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21947",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:15.310",
      "lastModified" : "2024-11-21T07:43:58.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).  Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Components Services). Las versiones afectadas son 8.0.32 y anteriores. Una vulnerabilidad difícil de explotar permite a un atacante con altos privilegios y acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o caída frecuentemente repetible (DOS completo) de MySQL Server. Puntuación base CVSS 3.1 4.4 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "48EF4C61-9020-44C8-B8AF-5CF07A09CCD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21948",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:15.390",
      "lastModified" : "2024-11-21T07:43:58.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Core).   The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.  Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21952",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:15.470",
      "lastModified" : "2024-11-21T07:43:58.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).   The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:6.4.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EDBC994D-3FE6-4DEF-AE5C-26D2E3AD45BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21953",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:15.557",
      "lastModified" : "2024-11-21T07:43:58.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Partition). Las versiones afectadas son 8.0.32 y anteriores. Una vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o una caída frecuentemente repetible (DOS completo) de MySQL Server. CVSS 3.1 Base Score 4.9 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "48EF4C61-9020-44C8-B8AF-5CF07A09CCD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21954",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:15.630",
      "lastModified" : "2024-11-21T07:43:59.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and  22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FE7FF02E-5A54-47BD-8FAC-E1F1E23CBD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "725D21E1-8FEF-492C-9CCF-75DDD286FA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:22.3.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CBC05434-18E2-43D2-901F-BA97A3A3AC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update361:*:*:*:*:*:*",
            "matchCriteriaId" : "BB648C28-DCDF-4CEE-816C-2D7EF91D2689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4C6A6B-46BA-471A-959C-D1819B5D5196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:17.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751BA15B-1950-4ABD-AFEB-B4F90587FF61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update361:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18EEA4-9670-4EBC-8559-6766740980F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:11.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85FB47B-1A8B-4758-83A7-3AC5B74D73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:17.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B973ADC-5F00-4CC5-985F-F4E1BB9FF1EF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:7-mode_transition_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF6650C-558D-45C8-AE7D-136EE70CB6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:brocade_san_navigator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25FA7A4D-B0E2-423E-8146-E221AE2D6120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAA4004-9319-478C-9D55-0E8307F872F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B199052-5732-4726-B06B-A12C70DFB891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8",
            "matchCriteriaId" : "111E81BB-7D96-44EB-ACFA-415C3F3EA62A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "90F6CEC5-2FD9-4ADB-9D86-B741C0ABCD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17",
            "versionEndIncluding" : "17.0.6",
            "matchCriteriaId" : "83395182-E46E-47FF-A781-4EF235BC83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "70892D06-6E75-4425-BBF0-4B684EC62A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A165D71-71CC-4E6A-AA4F-FF8DB5B9A5AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "7417B2BB-9AC2-4AF4-A828-C89A0735AD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0A57B5-6F88-4288-9CDE-F6613FE068D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED8559-C348-4932-B7CE-CB96976A30EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "40AC3D91-263F-4345-9FAA-0E573EA64590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "DD92AFA9-81F8-48D4-B79A-E7F066F69A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4B2F24-A730-4818-90C8-A2D90C081F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "464087F2-C285-4574-957E-CE0663F07DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9BB880-A4F6-4887-8BB9-47AA298753D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*",
            "matchCriteriaId" : "18DCFF53-B298-4534-AB5C-8A5EF59C616F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
            "matchCriteriaId" : "083419F8-FDDF-4E36-88F8-857DB317C1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A74F65-57E8-4C9A-BA96-5EF401504F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0B90FC-57B6-4315-9B29-3C36E58B2CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
            "matchCriteriaId" : "07812576-3C35-404C-A7D7-9BE9E3D76E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "00C52B1C-5447-4282-9667-9EBE0720B423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "92BB9EB0-0C12-4E77-89EE-FB77097841B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9D5DCE-2E8F-42B9-9038-AEA7E8C8CFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC0E7BB-F8B7-4369-9910-71240E4073A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*",
            "matchCriteriaId" : "551B2640-8CEC-4C24-AF8B-7A7CEF864D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE30779-48FB-451E-8CE1-F469F93B8772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*",
            "matchCriteriaId" : "60590FDE-7156-4314-A012-AA38BD2ADDC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update171:*:*:*:*:*:*",
            "matchCriteriaId" : "BE51AD3A-8331-4E8F-9DB1-7A0051731DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*",
            "matchCriteriaId" : "F24F6122-2256-41B6-9033-794C6424ED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update181:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAFA79E-8C7A-48CF-8868-11378FE4B26F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update191:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D6F19F-59B5-4BB6-AD35-013384025970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BA97BC-3ADA-465A-835B-6C3C5F416B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "B71F77A4-B7EB-47A1-AAFD-431A7D040B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update201:*:*:*:*:*:*",
            "matchCriteriaId" : "91D6BEA9-5943-44A4-946D-CEAA9BA99376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*",
            "matchCriteriaId" : "C079A3E0-44EB-4B9C-B4FC-B7621D165C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update211:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB74086-14B8-4237-8357-E0C6B5BB8313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABED20A-7C34-4E86-9AFB-F4DC9ECBB3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update221:*:*:*:*:*:*",
            "matchCriteriaId" : "00C2B9C9-1177-4DA6-96CE-55F37F383F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*",
            "matchCriteriaId" : "435CF189-0BD8-40DF-A0DC-99862CDEAF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update231:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3F367-33AD-47C3-BFDC-871A17E72C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*",
            "matchCriteriaId" : "A18F994F-72CA-4AF5-A7D1-9F5AEA286D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update241:*:*:*:*:*:*",
            "matchCriteriaId" : "78261932-7373-4F16-91E0-1A72ADBEBC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update242:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD90D3D-9B3A-4101-9A8A-5090F0A9719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*",
            "matchCriteriaId" : "B38C0276-0EBD-4E0B-BFCF-4DDECACE04E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update252:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A40B8A-D428-4008-9F21-AF21394C51D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update262:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC5B777-01E1-45EE-AF95-C3BD1F098B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update271:*:*:*:*:*:*",
            "matchCriteriaId" : "3B504718-5DCE-43B4-B19A-C6B6E7444BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "3102AA10-99A8-49A9-867E-7EEC56865680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update282:*:*:*:*:*:*",
            "matchCriteriaId" : "5A55CBC7-A7B2-4B89-8AB5-ED30DBE6814E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update291:*:*:*:*:*:*",
            "matchCriteriaId" : "15BA8A26-2CDA-442B-A549-6BE92DCCD205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update301:*:*:*:*:*:*",
            "matchCriteriaId" : "56F2883B-6A1B-4081-8877-07AF3A73F6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update302:*:*:*:*:*:*",
            "matchCriteriaId" : "98C0742E-ACDD-4DB4-8A4C-B96702C8976C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update31:*:*:*:*:*:*",
            "matchCriteriaId" : "F8483034-DD5A-445D-892F-CDE90A7D58EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update312:*:*:*:*:*:*",
            "matchCriteriaId" : "1716A5CD-1C32-4F19-9DDE-F9C7CCB6B420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update322:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB4F663-BCAF-43DB-BCC3-24C060B0CBAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update332:*:*:*:*:*:*",
            "matchCriteriaId" : "A8EF5BB8-7DAF-49B0-A11E-14E89EF7377A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update342:*:*:*:*:*:*",
            "matchCriteriaId" : "383F0B07-59BF-4744-87F2-04C98BC183B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update352:*:*:*:*:*:*",
            "matchCriteriaId" : "494C17C6-54A3-4BE6-A4FF-2D54DF2B38D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update362:*:*:*:*:*:*",
            "matchCriteriaId" : "1058ABDC-D652-4E2D-964D-C9C98FD404F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
            "matchCriteriaId" : "8279718F-878F-4868-8859-1728D13CD0D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update45:*:*:*:*:*:*",
            "matchCriteriaId" : "2C024E1A-FD2C-42E8-B227-C2AFD3040436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "4F24389D-DDD0-4204-AA24-31C920A4F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update51:*:*:*:*:*:*",
            "matchCriteriaId" : "966979BE-1F21-4729-B6B8-610F74648344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
            "matchCriteriaId" : "F8534265-33BF-460D-BF74-5F55FDE50F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update65:*:*:*:*:*:*",
            "matchCriteriaId" : "F77AFC25-1466-4E56-9D5F-6988F3288E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
            "matchCriteriaId" : "A650BEB8-E56F-4E42-9361-8D2DB083F0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update71:*:*:*:*:*:*",
            "matchCriteriaId" : "799FFECD-E80A-44B3-953D-CDB5E195F3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
            "matchCriteriaId" : "A7047507-7CAF-4A14-AA9A-5CEF806EDE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update73:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC7B179-95D3-4F94-84F6-73F1034A1AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update74:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB28526-9385-44CA-AF08-1899E6C3AE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update77:*:*:*:*:*:*",
            "matchCriteriaId" : "E26B69E4-0B43-415F-A82B-52FDCB262B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update91:*:*:*:*:*:*",
            "matchCriteriaId" : "27BC4150-70EC-462B-8FC5-20B3442CBB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
            "matchCriteriaId" : "02646989-ECD9-40AE-A83E-EFF4080C69B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77172BC0-8637-41F6-AE3B-83006D6735DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0008/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5430",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5478",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21955",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:15.710",
      "lastModified" : "2024-11-21T07:43:59.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Partition). Las versiones afectadas son 8.0.32 y anteriores. Una vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o una caída frecuentemente repetible (DOS completo) de MySQL Server. CVSS 3.1 Base Score 4.9 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "48EF4C61-9020-44C8-B8AF-5CF07A09CCD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21956",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:15.787",
      "lastModified" : "2024-11-21T07:43:59.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).  Supported versions that are affected are 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as  unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21959",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:15.860",
      "lastModified" : "2024-11-21T07:43:59.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: Attachments).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iReceivables.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle iReceivables accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:ireceivables:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.12",
            "matchCriteriaId" : "5880603E-58A8-4866-BF24-ACEEDD85C76C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21960",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:15.940",
      "lastModified" : "2024-11-21T07:43:59.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.3.0 and  12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as  unauthorized read access to a subset of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 5.6 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21962",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:16.017",
      "lastModified" : "2024-11-21T07:43:59.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Components Services). Las versiones afectadas son 8.0.32 y anteriores. Una vulnerabilidad fácilmente explotable permite a un atacante con altos privilegios con acceso a la red a través de múltiples protocolos comprometer MySQL Server. Los ataques exitosos de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un cuelgue o una caída frecuentemente repetible (DOS completo) de MySQL Server. CVSS 3.1 Base Score 4.9 (Impactos en la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "48EF4C61-9020-44C8-B8AF-5CF07A09CCD2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21963",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:16.090",
      "lastModified" : "2024-11-21T07:43:59.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling).  Supported versions that are affected are 5.7.40 and prior and  8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.40",
            "matchCriteriaId" : "D4F7FA8A-718F-4106-93C0-233ED71D697C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.31",
            "matchCriteriaId" : "A17A50C3-66AA-4168-8D7D-7F3295B231BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21964",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:16.173",
      "lastModified" : "2024-11-21T07:44:00.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21965",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:16.250",
      "lastModified" : "2024-11-21T07:44:00.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).   The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:6.4.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "EDBC994D-3FE6-4DEF-AE5C-26D2E3AD45BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21966",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:16.320",
      "lastModified" : "2024-11-21T07:44:00.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "48EF4C61-9020-44C8-B8AF-5CF07A09CCD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21967",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:16.397",
      "lastModified" : "2024-11-21T07:44:00.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and  22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FE7FF02E-5A54-47BD-8FAC-E1F1E23CBD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "725D21E1-8FEF-492C-9CCF-75DDD286FA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:22.3.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CBC05434-18E2-43D2-901F-BA97A3A3AC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update361:*:*:*:*:*:*",
            "matchCriteriaId" : "BB648C28-DCDF-4CEE-816C-2D7EF91D2689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4C6A6B-46BA-471A-959C-D1819B5D5196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:17.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751BA15B-1950-4ABD-AFEB-B4F90587FF61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26CDEF2-A840-4957-A390-19E48AEEC70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update361:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18EEA4-9670-4EBC-8559-6766740980F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:11.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85FB47B-1A8B-4758-83A7-3AC5B74D73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:17.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B973ADC-5F00-4CC5-985F-F4E1BB9FF1EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC10C81D-E148-4208-BA86-086B935A1254"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:7-mode_transition_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF6650C-558D-45C8-AE7D-136EE70CB6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:brocade_san_navigator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25FA7A4D-B0E2-423E-8146-E221AE2D6120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAA4004-9319-478C-9D55-0E8307F872F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B199052-5732-4726-B06B-A12C70DFB891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8",
            "matchCriteriaId" : "111E81BB-7D96-44EB-ACFA-415C3F3EA62A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "90F6CEC5-2FD9-4ADB-9D86-B741C0ABCD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17",
            "versionEndIncluding" : "17.0.6",
            "matchCriteriaId" : "83395182-E46E-47FF-A781-4EF235BC83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "70892D06-6E75-4425-BBF0-4B684EC62A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A165D71-71CC-4E6A-AA4F-FF8DB5B9A5AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "7417B2BB-9AC2-4AF4-A828-C89A0735AD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0A57B5-6F88-4288-9CDE-F6613FE068D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED8559-C348-4932-B7CE-CB96976A30EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "40AC3D91-263F-4345-9FAA-0E573EA64590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "DD92AFA9-81F8-48D4-B79A-E7F066F69A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4B2F24-A730-4818-90C8-A2D90C081F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "464087F2-C285-4574-957E-CE0663F07DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9BB880-A4F6-4887-8BB9-47AA298753D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*",
            "matchCriteriaId" : "18DCFF53-B298-4534-AB5C-8A5EF59C616F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
            "matchCriteriaId" : "083419F8-FDDF-4E36-88F8-857DB317C1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A74F65-57E8-4C9A-BA96-5EF401504F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0B90FC-57B6-4315-9B29-3C36E58B2CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
            "matchCriteriaId" : "07812576-3C35-404C-A7D7-9BE9E3D76E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "00C52B1C-5447-4282-9667-9EBE0720B423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "92BB9EB0-0C12-4E77-89EE-FB77097841B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9D5DCE-2E8F-42B9-9038-AEA7E8C8CFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC0E7BB-F8B7-4369-9910-71240E4073A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*",
            "matchCriteriaId" : "551B2640-8CEC-4C24-AF8B-7A7CEF864D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE30779-48FB-451E-8CE1-F469F93B8772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*",
            "matchCriteriaId" : "60590FDE-7156-4314-A012-AA38BD2ADDC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update171:*:*:*:*:*:*",
            "matchCriteriaId" : "BE51AD3A-8331-4E8F-9DB1-7A0051731DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*",
            "matchCriteriaId" : "F24F6122-2256-41B6-9033-794C6424ED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update181:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAFA79E-8C7A-48CF-8868-11378FE4B26F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update191:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D6F19F-59B5-4BB6-AD35-013384025970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BA97BC-3ADA-465A-835B-6C3C5F416B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "B71F77A4-B7EB-47A1-AAFD-431A7D040B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update201:*:*:*:*:*:*",
            "matchCriteriaId" : "91D6BEA9-5943-44A4-946D-CEAA9BA99376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*",
            "matchCriteriaId" : "C079A3E0-44EB-4B9C-B4FC-B7621D165C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update211:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB74086-14B8-4237-8357-E0C6B5BB8313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABED20A-7C34-4E86-9AFB-F4DC9ECBB3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update221:*:*:*:*:*:*",
            "matchCriteriaId" : "00C2B9C9-1177-4DA6-96CE-55F37F383F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*",
            "matchCriteriaId" : "435CF189-0BD8-40DF-A0DC-99862CDEAF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update231:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3F367-33AD-47C3-BFDC-871A17E72C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*",
            "matchCriteriaId" : "A18F994F-72CA-4AF5-A7D1-9F5AEA286D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update241:*:*:*:*:*:*",
            "matchCriteriaId" : "78261932-7373-4F16-91E0-1A72ADBEBC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update242:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD90D3D-9B3A-4101-9A8A-5090F0A9719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*",
            "matchCriteriaId" : "B38C0276-0EBD-4E0B-BFCF-4DDECACE04E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update252:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A40B8A-D428-4008-9F21-AF21394C51D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update262:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC5B777-01E1-45EE-AF95-C3BD1F098B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update271:*:*:*:*:*:*",
            "matchCriteriaId" : "3B504718-5DCE-43B4-B19A-C6B6E7444BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "3102AA10-99A8-49A9-867E-7EEC56865680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update282:*:*:*:*:*:*",
            "matchCriteriaId" : "5A55CBC7-A7B2-4B89-8AB5-ED30DBE6814E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update291:*:*:*:*:*:*",
            "matchCriteriaId" : "15BA8A26-2CDA-442B-A549-6BE92DCCD205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update301:*:*:*:*:*:*",
            "matchCriteriaId" : "56F2883B-6A1B-4081-8877-07AF3A73F6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update302:*:*:*:*:*:*",
            "matchCriteriaId" : "98C0742E-ACDD-4DB4-8A4C-B96702C8976C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update31:*:*:*:*:*:*",
            "matchCriteriaId" : "F8483034-DD5A-445D-892F-CDE90A7D58EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update312:*:*:*:*:*:*",
            "matchCriteriaId" : "1716A5CD-1C32-4F19-9DDE-F9C7CCB6B420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update322:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB4F663-BCAF-43DB-BCC3-24C060B0CBAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update332:*:*:*:*:*:*",
            "matchCriteriaId" : "A8EF5BB8-7DAF-49B0-A11E-14E89EF7377A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update342:*:*:*:*:*:*",
            "matchCriteriaId" : "383F0B07-59BF-4744-87F2-04C98BC183B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update352:*:*:*:*:*:*",
            "matchCriteriaId" : "494C17C6-54A3-4BE6-A4FF-2D54DF2B38D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update362:*:*:*:*:*:*",
            "matchCriteriaId" : "1058ABDC-D652-4E2D-964D-C9C98FD404F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
            "matchCriteriaId" : "8279718F-878F-4868-8859-1728D13CD0D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update45:*:*:*:*:*:*",
            "matchCriteriaId" : "2C024E1A-FD2C-42E8-B227-C2AFD3040436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "4F24389D-DDD0-4204-AA24-31C920A4F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update51:*:*:*:*:*:*",
            "matchCriteriaId" : "966979BE-1F21-4729-B6B8-610F74648344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
            "matchCriteriaId" : "F8534265-33BF-460D-BF74-5F55FDE50F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update65:*:*:*:*:*:*",
            "matchCriteriaId" : "F77AFC25-1466-4E56-9D5F-6988F3288E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
            "matchCriteriaId" : "A650BEB8-E56F-4E42-9361-8D2DB083F0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update71:*:*:*:*:*:*",
            "matchCriteriaId" : "799FFECD-E80A-44B3-953D-CDB5E195F3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
            "matchCriteriaId" : "A7047507-7CAF-4A14-AA9A-5CEF806EDE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update73:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC7B179-95D3-4F94-84F6-73F1034A1AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update74:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB28526-9385-44CA-AF08-1899E6C3AE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update77:*:*:*:*:*:*",
            "matchCriteriaId" : "E26B69E4-0B43-415F-A82B-52FDCB262B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update91:*:*:*:*:*:*",
            "matchCriteriaId" : "27BC4150-70EC-462B-8FC5-20B3442CBB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
            "matchCriteriaId" : "02646989-ECD9-40AE-A83E-EFF4080C69B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77172BC0-8637-41F6-AE3B-83006D6735DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0008/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5430",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5478",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21968",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:16.470",
      "lastModified" : "2024-11-21T07:44:00.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and  22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FE7FF02E-5A54-47BD-8FAC-E1F1E23CBD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "725D21E1-8FEF-492C-9CCF-75DDD286FA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:22.3.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CBC05434-18E2-43D2-901F-BA97A3A3AC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update361:*:*:*:*:*:*",
            "matchCriteriaId" : "BB648C28-DCDF-4CEE-816C-2D7EF91D2689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA4C6A6B-46BA-471A-959C-D1819B5D5196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:17.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "751BA15B-1950-4ABD-AFEB-B4F90587FF61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F26CDEF2-A840-4957-A390-19E48AEEC70A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update361:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18EEA4-9670-4EBC-8559-6766740980F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:11.0.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B85FB47B-1A8B-4758-83A7-3AC5B74D73FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:17.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B973ADC-5F00-4CC5-985F-F4E1BB9FF1EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC10C81D-E148-4208-BA86-086B935A1254"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:7-mode_transition_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EF6650C-558D-45C8-AE7D-136EE70CB6D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:brocade_san_navigator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25FA7A4D-B0E2-423E-8146-E221AE2D6120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAA4004-9319-478C-9D55-0E8307F872F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B199052-5732-4726-B06B-A12C70DFB891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11",
            "versionEndIncluding" : "11.0.18",
            "matchCriteriaId" : "90F6CEC5-2FD9-4ADB-9D86-B741C0ABCD7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17",
            "versionEndIncluding" : "17.0.6",
            "matchCriteriaId" : "83395182-E46E-47FF-A781-4EF235BC83B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "70892D06-6E75-4425-BBF0-4B684EC62A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A165D71-71CC-4E6A-AA4F-FF8DB5B9A5AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "7417B2BB-9AC2-4AF4-A828-C89A0735AD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0A57B5-6F88-4288-9CDE-F6613FE068D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED8559-C348-4932-B7CE-CB96976A30EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "40AC3D91-263F-4345-9FAA-0E573EA64590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "DD92AFA9-81F8-48D4-B79A-E7F066F69A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4B2F24-A730-4818-90C8-A2D90C081F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "464087F2-C285-4574-957E-CE0663F07DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9BB880-A4F6-4887-8BB9-47AA298753D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*",
            "matchCriteriaId" : "18DCFF53-B298-4534-AB5C-8A5EF59C616F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
            "matchCriteriaId" : "083419F8-FDDF-4E36-88F8-857DB317C1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A74F65-57E8-4C9A-BA96-5EF401504F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0B90FC-57B6-4315-9B29-3C36E58B2CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
            "matchCriteriaId" : "07812576-3C35-404C-A7D7-9BE9E3D76E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "00C52B1C-5447-4282-9667-9EBE0720B423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "92BB9EB0-0C12-4E77-89EE-FB77097841B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9D5DCE-2E8F-42B9-9038-AEA7E8C8CFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC0E7BB-F8B7-4369-9910-71240E4073A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*",
            "matchCriteriaId" : "551B2640-8CEC-4C24-AF8B-7A7CEF864D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE30779-48FB-451E-8CE1-F469F93B8772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*",
            "matchCriteriaId" : "60590FDE-7156-4314-A012-AA38BD2ADDC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update171:*:*:*:*:*:*",
            "matchCriteriaId" : "BE51AD3A-8331-4E8F-9DB1-7A0051731DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*",
            "matchCriteriaId" : "F24F6122-2256-41B6-9033-794C6424ED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update181:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAFA79E-8C7A-48CF-8868-11378FE4B26F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update191:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D6F19F-59B5-4BB6-AD35-013384025970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BA97BC-3ADA-465A-835B-6C3C5F416B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "B71F77A4-B7EB-47A1-AAFD-431A7D040B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update201:*:*:*:*:*:*",
            "matchCriteriaId" : "91D6BEA9-5943-44A4-946D-CEAA9BA99376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*",
            "matchCriteriaId" : "C079A3E0-44EB-4B9C-B4FC-B7621D165C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update211:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB74086-14B8-4237-8357-E0C6B5BB8313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABED20A-7C34-4E86-9AFB-F4DC9ECBB3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update221:*:*:*:*:*:*",
            "matchCriteriaId" : "00C2B9C9-1177-4DA6-96CE-55F37F383F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*",
            "matchCriteriaId" : "435CF189-0BD8-40DF-A0DC-99862CDEAF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update231:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3F367-33AD-47C3-BFDC-871A17E72C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*",
            "matchCriteriaId" : "A18F994F-72CA-4AF5-A7D1-9F5AEA286D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update241:*:*:*:*:*:*",
            "matchCriteriaId" : "78261932-7373-4F16-91E0-1A72ADBEBC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update242:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD90D3D-9B3A-4101-9A8A-5090F0A9719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*",
            "matchCriteriaId" : "B38C0276-0EBD-4E0B-BFCF-4DDECACE04E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update252:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A40B8A-D428-4008-9F21-AF21394C51D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update262:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC5B777-01E1-45EE-AF95-C3BD1F098B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update271:*:*:*:*:*:*",
            "matchCriteriaId" : "3B504718-5DCE-43B4-B19A-C6B6E7444BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "3102AA10-99A8-49A9-867E-7EEC56865680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update282:*:*:*:*:*:*",
            "matchCriteriaId" : "5A55CBC7-A7B2-4B89-8AB5-ED30DBE6814E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update291:*:*:*:*:*:*",
            "matchCriteriaId" : "15BA8A26-2CDA-442B-A549-6BE92DCCD205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update301:*:*:*:*:*:*",
            "matchCriteriaId" : "56F2883B-6A1B-4081-8877-07AF3A73F6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update302:*:*:*:*:*:*",
            "matchCriteriaId" : "98C0742E-ACDD-4DB4-8A4C-B96702C8976C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update31:*:*:*:*:*:*",
            "matchCriteriaId" : "F8483034-DD5A-445D-892F-CDE90A7D58EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update312:*:*:*:*:*:*",
            "matchCriteriaId" : "1716A5CD-1C32-4F19-9DDE-F9C7CCB6B420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update322:*:*:*:*:*:*",
            "matchCriteriaId" : "DAB4F663-BCAF-43DB-BCC3-24C060B0CBAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update332:*:*:*:*:*:*",
            "matchCriteriaId" : "A8EF5BB8-7DAF-49B0-A11E-14E89EF7377A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update342:*:*:*:*:*:*",
            "matchCriteriaId" : "383F0B07-59BF-4744-87F2-04C98BC183B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update352:*:*:*:*:*:*",
            "matchCriteriaId" : "494C17C6-54A3-4BE6-A4FF-2D54DF2B38D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update362:*:*:*:*:*:*",
            "matchCriteriaId" : "1058ABDC-D652-4E2D-964D-C9C98FD404F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
            "matchCriteriaId" : "8279718F-878F-4868-8859-1728D13CD0D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update45:*:*:*:*:*:*",
            "matchCriteriaId" : "2C024E1A-FD2C-42E8-B227-C2AFD3040436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "4F24389D-DDD0-4204-AA24-31C920A4F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update51:*:*:*:*:*:*",
            "matchCriteriaId" : "966979BE-1F21-4729-B6B8-610F74648344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
            "matchCriteriaId" : "F8534265-33BF-460D-BF74-5F55FDE50F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update65:*:*:*:*:*:*",
            "matchCriteriaId" : "F77AFC25-1466-4E56-9D5F-6988F3288E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
            "matchCriteriaId" : "A650BEB8-E56F-4E42-9361-8D2DB083F0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update71:*:*:*:*:*:*",
            "matchCriteriaId" : "799FFECD-E80A-44B3-953D-CDB5E195F3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
            "matchCriteriaId" : "A7047507-7CAF-4A14-AA9A-5CEF806EDE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update73:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC7B179-95D3-4F94-84F6-73F1034A1AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update74:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB28526-9385-44CA-AF08-1899E6C3AE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update77:*:*:*:*:*:*",
            "matchCriteriaId" : "E26B69E4-0B43-415F-A82B-52FDCB262B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update91:*:*:*:*:*:*",
            "matchCriteriaId" : "27BC4150-70EC-462B-8FC5-20B3442CBB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
            "matchCriteriaId" : "02646989-ECD9-40AE-A83E-EFF4080C69B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77172BC0-8637-41F6-AE3B-83006D6735DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0008/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5430",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5478",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.couchbase.com/alerts/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21969",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:16.547",
      "lastModified" : "2024-11-21T07:44:01.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in Oracle SQL Developer (component: Installation).  Supported versions that are affected are Prior to 23.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle SQL Developer executes to compromise Oracle SQL Developer.  Successful attacks of this vulnerability can result in takeover of Oracle SQL Developer. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sql_developer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.1.0",
            "matchCriteriaId" : "106BD3BA-E342-45C5-AAD4-61E39A7694EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21970",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:16.617",
      "lastModified" : "2024-11-21T07:44:01.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Security).   The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:6.4.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6CEFA51-E2C5-4F07-952D-F8F46C928092"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21971",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:16.700",
      "lastModified" : "2024-11-21T07:44:01.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).  Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors as well as  unauthorized update, insert or delete access to some of MySQL Connectors accessible data and  unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DB5119-7398-455A-953C-A7DBB87AF49C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:23.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A5150F8-FE57-469D-83C8-24CB1ADD7EFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E600AE9-0882-4D70-A96C-E57306841671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:23.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31060E2C-09EE-47CC-A695-742A8CB9623B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "9480E876-B349-4911-813B-9E06846C7F37"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "F3E0B672-3E06-4422-B2A4-0BD073AEC2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0010/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21972",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:16.783",
      "lastModified" : "2024-11-21T07:44:01.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "9B03E711-1254-4CBD-B2B5-F947248C2A53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21973",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:16.860",
      "lastModified" : "2024-11-21T07:44:01.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iProcurement.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iProcurement, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle iProcurement accessible data as well as  unauthorized read access to a subset of Oracle iProcurement accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:iprocurement:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.12",
            "matchCriteriaId" : "3CE23407-1C14-4272-BE18-65AB32B7B17A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21976",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:16.943",
      "lastModified" : "2024-11-21T07:44:01.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "9B03E711-1254-4CBD-B2B5-F947248C2A53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21977",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:17.010",
      "lastModified" : "2024-11-21T07:44:01.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "C5DC0F62-B9D3-4A60-85BC-CAE7C31F1060"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21978",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:17.083",
      "lastModified" : "2024-11-21T07:44:02.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: GUI).  Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Object Library, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data as well as  unauthorized read access to a subset of Oracle Application Object Library accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Application Object Library. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.11",
            "matchCriteriaId" : "2B87A8AF-98ED-435D-AF0B-EEA1503DBB22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21979",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:17.160",
      "lastModified" : "2024-11-21T07:44:02.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21980",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:17.227",
      "lastModified" : "2024-11-21T07:44:02.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs).  Supported versions that are affected are 5.7.41 and prior and  8.0.32 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.7.41",
            "matchCriteriaId" : "FE1F2132-B023-455E-ADCF-ED40F1B04A9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "9B03E711-1254-4CBD-B2B5-F947248C2A53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21981",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:17.300",
      "lastModified" : "2024-11-21T07:44:02.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search).  Supported versions that are affected are 8.58, 8.59 and  8.60. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AF00C6-B97F-414D-A8DF-057E6BFD8597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF191D4F-3D54-4525-AAF5-B70D3FD2F818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21982",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:17.367",
      "lastModified" : "2024-11-21T07:44:02.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.32",
            "matchCriteriaId" : "9B03E711-1254-4CBD-B2B5-F947248C2A53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230427-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21984",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:17.440",
      "lastModified" : "2024-11-21T07:44:02.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries).   The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Solaris.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21985",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:17.517",
      "lastModified" : "2024-11-21T07:44:02.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).  Supported versions that are affected are 10 and  11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Solaris, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 7.7 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21986",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:17.597",
      "lastModified" : "2024-11-21T07:44:03.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Native Image).  Supported versions that are affected are Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and  22.3.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle GraalVM Enterprise Edition executes to compromise Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 5.7 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.9:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "FE7FF02E-5A54-47BD-8FAC-E1F1E23CBD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "725D21E1-8FEF-492C-9CCF-75DDD286FA71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:22.3.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CBC05434-18E2-43D2-901F-BA97A3A3AC3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21987",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:17.673",
      "lastModified" : "2024-11-21T07:44:03.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.44 and  Prior to 7.0.8. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.44",
            "matchCriteriaId" : "EF9AE787-BAFB-4587-98E2-A2A51A95D4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.8",
            "matchCriteriaId" : "C1C0B3AD-F498-4A34-B2B0-47D08DDE5AE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21988",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:17.747",
      "lastModified" : "2024-11-21T07:44:03.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.44 and  Prior to 7.0.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.44",
            "matchCriteriaId" : "EF9AE787-BAFB-4587-98E2-A2A51A95D4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.8",
            "matchCriteriaId" : "C1C0B3AD-F498-4A34-B2B0-47D08DDE5AE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21989",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:17.827",
      "lastModified" : "2024-11-21T07:44:03.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.44 and  Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.44",
            "matchCriteriaId" : "EF9AE787-BAFB-4587-98E2-A2A51A95D4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.8",
            "matchCriteriaId" : "C1C0B3AD-F498-4A34-B2B0-47D08DDE5AE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21990",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:17.900",
      "lastModified" : "2024-11-21T07:44:03.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.44 and  Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.44",
            "matchCriteriaId" : "EF9AE787-BAFB-4587-98E2-A2A51A95D4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.8",
            "matchCriteriaId" : "C1C0B3AD-F498-4A34-B2B0-47D08DDE5AE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21991",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:17.980",
      "lastModified" : "2024-11-21T07:44:03.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.44 and  Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 3.2 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.44",
            "matchCriteriaId" : "EF9AE787-BAFB-4587-98E2-A2A51A95D4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.8",
            "matchCriteriaId" : "C1C0B3AD-F498-4A34-B2B0-47D08DDE5AE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21992",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:18.057",
      "lastModified" : "2024-11-21T07:44:03.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Administer Workforce).   The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Human Resources.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Human Resources accessible data as well as  unauthorized read access to a subset of PeopleSoft Enterprise HCM Human Resources accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_human_resources:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "344A3A9E-3113-4096-B9F8-CA0AD705242B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21993",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:18.123",
      "lastModified" : "2024-11-21T07:44:03.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Clinical Remote Data Capture product of Oracle Health Sciences Applications (component: Forms).   The supported version that is affected is 5.4.0.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Clinical Remote Data Capture.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Clinical Remote Data Capture accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:clinical_remote_data_capture:5.4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DA7077-6EE5-44E2-BE90-2E0E8E3CEC7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21996",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:18.190",
      "lastModified" : "2024-11-21T07:44:04.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).  Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21997",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:18.260",
      "lastModified" : "2024-11-21T07:44:04.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User Management.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle User Management accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:user_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.12",
            "matchCriteriaId" : "26EEB7CB-59FA-4CF8-8F87-5F6076ED1431"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21998",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:18.327",
      "lastModified" : "2024-11-21T07:44:04.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.44 and  Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as  unauthorized read access to a subset of Oracle VM VirtualBox accessible data. Note: This vulnerability applies to Windows VMs only. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.44",
            "matchCriteriaId" : "EF9AE787-BAFB-4587-98E2-A2A51A95D4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.8",
            "matchCriteriaId" : "C1C0B3AD-F498-4A34-B2B0-47D08DDE5AE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21999",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:18.397",
      "lastModified" : "2024-11-21T07:44:04.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.44 and  Prior to 7.0.8. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as  unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 3.6 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.6,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.6,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.44",
            "matchCriteriaId" : "EF9AE787-BAFB-4587-98E2-A2A51A95D4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.8",
            "matchCriteriaId" : "C1C0B3AD-F498-4A34-B2B0-47D08DDE5AE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22000",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:18.473",
      "lastModified" : "2024-11-21T07:44:04.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.44 and  Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as  unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.44",
            "matchCriteriaId" : "EF9AE787-BAFB-4587-98E2-A2A51A95D4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.8",
            "matchCriteriaId" : "C1C0B3AD-F498-4A34-B2B0-47D08DDE5AE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22001",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:18.547",
      "lastModified" : "2024-11-21T07:44:04.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.44 and  Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as  unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.44",
            "matchCriteriaId" : "EF9AE787-BAFB-4587-98E2-A2A51A95D4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.8",
            "matchCriteriaId" : "C1C0B3AD-F498-4A34-B2B0-47D08DDE5AE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22002",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:18.617",
      "lastModified" : "2024-11-21T07:44:04.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 6.1.44 and  Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.44",
            "matchCriteriaId" : "EF9AE787-BAFB-4587-98E2-A2A51A95D4E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.8",
            "matchCriteriaId" : "C1C0B3AD-F498-4A34-B2B0-47D08DDE5AE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22003",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2023-04-18T20:15:18.737",
      "lastModified" : "2024-11-21T07:44:05.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).  Supported versions that are affected are 10 and  11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Solaris accessible data. CVSS 3.1 Base Score 3.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29887",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-18T20:15:19.917",
      "lastModified" : "2025-02-06T15:15:12.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the File parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nuovo:spreadsheet-reader:0.5.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A98E674-A1ED-4B77-8A2B-2322423D0852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.hisolutions.com/2023/01/arbitrary-file-read-vulnerability-php-library-nuovo-spreadsheet-reader-0-5-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://research.hisolutions.com/2023/01/arbitrary-file-read-vulnerability-php-library-nuovo-spreadsheet-reader-0-5-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25547",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T21:15:08.383",
      "lastModified" : "2024-11-21T07:49:42.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution\non upload and install packages when a hacker is using a low privileged user account. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9.2",
            "matchCriteriaId" : "9DCD63E5-0A70-47B2-9F4F-5328E0BD04B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25548",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T21:15:08.463",
      "lastModified" : "2024-11-21T07:49:42.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA CWE-863: Incorrect Authorization vulnerability exists that could allow access to device\ncredentials on specific DCE endpoints not being properly secured when a hacker is using a low\nprivileged user. \n\n Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9.2",
            "matchCriteriaId" : "9DCD63E5-0A70-47B2-9F4F-5328E0BD04B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25549",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T21:15:08.523",
      "lastModified" : "2024-11-21T07:49:42.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\n\n\n\n\nA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that\nallows for remote code execution when using a parameter of the DCE network settings\nendpoint. \n\n\n\n\n \n\n \n\n Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9.2",
            "matchCriteriaId" : "9DCD63E5-0A70-47B2-9F4F-5328E0BD04B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25550",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T21:15:08.590",
      "lastModified" : "2024-11-21T07:49:42.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\n\n\n\n\n\n\nA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that\nallows remote code execution via the “hostname” parameter when maliciously crafted hostname\nsyntax is entered.\n\n \n\n\n\n\n \n\n \n\n Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9.2",
            "matchCriteriaId" : "9DCD63E5-0A70-47B2-9F4F-5328E0BD04B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25551",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T21:15:08.653",
      "lastModified" : "2024-11-21T07:49:42.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\n\n\n\n\n\n\n\n\nA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site\nScripting') vulnerability exists on a DCE file upload endpoint when tampering with parameters\nover HTTP.\n\n\n\n \n\n\n\n\n \n\n \n\n Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9.2",
            "matchCriteriaId" : "9DCD63E5-0A70-47B2-9F4F-5328E0BD04B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25552",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T21:15:08.713",
      "lastModified" : "2024-11-21T07:49:42.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\nA CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized\ncontent, changes or deleting of content, or performing unauthorized functions when tampering\nthe Device File Transfer settings on DCE endpoints. \n\n \n\n Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9.2",
            "matchCriteriaId" : "9DCD63E5-0A70-47B2-9F4F-5328E0BD04B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25553",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T21:15:08.777",
      "lastModified" : "2024-11-21T07:49:43.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\n\n\n\n\n\n\n\n\n\n\nA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site\nScripting') vulnerability exists on a DCE endpoint through the logging capabilities of the\nwebserver. \n\n\n\n\n\n \n\n\n\n\n \n\n \n\n Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9.2",
            "matchCriteriaId" : "9DCD63E5-0A70-47B2-9F4F-5328E0BD04B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25554",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T21:15:08.843",
      "lastModified" : "2024-11-21T07:49:43.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\n\n\nA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS\nCommand Injection') vulnerability exists that allows a local privilege escalation on the appliance\nwhen a maliciously crafted Operating System command is entered on the device.\n\n \n\n \n\n Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9.2",
            "matchCriteriaId" : "9DCD63E5-0A70-47B2-9F4F-5328E0BD04B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25555",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T21:15:08.910",
      "lastModified" : "2024-11-21T07:49:43.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS\nCommand Injection') vulnerability exists that could allow a user that knows the credentials to\nexecute unprivileged shell commands on the appliance over SSH. \n\n \n\n\n\n\n\n \n\n\n\n\n \n\n \n\n Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.9.2",
            "matchCriteriaId" : "9DCD63E5-0A70-47B2-9F4F-5328E0BD04B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26048",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-18T21:15:08.977",
      "lastModified" : "2024-11-21T07:50:39.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service -- although it may take some time. This issue has been patched in versions 9.4.51, 10.0.14, and 11.0.14. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize` which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.4.51",
            "matchCriteriaId" : "5F910B13-4631-4220-A6B5-F677C5DBE1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.14",
            "matchCriteriaId" : "013DE7B6-8442-4606-955A-E4BA7B670251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.14",
            "matchCriteriaId" : "7E8C62A3-4CA2-4DC8-B847-14EEDF689E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eclipse/jetty.project/issues/9076",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/pull/9344",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/pull/9345",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/security/advisories/GHSA-qw69-rqj8-6qw8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jakartaee/servlet/blob/6.0.0/spec/src/main/asciidoc/servlet-spec-body.adoc#32-file-upload",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00039.html",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0001/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5507",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/eclipse/jetty.project/issues/9076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/pull/9344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/pull/9345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/security/advisories/GHSA-qw69-rqj8-6qw8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jakartaee/servlet/blob/6.0.0/spec/src/main/asciidoc/servlet-spec-body.adoc#32-file-upload",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00039.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26049",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-18T21:15:09.043",
      "lastModified" : "2024-11-21T07:50:39.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `\"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE=\"b; JSESSIONID=1337; c=d\"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.4.51",
            "matchCriteriaId" : "5F910B13-4631-4220-A6B5-F677C5DBE1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.14",
            "matchCriteriaId" : "013DE7B6-8442-4606-955A-E4BA7B670251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.14",
            "matchCriteriaId" : "7E8C62A3-4CA2-4DC8-B847-14EEDF689E77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:12.0.0:alpha1:*:*:*:*:*:*",
            "matchCriteriaId" : "CA07CE23-17D8-4EFB-A6A2-97CCB8FF8461"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:12.0.0:alpha2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A862281-65C6-47DC-9A13-521B9187C7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:12.0.0:alpha3:*:*:*:*:*:*",
            "matchCriteriaId" : "4B999249-2A88-4270-8401-07CF57157D23"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "F3E0B672-3E06-4422-B2A4-0BD073AEC2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "matchCriteriaId" : "020C93EF-D94B-43CC-9F92-65F046D7EC19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_unified_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB695329-036B-447D-BEB0-AA4D89D1D99C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680ECEAE-D73F-47D2-8AF8-7704469CF3EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eclipse/jetty.project/pull/9339",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/pull/9352",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/security/advisories/GHSA-p26g-97m4-6q7c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00039.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0001/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5507",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.rfc-editor.org/rfc/rfc2965",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://www.rfc-editor.org/rfc/rfc6265",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/pull/9339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/pull/9352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/security/advisories/GHSA-p26g-97m4-6q7c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00039.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.rfc-editor.org/rfc/rfc2965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://www.rfc-editor.org/rfc/rfc6265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28003",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T21:15:09.117",
      "lastModified" : "2024-11-21T07:53:54.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\nA CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to\nmaintain unauthorized access over a hijacked session in PME after the legitimate user has\nsigned out of their account.\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_power_monitoring_expert:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2022",
            "matchCriteriaId" : "EEB54F7D-EFED-4E21-832E-AA3BBB3CB723"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-01.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-01.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28440",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-18T21:15:09.180",
      "lastModified" : "2024-11-21T07:55:04.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source platform for community discussion. In affected versions a maliciously crafted request from a Discourse administrator can lead to a long-running request and eventual timeout. This has the greatest potential impact in shared hosting environments where admins are untrusted. This issue has been addressed in versions 3.0.3 and 3.1.0.beta4. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "3.0.3",
            "matchCriteriaId" : "35B2683D-D670-4F47-90D9-D18AF3BFC9A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BF272688-1B08-4ABC-8002-66B59690F9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "A29A2465-B21D-4147-8292-DCF864D385B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBC3511E-3D68-42E2-B521-966FB429B640"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "EC8B99C2-E267-4EC2-AF09-C9AD1EEE76D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "F21A22EE-081A-4489-A7F8-22E2DBC5B00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E6C8FB3-4B19-4510-B9A8-BCF9ED8ED7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta6b:*:*:beta:*:*:*",
            "matchCriteriaId" : "5B827291-6483-4BB7-AF76-530B669B3ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "551E70ED-34FF-4989-91C9-6312DE4AB4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.1.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "204FB99A-8F11-4F04-9ED9-D94551790116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "46A8705C-0DF6-45D7-A38C-D2AB69194C59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F59B0D8E-CFFB-4EBA-9D6A-526F9541BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D801A898-27D0-4076-8AF9-2B574FA11723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E7CBBD4A-4FDB-49E0-A5B6-22701C12BDF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9E7328DF-1924-4D0D-AC6B-1BA2D9CF1D4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9421CE10-F226-4F2C-9DA7-EBB44B73C304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "1E71FBB6-ECAD-4581-9982-4C330D55FEAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B631CCC-D456-49FF-B626-59C40BD4E167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE83F98D-F7AA-434B-8438-5B1FB96681B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB93F19B-9087-44CE-B884-45F434B7906F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5A88A5A3-EF1A-4E86-B074-CE0AC4325484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "0650B4C7-BCFE-4180-8FEF-4170A67E8BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "388F376E-46C9-4163-992D-95E3E4548D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "D661090A-DA61-4BBE-85C3-6F48C053C84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "4A458242-D6DD-46E3-AF09-66BC87C5D7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8FACCBA-0D3B-4E6F-85A0-1CBD2B367F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F1D83D80-A0BE-4794-91A1-599AF558FB67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "BD15B6B2-BFB3-4271-A507-48E9B827FA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "E0003042-9B14-4E1B-800F-3D154FFE8A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "E449EA29-81C8-4477-977E-746EACDBED86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6FC6D4DF-8686-4054-A0C1-784E194171E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "C574C37D-3D99-4430-A3D5-199883556B64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "F344E950-EFF9-4405-99D7-0B615C32873F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "0A50DE1B-29EB-4014-B5B6-46CF493485F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "638B3E17-9F0A-4A96-B8D3-DDFEA518DBE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6D3E3AEB-8CD4-4EE7-9C81-2F74512071DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "254FF9D9-E696-41C8-B15B-DA089D2C6597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A5001E1-E716-43AA-8093-E0EED9E07909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "7FD16B13-516A-4D03-B1EF-A11156471A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E886D9EF-7FBD-4A24-A8B6-54E4B15403C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "369A83D1-AB7E-488D-9D74-26A69DFC1AD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "3189CAC1-8970-4A33-B1E4-EB9EC3C19A25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A8733438-7625-400E-8237-BAE3D9F147AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "E87F1ED0-FD0D-4767-8E7C-325D920B79BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "97811266-A13C-4441-A1B5-BFA4B0862DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "3D09D157-4B19-4561-AB20-952F2EA9BA0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "789087AF-0011-4E8F-A5AB-432A5F91BBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta13b:*:*:beta:*:*:*",
            "matchCriteriaId" : "8EC9DC8C-56DC-482B-8847-BD0CFACA6F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "F63B3D13-24F6-4EFA-9528-DBF59D973A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F3A2388-18DE-46B0-BC13-7714E25D1B1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "940B11CB-053F-4D60-8BC4-81CA659D2F7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "83684DCB-B201-43B8-8B6E-6D0B13B7E437"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "DF92E1FD-9B41-4A41-8B13-9D789C5729D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "351D224A-E67C-454C-AF43-8AD6CD44C685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "E058CA6D-A295-4CAD-8C85-E8C83BAFEBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF99C114-1BCA-4400-BC7E-EDA1F55559CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.5.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "BBA1EFBA-5A26-46A0-B2A6-53B9924253BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE5B90B0-B6CC-4189-9C98-CF29017A47B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1818628-5F4E-4E5D-974A-0BEBCE821209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "14785840-3BC0-4030-AE44-E3013DF19AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "90444209-684C-4BF8-9BCF-6B29EA0A0593"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "668E15DE-8CF2-4AF3-B13A-9080046B1E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "1191861C-1B2C-4762-805D-FCDC20F84D05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "3CB518E5-CCC0-46B8-848E-C492BCF7E9BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA1F68FE-67EA-4408-8E0F-558B0FAFFF32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "66E9F05C-799A-43D3-9367-FCA86166BD65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "85DB4097-6EFC-4017-ADFD-56EE49BB2F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD283EA2-9026-497F-A7DE-E16CE0764ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.6.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "ED19DDDF-A29E-4C3F-A818-23D7E37B6974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "508D0052-B7D7-4A08-8BB0-7D7A1EDAB96D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "3E50BFB0-67D3-4EDE-93FE-85EAF605461E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "D7EE0134-6AD7-4695-B536-1959FE3A9672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "25DFFB5C-277F-4436-9BCE-643E98721C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "B8B80EB2-0B48-4AFA-8A09-26006CCDB022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AC8705E0-23ED-4817-8B69-21A4963C27F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "BAA156A9-A9FB-4D03-B0EE-4AA303D7A9CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "F733E585-075C-402A-9B34-1FE79DE4137E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "05C43439-C694-47AA-90AF-0AC2277E3D3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "B391F8A1-F102-4C88-864C-1386452CDAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC33C93-9947-4983-96A3-7DE223929817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B46DE141-1224-499E-AAE0-6CC0D5249B2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "D8D07501-A07E-4743-A188-2E5BBC3C8F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "64FD2A30-EE33-4680-9DCF-29283DBA3C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "B517F7A2-6FD1-4A7B-80E7-1167EC296591"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "E6CA6EA5-DDAD-4882-AD1B-634C0CD741BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "F14DCB07-9464-4DDE-98A1-FAE85DD60FBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6EDFD679-4710-4A62-B254-E658EED4295B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "A1B81072-08A5-4EC6-B737-E35C505C1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "A0748A9E-5737-48F9-BB66-6576AFE16198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "453E51D9-89A1-4A91-B218-05C45CC4E329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "51542BA7-8151-4FC9-9C86-36CEB476B912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "5F95391C-0B75-47D2-9770-561E05414CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "10384675-B949-4B50-AF42-B5A3EE27250B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "7C0DB1C0-5749-4508-A265-C2138F7852E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "CA9977CF-575C-4A19-84C8-EBB68EBE88C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "87C525C5-E282-4EC6-956F-0C94DC11FC69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "7F02A2A8-6312-4F6D-ABBF-952CA4C5E02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "DE54D1A3-FC2A-40DE-9177-50332208B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "170AE3DA-92C1-4D1D-9CAC-543C01FFF479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "2130C3C5-E4A5-41C3-89F0-C6FB4E47D096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "74248527-B884-4134-95C8-DEAF3D774A9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta17:*:*:beta:*:*:*",
            "matchCriteriaId" : "01A8AF9C-8BF6-4ADC-A85A-A5C1F9FFB2C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "B4038D09-467C-4815-A429-F0E1E3E545E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "6F273237-7223-4047-83B7-16A49B7E554A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF26EE13-554C-4180-98A2-238D84E40927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "12688C9C-291D-4BF2-93F9-09AA323C52A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "A7F7A437-D538-4B44-AC41-C95641A11A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "9BB61DCF-52DB-498D-8779-D565E548C285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "EE56BB77-B7F7-4BE7-AD9C-33888C5D01FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:1.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "9DB49E1D-BCC8-4984-A81D-5DAC5E3DF168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "F775EA72-CCE3-4230-A666-EFDAA61F71FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E65BDEE-850A-41C6-8CFB-BD8B3A105CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "AF196429-FDED-4C3F-9F7D-0A2BF7DCAD1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "64B84326-5397-4C60-8007-F7E7D81DC661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "9A0A526A-9662-4E39-8BF6-E464BE1A2B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "712DACC2-A21E-429F-8A7B-86D8F7CE3468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "6E93F9F6-5B03-4F77-B8B4-AEC9E4011692"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "C5B2B98E-804F-4525-B726-3F1DF2693F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "582E339F-678A-4377-8EE0-8F4208E3EF78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.0.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "1BF1D945-6EAA-4FA7-8252-2FED079587F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9325DFF5-EA7B-4B8D-A227-4B1A59449CE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0ECB28DA-3CA1-4011-9170-BFBF2ED3E091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "2A6399B0-471B-4B26-859C-3836F2A6B7D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "131E2AE4-E35D-495D-8907-3B899BB8AC41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "83601528-0DD9-4835-B6C0-0F341871CC15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.1.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4AEB5AAF-73EB-4356-8C53-10E22B2F910E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EB199D6-E253-4EC2-BF0B-059F7B6662ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "94A586EB-B0E0-4190-88DF-3BCC04E5EF84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BF27B44-9AA7-4B91-9B4B-0E84418F5632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "461744BD-3974-4C33-8514-0A917DC90C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A86FB2B-6915-49C0-B993-0711AAECA5FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "9EF3DD36-2776-4CD2-A3F1-88872024D223"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "D91D71ED-F08F-4DB5-B7DD-062E7C11435F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "62B5812A-FB52-4F4B-9A15-3AA5CD6562E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "83231EC0-E3F7-4E35-B165-487C2725B4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.2.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "A53AFFA6-7B98-47F2-9BD7-71C83A69CE26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "A42D3FB9-9197-4101-A729-876C490BD572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "A5DE0C47-0C66-4EFE-AF82-1B22F4F54A44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "E587D10F-BEF8-4923-AF76-6DC3172880EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "155568EF-6A7E-423A-B5EA-D20E407B271B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "7E94B119-8C75-43DF-A2DF-A5B3E04F0778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5348F94F-F6AE-4400-8AC7-036111EF43D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "57948A73-C9C5-4C24-947D-0A4659C7002E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "3532EE37-2D0F-496C-B5A8-F9315FFB4552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "2CAE7CC9-B91D-494C-B91A-497D6FE6B14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "623BBBF8-4121-466A-82C8-D179B02B3E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.3.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "648D010A-8B8D-42AA-8888-09E4E0FAA954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "8ADC7613-25E3-4CB8-A962-2775C20E4D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "1B0099F0-A275-4C65-9B79-041374F183DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "FE69800E-5CB5-4916-879C-51DE5E94489F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "8C64EAFE-2B60-4D95-869F-4A2FC98B99C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "AB2045F1-AC39-4738-B3F0-33F00D23C921"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E32589F8-2E87-40D2-BAD3-E6C1C088CA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "4868BAFD-BFE5-4361-855A-644B040E7233"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "4B6C25BF-5B2A-43C4-8918-E32BA9DD8A22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "EB9917D3-D848-4D2B-8A44-B3723BA377DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "7046D95B-73CE-406B-ACC3-FD71F7DEC7CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.4.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "D3BA5033-2C06-42FF-962E-48EBA2EBB469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "630D29DE-0FD7-4306-BA80-20D0791D334B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "08F94E42-07A1-480D-B6DD-D96AE38F1EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "FA4B3DE5-21DA-4185-AF74-AAA6DD89FB3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "E602BEF9-E89D-40F7-BC6F-5C6F9F25BA97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "C06A8627-683D-4328-BE7A-4A33A4B736F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E3EF8240-D3F5-422C-B70A-90C6CBA4E622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.5.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "93CC792D-AE0B-498E-8374-5D09EF4E28FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "093D4EA8-B002-4AB4-97C9-CEE4D70BF3C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "4C778180-E7BF-4EF2-8B19-0388E23E1424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "0C0B2BC1-35F1-4A1D-B9B2-54426B4ADF34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "6BCAB620-465A-41FF-A064-FB638DD3A557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "6AFCB802-A275-444C-8245-D0397322125F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.6.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "9F9B70E2-AAAD-4E61-AEB2-E5F635F6AAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "6182074E-C467-448C-9299-B92CFE4EEBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "09EA8F36-7647-42D0-8675-34C002E0754D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "9CE2276A-9680-4B14-9636-806F7E4C1669"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD150166-4C8D-47E3-989A-1A71A46C36A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CF5CA6AD-FA4D-47DF-A684-5DAD7662EA13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "B94F75B8-7C84-4727-9D18-114A815E1906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "4D94E03A-32EE-408F-81FA-4B9C25AA7DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "AD495875-007C-4A90-B940-B62E6FA492CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F1B84E-8AF8-46E8-9DE9-00D1DE348C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "BCCEFDFB-61E6-4846-8093-B5CEB0D8450C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "0BC63647-B692-4BB9-9A3D-6F8DF19C3494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "05F0ED55-C8C6-47C1-859A-60046838B6F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "6A2D59BC-2EE8-4F9C-AB5B-B9D01B44F7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "933DFEBC-5568-431B-809D-AFAEFD08E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "BE920E80-C02B-4EC8-982F-ADE89C936684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "CDAE3441-12BA-41F4-8A5A-B2EE844C86BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "1443EA1B-D210-4219-8452-CBFD5FACBC77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "948A4B4A-A11F-477E-BEC5-0D60C7E3570C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "98B2A052-5427-4B72-9F59-82F430836CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.8.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "CB6D636E-B51F-4648-A637-62B2603BA18F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "3DA17871-7ED7-4D68-A46D-D15DC5B3235F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta10:*:*:beta:*:*:*",
            "matchCriteriaId" : "705FE965-0415-4382-8CA1-A19DF3B5EF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta11:*:*:beta:*:*:*",
            "matchCriteriaId" : "BC6EDCE3-D564-434F-9A7F-D4A6D579F8F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta12:*:*:beta:*:*:*",
            "matchCriteriaId" : "FB05E54B-9CF6-45A7-8D47-C98DB6D19E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta13:*:*:beta:*:*:*",
            "matchCriteriaId" : "03CD1C5E-18F5-4C6D-B92C-C511C8C12D0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta14:*:*:beta:*:*:*",
            "matchCriteriaId" : "FF4ABB9D-69DF-42D5-AD60-F9CEEC1B6730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "7B4DCCF5-E290-4BDA-AAB9-DF362A2EB7B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "3AE1F3A2-8340-4ED7-B943-ACDA9617DF64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta4:*:*:beta:*:*:*",
            "matchCriteriaId" : "5E033AB7-9987-4C30-849F-2495376CA4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:beta:*:*:*",
            "matchCriteriaId" : "D87E9338-C7F6-43BA-886F-C30987ADBA1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:beta:*:*:*",
            "matchCriteriaId" : "E24EB90F-FE81-4746-8741-8DC9346F79C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:beta:*:*:*",
            "matchCriteriaId" : "D237956F-FC90-467E-A493-24EFDA1A9F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:beta:*:*:*",
            "matchCriteriaId" : "F7AA9AB8-AB6F-43E2-B3E5-685EE9BFE7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:beta:*:*:*",
            "matchCriteriaId" : "5BC240A1-431E-4A50-88DC-7AC9BC674254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta15:*:*:beta:*:*:*",
            "matchCriteriaId" : "3F85AFD4-D397-4FDB-B762-521BD5FF14C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.0.0:beta16:*:*:beta:*:*:*",
            "matchCriteriaId" : "D40CDCE1-3462-4D6C-A3C7-487F175264CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "888B8ECF-EBE0-4821-82F6-B0026E95E407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "FD0302B1-C0BA-49EE-8E1B-E8A43879BFC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-vm65-pv5h-6g3w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-vm65-pv5h-6g3w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28839",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-18T21:15:09.247",
      "lastModified" : "2024-11-21T07:56:07.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shoppingfeed PrestaShop is an add-on to the PrestaShop ecommerce platform to synchronize data. The module Shoppingfeed for PrestaShop is vulnerable to SQL injection between version 1.4.0 and 1.8.2 due to a lack of input sanitization. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shoppingfeed:shoppingfeed:*:*:*:*:*:prestashop:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.8.3",
            "matchCriteriaId" : "7F23E3CA-5801-4216-BB98-3A085CC73FA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/shoppingflux/module-prestashop/pull/209",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/shoppingflux/module-prestashop/security/advisories/GHSA-vfmq-w777-qvcf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/shoppingflux/module-prestashop/pull/209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/shoppingflux/module-prestashop/security/advisories/GHSA-vfmq-w777-qvcf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28856",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-18T21:15:09.313",
      "lastModified" : "2024-11-21T07:56:10.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redis is an open source, in-memory database that persists on disk. Authenticated users can use the `HINCRBYFLOAT` command to create an invalid hash field that will crash Redis on access in affected versions. This issue has been addressed in in versions 7.0.11, 6.2.12, and 6.0.19. Users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.19",
            "matchCriteriaId" : "F2B03AA7-7246-4AEB-9C34-37E63E9D734C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.2.12",
            "matchCriteriaId" : "34A547EB-9F9A-4554-97D5-0141CAE18222"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.11",
            "matchCriteriaId" : "ADC8DBA4-6974-4E79-9218-286251C25982"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redis/redis/commit/bc7fe41e5857a0854d524e2a63a028e9394d2a5c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis/pull/11149",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis/security/advisories/GHSA-hjv8-vjf6-wcr6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00023.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EQ4DJSO4DMR55AWK6OPVJH5UTEB35R2Z/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LPUTH7NBQTZDVJWFNUD24ZCS6NDUFYS6/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQGKMKSQE67L32HE6W5EI2I2YKW5VWHI/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0007/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/redis/redis/commit/bc7fe41e5857a0854d524e2a63a028e9394d2a5c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis/pull/11149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/redis/redis/security/advisories/GHSA-hjv8-vjf6-wcr6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EQ4DJSO4DMR55AWK6OPVJH5UTEB35R2Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LPUTH7NBQTZDVJWFNUD24ZCS6NDUFYS6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQGKMKSQE67L32HE6W5EI2I2YKW5VWHI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29411",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T21:15:09.390",
      "lastModified" : "2024-11-21T07:57:00.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow\nchanges to administrative credentials, leading to potential remote code execution without\nrequiring prior authentication on the Java RMI interface. \n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:apc_easy_ups_online_monitoring_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5-ga-01-22320",
            "matchCriteriaId" : "D52617D6-0503-4B6B-A59D-441E0D1F4296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:-:*",
            "matchCriteriaId" : "647F2145-B063-43EA-8045-32D3B4D893F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:easy_ups_online_monitoring_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5-gs-01-22320",
            "matchCriteriaId" : "1849E03C-445A-4225-AECD-B4A7502F5F3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:-:*",
            "matchCriteriaId" : "647F2145-B063-43EA-8045-32D3B4D893F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29412",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T21:15:09.457",
      "lastModified" : "2024-11-21T07:57:00.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command\nInjection') vulnerability exists that could cause remote code execution when manipulating\ninternal methods through Java RMI interface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:apc_easy_ups_online_monitoring_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5-ga-01-22320",
            "matchCriteriaId" : "D52617D6-0503-4B6B-A59D-441E0D1F4296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:-:*",
            "matchCriteriaId" : "647F2145-B063-43EA-8045-32D3B4D893F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:easy_ups_online_monitoring_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5-gs-01-22320",
            "matchCriteriaId" : "1849E03C-445A-4225-AECD-B4A7502F5F3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:-:*",
            "matchCriteriaId" : "647F2145-B063-43EA-8045-32D3B4D893F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29413",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T21:15:09.523",
      "lastModified" : "2024-11-21T07:57:00.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause\nDenial-of-Service when accessed by an unauthenticated user on the Schneider UPS Monitor\nservice. \n\n \n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:apc_easy_ups_online_monitoring_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5-ga-01-22320",
            "matchCriteriaId" : "D52617D6-0503-4B6B-A59D-441E0D1F4296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:-:*",
            "matchCriteriaId" : "647F2145-B063-43EA-8045-32D3B4D893F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:easy_ups_online_monitoring_software:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5-gs-01-22320",
            "matchCriteriaId" : "1849E03C-445A-4225-AECD-B4A7502F5F3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:-:*",
            "matchCriteriaId" : "647F2145-B063-43EA-8045-32D3B4D893F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28004",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T22:15:07.350",
      "lastModified" : "2024-11-21T07:53:54.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\nA CWE-129: Improper validation of an array index vulnerability exists where a specially crafted\nEthernet request could result in denial of service or remote code execution. \n\n \n\n \n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_hdpm6000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.58.6",
            "matchCriteriaId" : "32778A18-2556-4F6B-A7AF-5F6F35E0BB3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_hdpm6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1493DEA-30AA-4BE0-84D7-FC0152D43F7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-02.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29002",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-18T22:15:07.897",
      "lastModified" : "2024-11-21T07:56:22.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cilium is a networking, observability, and security solution with an eBPF-based dataplane. When run in debug mode, Cilium will log the contents of the `cilium-secrets` namespace. This could include data such as TLS private keys for Ingress and GatewayAPI resources. An attacker with access to debug output from the Cilium containers could use the resulting output to intercept and modify traffic to and from the affected cluster. Output of the sensitive information would occur at Cilium agent restart, when secrets in the namespace are modified, and on creation of Ingress or GatewayAPI resources. This vulnerability is fixed in Cilium releases 1.11.16, 1.12.9, and 1.13.2. Users unable to upgrade should disable debug mode."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.11.16",
            "matchCriteriaId" : "4AFD7B49-00F8-4038-AE8C-AA01DA212E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndExcluding" : "1.12.9",
            "matchCriteriaId" : "A8371AD7-2C69-4584-B0C3-2AB4E632FC37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndExcluding" : "1.13.2",
            "matchCriteriaId" : "B2A8D7A6-200B-443C-B171-512964293B8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cilium/cilium/security/advisories/GHSA-pg5p-wwp8-97g8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/cilium/cilium/security/advisories/GHSA-pg5p-wwp8-97g8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29196",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-18T22:15:07.990",
      "lastModified" : "2024-11-21T07:56:41.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source platform for community discussion. This vulnerability is not exploitable on the default install of Discourse. A custom feature must be enabled for it to work at all, and the attacker’s payload must pass the CSP to be executed. However, if an attacker succeeds in embedding Javascript that does pass the CSP, it could result in session hijacking for any users that view the attacker’s post. The vulnerability is patched in the latest tests-passed, beta and stable branches. Users are advised to upgrade. Users unable to upgrade should enable and/or restore your site's CSP to the default one provided with Discourse. Remove any embed-able hosts configured."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndExcluding" : "3.0.3",
            "matchCriteriaId" : "35B2683D-D670-4F47-90D9-D18AF3BFC9A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "D3C08972-822D-4657-9B6F-02BC692B7C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "888B8ECF-EBE0-4821-82F6-B0026E95E407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "FD0302B1-C0BA-49EE-8E1B-E8A43879BFC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-986p-4x8q-8f48",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-986p-4x8q-8f48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29410",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-18T22:15:08.067",
      "lastModified" : "2024-11-21T07:57:00.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated\nattacker to gain the same privilege as the application on the server when a malicious payload is\nprovided over HTTP for the server to execute. \n\n \n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:insighthome_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16",
            "matchCriteriaId" : "371B602D-2BB3-41CF-B07B-558B74AEC130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:insighthome_firmware:1.16:-:*:*:*:*:*:*",
            "matchCriteriaId" : "698CF5CB-17DC-405B-9C44-675A80320A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:insighthome_firmware:1.16:build_004:*:*:*:*:*:*",
            "matchCriteriaId" : "039691CA-D243-4D6D-912A-F130F7F6491C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:insighthome:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37CAC057-7F0E-4375-99FE-AEE0EDDEA568"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:insightfacility_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16",
            "matchCriteriaId" : "18E2843D-745F-41D7-8B16-2CC18EC64290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:insightfacility_firmware:1.16:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F90B0024-6C86-4E85-AE83-F349D34E7416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:insightfacility_firmware:1.16:build_004:*:*:*:*:*:*",
            "matchCriteriaId" : "D81ACD8E-4B04-4BCB-894F-4A5828899C16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:insightfacility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5011815-3D43-4AA4-9395-31788D06DA10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:conext_gateway_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16",
            "matchCriteriaId" : "3524289C-ACF3-424E-9A1E-A777EBFB89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:conext_gateway_firmware:1.16:-:*:*:*:*:*:*",
            "matchCriteriaId" : "62314597-62BC-4531-B5C8-61343262CE9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:conext_gateway_firmware:1.16:build_004:*:*:*:*:*:*",
            "matchCriteriaId" : "AD27299F-4422-4176-9DFD-86F2E4487366"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:conext_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E013171F-2BFB-4CB2-9C4B-4EB60A40B255"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-02.pdf",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-02.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30538",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-18T22:15:08.130",
      "lastModified" : "2024-11-21T08:00:22.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source platform for community discussion. Due to the improper sanitization of SVG files, an attacker can execute arbitrary JavaScript on the users’ browsers by uploading a crafted SVG file. This issue is patched in the latest stable and tests-passed versions of Discourse. Users are advised to upgrade. For users unable to upgrade there are two possible workarounds: enable CDN handing of uploads (and ensure the CDN sanitizes SVG files) or disable SVG file uploads by ensuring that the `authorized extensions` site setting does not include `svg` (or reset that setting to the default, by default Discourse doesn't enable SVG uploads by users). "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndIncluding" : "3.0.2",
            "matchCriteriaId" : "00B6C4A7-D922-42E9-9E83-4FF77564982E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "D3C08972-822D-4657-9B6F-02BC692B7C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "888B8ECF-EBE0-4821-82F6-B0026E95E407"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta3:*:*:beta:*:*:*",
            "matchCriteriaId" : "FD0302B1-C0BA-49EE-8E1B-E8A43879BFC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-w5mv-4pjf-xj43",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-w5mv-4pjf-xj43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30606",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-18T22:15:08.197",
      "lastModified" : "2024-11-21T08:00:29.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse is an open source platform for community discussion. In affected versions a user logged as an administrator can call arbitrary methods on the `SiteSetting` class, notably `#clear_cache!` and `#notify_changed!`, which when done on a multisite instance, can affect the entire cluster resulting in a denial of service. Users not running in multisite environments are not affected. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*",
            "versionEndIncluding" : "3.0.1",
            "matchCriteriaId" : "618BD7ED-B602-46C3-AFDA-55544B4E6264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "D3C08972-822D-4657-9B6F-02BC692B7C6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*",
            "matchCriteriaId" : "B9BBED17-A6BA-4F17-8814-8D8521F28375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:3.1.0:beta2:*:*:beta:*:*:*",
            "matchCriteriaId" : "888B8ECF-EBE0-4821-82F6-B0026E95E407"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-jj93-w3mv-3jvv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/security/advisories/GHSA-jj93-w3mv-3jvv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30608",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-18T22:15:08.267",
      "lastModified" : "2025-11-03T22:16:10.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sqlparse_project:sqlparse:*:*:*:*:*:python:*:*",
            "versionStartIncluding" : "0.1.15",
            "versionEndExcluding" : "0.4.4",
            "matchCriteriaId" : "EF2A5C27-B4D8-494B-B864-F00E0002B511"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/andialbrecht/sqlparse/commit/c457abd5f097dd13fb21543381e7cfafe7d31cfb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/andialbrecht/sqlparse/commit/e75e35869473832a1eb67772b1adfee2db11b85a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00017.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/andialbrecht/sqlparse/commit/c457abd5f097dd13fb21543381e7cfafe7d31cfb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/andialbrecht/sqlparse/commit/e75e35869473832a1eb67772b1adfee2db11b85a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-19T00:15:07.973",
      "lastModified" : "2025-12-17T22:15:57.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-1286"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7.18",
            "matchCriteriaId" : "45955EC3-D135-4BF2-8396-744307DD4BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.8.20",
            "matchCriteriaId" : "A929EDEB-28A1-4718-A26E-08AB0DCA2D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.20",
            "matchCriteriaId" : "9365E878-106E-49B6-98FC-9FA339CD5216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.15",
            "matchCriteriaId" : "BFD756EB-DF07-4485-A2AA-59FBD7260A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11.0",
            "versionEndExcluding" : "3.11.10",
            "matchCriteriaId" : "9EE0E5D8-452F-4862-9C23-23AC1DDEFB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.12.0",
            "versionEndExcluding" : "3.12.6",
            "matchCriteriaId" : "5D4E662B-59E4-495E-941E-2246D2168B42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://python.org",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/python/cpython/issues/102988",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://python.org",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2025/Apr/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/python/cpython/issues/102988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29510",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:08.023",
      "lastModified" : "2024-11-21T07:57:12.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In XWiki, every user can add translations that are only applied to the current user. This also allows overriding existing translations. Such translations are often included in privileged contexts without any escaping which allows remote code execution for any user who has edit access on at least one document which could be the user's own profile where edit access is enabled by default. A mitigation for this vulnerability is part of XWiki 14.10.2 and XWiki 15.0 RC1: translations with user scope now require script right. This means that regular users cannot exploit this anymore as users don't have script right by default anymore starting with XWiki 14.10. There are no known workarounds apart from upgrading to a patched versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.10.2",
            "matchCriteriaId" : "5F4B6BCB-6DC3-4721-A7DE-90710CBDB879"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/d06ff8a58480abc7f63eb1d4b8b366024d990643",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-4v38-964c-xjmw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19749",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/d06ff8a58480abc7f63eb1d4b8b366024d990643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-4v38-964c-xjmw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29512",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:08.110",
      "lastModified" : "2024-11-21T07:57:12.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on a page (e.g., it's own user page), can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the information loaded from attachments in `imported.vm`, `importinline.vm`, and `packagelist.vm`. This page is installed by default. This vulnerability has been patched in XWiki 15.0-rc-1, 14.10.1, 14.4.8, and 13.10.11. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.8",
            "matchCriteriaId" : "AD2B185D-F8A6-49EB-B485-744F234B8730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10.1",
            "matchCriteriaId" : "A0694EEC-0251-47D7-A062-7C257C408225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/e4bbdc23fea0be4ef1921d1a58648028ce753344",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-hg5x-3w3x-7g96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20267",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/e4bbdc23fea0be4ef1921d1a58648028ce753344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-hg5x-3w3x-7g96",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29513",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:08.193",
      "lastModified" : "2024-11-21T07:57:12.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. If guest has view right on any document. It's possible to create a new user using the `distribution/firstadminuser.wiki` in the wrong context. This vulnerability has been patched in XWiki 15.0-rc-1 and 14.10.1. There is no known workaround other than upgrading."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.10.1",
            "matchCriteriaId" : "DB3DD33E-B8F8-4AE4-BF2B-9CA32D033789"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-fp36-mjw5-fmgx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19852",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20400",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-fp36-mjw5-fmgx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-19852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29514",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:08.280",
      "lastModified" : "2024-11-21T07:57:12.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on any document (e.g., their own user profile) can execute code with programming rights, leading to remote code execution. This vulnerability has been patched in XWiki 13.10.11, 14.4.8, 14.10.1 and 15.0 RC1. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.8",
            "matchCriteriaId" : "AD2B185D-F8A6-49EB-B485-744F234B8730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10.1",
            "matchCriteriaId" : "A0694EEC-0251-47D7-A062-7C257C408225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/7bf7094f8ffac095f5d66809af7554c9cc44de09",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9j36-3cp4-rh4j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20268",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/7bf7094f8ffac095f5d66809af7554c9cc44de09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9j36-3cp4-rh4j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29515",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:08.347",
      "lastModified" : "2024-11-21T07:57:12.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can create a space can become admin of that space through App Within Minutes. The admin right implies the script right and thus allows JavaScript injection. The vulnerability can be exploited by creating an app in App Within Minutes. If the button should be disabled because the user doesn't have global edit right, the app can also be created by directly opening `/xwiki/bin/view/AppWithinMinutes/CreateApplication?wizard=true` on the XWiki installation. This has been patched in XWiki 13.10.11, 14.4.8, 14.10.1 and 15.0 RC1 by not granting the space admin right if the user doesn't have script right on the space where the app is created. Error message are displayed to warn the user that the app will be broken in this case. Users who became space admin through this vulnerability won't loose the space admin right due to the fix, so it is advised to check if all users who created AWM apps should keep their space admin rights. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.8",
            "matchCriteriaId" : "AD2B185D-F8A6-49EB-B485-744F234B8730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10.1",
            "matchCriteriaId" : "A0694EEC-0251-47D7-A062-7C257C408225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/e73b890623efa604adc484ad82f37e31596fe1a6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-44h9-xxvx-pg6x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20190",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/e73b890623efa604adc484ad82f37e31596fe1a6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-44h9-xxvx-pg6x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29516",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:08.423",
      "lastModified" : "2024-11-21T07:57:12.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights on `XWiki.AttachmentSelector` can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping in the \"Cancel and return to page\" button. This page is installed by default. This vulnerability has been patched in XWiki 15.0-rc-1, 14.10.1, 14.4.8, and 13.10.11. There are no known workarounds for this vulnerability.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.8",
            "matchCriteriaId" : "AD2B185D-F8A6-49EB-B485-744F234B8730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10.1",
            "matchCriteriaId" : "A0694EEC-0251-47D7-A062-7C257C408225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/aca1d677c58563bbe6e35c9e1c29fd8b12ebb996",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-3989-4c6x-725f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20275",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/aca1d677c58563bbe6e35c9e1c29fd8b12ebb996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-3989-4c6x-725f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29517",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:08.500",
      "lastModified" : "2024-11-21T07:57:13.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The office document viewer macro was allowing anyone to see any file content from the hosting server, provided that the office server was connected and depending on the permissions of the user running the servlet engine (e.g. tomcat) running XWiki. The same vulnerability also allowed to perform internal requests to resources from the hosting server. The problem has been patched in XWiki 13.10.11, 14.10.1, 14.4.8, 15.0-rc-1. Users are advised to upgrade. It might be possible to workaround this vulnerability by running XWiki in a sandbox with a user with very low privileges on the machine.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.8",
            "matchCriteriaId" : "AD2B185D-F8A6-49EB-B485-744F234B8730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10.1",
            "matchCriteriaId" : "A0694EEC-0251-47D7-A062-7C257C408225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-m3c3-9qj7-7xmx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20324",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20447",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20449",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-m3c3-9qj7-7xmx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29518",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:08.570",
      "lastModified" : "2024-11-21T07:57:13.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of `Invitation.InvitationCommon`. This page is installed by default. The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.1, 14.4.8, and 13.10.11. Users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.8",
            "matchCriteriaId" : "AD2B185D-F8A6-49EB-B485-744F234B8730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10.1",
            "matchCriteriaId" : "A0694EEC-0251-47D7-A062-7C257C408225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/3d055a0a5ec42fdebce4d71ee98f94553fdbfebf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-px54-3w5j-qjg9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20283",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/3d055a0a5ec42fdebce4d71ee98f94553fdbfebf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-px54-3w5j-qjg9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29519",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:08.647",
      "lastModified" : "2024-11-21T07:57:13.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A registered user can perform remote code execution leading to privilege escalation by injecting the proper code in the \"property\" field of an attachment selector, as a gadget of their own dashboard.  Note that the vulnerability does not impact comments of a wiki. The vulnerability has been patched in XWiki 13.10.11, 14.4.8, 14.10.2, 15.0-rc-1. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.8",
            "matchCriteriaId" : "AD2B185D-F8A6-49EB-B485-744F234B8730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10.2",
            "matchCriteriaId" : "E472CD99-824B-4235-B9AB-2740FB40F601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/5e8725b4272cd3e5be09d3ca84273be2da6869c1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-3hjg-cghv-22ww",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20364",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/5e8725b4272cd3e5be09d3ca84273be2da6869c1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-3hjg-cghv-22ww",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29520",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:08.747",
      "lastModified" : "2024-11-21T07:57:13.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to break many translations coming from wiki pages by creating a corrupted document containing a translation object. This will lead to a broken page. The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.1, 14.4.8, and 13.10.11. Users are advised to upgrade. There are no workarounds other than fixing any way to create a document that fail to load."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.8",
            "matchCriteriaId" : "AD2B185D-F8A6-49EB-B485-744F234B8730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10.1",
            "matchCriteriaId" : "A0694EEC-0251-47D7-A062-7C257C408225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9jq5-xwqw-q8j3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20460",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9jq5-xwqw-q8j3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29521",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:08.823",
      "lastModified" : "2024-11-21T07:57:13.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of `Macro.VFSTreeMacro`. This page is not installed by default.This vulnerability has been patched in XWiki 15.0-rc-1, 14.10.2, 14.4.8, 13.10.11. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.8",
            "matchCriteriaId" : "AD2B185D-F8A6-49EB-B485-744F234B8730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10.2",
            "matchCriteriaId" : "E472CD99-824B-4235-B9AB-2740FB40F601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/fad02328f5ec7ab7fe5b932ffb5bc5c1ba7a5b12",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-p67q-h88v-5jgr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20260",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/fad02328f5ec7ab7fe5b932ffb5bc5c1ba7a5b12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-p67q-h88v-5jgr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29522",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:08.897",
      "lastModified" : "2024-11-21T07:57:13.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. The attack works by opening a non-existing page with a name crafted to contain a dangerous payload. This issue has been patched in XWiki 14.4.8, 14.10.3 and 15.0RC1. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4.8",
            "matchCriteriaId" : "18312249-9E74-4967-B376-EDD80C07233B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10.3",
            "matchCriteriaId" : "4472030C-B32C-42AD-B137-2FA730A29836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/d7e56185376641ee5d66477c6b2791ca8e85cfee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-mjw9-3f9f-jq2w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20456",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/d7e56185376641ee5d66477c6b2791ca8e85cfee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-mjw9-3f9f-jq2w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29523",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:08.987",
      "lastModified" : "2024-11-21T07:57:13.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can edit their own user profile can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. The same vulnerability can also be exploited in other contexts where the `display` method on a document is used to display a field with wiki syntax, for example in applications created using `App Within Minutes`. This has been patched in XWiki 13.10.11, 14.4.8, 14.10.2 and 15.0RC1. There is no workaround apart from upgrading."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "A3CD7FFB-D491-4B7D-839D-D567B0C00E59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.8",
            "matchCriteriaId" : "AD2B185D-F8A6-49EB-B485-744F234B8730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10.2",
            "matchCriteriaId" : "E472CD99-824B-4235-B9AB-2740FB40F601"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://extensions.xwiki.org/xwiki/bin/view/Extension/App%20Within%20Minutes%20Application",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/0d547181389f7941e53291af940966413823f61c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-x764-ff8r-9hpx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20327",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://extensions.xwiki.org/xwiki/bin/view/Extension/App%20Within%20Minutes%20Application",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/0d547181389f7941e53291af940966413823f61c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-x764-ff8r-9hpx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29524",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:09.057",
      "lastModified" : "2024-11-21T07:57:13.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute anything with the right of the Scheduler Application sheet page. A user without script or programming rights, edit your user profile with the object editor and add a new object of type XWiki.SchedulerJobClass, In \"Job Script\", groovy code can be added and will be executed in the server context on viewing. This has been patched in XWiki 14.10.3 and 15.0 RC1. Users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.10.3",
            "matchCriteriaId" : "B30017E7-30DA-4B3F-9E6E-367F1DB40DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-fc42-5w56-qw7h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20295",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20462",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-fc42-5w56-qw7h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29525",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:09.127",
      "lastModified" : "2024-11-21T07:57:13.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of xwiki are subject to code injection in the `since` parameter of the `/xwiki/bin/view/XWiki/Notifications/Code/LegacyNotificationAdministration` endpoint. This provides an XWiki syntax injection attack via the since-parameter, allowing privilege escalation from view to programming rights and subsequent code execution privilege. The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.3, 14.4.8 and 14.10.3. Users are advised to upgrade. Users unable to upgrade may modify the page `XWiki.Notifications.Code.LegacyNotificationAdministration` to add the missing escaping. For versions < 14.6-rc-1 a workaround is to modify the file `<xwikiwebapp>/templates/distribution/eventmigration.wiki` to add the missing escaping."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4.8",
            "matchCriteriaId" : "18312249-9E74-4967-B376-EDD80C07233B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10.3",
            "matchCriteriaId" : "4472030C-B32C-42AD-B137-2FA730A29836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/6d74e2e4aa03d19f0be385ab63ae9e0f0e90a766",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/8e7c7f90f2ddaf067cb5b83b181af41513028754#diff-4e13f4ee4a42938bf1201b7ee71ca32edeacba22559daf0bcb89d534e0225949R70",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-jgg7-w2rj-58cj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20287",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/6d74e2e4aa03d19f0be385ab63ae9e0f0e90a766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/commit/8e7c7f90f2ddaf067cb5b83b181af41513028754#diff-4e13f4ee4a42938bf1201b7ee71ca32edeacba22559daf0bcb89d534e0225949R70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-jgg7-w2rj-58cj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29526",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:09.213",
      "lastModified" : "2024-11-21T07:57:14.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to display or interact with any page a user cannot access through the combination of the async and display macros. A comment with either macro will be executed when viewed providing a code injection vector in the context of the running server. This vulnerability has been patched in XWiki 15.0-rc-1, 14.10.3, 14.4.8, and 13.10.11. Users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.11.1",
            "versionEndExcluding" : "13.10.11",
            "matchCriteriaId" : "F2A7D825-53C5-4260-81D6-E9F6C61C49BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0",
            "versionEndExcluding" : "14.4.8",
            "matchCriteriaId" : "AD2B185D-F8A6-49EB-B485-744F234B8730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.10.3",
            "matchCriteriaId" : "4472030C-B32C-42AD-B137-2FA730A29836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-gpq5-7p34-vqx5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XRENDERING-694",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20394",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-gpq5-7p34-vqx5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XRENDERING-694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29527",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:09.293",
      "lastModified" : "2024-11-21T07:57:14.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions a user without script or programming right may edit a user profile (or any other document) with the wiki editor and add groovy script content. Viewing the document after saving it will execute the groovy script in the server context which provides code execution. This vulnerability has been patched in XWiki 15.0-rc-1 and 14.10.3. Users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.4",
            "versionEndExcluding" : "14.10.3",
            "matchCriteriaId" : "4903C234-C2CF-4386-9096-0A7DF92F8B19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-jgrg-qvpp-9vwr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20423",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-jgrg-qvpp-9vwr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30552",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:09.380",
      "lastModified" : "2024-11-21T08:00:24.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the `sql/instance.py` endpoint's `describe` method. In several cases, user input coming from the `tb_name` parameter value,  the `db_name` parameter value or the `schema_name` value in the `sql/instance.py` `describe` endpoint is passed to the `describe_table` methods in given SQL engine implementations, which concatenate user input unsafely into a SQL query and afterwards pass it to the `query` method of each database engine for execution. Please take into account that in some cases all three parameter values are concatenated, in other only one or two of them. The affected methods are: `describe_table` in `sql/engines/clickhouse.py`which concatenates input which is passed to execution on the database in the  `query` method in `sql/engines/clickhouse.py`, `describe_table` in `sql/engines/mssql.py` which concatenates input which is passed to execution on the database in the `query` methods in `sql/engines/mssql.py`, `describe_table` in `sql/engines/mysql.py`which concatenates input which is passed to execution on the database in the `query` method in `sql/engines/mysql.py`, `describe_table` in `sql/engines/oracle.py` which concatenates input which is passed to execution on the database in the `query` methods in `sql/engines/oracle.py`, `describe_table` in `sql/engines/pgsql.py`which concatenates input which is passed to execution on the database in the `query` methods in `sql/engines/pgsql.py`, `describe_table` in `sql/engines/phoenix.py` which concatenates input which is passed to execution on the database in the  `query` method in `sql/engines/phoenix.py`. Each of these issues may be mitigated by escaping user input or by using prepared statements when executing SQL queries. This issue is also indexed as `GHSL-2022-101`.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archerydms:archery:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE3AAB2-FAE8-440E-8BD4-3367BF3639D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-9jvj-8h33-6cqp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-9jvj-8h33-6cqp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30553",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:09.450",
      "lastModified" : "2024-11-21T08:00:24.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to multiple SQL injections in the `sql_api/api_workflow.py` endpoint `ExecuteCheck`. User input coming from the `db_name` parameter value and the `full_sql` parameter value in the `api_workflow.py` `ExecuteCheck` endpoint is passed to the methods that follow in given SQL engine implementations, which concatenate user input unsafely into a SQL query and afterwards pass it to the `query` method of each database engine for execution. The affected methods are `execute_check` in `sql/engines/clickhouse.py` which concatenates input which is passed to execution on the database in the `sql/engines/clickhouse.py` `query` method, `execute_check` in `sql/engines/goinception.py`which concatenates input which is passed to execution on the database in the `sql/engines/goinception.py` `query` method, `execute_check` in `sql/engines/oracle.py`which passes unsafe user input into the `object_name_check` method in `sql/engines/oracle.py` which in turn is passed to execution on the database in the `sql/engines/oracle.py` `query` method. Each of these issues may be mitigated by escaping user input or by using prepared statements when executing SQL queries. This issue is also indexed as `GHSL-2022-102`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archerydms:archery:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE3AAB2-FAE8-440E-8BD4-3367BF3639D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-hvcq-r2r2-34ch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-hvcq-r2r2-34ch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30554",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:09.510",
      "lastModified" : "2024-11-21T08:00:24.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the `sql_api/api_workflow.py` endpoint `ExecuteCheck` which passes unfiltered input to the `explain_check` method in `sql/engines/oracle.py`. User input coming from the `db_name` parameter value in the `api_workflow.py` `ExecuteCheck` endpoint is passed through the `oracle.py` `execute_check` method and to the `explain_check` method for execution. Each of these issues may be mitigated by escaping user input or by using prepared statements when executing SQL queries. This issue is also indexed as `GHSL-2022-103`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archerydms:archery:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE3AAB2-FAE8-440E-8BD4-3367BF3639D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-3p43-89m6-7x5w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-3p43-89m6-7x5w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30555",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:09.577",
      "lastModified" : "2024-11-21T08:00:25.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases.Affected versions are subject to SQL injection in the `explain` method in `sql_optimize.py`. User input coming from the `db_name` parameter value in the `explain` endpoint is passed to the following `query` methods of each database engine for execution. `query` in `sql/engines/mssql.py`, and `query` in `sql/engines/oracle.py`. Each of these issues may be mitigated by escaping user input or by using prepared statements when executing SQL queries. This issue is also indexed as `GHSL-2022-108`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archerydms:archery:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE3AAB2-FAE8-440E-8BD4-3367BF3639D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-349r-2663-cr3w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-349r-2663-cr3w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30556",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:09.643",
      "lastModified" : "2024-11-21T08:00:25.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the `optimize_sqltuningadvisor` method of `sql_optimize.py`. User input coming from the `db_name` parameter value in `sql_optimize.py` is passed to the `sqltuningadvisor` method in `oracle.py`for execution. To mitigate escape the variables accepted via user input when used in `sql_optimize.py`. Users may also use prepared statements when dealing with SQL as a mitigation for this issue. This issue is also indexed as `GHSL-2022-107`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archerydms:archery:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE3AAB2-FAE8-440E-8BD4-3367BF3639D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-6pv9-9gq7-hr68",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-6pv9-9gq7-hr68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30557",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:09.717",
      "lastModified" : "2024-11-21T08:00:25.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the `data_dictionary.py` `table_info`. User input coming from the `db_name` in and the `tb_name` parameter values in the `sql/data_dictionary.py` `table_info` endpoint is passed to the following methods in the given SQL engine implementations, which concatenate user input unsafely into a SQL query and afterwards pass it to the `query` method of each database engine for execution.The methods are `get_table_meta_data ` in `sql/engines/mssql.py` which passes unsafe user input to the `sql/engines/mssql.py` `query` method, `get_table_desc_data` in `sql/engines/mssql.py`which passes unsafe user input to the `sql/engines/mssql.py` `query`, `get_table_index_data` in `sql/engines/mssql.py`which passes unsafe user input to the `sql/engines/mssql.py` `query` method, `get_table_meta_data` in `sql/engines/oracle.py`which concatenates input which is passed to execution on the database in the `sql/engines/oracle.py` `query` method, `get_table_desc_data` in `sql/engines/oracle.py`which concatenates input which is passed to execution on the database in the `sql/engines/oracle.py` `query` method, and `get_table_index_data` in `sql/engines/oracle.py` which concatenates input which is passed to execution on the database in the `sql/engines/oracle.py` `query` method. Each of these issues may be mitigated by escaping user input or by using prepared statements when executing SQL queries. This issue is also indexed as `GHSL-2022-106`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archerydms:archery:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE3AAB2-FAE8-440E-8BD4-3367BF3639D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hhyo/Archery/blob/bc86cda4c3b7d59f759d0d23bb63a54f52616752/sql/data_dictionary.py#L47-L86",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-9pvw-f8jv-xxjr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hhyo/Archery/blob/bc86cda4c3b7d59f759d0d23bb63a54f52616752/sql/data_dictionary.py#L47-L86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-9pvw-f8jv-xxjr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30558",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:09.780",
      "lastModified" : "2024-11-21T08:00:25.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. User input coming from the `db_name` in the `sql/data_dictionary.py` `table_list` endpoint is passed to the methods that follow in a given SQL engine implementations, which concatenate user input unsafely into a SQL query and afterwards pass it to the `query` method of each database engine for execution. The affected methods are `get_group_tables_by_db` in `sql/engines/mssql.py`which passes unsafe user input to `sql/engines/mssql.py`, and `get_group_tables_by_db` in `sql/engines/oracle.py`which concatenates input which is passed to execution on the database in the `sql/engines/oracle.py` `query` method. Each of these issues may be mitigated by escaping user input or by using prepared statements when executing SQL queries. This issue is also indexed as `GHSL-2022-105`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archerydms:archery:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE3AAB2-FAE8-440E-8BD4-3367BF3639D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-jwjj-jgfv-x66q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-jwjj-jgfv-x66q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30605",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T00:15:09.843",
      "lastModified" : "2024-11-21T08:00:29.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. User input coming from the `variable_name` and `variable_value` parameter value in the `sql/instance.py` `param_edit` endpoint is passed to a set of methods in given SQL engine implementations, which concatenate user input unsafely into a SQL query and afterwards pass it to the `query` method of each database engine for execution. The affected methods are: `set_variable` in `sql/engines/goinception.py` which concatenates input which is passed to execution on the database in the `sql/engines/goinception.py`, `get_variables` in `sql/engines/goinception.py`  which concatenates input which is passed to execution on the database in the `sql/engines/goinception.py`, `set_variable` in `sql/engines/mysql.py`  which concatenates input which is passed to execution on the database in the `sql/engines/mysql.py` `query`, and `get_variables` in `sql/engines/mysql.py`which concatenates input which is passed to execution on the database in the `sql/engines/mysql.py` `query`. Each of these issues may be mitigated by escaping user input or by using prepared statements when executing SQL queries. This advisory is also indexed as `GHSL-2022-104`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archerydms:archery:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE3AAB2-FAE8-440E-8BD4-3367BF3639D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hhyo/Archery/blob/bc86cda4c3b7d59f759d0d23bb63a54f52616752/sql/instance.py#L161-L202",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-6mqc-w2qp-fvhp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hhyo/Archery/blob/bc86cda4c3b7d59f759d0d23bb63a54f52616752/sql/instance.py#L161-L202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/hhyo/Archery/security/advisories/GHSA-6mqc-w2qp-fvhp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2133",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-19T04:15:31.360",
      "lastModified" : "2024-11-21T07:57:59.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.137",
            "matchCriteriaId" : "2627A54A-F43B-4F8D-BAA8-A575E1C6D10E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1429197",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5393",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1429197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2134",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-19T04:15:31.473",
      "lastModified" : "2024-11-21T07:57:59.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.137",
            "matchCriteriaId" : "2627A54A-F43B-4F8D-BAA8-A575E1C6D10E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1429201",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5393",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1429201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2135",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-19T04:15:31.533",
      "lastModified" : "2024-11-21T07:57:59.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.137",
            "matchCriteriaId" : "2627A54A-F43B-4F8D-BAA8-A575E1C6D10E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1424337",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5393",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1424337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2136",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-19T04:15:31.607",
      "lastModified" : "2025-10-24T14:07:43.960",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "cisaExploitAdd" : "2023-04-21",
      "cisaActionDue" : "2023-05-12",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Google Chrome Skia Integer Overflow Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.137",
            "matchCriteriaId" : "2627A54A-F43B-4F8D-BAA8-A575E1C6D10E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1432603",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5393",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1432603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-2136",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2137",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2023-04-19T04:15:31.667",
      "lastModified" : "2024-11-21T07:58:00.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.5615.137",
            "matchCriteriaId" : "2627A54A-F43B-4F8D-BAA8-A575E1C6D10E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1430644",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5393",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1430644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES2CDRHR2Y4WY6DNDIAPYZFXJU3ZBFAV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEJZMAUB4XP44HSHEBDWEKFGA7DUHY42/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHHD6KNH4WLUE6JG6HRQZWNAJMHJ32X7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJQI63HWZFL6M26Q6UOHKDY6LD2PFC5Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLO7BL2MHZYPY6O3OAEAQL3SKYMGGO6M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25619",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-19T08:15:07.997",
      "lastModified" : "2025-02-05T16:15:35.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that\ncould cause denial of service of the controller when communicating over the Modbus TCP\nprotocol. \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m580_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.10",
            "matchCriteriaId" : "C4818276-B0D9-41F6-B8F6-C94B88F6E2A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E876C738-ABF6-4864-98A6-1E06E96A0DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m340_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.51",
            "matchCriteriaId" : "DDBE606F-EE13-410F-839A-708EB480B3E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138681A2-0146-492B-8E10-06849FC27C6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_momentum_unity_m1e_processor_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C53AFB8E-0830-46BE-8BED-4BF61B354262"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_momentum_unity_m1e_processor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C0178B3-FC32-4473-A368-A614F6F55F98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_mc80_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526DCF0E-C625-4114-80CB-AD79912104FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_mc80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A6BC87-E598-4DB6-AD19-5E836C1B6570"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:tsxp57_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20CF298-0E3F-4142-B7CF-791FA5E5545C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:tsxp57:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2161791-5948-4C6E-B0FC-8DC7686CD87A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:bmep58s_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D21387-44D7-49C3-A809-85AF4D221772"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:bmep58s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1E042E-5DF3-4C78-95AC-114AB889A7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:bmeh58s_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10BD4983-0194-4499-A6F8-6FD123482F33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:bmeh58s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CCDB6-CAFB-49CB-AB5B-EDDC13835F03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-05.pdf",
        "source" : "cybersecurity@se.com"
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-05.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25620",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2023-04-19T09:15:07.457",
      "lastModified" : "2024-11-21T07:49:50.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\nA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that\ncould cause denial of service of the controller when a malicious project file is loaded onto the\ncontroller by an authenticated user. \n\n \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m580_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.10",
            "matchCriteriaId" : "C4818276-B0D9-41F6-B8F6-C94B88F6E2A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E876C738-ABF6-4864-98A6-1E06E96A0DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_m340_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.51",
            "matchCriteriaId" : "DDBE606F-EE13-410F-839A-708EB480B3E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_m340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138681A2-0146-492B-8E10-06849FC27C6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_momentum_unity_m1e_processor_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C53AFB8E-0830-46BE-8BED-4BF61B354262"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_momentum_unity_m1e_processor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C0178B3-FC32-4473-A368-A614F6F55F98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:modicon_mc80_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526DCF0E-C625-4114-80CB-AD79912104FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:modicon_mc80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A6BC87-E598-4DB6-AD19-5E836C1B6570"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:140cpu65_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12B6D628-61AA-4999-B71F-FF93182A035B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:140cpu65:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E9922C-D583-4820-9BAC-8D8CC31F482B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:tsxp57_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B20CF298-0E3F-4142-B7CF-791FA5E5545C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:tsxp57:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2161791-5948-4C6E-B0FC-8DC7686CD87A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:bmep58s_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D21387-44D7-49C3-A809-85AF4D221772"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:bmep58s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C1E042E-5DF3-4C78-95AC-114AB889A7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:bmeh58s_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10BD4983-0194-4499-A6F8-6FD123482F33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:bmeh58s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CCDB6-CAFB-49CB-AB5B-EDDC13835F03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-05.pdf",
        "source" : "cybersecurity@se.com"
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-05.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2168",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-19T10:15:07.640",
      "lastModified" : "2026-04-08T17:16:54.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Editor+ permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:taxopress:taxopress:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.6.4",
            "matchCriteriaId" : "DB474553-656F-4B5D-8C26-E6B5E340310C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-tags/trunk/inc/suggestterms-functions.php?rev=2743620#L151",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2868795%40simple-tags%2Ftrunk&old=2774153%40simple-tags%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c051bfd-2754-4faf-8062-91752555166c?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-tags/trunk/inc/suggestterms-functions.php?rev=2743620#L151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2868795%40simple-tags%2Ftrunk&old=2774153%40simple-tags%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c051bfd-2754-4faf-8062-91752555166c?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2169",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-19T10:15:07.710",
      "lastModified" : "2026-04-08T18:17:57.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Editor+ permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:taxopress:taxopress:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.6.4",
            "matchCriteriaId" : "DB474553-656F-4B5D-8C26-E6B5E340310C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-tags/trunk/inc/related-posts-functions.php?rev=2674563#L156",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2868795%40simple-tags%2Ftrunk&old=2774153%40simple-tags%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/52574d99-1ffe-4152-bf13-9cdd11d7300a?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-tags/trunk/inc/related-posts-functions.php?rev=2674563#L156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2868795%40simple-tags%2Ftrunk&old=2774153%40simple-tags%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/52574d99-1ffe-4152-bf13-9cdd11d7300a?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2170",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-19T10:15:07.773",
      "lastModified" : "2026-04-08T19:18:12.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Editor+ permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:taxopress:taxopress:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.6.4",
            "matchCriteriaId" : "DB474553-656F-4B5D-8C26-E6B5E340310C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-tags/trunk/inc/related-posts-functions.php?rev=2674563#L155",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2868795%40simple-tags%2Ftrunk&old=2774153%40simple-tags%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e98ed932-4e4c-4127-ae72-500e2a34f371?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/browser/simple-tags/trunk/inc/related-posts-functions.php?rev=2674563#L155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2868795%40simple-tags%2Ftrunk&old=2774153%40simple-tags%2Ftrunk&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e98ed932-4e4c-4127-ae72-500e2a34f371?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0317",
      "sourceIdentifier" : "VulnerabilityReporting@secomea.com",
      "published" : "2023-04-19T12:15:07.900",
      "lastModified" : "2025-02-05T15:15:16.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unprotected Alternate Channel vulnerability in debug console of  GateManager allows system administrator to obtain sensitive information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "VulnerabilityReporting@secomea.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "VulnerabilityReporting@secomea.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-420"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-420"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secomea:gatemanager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.622425017",
            "matchCriteriaId" : "8852B6D4-560A-4D2E-85FA-34DE8DC890AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.secomea.com/support/cybersecurity-advisory/",
        "source" : "VulnerabilityReporting@secomea.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.secomea.com/support/cybersecurity-advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22645",
      "sourceIdentifier" : "meissner@suse.de",
      "published" : "2023-04-19T12:15:07.960",
      "lastModified" : "2025-02-05T17:15:17.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Privilege Management vulnerability in SUSE kubewarden allows attackers to read arbitrary secrets if they get access to the ServiceAccount kubewarden-controller This issue affects: SUSE kubewarden kubewarden-controller versions prior to 1.6.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "meissner@suse.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "meissner@suse.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:kubewarden-controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.0",
            "matchCriteriaId" : "DF89B57B-ED7F-4FB4-A950-71F1E57AAAD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1210218",
        "source" : "meissner@suse.de",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1210218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-19T12:15:08.040",
      "lastModified" : "2025-02-05T17:15:18.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS level commands via a crafted request payload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniguest:tripleplay:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50DBB27C-9B8E-4C9D-ACB7-05A4F4DA8113"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tripleplay.tv",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-25759-Summary.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tripleplay.tv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-25759-Summary.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-19T12:15:08.083",
      "lastModified" : "2025-02-05T17:15:18.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request payload"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniguest:tripleplay:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50DBB27C-9B8E-4C9D-ACB7-05A4F4DA8113"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tripleplay.tv",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-25760-Summary.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tripleplay.tv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-25760-Summary.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26599",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-19T12:15:08.127",
      "lastModified" : "2025-02-05T17:15:19.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uniguest:tripleplay:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50DBB27C-9B8E-4C9D-ACB7-05A4F4DA8113"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tripleplay.tv",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-26599-Summary.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tripleplay.tv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-26599-Summary.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-19T12:15:08.247",
      "lastModified" : "2025-02-05T16:15:35.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in /index.php?page=category_list of Online Jewelry Shop v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_jewelry_shop_project:online_jewelry_shop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A58E7B0-2F47-4520-81CE-4961778710B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lohyt/Persistent-Cross-Site-Scripting-found-in-Online-Jewellery-Store-from-Sourcecodester-website.",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lohyt/Persistent-Cross-Site-Scripting-found-in-Online-Jewellery-Store-from-Sourcecodester-website./blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lohyt/Persistent-Cross-Site-Scripting-found-in-Online-Jewellery-Store-from-Sourcecodester-website.",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lohyt/Persistent-Cross-Site-Scripting-found-in-Online-Jewellery-Store-from-Sourcecodester-website./blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-19T12:15:08.293",
      "lastModified" : "2025-02-05T16:15:38.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerjob:powerjob:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C125B3CC-32C1-4A5A-9261-C72FA03EADE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PowerJob/PowerJob/issues/586",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/PowerJob/PowerJob/issues/586",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-19T12:15:08.343",
      "lastModified" : "2025-02-05T16:15:39.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing large ICMPv6 packets. This affects installations with Ethernet support in which a packet size greater than 65495 may occur."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altran:picotcp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7.0",
            "matchCriteriaId" : "BEB4123E-EE54-4991-9011-42FD1FC83662"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://georgyg.com/home/picotcp-denial-of-service-cve-2023-30463/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tass-belgium/picotcp/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://georgyg.com/home/picotcp-denial-of-service-cve-2023-30463/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tass-belgium/picotcp/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-19T13:15:07.220",
      "lastModified" : "2025-02-05T16:15:36.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability was discovered in Online Jewelry Shop v1.0 that allows attackers to execute arbitrary script via a crafted URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_jewelry_shop_project:online_jewelry_shop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A58E7B0-2F47-4520-81CE-4961778710B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lohyt/Privilege-escalation-in-online-jewelry-website",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lohyt/Privilege-escalation-in-online-jewelry-website",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-19T14:15:07.197",
      "lastModified" : "2025-02-05T16:15:38.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerjob:powerjob:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C125B3CC-32C1-4A5A-9261-C72FA03EADE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PowerJob/PowerJob/issues/587",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/PowerJob/PowerJob/issues/587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29586",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-19T15:15:06.857",
      "lastModified" : "2025-02-05T16:15:36.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code Sector TeraCopy 3.9.7 does not perform proper access validation on the source folder during a copy operation. This leads to Arbitrary File Read by allowing any user to copy any directory in the system to a directory they control. NOTE: the Supplier disputes this because only admin users can copy arbitrary folders, and because the 143984 reference is about a different concern (unrelated to directory copying) that was fixed in 3.5b."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesector:teracopy:3.9.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C91FC0C-0327-4322-BDE4-DC25EBE39FCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/143984/TeraCopyService-3.1-Unquoted-Service-Path-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://securityandstuff.com/posts/teracopy_arbitrary_read/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://support.codesector.com/en/articles/10088479-cve-2023-29586",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.youtube.com/watch?v=mrOHtWWFhJI",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://packetstormsecurity.com/files/143984/TeraCopyService-3.1-Unquoted-Service-Path-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://securityandstuff.com/posts/teracopy_arbitrary_read/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22621",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-19T16:15:07.213",
      "lastModified" : "2025-11-07T17:15:45.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the server. A remote attacker with access to the Strapi admin panel can inject a crafted payload that executes code on the server into an email template that bypasses the validation checks that should prevent code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strapi:strapi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "4.5.6",
            "matchCriteriaId" : "00BEBFCA-2EDE-4A26-A13C-D14B4449CE06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strapi/strapi/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ghostccamm.com/blog/multi_strapi_vulns/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/strapi/strapi/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ghostccamm.com/blog/multi_strapi_vulns/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-19T16:15:07.253",
      "lastModified" : "2025-11-07T17:15:46.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login provider is used for authentication. A remote attacker could forge an ID token that is signed using the 'None' type algorithm to bypass authentication and impersonate any user that use AWS Cognito for authentication."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strapi:strapi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "4.6.0",
            "matchCriteriaId" : "4259DF00-FFB5-417D-9B75-08BA63F9CB14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strapi/strapi/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ghostccamm.com/blog/multi_strapi_vulns/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/strapi/strapi/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ghostccamm.com/blog/multi_strapi_vulns/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-19T16:15:07.303",
      "lastModified" : "2025-11-07T17:15:46.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the attacker has super admin access, then this can be exploited to discover the password hash and password reset token of all users. If the attacker has admin panel access to an account with permission to access the username and email of API users with a lower privileged role (e.g., Editor or Author), then this can be exploited to discover sensitive information for all API users but not other admin accounts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strapi:strapi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.1",
            "versionEndExcluding" : "4.8.0",
            "matchCriteriaId" : "3ECE8243-AB68-425A-9B1B-8294A028B2B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strapi/strapi/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ghostccamm.com/blog/multi_strapi_vulns/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/strapi/strapi/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ghostccamm.com/blog/multi_strapi_vulns/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30610",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T18:15:07.417",
      "lastModified" : "2025-02-05T15:15:19.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` struct had a derived `Debug` implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is enabled for an SDK, `SigningParams` is printed, thereby revealing those credentials to anyone with access to logs. All users of the AWS SDK for Rust who enabled TRACE-level logging, either globally (e.g. `RUST_LOG=trace`), or for the `aws-sigv4` crate specifically are affected. This issue has been addressed in a set of new releases. Users are advised to upgrade. Users unable to upgrade should disable TRACE-level logging for AWS Rust SDK crates.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.2.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "12881A87-AB1E-44AB-8AF9-0AFB945CC2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.3.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "E586C004-6528-4015-806E-D4559F7BAFE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.4.1:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "28CC8686-3C04-44BE-8897-55FFD70069FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.5.2:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "BBB473F8-1EA4-41A3-9B65-8EDBB59BD0ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.6.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "9853C3AA-75C6-432D-9587-ACF806F92F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.7.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "27DEE720-C938-471F-BB6A-270CE15A99CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.8.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "2AA5BC01-D2D4-43C1-AFF5-46CD7D8556A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.9.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "BD389AD3-0E0D-4B6B-9F8F-715332E77DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.10.1:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "1AE0FC7F-8614-487E-BE30-8445F083ABE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.11.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "64F86FEC-F13A-491B-A28D-1818A071B466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.12.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "1E6FEB66-EE8A-4C83-BB9D-4F9A1697C8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.13.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "77B07C90-CA86-43FA-9664-7623A19A4172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.14.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "4B99DFB4-E7BA-4C86-97CB-E8E092CCBEB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.15.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "74F2AF3D-ECCA-4CD3-9835-CB56B29699B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.46.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "8BA0C6BC-7489-40CE-B60F-67AF597FF74D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.47.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "DF08381B-5513-4001-A6C5-398CC5E0A84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.48.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "630EA797-C5DF-42F3-921F-951D59581589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.49.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "62C594E6-6276-472B-B668-5793A08D9618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.50.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "BC881298-2EAD-40D7-82D7-69FAA11942DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.51.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "B32D4B7D-5D29-4BD3-B9AD-43D070F3EA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.52.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "DDECA839-CF7C-48A1-92E9-95B05DA15E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.53.1:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "D77B3A68-5C22-4C48-8508-CE457D73C14C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.54.1:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "6A83D537-7D99-4F10-BE79-9379F374EA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:aws-sigv4:0.55.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "5C3532CD-3566-40E7-9A9C-78B02C48BE99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/awslabs/aws-sdk-rust/security/advisories/GHSA-mjv9-vp6w-3rc9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/awslabs/aws-sdk-rust/security/advisories/GHSA-mjv9-vp6w-3rc9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30611",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T18:15:07.490",
      "lastModified" : "2025-02-05T15:15:19.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discourse-reactions is a plugin that allows user to add their reactions to the post in the Discourse messaging platform. In affected versions data about what reactions were performed on a post in a private topic could be leaked. This issue has been addressed in version 0.3. Users are advised to upgrade. Users unable to upgrade should disable the discourse-reactions plugin to fully mitigate the issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:reactions:0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE39066-079F-4C5A-89ED-36279E53A69C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/discourse/discourse-reactions/commit/01aca15b2774c088f3673118e92e9469f37d2fb6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse-reactions/security/advisories/GHSA-4cgc-c7vh-94g6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse-reactions/commit/01aca15b2774c088f3673118e92e9469f37d2fb6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/discourse/discourse-reactions/security/advisories/GHSA-4cgc-c7vh-94g6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30612",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T18:15:07.553",
      "lastModified" : "2024-11-21T08:00:30.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cloud hypervisor is a Virtual Machine Monitor for Cloud workloads. This vulnerability allows users to close arbitrary open file descriptors in the Cloud Hypervisor process via sending malicious HTTP request through the HTTP API socket. As a result, the Cloud Hypervisor process can be easily crashed, causing Deny-of-Service (DoS). This can also be a potential Use-After-Free (UAF) vulnerability. Users require to have the write access to the API socket file to trigger this vulnerability.  Impacted versions of Cloud Hypervisor include upstream main branch, v31.0, and v30.0. The vulnerability was initially detected by our `http_api_fuzzer` via oss-fuzz. This issue has been addressed in versions 30.1 and 31.1. Users unable to upgrade may mitigate this issue by ensuring the write access to the API socket file is granted to trusted users only."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudhypervisor:cloud_hypervisor:30.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "2AC6DE0F-27E9-424B-9406-C93FD87099D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudhypervisor:cloud_hypervisor:31.1:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "75E769D7-4723-4F99-9A9D-72765AB3A602"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cloud-hypervisor/cloud-hypervisor/pull/5350",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cloud-hypervisor/cloud-hypervisor/pull/5373",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cloud-hypervisor/cloud-hypervisor/security/advisories/GHSA-g6mw-f26h-4jgp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oss-fuzz.com/testcase-detail/5260873569796096",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://oss-fuzz.com/testcase-detail/5426283514560512",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/cloud-hypervisor/cloud-hypervisor/pull/5350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cloud-hypervisor/cloud-hypervisor/pull/5373",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/cloud-hypervisor/cloud-hypervisor/security/advisories/GHSA-g6mw-f26h-4jgp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://oss-fuzz.com/testcase-detail/5260873569796096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://oss-fuzz.com/testcase-detail/5426283514560512",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30614",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-19T18:15:07.637",
      "lastModified" : "2024-11-21T08:00:30.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pay is a payments engine for Ruby on Rails 6.0 and higher. In versions prior to 6.3.2 a payments info page of Pay is susceptible to reflected Cross-site scripting. An attacker could create a working URL that renders a javascript link to a user on a Rails application that integrates Pay. This URL could be distributed via email to specifically target certain individuals. If the targeted application contains a functionality to submit user-generated content (such as comments) the attacker could even distribute the URL using that functionality. This has been patched in version 6.3.2 and above. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pay_project:pay:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "6.3.2",
            "matchCriteriaId" : "088D4CFF-C244-4E06-A3C4-667D1CDE88CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pay-rails/pay/commit/5d6283a24062bd272a524ec48415f536a67ad57f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pay-rails/pay/security/advisories/GHSA-cqf3-vpx7-rxhw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pay-rails/pay/commit/5d6283a24062bd272a524ec48415f536a67ad57f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pay-rails/pay/security/advisories/GHSA-cqf3-vpx7-rxhw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1585",
      "sourceIdentifier" : "security@nortonlifelock.com",
      "published" : "2023-04-19T19:15:06.630",
      "lastModified" : "2024-11-21T07:39:29.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU)  vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and virus definitions from 14 February 2023 or later.  "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@nortonlifelock.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@nortonlifelock.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.5",
            "versionEndExcluding" : "22.11",
            "matchCriteriaId" : "041E50BD-12AB-47A1-98FF-5A9DAFC82247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:anti-virus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.5",
            "versionEndExcluding" : "22.11",
            "matchCriteriaId" : "E6C5599E-6B91-463D-B715-2962E9E98764"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.norton.com/sp/static/external/tools/security-advisories.html",
        "source" : "security@nortonlifelock.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.norton.com/sp/static/external/tools/security-advisories.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1586",
      "sourceIdentifier" : "security@nortonlifelock.com",
      "published" : "2023-04-19T19:15:06.837",
      "lastModified" : "2024-11-21T07:39:29.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU)  vulnerability in the restore process leading to arbitrary file creation. The issue was fixed with Avast and AVG Antivirus version 22.11"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@nortonlifelock.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@nortonlifelock.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.5",
            "versionEndExcluding" : "22.11",
            "matchCriteriaId" : "041E50BD-12AB-47A1-98FF-5A9DAFC82247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:anti-virus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.5",
            "versionEndExcluding" : "22.11",
            "matchCriteriaId" : "E6C5599E-6B91-463D-B715-2962E9E98764"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.norton.com/sp/static/external/tools/security-advisories.html",
        "source" : "security@nortonlifelock.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.norton.com/sp/static/external/tools/security-advisories.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1587",
      "sourceIdentifier" : "security@nortonlifelock.com",
      "published" : "2023-04-19T19:15:07.030",
      "lastModified" : "2024-11-21T07:39:29.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus version 22.11"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@nortonlifelock.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@nortonlifelock.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.5",
            "versionEndExcluding" : "22.11",
            "matchCriteriaId" : "041E50BD-12AB-47A1-98FF-5A9DAFC82247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avg:anti-virus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.5",
            "versionEndExcluding" : "22.11",
            "matchCriteriaId" : "E6C5599E-6B91-463D-B715-2962E9E98764"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.norton.com/sp/static/external/tools/security-advisories.html",
        "source" : "security@nortonlifelock.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.norton.com/sp/static/external/tools/security-advisories.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1900",
      "sourceIdentifier" : "security@nortonlifelock.com",
      "published" : "2023-04-19T19:15:07.190",
      "lastModified" : "2025-02-05T15:15:16.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an overflow. This could corrupt the data on the heap and lead to a denial-of-service situation. \nIssue was fixed with Endpointprotection.exe version 1.0.2303.633"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@nortonlifelock.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@nortonlifelock.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avira:antivirus:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "1.0.2303.633",
            "matchCriteriaId" : "57672959-5A5F-4B22-A76F-1726FCCA2C49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.norton.com/sp/static/external/tools/security-advisories.html",
        "source" : "security@nortonlifelock.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.norton.com/sp/static/external/tools/security-advisories.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-19T19:15:07.373",
      "lastModified" : "2025-02-05T16:15:38.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerjob:powerjob:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C125B3CC-32C1-4A5A-9261-C72FA03EADE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PowerJob/PowerJob/issues/585",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PowerJob/PowerJob/issues/585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20862",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-04-19T20:15:10.910",
      "lastModified" : "2025-02-05T16:15:33.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the logout support does not properly clean the security context if using serialized versions. Additionally, it is not possible to explicitly save an empty security context to the HttpSessionSecurityContextRepository. This vulnerability can keep users authenticated even after they performed logout. Users of affected versions should apply the following mitigation. 5.7.x users should upgrade to 5.7.8. 5.8.x users should upgrade to 5.8.3. 6.0.x users should upgrade to 6.0.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndExcluding" : "5.7.8",
            "matchCriteriaId" : "9C04C9B3-2ED2-488B-914D-62EF7278AB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.8.0",
            "versionEndExcluding" : "5.8.3",
            "matchCriteriaId" : "08A62341-0018-4D6D-9920-6D4907B7FE5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.3",
            "matchCriteriaId" : "8ACA91F9-3202-4F62-8D6C-EA376B8620C6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "F3E0B672-3E06-4422-B2A4-0BD073AEC2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0002/",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://spring.io/security/cve-2023-20862",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230526-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://spring.io/security/cve-2023-20862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20909",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:10.953",
      "lastModified" : "2025-02-05T19:15:11.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-243130512"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20935",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:10.993",
      "lastModified" : "2025-02-05T19:15:11.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-256589724"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20941",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.033",
      "lastModified" : "2025-02-05T19:15:11.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264029575References: Upstream kernel"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20950",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.077",
      "lastModified" : "2025-02-05T19:15:11.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background activity launch restrictions via a pendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-195756028"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20967",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.120",
      "lastModified" : "2025-02-05T19:15:12.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-225879503"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21080",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.157",
      "lastModified" : "2025-02-05T19:15:12.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In register_notification_rsp of btif_rc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-245916076"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21081",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.213",
      "lastModified" : "2025-02-05T19:15:12.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions of PackageInstallerService.java and related files, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-230492955"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21082",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.260",
      "lastModified" : "2025-02-05T19:15:12.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getNumberFromCallIntent of NewOutgoingCallIntentBroadcaster.java, there is a possible way to enumerate other user's contact phone number due to a confused deputy. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-257030107"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-441"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21083",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.303",
      "lastModified" : "2025-02-05T20:15:35.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onNullBinding of CallScreeningServiceHelper.java, there is a possible way to record audio without showing a privacy indicator due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-252762941"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21084",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.347",
      "lastModified" : "2025-02-05T20:15:35.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In buildPropFile of filesystem.go, there is a possible insecure hash due to an improperly used crypto. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262892300"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21085",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.393",
      "lastModified" : "2025-02-05T20:15:35.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-264879662"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21086",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.443",
      "lastModified" : "2025-02-05T20:15:35.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC from a secondary account due to a permissions bypass. This could lead to local escalation of privilege from the Guest account with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-238298970"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21087",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.490",
      "lastModified" : "2025-02-05T19:15:12.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop. This could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-261723753"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21088",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.533",
      "lastModified" : "2025-02-05T19:15:13.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In deliverOnFlushComplete of LocationProviderManager.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-235823542"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21089",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.583",
      "lastModified" : "2025-02-05T19:15:13.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In startInstrumentation of ActivityManagerService.java, there is a possible way to keep the foreground service alive while the app is in the background. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-237766679"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21090",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.630",
      "lastModified" : "2025-02-05T19:15:13.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In parseUsesPermission of ParsingPackageUtils.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-259942609"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21091",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.680",
      "lastModified" : "2025-02-05T19:15:13.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a missing permission check. This could lead to local denial of service across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-257954050"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21092",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.727",
      "lastModified" : "2025-02-05T19:15:14.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In retrieveServiceLocked of ActiveServices.java, there is a possible way to dynamically register a BroadcastReceiver using permissions of System App due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-242040055"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21093",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.770",
      "lastModified" : "2025-02-05T16:15:34.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In extractRelativePath of FileUtils.java, there is a possible way to access files in a directory belonging to other applications due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-228450832"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21094",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.807",
      "lastModified" : "2025-02-05T16:15:34.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-248031255"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21096",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.850",
      "lastModified" : "2025-02-05T16:15:34.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-254774758"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21097",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.890",
      "lastModified" : "2025-02-05T16:15:34.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-261858325"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21098",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.933",
      "lastModified" : "2025-02-05T18:15:27.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple functions of AccountManagerService.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-260567867"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-288"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21099",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:11.980",
      "lastModified" : "2025-02-05T17:15:12.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In multiple methods of PackageInstallerSession.java, there is a possible way to start foreground services from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-243377226"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21100",
      "sourceIdentifier" : "security@android.com",
      "published" : "2023-04-19T20:15:12.023",
      "lastModified" : "2025-02-05T17:15:13.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-242544249"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64C1583-CDE0-4C1F-BDE6-05643C1BDD72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FFD0C-9B38-4CAA-B057-1086D794D469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2023-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28122",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-04-19T20:15:12.143",
      "lastModified" : "2025-02-05T16:15:36.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ui:desktop:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "0.62.3.0",
            "matchCriteriaId" : "3FA2EBE5-1998-49C5-BB38-7886DB115E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ui.com/releases/Security-Advisory-Bulletin-029-029/a47c68f2-1f3a-47c3-b577-eb70599644e4",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.ui.com/releases/Security-Advisory-Bulletin-029-029/a47c68f2-1f3a-47c3-b577-eb70599644e4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28123",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-04-19T20:15:12.193",
      "lastModified" : "2025-02-05T16:15:36.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A permission misconfiguration in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow an user to hijack VPN credentials while UID VPN is starting.This vulnerability is fixed in Version 0.62.3 and later."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ui:desktop:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "0.62.3.0",
            "matchCriteriaId" : "3FA2EBE5-1998-49C5-BB38-7886DB115E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ui.com/releases/Security-Advisory-Bulletin-029-029/a47c68f2-1f3a-47c3-b577-eb70599644e4",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.ui.com/releases/Security-Advisory-Bulletin-029-029/a47c68f2-1f3a-47c3-b577-eb70599644e4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28124",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2023-04-19T20:15:12.247",
      "lastModified" : "2025-02-05T16:15:36.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their content.This vulnerability is fixed in Version 0.62.3 and later."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ui:desktop:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "0.62.3.0",
            "matchCriteriaId" : "3FA2EBE5-1998-49C5-BB38-7886DB115E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ui.com/releases/Security-Advisory-Bulletin-029-029/a47c68f2-1f3a-47c3-b577-eb70599644e4",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.ui.com/releases/Security-Advisory-Bulletin-029-029/a47c68f2-1f3a-47c3-b577-eb70599644e4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2162",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-19T20:15:12.307",
      "lastModified" : "2025-03-19T16:15:21.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "108695B6-7133-4B6C-80AF-0F66880FE858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3ADCCCEE-143A-4B48-9B2A-0CB97BD385DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF501633-2F44-4913-A8EE-B021929F49F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDA597B-CAC1-4DF0-86F0-42E142C654E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "725C78C9-12CE-406F-ABE8-0813A01D66E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A127C155-689C-4F67-B146-44A57F4BFD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "D34127CC-68F5-4703-A5F6-5006F803E4AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.spinics.net/lists/linux-scsi/msg181542.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.spinics.net/lists/linux-scsi/msg181542.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30797",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2023-04-19T20:15:12.377",
      "lastModified" : "2025-11-21T17:15:47.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netflix:lemur:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "AA02A184-ED2B-4577-BAB1-1B536179C263"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Netflix/lemur/commit/666d853212174ee7f4e6f8b3b4b389ede1872238",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Netflix/lemur/security/advisories/GHSA-5fqv-mpj8-h7gm",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2023-001.md",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://vulncheck.com/advisories/netflix-lemur-weak-rng",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Netflix/lemur/commit/666d853212174ee7f4e6f8b3b4b389ede1872238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Netflix/lemur/security/advisories/GHSA-5fqv-mpj8-h7gm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2023-001.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://vulncheck.com/advisories/netflix-lemur-weak-rng",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1382",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-19T23:15:06.903",
      "lastModified" : "2025-03-19T16:15:17.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A data race flaw was found in the Linux kernel, between where con is allocated and con->sock is set. This issue leads to a NULL pointer dereference when accessing con->sock->sk in net/tipc/topsrv.c in the tipc protocol in the Linux kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "9064B383-DD48-40A2-8947-F5BA6E6B6713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "17F0B248-42CF-4AE6-A469-BB1BAE7F4705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E2422816-0C14-4B5E-A1E6-A9D776E5C49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "35B26BE4-43A6-4A36-A7F6-5B3F572D9186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFFB0B3-930D-408A-91E2-BAE0C2715D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lore.kernel.org/netdev/bc7bd3183f1c275c820690fc65b708238fe9e38e.1668807842.git.lucien.xin%40gmail.com/T/#u",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lore.kernel.org/netdev/bc7bd3183f1c275c820690fc65b708238fe9e38e.1668807842.git.lucien.xin%40gmail.com/T/#u",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23451",
      "sourceIdentifier" : "psirt@sick.de",
      "published" : "2023-04-19T23:15:06.970",
      "lastModified" : "2025-02-05T16:15:35.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN4 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK FX0-GENT00000 FLEXISOFT EIP GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0, SICK FX0-GMOD00000 FLEXISOFT MOD GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0, SICK FX0-GPNT00000 FLEXISOFT PNET GATEW. with serial number <=2311xxxx with Firmware <=V2.12.0, SICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2 with serial number <=2311xxxx all Firmware versions, SICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 with serial number <=2311xxxx all Firmware versions and SICK FX0-GMOD00010 FLEXISOFT MOD GW with serial number <=2311xxxx with Firmware <=V2.11.0 all have Telnet enabled by factory default. No password is set in the default configuration."
      }, {
        "lang" : "es",
        "value" : "El Flexi Classic y Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. con número de serie &lt;=2311xxxx todas las versiones de Firmware, SICK UE410-EN1 FLEXI ETHERNET GATEW. con número de serie &lt;=2311xxxx todas las versiones de Firmware, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. con número de serie &lt;=2311xxxx todas las versiones de Firmware, SICK UE410-EN4 FLEXI ETHERNET GATEW. con número de serie &lt;=2311xxxx todas las versiones de firmware, SICK FX0-GENT00000 FLEXISOFT EIP GATEW. con número de serie &lt;=2311xxxx con Firmware &lt;=V2.11.0, SICK FX0-GMOD00000 FLEXISOFT MOD GATEW. con número de serie &lt;=2311xxxx con Firmware &lt;=V2.11.0, SICK FX0-GPNT00000 FLEXISOFT PNET GATEW. con número de serie &lt;=2311xxxx con firmware &lt;=V2.12.0, SICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2 con número de serie &lt;=2311xxxx todas las versiones de firmware, SICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 con número de serie &lt;=2311xxxx todo el firmware Las versiones y SICK FX0-GMOD00010 FLEXISOFT MOD GW con número de serie &lt;=2311xxxx con firmware &lt;=V2.11.0 tienen Telnet habilitado de forma predeterminada. No se establece ninguna contraseña en la configuración predeterminada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@sick.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-477"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:ue410-en3_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AA9F3C9-61F5-4C21-9650-76C0FC9C51EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:ue410-en3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F4C5D33-6A97-4509-8151-65D79F03F18A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:ue410-en1_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF96D6FC-3053-433E-8B7D-CEA3C7FC7CBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:ue410-en1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A963DB6B-C9A9-4B1D-A239-C7B608F2CBD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:ue410-en3s04_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB62B37C-E8E4-4305-8F6A-127765CC54AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:ue410-en3s04:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06416A50-B978-4F67-AA50-010ECBD2DB2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:ue410-en4_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30951A8A-8B78-4F58-8E8B-5697F89B332A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:ue410-en4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "593FA8EA-007A-47C0-9F22-89E420BBE0D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:fx0-gent00000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.11.0",
            "matchCriteriaId" : "87586615-29B4-46E4-9CE7-F7BB8F012155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:fx0-gent00000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB590A4-F5E4-4A17-B5A6-33A995C96BAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:fx0-gmod00000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.11.0",
            "matchCriteriaId" : "042B4FDB-BC05-43D6-84FC-F65203CDBE0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:fx0-gmod00000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D96296E7-65D3-4C0A-8126-4AA8BEF85B39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:fx0-gpnt00000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.12.0",
            "matchCriteriaId" : "61F9ADB1-DBED-4AC6-9CED-C0CCAC7C31F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:fx0-gpnt00000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF3BF752-4F49-4E90-9790-1913ED64D8B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:fx0-gent00030_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F133BB19-8D61-4BD7-B706-A3FD81E71ECD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:fx0-gent00030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1809BCF9-541E-4348-87A3-4CB37D680704"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:fx0-gpnt00030_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96A20EA8-57F4-4CDD-8F44-F02E2FC010AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:fx0-gpnt00030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CABEFF4-C0A4-4054-8174-7B3762BC0C3F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sick:fx0-gmod00010_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.11.0",
            "matchCriteriaId" : "D09286BA-A20C-44DA-BE0C-98EF4851BA73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sick:fx0-gmod00010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97742720-A8E3-49FE-BE43-EFF720F3D52D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sick.com/psirt",
        "source" : "psirt@sick.de",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sick.com/psirt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28327",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-19T23:15:07.027",
      "lastModified" : "2025-03-19T16:15:21.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0",
            "matchCriteriaId" : "87B81C9D-7173-4FFB-97BC-9C41AB20A53C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2177382",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2177382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28328",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-19T23:15:07.163",
      "lastModified" : "2025-03-19T16:15:21.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not checked properly before transferring into the device. This flaw allows a local user to crash the system or potentially cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "108695B6-7133-4B6C-80AF-0F66880FE858"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2177389",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2177389",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2166",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-19T23:15:07.230",
      "lastModified" : "2025-02-05T16:15:38.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1",
            "matchCriteriaId" : "9064B383-DD48-40A2-8947-F5BA6E6B6713"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DE093B34-F4CD-4052-8122-730D6537A91A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "17F0B248-42CF-4AE6-A469-BB1BAE7F4705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E2422816-0C14-4B5E-A1E6-A9D776E5C49B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "35B26BE4-43A6-4A36-A7F6-5B3F572D9186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "3FFFB0B3-930D-408A-91E2-BAE0C2715D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "8535320E-A0DB-4277-800E-D0CE5BBA59E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "21718AA4-4056-40F2-968E-BDAA465A7872"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lore.kernel.org/lkml/CAO4mrfcV_07hbj8NUuZrA8FH-kaRsrFy-2metecpTuE5kKHn5w%40mail.gmail.com/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lore.kernel.org/lkml/CAO4mrfcV_07hbj8NUuZrA8FH-kaRsrFy-2metecpTuE5kKHn5w%40mail.gmail.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2191",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-20T02:15:06.757",
      "lastModified" : "2024-11-21T07:58:06.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository azuracast/azuracast prior to 0.18."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azuracast:azuracast:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.18.0",
            "matchCriteriaId" : "820C3983-35D4-4942-AC2B-42FE4BD71EB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/azuracast/azuracast/commit/24276cb4166b2057de73569ec33046a80a8bb437",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/0814f5f9-8b58-40e5-b08c-7c488947cf31",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/azuracast/azuracast/commit/24276cb4166b2057de73569ec33046a80a8bb437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/0814f5f9-8b58-40e5-b08c-7c488947cf31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28047",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2023-04-20T07:15:07.220",
      "lastModified" : "2024-11-21T07:54:11.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nDell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation vulnerability during installation. A local low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code on the operating system with high privileges.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-272"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:display_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.0",
            "matchCriteriaId" : "3032AF92-97A1-4693-96D3-59595D1D3CEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-uk/000211727/dsa-2023",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-uk/000211727/dsa-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0383",
      "sourceIdentifier" : "security@m-files.com",
      "published" : "2023-04-20T09:15:08.333",
      "lastModified" : "2026-02-23T09:16:13.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1\n\n due to uncontrolled memory consumption."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@m-files.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@m-files.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m-files:m-files_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.4.12528.1",
            "matchCriteriaId" : "03195A81-08F5-4937-B73E-FBCA8AC5EC5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://empower.m-files.com/security-advisories/CVE-2023-0383",
        "source" : "security@m-files.com"
      }, {
        "url" : "https://product.m-files.com/security-advisories/cve-2023-0383/",
        "source" : "security@m-files.com"
      }, {
        "url" : "https://www.m-files.com/about/trust-center/security-advisories/cve-2023-0383/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0384",
      "sourceIdentifier" : "security@m-files.com",
      "published" : "2023-04-20T09:15:08.433",
      "lastModified" : "2026-02-23T09:16:14.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1\n\n due to uncontrolled memory consumption for a scheduled job."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@m-files.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@m-files.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m-files:m-files_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.4.12528.1",
            "matchCriteriaId" : "03195A81-08F5-4937-B73E-FBCA8AC5EC5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://empower.m-files.com/security-advisories/CVE-2023-0384",
        "source" : "security@m-files.com"
      }, {
        "url" : "https://product.m-files.com/security-advisories/cve-2023-0384/",
        "source" : "security@m-files.com"
      }, {
        "url" : "https://www.m-files.com/about/trust-center/security-advisories/cve-2023-0384/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2112",
      "sourceIdentifier" : "security@m-files.com",
      "published" : "2023-04-20T09:15:10.540",
      "lastModified" : "2026-02-23T09:16:14.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@m-files.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.6,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@m-files.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m-files:m-files_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.4.12455.0",
            "matchCriteriaId" : "BC91A788-6CC0-4EA3-9298-83D4961EEB02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://empower.m-files.com/security-advisories/CVE-2023-2112",
        "source" : "security@m-files.com"
      }, {
        "url" : "https://product.m-files.com/security-advisories/cve-2023-2112/",
        "source" : "security@m-files.com"
      }, {
        "url" : "https://www.m-files.com/about/trust-center/security-advisories/cve-2023-2112/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2193",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2023-04-20T09:15:10.603",
      "lastModified" : "2024-11-21T07:58:07.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker possessing an authorization code to generate an access token.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost:7.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC735BF-4F80-4591-9723-502F85272A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost:7.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "987578BB-343E-4CA2-858E-9D99D6DD00FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost:7.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CE80DF-3961-4B2A-AF44-9FB269AB0A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost:7.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271F0B4B-922D-4D29-AEDC-CBB12531744C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1767",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2023-04-20T10:15:07.433",
      "lastModified" : "2024-11-21T07:39:52.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the contents of a scanned package's Readme on its package health page. An attacker could create a package in NPM with an associated markdown README file containing XSS-able HTML tags. Upon Snyk Advisor importing the package, the XSS would run each time an end user browsed to the package's page on Snyk Advisor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "report@snyk.io",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snyk:advisor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03-28",
            "matchCriteriaId" : "C83D1435-E7D4-436B-8338-B662313350A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.snyk.io/hc/en-us/articles/10146704933405",
        "source" : "report@snyk.io",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://weizman.github.io/2023/04/10/snyk-xss/",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.snyk.io/hc/en-us/articles/10146704933405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://weizman.github.io/2023/04/10/snyk-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22309",
      "sourceIdentifier" : "security@checkmk.com",
      "published" : "2023-04-20T14:15:08.287",
      "lastModified" : "2024-11-21T07:44:30.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@checkmk.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@checkmk.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tribe29:checkmk_appliance_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "3275F8D1-2252-4524-B04A-9F7D0B23D715"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://checkmk.com/werk/9523",
        "source" : "security@checkmk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://checkmk.com/werk/9523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-20T14:15:08.387",
      "lastModified" : "2025-02-05T21:15:20.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges cause a denial of service via the update_info field of the _default_.xml file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egostudiogroup:super_clean:1.1.5:*:*:*:*:android:*:*",
            "matchCriteriaId" : "F5BEEBC2-D679-4E48-8BB6-6F8C2DF7A4DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:egostudiogroup:super_clean:1.1.9:*:*:*:*:android:*:*",
            "matchCriteriaId" : "B78674E3-CFDC-4278-AFA0-53DAAD420439"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.egostudiogroup.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://apkpure.com/cn/super-clean-phone-cleaner/com.egostudio.clean/download",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27652/CVE%20detail.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.egostudiogroup.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://apkpure.com/cn/super-clean-phone-cleaner/com.egostudio.clean/download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27652/CVE%20detail.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-20T15:15:07.027",
      "lastModified" : "2025-02-05T15:15:19.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PowerJob V4.3.2 has unauthorized interface that causes remote code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerjob:powerjob:4.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBE4AF97-E494-4DB1-B8DE-D159DF25EB8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iotaa.cn/articles/63",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://iotaa.cn/articles/63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25601",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-20T16:15:07.570",
      "lastModified" : "2025-02-13T17:16:09.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the python-gateway function by changing the value `python-gateway.enabled=false` in configuration file `application.yaml`. If you are using the python gateway, please upgrade to version 3.1.2 or above."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:dolphinscheduler:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.2",
            "matchCriteriaId" : "EA5EA55F-A97E-4868-A477-31D7C12E2B33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/20/10",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread/25g77jqczp3t8cz56hk1p65q7m6c64rf",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/20/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread/25g77jqczp3t8cz56hk1p65q7m6c64rf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27350",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2023-04-20T16:15:07.653",
      "lastModified" : "2025-10-27T17:05:26.883",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18987."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-04-21",
      "cisaActionDue" : "2023-05-12",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "PaperCut MF/NG Improper Access Control Vulnerability",
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "20.1.7",
            "matchCriteriaId" : "E225189C-FF05-402B-A8F6-6BCC8D062B8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndExcluding" : "21.2.11",
            "matchCriteriaId" : "7D231C34-F58C-4CA1-B158-64778AC17991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.0.9",
            "matchCriteriaId" : "A326E88D-635E-4AC1-B5CE-455306FC9D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "20.1.7",
            "matchCriteriaId" : "7F5D942B-C055-4221-8FD7-3F0F252931E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndExcluding" : "21.2.11",
            "matchCriteriaId" : "4DE19845-02F0-4BB9-BECB-49B34FACB55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.0.9",
            "matchCriteriaId" : "C1852E7B-0B3F-4208-A26E-CB117E0C0CD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171982/PaperCut-MF-NG-Authentication-Bypass-Remote-Code-Execution.html",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172022/PaperCut-NG-MG-22.0.4-Authentication-Bypass.html",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172512/PaperCut-NG-MG-22.0.4-Remote-Code-Execution.html",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172780/PaperCut-PaperCutNG-Authentication-Bypass.html",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://news.sophos.com/en-us/2023/04/27/increased-exploitation-of-papercut-drawing-blood-around-the-internet/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.papercut.com/kb/Main/PO-1216-and-PO-1219",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-233/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171982/PaperCut-MF-NG-Authentication-Bypass-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172022/PaperCut-NG-MG-22.0.4-Authentication-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172512/PaperCut-NG-MG-22.0.4-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172780/PaperCut-PaperCutNG-Authentication-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://news.sophos.com/en-us/2023/04/27/increased-exploitation-of-papercut-drawing-blood-around-the-internet/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.papercut.com/kb/Main/PO-1216-and-PO-1219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-233/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27350",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27351",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2023-04-20T16:15:07.723",
      "lastModified" : "2026-04-21T13:00:03.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19226."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "cisaExploitAdd" : "2026-04-20",
      "cisaActionDue" : "2026-05-04",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "PaperCut NG/MF Improper Authentication Vulnerability",
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "20.1.7",
            "matchCriteriaId" : "B754BD95-F7CC-4A77-A5FB-B627E1E636DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndExcluding" : "21.2.11",
            "matchCriteriaId" : "7D231C34-F58C-4CA1-B158-64778AC17991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.0.9",
            "matchCriteriaId" : "A326E88D-635E-4AC1-B5CE-455306FC9D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "20.1.7",
            "matchCriteriaId" : "BFB91DE7-FAEA-4F7D-B4B6-6B5211DE4AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0.0",
            "versionEndExcluding" : "21.2.11",
            "matchCriteriaId" : "4DE19845-02F0-4BB9-BECB-49B34FACB55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0.0",
            "versionEndExcluding" : "22.0.9",
            "matchCriteriaId" : "C1852E7B-0B3F-4208-A26E-CB117E0C0CD8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.papercut.com/kb/Main/PO-1216-and-PO-1219",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-232/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.papercut.com/kb/Main/PO-1216-and-PO-1219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-232/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27351",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1255",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2023-04-20T17:15:06.883",
      "lastModified" : "2025-02-04T22:15:39.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM\nplatform contains a bug that could cause it to read past the input buffer,\nleading to a crash.\n\nImpact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM\nplatform can crash in rare circumstances. The AES-XTS algorithm is usually\nused for disk encryption.\n\nThe AES-XTS cipher decryption implementation for 64 bit ARM platform will read\npast the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16\nbyte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext\nbuffer is unmapped, this will trigger a crash which results in a denial of\nservice.\n\nIf an attacker can control the size and location of the ciphertext buffer\nbeing decrypted by an application using AES-XTS on 64 bit ARM, the\napplication is affected. This is fairly unlikely making this issue\na Low severity one."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.9",
            "matchCriteriaId" : "4C637E94-F5EC-4D4B-836F-8C8219F1ECEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndExcluding" : "3.1.1",
            "matchCriteriaId" : "68821BE0-7889-48B0-888D-CEC8BB9BDEA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230908-0006/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230419.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230908-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20230419.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23938",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-20T17:15:07.120",
      "lastModified" : "2024-11-21T07:47:08.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tuleap is a Free & Source tool for end to end traceability of application and system developments. Affected versions are subject to a cross site scripting attack which can be injected in the name of a color of select box values of a tracker and then reflected in the tracker administration. Administrative privilege is required, but an attacker with tracker administration rights could use this vulnerability to force a victim to execute uncontrolled code in the context of their browser. This issue has been addressed in Tuleap Community Edition version 14.5.99.4. Users are advised to upgrade. There are no known workarounds for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "14.4-7",
            "matchCriteriaId" : "1092E5D2-592F-45AE-AAD7-055F42EEBA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.99.49",
            "versionEndExcluding" : "14.5.99.4",
            "matchCriteriaId" : "F4555DF2-D6B6-4CE1-901B-4E886DA794E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "14.5",
            "versionEndExcluding" : "14.5-2",
            "matchCriteriaId" : "5E58AAFA-7D70-4AF5-9916-1F43B5286072"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Enalean/tuleap/commit/aacd5e798301f24f218298ec8236ec7bef0f5d52",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Enalean/tuleap/security/advisories/GHSA-mqjm-c6rm-9h87",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tuleap.net/plugins/tracker/?aid=30734",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Enalean/tuleap/commit/aacd5e798301f24f218298ec8236ec7bef0f5d52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Enalean/tuleap/security/advisories/GHSA-mqjm-c6rm-9h87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tuleap.net/plugins/tracker/?aid=30734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27495",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-20T18:15:07.233",
      "lastModified" : "2024-11-21T07:53:01.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "@fastify/csrf-protection is a plugin which helps protect Fastify servers against CSRF attacks. The CSRF protection enforced by the @fastify/csrf-protection library in combination with @fastify/cookie can be bypassed from network and same-site attackers under certain conditions. @fastify/csrf-protection supports an optional userInfo parameter that binds the CSRF token to the user. This parameter has been introduced to prevent cookie-tossing attacks as a fix for CVE-2021-29624. Whenever userInfo parameter is missing, or its value can be predicted for the target user account, network and same-site attackers can 1. fixate a _csrf cookie in the victim's browser, and 2. forge CSRF tokens that are valid for the victim's session. This allows attackers to bypass the CSRF protection mechanism. As a fix, @fastify/csrf-protection starting from version 6.3.0 (and v4.1.0) includes a server-defined secret hmacKey that cryptographically binds the CSRF token to the value of the _csrf cookie and the userInfo parameter, making tokens non-spoofable by attackers. This protection is effective as long as the userInfo parameter is unique for each user. This is patched in versions 6.3.0 and v4.1.0. Users are advised to upgrade. Users unable to upgrade may use a random, non-predictable userInfo parameter for each user as a mitigation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastify:csrf-protection:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.1.0",
            "matchCriteriaId" : "FFFBC7FD-D310-411C-AD25-A1526EDC05BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastify:csrf-protection:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "6.3.0",
            "matchCriteriaId" : "38CB7906-F94A-4915-B657-11A79B46985A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fastify/csrf-protection/commit/be3e5761f37aa05c7c1ac8ed44499c51ecec8058",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fastify/csrf-protection/security/advisories/GHSA-qrgf-9gpc-vrxw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cvedetails.com/cve/CVE-2021-29624",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fastify/csrf-protection/commit/be3e5761f37aa05c7c1ac8ed44499c51ecec8058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fastify/csrf-protection/security/advisories/GHSA-qrgf-9gpc-vrxw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cvedetails.com/cve/CVE-2021-29624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29528",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-20T18:15:07.307",
      "lastModified" : "2024-11-21T07:57:14.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Commons are technical libraries common to several other top level XWiki projects. The \"restricted\" mode of the HTML cleaner in XWiki, introduced in version 4.2-milestone-1 and massively improved in version 14.6-rc-1, allowed the injection of arbitrary HTML code and thus cross-site scripting via invalid HTML comments. As a consequence, any code relying on this \"restricted\" mode for security is vulnerable to JavaScript injection (\"cross-site scripting\"/XSS). When a privileged user with programming rights visits such a comment in XWiki, the malicious JavaScript code is executed in the context of the user session. This allows server-side code execution with programming rights, impacting the confidentiality, integrity and availability of the XWiki instance. This problem has been patched in XWiki 14.10, HTML comments are now removed in restricted mode and a check has been introduced that ensures that comments don't start with `>`. There are no known workarounds apart from upgrading to a version including the fix.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:commons:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3",
            "versionEndExcluding" : "14.10",
            "matchCriteriaId" : "03911D90-117F-4EFD-9CA9-D6F653CB1D48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:commons:4.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C514853A-989A-4BED-A653-D1578DB40157"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:commons:4.2:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "36E79F9F-67BC-4E06-9882-DEA941AEF84B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:commons:4.2:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE5ECE0-5A68-4B4F-9752-8C2F46AE9009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:commons:4.2:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "60F8E581-DBE8-407C-970A-0ED230F074BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:commons:4.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D23E926-03F5-4EC0-B8D7-434F97D01A8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-commons/commit/8ff1a9d7e5d7b45b690134a537d53dc05cae04ab",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-commons/security/advisories/GHSA-x37v-36wv-6v6h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XCOMMONS-2568",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20348",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-commons/commit/8ff1a9d7e5d7b45b690134a537d53dc05cae04ab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-commons/security/advisories/GHSA-x37v-36wv-6v6h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XCOMMONS-2568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-20348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30616",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-20T18:15:07.367",
      "lastModified" : "2024-11-21T08:00:30.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Form block is a wordpress plugin designed to make form creation easier. Versions prior to 1.0.2 are subject to a Cross-Site Request Forgery due to a missing nonce check. There is potential for a Cross Site Request Forgery for all form blocks, since it allows to send requests to the forms from any website without a user noticing. Users are advised to upgrade to version 1.0.2. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:epiph:form_block:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.2",
            "matchCriteriaId" : "A6E131BC-61B8-47BC-9A19-12EAEFA493DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/epiphyt/form-block/commit/cf0012fa0710d906c594346ba775c5dc433a9426",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/epiphyt/form-block/security/advisories/GHSA-j4c2-7p87-q824",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/epiphyt/form-block/commit/cf0012fa0710d906c594346ba775c5dc433a9426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/epiphyt/form-block/security/advisories/GHSA-j4c2-7p87-q824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22295",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-20T19:15:07.157",
      "lastModified" : "2024-11-21T07:44:28.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Datakit CrossCadWare_x64.dll contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datakit:crosscadware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1",
            "matchCriteriaId" : "8007444D-F493-4A50-859E-E4FC62882ACA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22321",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-20T19:15:07.237",
      "lastModified" : "2024-11-21T07:44:31.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\nDatakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information. \n\n \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datakit:crosscadware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1",
            "matchCriteriaId" : "8007444D-F493-4A50-859E-E4FC62882ACA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22354",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-20T19:15:07.290",
      "lastModified" : "2024-11-21T07:44:37.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\n\n\nDatakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information. \n\n \n\n \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datakit:crosscadware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1",
            "matchCriteriaId" : "8007444D-F493-4A50-859E-E4FC62882ACA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22846",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-20T19:15:07.347",
      "lastModified" : "2024-11-21T07:45:30.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\n\n\n\n\nDatakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information. \n\n \n\n \n\n \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datakit:crosscadware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1",
            "matchCriteriaId" : "8007444D-F493-4A50-859E-E4FC62882ACA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23579",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-20T19:15:07.410",
      "lastModified" : "2024-11-21T07:46:28.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\n\n\n\n\n\n\n\n\nDatakit CrossCadWare_x64.dll contains an out-of-bounds write past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This could allow an attacker to execute code in the context of the current process. \n\n \n\n \n\n \n\n \n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datakit:crosscadware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1",
            "matchCriteriaId" : "8007444D-F493-4A50-859E-E4FC62882ACA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-20T19:15:07.567",
      "lastModified" : "2025-02-05T17:15:20.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcecodester Judging Management System v1.0 is vulnerable to SQL Injection via /php-jms/print_judges.php?print_judges.php=&se_name=&sub_event_id=."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:judging_management_system_project:judging_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE693B0-3497-406C-AD53-36AC05735004"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Dzero57/cve_report/blob/main/judging-management-system/SQLi-2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Dzero57/cve_report/blob/main/judging-management-system/SQLi-2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-20T20:15:07.150",
      "lastModified" : "2025-02-05T15:15:17.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teacms_project:teacms:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3571A5-BAEF-4CA6-A259-FEA8A21B212E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/xiaobingby/TeaCMS/issues/I6GDDN",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/xiaobingby/TeaCMS/issues/I6L9Z2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/xiaobingby/TeaCMS/issues/I6GDDN",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/xiaobingby/TeaCMS/issues/I6L9Z2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20864",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-04-20T21:15:08.620",
      "lastModified" : "2025-02-05T16:15:34.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:aria_operations_for_logs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.2",
            "versionEndExcluding" : "8.12.0",
            "matchCriteriaId" : "67498B85-8EED-47C7-828E-C0184E431E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "4BF004A8-90A0-4804-97DA-C2C2005A54AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0007.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20865",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-04-20T21:15:08.670",
      "lastModified" : "2025-02-05T16:15:34.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privileges in VMware Aria Operations for Logs can execute arbitrary commands as root."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:aria_operations_for_logs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0",
            "versionEndExcluding" : "8.12.0",
            "matchCriteriaId" : "E6EB0AB7-8866-4ED9-942C-FC7ADF40666B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.5",
            "matchCriteriaId" : "4BF004A8-90A0-4804-97DA-C2C2005A54AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0007.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20873",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-04-20T21:15:08.717",
      "lastModified" : "2025-05-05T16:15:29.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Spring Boot versions 3.0.0 - 3.0.5, 2.7.0 - 2.7.10, and older unsupported versions, an application that is deployed to Cloud Foundry could be susceptible to a security bypass. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.6+. 2.7.x users should upgrade to 2.7.11+. Users of older, unsupported versions should upgrade to 3.0.6+ or 2.7.11+."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_boot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.15",
            "matchCriteriaId" : "3A1932B4-20A2-4ADF-B631-8BF26E7FF0BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_boot:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndExcluding" : "2.6.14",
            "matchCriteriaId" : "45ABFC0F-28B7-436E-8868-28E64A4C3110"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_boot:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "2.7.11",
            "matchCriteriaId" : "E03EEFE1-487C-4924-AE1E-864067CD381F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_boot:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.6",
            "matchCriteriaId" : "5383A7EE-8667-455F-9B4E-08200F831007"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0009/",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://spring.io/blog/2023/05/18/spring-boot-2-5-15-and-2-6-15-available-now",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://spring.io/security/cve-2023-20873",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://spring.io/blog/2023/05/18/spring-boot-2-5-15-and-2-6-15-available-now",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://spring.io/security/cve-2023-20873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-20T21:15:08.770",
      "lastModified" : "2025-02-05T17:15:19.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pretalx:pretalx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.1",
            "matchCriteriaId" : "C032C969-F9AA-4312-B987-0DD4C8BB6D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pretalx/pretalx/commit/60722c43cf975f319e94102e6bff320723776890",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pretalx/pretalx/releases/tag/v2.3.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://pretalx.com/p/news/security-release-232/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sonarsource.com/blog/pretalx-vulnerabilities-how-to-get-accepted-at-every-conference/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pretalx/pretalx/commit/60722c43cf975f319e94102e6bff320723776890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pretalx/pretalx/releases/tag/v2.3.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://pretalx.com/p/news/security-release-232/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sonarsource.com/blog/pretalx-vulnerabilities-how-to-get-accepted-at-every-conference/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-20T21:15:08.823",
      "lastModified" : "2025-02-05T17:15:19.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Users were able to upload crafted HTML documents that trigger the reading of arbitrary files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pretalx:pretalx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.1",
            "matchCriteriaId" : "C032C969-F9AA-4312-B987-0DD4C8BB6D97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pretalx/pretalx/commit/60722c43cf975f319e94102e6bff320723776890",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pretalx/pretalx/releases/tag/v2.3.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://pretalx.com/p/news/security-release-232/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sonarsource.com/blog/pretalx-vulnerabilities-how-to-get-accepted-at-every-conference/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pretalx/pretalx/commit/60722c43cf975f319e94102e6bff320723776890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pretalx/pretalx/releases/tag/v2.3.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://pretalx.com/p/news/security-release-232/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sonarsource.com/blog/pretalx-vulnerabilities-how-to-get-accepted-at-every-conference/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2131",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-20T21:15:08.870",
      "lastModified" : "2024-11-21T07:57:59.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Versions of INEA ME RTU firmware prior to 3.36 are vulnerable to OS command injection, which could allow an attacker to remotely execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:inea:me_rtu_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.36",
            "matchCriteriaId" : "E213CE4E-AA17-4AA5-A753-A7F2B37C7815"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:inea:me_rtu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97E14440-C423-4D41-9834-E33564A4B70D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-110-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-110-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2176",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-20T21:15:08.937",
      "lastModified" : "2025-05-05T16:15:35.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.1.81",
            "matchCriteriaId" : "89A51AC3-83B4-4F44-B496-385D10612456"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.3",
            "matchCriteriaId" : "8682F89E-B23D-4D17-AE3E-E32BF630CCC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20230609-0005/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.spinics.net/lists/linux-rdma/msg114749.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230609-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.spinics.net/lists/linux-rdma/msg114749.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2177",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-20T21:15:08.997",
      "lastModified" : "2025-03-18T20:15:19.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_out is freed which would further be accessed. A local user could use this flaw to crash the system or potentially cause a denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.19",
            "matchCriteriaId" : "E74E9AF8-BDF5-4917-A9CA-0AAD8E13149B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8547FC-C849-4F1B-804B-A93AE2F04A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "F3068028-F453-4A1C-B80F-3F5609ACEF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "2E9C0DB0-D349-489F-A3D6-B77214E93A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "00AE778B-BAEE-49EB-9F84-003B73D7862A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.19:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "C178431E-AD82-4B3D-B70F-A273A02ABD5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.19:rc8:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF5D19C-C418-4B57-B52D-7795547F4096"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=181d8d2066c0",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=181d8d2066c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2194",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-20T21:15:09.047",
      "lastModified" : "2025-04-23T17:16:29.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace \"data->block[0]\" variable was not capped to a number between 0-255 and was used as the size of a memcpy, possibly writing beyond the end of dma_buffer. This flaw could allow a local privileged user to crash the system or potentially achieve code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3",
            "matchCriteriaId" : "3769AA63-B0A8-4EF1-96F9-6A6A6B305A02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "A47F0FC3-CE52-4BA1-BA51-22F783938431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "3583026A-27EC-4A4C-850A-83F2AF970673"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2188396",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/92fbb6d1296f",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2188396",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/92fbb6d1296f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27352",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2023-04-20T22:15:07.077",
      "lastModified" : "2024-11-21T07:52:43.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the SMB directory query command. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-19845."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonos:one_firmware:70.3-35220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE4A7E8-95A0-494F-B183-0F89251A648F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonos:one:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEFE769-D51B-4ED0-818F-DF1321164AA2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonos:s1:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.7.1",
            "matchCriteriaId" : "CCD7FC41-7174-40FF-9F79-F6D1F886B35E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonos:s2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1",
            "matchCriteriaId" : "5071BA4F-7418-438F-8B5F-3956B18C7AD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-447/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-447/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27353",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2023-04-20T22:15:07.140",
      "lastModified" : "2024-11-21T07:52:43.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the msprox endpoint. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-19846."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonos:one_firmware:70.3-35220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE4A7E8-95A0-494F-B183-0F89251A648F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonos:one:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEFE769-D51B-4ED0-818F-DF1321164AA2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonos:s1:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.7.1",
            "matchCriteriaId" : "CCD7FC41-7174-40FF-9F79-F6D1F886B35E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonos:s2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1",
            "matchCriteriaId" : "5071BA4F-7418-438F-8B5F-3956B18C7AD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-448/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-448/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27354",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2023-04-20T22:15:07.197",
      "lastModified" : "2024-11-21T07:52:43.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the SMB directory query command. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before reading from memory. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-19727."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonos:one_firmware:70.3-35220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE4A7E8-95A0-494F-B183-0F89251A648F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonos:one:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEFE769-D51B-4ED0-818F-DF1321164AA2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonos:s1:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.7.1",
            "matchCriteriaId" : "CCD7FC41-7174-40FF-9F79-F6D1F886B35E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonos:s2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1",
            "matchCriteriaId" : "5071BA4F-7418-438F-8B5F-3956B18C7AD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-446/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-446/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27355",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2023-04-20T22:15:07.250",
      "lastModified" : "2024-11-21T07:52:43.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MPEG-TS parser. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-19773."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonos:one_firmware:70.3-35220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EE4A7E8-95A0-494F-B183-0F89251A648F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonos:one:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDEFE769-D51B-4ED0-818F-DF1321164AA2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonos:s1:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.7.1",
            "matchCriteriaId" : "CCD7FC41-7174-40FF-9F79-F6D1F886B35E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonos:s2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.1",
            "matchCriteriaId" : "5071BA4F-7418-438F-8B5F-3956B18C7AD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-449/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-449/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2202",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-21T02:15:07.170",
      "lastModified" : "2024-11-21T07:58:08.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rosariosis:rosariosis:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.9.3",
            "matchCriteriaId" : "6D4CC6F3-6545-4CCA-9E2F-18FFA1F1369C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/francoisjacquet/rosariosis/commit/6433946abfb34324616e833b1c00d0b2450753be",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/efe6ef47-d17c-4773-933a-4836c32db85c",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/francoisjacquet/rosariosis/commit/6433946abfb34324616e833b1c00d0b2450753be",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/efe6ef47-d17c-4773-933a-4836c32db85c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1892",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-21T05:15:07.057",
      "lastModified" : "2024-11-21T07:40:05.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contribsys:sidekiq:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.4",
            "versionEndExcluding" : "7.0.8",
            "matchCriteriaId" : "5B32B98F-EEB2-4982-976A-BEC2ECE01909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sidekiq/sidekiq/commit/458fdf74176a9881478c48dc5cf0269107b22214",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e35e5653-c429-4fb8-94a3-cbc123ae4777",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sidekiq/sidekiq/commit/458fdf74176a9881478c48dc5cf0269107b22214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e35e5653-c429-4fb8-94a3-cbc123ae4777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T07:15:07.063",
      "lastModified" : "2023-11-07T04:10:02.983",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T07:15:07.210",
      "lastModified" : "2023-11-07T04:10:03.027",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2204",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T07:15:07.260",
      "lastModified" : "2024-11-21T07:58:08.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file faqs.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226969 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:retro_basketball_shoes_online_store_project:retro_basketball_shoes_online_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D09EEA-EF02-47DB-8146-958141C51E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%205.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226969",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226969",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%205.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2205",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T07:15:07.410",
      "lastModified" : "2024-11-21T07:58:09.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-226970 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:retro_basketball_shoes_online_store_project:retro_basketball_shoes_online_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D09EEA-EF02-47DB-8146-958141C51E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%201.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226970",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226970",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%201.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226970",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2206",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T08:15:07.093",
      "lastModified" : "2024-11-21T07:58:09.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file contactus.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226971."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:retro_basketball_shoes_online_store_project:retro_basketball_shoes_online_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D09EEA-EF02-47DB-8146-958141C51E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%202.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226971",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226971",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%202.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2207",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T08:15:07.157",
      "lastModified" : "2024-11-21T07:58:09.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerability affects unknown code of the file contactus1.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226972."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:retro_basketball_shoes_online_store_project:retro_basketball_shoes_online_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D09EEA-EF02-47DB-8146-958141C51E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%203.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226972",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226972",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%203.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2208",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T08:15:07.220",
      "lastModified" : "2024-11-21T07:58:09.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in Campcodes Retro Basketball Shoes Online Store 1.0. This issue affects some unknown processing of the file details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226973 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:retro_basketball_shoes_online_store_project:retro_basketball_shoes_online_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09D09EEA-EF02-47DB-8146-958141C51E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%204.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226973",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226973",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%204.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226973",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2209",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T09:15:07.837",
      "lastModified" : "2024-11-21T07:58:09.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in Campcodes Coffee Shop POS System 1.0. Affected is an unknown function of the file /admin/sales/view_details.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-226974 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coffee_shop_pos_system_project:coffee_shop_pos_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4D1D90-B3B0-4E6B-9B75-C6A2C6FF6909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%201.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226974",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226974",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%201.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2210",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T09:15:07.970",
      "lastModified" : "2024-11-21T07:58:09.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Campcodes Coffee Shop POS System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/categories/view_category.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226975."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coffee_shop_pos_system_project:coffee_shop_pos_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4D1D90-B3B0-4E6B-9B75-C6A2C6FF6909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%202.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226975",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226975",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%202.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2211",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T09:15:08.050",
      "lastModified" : "2024-11-21T07:58:09.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Coffee Shop POS System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/categories/manage_category.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226976."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coffee_shop_pos_system_project:coffee_shop_pos_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4D1D90-B3B0-4E6B-9B75-C6A2C6FF6909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%203.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226976",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226976",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%203.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2212",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T10:15:07.610",
      "lastModified" : "2024-11-21T07:58:09.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/products/view_product.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226977 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coffee_shop_pos_system_project:coffee_shop_pos_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4D1D90-B3B0-4E6B-9B75-C6A2C6FF6909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%204.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226977",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226977",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%204.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2213",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T10:15:07.687",
      "lastModified" : "2024-11-21T07:58:10.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/products/manage_product.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-226978 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coffee_shop_pos_system_project:coffee_shop_pos_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4D1D90-B3B0-4E6B-9B75-C6A2C6FF6909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%205.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226978",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226978",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%205.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2214",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T10:15:07.740",
      "lastModified" : "2024-11-21T07:58:10.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/sales/manage_sale.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226979."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coffee_shop_pos_system_project:coffee_shop_pos_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4D1D90-B3B0-4E6B-9B75-C6A2C6FF6909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%206.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226979",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226979",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%206.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.226979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2215",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T10:15:07.803",
      "lastModified" : "2024-11-21T07:58:10.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Campcodes Coffee Shop POS System 1.0. Affected is an unknown function of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226980."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coffee_shop_pos_system_project:coffee_shop_pos_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4D1D90-B3B0-4E6B-9B75-C6A2C6FF6909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%207.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226980",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.226980",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%207.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.226980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2216",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T11:15:06.933",
      "lastModified" : "2024-11-21T07:58:10.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in Campcodes Coffee Shop POS System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument firstname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226981 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coffee_shop_pos_system_project:coffee_shop_pos_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F4D1D90-B3B0-4E6B-9B75-C6A2C6FF6909"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%208.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226981",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.226981",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%208.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.226981",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2217",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T11:15:07.003",
      "lastModified" : "2024-11-21T07:58:10.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester Task Reminder System 1.0. This affects an unknown part of the file /admin/reminders/manage_reminder.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226983."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:task_reminder_system_project:task_reminder_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2D793D-38A9-47EE-A7AE-7DAE3441BBB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Task%20Reminder%20System/Task%20Reminder%20System%20-%20vuln%202.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226983",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.226983",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Task%20Reminder%20System/Task%20Reminder%20System%20-%20vuln%202.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.226983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2218",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T11:15:07.060",
      "lastModified" : "2024-11-21T07:58:10.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Task Reminder System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226984."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:task_reminder_system_project:task_reminder_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2D793D-38A9-47EE-A7AE-7DAE3441BBB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Task%20Reminder%20System/Task%20Reminder%20System%20-%20vuln%203.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226984",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.226984",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Task%20Reminder%20System/Task%20Reminder%20System%20-%20vuln%203.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.226984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2219",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T11:15:07.113",
      "lastModified" : "2024-11-21T07:58:10.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Task Reminder System 1.0 and classified as problematic. This issue affects some unknown processing of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226985 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:task_reminder_system_project:task_reminder_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2D793D-38A9-47EE-A7AE-7DAE3441BBB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Task%20Reminder%20System/Task%20Reminder%20System%20-%20vuln%204.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226985",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.226985",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Task%20Reminder%20System/Task%20Reminder%20System%20-%20vuln%204.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.226985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T12:15:07.457",
      "lastModified" : "2025-02-05T20:15:36.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Progress Flowmon before 12.2.0, an application endpoint failed to sanitize user-supplied input. A threat actor could leverage a reflected XSS vulnerability to execute arbitrary code within the context of a Flowmon user's web browser."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:progress:flowmon_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.2.0",
            "matchCriteriaId" : "F58082C5-2884-4D77-AF1B-34530534B121"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.kemptechnologies.com/hc/en-us/articles/12736934205837",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.flowmon.com/en",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://support.kemptechnologies.com/hc/en-us/articles/12736934205837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.flowmon.com/en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T12:15:07.493",
      "lastModified" : "2025-02-05T15:15:16.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Progress Flowmon Packet Investigator before 12.1.0, a Flowmon user with access to Flowmon Packet Investigator could leverage a path-traversal vulnerability to retrieve files on the Flowmon appliance's local filesystem."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:flowmon_packet_investigator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1.0",
            "matchCriteriaId" : "0B83AA65-AC3A-49FD-8361-6F25729E1A2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.kemptechnologies.com/hc/en-us/articles/12737582619789",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.flowmon.com/en",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://support.kemptechnologies.com/hc/en-us/articles/12737582619789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.flowmon.com/en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2220",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T12:15:07.533",
      "lastModified" : "2024-11-21T07:58:11.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Dream Technology mica up to 3.0.5. It has been classified as problematic. Affected is an unknown function of the component Form Object Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB-226986 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dreamlu:mica:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.0.5",
            "matchCriteriaId" : "B59BA6E7-5DD6-4D8F-B4FB-568E2CB3E60A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/596392912/mica/issues/I6TGJD",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226986",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.226986",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gitee.com/596392912/mica/issues/I6TGJD",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.226986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.226986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2226",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-04-21T12:15:07.590",
      "lastModified" : "2024-11-21T07:58:11.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to insufficient validation in the PE and OLE parsers in Rapid7's Velociraptor versions earlier than 0.6.8 allows attacker to crash Velociraptor during parsing of maliciously malformed files. \n\nFor this attack to succeed, the attacker needs to be able to introduce malicious files to the system at the same time that Velociraptor attempts to collect any artifacts that attempt to parse PE files, Authenticode signatures, or OLE files. After crashing, the Velociraptor service will restart and it will still be possible to collect other artifacts.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@rapid7.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.8",
            "matchCriteriaId" : "D47AC76F-929D-4745-8D21-1E519BD53EF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Velocidex/velociraptor",
        "source" : "cve@rapid7.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Velocidex/velociraptor",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2227",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-21T13:15:07.120",
      "lastModified" : "2024-11-21T07:58:11.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modoboa:modoboa:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "EDF096DF-1D51-43ED-9F11-D69473204DEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modoboa/modoboa/commit/7bcd3f6eb264d4e3e01071c97c2bac51cdd6fe97",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/351f9055-2008-4af0-b820-01ff66678bf3",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modoboa/modoboa/commit/7bcd3f6eb264d4e3e01071c97c2bac51cdd6fe97",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/351f9055-2008-4af0-b820-01ff66678bf3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2228",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-21T13:15:07.203",
      "lastModified" : "2024-11-21T07:58:11.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:modoboa:modoboa:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "EDF096DF-1D51-43ED-9F11-D69473204DEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/modoboa/modoboa/commit/5d886f3d06373d2c3292911bac0772bcd5102343",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/619fb490-69ad-4a2a-b686-4c42a62404a9",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/modoboa/modoboa/commit/5d886f3d06373d2c3292911bac0772bcd5102343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/619fb490-69ad-4a2a-b686-4c42a62404a9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29575",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T14:15:07.373",
      "lastModified" : "2025-02-04T22:15:39.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axiosys:bento4:1.6.0-639:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A003FBD1-339C-409D-A304-7FEE97E23250"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/842",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/Bento4/mp42aac/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/axiomatic-systems/Bento4/issues/842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/Bento4/mp42aac/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1998",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-04-21T15:15:07.080",
      "lastModified" : "2025-02-13T17:16:01.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp. We had noticed that on VMs of at least one major cloud provider, the kernel still left the victim process exposed to attacks in some cases even after enabling the spectre-BTI mitigation with prctl. The same behavior can be observed on a bare-metal machine when forcing the mitigation to IBRS on boot command line.\n\nThis happened because when plain IBRS was enabled (not enhanced IBRS), the kernel had some logic that determined that STIBP was not needed. The IBRS bit implicitly protects against cross-thread branch target injection. However, with legacy IBRS, the IBRS bit was cleared on returning to userspace, due to performance reasons, which disabled the implicit STIBP and left userspace threads vulnerable to cross-thread branch target injection against which STIBP protects."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1303"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3",
            "matchCriteriaId" : "3769AA63-B0A8-4EF1-96F9-6A6A6B305A02"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/google/security-research/security/advisories/GHSA-mj4w-6495-6crx",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6921ed9049bc7457f66c1596c5b78aec0dae4a9d",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://kernel.dance/#6921ed9049bc7457f66c1596c5b78aec0dae4a9d",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/google/security-research/security/advisories/GHSA-mj4w-6495-6crx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/6921ed9049bc7457f66c1596c5b78aec0dae4a9d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://kernel.dance/#6921ed9049bc7457f66c1596c5b78aec0dae4a9d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T15:15:07.160",
      "lastModified" : "2025-02-04T22:15:39.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "13.5.0",
            "matchCriteriaId" : "DC474569-D3BC-4BAF-B1AD-FDA7A1DF3E4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172059/Piwigo-13.5.0-SQL-Injection.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Apr/13",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gist.github.com/rodnt/a190d14d1715890d8df19bad58b90693",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://piwigo.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tempest.com.br",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172059/Piwigo-13.5.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/Apr/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gist.github.com/rodnt/a190d14d1715890d8df19bad58b90693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://piwigo.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tempest.com.br",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T15:15:07.207",
      "lastModified" : "2025-02-05T16:15:37.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:r200v100r004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F8C573-14D9-4500-B579-A9E2304E907F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10ECE46-86C7-480C-BBA5-FA7A00286A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/H1IFt1Jgn",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/H1IFt1Jgn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T15:15:07.260",
      "lastModified" : "2025-02-05T16:15:37.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID interface at /goform/aspForm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:r200v100r004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F8C573-14D9-4500-B579-A9E2304E907F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10ECE46-86C7-480C-BBA5-FA7A00286A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/rk1uu20Jh",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/rk1uu20Jh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T15:15:07.310",
      "lastModified" : "2025-02-05T16:15:37.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /goform/aspForm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:r200v100r004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F8C573-14D9-4500-B579-A9E2304E907F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10ECE46-86C7-480C-BBA5-FA7A00286A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/rk-6aRRyn",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/rk-6aRRyn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T15:15:07.353",
      "lastModified" : "2025-02-05T16:15:37.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the SetMobileAPInfoById interface at /goform/aspForm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:r200v100r004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F8C573-14D9-4500-B579-A9E2304E907F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10ECE46-86C7-480C-BBA5-FA7A00286A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/Ski-S20J2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/Ski-S20J2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29909",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T15:15:07.403",
      "lastModified" : "2025-02-05T16:15:37.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:r200v100r004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F8C573-14D9-4500-B579-A9E2304E907F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10ECE46-86C7-480C-BBA5-FA7A00286A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/r1FC0AAy2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/r1FC0AAy2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T15:15:07.453",
      "lastModified" : "2025-02-05T17:15:19.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:r200v100r004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F8C573-14D9-4500-B579-A9E2304E907F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10ECE46-86C7-480C-BBA5-FA7A00286A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/S1aGs1Jl2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/S1aGs1Jl2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T15:15:07.500",
      "lastModified" : "2025-02-05T17:15:19.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:r200v100r004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F8C573-14D9-4500-B579-A9E2304E907F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10ECE46-86C7-480C-BBA5-FA7A00286A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/SyTaRoCJn",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/SyTaRoCJn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T15:15:07.547",
      "lastModified" : "2025-02-05T17:15:20.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R200 R200V100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:r200v100r004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F8C573-14D9-4500-B579-A9E2304E907F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10ECE46-86C7-480C-BBA5-FA7A00286A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/S1TusiR1n",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/S1TusiR1n",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T15:15:07.593",
      "lastModified" : "2025-02-05T15:15:18.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:r200v100r004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F8C573-14D9-4500-B579-A9E2304E907F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10ECE46-86C7-480C-BBA5-FA7A00286A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/HyvnMn013",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/HyvnMn013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T15:15:07.643",
      "lastModified" : "2025-02-05T15:15:19.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:r200v100r004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F8C573-14D9-4500-B579-A9E2304E907F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10ECE46-86C7-480C-BBA5-FA7A00286A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/H1Cn2sAk3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/H1Cn2sAk3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T15:15:07.687",
      "lastModified" : "2025-02-05T20:15:36.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via CMD parameter at /goform/aspForm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:r200v100r004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F8C573-14D9-4500-B579-A9E2304E907F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10ECE46-86C7-480C-BBA5-FA7A00286A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/HJBc2lyl2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/HJBc2lyl2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T15:15:07.730",
      "lastModified" : "2025-02-05T20:15:36.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:r200v100r004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F8C573-14D9-4500-B579-A9E2304E907F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10ECE46-86C7-480C-BBA5-FA7A00286A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/rkpbC1Jgh",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/rkpbC1Jgh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T15:15:07.777",
      "lastModified" : "2025-02-05T16:15:37.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via go parameter at /goform/aspForm."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:r200v100r004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8F8C573-14D9-4500-B579-A9E2304E907F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:h3c:magic_r200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A10ECE46-86C7-480C-BBA5-FA7A00286A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%400dayResearch/rJJzEg1e3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%400dayResearch/rJJzEg1e3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2231",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-21T15:15:07.823",
      "lastModified" : "2024-11-21T07:58:12.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in MAXTECH MAX-G866ac 0.4.1_TBRO_20160314. This affects an unknown part of the component Remote Management. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227001 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:max-tech:max-g866ac_firmware:0.4.1_tbro_20160314:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2562776B-ADD8-4D21-A693-CA8C2F33652C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:max-tech:max-g866ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EF40D08-D8C7-48B0-9F57-E0CBC7E8A9A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.227001",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227001",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://youtu.be/fikdcK_xlS8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://youtu.be/fikdcK_xlS8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2139",
      "sourceIdentifier" : "3DS.Information-Security@3ds.com",
      "published" : "2023-04-21T16:15:07.313",
      "lastModified" : "2024-11-21T07:58:00.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nA reflected Cross-site Scripting (XSS) Vulnerability in DELMIA Apriso Release 2017 through Release 2022 allows an attacker to execute arbitrary script code.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3DS.Information-Security@3ds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "3DS.Information-Security@3ds.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:delmia_apriso:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "release_2017",
            "versionEndIncluding" : "release_2022",
            "matchCriteriaId" : "3D4FABCD-8CCB-4570-A1B8-83134691179C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.3ds.com/vulnerability/advisories",
        "source" : "3DS.Information-Security@3ds.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.3ds.com/vulnerability/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2140",
      "sourceIdentifier" : "3DS.Information-Security@3ds.com",
      "published" : "2023-04-21T16:15:07.380",
      "lastModified" : "2024-11-21T07:58:00.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Server-Side Request Forgery vulnerability in DELMIA Apriso Release  2017 through Release 2022 \n\ncould allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3DS.Information-Security@3ds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "3DS.Information-Security@3ds.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:delmia_apriso:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2017",
            "versionEndIncluding" : "2022",
            "matchCriteriaId" : "C52EE2E6-9E32-4D89-B848-E187676E92B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.3ds.com/vulnerability/advisories",
        "source" : "3DS.Information-Security@3ds.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.3ds.com/vulnerability/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2141",
      "sourceIdentifier" : "3DS.Information-Security@3ds.com",
      "published" : "2023-04-21T16:15:07.443",
      "lastModified" : "2024-11-21T07:58:00.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execution.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "3DS.Information-Security@3ds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "3DS.Information-Security@3ds.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3ds:delmia_apriso:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2017",
            "versionEndIncluding" : "2022",
            "matchCriteriaId" : "C52EE2E6-9E32-4D89-B848-E187676E92B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.3ds.com/vulnerability/advisories",
        "source" : "3DS.Information-Security@3ds.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.3ds.com/vulnerability/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30798",
      "sourceIdentifier" : "disclosure@vulncheck.com",
      "published" : "2023-04-21T16:15:07.510",
      "lastModified" : "2024-11-21T08:00:55.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There MultipartParser usage in Encode's Starlette python framework before versions 0.25.0 allows an unauthenticated and remote attacker to specify any number of form fields or files which can cause excessive memory usage resulting in denial of service of the HTTP service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "disclosure@vulncheck.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@vulncheck.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:encode:starlette:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.25.0",
            "matchCriteriaId" : "B31CE462-E658-420A-96B2-76266F0DC699"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/encode/starlette/commit/8c74c2c8dba7030154f8af18e016136bea1938fa",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/encode/starlette/security/advisories/GHSA-74m5-2c7w-9w3x",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://vulncheck.com/advisories/starlette-multipartparser-dos",
        "source" : "disclosure@vulncheck.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/encode/starlette/commit/8c74c2c8dba7030154f8af18e016136bea1938fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/encode/starlette/security/advisories/GHSA-74m5-2c7w-9w3x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://vulncheck.com/advisories/starlette-multipartparser-dos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26556",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T18:15:07.927",
      "lastModified" : "2025-02-05T15:15:17.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication implementation in Go crypto/elliptic, which is not constant time (there is an if statement in a loop). One leak is in ecdsa/keygen/round_2.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iofinnet:tss-lib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "5A407DB0-D561-404E-941A-EF988ABB8BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IoFinnet/tss-lib/releases/tag/v2.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/bnb-chain/tss-lib/tree/v1.3.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gitlab.com/thorchain/tss/tss-lib/-/tags/v0.1.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://medium.com/%40iofinnet/security-disclosure-for-ecdsa-and-eddsa-threshold-signature-schemes-4e969af7155b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/IoFinnet/tss-lib/releases/tag/v2.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/bnb-chain/tss-lib/tree/v1.3.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gitlab.com/thorchain/tss/tss-lib/-/tags/v0.1.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://medium.com/%40iofinnet/security-disclosure-for-ecdsa-and-eddsa-threshold-signature-schemes-4e969af7155b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26557",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T18:15:07.990",
      "lastModified" : "2025-02-05T15:15:17.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "io.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing side-channel attack because it relies on Go big.Int, which is not constant time for Cmp, modular exponentiation, or modular inverse. An example leak is in crypto/paillier/paillier.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iofinnet:tss-lib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "5A407DB0-D561-404E-941A-EF988ABB8BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IoFinnet/tss-lib/releases/tag/v2.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/bnb-chain/tss-lib/tree/v1.3.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gitlab.com/thorchain/tss/tss-lib/-/tags/v0.1.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://medium.com/%40iofinnet/security-disclosure-for-ecdsa-and-eddsa-threshold-signature-schemes-4e969af7155b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/IoFinnet/tss-lib/releases/tag/v2.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/bnb-chain/tss-lib/tree/v1.3.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gitlab.com/thorchain/tss/tss-lib/-/tags/v0.1.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://medium.com/%40iofinnet/security-disclosure-for-ecdsa-and-eddsa-threshold-signature-schemes-4e969af7155b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-21T20:15:07.620",
      "lastModified" : "2025-02-05T16:15:38.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:powerjob:powerjob:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C125B3CC-32C1-4A5A-9261-C72FA03EADE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PowerJob/PowerJob/issues/588",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://iotaa.cn/articles/62",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/PowerJob/PowerJob/issues/588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://iotaa.cn/articles/62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30618",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-21T20:15:07.767",
      "lastModified" : "2024-11-21T08:00:31.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kitchen-Terraform provides a set of Test Kitchen plugins which enable the use of Test Kitchen to converge a Terraform configuration and verify the resulting infrastructure systems with InSpec controls. Kitchen-Terraform v7.0.0 introduced a regression which caused all Terraform output values, including sensitive values, to be printed at the `info` logging level during the `kitchen converge` action. Prior to v7.0.0, the output values were printed at the `debug` level to avoid writing sensitive values to the terminal by default. An attacker would need access to the local machine in order to gain access to these logs during an operation. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kitchen-terraform_project:kitchen-terraform:7.0.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "D4E809CD-95D1-4ECB-805D-68D240C865E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/newcontext-oss/kitchen-terraform/commit/3d20d60e7a891e2dd747df995a31226fa0b4ac48",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/newcontext-oss/kitchen-terraform/security/advisories/GHSA-65g2-x53q-cmf6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/newcontext-oss/kitchen-terraform/commit/3d20d60e7a891e2dd747df995a31226fa0b4ac48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/newcontext-oss/kitchen-terraform/security/advisories/GHSA-65g2-x53q-cmf6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30620",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-21T21:15:08.053",
      "lastModified" : "2024-11-21T08:00:31.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mindsdb is a Machine Learning platform to help developers build AI solutions. In affected versions an unsafe extraction is being performed using `tarfile.extractall()` from a remotely retrieved tarball. Which may lead to the writing of the extracted files to an unintended location. Sometimes, the vulnerability is called a TarSlip or a ZipSlip variant. An attacker may leverage this vulnerability to overwrite any local file which the server process has access to. There is no risk of file exposure with this vulnerability. This issue has been addressed in release `23.2.1.0 `. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mindsdb:mindsdb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "23.1.5.0",
            "matchCriteriaId" : "501BDCF9-A4E3-40F3-8408-1D1CA91B6D51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mindsdb/mindsdb/commit/4419b0f0019c000db390b54d8b9d06e1d3670039",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mindsdb/mindsdb/releases/tag/v23.2.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mindsdb/mindsdb/security/advisories/GHSA-2g5w-29q9-w6hx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/mindsdb/mindsdb/commit/4419b0f0019c000db390b54d8b9d06e1d3670039",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/mindsdb/mindsdb/releases/tag/v23.2.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/mindsdb/mindsdb/security/advisories/GHSA-2g5w-29q9-w6hx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30621",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-21T21:15:08.147",
      "lastModified" : "2024-11-21T08:00:31.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gipsy is a multi-purpose discord bot which aim to be as modular and user-friendly as possible. In versions prior to 1.3 users can run command on the host machine with sudoer permission. The `!ping` command when provided with an IP or hostname used to run a bash `ping <IP>` without verification that the IP or hostname was legitimate. This command was executed with root permissions and may lead to arbitrary command injection on the host server. Users are advised to upgrade. There are no known workarounds for this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gipsy_project:gipsy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "BE36F980-BC02-4443-9FE1-2B1DE81E4934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Curiosity-org/Gipsy/security/advisories/GHSA-6cw6-r8pg-j7wh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Gunivers/Gipsy/pull/24",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Gunivers/Gipsy/pull/24/commits/716818e967069f144aae66d51464b237c22b6cdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Curiosity-org/Gipsy/security/advisories/GHSA-6cw6-r8pg-j7wh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Gunivers/Gipsy/pull/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Gunivers/Gipsy/pull/24/commits/716818e967069f144aae66d51464b237c22b6cdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2118",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-04-21T22:15:07.307",
      "lastModified" : "2025-02-04T20:15:46.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and download diagnostic files via specific endpoints."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.1.6.0",
            "matchCriteriaId" : "0A3D4219-1D06-4464-963E-33D0E67D4B15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0010",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29019",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-21T23:15:20.197",
      "lastModified" : "2024-11-21T07:56:24.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "@fastify/passport is a port of passport authentication library for the Fastify ecosystem. Applications using `@fastify/passport` in affected versions for user authentication, in combination with `@fastify/session` as the underlying session management mechanism, are vulnerable to session fixation attacks from network and same-site attackers. fastify applications rely on the `@fastify/passport` library for user authentication. The login and user validation are performed by the `authenticate` function. When executing this function, the `sessionId` is preserved between the pre-login and the authenticated session. Network and same-site attackers can hijack the victim's session by tossing a valid `sessionId` cookie in the victim's browser and waiting for the victim to log in on the website. As a solution, newer versions of `@fastify/passport` regenerate `sessionId` upon login, preventing the attacker-controlled pre-session cookie from being upgraded to an authenticated session. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastify:passport:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "3F071BA9-FBA0-4860-9B99-9D48230422D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastify:passport:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.3.0",
            "matchCriteriaId" : "341AD078-D84A-45B6-876F-7FA286EECAAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fastify/fastify-passport/commit/43c82c321db58ea3e375dd475de60befbfcf2a11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fastify/fastify-passport/security/advisories/GHSA-4m3m-ppvx-xgw9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://owasp.org/www-community/attacks/Session_fixation",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/fastify/fastify-passport/commit/43c82c321db58ea3e375dd475de60befbfcf2a11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fastify/fastify-passport/security/advisories/GHSA-4m3m-ppvx-xgw9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://owasp.org/www-community/attacks/Session_fixation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29020",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-21T23:15:20.267",
      "lastModified" : "2024-11-21T07:56:24.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "@fastify/passport is a port of passport authentication library for the Fastify ecosystem. The CSRF (Cross-Site Request Forger) protection enforced by the `@fastify/csrf-protection` library, when combined with `@fastify/passport` in affected versions, can be bypassed by network and same-site attackers. `fastify/csrf-protection` implements the synchronizer token pattern (using plugins `@fastify/session` and `@fastify/secure-session`) by storing a random value used for CSRF token generation in the `_csrf` attribute of a user's session. The `@fastify/passport` library does not clear the session object upon authentication, preserving the `_csrf` attribute between pre-login and authenticated sessions. Consequently, CSRF tokens generated before authentication are still valid. Network and same-site attackers can thus obtain a CSRF token for their pre-session, fixate that pre-session in the victim's browser via cookie tossing, and then perform a CSRF attack after the victim authenticates. As a solution, newer versions of `@fastify/passport` include the configuration options: `clearSessionOnLogin (default: true)` and `clearSessionIgnoreFields (default: ['passport', 'session'])` to clear all the session attributes by default, preserving those explicitly defined in `clearSessionIgnoreFields`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-384"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastify:passport:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.1.0",
            "matchCriteriaId" : "3F071BA9-FBA0-4860-9B99-9D48230422D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastify:passport:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.3.0",
            "matchCriteriaId" : "341AD078-D84A-45B6-876F-7FA286EECAAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html#synchronizer-token-pattern",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/fastify/fastify-passport/commit/07c90feab9cba0dd4779e47cfb0717a7e2f01d3d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fastify/fastify-passport/security/advisories/GHSA-2ccf-ffrj-m4qw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://owasp.org/www-community/attacks/csrf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html#synchronizer-token-pattern",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/fastify/fastify-passport/commit/07c90feab9cba0dd4779e47cfb0717a7e2f01d3d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/fastify/fastify-passport/security/advisories/GHSA-2ccf-ffrj-m4qw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://owasp.org/www-community/attacks/csrf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2240",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-22T01:15:08.147",
      "lastModified" : "2024-11-21T07:58:13.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.4",
            "matchCriteriaId" : "E503E14E-D4EE-4F4C-8431-DE2EB7A58ABA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/microweber/microweber/commit/f43d5b767ad5814fc5f84bbaf0b77996262f3a4b",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/8f595559-7b4b-4b00-954c-7a627766e203",
        "source" : "security@huntr.dev",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/microweber/microweber/commit/f43d5b767ad5814fc5f84bbaf0b77996262f3a4b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/8f595559-7b4b-4b00-954c-7a627766e203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0184",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:08.817",
      "lastModified" : "2024-11-21T07:36:42.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler which may lead to denial of service, escalation of privileges, information disclosure, and data tampering."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "470",
            "versionEndExcluding" : "470.182.03",
            "matchCriteriaId" : "9D77307A-16B0-4C98-A8AC-ECBFB2EC434C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "515",
            "versionEndExcluding" : "515.105.01",
            "matchCriteriaId" : "2684008A-1AAD-445D-BBC1-7073FDD5442A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "525",
            "versionEndExcluding" : "525.105.17",
            "matchCriteriaId" : "D6836303-BA7D-4E65-948B-2BC67CA635F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "530",
            "versionEndExcluding" : "530.41.03",
            "matchCriteriaId" : "9C654F1D-85AD-4838-AA0B-D1FAEAC6FF71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:geforce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DE5CC2-3787-4605-8EFA-77590E36E960"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:nvs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333646B0-AAD5-4DD7-8940-6334D0A8E77C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:quadro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DB9FB5-E115-4E96-98F8-3FAFAC120E98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C63EA1-8719-4F5C-922A-C77ED4CEF7C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "450.236.01",
            "matchCriteriaId" : "7906887A-3589-422F-BCC0-0547DEA150A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:tesla:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D135086F-CA5E-4242-ACBA-C3AC82F4BE03"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "454.14",
            "matchCriteriaId" : "2E2902D2-633E-4065-ABD5-A7A2CBD9965E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:tesla:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D135086F-CA5E-4242-ACBA-C3AC82F4BE03"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "470",
            "versionEndExcluding" : "474.30",
            "matchCriteriaId" : "122A3080-A6A7-4F69-8A11-2247C56E3512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "515",
            "versionEndExcluding" : "518.03",
            "matchCriteriaId" : "ABFB6AEB-975B-488F-B490-7535D1F04075"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:nvs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333646B0-AAD5-4DD7-8940-6334D0A8E77C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:quadro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DB9FB5-E115-4E96-98F8-3FAFAC120E98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C63EA1-8719-4F5C-922A-C77ED4CEF7C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "525",
            "versionEndExcluding" : "528.89",
            "matchCriteriaId" : "0C4C06DD-AF93-4497-8712-D8115842DE59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "530",
            "versionEndExcluding" : "531.41",
            "matchCriteriaId" : "6D446FAB-5082-43E7-A4E0-D35B3E2E3BB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:studio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1ED5DE2-7677-4F38-8177-3BF0B3D03A09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "470",
            "versionEndExcluding" : "474.30",
            "matchCriteriaId" : "122A3080-A6A7-4F69-8A11-2247C56E3512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "530",
            "versionEndExcluding" : "531.41",
            "matchCriteriaId" : "6D446FAB-5082-43E7-A4E0-D35B3E2E3BB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:geforce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DE5CC2-3787-4605-8EFA-77590E36E960"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0190",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:08.897",
      "lastModified" : "2024-11-21T07:36:43.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference may lead to denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "470",
            "versionEndExcluding" : "470.182.03",
            "matchCriteriaId" : "9D77307A-16B0-4C98-A8AC-ECBFB2EC434C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "515",
            "versionEndExcluding" : "515.105.01",
            "matchCriteriaId" : "2684008A-1AAD-445D-BBC1-7073FDD5442A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "525",
            "versionEndExcluding" : "525.105.17",
            "matchCriteriaId" : "D6836303-BA7D-4E65-948B-2BC67CA635F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "530",
            "versionEndExcluding" : "530.41.03",
            "matchCriteriaId" : "9C654F1D-85AD-4838-AA0B-D1FAEAC6FF71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:geforce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DE5CC2-3787-4605-8EFA-77590E36E960"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:nvs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333646B0-AAD5-4DD7-8940-6334D0A8E77C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:quadro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DB9FB5-E115-4E96-98F8-3FAFAC120E98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C63EA1-8719-4F5C-922A-C77ED4CEF7C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "450.236.01",
            "matchCriteriaId" : "7906887A-3589-422F-BCC0-0547DEA150A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:tesla:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D135086F-CA5E-4242-ACBA-C3AC82F4BE03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0199",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:08.970",
      "lastModified" : "2024-11-21T07:36:44.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can lead to denial of service and data tampering."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "470",
            "versionEndExcluding" : "470.182.03",
            "matchCriteriaId" : "9D77307A-16B0-4C98-A8AC-ECBFB2EC434C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "515",
            "versionEndExcluding" : "515.105.01",
            "matchCriteriaId" : "2684008A-1AAD-445D-BBC1-7073FDD5442A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "525",
            "versionEndExcluding" : "525.105.17",
            "matchCriteriaId" : "D6836303-BA7D-4E65-948B-2BC67CA635F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "530",
            "versionEndExcluding" : "530.41.03",
            "matchCriteriaId" : "9C654F1D-85AD-4838-AA0B-D1FAEAC6FF71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:geforce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DE5CC2-3787-4605-8EFA-77590E36E960"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:nvs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333646B0-AAD5-4DD7-8940-6334D0A8E77C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:quadro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DB9FB5-E115-4E96-98F8-3FAFAC120E98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C63EA1-8719-4F5C-922A-C77ED4CEF7C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "450.236.01",
            "matchCriteriaId" : "7906887A-3589-422F-BCC0-0547DEA150A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:tesla:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D135086F-CA5E-4242-ACBA-C3AC82F4BE03"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "454.14",
            "matchCriteriaId" : "2E2902D2-633E-4065-ABD5-A7A2CBD9965E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:tesla:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D135086F-CA5E-4242-ACBA-C3AC82F4BE03"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "470",
            "versionEndExcluding" : "474.30",
            "matchCriteriaId" : "122A3080-A6A7-4F69-8A11-2247C56E3512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "515",
            "versionEndExcluding" : "518.03",
            "matchCriteriaId" : "ABFB6AEB-975B-488F-B490-7535D1F04075"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:nvs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333646B0-AAD5-4DD7-8940-6334D0A8E77C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:quadro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DB9FB5-E115-4E96-98F8-3FAFAC120E98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C63EA1-8719-4F5C-922A-C77ED4CEF7C7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "525",
            "versionEndExcluding" : "528.89",
            "matchCriteriaId" : "0C4C06DD-AF93-4497-8712-D8115842DE59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "530",
            "versionEndExcluding" : "531.41",
            "matchCriteriaId" : "6D446FAB-5082-43E7-A4E0-D35B3E2E3BB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:studio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1ED5DE2-7677-4F38-8177-3BF0B3D03A09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "470",
            "versionEndExcluding" : "474.30",
            "matchCriteriaId" : "122A3080-A6A7-4F69-8A11-2247C56E3512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "530",
            "versionEndExcluding" : "531.41",
            "matchCriteriaId" : "6D446FAB-5082-43E7-A4E0-D35B3E2E3BB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nvidia:geforce:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DE5CC2-3787-4605-8EFA-77590E36E960"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0200",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:09.057",
      "lastModified" : "2024-11-21T07:36:44.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffers end, which may lead to code execution, escalation of privileges, denial of service, and information disclosure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-788"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:bmc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.08.00",
            "matchCriteriaId" : "F653F2DA-C492-4522-A99A-689C55DC7EC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:dgx-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2578180E-CD9E-4D45-B092-CEFDC3653878"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5449",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0201",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:09.130",
      "lastModified" : "2024-11-21T07:36:44.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code execution, denial of service, compromised integrity, and information disclosure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-118"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:bmc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.08.00",
            "matchCriteriaId" : "F653F2DA-C492-4522-A99A-689C55DC7EC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:dgx-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2578180E-CD9E-4D45-B092-CEFDC3653878"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5449",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0202",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:09.203",
      "lastModified" : "2024-11-21T07:36:44.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs. A successful exploit of this vulnerability may lead to denial of service, escalation of privileges, and information disclosure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:dgx_a100_firmware:*:*:*:*:sbios:*:*:*",
            "versionEndExcluding" : "1.18",
            "matchCriteriaId" : "186BD1FB-388F-4AB7-AEC1-655093C79F53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:dgx_a100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8807CB65-5F49-42E8-B5D8-36943418ADB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5449",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0203",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:09.270",
      "lastModified" : "2024-11-21T07:36:44.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1220"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:connectx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "35.1012",
            "matchCriteriaId" : "22D68BAB-D2DD-4997-9881-15F3243A9D7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:connectx-5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85FBF3A9-B6C3-4705-A2E1-2503E7A6725D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:connectx-6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8421C891-26D3-4845-A20A-80E4769D4E25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:connectx-6-dx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAADC39-548E-44E4-AD25-74A7CEBCC2EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5459",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0204",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:09.330",
      "lastModified" : "2024-11-21T07:36:44.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of exceptional conditions, which may lead to denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:connectx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "35.1012",
            "matchCriteriaId" : "22D68BAB-D2DD-4997-9881-15F3243A9D7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:connectx-5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85FBF3A9-B6C3-4705-A2E1-2503E7A6725D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:connectx-6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8421C891-26D3-4845-A20A-80E4769D4E25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:connectx-6-dx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAADC39-548E-44E4-AD25-74A7CEBCC2EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5459",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0205",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:09.387",
      "lastModified" : "2024-11-21T07:36:44.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1220"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:connectx_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "35.1012",
            "matchCriteriaId" : "22D68BAB-D2DD-4997-9881-15F3243A9D7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:connectx-5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85FBF3A9-B6C3-4705-A2E1-2503E7A6725D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:connectx-6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8421C891-26D3-4845-A20A-80E4769D4E25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:connectx-6-dx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BAADC39-548E-44E4-AD25-74A7CEBCC2EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5459",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0206",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:09.443",
      "lastModified" : "2024-11-21T07:36:44.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API. A successful exploit of this vulnerability may lead to denial of service, escalation of privileges, and information disclosure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:dgx_a100_firmware:*:*:*:*:sbios:*:*:*",
            "versionEndExcluding" : "1.18",
            "matchCriteriaId" : "186BD1FB-388F-4AB7-AEC1-655093C79F53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:dgx_a100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8807CB65-5F49-42E8-B5D8-36943418ADB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5449",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0207",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:09.497",
      "lastModified" : "2024-11-21T07:36:44.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged code. A successful exploit of this vulnerability may lead to denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:sbios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.33",
            "matchCriteriaId" : "BE8866CA-D6E6-4072-8B52-48169CECF33A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:dgx-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2578180E-CD9E-4D45-B092-CEFDC3653878"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5449",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0209",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:09.557",
      "lastModified" : "2024-11-21T07:36:45.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the code executed by SSA is missing, which may lead to arbitrary code execution, denial of service, escalation of privileges assisted by a firmware implant, information disclosure assisted by a firmware implant, data tampering, and SecureBoot bypass."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:sbios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52w_3a13",
            "matchCriteriaId" : "59553149-0C7F-4AF7-9598-2DB25AACD5A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:dgx-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B88743-AF2B-4EB6-B991-85D58C654678"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5458",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25505",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:10.043",
      "lastModified" : "2024-11-21T07:49:37.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:bmc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.39.30",
            "matchCriteriaId" : "44CE27BE-6741-415D-9AEB-A2D16FC55782"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:dgx-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B88743-AF2B-4EB6-B991-85D58C654678"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5458",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25506",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:10.107",
      "lastModified" : "2024-11-21T07:49:37.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer, which may lead to code execution, escalation of privileges, denial of service and information disclosure. The scope of the impact of this vulnerability can extend to other components."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-788"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:sbios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52w_3a13",
            "matchCriteriaId" : "59553149-0C7F-4AF7-9598-2DB25AACD5A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:dgx-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B88743-AF2B-4EB6-B991-85D58C654678"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5458",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25507",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:10.167",
      "lastModified" : "2024-11-21T07:49:38.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, and data tampering."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:bmc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.39.30",
            "matchCriteriaId" : "44CE27BE-6741-415D-9AEB-A2D16FC55782"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:dgx-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B88743-AF2B-4EB6-B991-85D58C654678"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5458",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25508",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:10.230",
      "lastModified" : "2024-11-21T07:49:38.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, and data tampering."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:bmc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.39.30",
            "matchCriteriaId" : "44CE27BE-6741-415D-9AEB-A2D16FC55782"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:dgx-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B88743-AF2B-4EB6-B991-85D58C654678"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5458",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25509",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:10.293",
      "lastModified" : "2024-11-21T07:49:38.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:sbios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "52w_3a13",
            "matchCriteriaId" : "59553149-0C7F-4AF7-9598-2DB25AACD5A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:dgx-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B88743-AF2B-4EB6-B991-85D58C654678"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5458",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25510",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:10.413",
      "lastModified" : "2024-11-21T07:49:38.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump, where a local user running the tool against a malformed binary may cause a limited denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1.1",
            "matchCriteriaId" : "BF2583F9-0D2C-4CA2-BEAE-C8BF6B6AB0EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5456",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25511",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:10.550",
      "lastModified" : "2024-11-21T07:49:38.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump, where a division-by-zero error may enable a user to cause a crash, which may lead to a limited denial of service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1.1",
            "matchCriteriaId" : "BF2583F9-0D2C-4CA2-BEAE-C8BF6B6AB0EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5456",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25512",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:10.647",
      "lastModified" : "2024-11-21T07:49:38.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1.0",
            "matchCriteriaId" : "8C27D9F5-10BC-42E9-BA7D-3F4DE2845C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5456",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25513",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:10.720",
      "lastModified" : "2024-11-21T07:49:38.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0.1",
            "matchCriteriaId" : "6E87B6DC-602A-4E44-B30B-854E8D8C2971"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5456",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25514",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2023-04-22T03:15:10.787",
      "lastModified" : "2025-02-04T17:15:12.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@nvidia.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1.1",
            "matchCriteriaId" : "BF2583F9-0D2C-4CA2-BEAE-C8BF6B6AB0EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5456",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2241",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-22T16:15:42.050",
      "lastModified" : "2025-02-04T17:15:14.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0. Affected is the function readXRefStreamEntry of the file PdfXRefStreamParserObject.cpp. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as 535a786f124b739e3c857529cecc29e4eeb79778. It is recommended to apply a patch to fix this issue. VDB-227226 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podofo_project:podofo:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D2B6FCB-1882-4BAA-B8BE-25E150D012D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/podofo/podofo/commit/535a786f124b739e3c857529cecc29e4eeb79778",
        "source" : "cna@vuldb.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/podofo/podofo/files/11260976/poc-file.zip",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/podofo/podofo/issues/69",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227226",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227226",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/podofo/podofo/commit/535a786f124b739e3c857529cecc29e4eeb79778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/podofo/podofo/files/11260976/poc-file.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/podofo/podofo/issues/69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2242",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-22T16:15:42.157",
      "lastModified" : "2024-11-21T07:58:13.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component GET Parameter Handler. The manipulation of the argument c/s leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227227."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_computer_and_laptop_store:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284E8925-2C48-4D47-9A9E-67D70F61CB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/1GZt9MKB2K-nDrg0cnrnU6_z9wDd9xPE-YJbPV2Qgqg4/edit",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227227",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227227",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.google.com/document/d/1GZt9MKB2K-nDrg0cnrnU6_z9wDd9xPE-YJbPV2Qgqg4/edit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2239",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-22T17:15:07.067",
      "lastModified" : "2024-11-21T07:58:13.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-359"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.4",
            "matchCriteriaId" : "E503E14E-D4EE-4F4C-8431-DE2EB7A58ABA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/microweber/microweber/commit/b0644cb3411b36b6ccc2ff7cdf7af3fa49525baa",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/edeff16b-fc71-4e26-8d2d-dfe7bb5e7868",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/microweber/microweber/commit/b0644cb3411b36b6ccc2ff7cdf7af3fa49525baa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/edeff16b-fc71-4e26-8d2d-dfe7bb5e7868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2243",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-22T17:15:07.127",
      "lastModified" : "2024-11-21T07:58:13.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file users/registration.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227228."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:complaint_management_system_project:complaint_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37FB2709-4441-4348-A5AB-C7257108803E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/HibuMk/bug_report/blob/main/SQLi.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227228",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227228",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/HibuMk/bug_report/blob/main/SQLi.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2244",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-22T17:15:07.177",
      "lastModified" : "2024-11-21T07:58:13.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/update_status.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227229 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:online_eyewear_shop:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464A3580-D632-43EB-93EF-E2A1A5736F14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/T4y1oR/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227229",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227229",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/T4y1oR/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2245",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-22T17:15:07.227",
      "lastModified" : "2025-02-04T17:15:14.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditor/net/controller.ashx?action=catchimage. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227230 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hansuncms_project:hansuncms:1.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E189DF-ADAE-4250-9CE3-D58953B553C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MorStardust/hansuncmswebshell/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227230",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227230",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MorStardust/hansuncmswebshell/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227230",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1875",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-22T18:15:07.207",
      "lastModified" : "2024-11-21T07:40:04.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "653EC167-06FC-4D30-AAF8-B75F596519AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/dcf7dd43a3412aa951d7087b86a8b917fae2133a",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/39715aaf-e798-4c60-97c4-45f4f2cd5c61",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/dcf7dd43a3412aa951d7087b86a8b917fae2133a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/39715aaf-e798-4c60-97c4-45f4f2cd5c61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22698",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T10:15:07.473",
      "lastModified" : "2024-11-21T07:45:14.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Jason Bobich Theme Blvd Responsive Google Maps plugin <= 1.0.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theme_blvd_responsive_google_maps_project:theme_blvd_responsive_google_maps:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "41C1D34A-3F98-45E8-BB50-F87C9BD719A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/theme-blvd-responsive-google-maps/wordpress-theme-blvd-responsive-google-maps-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/theme-blvd-responsive-google-maps/wordpress-theme-blvd-responsive-google-maps-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22718",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T10:15:07.527",
      "lastModified" : "2024-11-21T07:45:17.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) vulnerability in Jason Lau User Meta Manager plugin <= 3.4.9 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:user_meta_manager_project:user_meta_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.5.0",
            "matchCriteriaId" : "09F2BF91-C8ED-4DB7-AF44-E4E70B810E1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/user-meta-manager/wordpress-user-meta-manager-plugin-3-4-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/user-meta-manager/wordpress-user-meta-manager-plugin-3-4-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24386",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T10:15:07.583",
      "lastModified" : "2024-11-21T07:47:45.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Karishma Arora AI Contact Us Form plugin <= 1.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ai_contact_us_form_project:ai_contact_us_form:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "BD140436-C13E-4172-97E7-B4C155B823A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/ai-contact-us/wordpress-ai-contact-us-form-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/ai-contact-us/wordpress-ai-contact-us-form-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24404",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T10:15:07.647",
      "lastModified" : "2024-11-21T07:47:47.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross-Site Scripting (XSS) vulnerability in VryaSage Marketing Performance plugin <= 2.0.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rarathemes:vryasage_marketing_performance:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "F07A0E8F-EA24-4937-8EAE-A1A955323009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/marketing-performance/wordpress-marketing-performance-plugin-2-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/marketing-performance/wordpress-marketing-performance-plugin-2-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23717",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T11:15:06.920",
      "lastModified" : "2024-11-21T07:46:43.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in George Gecewicz Portfolio Slideshow plugin <= 1.13.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:portfolio_slideshow_project:portfolio_slideshow:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.13.0",
            "matchCriteriaId" : "B5462585-EEA4-4CEF-B5FE-8CCD2D8F0CFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/portfolio-slideshow/wordpress-portfolio-slideshow-plugin-1-13-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/portfolio-slideshow/wordpress-portfolio-slideshow-plugin-1-13-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23806",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T11:15:06.987",
      "lastModified" : "2024-11-21T07:46:52.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Davinder Singh Custom Settings plugin <= 1.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress_custom_settings_project:wordpress_custom_settings:1.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "FCD78CE5-B925-4866-B450-4475F52CF427"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/custom-settings/wordpress-wordpress-custom-settings-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/custom-settings/wordpress-wordpress-custom-settings-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23816",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T11:15:07.047",
      "lastModified" : "2024-11-21T07:46:53.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Twardes Sitemap Index plugin <= 1.2.3 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sitemap_index_project:sitemap_index:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.3",
            "matchCriteriaId" : "2ECA6765-1971-4AF7-AACB-99BDB8C3AA3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/sitemap-index/wordpress-sitemap-index-plugin-1-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/sitemap-index/wordpress-sitemap-index-plugin-1-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23817",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T11:15:07.100",
      "lastModified" : "2024-11-21T07:46:53.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contrinbutor+) Cross-Site Scripting (XSS) vulnerability in WebArea | Vera Nedvyzhenko Simple PDF Viewer plugin <= 1.9 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_pdf_viewer_project:simple_pdf_viewer:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.9",
            "matchCriteriaId" : "29F010BB-8450-4084-81E6-0C514F19A31C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/simple-pdf-viewer/wordpress-simple-pdf-viewer-plugin-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/simple-pdf-viewer/wordpress-simple-pdf-viewer-plugin-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23827",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T11:15:07.150",
      "lastModified" : "2024-11-21T07:46:54.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Google Maps v3 Shortcode plugin <= 1.2.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google_maps_v3_shortcode_project:google_maps_v3_shortcode:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "B61B3E58-9D71-48EB-A79D-CC6A1E978F3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/google-maps-v3-shortcode/wordpress-google-maps-v3-shortcode-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/google-maps-v3-shortcode/wordpress-google-maps-v3-shortcode-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23832",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T11:15:07.207",
      "lastModified" : "2024-11-21T07:46:55.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in TC Ultimate WP Query Search Filter plugin <= 1.0.10 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ultimate_wp_query_search_filter_project:ultimate_wp_query_search_filter:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.10",
            "matchCriteriaId" : "1642121F-0B66-4124-ABEF-759B912D97F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/ultimate-wp-query-search-filter/wordpress-ultimate-wp-query-search-filter-plugin-1-0-10-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/ultimate-wp-query-search-filter/wordpress-ultimate-wp-query-search-filter-plugin-1-0-10-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25451",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T11:15:07.260",
      "lastModified" : "2024-11-21T07:49:32.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPChill CPO Content Types plugin <= 1.1.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpchill:cpo_content_types:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "BDC6FBBF-F059-426B-9F10-D20FC6647C08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/cpo-content-types/wordpress-cpo-content-types-plugin-1-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/cpo-content-types/wordpress-cpo-content-types-plugin-1-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27425",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T11:15:07.317",
      "lastModified" : "2024-11-21T07:52:53.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in James Irving-Swift Electric Studio Client Login plugin <= 0.8.1 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:electric_studio_client_login_project:electric_studio_client_login:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.8.1",
            "matchCriteriaId" : "A3247689-194C-46B6-8E44-7D340E5ED56E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/electric-studio-client-login/wordpress-electric-studio-client-login-plugin-0-8-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/electric-studio-client-login/wordpress-electric-studio-client-login-plugin-0-8-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27614",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T11:15:07.370",
      "lastModified" : "2024-11-21T07:53:16.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Ian Haycox Motor Racing League plugin <= 1.9.9 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:motor_racing_league_project:motor_racing_league:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.9.9",
            "matchCriteriaId" : "D8E2F63C-D97E-4F26-A343-7B41E46B0C84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/motor-racing-league/wordpress-motor-racing-league-plugin-1-9-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/motor-racing-league/wordpress-motor-racing-league-plugin-1-9-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22686",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T12:15:13.767",
      "lastModified" : "2024-11-21T07:45:13.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in TriniTronic Nice PayPal Button Lite plugin <= 1.3.5 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trinitronic:nice_paypal_button_lite:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.5",
            "matchCriteriaId" : "35D21048-984D-4EBF-9A89-5CF3D47CEDAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/nice-paypal-button-lite/wordpress-nice-paypal-button-lite-plugin-1-3-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/nice-paypal-button-lite/wordpress-nice-paypal-button-lite-plugin-1-3-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23879",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-23T12:15:13.817",
      "lastModified" : "2024-11-21T07:47:01.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Nicolas Zeh PHP Execution plugin <= 1.0.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php_execution_project:php_execution:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "384E1475-7764-43C0-84D7-63A6604EDA37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/php-execution-plugin/wordpress-php-execution-plugin-1-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/php-execution-plugin/wordpress-php-execution-plugin-1-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2246",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-23T16:15:07.107",
      "lastModified" : "2024-11-21T07:58:13.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/ajax.php?action=save_settings. The manipulation of the argument img leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227236."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6E8E2F0-0703-41CF-B750-06DAD69757E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/1Bzt1UOXHJYyNFvTUsMO4zfbiDd_cKxuEygjAww2GcZQ/edit",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227236",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227236",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.google.com/document/d/1Bzt1UOXHJYyNFvTUsMO4zfbiDd_cKxuEygjAww2GcZQ/edit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31043",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-23T20:15:07.127",
      "lastModified" : "2025-02-04T17:15:15.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EnterpriseDB EDB Postgres Advanced Server (EPAS) before 14.6.0 logs unredacted passwords in situations where optional parameters are used with CREATE/ALTER USER/GROUP/ROLE, and redacting was configured with edb_filter_log.redact_password_commands. The fixed versions are 10.23.33, 11.18.29, 12.13.17, 13.9.13, and 14.6.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enterprisedb:postgres_advanced_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.23.33",
            "matchCriteriaId" : "D03C4D8A-E49C-4F9E-AC37-1FCB30690810"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enterprisedb:postgres_advanced_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1.7",
            "versionEndExcluding" : "11.18.29",
            "matchCriteriaId" : "9B69ADDB-38AF-447D-91BD-F11E2A433FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enterprisedb:postgres_advanced_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.2",
            "versionEndExcluding" : "12.13.17",
            "matchCriteriaId" : "22DAE6E2-5B34-4D38-9C6E-D06B646AAA67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enterprisedb:postgres_advanced_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.4",
            "versionEndExcluding" : "13.9.13",
            "matchCriteriaId" : "C92BC79F-6A3A-48BA-B910-1673F37B4963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enterprisedb:postgres_advanced_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.6.0",
            "matchCriteriaId" : "DBA2791E-4D7F-4FF2-9730-E71CD73FA53E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.enterprisedb.com/docs/epas/10/epas_rel_notes/epas10_23_33_rel_notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.enterprisedb.com/docs/epas/11/epas_rel_notes/epas11_18_29_rel_notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.enterprisedb.com/docs/epas/12/epas_rel_notes/epas12_13_17_rel_notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.enterprisedb.com/docs/epas/13/epas_rel_notes/epas13_9_13_rel_notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.enterprisedb.com/docs/epas/14/epas_rel_notes/epas14_6_0_rel_notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.enterprisedb.com/docs/epas/10/epas_rel_notes/epas10_23_33_rel_notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.enterprisedb.com/docs/epas/11/epas_rel_notes/epas11_18_29_rel_notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.enterprisedb.com/docs/epas/12/epas_rel_notes/epas12_13_17_rel_notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.enterprisedb.com/docs/epas/13/epas_rel_notes/epas13_9_13_rel_notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.enterprisedb.com/docs/epas/14/epas_rel_notes/epas14_6_0_rel_notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23753",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2023-04-23T21:15:06.910",
      "lastModified" : "2025-02-05T16:15:35.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The 'Visforms Base Package for Joomla 3' extension is vulnerable to SQL Injection as concatenation is used to construct an SQL Query. An attacker can interact with the database and could be able to read, modify and delete data on it."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vi-solutions:visforms:*:*:*:*:*:joomla\\!:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.5",
            "matchCriteriaId" : "1FA01C78-A253-41F5-9700-B19508CF19AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.asturhackers.es/sql-injection-en-visforms-base-package-for-joomla-3-0-5-cve-2023-23753",
        "source" : "security@joomla.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vi-solutions.de/en/announcements/867-security-announcement-cve-2023-23754",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.asturhackers.es/sql-injection-en-visforms-base-package-for-joomla-3-0-5-cve-2023-23753",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vi-solutions.de/en/announcements/867-security-announcement-cve-2023-23754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T03:15:07.267",
      "lastModified" : "2025-02-04T20:15:48.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CloverDX before 5.17.3 writes passwords to the audit log in certain situations, if the audit log is enabled and single sign-on is not employed. The fixed versions are 5.15.4, 5.16.2, 5.17.3, and 6.0.x."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloverdx:cloverdx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.14.0",
            "versionEndIncluding" : "5.14.3",
            "matchCriteriaId" : "B07C9FA5-3488-4022-A89A-1A96809FCCD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloverdx:cloverdx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.0",
            "versionEndIncluding" : "5.15.3",
            "matchCriteriaId" : "76148B6A-026F-419B-8175-1AF6D5E33589"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloverdx:cloverdx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.17.0",
            "versionEndExcluding" : "5.17.3",
            "matchCriteriaId" : "05AC6E67-91A2-413D-B850-1077D17E9EE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloverdx:cloverdx:5.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF870A6-8F71-4AE0-9C3B-5AB095618428"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloverdx:cloverdx:5.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B816D3-F735-4A6C-A606-ECFC640FE1AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support1.cloverdx.com/hc/en-us/articles/8484869595164-Security-advisory-April-2023",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://support1.cloverdx.com/hc/en-us/articles/8484869595164-Security-advisory-April-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T03:15:07.333",
      "lastModified" : "2025-02-04T20:15:48.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:repetier-server:repetier-server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.10",
            "matchCriteriaId" : "E8EAABD7-02D4-4861-A634-B99441F9BB76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cybir.com/2023/cve/poc-repetier-server-140/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.repetier-server.com/download-repetier-server/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://cybir.com/2023/cve/poc-repetier-server-140/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.repetier-server.com/download-repetier-server/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T03:15:07.373",
      "lastModified" : "2025-02-04T20:15:48.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Repetier Server through 1.4.10 executes as SYSTEM. This can be leveraged in conjunction with CVE-2023-31059 for full compromise."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:repetier-server:repetier-server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.10",
            "matchCriteriaId" : "E8EAABD7-02D4-4861-A634-B99441F9BB76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cybir.com/2023/cve/poc-repetier-server-140/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.repetier-server.com/download-repetier-server/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://cybir.com/2023/cve/poc-repetier-server-140/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.repetier-server.com/download-repetier-server/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T03:15:07.407",
      "lastModified" : "2025-02-04T20:15:48.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Repetier Server through 1.4.10 does not have CSRF protection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:repetier-server:repetier-server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.10",
            "matchCriteriaId" : "E8EAABD7-02D4-4861-A634-B99441F9BB76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cybir.com/2023/cve/poc-repetier-server-140/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.repetier-server.com/download-repetier-server/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://cybir.com/2023/cve/poc-repetier-server-140/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.repetier-server.com/download-repetier-server/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28131",
      "sourceIdentifier" : "cve@checkpoint.com",
      "published" : "2023-04-24T05:15:08.653",
      "lastModified" : "2025-02-04T17:15:13.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that configured the \"Expo AuthSession Redirect Proxy\" for social sign-in. This can be achieved once a victim clicks a malicious link. The link itself may be sent to the victim in various ways (including email, text message, an attacker-controlled website, etc)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expo:expo_software_development_kit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "45.0.0",
            "versionEndExcluding" : "48.0.0",
            "matchCriteriaId" : "0A02316E-960F-422C-ADD5-DAC7A1BAFC0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.expo.dev/security-advisory-for-developers-using-authsessions-useproxy-options-and-auth-expo-io-e470fe9346df",
        "source" : "cve@checkpoint.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.darkreading.com/endpoint/oauth-flaw-in-expo-platform-affects-hundreds-of-third-party-sites-apps",
        "source" : "cve@checkpoint.com"
      }, {
        "url" : "https://blog.expo.dev/security-advisory-for-developers-using-authsessions-useproxy-options-and-auth-expo-io-e470fe9346df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.darkreading.com/endpoint/oauth-flaw-in-expo-platform-affects-hundreds-of-third-party-sites-apps",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T06:15:07.447",
      "lastModified" : "2025-02-04T20:15:48.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in drivers/media/test-drivers/vidtv/vidtv_bridge.c in the Linux kernel 6.2. There is a NULL pointer dereference in vidtv_mux_stop_thread. In vidtv_stop_streaming, after dvb->mux=NULL occurs, it executes vidtv_mux_stop_thread(dvb->mux)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FAA415-53CF-4007-875A-9045AD1A540F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1210782",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lore.kernel.org/all/CA+UBctDXyiosaiR7YNKCs8k0aWu4gU+YutRcnC+TDJkXpHjQag%40mail.gmail.com/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230929-0003/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1210782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lore.kernel.org/all/CA+UBctDXyiosaiR7YNKCs8k0aWu4gU+YutRcnC+TDJkXpHjQag%40mail.gmail.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230929-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T06:15:07.783",
      "lastModified" : "2024-11-21T08:01:22.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in drivers/tty/n_gsm.c in the Linux kernel 6.2. There is a sleeping function called from an invalid context in gsmld_write, which will block the kernel. Note: This has been disputed by 3rd parties as not a valid vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-763"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FAA415-53CF-4007-875A-9045AD1A540F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1210781",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lore.kernel.org/all/CA+UBctCZok5FSQ=LPRA+A-jocW=L8FuMVZ_7MNqhh483P5yN8A%40mail.gmail.com/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230929-0003/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1210781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lore.kernel.org/all/CA+UBctCZok5FSQ=LPRA+A-jocW=L8FuMVZ_7MNqhh483P5yN8A%40mail.gmail.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230929-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31083",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T06:15:07.890",
      "lastModified" : "2025-11-03T22:16:17.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu->proto is set. A NULL pointer dereference may occur."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FAA415-53CF-4007-875A-9045AD1A540F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1210780",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9c33663af9ad115f90c076a1828129a3fbadea98",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lore.kernel.org/all/CA+UBctC3p49aTgzbVgkSZ2+TQcqq4fPDO7yZitFT5uBPDeCO2g%40mail.gmail.com/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230929-0003/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1210780",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9c33663af9ad115f90c076a1828129a3fbadea98",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lore.kernel.org/all/CA+UBctC3p49aTgzbVgkSZ2+TQcqq4fPDO7yZitFT5uBPDeCO2g%40mail.gmail.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230929-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31084",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T06:15:07.997",
      "lastModified" : "2025-03-18T20:15:19.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&fepriv->sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&fepriv->sem) may block the process."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-833"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FAA415-53CF-4007-875A-9045AD1A540F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b8c75e4a1b325ea0a9433fa8834be97b5836b946",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6HIEOLEOURP4BJZMIL7UGGPYRRB44UDN/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AOATNX5UFL7V7W2QDIQKOHFFHYKWFP4W/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lore.kernel.org/all/CA+UBctCu7fXn4q41O_3=id1+OdyQ85tZY1x+TkT-6OVBL6KAUw%40mail.gmail.com/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230929-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5448",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5480",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b8c75e4a1b325ea0a9433fa8834be97b5836b946",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6HIEOLEOURP4BJZMIL7UGGPYRRB44UDN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AOATNX5UFL7V7W2QDIQKOHFFHYKWFP4W/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lore.kernel.org/all/CA+UBctCu7fXn4q41O_3=id1+OdyQ85tZY1x+TkT-6OVBL6KAUw%40mail.gmail.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230929-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31085",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T06:15:08.093",
      "lastModified" : "2024-11-21T08:01:23.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FAA415-53CF-4007-875A-9045AD1A540F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=017c73a34a661a861712f7cc1393a123e5b2208c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lore.kernel.org/all/687864524.118195.1681799447034.JavaMail.zimbra%40nod.at/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230929-0003/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=017c73a34a661a861712f7cc1393a123e5b2208c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lore.kernel.org/all/687864524.118195.1681799447034.JavaMail.zimbra%40nod.at/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230929-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T08:15:07.107",
      "lastModified" : "2025-02-04T20:15:47.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of the supplied password."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medicine_tracker_system_project:medicine_tracker_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313F1413-ACA3-49E9-9315-856D212D7DB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/d34dun1c02n/CVE-2023-30458",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/download-code?nid=16308&title=Medicine+Tracker+System+in+PHP+%28OOP%29+and+MySQL+DB+Source+Code+Free+Download",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16308/medicine-tracker-system-php-oop-and-mysql-db-source-code-free-download.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/d34dun1c02n/CVE-2023-30458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/download-code?nid=16308&title=Medicine+Tracker+System+in+PHP+%28OOP%29+and+MySQL+DB+Source+Code+Free+Download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/16308/medicine-tracker-system-php-oop-and-mysql-db-source-code-free-download.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30533",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T08:15:07.217",
      "lastModified" : "2025-02-04T20:15:47.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sheetjs:sheetjs:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.19.3",
            "matchCriteriaId" : "22CBA73A-E67A-48CF-A633-F955EB19EC4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.sheetjs.com/advisories/CVE-2023-30533",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git.sheetjs.com/sheetjs/sheetjs/issues/2986",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.sheetjs.com/sheetjs/sheetjs/src/branch/master/CHANGELOG.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://cdn.sheetjs.com/advisories/CVE-2023-30533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git.sheetjs.com/sheetjs/sheetjs/issues/2986",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.sheetjs.com/sheetjs/sheetjs/src/branch/master/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T08:15:07.257",
      "lastModified" : "2026-04-06T13:45:57.907",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored Cross-site scripting (XSS) issue in Text Editors and Formats in Backdrop CMS before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via the name parameter. When a user is editing any content type (e.g., page, post, or card) as an admin, the stored XSS payload is executed upon selecting a malicious text formatting option. NOTE: the vendor disputes the security relevance of this finding because \"any administrator that can configure a text format could easily allow Full HTML anywhere.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:backdropcms:backdrop_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.24.2",
            "matchCriteriaId" : "4118F748-A764-4EB3-BB8C-4EFCCA787738"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/backdrop/backdrop-issues/issues/6065",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/backdrop/backdrop/releases/tag/1.24.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/backdrop/backdrop-issues/issues/6065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/backdrop/backdrop/releases/tag/1.24.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22577",
      "sourceIdentifier" : "csirt@divd.nl",
      "published" : "2023-04-24T09:15:09.410",
      "lastModified" : "2024-11-21T07:44:59.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "csirt@divd.nl",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "csirt@divd.nl",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:home.cern:white_rabbit_switch_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "0AE4488F-EF2E-4A9E-AC6F-E325BC54FB55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:home.cern:white_rabbit_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A0ECDF-E65D-46C8-830F-CFC5AA4832F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://csirt.divd.nl/CVE-2023-22577/",
        "source" : "csirt@divd.nl",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://csirt.divd.nl/DIVD-2022-00068/",
        "source" : "csirt@divd.nl",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-gv4x-jjcj-p736",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://csirt.divd.nl/CVE-2023-22577/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://csirt.divd.nl/DIVD-2022-00068/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22581",
      "sourceIdentifier" : "csirt@divd.nl",
      "published" : "2023-04-24T09:15:09.663",
      "lastModified" : "2024-11-21T07:45:00.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application (the default installation makes the webserver run as the root user)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "csirt@divd.nl",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "csirt@divd.nl",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:home.cern:white_rabbit_switch_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "0AE4488F-EF2E-4A9E-AC6F-E325BC54FB55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:home.cern:white_rabbit_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A0ECDF-E65D-46C8-830F-CFC5AA4832F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://csirt.divd.nl/CVE-2023-22581/",
        "source" : "csirt@divd.nl",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://csirt.divd.nl/DIVD-2022-00068/",
        "source" : "csirt@divd.nl",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vuldb.com/?id.227269",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://csirt.divd.nl/CVE-2023-22581/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://csirt.divd.nl/DIVD-2022-00068/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25131",
      "sourceIdentifier" : "ART@zuso.ai",
      "published" : "2023-04-24T10:15:07.173",
      "lastModified" : "2024-11-21T07:49:10.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of default password vulnerability in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 64bit v4.8.6 and earlier, PowerPanel Business Management for Linux 32bit v4.8.6 and earlier, PowerPanel Business Management for Linux 64bit v4.8.6 and earlier, PowerPanel Business Local/Remote for MacOS v4.8.6 and earlier, and PowerPanel Business Management for MacOS v4.8.6 and earlier allows remote attackers to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the 'admin' password."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ART@zuso.ai",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ART@zuso.ai",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1393"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:business:linux:*:*",
            "versionEndIncluding" : "4.8.6",
            "matchCriteriaId" : "231B7053-0BD9-4C08-8028-72F30768EF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:business:macos:*:*",
            "versionEndIncluding" : "4.8.6",
            "matchCriteriaId" : "B38A1026-EED6-4606-B61A-F6FDCBF3BB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:business:virtual_machine:*:*",
            "versionEndIncluding" : "4.8.6",
            "matchCriteriaId" : "4DD5C6C4-2DBD-4C67-A10C-43A293ABD1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:business:windows:*:*",
            "versionEndIncluding" : "4.8.6",
            "matchCriteriaId" : "CA11A0E7-FAC1-4BF1-85D4-7370EAC1E0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_linux#downloads",
        "source" : "ART@zuso.ai",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_mac#downloads",
        "source" : "ART@zuso.ai",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_virtual_machine#downloads",
        "source" : "ART@zuso.ai",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads",
        "source" : "ART@zuso.ai",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://zuso.ai/Advisory/",
        "source" : "ART@zuso.ai",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_linux#downloads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_mac#downloads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_virtual_machine#downloads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://zuso.ai/Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25132",
      "sourceIdentifier" : "ART@zuso.ai",
      "published" : "2023-04-24T10:15:07.237",
      "lastModified" : "2024-11-21T07:49:10.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unrestricted upload of file with dangerous type vulnerability in default.cmd file in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 64bit v4.8.6 and earlier, PowerPanel Business Management for Linux 32bit v4.8.6 and earlier, PowerPanel Business Management for Linux 64bit v4.8.6 and earlier, PowerPanel Business Local/Remote for MacOS v4.8.6 and earlier, and PowerPanel Business Management for MacOS v4.8.6 and earlier allows remote attackers to execute operation system commands via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ART@zuso.ai",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ART@zuso.ai",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:business:linux:*:*",
            "versionEndIncluding" : "4.8.6",
            "matchCriteriaId" : "231B7053-0BD9-4C08-8028-72F30768EF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:business:macos:*:*",
            "versionEndIncluding" : "4.8.6",
            "matchCriteriaId" : "B38A1026-EED6-4606-B61A-F6FDCBF3BB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:business:virtual_machine:*:*",
            "versionEndIncluding" : "4.8.6",
            "matchCriteriaId" : "4DD5C6C4-2DBD-4C67-A10C-43A293ABD1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:business:windows:*:*",
            "versionEndIncluding" : "4.8.6",
            "matchCriteriaId" : "CA11A0E7-FAC1-4BF1-85D4-7370EAC1E0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_linux#downloads",
        "source" : "ART@zuso.ai",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_mac#downloads",
        "source" : "ART@zuso.ai",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_virtual_machine#downloads",
        "source" : "ART@zuso.ai",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads",
        "source" : "ART@zuso.ai",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://zuso.ai/Advisory/",
        "source" : "ART@zuso.ai",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_linux#downloads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_mac#downloads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_virtual_machine#downloads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://zuso.ai/Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25133",
      "sourceIdentifier" : "ART@zuso.ai",
      "published" : "2023-04-24T11:15:07.097",
      "lastModified" : "2024-11-21T07:49:10.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper privilege management vulnerability in default.cmd file in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 64bit v4.8.6 and earlier, PowerPanel Business Management for Linux 32bit v4.8.6 and earlier, PowerPanel Business Management for Linux 64bit v4.8.6 and earlier, PowerPanel Business Local/Remote for MacOS v4.8.6 and earlier, and PowerPanel Business Management for MacOS v4.8.6 and earlier allows remote attackers to execute operation system commands via unspecified vectors."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ART@zuso.ai",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ART@zuso.ai",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:business:linux:*:*",
            "versionEndIncluding" : "4.8.6",
            "matchCriteriaId" : "231B7053-0BD9-4C08-8028-72F30768EF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:business:macos:*:*",
            "versionEndIncluding" : "4.8.6",
            "matchCriteriaId" : "B38A1026-EED6-4606-B61A-F6FDCBF3BB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:business:virtual_machine:*:*",
            "versionEndIncluding" : "4.8.6",
            "matchCriteriaId" : "4DD5C6C4-2DBD-4C67-A10C-43A293ABD1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:business:windows:*:*",
            "versionEndIncluding" : "4.8.6",
            "matchCriteriaId" : "CA11A0E7-FAC1-4BF1-85D4-7370EAC1E0C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_linux#downloads",
        "source" : "ART@zuso.ai",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_mac#downloads",
        "source" : "ART@zuso.ai",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_virtual_machine#downloads",
        "source" : "ART@zuso.ai",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads",
        "source" : "ART@zuso.ai",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://zuso.ai/Advisory/",
        "source" : "ART@zuso.ai",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_linux#downloads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_mac#downloads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_virtual_machine#downloads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://zuso.ai/Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29578",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T13:15:07.397",
      "lastModified" : "2025-02-04T17:15:13.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/mp4property.cpp."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mp4v2_project:mp4v2:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF259B4E-742A-4FD6-AFC4-30E94AA65729"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TechSmith/mp4v2/issues/74",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/mp4v2/heap-buffer-overflow/mp4property.cpp/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/TechSmith/mp4v2/issues/74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/mp4v2/heap-buffer-overflow/mp4property.cpp/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T13:15:07.440",
      "lastModified" : "2024-11-21T07:57:18.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yasm_project:yasm:1.3.0.55.g101bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A03B4FD-736D-40B7-87B0-AC4EF2660C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yasm/yasm/issues/214",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-buffer-overflow/yasm/readmd.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/yasm/yasm/issues/214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-buffer-overflow/yasm/readmd.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T13:15:07.483",
      "lastModified" : "2024-11-21T07:57:19.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yasm_project:yasm:1.3.0.55.g101bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A03B4FD-736D-40B7-87B0-AC4EF2660C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2189601#c3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/yasm/yasm/issues/217",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr1/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2189601#c3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/yasm/yasm/issues/217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr1/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T13:15:07.523",
      "lastModified" : "2024-11-21T07:57:19.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yasm_project:yasm:1.3.0.55.g101bc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A03B4FD-736D-40B7-87B0-AC4EF2660C4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yasm/yasm/issues/218",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr5/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/yasm/yasm/issues/218",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr5/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1731",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2023-04-24T14:15:07.640",
      "lastModified" : "2024-11-21T07:39:47.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@cert.vde.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@cert.vde.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meinbergglobal:lantime_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.06.013",
            "matchCriteriaId" : "8085F2DD-CD93-4D37-9567-62966EB45A12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2541CE93-F4C4-453E-83AC-ED39D83571DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C58392-64BE-4A64-9B43-F599D03CBD3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5FCA50A-2C6A-41ED-8E9D-38BA52C8428B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E5EFBE-3C3F-4386-A469-E190611A5A34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46F4C7AA-30BB-402B-A21C-6FEEC919853C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meinbergglobal:lantime_m900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164CB3CF-F979-4591-8DF8-972123E216B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.meinbergglobal.com/english/news/meinberg-security-advisory-mbgsa-2023-02-lantime-firmware-v7-06-013.htm",
        "source" : "info@cert.vde.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.meinbergglobal.com/english/news/meinberg-security-advisory-mbgsa-2023-02-lantime-firmware-v7-06-013.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23892",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-24T14:15:07.723",
      "lastModified" : "2024-11-21T07:47:02.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Jamie Poitra M Chart plugin <= 1.9.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:m_chart_project:m_chart:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.10.0",
            "matchCriteriaId" : "DF575D13-628C-4C96-8D09-C0FD6E37114C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/m-chart/wordpress-m-chart-plugin-1-9-4-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/m-chart/wordpress-m-chart-plugin-1-9-4-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29570",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T14:15:07.800",
      "lastModified" : "2025-02-04T17:15:13.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mjs:2.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8D39F6-ACB1-46F8-87CF-1B41EFC157BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cesanta/mjs/issues/240",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_fii2/readme.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cesanta/mjs/issues/240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_fii2/readme.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T14:15:07.860",
      "lastModified" : "2025-02-04T21:15:24.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via the initWebs function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac5_firmware:15.03.06.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F928648-C8B2-4D37-8343-C74AABEFAB07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A74C4FD-76A0-4E7C-94E0-EC293F379DD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC5/1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC5/1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T14:15:07.903",
      "lastModified" : "2025-02-04T21:15:24.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:15.03.05.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14A19EE-FB4E-4371-AC85-1401EB78B16D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24818",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T15:15:07.840",
      "lastModified" : "2024-11-21T07:48:27.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a NULL pointer dereference. During forwarding of a fragment an uninitialized entry in the reassembly buffer is used. The NULL pointer dereference triggers a hard fault exception resulting in denial of service. Version 2022.10 fixes this issue. As a workaround, disable support for fragmented IP datagrams or apply the patches manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022.10",
            "matchCriteriaId" : "2A1B64C3-901D-4D06-AD22-FA94E65D5024"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/0bec3e245ed3815ad6c8cae54673f0021777768b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/17c70f7ee0b1445f2941f516f264ed4a096e82b7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/aa27ed71fa3e5d48dee1748dcf27b6323ec98a33",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/4b23d93868a28edd8ebf2ff4ebe94540f2475008",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/f4df5b4c4f841ccb460930894cf68ab10b55b971",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/f4fb746d1acaacc962daeed3aa71aadfe307d20e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-69h9-vj5r-xcg6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/0bec3e245ed3815ad6c8cae54673f0021777768b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/17c70f7ee0b1445f2941f516f264ed4a096e82b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/aa27ed71fa3e5d48dee1748dcf27b6323ec98a33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/4b23d93868a28edd8ebf2ff4ebe94540f2475008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/f4df5b4c4f841ccb460930894cf68ab10b55b971",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/f4fb746d1acaacc962daeed3aa71aadfe307d20e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-69h9-vj5r-xcg6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24819",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T15:15:07.907",
      "lastModified" : "2025-02-04T19:15:28.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in an out of bounds write in the packet buffer. The overflow can be used to corrupt other packets and the allocator metadata. Corrupting a pointer will easily lead to denial of service. While carefully manipulating the allocator metadata gives an attacker the possibility to write data to arbitrary locations and thus execute arbitrary code. Version 2022.10 fixes this issue. As a workaround, disable support for fragmented IP datagrams or apply the patches manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022.10",
            "matchCriteriaId" : "2A1B64C3-901D-4D06-AD22-FA94E65D5024"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/73615161c01fcfbbc7216cf502cabb12c1598ee4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/da63e45ee94c03a2e08625b04ea618653eab4a9f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-fv97-2448-gcf6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/73615161c01fcfbbc7216cf502cabb12c1598ee4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/da63e45ee94c03a2e08625b04ea618653eab4a9f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-fv97-2448-gcf6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-fv97-2448-gcf6",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24820",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T15:15:07.987",
      "lastModified" : "2024-11-21T07:48:27.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. An attacker can send a crafted frame to the device resulting in a large out of bounds write beyond the packet buffer. The write will create a hard fault exception after reaching the last page of RAM. The hard fault is not handled and the system will be stuck until reset. Thus the impact is denial of service. Version 2022.10 fixes this issue. As a workaround, apply the patch manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022.10",
            "matchCriteriaId" : "2A1B64C3-901D-4D06-AD22-FA94E65D5024"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/2709fbd827b688fe62df2c77c316914f4a3a6d4a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/d052e2ee166e55bbdfe4c455e65dbd7e3479ebe3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-vpx8-h94p-9vrj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/2709fbd827b688fe62df2c77c316914f4a3a6d4a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/d052e2ee166e55bbdfe4c455e65dbd7e3479ebe3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-vpx8-h94p-9vrj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T15:15:08.727",
      "lastModified" : "2025-11-21T20:15:46.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ribose RNP before 0.16.3 may hang when the input is malformed."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ribose:rnp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.16.3",
            "matchCriteriaId" : "9BD9667E-867D-432E-B296-8B0C2CD1BD49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cve.ribose.com/advisories/ra-2023-04-11/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://open.ribose.com/advisories/ra-2023-04-11/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.rnpgp.org/blog/2023-04-13-rnp-release-0-16-3/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://cve.ribose.com/advisories/ra-2023-04-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.rnpgp.org/blog/2023-04-13-rnp-release-0-16-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T15:15:08.770",
      "lastModified" : "2025-02-04T21:15:23.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ribose:rnp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.16.3",
            "matchCriteriaId" : "9BD9667E-867D-432E-B296-8B0C2CD1BD49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.rnpgp.org/blog/2023-04-13-rnp-release-0-16-3/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.rnpgp.org/blog/2023-04-13-rnp-release-0-16-3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T15:15:08.813",
      "lastModified" : "2025-02-04T17:15:14.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bang Resto 1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the itemName parameter in the admin/menu.php Add New Menu function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hockeycomputindo:bang_resto:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00A0E16-145F-4356-9B38-1BE60D2E4EAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171899/Bang-Resto-1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mesinkasir/bangresto/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171899/Bang-Resto-1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mesinkasir/bangresto/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T15:15:08.853",
      "lastModified" : "2025-02-04T16:15:36.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice, menuID, staffID, or itemqty parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hockeycomputindo:bang_resto:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E00A0E16-145F-4356-9B38-1BE60D2E4EAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171900/Bang-Resto-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mesinkasir/bangresto/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171900/Bang-Resto-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mesinkasir/bangresto/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2251",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-24T15:15:08.897",
      "lastModified" : "2024-11-21T07:58:14.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yaml_project:yaml:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0-5",
            "versionEndExcluding" : "2.2.2",
            "matchCriteriaId" : "50610051-3CA8-4BE1-8F5E-9D463027C628"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eemeli/yaml/commit/984f5781ffd807e58cad3b5c8da1f940dab75fba",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/4b494e99-5a3e-40d9-8678-277f3060e96c",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eemeli/yaml/commit/984f5781ffd807e58cad3b5c8da1f940dab75fba",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/4b494e99-5a3e-40d9-8678-277f3060e96c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T15:15:08.967",
      "lastModified" : "2025-02-04T21:15:24.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:15.03.05.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14A19EE-FB4E-4371-AC85-1401EB78B16D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/7.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/7.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Icathian-Rain/Tenda/blob/main/AC15/7.md",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T15:15:09.010",
      "lastModified" : "2025-02-04T21:15:25.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Tenda AC15 V15.03.05.19, the function \"sub_ED14\" contains a stack-based buffer overflow vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:15.03.05.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14A19EE-FB4E-4371-AC85-1401EB78B16D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/4.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/4.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T15:15:09.053",
      "lastModified" : "2025-02-04T20:15:47.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Tenda AC15 V15.03.05.19, The function \"xkjs_ver32\" contains a stack-based buffer overflow vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:15.03.05.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14A19EE-FB4E-4371-AC85-1401EB78B16D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/10.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/10.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Icathian-Rain/Tenda/blob/main/AC15/10.md",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T15:15:09.097",
      "lastModified" : "2025-02-04T20:15:47.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Tenda AC15 V15.03.05.19, the function \"xian_pppoe_user\" contains a stack-based buffer overflow vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:15.03.05.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14A19EE-FB4E-4371-AC85-1401EB78B16D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/8.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/8.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Icathian-Rain/Tenda/blob/main/AC15/8.md",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T15:15:09.137",
      "lastModified" : "2025-02-05T16:15:38.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Tenda AC15 V15.03.05.19, the function \"getIfIp\" contains a stack-based buffer overflow vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:15.03.05.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14A19EE-FB4E-4371-AC85-1401EB78B16D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T15:15:09.180",
      "lastModified" : "2025-02-05T16:15:39.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Tenda AC15 V15.03.05.19, the function \"henan_pppoe_user\" contains a stack-based buffer overflow vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:15.03.05.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14A19EE-FB4E-4371-AC85-1401EB78B16D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/9.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/9.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T15:15:09.223",
      "lastModified" : "2025-02-05T16:15:39.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Tenda AC15 V15.03.05.19, the function \"sub_8EE8\" contains a stack-based buffer overflow vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac15_firmware:15.03.05.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A14A19EE-FB4E-4371-AC85-1401EB78B16D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/5.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/2205794866/Tenda/blob/main/AC15/5.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24821",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T16:15:07.623",
      "lastModified" : "2024-11-21T07:48:27.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a large out of bounds write beyond the packet buffer. The write will create a hard fault exception after reaching the last page of RAM. The hard fault is not handled and the system will be stuck until reset, thus the impact is denial of service. Version 2022.10 fixes this issue. As a workaround, disable support for fragmented IP datagrams or apply the patches manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022.10",
            "matchCriteriaId" : "2A1B64C3-901D-4D06-AD22-FA94E65D5024"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/9728f727e75d7d78dbfb5918e0de1b938b7b6d2c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/bd31010231f5340e21410595dd95afc86bbfd341",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-2fpr-82xr-p887",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/9728f727e75d7d78dbfb5918e0de1b938b7b6d2c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/bd31010231f5340e21410595dd95afc86bbfd341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-2fpr-82xr-p887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24822",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T16:15:07.690",
      "lastModified" : "2024-11-21T07:48:27.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a NULL pointer dereference while encoding a 6LoWPAN IPHC header. The NULL pointer dereference causes a hard fault exception, leading to denial of service. Version 2022.10 fixes this issue. As a workaround, apply the patches manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022.10",
            "matchCriteriaId" : "2A1B64C3-901D-4D06-AD22-FA94E65D5024"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/639c04325de4ceb9d444955f4927bfae95843a39",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/7253e261556f252816f4a3b7c4f96fc10d642485",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-8x69-5fhj-72wh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/639c04325de4ceb9d444955f4927bfae95843a39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/7253e261556f252816f4a3b7c4f96fc10d642485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-8x69-5fhj-72wh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24823",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T16:15:07.767",
      "lastModified" : "2024-11-21T07:48:28.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a type confusion between IPv6 extension headers and a UDP header. This occurs while encoding a 6LoWPAN IPHC header. The type confusion manifests in an out of bounds write in the packet buffer. The overflow can be used to corrupt other packets and the allocator metadata. Corrupting a pointer will easily lead to denial of service. While carefully manipulating the allocator metadata gives an attacker the possibility to write data to arbitrary locations and thus execute arbitrary code. Version 2022.10 fixes this issue. As a workaround, apply the patches manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        }, {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2022.10",
            "matchCriteriaId" : "2A1B64C3-901D-4D06-AD22-FA94E65D5024"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/4a081f86616cb5c9dd0b5d7b286da03285d1652a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/dafc397fdc3655aeb5c7b9963a43f1604c6a2062",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-jwmv-47p2-hgq2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18817/commits/4a081f86616cb5c9dd0b5d7b286da03285d1652a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/pull/18820/commits/dafc397fdc3655aeb5c7b9963a43f1604c6a2062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-jwmv-47p2-hgq2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27524",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-24T16:15:07.843",
      "lastModified" : "2026-02-26T15:03:48.773",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.\n\nAll superset installations should always set a unique secure random SECRET_KEY. Your SECRET_KEY is used to securely sign all session cookies and encrypting sensitive information on the database.\nAdd a strong SECRET_KEY to your `superset_config.py` file like:\n\nSECRET_KEY = <YOUR_OWN_RANDOM_GENERATED_SECRET_KEY>\n\nAlternatively you can set it with `SUPERSET_SECRET_KEY` environment variable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2024-01-08",
      "cisaActionDue" : "2024-01-29",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Apache Superset Insecure Default Initialization of Resource Vulnerability",
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:superset:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "20E98F0D-B484-4FA4-8273-074A75ED3227"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread/n0ftx60sllf527j7g11kmt24wvof8xyk",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/172522/Apache-Superset-2.0.0-Authentication-Bypass.html",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/175094/Apache-Superset-2.0.0-Remote-Code-Execution.html",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/24/2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://lists.apache.org/thread/n0ftx60sllf527j7g11kmt24wvof8xyk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/172522/Apache-Superset-2.0.0-Authentication-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/175094/Apache-Superset-2.0.0-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/24/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27524",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30622",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T16:15:07.917",
      "lastModified" : "2024-11-21T08:00:31.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clusternet is a general-purpose system for controlling Kubernetes clusters across different environments. An issue in clusternet prior to version 0.15.2 can be leveraged to lead to a cluster-level privilege escalation. The clusternet has a deployment called `cluster-hub` inside the `clusternet-system` Kubernetes namespace, which runs on worker nodes randomly. The deployment has a service account called `clusternet-hub`, which has a cluster role called `clusternet:hub` via cluster role binding. The `clusternet:hub` cluster role has `\"*\" verbs of \"*.*\"` resources. Thus, if a malicious user can access the worker node which runs the clusternet, they can leverage the service account to do malicious actions to critical system resources. For example, the malicious user can leverage the service account to get ALL secrets in the entire cluster, resulting in cluster-level privilege escalation. Version 0.15.2 contains a fix for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clusternet:clusternet:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.15.1",
            "matchCriteriaId" : "4AE4F69E-D2B2-404F-AF91-14D543CE1CE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/clusternet/clusternet/releases/tag/v0.15.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/clusternet/clusternet/security/advisories/GHSA-833c-xh79-p429",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/clusternet/clusternet/releases/tag/v0.15.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/clusternet/clusternet/security/advisories/GHSA-833c-xh79-p429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30776",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-24T16:15:08.000",
      "lastModified" : "2024-11-21T08:00:52.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authenticated user with specific data permissions could access database connections stored passwords by requesting a specific REST API. This issue affects Apache Superset version 1.3.0 up to 2.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@apache.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:superset:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndIncluding" : "2.0.1",
            "matchCriteriaId" : "023FEE14-E29A-4CA6-A622-C25BB41FCB50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/24/3",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/s9w9w10mt2sngk3solwnmq5k7md53tsz",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/24/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/s9w9w10mt2sngk3solwnmq5k7md53tsz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22913",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-04-24T17:15:09.550",
      "lastModified" : "2024-11-21T07:45:38.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A post-authentication command injection vulnerability in the “account_operator.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote authenticated attacker to modify device configuration data, resulting in denial-of-service (DoS) conditions on an affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "FFE84F5F-0D2D-4B13-8B11-061D6AF36E0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B30A4C0-9928-46AD-9210-C25656FB43FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "E0248888-B2CD-4CAA-8475-B9CD68CDA4C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74ABA7E-AA78-4A13-A64E-C44021591B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "BB46C274-12D1-4155-AB7B-6FE9282FD307"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93B6A06-2951-46D2-A7E1-103D7318D612"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "513FCF86-307E-4230-9A59-653BE2450525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646C1F07-B553-47B0-953B-DC7DE7FD0F8B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "FE6D206F-B365-408A-9200-656B9C6A4AEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110A1CA4-0170-4834-8281-0A3E14FC5584"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "3C7F5651-F9E1-4F7C-84BD-AF06ADDCBF82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C697A5-D1D3-4FF0-9C43-D27B18181958"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "3473C5D7-91AC-4FCA-851D-D6583B42F768"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1396E3-731B-4D05-A3F8-F3ABB80D5C29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "3E3AC1DD-9BD8-42AD-A443-BCCBA6A4F27B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D90A7B-174F-40A1-8AF4-08B15B7BAC40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "06C109E1-5D08-41E7-BDB2-8D53CA87FCA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECD311A-4E96-4576-AADF-47291EDE3559"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "16394FD3-8C28-4AD8-AE57-4C61D5E69D3E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45C303-1A95-4245-B242-3AB9B9106CD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "FD0F0319-5402-4E2D-8E79-8C492422438D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3AC823-0ECA-42D8-8312-2FBE5914E4C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22914",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-04-24T17:15:09.627",
      "lastModified" : "2024-11-21T07:45:38.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability in the “account_print.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote authenticated attacker with administrator privileges to execute unauthorized OS commands in the “tmp” directory by uploading a crafted file if the hotspot function were enabled."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "FFE84F5F-0D2D-4B13-8B11-061D6AF36E0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B30A4C0-9928-46AD-9210-C25656FB43FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "E0248888-B2CD-4CAA-8475-B9CD68CDA4C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74ABA7E-AA78-4A13-A64E-C44021591B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "BB46C274-12D1-4155-AB7B-6FE9282FD307"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93B6A06-2951-46D2-A7E1-103D7318D612"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "513FCF86-307E-4230-9A59-653BE2450525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646C1F07-B553-47B0-953B-DC7DE7FD0F8B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "FE6D206F-B365-408A-9200-656B9C6A4AEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110A1CA4-0170-4834-8281-0A3E14FC5584"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "3C7F5651-F9E1-4F7C-84BD-AF06ADDCBF82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C697A5-D1D3-4FF0-9C43-D27B18181958"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "3473C5D7-91AC-4FCA-851D-D6583B42F768"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1396E3-731B-4D05-A3F8-F3ABB80D5C29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "3E3AC1DD-9BD8-42AD-A443-BCCBA6A4F27B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D90A7B-174F-40A1-8AF4-08B15B7BAC40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "06C109E1-5D08-41E7-BDB2-8D53CA87FCA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECD311A-4E96-4576-AADF-47291EDE3559"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "16394FD3-8C28-4AD8-AE57-4C61D5E69D3E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45C303-1A95-4245-B242-3AB9B9106CD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "FD0F0319-5402-4E2D-8E79-8C492422438D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3AC823-0ECA-42D8-8312-2FBE5914E4C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22915",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-04-24T17:15:09.690",
      "lastModified" : "2024-11-21T07:45:38.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.30 through 5.35, USG20(W)-VPN firmware versions 4.30 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote unauthenticated attacker to cause DoS conditions by sending a crafted HTTP request if the Facebook WiFi function were enabled on an affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "FFE84F5F-0D2D-4B13-8B11-061D6AF36E0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B30A4C0-9928-46AD-9210-C25656FB43FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "E0248888-B2CD-4CAA-8475-B9CD68CDA4C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74ABA7E-AA78-4A13-A64E-C44021591B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "BB46C274-12D1-4155-AB7B-6FE9282FD307"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93B6A06-2951-46D2-A7E1-103D7318D612"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "513FCF86-307E-4230-9A59-653BE2450525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646C1F07-B553-47B0-953B-DC7DE7FD0F8B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "44C99310-56C3-4392-8D68-8290A209B2DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110A1CA4-0170-4834-8281-0A3E14FC5584"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "3C7F5651-F9E1-4F7C-84BD-AF06ADDCBF82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C697A5-D1D3-4FF0-9C43-D27B18181958"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "3473C5D7-91AC-4FCA-851D-D6583B42F768"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1396E3-731B-4D05-A3F8-F3ABB80D5C29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "3E3AC1DD-9BD8-42AD-A443-BCCBA6A4F27B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D90A7B-174F-40A1-8AF4-08B15B7BAC40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "06C109E1-5D08-41E7-BDB2-8D53CA87FCA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECD311A-4E96-4576-AADF-47291EDE3559"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "16394FD3-8C28-4AD8-AE57-4C61D5E69D3E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45C303-1A95-4245-B242-3AB9B9106CD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "FD0F0319-5402-4E2D-8E79-8C492422438D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3AC823-0ECA-42D8-8312-2FBE5914E4C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_20w-vpn_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "3C160661-113D-4B5A-A253-FEB1E4CBB267"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_20w-vpn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEA412F-3DA1-4E91-9C74-0666147DABCE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22916",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-04-24T17:15:09.767",
      "lastModified" : "2024-11-21T07:45:38.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series firmware versions 5.00 through 5.35, USG FLEX 50(W) firmware versions 5.10 through 5.35, USG20(W)-VPN firmware versions 5.10 through 5.35, and VPN series firmware versions 5.00 through 5.35, which fails to properly sanitize user input. A remote unauthenticated attacker could leverage the vulnerability to modify device configuration data, resulting in DoS conditions on an affected device if the attacker could trick an authorized administrator to switch the management mode to the cloud mode."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "D646F135-E86F-44CF-BD04-3041CFBDE7B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B30A4C0-9928-46AD-9210-C25656FB43FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "C560A27F-849A-427B-98C3-E9DD4952D01F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74ABA7E-AA78-4A13-A64E-C44021591B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "7F4C2F76-16B0-4695-922E-A4DFB616DCF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93B6A06-2951-46D2-A7E1-103D7318D612"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "BFACF97D-CEDF-4CEC-931A-30DDB81FE111"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646C1F07-B553-47B0-953B-DC7DE7FD0F8B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "0CD56415-0C96-42EA-B214-149D3FF8CB31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110A1CA4-0170-4834-8281-0A3E14FC5584"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "08997853-52B9-4DF2-A1D0-1C2D81850BA0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C697A5-D1D3-4FF0-9C43-D27B18181958"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "74238C9E-D64D-4539-B4BA-FDE47C713EE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1396E3-731B-4D05-A3F8-F3ABB80D5C29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "8BA7FE08-56D3-4538-BD83-C721C486796C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D90A7B-174F-40A1-8AF4-08B15B7BAC40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "D9C932EA-A6CD-4CB6-80AE-2B25351E99DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECD311A-4E96-4576-AADF-47291EDE3559"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "313E3559-F68E-4602-8D52-CC41AD1EC9A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45C303-1A95-4245-B242-3AB9B9106CD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "786D44ED-568A-456F-A068-97C03C532CCE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3AC823-0ECA-42D8-8312-2FBE5914E4C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_20w-vpn_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "9DFC6353-26D9-48B7-B73E-541619A21E2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_20w-vpn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEA412F-3DA1-4E91-9C74-0666147DABCE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "2B96A47F-C37B-46B2-AAA9-2B9FB1114642"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7654A1-3806-41C7-82D4-46B0CD7EE53B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "426E4382-81ED-438D-ACAB-78CA8993C226"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47398FD0-6C5E-4625-9EFD-DE08C9AB7DB2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "FB3080DC-B3F0-4494-8CA8-8508F76BE273"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D68A36FF-8CAF-401C-9F18-94F3A2405CF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "DBBF5B18-0977-43D8-9FDD-38E039994615"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2818E8AC-FFEE-4DF9-BF3F-C75166C0E851"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "74E1323C-3010-4E27-9F1C-E0FFF8FED2FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B41F437-855B-4490-8011-DF59887BE6D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "4F0D40B2-5456-4B59-8A60-66DE573C23F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B99746-0589-46E6-9CBD-F38619AD97DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22917",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-04-24T17:15:09.833",
      "lastModified" : "2024-11-21T07:45:38.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firmware versions 5.00 through 5.32, USG FLEX 50(W) firmware versions 5.10 through 5.32, USG20(W)-VPN firmware versions 5.10 through 5.32, and VPN series firmware versions 5.00 through 5.35, which could allow a remote unauthenticated attacker to cause a core dump with a request error message on a vulnerable device by uploading a crafted configuration file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.32",
            "matchCriteriaId" : "5907E172-33A4-4439-AEFA-560E31A86FD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B30A4C0-9928-46AD-9210-C25656FB43FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.32",
            "matchCriteriaId" : "5BE50A33-0AFC-4DFB-ABF6-48DC0B87F523"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74ABA7E-AA78-4A13-A64E-C44021591B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.32",
            "matchCriteriaId" : "3ED21060-AE2D-42C1-BF09-B0A0E649DBE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93B6A06-2951-46D2-A7E1-103D7318D612"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.32",
            "matchCriteriaId" : "D1134D4C-48DD-414D-9AD1-1FF941D6E57A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646C1F07-B553-47B0-953B-DC7DE7FD0F8B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.32",
            "matchCriteriaId" : "5D33E288-FDA5-4EEE-8A91-9B8A956F5ACF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110A1CA4-0170-4834-8281-0A3E14FC5584"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.32",
            "matchCriteriaId" : "047B19C6-1A8E-4489-99FB-21A0CB2788B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C697A5-D1D3-4FF0-9C43-D27B18181958"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.32",
            "matchCriteriaId" : "7A0F5B46-BF18-416D-9E83-E783A82E497C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1396E3-731B-4D05-A3F8-F3ABB80D5C29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "8BA7FE08-56D3-4538-BD83-C721C486796C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D90A7B-174F-40A1-8AF4-08B15B7BAC40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "D9C932EA-A6CD-4CB6-80AE-2B25351E99DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECD311A-4E96-4576-AADF-47291EDE3559"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "313E3559-F68E-4602-8D52-CC41AD1EC9A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45C303-1A95-4245-B242-3AB9B9106CD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.00",
            "versionEndIncluding" : "5.35",
            "matchCriteriaId" : "786D44ED-568A-456F-A068-97C03C532CCE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3AC823-0ECA-42D8-8312-2FBE5914E4C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_20w-vpn_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.32",
            "matchCriteriaId" : "AB5706BC-C2DD-46D2-B0F4-2492A25273B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_20w-vpn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEA412F-3DA1-4E91-9C74-0666147DABCE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.32",
            "matchCriteriaId" : "93CBFF2A-50A6-4E01-9594-2359CFEBEDBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7654A1-3806-41C7-82D4-46B0CD7EE53B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.32",
            "matchCriteriaId" : "85243AF2-9044-43B4-A0D1-0187D8F7E49D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47398FD0-6C5E-4625-9EFD-DE08C9AB7DB2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.32",
            "matchCriteriaId" : "A048A9D1-485D-4542-8C13-8C278D048ECC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D68A36FF-8CAF-401C-9F18-94F3A2405CF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.32",
            "matchCriteriaId" : "B44A485E-EF82-4DDA-8497-849A944BEB21"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2818E8AC-FFEE-4DF9-BF3F-C75166C0E851"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.32",
            "matchCriteriaId" : "8FCE7916-6AB2-49C5-A0D2-005E7236CED1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B41F437-855B-4490-8011-DF59887BE6D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndIncluding" : "5.32",
            "matchCriteriaId" : "B25A6C8A-E0B1-4325-8CC5-58DB927A516F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B99746-0589-46E6-9CBD-F38619AD97DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T17:15:10.560",
      "lastModified" : "2025-02-04T17:15:12.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Nokia NetAct before 22 FP2211. On the Working Set Manager page, users can create a Working Set with a name that has a client-side template injection payload. Input validation is missing during creation of the working set. For an external attacker, it is very difficult to exploit this, because a few dynamically created parameters such as Jsession-id, a CSRF token, and an Nxsrf token would be needed. The attack can realistically only be performed by an internal user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:netact:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.1",
            "matchCriteriaId" : "BA575650-1F3C-42EB-B360-72D245F414B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nokia.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-04/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nokia.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-04/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T17:15:10.627",
      "lastModified" : "2025-02-04T17:15:12.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Nokia NetAct before 22 FP2211. On the Scheduled Search tab under the Alarm Reports Dashboard page, users can create a script to inject XSS. Input validation was missing during creation of a scheduled task. For an external attacker, it is very difficult to exploit this, because a few dynamically created parameters such as Jsession-id, a CSRF token, and an Nxsrf token would be needed. The attack can realistically only be performed by an internal user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:netact:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20.1",
            "matchCriteriaId" : "C5E0663C-CBA9-4808-895C-7E2A04D919F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nokia.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-05/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nokia.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26494",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T17:15:10.693",
      "lastModified" : "2024-11-21T07:51:38.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "lorawan-stack is an open source LoRaWAN network server. Prior to version 3.24.1, an open redirect exists on the login page of the lorawan stack server, allowing an attacker to supply a user controlled redirect upon sign in. This issue may allows malicious actors to phish users, as users assume they were redirected to the homepage on login. Version 3.24.1 contains a fix.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thethingsnetwork:lorawan-stack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.24.1",
            "matchCriteriaId" : "5085A9E1-E8DC-4888-BE64-BE80842C8336"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TheThingsNetwork/lorawan-stack/blob/ecdef730f176c02f7c9afce98b0457ae64de5bfc/pkg/webui/account/views/login/index.js#L90-L90",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/TheThingsNetwork/lorawan-stack/blob/ecdef730f176c02f7c9afce98b0457ae64de5bfc/pkg/webui/account/views/token-login/index.js#L74-L74",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/TheThingsNetwork/lorawan-stack/commit/f06776028bdb3994847fc6067613dc61a2b3559e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TheThingsNetwork/lorawan-stack/releases/tag/v3.24.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2022-138_lorawan-stack/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TheThingsNetwork/lorawan-stack/blob/ecdef730f176c02f7c9afce98b0457ae64de5bfc/pkg/webui/account/views/login/index.js#L90-L90",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/TheThingsNetwork/lorawan-stack/blob/ecdef730f176c02f7c9afce98b0457ae64de5bfc/pkg/webui/account/views/token-login/index.js#L74-L74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/TheThingsNetwork/lorawan-stack/commit/f06776028bdb3994847fc6067613dc61a2b3559e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/TheThingsNetwork/lorawan-stack/releases/tag/v3.24.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2022-138_lorawan-stack/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30544",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T17:15:10.777",
      "lastModified" : "2025-02-04T19:15:29.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kiwi TCMS is an open source test management system. In versions of Kiwi TCMS prior to 12.2, users were able to update their email addresses via the `My profile` admin page. This page allowed them to change the email address registered with their account without the ownership verification performed during account registration. Operators of Kiwi TCMS should upgrade to v12.2 or later to receive a patch. No known workarounds exist."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-283"
        }, {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kiwitcms:kiwi_tcms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.2",
            "matchCriteriaId" : "54963FF5-B772-4EC5-A2A1-3E98D68369C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-7x6q-3v3m-cwjg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/1714df73-e639-4d64-ab25-ced82dad9f85/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://kiwitcms.org/blog/kiwi-tcms-team/2023/04/23/kiwi-tcms-122/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-7x6q-3v3m-cwjg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/1714df73-e639-4d64-ab25-ced82dad9f85/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://kiwitcms.org/blog/kiwi-tcms-team/2023/04/23/kiwi-tcms-122/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://huntr.com/bounties/1714df73-e639-4d64-ab25-ced82dad9f85",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30613",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T17:15:10.863",
      "lastModified" : "2025-04-11T14:50:37.970",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kiwi TCMS, an open source test management system, allows users to upload attachments to test plans, test cases, etc. In versions of Kiwi TCMS prior to 12.2, there is no control over what kinds of files can be uploaded. Thus, a malicious actor may upload an `.exe` file or a file containing embedded JavaScript and trick others into clicking on these files, causing vulnerable browsers to execute malicious code on another computer.\n\nKiwi TCMS v12.2 comes with functionality that allows administrators to configure additional upload validator functions which give them more control over what file types are accepted for upload. By default `.exe` are denied. Other files containing the `<script>` tag, regardless of their type are also denied b/c they are a path to XSS attacks. There are no known workarounds aside from upgrading."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kiwitcms:kiwi_tcms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.2",
            "matchCriteriaId" : "54963FF5-B772-4EC5-A2A1-3E98D68369C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-fwcf-753v-fgcj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/c30d3503-600d-4d00-9571-98826a51f12c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://kiwitcms.org/blog/kiwi-tcms-team/2023/04/23/kiwi-tcms-122/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-fwcf-753v-fgcj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/c30d3503-600d-4d00-9571-98826a51f12c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://kiwitcms.org/blog/kiwi-tcms-team/2023/04/23/kiwi-tcms-122/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://huntr.com/bounties/c30d3503-600d-4d00-9571-98826a51f12c",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22918",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-04-24T18:15:09.027",
      "lastModified" : "2024-11-21T07:45:38.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, VPN series firmware versions 4.30 through 5.35, NWA110AX firmware version 6.50(ABTG.2) and earlier versions, WAC500 firmware version 6.50(ABVS.0) and earlier versions, and WAX510D firmware version 6.50(ABTF.2) and earlier versions, which could allow a remote authenticated attacker to retrieve encrypted information of the administrator on an affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-359"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "84A41F09-4474-4ABC-B2FA-92B17F63A7CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D68A36FF-8CAF-401C-9F18-94F3A2405CF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "73E39B94-291E-4E3A-8A89-B74FF063BA05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7654A1-3806-41C7-82D4-46B0CD7EE53B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "7728D2C4-0B0A-404E-92BC-AAA1A1987BFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B41F437-855B-4490-8011-DF59887BE6D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "8B7E5F75-5577-4511-A1F4-1BD142D60BD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2818E8AC-FFEE-4DF9-BF3F-C75166C0E851"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "B8F79940-F737-4A71-9FAC-1F99E0BCE450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47398FD0-6C5E-4625-9EFD-DE08C9AB7DB2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "791D6928-BE82-4678-A8A4-39C9D9A1C684"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B99746-0589-46E6-9CBD-F38619AD97DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "FC95F84E-95A0-4FB8-942A-732E022E3CC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B30A4C0-9928-46AD-9210-C25656FB43FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "07895A23-2B15-4631-A55A-798B35A63E2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646C1F07-B553-47B0-953B-DC7DE7FD0F8B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "F65ACDFE-3A54-46D6-98CA-2D51957072AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93B6A06-2951-46D2-A7E1-103D7318D612"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "C0B8FF81-5020-429E-ABC7-D0F18A5177F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C697A5-D1D3-4FF0-9C43-D27B18181958"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "FD0F817C-6388-41E2-9F80-9B5427036865"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1396E3-731B-4D05-A3F8-F3ABB80D5C29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "7D65F0EC-7ACA-4B80-8D4E-2C1459837D15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74ABA7E-AA78-4A13-A64E-C44021591B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_20w-vpn_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "224300FB-2462-4E88-A41E-E9E8EAE9CF48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_20w-vpn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEA412F-3DA1-4E91-9C74-0666147DABCE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "F61480ED-BBF0-49EC-A814-CEFDE1FBFA08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110A1CA4-0170-4834-8281-0A3E14FC5584"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg20-vpn_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "7079103C-ED92-40C3-AF42-4689822A96E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg20-vpn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7239C54F-EC9E-44B4-AE33-1D36E5448219"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "FB329984-D2A1-40B4-826D-78643B8DD4C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D90A7B-174F-40A1-8AF4-08B15B7BAC40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "5DB62871-BC40-43D8-A486-471CD9316332"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECD311A-4E96-4576-AADF-47291EDE3559"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "D0135FFF-62FA-4AEA-8B67-1CCA2D85D8E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45C303-1A95-4245-B242-3AB9B9106CD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "B01FA34A-CA33-48E7-978C-638FC678C9C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3AC823-0ECA-42D8-8312-2FBE5914E4C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nap203_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.28\\(abfa.0\\)",
            "matchCriteriaId" : "85AA4E30-0A0E-4353-B88D-A856B83162DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nap203:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80AE2CEA-90AC-421A-86BB-F404CDE7785D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nap303_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.28\\(abex.0\\)",
            "matchCriteriaId" : "36AD6F34-B17E-4853-9375-62B51DE5F1D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nap303:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4BF5D4C-DB8E-4077-BE78-C73AA203406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nap353_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.28\\(abey.0\\)",
            "matchCriteriaId" : "49E8EA12-187E-402B-866A-9125B2287292"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nap353:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCEC13E-3D1C-4B42-87F5-94FE1066C218"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nwa110ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(abtg.2\\)",
            "matchCriteriaId" : "58E64F26-5465-4BD8-A948-39022B5AAA52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nwa110ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A3F9232-F988-4428-9898-4F536123CE88"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nwa1123-ac_hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.25\\(abin.9\\)",
            "matchCriteriaId" : "E8DEEFBF-DD32-40E5-A431-BE6A93D529A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nwa1123-ac_hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A0FB576-76A2-4A25-979E-5E5B3BF5C636"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nwa1123-ac-pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.28\\(abhd.0\\)",
            "matchCriteriaId" : "3448A074-A9B8-40BD-8DFA-E7097E402750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nwa1123-ac-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC66B07-67FB-47F6-B54B-E40BE89F33A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nwa1123acv3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(abvt.0\\)",
            "matchCriteriaId" : "BFC6F464-DAE9-42CE-9339-C5E35B90B17B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nwa1123acv3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36C13E7F-2186-4587-83E9-57B05A7147B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nwa210ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(abtd.2\\)",
            "matchCriteriaId" : "DCE46E92-D9DD-439C-BD41-88738FA652B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nwa210ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB129F9-64D8-43C2-9366-51EBDF419F5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nwa220ax-6e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(acco.2\\)",
            "matchCriteriaId" : "DECB1230-D22C-4FBD-909C-6315B66B189D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nwa220ax-6e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E03F755-424D-4248-9076-ED7BECEB94C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nwa50ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.55\\(acge.1\\)",
            "matchCriteriaId" : "0B73F329-98E5-496F-BE38-47DD023DCB64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nwa50ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2806A3B3-8F13-4170-B284-8809E3502044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nwa50ax-pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(acge.0\\)",
            "matchCriteriaId" : "B5804045-E32E-40E0-B42E-80755C385974"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nwa50ax-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DD6E6B-61EC-4E60-8244-56ADB26F2234"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nwa5123-ac_hd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.25\\(abim.9\\)",
            "matchCriteriaId" : "881C0001-B6CA-409D-8901-653227098219"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nwa5123-ac_hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D85300F-9207-438C-A149-80FC7C6C0746"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nwa55axe_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.29\\(abzl.1\\)",
            "matchCriteriaId" : "4484EA94-3E1D-4DA8-B612-A35D50DC1103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nwa55axe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7440976-5CB4-40BE-95C2-98EF4B888109"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nwa90ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.29\\(accv.1\\)",
            "matchCriteriaId" : "3D091EB4-A1FC-4E5F-AEE2-6EF879DC5B0A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nwa90ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A903978-737E-4266-A670-BC94E32CAF96"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nwa90ax-pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(acgf.0\\)",
            "matchCriteriaId" : "D4FF6556-2B10-4A8C-9325-0A6D4B41E529"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nwa90ax-pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA44855-B135-44BD-AE21-FC58CD647AB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wac500_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(abvs.0\\)",
            "matchCriteriaId" : "4D277464-AF76-4799-9B71-E96CB12BE0C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wac500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C024551-F08F-4152-940D-1CF8BCD79613"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wac500h_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(abwa.0\\)",
            "matchCriteriaId" : "57DFDE05-C95F-446B-BA97-98EBA11C9794"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wac500h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1FD502-4F62-4C77-B3BC-E563B24F0067"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wac5302d-sv2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.25\\(abvz.9\\)",
            "matchCriteriaId" : "84A8FBD7-8461-474E-AFB1-BCAE24D4A2CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wac5302d-sv2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A690501F-DC2D-4F90-ABC0-33B5F1279C36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wac6103d-i_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.28\\(aaxh.0\\)",
            "matchCriteriaId" : "3DF539FD-EDEA-4D37-8F1C-267884A617EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wac6103d-i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "341DB051-7F01-4B36-BA15-EBC25FACB439"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wac6303d-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.25\\(abgl.9\\)",
            "matchCriteriaId" : "622C2163-0B2F-4A32-B5C4-4111B8EC9096"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wac6303d-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F08117-0BCE-4EA1-8DA7-1AC4EFF67E2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wac6502d-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.28\\(aasd.0\\)",
            "matchCriteriaId" : "A929856C-58D2-41AB-9EAC-E655123FD4FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wac6502d-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD8842C8-FB0A-46F0-9BB4-CAC6334D1E51"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wac6502d-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.28\\(aase.0\\)",
            "matchCriteriaId" : "AB36BF49-E31B-4F35-84B9-3EF20989FE2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wac6502d-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD108388-ABE5-4142-910F-C3C8B1C13617"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wac6503d-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.28\\(aasf.0\\)",
            "matchCriteriaId" : "CCA23320-A0E2-4A63-A20A-1F5FD7504C5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wac6503d-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DFDF64A-17F5-4F05-8700-DCA36CCB6F2B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wac6552d-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.28\\(abio.0\\)",
            "matchCriteriaId" : "E49B6FA1-4FCE-4802-8FCA-988048D9A595"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wac6552d-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD47738A-9001-4CC1-8FED-1D1CFC56F548"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wac6553d-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.28\\(aasg.0\\)",
            "matchCriteriaId" : "AD253268-2B7D-43BF-86BD-E603A52FD98A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wac6553d-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55273BCE-4F2C-4ED9-9FCB-D1197555BD53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wax510d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(abtf.2\\)",
            "matchCriteriaId" : "B0C89819-CCB6-42A0-8045-850D544D1BBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wax510d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A37A0E9-D505-4376-AB0E-1C0FD7E53A55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wax610d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(abte.2\\)",
            "matchCriteriaId" : "EA21E78C-585A-4689-96B7-18C5DB44D2DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wax610d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3518DA0A-2C7B-4979-A457-0826C921B0F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wax620d-6e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(accn.2\\)",
            "matchCriteriaId" : "6B470158-EE21-45EB-BDEC-5396DE9CB23C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wax620d-6e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B4EBCC9-4FF9-41FC-9FFE-DBFAB239888B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wax630s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(abzd.2\\)",
            "matchCriteriaId" : "43DD5397-02A9-40DD-BD02-052095CB8DDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wax630s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC74AAF9-5206-4CEB-9023-6CD4F38AA623"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wax640s-6e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(accm.2\\)",
            "matchCriteriaId" : "F946BABC-A982-4625-AD9F-962C6FBDFDE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wax640s-6e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E4E9A0-DF92-47B7-94D6-0867E3171E47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wax650s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(abrm.2\\)",
            "matchCriteriaId" : "2260165C-2483-4F48-8E70-DC82B5DA1554"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wax650s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D784994E-E2CE-4328-B490-D9DC195A53DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:wax655e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.50\\(acdo.2\\)",
            "matchCriteriaId" : "F6B0AE56-107B-41E2-A06A-BC8DC0A32FE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:wax655e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61158220-B5E8-4BF4-B2C2-E8ABFD3266CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26059",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T18:15:09.090",
      "lastModified" : "2025-02-04T17:15:12.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Nokia NetAct before 22 SP1037. On the Site Configuration Tool tab, attackers can upload a ZIP file which, when processed, exploits Stored XSS. The upload option of the Site Configuration tool does not validate the file contents. The application is in a demilitarised zone behind a perimeter firewall and without exposure to the internet. The attack can only be performed by an internal user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:netact:20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4884872D-10EF-48EB-94EA-FAFD6B52D37D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nokia.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-03/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nokia.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T18:15:09.143",
      "lastModified" : "2025-05-30T16:15:33.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Telindus Apsal 3.14.2022.235 b. Unauthorized actions that could modify the application behaviour may not be blocked."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telindus:apsal:3.14.2022.235_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1550EDE4-64F7-4BEE-BEB6-4964143F5E19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-26097",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/CVE-2023-26097",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.telindus.lu/fr/produits/apsal",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/CVE-2023-26097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.telindus.lu/fr/produits/apsal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T18:15:09.200",
      "lastModified" : "2025-05-30T16:15:33.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Telindus Apsal 3.14.2022.235 b. The consultation permission is insecure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telindus:apsal:3.14.2022.235_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1550EDE4-64F7-4BEE-BEB6-4964143F5E19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-26099",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/CVE-2023-26099",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.telindus.lu/fr/produits/apsal",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/CVE-2023-26099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.telindus.lu/fr/produits/apsal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T18:15:09.253",
      "lastModified" : "2025-02-05T16:15:35.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability found in PrestaShop bdroppy v.2.2.12 and before allowing a remote attacker to gain privileges via the BdroppyCronModuleFrontController::importProducts component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brandsdistribution:bdroppy:*:*:*:*:*:prestashop:*:*",
            "versionEndExcluding" : "2.2.28",
            "matchCriteriaId" : "11D14DD9-AFD5-4A4E-8E3F-3D3456BF6C85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bdroppy.com/dropshipping-apps-integrations-bdroppy/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/04/20/bdroppy.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://bdroppy.com/dropshipping-apps-integrations-bdroppy/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/04/20/bdroppy.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27848",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T18:15:09.357",
      "lastModified" : "2025-02-05T16:15:36.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "broccoli-compass v0.2.4 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broccoli-compass_project:broccoli-compass:0.2.4:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "37B728EE-50E9-43B2-AF38-8856A90CE1DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/omnitaint/Vulnerability-Reports/blob/9d65add2bca71ed6d6b2e281ee6790a12504ff8e/reports/broccoli-compass/report.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/broccoli-compass",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/omnitaint/Vulnerability-Reports/blob/9d65add2bca71ed6d6b2e281ee6790a12504ff8e/reports/broccoli-compass/report.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/broccoli-compass",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27849",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T18:15:09.400",
      "lastModified" : "2025-02-04T21:15:23.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rails-routes-to-json v1.0.0 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rails-routes-to-json_project:rails-routes-to-json:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D0797752-2B7F-447A-806A-8241D5CA64A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/omnitaint/Vulnerability-Reports/blob/2211ea4712f24d20b7f223fb737910fdfb041edb/reports/rails-routes-to-json/report.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/rails-routes-to-json",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/omnitaint/Vulnerability-Reports/blob/2211ea4712f24d20b7f223fb737910fdfb041edb/reports/rails-routes-to-json/report.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/rails-routes-to-json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27990",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-04-24T18:15:09.440",
      "lastModified" : "2026-02-25T17:19:32.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow an authenticated attacker with administrator privileges to store malicious scripts in a vulnerable device. A successful XSS attack could then result in the stored malicious scripts being executed when the user visits the Logs page of the GUI on the device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "84A41F09-4474-4ABC-B2FA-92B17F63A7CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D68A36FF-8CAF-401C-9F18-94F3A2405CF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "73E39B94-291E-4E3A-8A89-B74FF063BA05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7654A1-3806-41C7-82D4-46B0CD7EE53B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "7728D2C4-0B0A-404E-92BC-AAA1A1987BFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B41F437-855B-4490-8011-DF59887BE6D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "8B7E5F75-5577-4511-A1F4-1BD142D60BD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2818E8AC-FFEE-4DF9-BF3F-C75166C0E851"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "B8F79940-F737-4A71-9FAC-1F99E0BCE450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47398FD0-6C5E-4625-9EFD-DE08C9AB7DB2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "791D6928-BE82-4678-A8A4-39C9D9A1C684"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B99746-0589-46E6-9CBD-F38619AD97DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "FC95F84E-95A0-4FB8-942A-732E022E3CC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B30A4C0-9928-46AD-9210-C25656FB43FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "07895A23-2B15-4631-A55A-798B35A63E2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646C1F07-B553-47B0-953B-DC7DE7FD0F8B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "F65ACDFE-3A54-46D6-98CA-2D51957072AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93B6A06-2951-46D2-A7E1-103D7318D612"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "C0B8FF81-5020-429E-ABC7-D0F18A5177F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C697A5-D1D3-4FF0-9C43-D27B18181958"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "FD0F817C-6388-41E2-9F80-9B5427036865"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1396E3-731B-4D05-A3F8-F3ABB80D5C29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "7D65F0EC-7ACA-4B80-8D4E-2C1459837D15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74ABA7E-AA78-4A13-A64E-C44021591B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_20w-vpn_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "224300FB-2462-4E88-A41E-E9E8EAE9CF48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_20w-vpn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEA412F-3DA1-4E91-9C74-0666147DABCE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "F61480ED-BBF0-49EC-A814-CEFDE1FBFA08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110A1CA4-0170-4834-8281-0A3E14FC5584"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg20-vpn_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "7079103C-ED92-40C3-AF42-4689822A96E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg20-vpn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7239C54F-EC9E-44B4-AE33-1D36E5448219"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "FB329984-D2A1-40B4-826D-78643B8DD4C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D90A7B-174F-40A1-8AF4-08B15B7BAC40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "5DB62871-BC40-43D8-A486-471CD9316332"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECD311A-4E96-4576-AADF-47291EDE3559"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "D0135FFF-62FA-4AEA-8B67-1CCA2D85D8E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45C303-1A95-4245-B242-3AB9B9106CD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "B01FA34A-CA33-48E7-978C-638FC678C9C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3AC823-0ECA-42D8-8312-2FBE5914E4C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-xss-vulnerability-and-post-authentication-command-injection-vulnerability-in-firewalls",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-xss-vulnerability-and-post-authentication-command-injection-vulnerability-in-firewalls",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27991",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-04-24T18:15:09.497",
      "lastModified" : "2024-11-21T07:53:53.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4.16 through 5.35, USG20(W)-VPN firmware versions 4.16 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow an authenticated attacker to execute some OS commands remotely."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "84A41F09-4474-4ABC-B2FA-92B17F63A7CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D68A36FF-8CAF-401C-9F18-94F3A2405CF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "73E39B94-291E-4E3A-8A89-B74FF063BA05"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7654A1-3806-41C7-82D4-46B0CD7EE53B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "7728D2C4-0B0A-404E-92BC-AAA1A1987BFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B41F437-855B-4490-8011-DF59887BE6D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "8B7E5F75-5577-4511-A1F4-1BD142D60BD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2818E8AC-FFEE-4DF9-BF3F-C75166C0E851"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "B8F79940-F737-4A71-9FAC-1F99E0BCE450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47398FD0-6C5E-4625-9EFD-DE08C9AB7DB2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.32",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "791D6928-BE82-4678-A8A4-39C9D9A1C684"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B99746-0589-46E6-9CBD-F38619AD97DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "FC95F84E-95A0-4FB8-942A-732E022E3CC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B30A4C0-9928-46AD-9210-C25656FB43FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "07895A23-2B15-4631-A55A-798B35A63E2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646C1F07-B553-47B0-953B-DC7DE7FD0F8B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "F65ACDFE-3A54-46D6-98CA-2D51957072AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93B6A06-2951-46D2-A7E1-103D7318D612"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "C0B8FF81-5020-429E-ABC7-D0F18A5177F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C697A5-D1D3-4FF0-9C43-D27B18181958"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "FD0F817C-6388-41E2-9F80-9B5427036865"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1396E3-731B-4D05-A3F8-F3ABB80D5C29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.50",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "7D65F0EC-7ACA-4B80-8D4E-2C1459837D15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74ABA7E-AA78-4A13-A64E-C44021591B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_20w-vpn_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "224300FB-2462-4E88-A41E-E9E8EAE9CF48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_20w-vpn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEA412F-3DA1-4E91-9C74-0666147DABCE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "F61480ED-BBF0-49EC-A814-CEFDE1FBFA08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110A1CA4-0170-4834-8281-0A3E14FC5584"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg20-vpn_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "7079103C-ED92-40C3-AF42-4689822A96E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg20-vpn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7239C54F-EC9E-44B4-AE33-1D36E5448219"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "FB329984-D2A1-40B4-826D-78643B8DD4C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D90A7B-174F-40A1-8AF4-08B15B7BAC40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "5DB62871-BC40-43D8-A486-471CD9316332"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECD311A-4E96-4576-AADF-47291EDE3559"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "D0135FFF-62FA-4AEA-8B67-1CCA2D85D8E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45C303-1A95-4245-B242-3AB9B9106CD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.30",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "B01FA34A-CA33-48E7-978C-638FC678C9C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3AC823-0ECA-42D8-8312-2FBE5914E4C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-xss-vulnerability-and-post-authentication-command-injection-vulnerability-in-firewalls",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-xss-vulnerability-and-post-authentication-command-injection-vulnerability-in-firewalls",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29566",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T18:15:09.550",
      "lastModified" : "2025-02-04T17:15:13.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "huedawn-tesseract 0.3.3 and dawnsparks-node-tesseract 0.4.0 to 0.4.1 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dawnsparks-node-tesseract_project:dawnsparks-node-tesseract:0.4.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7CCBE808-82D3-47FB-9E5D-BC12CC953C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dawnsparks-node-tesseract_project:dawnsparks-node-tesseract:0.4.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "05DD4114-19F6-4EBC-90F3-6E91284C0169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huedawn-tesseract_project:huedawn-tesseract:0.3.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0B4DC31D-6842-476F-A204-2DBCA82C19D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/omnitaint/Vulnerability-Reports/blob/ec3645003c7f8996459b5b24c722474adc2d599f/reports/dawnsparks-node-tesseract/report.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rona-dinihari/dawnsparks-node-tesseract",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rona-dinihari/dawnsparks-node-tesseract/commit/81d1664f0b9fe521534acfae1d5b9c40127b36c1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.npmjs.com/package/dawnsparks-node-tesseract",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/omnitaint/Vulnerability-Reports/blob/ec3645003c7f8996459b5b24c722474adc2d599f/reports/dawnsparks-node-tesseract/report.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rona-dinihari/dawnsparks-node-tesseract",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/rona-dinihari/dawnsparks-node-tesseract/commit/81d1664f0b9fe521534acfae1d5b9c40127b36c1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.npmjs.com/package/dawnsparks-node-tesseract",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0276",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:08.653",
      "lastModified" : "2025-02-04T19:15:26.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Weaver Xtreme Theme Support WordPress plugin before 6.2.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weavertheme:weaver_xtreme_theme_support:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "6.2.7",
            "matchCriteriaId" : "288F3D81-06CD-4F7D-B32C-00BEFC031575"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d00824a3-7df5-4b52-a31b-5fdfb19c970f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d00824a3-7df5-4b52-a31b-5fdfb19c970f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0388",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:08.723",
      "lastModified" : "2025-02-04T19:15:26.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Random Text WordPress plugin through 0.3.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscribers."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:random_text_project:random_text:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.3.0",
            "matchCriteriaId" : "CC148352-A7A5-45BB-8D9D-E1CCF294D3D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/77861a2e-879a-4bd0-b4c0-cd19481ace5d",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/77861a2e-879a-4bd0-b4c0-cd19481ace5d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0418",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:08.803",
      "lastModified" : "2025-02-04T17:15:10.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Video Central for WordPress plugin through 1.3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:video_central_project:video_central:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "FA4FDE3D-67AA-42BB-9557-6625B867BAD7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/821751bb-feaf-45b8-91a9-e173cb0c05fc",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/821751bb-feaf-45b8-91a9-e173cb0c05fc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0420",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:08.870",
      "lastModified" : "2025-02-04T19:15:27.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Custom Post Type and Taxonomy GUI Manager WordPress plugin through 1.1 does not have CSRF, and is lacking sanitising as well as escaping in some parameters, allowing attackers to make a logged in admin put Stored Cross-Site Scripting payloads via CSRF"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:custom_post_type_and_taxonomy_gui_manager_project:custom_post_type_and_taxonomy_gui_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "896EFA68-539A-4195-9EC4-5EB4D0277760"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/266e417f-ece7-4ff5-a724-4d9c8e2f3faa",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/266e417f-ece7-4ff5-a724-4d9c8e2f3faa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0424",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:08.953",
      "lastModified" : "2025-02-04T17:15:10.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MS-Reviews WordPress plugin through 1.5 does not sanitise and escape reviews, which could allow users any authenticated users, such as Subscribers to perform Stored Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ms-reviews_project:ms-reviews:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "094E8370-C46A-4D44-BC1F-41F7A2937333"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/b0f8713f-54b2-4ab2-a475-60a1692a50e9",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/b0f8713f-54b2-4ab2-a475-60a1692a50e9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0899",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:09.033",
      "lastModified" : "2025-02-04T19:15:27.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before outputting it back in the Shoutbox, leading to Stored Cross-Site Scripting which could be used against high privilege users such as admins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp_live_chat_shoutbox_project:wp_live_chat_shoutbox:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.4.2",
            "matchCriteriaId" : "4CAFA94C-A984-4478-8A3D-E548DF169102"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e95f925f-118e-4fa1-8e8f-9dc1bc698f12",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e95f925f-118e-4fa1-8e8f-9dc1bc698f12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1020",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:09.103",
      "lastModified" : "2025-02-04T19:15:27.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp_live_chat_shoutbox_project:wp_live_chat_shoutbox:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.4.2",
            "matchCriteriaId" : "4CAFA94C-A984-4478-8A3D-E548DF169102"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/4e5aa9a3-65a0-47d6-bc26-a2fb6cb073ff",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/4e5aa9a3-65a0-47d6-bc26-a2fb6cb073ff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1126",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:09.180",
      "lastModified" : "2025-02-04T18:15:32.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP FEvents Book WordPress plugin through 0.46 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Cross-Site Scripting attacks"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp_fevents_book_project:wp_fevents_book:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.46",
            "matchCriteriaId" : "3FAA7F63-57AD-4DDB-8547-8F5656AEB2E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/87ce3c59-b234-47bf-abca-e690b53bbe82",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/87ce3c59-b234-47bf-abca-e690b53bbe82",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1129",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:09.267",
      "lastModified" : "2025-02-04T19:15:27.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP FEvents Book WordPress plugin through 0.46 does not ensures that bookings to be updated belong to the user making the request, allowing any authenticated user to book, add notes, or cancel booking on behalf of other users."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp_fevents_book_project:wp_fevents_book:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.46",
            "matchCriteriaId" : "3FAA7F63-57AD-4DDB-8547-8F5656AEB2E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d40479de-fb04-41b8-9fb0-41b9eefbd8af",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d40479de-fb04-41b8-9fb0-41b9eefbd8af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1324",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:09.343",
      "lastModified" : "2025-02-04T19:15:27.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Easy Forms for Mailchimp WordPress plugin before 6.8.8 does not sanitise and escape some parameters before outputting them back in the response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yikesinc:easy_forms_for_mailchimp:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "6.8.8",
            "matchCriteriaId" : "6DB1A377-21C2-4F95-8AA1-01F8F9632ACA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/8f510b8c-b97a-44c9-a36d-2d775a4f7b81",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8f510b8c-b97a-44c9-a36d-2d775a4f7b81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1414",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:09.410",
      "lastModified" : "2025-02-04T16:15:34.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP VR WordPress plugin before 8.3.0 does not have authorisation and CSRF checks in various AJAX actions, one in particular could allow any authenticated users, such as subscriber to update arbitrary tours"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rextheme:wp_vr:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "8.3.0",
            "matchCriteriaId" : "D638D37F-FB15-4B38-83A0-C2B24FDD2AF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d61d4be7-9251-4c62-8fb7-8a456aa6969e",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d61d4be7-9251-4c62-8fb7-8a456aa6969e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1420",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:09.487",
      "lastModified" : "2025-03-18T15:21:33.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ajax Search Lite WordPress plugin before 4.11.1, Ajax Search Pro WordPress plugin before 4.26.2 does not sanitise and escape a parameter before outputting it back in a response of an AJAX action, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-dreams:ajax_search:*:*:*:*:lite:wordpress:*:*",
            "versionEndExcluding" : "4.11.1",
            "matchCriteriaId" : "29EAA46F-7186-4BE1-8F19-E262D67836FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-dreams:ajax_search:*:*:*:*:pro:wordpress:*:*",
            "versionEndExcluding" : "4.26.2",
            "matchCriteriaId" : "BE3EA907-24EB-4CAF-9E37-F91810823565"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1435",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:09.560",
      "lastModified" : "2025-03-18T15:21:33.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ajax Search Pro WordPress plugin before 4.26.2 does not sanitise and escape various parameters before outputting them back in pages, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-dreams:ajax_search:*:*:*:*:pro:wordpress:*:*",
            "versionEndExcluding" : "4.26.2",
            "matchCriteriaId" : "BE3EA907-24EB-4CAF-9E37-F91810823565"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/0ca62908-4ef5-41e0-9223-f77ad2c333d7",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/0ca62908-4ef5-41e0-9223-f77ad2c333d7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1623",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:09.627",
      "lastModified" : "2025-02-04T17:15:10.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug information to a user supplied email, which could allow attackers to make a logged in admin send such information to an arbitrary email address via a CSRF attack."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webdevstudios:custom_post_type_ui:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.13.5",
            "matchCriteriaId" : "3D8E6F26-11C1-463E-987A-CECC08755E4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/a04d3808-f4fc-4d77-a1bd-be623cd7053e",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/a04d3808-f4fc-4d77-a1bd-be623cd7053e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1624",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2023-04-24T19:15:09.693",
      "lastModified" : "2025-02-04T18:15:32.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be deleted is inside the expected folder. This could allow attackers to make users with the wpcode_activate_snippets capability delete arbitrary log files on the server, including outside of the blog folders"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpcode:wpcode:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "8695F540-99C6-4023-A002-7DA916F16E53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/132b70e5-4368-43b4-81f6-2d01bc09dc8f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/132b70e5-4368-43b4-81f6-2d01bc09dc8f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T19:15:09.767",
      "lastModified" : "2025-02-04T17:15:14.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Third Reality Smart Blind 1.00.54 contains a denial-of-service vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:3reality:3rsb015bz_firmware:1.00.54:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E00DF2A-7E43-43AD-9D6A-F4FA98033AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:3reality:3rsb015bz:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "856A30F4-A58D-477E-86E3-7AFCF6595549"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/iot-sec23/IoT-CVE/blob/main/Third%20Reality%20Smart%20Blind%20Vulnerability%20Report.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.3reality.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/iot-sec23/IoT-CVE/blob/main/Third%20Reality%20Smart%20Blind%20Vulnerability%20Report.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.3reality.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2257",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-04-24T19:15:09.820",
      "lastModified" : "2025-02-04T16:15:36.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access to the user interface to unlock a Hub \nBusiness space without being prompted to enter the password via an \nunimplemented \"Force Login\" security feature.\n\nThis vulnerability occurs only if \"Force Login\" feature is enabled on the Hub Business instance and that an attacker has access to a locked Workspace desktop application configured with a Hub Business space.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:workspace:*:*:*:*:desktop:*:*:*",
            "versionEndExcluding" : "2023.1.1.4",
            "matchCriteriaId" : "4C4BA203-752A-421F-9A01-4127E6E3DDE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0011",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29530",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T20:15:08.823",
      "lastModified" : "2024-11-21T07:57:14.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Laminas Diactoros provides PSR HTTP Message implementations. In versions 2.18.0 and prior, 2.19.0, 2.20.0, 2.21.0, 2.22.0, 2.23.0, 2.24.0, and 2.25.0, users who create HTTP requests or responses using laminas/laminas-diactoros, when providing a newline at the start or end of a header key or value, can cause an invalid message. This can lead to denial of service vectors or application errors. The problem has been patched in following versions 2.18.1, 2.19.1, 2.20.1, 2.21.1, 2.22.1, 2.23.1, 2.24.1, and 2.25.1. As a workaround, validate HTTP header keys and/or values, and if using user-supplied values, filter them to strip off leading or trailing newline characters before calling `withHeader()`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getlaminas:laminas-diactoros:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.18.1",
            "matchCriteriaId" : "BFBEAEC3-D107-4137-91F2-8A84490184E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getlaminas:laminas-diactoros:2.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1A0F96-4101-4B39-8978-56E99B4A9AC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getlaminas:laminas-diactoros:2.20.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DE2176-DE48-4C54-8BD6-544963C6DF2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getlaminas:laminas-diactoros:2.21.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C5DAF3-32CD-4E9B-A65D-182C539657D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getlaminas:laminas-diactoros:2.22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97159541-821D-4653-BEA4-C56A28F8C294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getlaminas:laminas-diactoros:2.23.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59692B7C-63C6-4461-9B88-A0654CD7F97C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getlaminas:laminas-diactoros:2.24.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7084070F-E50B-4E81-8DE4-A1775FAB4487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getlaminas:laminas-diactoros:2.25.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBCC392-7E5C-4787-B4AF-E158F3E71DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guzzlephp:psr-7:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9.1",
            "matchCriteriaId" : "704750B5-E610-4CDF-AE19-64DA9B537919"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:guzzlephp:psr-7:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.4.5",
            "matchCriteriaId" : "DB62DA3C-0E8C-4240-9238-67D584A839D3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advisories/GHSA-wxmh-65f7-jcvw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/laminas/laminas-diactoros/security/advisories/GHSA-xv3h-4844-9h36",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPW54QK7ISDALPLP2CKODU4ZIVRYS336/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-wxmh-65f7-jcvw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/laminas/laminas-diactoros/security/advisories/GHSA-xv3h-4844-9h36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPW54QK7ISDALPLP2CKODU4ZIVRYS336/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T21:15:09.180",
      "lastModified" : "2025-05-30T20:15:31.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.10.4",
            "matchCriteriaId" : "2C473D3A-61FB-43E4-B342-9B1CC622F18F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.gnome.org/GNOME/libxml2/-/issues/491",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00031.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0006/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240201-0005/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libxml2/-/issues/491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240201-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29469",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T21:15:09.230",
      "lastModified" : "2025-02-04T21:15:23.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.10.4",
            "matchCriteriaId" : "2C473D3A-61FB-43E4-B342-9B1CC622F18F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.gnome.org/GNOME/libxml2/-/issues/510",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00031.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0006/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libxml2/-/issues/510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2006",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-24T21:15:09.283",
      "lastModified" : "2025-04-23T17:16:28.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10",
            "versionEndExcluding" : "5.10.157",
            "matchCriteriaId" : "8C645DEF-D909-4D54-B5C9-B07E5B6EDB36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.81",
            "matchCriteriaId" : "899FBA32-27B2-4660-BC94-C43ED4349EB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.0.11",
            "matchCriteriaId" : "BA01D181-8E71-42E1-ACF4-7A5B65006EC8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27227B35-932A-4035-B39F-6A455753C0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489D20B9-166F-423D-8C48-A23D3026E33B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AD592C-222D-4C6F-B176-8145A1A5AFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8603654B-A8A9-4DEB-B0DD-C82E1C885749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C855C933-F271-45E6-8E85-8D7CF2EF1BE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2189112",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3bcd6c7eaa53",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230609-0004/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-439/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2189112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3bcd6c7eaa53",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230609-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-23-439/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2019",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-24T21:15:09.347",
      "lastModified" : "2025-03-18T20:15:19.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-911"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0",
            "matchCriteriaId" : "87B81C9D-7173-4FFB-97BC-9C41AB20A53C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2189137",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/180a6a3ee60a",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-CAN-17811/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2189137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/180a6a3ee60a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-CAN-17811/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2250",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-24T21:15:09.410",
      "lastModified" : "2025-02-04T17:15:15.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-manager-registration-controller or cluster-manager deployments. A malicious user can take advantage of this and bind the cluster-admin to any service account or using the service account to list all secrets for all kubernetes namespaces, leading into a cluster-level privilege escalation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-268"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:open_cluster_management:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0834F4B0-F5C7-43E7-9A7E-74B7FA455A6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open-cluster-management-io/registration-operator/pull/344",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/open-cluster-management-io/registration-operator/pull/344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2258",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-24T21:15:09.477",
      "lastModified" : "2024-11-21T07:58:15.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Formula Elements in a CSV File in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alf:alf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0-m4-2304",
            "matchCriteriaId" : "DB945ACA-B596-417D-9832-1137D9B9C640"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alfio-event/alf.io/commit/94e2923a317452e337393789c9f3192dfc1ddac2",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/31eaf0fe-4d91-4022-aa9b-802bc6eafb8f",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/alfio-event/alf.io/commit/94e2923a317452e337393789c9f3192dfc1ddac2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/31eaf0fe-4d91-4022-aa9b-802bc6eafb8f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2259",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-24T21:15:09.547",
      "lastModified" : "2024-11-21T07:58:15.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1336"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alf:alf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0-m4-2304",
            "matchCriteriaId" : "DB945ACA-B596-417D-9832-1137D9B9C640"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alfio-event/alf.io/commit/94e2923a317452e337393789c9f3192dfc1ddac2",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e753bce0-ce82-463b-b344-2f67b39b60ff",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alfio-event/alf.io/commit/94e2923a317452e337393789c9f3192dfc1ddac2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/e753bce0-ce82-463b-b344-2f67b39b60ff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2260",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-24T21:15:09.613",
      "lastModified" : "2024-11-21T07:58:15.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authorization Bypass Through User-Controlled Key in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alf:alf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0-m4-2304",
            "matchCriteriaId" : "DB945ACA-B596-417D-9832-1137D9B9C640"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/alfio-event/alf.io/commit/c9a16ab93d42b2beb06d529b57890121f85be6ef",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/649badc8-c935-4a84-8aa8-d3269ac54377",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/alfio-event/alf.io/commit/c9a16ab93d42b2beb06d529b57890121f85be6ef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/649badc8-c935-4a84-8aa8-d3269ac54377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30626",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T21:15:09.687",
      "lastModified" : "2024-11-21T08:00:32.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jellyfin is a free-software media system. Versions starting with 10.8.0 and prior to 10.8.10 and prior have a directory traversal vulnerability inside the `ClientLogController`, specifically `/ClientLog/Document`. When combined with a cross-site scripting vulnerability (CVE-2023-30627), this can result in file write and arbitrary code execution. Version 10.8.10 has a patch for this issue. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jellyfin:jellyfin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.8.0",
            "versionEndExcluding" : "10.8.10",
            "matchCriteriaId" : "F5C18A18-B001-405D-9787-509225E4E7D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jellyfin/jellyfin-web/security/advisories/GHSA-89hp-h43h-r5pq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/blob/22d880662283980dec994cd7d35fe269613bfce3/Jellyfin.Api/Controllers/ClientLogController.cs#L44",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/commit/82ad2633fdfb1c37a158057c7935f83e1129eda7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/pull/5918",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/releases/tag/v10.8.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/security/advisories/GHSA-9p5f-5x8v-x65m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin-web/security/advisories/GHSA-89hp-h43h-r5pq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/blob/22d880662283980dec994cd7d35fe269613bfce3/Jellyfin.Api/Controllers/ClientLogController.cs#L44",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/commit/82ad2633fdfb1c37a158057c7935f83e1129eda7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/pull/5918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/releases/tag/v10.8.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/security/advisories/GHSA-9p5f-5x8v-x65m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30627",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T21:15:09.760",
      "lastModified" : "2024-11-21T08:00:32.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jellyfin-web is the web client for Jellyfin, a free-software media system. Starting in version 10.1.0 and prior to version 10.8.10, a stored cross-site scripting vulnerability in device.js can be used to make arbitrary calls to the `REST` endpoints with admin privileges. When combined with CVE-2023-30626, this results in remote code execution on the Jellyfin instance in the context of the user who's running it. This issue is patched in version 10.8.10. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jellyfin:jellyfin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.8.10",
            "matchCriteriaId" : "2987978F-8A1B-4CE2-BDC9-A6C5AAA9AE18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jellyfin/jellyfin-web/commit/b88a5951e1a517ff4c820e693d9c0da981cf68ee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin-web/releases/tag/v10.8.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin-web/security/advisories/GHSA-89hp-h43h-r5pq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/security/advisories/GHSA-9p5f-5x8v-x65m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin-web/commit/b88a5951e1a517ff4c820e693d9c0da981cf68ee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin-web/releases/tag/v10.8.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin-web/security/advisories/GHSA-89hp-h43h-r5pq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/security/advisories/GHSA-9p5f-5x8v-x65m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30406",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T22:15:09.627",
      "lastModified" : "2025-02-05T16:15:39.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecma_find_named_property at /base/ecma-helpers.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jerryscript:jerryscript:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB495C8-348F-4B04-B31F-1F4EE471CC22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jerryscript-project/jerryscript/issues/5058",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jerryscript-project/jerryscript/issues/5058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30408",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T22:15:09.677",
      "lastModified" : "2025-02-05T16:15:39.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jerryscript:jerryscript:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB495C8-348F-4B04-B31F-1F4EE471CC22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jerryscript-project/jerryscript/issues/5057",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jerryscript-project/jerryscript/issues/5057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30410",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T22:15:09.743",
      "lastModified" : "2025-02-05T16:15:39.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecma_op_function_construct at /operations/ecma-function-object.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jerryscript:jerryscript:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB495C8-348F-4B04-B31F-1F4EE471CC22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jerryscript-project/jerryscript/issues/5052",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jerryscript-project/jerryscript/issues/5052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-24T22:15:09.807",
      "lastModified" : "2025-02-04T20:15:47.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component vm_loop at /jerry-core/vm/vm.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jerryscript:jerryscript:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB495C8-348F-4B04-B31F-1F4EE471CC22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jerryscript-project/jerryscript/issues/5051",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jerryscript-project/jerryscript/issues/5051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30623",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T22:15:09.870",
      "lastModified" : "2024-11-21T08:00:31.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`embano1/wip` is a GitHub Action written in Bash. Prior to version 2, the  `embano1/wip` action uses the `github.event.pull_request.title` parameter in an insecure way. The title parameter is used in a run statement - resulting in a command injection vulnerability due to string interpolation. This vulnerability can be triggered by any user on GitHub. They just need to create a pull request with a commit message containing an exploit. (Note that first-time PR requests will not be run - but the attacker can submit a valid PR before submitting an invalid PR). The commit can be genuine, but the commit message can be malicious. This can be used to execute code on the GitHub runners and can be used to exfiltrate any secrets used in the CI pipeline, including repository tokens. Version 2 has a fix for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wip_project:wip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "D020BBA6-CF6E-436E-8D8E-CF85E0F7F490"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/embano1/wip/commit/c25450f77ed02c20d00b76ee3b33ff43838739a2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/embano1/wip/security/advisories/GHSA-rg3q-prf8-qxmp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://securitylab.github.com/research/github-actions-untrusted-input/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/embano1/wip/commit/c25450f77ed02c20d00b76ee3b33ff43838739a2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/embano1/wip/security/advisories/GHSA-rg3q-prf8-qxmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://securitylab.github.com/research/github-actions-untrusted-input/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30628",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T22:15:09.953",
      "lastModified" : "2024-11-21T08:00:32.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and kiwitcms/enterprise v12.2 and prior,\nthe `changelog.yml` workflow is vulnerable to command injection attacks because of using an untrusted `github.head_ref` field. The `github.head_ref` value is an attacker-controlled value. Assigning the value to `zzz\";echo${IFS}\"hello\";#` can lead to command injection. Since the permission is not restricted, the attacker has a write-access to the repository. Commit 834c86dfd1b2492ccad7ebbfd6304bfec895fed2 of the kiwitcms/Kiwi repository and commit e39f7e156fdaf6fec09a15ea6f4e8fec8cdbf751 of the kiwitcms/enterprise repository contain a fix for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kiwitcms:kiwi_tcms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.2",
            "matchCriteriaId" : "F9FB0E8B-2316-4900-95EF-D3DA528551F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kiwitcms/Kiwi/blob/37bfb87696093ce0393160e2725949185cc0651d/.github/workflows/changelog.yml#L18",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/commit/834c86dfd1b2492ccad7ebbfd6304bfec895fed2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-cw6r-6ccx-5hwx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kiwitcms/enterprise/commit/e39f7e156fdaf6fec09a15ea6f4e8fec8cdbf751",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://securitylab.github.com/research/github-actions-untrusted-input/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/blob/37bfb87696093ce0393160e2725949185cc0651d/.github/workflows/changelog.yml#L18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/commit/834c86dfd1b2492ccad7ebbfd6304bfec895fed2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-cw6r-6ccx-5hwx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kiwitcms/enterprise/commit/e39f7e156fdaf6fec09a15ea6f4e8fec8cdbf751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://securitylab.github.com/research/github-actions-untrusted-input/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30629",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-24T22:15:10.030",
      "lastModified" : "2024-11-21T08:00:32.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.1 through 0.3.7, the Vyper compiler generates the wrong bytecode. Any contract that uses the `raw_call` with `revert_on_failure=False` and `max_outsize=0` receives the wrong response from `raw_call`. Depending on the memory garbage, the result can be either `True` or `False`. A patch is available and, as of time of publication, anticipated to be part of Vyper 0.3.8. As a workaround, one may always put  `max_outsize>0`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vyperlang:vyper:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.3.1",
            "versionEndExcluding" : "0.3.8",
            "matchCriteriaId" : "BA2EC8D5-7723-4112-B674-AB70975FDEEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.vyperlang.org/en/v0.3.7/built-in-functions.html#raw_call",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/lidofinance/gate-seals/blob/051593e74df01a4131c485b4fda52e691cd4b7d8/contracts/GateSeal.vy#L164",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/lidofinance/gate-seals/pull/5/files",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vyperlang/vyper/commit/851f7a1b3aa2a36fd041e3d0ed38f9355a58c8ae",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vyperlang/vyper/security/advisories/GHSA-w9g2-3w7p-72g9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.vyperlang.org/en/v0.3.7/built-in-functions.html#raw_call",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/lidofinance/gate-seals/blob/051593e74df01a4131c485b4fda52e691cd4b7d8/contracts/GateSeal.vy#L164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/lidofinance/gate-seals/pull/5/files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vyperlang/vyper/commit/851f7a1b3aa2a36fd041e3d0ed38f9355a58c8ae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vyperlang/vyper/security/advisories/GHSA-w9g2-3w7p-72g9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2007",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-24T23:15:18.877",
      "lastModified" : "2024-11-21T07:57:45.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0",
            "matchCriteriaId" : "87B81C9D-7173-4FFB-97BC-9C41AB20A53C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D700C5-F67F-4FFB-BE69-D524592A3D2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/torvalds/linux/commit/b04e75a4a8a81887386a0d2dbf605a48e779d2a0",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240119-0011/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5480",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/b04e75a4a8a81887386a0d2dbf605a48e779d2a0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240119-0011/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28771",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-04-25T02:15:08.743",
      "lastModified" : "2025-10-27T17:05:01.153",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "cisaExploitAdd" : "2023-05-31",
      "cisaActionDue" : "2023-06-21",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Zyxel Multiple Firewalls OS Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "558978AD-8153-4C1F-A6DE-CCFBF69F754D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7654A1-3806-41C7-82D4-46B0CD7EE53B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.35",
            "matchCriteriaId" : "B150462B-6A4A-4B8C-800D-A83E24C79819"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47398FD0-6C5E-4625-9EFD-DE08C9AB7DB2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "A32A52F5-5406-4A44-A5C1-42FCDC8C6B22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D68A36FF-8CAF-401C-9F18-94F3A2405CF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "320FC232-D76C-4D8A-8003-7C9A7A287A4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2818E8AC-FFEE-4DF9-BF3F-C75166C0E851"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "2360F0CC-6958-47B6-87A9-B03D52DEBAF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B41F437-855B-4490-8011-DF59887BE6D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:atp800_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "6C4EE067-E0F0-49B7-8698-8B1AD8E346F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:atp800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B99746-0589-46E6-9CBD-F38619AD97DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "D96CB09A-9AB3-4360-ACFC-A917E7EEC460"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B30A4C0-9928-46AD-9210-C25656FB43FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_100w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "F0226DAD-492B-493D-B15E-90AA593BAAAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_100w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74ABA7E-AA78-4A13-A64E-C44021591B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_200_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "030F29C9-5435-4EA5-B009-895BB2259C19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F93B6A06-2951-46D2-A7E1-103D7318D612"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "3CF08551-BA8E-47BC-985D-D5ED76A46793"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646C1F07-B553-47B0-953B-DC7DE7FD0F8B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_500_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "62ACD903-AC40-451C-B2AB-6F843B3C8897"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92C697A5-D1D3-4FF0-9C43-D27B18181958"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_50w_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "BE7B066A-5AF0-42AF-A341-A91802F588F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_50w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110A1CA4-0170-4834-8281-0A3E14FC5584"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:usg_flex_700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "04A828C5-B71C-43EE-8132-C14C58A52360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:usg_flex_700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1396E3-731B-4D05-A3F8-F3ABB80D5C29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "42F4D9F3-BCBF-4990-B270-3592D69FCC22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D90A7B-174F-40A1-8AF4-08B15B7BAC40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "E136FA9E-48A2-428C-9F0A-CD9DB7F91581"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECD311A-4E96-4576-AADF-47291EDE3559"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn300_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "5DCFD02F-5884-4A96-957D-4CEEDB3826BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C45C303-1A95-4245-B242-3AB9B9106CD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:vpn50_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "5.36",
            "matchCriteriaId" : "9C6AFD50-926C-4579-A951-4EFDCBA512F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:vpn50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3AC823-0ECA-42D8-8312-2FBE5914E4C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:zywall_usg_310_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "4.73",
            "matchCriteriaId" : "D84D915E-8075-4DFC-8C83-D7E6A65D7AFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:zywall_usg_310_firmware:4.73:-:*:*:*:*:*:*",
            "matchCriteriaId" : "34699536-4CA4-4F87-8E69-A16F2C88A1E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:zywall_usg_310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A983A8D5-1B1E-4DE5-93FE-DED5B2DDCB83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:zywall_usg_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.60",
            "versionEndExcluding" : "4.73",
            "matchCriteriaId" : "81F20DFB-ED71-4D6F-9B15-4F86341550A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:zywall_usg_100_firmware:4.73:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5D5DCBFB-AB12-4525-ADD4-F85059E59177"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:zywall_usg_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB902356-D134-434B-8BAF-2CB366F32050"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172820/Zyxel-IKE-Packet-Decoder-Unauthenticated-Remote-Code-Execution.html",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-remote-command-injection-vulnerability-of-firewalls",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172820/Zyxel-IKE-Packet-Decoder-Unauthenticated-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-remote-command-injection-vulnerability-of-firewalls",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28771",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22665",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2023-04-25T07:15:08.137",
      "lastModified" : "2024-11-21T07:45:09.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is insufficient checking of user queries in Apache Jena versions 4.7.0 and earlier, when invoking custom scripts. It allows a remote user to execute arbitrary javascript via a SPARQL query."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-917"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-917"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:jena:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndIncluding" : "4.8.0",
            "matchCriteriaId" : "16650542-BB5B-4572-862A-B3122A20D882"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/07/11/11",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/s0dmpsxcwqs57l4qfs415klkgmhdxq7s",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/07/11/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread/s0dmpsxcwqs57l4qfs415klkgmhdxq7s",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25479",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-25T12:15:09.253",
      "lastModified" : "2024-11-21T07:49:35.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Podlove Podlove Subscribe button plugin <= 1.3.7 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podlove:podlove_subscribe_button:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.9",
            "matchCriteriaId" : "3BFD1106-D81F-4177-BA7D-5F9487693629"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/podlove-subscribe-button/wordpress-podlove-subscribe-button-plugin-1-3-7-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/podlove-subscribe-button/wordpress-podlove-subscribe-button-plugin-1-3-7-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25490",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-25T12:15:09.313",
      "lastModified" : "2024-11-21T07:49:36.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.4 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archivist_-_custom_archive_templates_project:archivist_-_custom_archive_templates:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "16220E48-E7AE-4E16-A7C8-18D29FB43692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/archivist-custom-archive-templates/wordpress-archivist-custom-archive-templates-plugin-1-7-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/archivist-custom-archive-templates/wordpress-archivist-custom-archive-templates-plugin-1-7-4-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25710",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-25T12:15:09.367",
      "lastModified" : "2024-11-21T07:49:59.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DIGITALBLUE Click to Call or Chat Buttons plugin <= 1.4.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digitalblue:click_to_call_or_chat_buttons:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "02B86D9C-28BB-4B62-BD17-D764F48398AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/click-to-call-or-chat-buttons/wordpress-click-to-call-or-chat-buttons-plugin-1-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/click-to-call-or-chat-buttons/wordpress-click-to-call-or-chat-buttons-plugin-1-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T12:15:09.427",
      "lastModified" : "2025-05-30T16:15:33.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Open Document feature in Telindus Apsal 3.14.2022.235 b. An attacker may upload a crafted file to execute arbitrary code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telindus:apsal:3.14.2022.235_b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1550EDE4-64F7-4BEE-BEB6-4964143F5E19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-26098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/CVE-2023-26098",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.telindus.lu/fr/produits/apsal",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/CVE-2023-26098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.telindus.lu/fr/produits/apsal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27619",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-25T12:15:09.480",
      "lastModified" : "2024-11-21T07:53:16.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes Regina Lite theme <= 2.0.7 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:machothemes:regina_lite:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "2.0.7",
            "matchCriteriaId" : "4BD4CB26-EBEA-418A-9F9D-75D423C9F1DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/regina-lite/wordpress-regina-lite-theme-2-0-7-reflected-cross-site-scripting-xss?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/regina-lite/wordpress-regina-lite-theme-2-0-7-reflected-cross-site-scripting-xss?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T13:15:09.710",
      "lastModified" : "2025-02-03T19:15:10.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter of /churchcrm/v2/family/not-found."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A21E4C-1CE8-4C97-9374-DD8EBDB942D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-25346",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-25346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T13:15:09.753",
      "lastModified" : "2025-02-04T17:15:11.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3, allows remote attackers to inject arbitrary web script or HTML via input fields. These input fields are located in the \"Title\" Input Field in EventEditor.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A21E4C-1CE8-4C97-9374-DD8EBDB942D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-25347",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-25347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T13:15:09.800",
      "lastModified" : "2025-02-04T16:15:34.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChurchCRM 4.5.3 was discovered to contain a CSV injection vulnerability via the Last Name and First Name input fields when creating a new person. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A21E4C-1CE8-4C97-9374-DD8EBDB942D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-25348",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-25348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T13:15:09.847",
      "lastModified" : "2025-02-04T16:15:35.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to the Configuration Dashboard page. Input validation and a proper XML parser configuration are missing. For an external attacker, it is very difficult to exploit this, because a few dynamically created parameters such as Jsession-id, a CSRF token, and an Nxsrf token would be needed. The attack can realistically only be performed by an internal user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:netact:20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4884872D-10EF-48EB-94EA-FAFD6B52D37D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nokia.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-01/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nokia.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T13:15:09.900",
      "lastModified" : "2025-02-04T16:15:35.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to a Performance Manager page. Input validation and a proper XML parser configuration are missing. For an external attacker, it is very difficult to exploit this, because a few dynamically created parameters such as Jsession-id, a CSRF token, and an Nxsrf token would be needed. The attack can realistically only be performed by an internal user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:netact:20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4884872D-10EF-48EB-94EA-FAFD6B52D37D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nokia.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-02/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nokia.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2022-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T13:15:09.947",
      "lastModified" : "2025-02-04T15:15:16.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to edit information for existing people on the site."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A21E4C-1CE8-4C97-9374-DD8EBDB942D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-26839",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-26839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26840",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T13:15:09.987",
      "lastModified" : "2025-02-03T19:15:10.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to set a person to a user and set that user to be an Administrator."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A21E4C-1CE8-4C97-9374-DD8EBDB942D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-26840",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-26840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26841",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T13:15:10.027",
      "lastModified" : "2025-02-03T22:15:26.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to change any user's password except for the user that is currently logged in."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A21E4C-1CE8-4C97-9374-DD8EBDB942D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-26841",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-26841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T13:15:10.063",
      "lastModified" : "2025-02-04T15:15:17.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored Cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the NoteEditor.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchcrm:churchcrm:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A21E4C-1CE8-4C97-9374-DD8EBDB942D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-26843",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-26843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ChurchCRM/CRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T13:15:10.103",
      "lastModified" : "2025-02-03T18:15:32.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title of a private message."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pearadmin:pear_admin_boot:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "7090DEE1-B02D-46BE-81FE-DDE63085B5F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/pear-admin/Pear-Admin-Boot/issues/I6SXHX",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/pear-admin/Pear-Admin-Boot/issues/I6SXHX",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T14:15:09.383",
      "lastModified" : "2025-02-03T18:15:30.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sengled Dimmer Switch V0.0.9 contains a denial of service (DOS) vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery after receiving the 'Set_short_poll_interval' command."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sengled:e1e-g7f_firmware:0.0.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B12133A-0B0F-4BE4-95D7-02B59E854140"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sengled:e1e-g7f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071E0D92-A0ED-42FA-8E33-9A9E7A56B75E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/iot-sec23/IoT-CVE/blob/main/Sengled%20Dimmer%20Switch%20Vulnerability%20Report.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://us.sengled.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/iot-sec23/IoT-CVE/blob/main/Sengled%20Dimmer%20Switch%20Vulnerability%20Report.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://us.sengled.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2281",
      "sourceIdentifier" : "responsibledisclosure@mattermost.com",
      "published" : "2023-04-25T14:15:09.423",
      "lastModified" : "2024-11-21T07:58:18.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When archiving a team, Mattermost fails to sanitize the related Websocket event sent to currently connected clients. This allows the clients to see the name, display name, description, and other data about the archived team.\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "responsibledisclosure@mattermost.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "responsibledisclosure@mattermost.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.9.0",
            "matchCriteriaId" : "94666C53-2515-42CF-9EE0-F3CD3B801751"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "responsibledisclosure@mattermost.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://mattermost.com/security-updates/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27105",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T15:15:08.783",
      "lastModified" : "2025-02-03T19:15:10.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Wi-Fi file transfer module of Shanling M5S Portable Music Player with Shanling MTouch OS v4.3 and Shanling M2X Portable Music Player with Shanling MTouch OS v3.3 allows attackers to arbitrarily read, delete, or modify any critical system files via directory traversal."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shanling:eddict_player:2.1.3:*:*:*:*:android:*:*",
            "matchCriteriaId" : "BED08E66-5FFE-4762-BB89-3BD069D0EC78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:shanling:mtouch_os:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C12870AC-301D-4F5C-9E5C-81EA23255DD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:shanling:m2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AE7280C-81D1-407E-94D2-E50D2D21105E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://en.shanling.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://hexavector.github.io/4bf46f12/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://en.shanling.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://hexavector.github.io/4bf46f12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25313",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T16:15:09.417",
      "lastModified" : "2025-02-03T19:15:10.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the video link field to the Embed a video link feature."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.4",
            "matchCriteriaId" : "C7827575-CC53-4298-AA70-AFD19408C79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WWBN/AVideo/security/advisories/GHSA-pgvh-p3g4-86jw",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/security/advisories/GHSA-pgvh-p3g4-86jw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T16:15:09.490",
      "lastModified" : "2025-02-04T17:15:11.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in World Wide Broadcast Network AVideo before 12.4, allows attackers to gain sensitive information via the success parameter to /user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.4",
            "matchCriteriaId" : "C7827575-CC53-4298-AA70-AFD19408C79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WWBN/AVideo/commit/2b44dee815b208da85e1dcafa9839391c3de2655",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/commit/2b44dee815b208da85e1dcafa9839391c3de2655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T16:15:09.537",
      "lastModified" : "2025-10-31T14:39:22.397",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "cisaExploitAdd" : "2023-11-08",
      "cisaActionDue" : "2023-11-29",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.",
      "cisaVulnerabilityName" : "Service Location Protocol (SLP) Denial-of-Service Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BB0FDCF-3750-44C6-AC5C-0CC2AAD14093"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:manager_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E8CE0B-23E7-45BF-AAFB-AD12DC7EB0F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F13F07CC-739B-465C-9184-0E9D708BD4C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*",
            "matchCriteriaId" : "15FC9014-BD85-4382-9D04-C0703E901D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:sap:*:*",
            "matchCriteriaId" : "5D18AA86-88AF-481B-A24F-429BF79264AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:-:*:*",
            "matchCriteriaId" : "B1B7847D-6C17-4817-B71E-C034894B70A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "C665A768-DBDA-4197-9159-A2791E98A84F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0",
            "matchCriteriaId" : "D223DD19-0441-4EBD-9F51-5E9012434517"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:service_location_protocol_project:service_location_protocol:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E7C090-F632-4975-9C4C-E89100088BF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://datatracker.ietf.org/doc/html/rfc2608",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/curesec/slpload",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230426-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.suse.com/support/kb/doc/?id=000021051",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://datatracker.ietf.org/doc/html/rfc2608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/curesec/slpload",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230426-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.suse.com/support/kb/doc/?id=000021051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-29552",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T16:15:09.590",
      "lastModified" : "2024-11-21T08:00:07.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "YASM v1.3.0 was discovered to contain a heap overflow via the function handle_dot_label at /nasm/nasm-token.re. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yasm_project:yasm:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD6556F7-3880-452A-ABA9-1A8A14BA41F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yasm/yasm/issues/206",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yasm/yasm/issues/206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25484",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-25T17:15:08.900",
      "lastModified" : "2024-11-21T07:49:35.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Oliver Schlöbe Simple Yearly Archive plugin <= 2.1.8 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_yearly_archive_project:simple_yearly_archive:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.9",
            "matchCriteriaId" : "8AB8189E-DB30-4C62-B9E8-A3EC634A5815"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/simple-yearly-archive/wordpress-simple-yearly-archive-plugin-2-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/simple-yearly-archive/wordpress-simple-yearly-archive-plugin-2-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28847",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-25T17:15:08.963",
      "lastModified" : "2024-11-21T07:56:08.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server 24.0.0 prior to 24.0.11 and 25.0.0 prior to 25.0.5; as well as Nextcloud Server Enterprise 23.0.0 prior to 23.0.12.6, 24.0.0 prior to 24.0.11, and 25.0.0 prior to 25.0.5; an attacker is not restricted in verifying passwords of share links so they can just start brute forcing the password. Nextcloud Server 24.0.11 and 25.0.5 and Nextcloud Enterprise Server 23.0.12.6, 24.0.11, and 25.0.5 contain a fix for this issue. No known workarounds are available."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "23.0.0",
            "versionEndExcluding" : "23.0.12.6",
            "matchCriteriaId" : "CE1029E7-ACE9-4547-A18D-10300912A87B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.11",
            "matchCriteriaId" : "F826F841-9E60-44B7-81F0-77E552CC2BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "24.0.0",
            "versionEndExcluding" : "24.0.11",
            "matchCriteriaId" : "6A5FB4F4-16FC-4B98-897C-4DA109899A28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.5",
            "matchCriteriaId" : "8B9FE0C2-3437-42C6-9F9E-84DB8AC4D3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "25.0.0",
            "versionEndExcluding" : "25.0.5",
            "matchCriteriaId" : "88FDB61B-A9D8-4762-B6DD-A6FFF347E0B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-r5wf-xj97-3w7w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/35057",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1894653",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-r5wf-xj97-3w7w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/35057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://hackerone.com/reports/1894653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23837",
      "sourceIdentifier" : "psirt@solarwinds.com",
      "published" : "2023-04-25T18:15:09.300",
      "lastModified" : "2025-02-04T17:15:11.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "No exception handling vulnerability which revealed sensitive or excessive information to users.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@solarwinds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:database_performance_analyzer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.2",
            "matchCriteriaId" : "D6A0B85E-0E93-4DA4-989C-B9E131E03019"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2023-2_release_notes.htm",
        "source" : "psirt@solarwinds.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.solarwinds.com/trust-center/security-advisories/cve-2023-23837",
        "source" : "psirt@solarwinds.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2023-2_release_notes.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.solarwinds.com/trust-center/security-advisories/cve-2023-23837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23838",
      "sourceIdentifier" : "psirt@solarwinds.com",
      "published" : "2023-04-25T18:15:09.370",
      "lastModified" : "2025-02-04T17:15:11.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal and file enumeration vulnerability which allowed users to enumerate to different folders of the server.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@solarwinds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:database_performance_analyzer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.2",
            "matchCriteriaId" : "D6A0B85E-0E93-4DA4-989C-B9E131E03019"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2023-2_release_notes.htm",
        "source" : "psirt@solarwinds.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.solarwinds.com/trust-center/security-advisories/cve-2023-23838",
        "source" : "psirt@solarwinds.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2023-2_release_notes.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.solarwinds.com/trust-center/security-advisories/cve-2023-23838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29200",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-25T18:15:09.510",
      "lastModified" : "2025-01-02T17:22:06.893",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Contao is an open source content management system. Prior to versions 4.9.40, 4.13.21, and 5.1.4, logged in users can list arbitrary system files in the file manager by manipulating the Ajax request. However, it is not possible to read the contents of these files. Users should update to Contao 4.9.40, 4.13.21 or 5.1.4 to receive a patch. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "4.9.40",
            "matchCriteriaId" : "0982A888-B357-4141-9445-05BA4FB04A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10.0",
            "versionEndExcluding" : "4.13.21",
            "matchCriteriaId" : "374F1348-15EC-4952-B6B7-3E19BE0950DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contao:contao:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.1.4",
            "matchCriteriaId" : "F47206DC-DFB3-43F7-BD46-67C4893F1A37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/contao/contao/commit/6f3e705f4ff23f4419563d09d8485793569f31df",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/contao/contao/security/advisories/GHSA-fp7q-xhhw-6rj3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/contao/contao/commit/6f3e705f4ff23f4419563d09d8485793569f31df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/contao/contao/security/advisories/GHSA-fp7q-xhhw-6rj3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T18:15:09.627",
      "lastModified" : "2025-02-03T18:15:31.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CraftCMS 3.7.59 is vulnerable Cross Site Scripting (XSS). An attacker can inject javascript code into Volume Name."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:craftcms:craft_cms:3.7.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3C0EB0-BC83-4827-A8FA-8C0F9A3FC159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/craftcms/cms/commit/00fb253d5318e10204433e5d93934108e574005e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/craftcms/cms/commit/00fb253d5318e10204433e5d93934108e574005e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30545",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-25T18:15:09.677",
      "lastModified" : "2024-11-21T08:00:23.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrestaShop is an Open Source e-commerce web application. Prior to versions 8.0.4 and 1.7.8.9, it is possible for a user with access to the SQL Manager (Advanced Options -> Database) to arbitrarily read any file on the operating system when using SQL function `LOAD_FILE` in a `SELECT` request. This gives the user access to critical information. A patch is available in PrestaShop 8.0.4 and PS 1.7.8.9\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.8.9",
            "matchCriteriaId" : "38174A16-34A0-4E08-8485-B413ADC32907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.4",
            "matchCriteriaId" : "B84AB40A-755F-4AD7-AD86-D2FD642C710D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/cddac4198a47c602878a787280d813f60c6c0630",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/d900806e1841a31f26ff0a1843a6888fc1bb7f81",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-8r4m-5p6p-52rp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/cddac4198a47c602878a787280d813f60c6c0630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/d900806e1841a31f26ff0a1843a6888fc1bb7f81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-8r4m-5p6p-52rp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25485",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-25T19:15:10.587",
      "lastModified" : "2024-11-21T07:49:35.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bernhard Kux JSON Content Importer plugin <= 1.3.15 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:json-content-importer:json_content_importer:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.16",
            "matchCriteriaId" : "49150F09-D557-4F05-A55C-98ACAB40C5A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/json-content-importer/wordpress-json-content-importer-plugin-1-3-15-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/json-content-importer/wordpress-json-content-importer-plugin-1-3-15-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25793",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-25T19:15:10.680",
      "lastModified" : "2024-11-21T07:50:12.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in George Pattihis Link Juice Keeper plugin <= 2.0.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:link_juice_keeper_project:link_juice_keeper:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.3",
            "matchCriteriaId" : "7FA3D230-0B0B-4C08-BAAB-550D75474BB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/link-juice-keeper/wordpress-link-juice-keeper-plugin-2-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/link-juice-keeper/wordpress-link-juice-keeper-plugin-2-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28086",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-04-25T19:15:10.753",
      "lastModified" : "2025-02-03T18:15:29.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An HPE OneView appliance dump may expose proxy credential settings"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oneview:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "6.60.04",
            "matchCriteriaId" : "BA5D7ED2-08B6-478C-BC68-F9B6B84A9666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oneview:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2",
            "matchCriteriaId" : "1489D2EF-12C5-4540-A69E-326B4C41A4E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04469en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04469en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28087",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-04-25T19:15:10.817",
      "lastModified" : "2025-02-03T18:15:29.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An HPE OneView appliance dump may expose OneView user accounts"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oneview:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "6.60.04",
            "matchCriteriaId" : "BA5D7ED2-08B6-478C-BC68-F9B6B84A9666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oneview:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2",
            "matchCriteriaId" : "1489D2EF-12C5-4540-A69E-326B4C41A4E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04469en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04469en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28088",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-04-25T19:15:10.873",
      "lastModified" : "2025-02-03T17:15:13.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An HPE OneView appliance dump may expose SAN switch administrative credentials"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oneview:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "6.60.04",
            "matchCriteriaId" : "BA5D7ED2-08B6-478C-BC68-F9B6B84A9666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oneview:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2",
            "matchCriteriaId" : "1489D2EF-12C5-4540-A69E-326B4C41A4E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04469en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04469en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28089",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-04-25T19:15:10.927",
      "lastModified" : "2025-02-03T17:15:13.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oneview:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "6.60.04",
            "matchCriteriaId" : "BA5D7ED2-08B6-478C-BC68-F9B6B84A9666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oneview:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2",
            "matchCriteriaId" : "1489D2EF-12C5-4540-A69E-326B4C41A4E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04469en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04469en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28090",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-04-25T19:15:10.980",
      "lastModified" : "2025-02-03T17:15:13.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An HPE OneView appliance dump may expose SNMPv3 read credentials"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oneview:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "6.60.04",
            "matchCriteriaId" : "BA5D7ED2-08B6-478C-BC68-F9B6B84A9666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oneview:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2",
            "matchCriteriaId" : "1489D2EF-12C5-4540-A69E-326B4C41A4E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04469en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04469en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2282",
      "sourceIdentifier" : "security@devolutions.net",
      "published" : "2023-04-25T19:15:11.100",
      "lastModified" : "2025-02-04T15:15:17.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows allows an authenticated user to bypass administrator-enforced Web Login restrictions and gain access to entries via an unexpected vector.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2023.1.22",
            "matchCriteriaId" : "7D029076-CEDD-4678-9B60-390670047C15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0012",
        "source" : "security@devolutions.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2023-0012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30838",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-25T19:15:11.160",
      "lastModified" : "2024-11-21T08:00:56.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrestaShop is an Open Source e-commerce web application. Prior to versions 8.0.4 and 1.7.8.9, the `ValidateCore::isCleanHTML()` method of Prestashop misses hijackable events which can lead to cross-site scripting (XSS) injection, allowed by the presence of pre-setup `@keyframes` methods. This XSS, which hijacks HTML attributes, can be triggered without any interaction by the visitor/administrator, which makes it as dangerous as a trivial XSS attack. Contrary to other attacks which target HTML attributes and are triggered without user interaction (such as onload / onerror which suffer from a very limited scope), this one can hijack every HTML element, which increases the danger due to a complete HTML elements scope. Versions 8.0.4 and 1.7.8.9 contain a fix for this issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.8.9",
            "matchCriteriaId" : "38174A16-34A0-4E08-8485-B413ADC32907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.4",
            "matchCriteriaId" : "B84AB40A-755F-4AD7-AD86-D2FD642C710D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/46408ae4b02f3b8b1bb6e9dc63af5bcd858abd9c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/dc682192df0e4b0d656a8e645b29ca1b9dbe3693",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-fh7r-996q-gvcp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/46408ae4b02f3b8b1bb6e9dc63af5bcd858abd9c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/dc682192df0e4b0d656a8e645b29ca1b9dbe3693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-fh7r-996q-gvcp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30839",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-25T19:15:11.247",
      "lastModified" : "2024-11-21T08:00:56.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrestaShop is an Open Source e-commerce web application. Versions prior to 8.0.4 and 1.7.8.9 contain a SQL filtering vulnerability. A BO user can write, update, and delete in the database, even without having specific rights. PrestaShop 8.0.4 and 1.7.8.9 contain a patch for this issue. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.8.9",
            "matchCriteriaId" : "38174A16-34A0-4E08-8485-B413ADC32907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.4",
            "matchCriteriaId" : "B84AB40A-755F-4AD7-AD86-D2FD642C710D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/0f2a9b7fdd42d1dd3b21d4fad586a849642f3c30",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/d1d27dc371599713c912b71bc2a455cacd7f2149",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-p379-cxqh-q822",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/0f2a9b7fdd42d1dd3b21d4fad586a849642f3c30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/d1d27dc371599713c912b71bc2a455cacd7f2149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-p379-cxqh-q822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23710",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-25T20:15:09.587",
      "lastModified" : "2024-11-21T07:46:42.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miniorange:wordpress_social_login_and_register_\\(discord\\,_google\\,_twitter\\,_linkedin\\):*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "7.6.0",
            "matchCriteriaId" : "A5377FFE-3556-4F24-943F-CC1BC1961854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/miniorange-login-openid/wordpress-wordpress-social-login-and-register-discord-google-twitter-linkedin-plugin-7-5-14-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/miniorange-login-openid/wordpress-wordpress-social-login-and-register-discord-google-twitter-linkedin-plugin-7-5-14-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23866",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-25T20:15:09.647",
      "lastModified" : "2024-11-21T07:47:00.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Carlos Moreira Interactive Geo Maps plugin <= 1.5.8 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:interactive_geo_maps_project:interactive_geo_maps:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.9",
            "matchCriteriaId" : "CD6C8C6F-A8F2-4B05-85D7-B3F4676DC454"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/interactive-geo-maps/wordpress-interactive-geo-maps-plugin-1-5-8-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/interactive-geo-maps/wordpress-interactive-geo-maps-plugin-1-5-8-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23889",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-25T20:15:09.703",
      "lastModified" : "2024-11-21T07:47:02.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fullworksplugins:quick_paypal_payments:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.7.26",
            "matchCriteriaId" : "12010A4E-509F-4E3A-B628-FC7209681430"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/quick-paypal-payments/wordpress-quick-paypal-payments-plugin-5-7-25-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/quick-paypal-payments/wordpress-quick-paypal-payments-plugin-5-7-25-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23995",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-25T20:15:09.757",
      "lastModified" : "2024-11-21T07:47:13.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tim Reeves & David Stöckl TinyMCE Custom Styles plugin <= 1.1.2 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tinymce_custom_styles_project:tinymce_custom_styles:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.3",
            "matchCriteriaId" : "D8BCFEC4-1180-4315-82F0-BB891564B491"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/tinymce-custom-styles/wordpress-tinymce-custom-styles-plugin-1-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/tinymce-custom-styles/wordpress-tinymce-custom-styles-plugin-1-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24005",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-25T20:15:09.817",
      "lastModified" : "2024-11-21T07:47:15.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media Inline Tweet Sharer – Twitter Sharing Plugin plugin <= 2.5.3 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winwar:inline_tweet_sharer:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.6",
            "matchCriteriaId" : "815906E6-10F1-4BB0-8546-8F8DBD6F09A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/inline-tweet-sharer/wordpress-inline-tweet-sharer-twitter-sharing-plugin-plugin-2-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/inline-tweet-sharer/wordpress-inline-tweet-sharer-twitter-sharing-plugin-plugin-2-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25461",
      "sourceIdentifier" : "audit@patchstack.com",
      "published" : "2023-04-25T20:15:09.877",
      "lastModified" : "2024-11-21T07:49:33.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in namithjawahar Wp-Insert plugin <= 2.5.0 versions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "audit@patchstack.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "audit@patchstack.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartlogix:wp-insert:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.5.1",
            "matchCriteriaId" : "33594A7B-456F-453A-8AF6-DC15AB98F852"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://patchstack.com/database/vulnerability/wp-insert/wordpress-wp-insert-plugin-2-5-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "audit@patchstack.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://patchstack.com/database/vulnerability/wp-insert/wordpress-wp-insert-plugin-2-5-0-cross-site-scripting-xss-vulnerability?_s_id=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25652",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-25T20:15:09.933",
      "lastModified" : "2025-11-04T17:15:35.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (corresponding to the rejected hunk(s) from the given patch). A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid using `git apply` with `--reject` when applying patches from an untrusted source. Use `git apply --stat` to inspect a patch before applying; avoid applying one that create a conflict where a link corresponding to the `*.rej` file exists."
      }, {
        "lang" : "es",
        "value" : "Git es un sistema de control de revisiones. Antes de las versiones 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3 y 2.40.1, mediante alimentación entrada especialmente manipulada para `git apply --reject`, una ruta fuera del árbol de trabajo se puede sobrescribir con contenidos parcialmente controlados (correspondientes a los fragmentos rechazados del parche dado). Hay una solución disponible en las versiones 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3 y 2.40.1. Como workaround, evite usar `git apply` con `--reject` cuando aplique parches de una fuente que no sea de confianza. Utilice `git apply --stat` para inspeccionar un parche antes de aplicarlo; evite aplicar uno que cree un conflicto donde exista un enlace correspondiente al archivo `*.rej`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.30.9",
            "matchCriteriaId" : "A2E4BF99-17B8-4424-B97E-DDB8A4793DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.31.0",
            "versionEndExcluding" : "2.31.8",
            "matchCriteriaId" : "2A1D7F29-E06F-4277-8713-1C19DE714300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.32.0",
            "versionEndExcluding" : "2.32.7",
            "matchCriteriaId" : "0B69F022-B29E-4D9A-B4FC-78430AFF0C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.33.0",
            "versionEndExcluding" : "2.33.8",
            "matchCriteriaId" : "8A2B603F-B8E2-4123-80A4-64E983FF1F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.34.0",
            "versionEndExcluding" : "2.34.8",
            "matchCriteriaId" : "26D3ED4E-246E-4D4D-9E2D-7890E93ECED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.35.0",
            "versionEndExcluding" : "2.35.8",
            "matchCriteriaId" : "D3988013-1332-49F8-85E7-7EB59BE36A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.36.0",
            "versionEndExcluding" : "2.36.6",
            "matchCriteriaId" : "CB966EF2-F4F8-4462-AA73-5B452538E756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.37.0",
            "versionEndExcluding" : "2.37.7",
            "matchCriteriaId" : "030542CA-76BF-4252-9E03-D7E44D3DEE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.38.0",
            "versionEndExcluding" : "2.38.5",
            "matchCriteriaId" : "6EAEE109-8AD8-4383-AAC3-E9D2A4794F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.39.0",
            "versionEndExcluding" : "2.39.3",
            "matchCriteriaId" : "BE329F8E-076F-4895-A2A2-A1C0330C1F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.40.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89633B46-319A-499C-9848-2EA60AC030EB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/25/2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git/git/commit/18e2b1cfc80990719275d7b08e6e50f3e8cbc902",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/git/git/commit/668f2d53613ac8fd373926ebe219f2c29112d93e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/git/git/security/advisories/GHSA-2hvf-7c8p-28fx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BSXOGVVBJLYX26IAYX6PJSYQB36BREWH/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-15",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/25/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git/git/commit/18e2b1cfc80990719275d7b08e6e50f3e8cbc902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/git/git/commit/668f2d53613ac8fd373926ebe219f2c29112d93e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/git/git/security/advisories/GHSA-2hvf-7c8p-28fx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BSXOGVVBJLYX26IAYX6PJSYQB36BREWH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25815",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-25T20:15:09.997",
      "lastModified" : "2025-11-04T17:15:35.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages at all, and skips the gettext initialization. However, due to a change in MINGW-packages, the `gettext()` function's implicit initialization no longer uses the runtime prefix but uses the hard-coded path `C:\\mingw64\\share\\locale` to look for localized messages. And since any authenticated user has the permission to create folders in `C:\\` (and since `C:\\mingw64` does not typically exist), it is possible for low-privilege users to place fake messages in that location where `git.exe` will pick them up in version 2.40.1.\n\nThis vulnerability is relatively hard to exploit and requires social engineering. For example, a legitimate message at the end of a clone could be maliciously modified to ask the user to direct their web browser to a malicious website, and the user might think that the message comes from Git and is legitimate. It does require local write access by the attacker, though, which makes this attack vector less likely. Version 2.40.1 contains a patch for this issue. Some workarounds are available. Do not work on a Windows machine with shared accounts, or alternatively create a `C:\\mingw64` folder and leave it empty. Users who have administrative rights may remove the permission to create folders in `C:\\`."
      }, {
        "lang" : "es",
        "value" : "En Git para Windows, la versión de Git para Windows, no se envían mensajes localizados con el instalador. Como consecuencia, se espera que Git no localice ningún mensaje y omita la inicialización de gettext. Sin embargo, debido a un cambio en los paquetes MINGW, la inicialización implícita de la función `gettext()` ya no usa el prefijo de tiempo de ejecución sino que usa la ruta codificada `C:\\mingw64\\share\\locale` para buscar mensajes localizados. Y dado que cualquier usuario autenticado tiene permiso para crear carpetas en `C:\\` (y dado que `C:\\mingw64` normalmente no existe), es posible que los usuarios con pocos privilegios coloquen mensajes falsos en esa ubicación donde `git .exe` los recogerá en la versión 2.40.1. Esta vulnerabilidad es relativamente difícil de explotar y requiere ingeniería social. Por ejemplo, un mensaje legítimo al final de un clon podría modificarse maliciosamente para pedirle al usuario que dirija su navegador web a un sitio web malicioso, y el usuario podría pensar que el mensaje proviene de Git y es legítimo. Sin embargo, requiere acceso de escritura local por parte del atacante, lo que hace que este vector de ataque sea menos probable. La versión 2.40.1 contiene un parche para este problema. Algunas soluciones están disponibles. No trabaje en una máquina Windows con cuentas compartidas o, alternativamente, cree una carpeta `C:\\mingw64` y déjela vacía. Los usuarios que tienen derechos administrativos pueden eliminar el permiso para crear carpetas en `C:\\`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git_for_windows_project:git_for_windows:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.40.1",
            "matchCriteriaId" : "E740B447-D96A-40C3-AFA9-9B058379E04D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/25/2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://axcheron.github.io/exploit-101-format-strings/#writing-to-the-stack",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/releases/tag/v2.40.1.windows.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/security/advisories/GHSA-9w66-8mq8-5vm8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/msys2/MINGW-packages/pull/10461",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pubs.opengroup.org/onlinepubs/9699919799/functions/printf.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-15",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/25/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://axcheron.github.io/exploit-101-format-strings/#writing-to-the-stack",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/releases/tag/v2.40.1.windows.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/security/advisories/GHSA-9w66-8mq8-5vm8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/msys2/MINGW-packages/pull/10461",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pubs.opengroup.org/onlinepubs/9699919799/functions/printf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28084",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-04-25T20:15:10.067",
      "lastModified" : "2025-02-03T17:15:12.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-alert@hpe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oneview:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.60.04",
            "matchCriteriaId" : "FBAAD7B8-CB8C-4F50-8A30-0B2CF5199B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:oneview:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "8.2",
            "matchCriteriaId" : "CCD692B5-5224-4D65-B5F6-9B1B4EF5B227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:oneview_global_dashboard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.72",
            "matchCriteriaId" : "458F8B2A-D560-4497-9DD0-1C654B28B991"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04468en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04469en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04468en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04469en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20871",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-04-25T21:15:10.023",
      "lastModified" : "2025-02-04T17:15:10.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Fusion contains a local privilege escalation vulnerability. A malicious actor with read/write access to the host operating system can elevate privileges to gain root access to the host operating system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.0.2",
            "matchCriteriaId" : "B628132D-043A-4989-9524-9FA53B1DEADC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0008.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20872",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-04-25T21:15:10.073",
      "lastModified" : "2025-02-04T17:15:10.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFED80D5-91E2-4F5E-B373-988FE6B423AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:17.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B52B9830-14D3-4CB5-9CE9-7A805820276A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0008.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-23839",
      "sourceIdentifier" : "psirt@solarwinds.com",
      "published" : "2023-04-25T21:15:10.117",
      "lastModified" : "2024-11-21T07:46:55.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SolarWinds Platform was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users to access Orion.WebCommunityStrings SWIS schema object and obtain sensitive information.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@solarwinds.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@solarwinds.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:solarwinds_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.2.0",
            "matchCriteriaId" : "326F2E48-92E4-4BB6-9B05-2232E45B100F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-2_release_notes.htm",
        "source" : "psirt@solarwinds.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-23839",
        "source" : "psirt@solarwinds.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-2_release_notes.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-23839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24512",
      "sourceIdentifier" : "psirt@arista.com",
      "published" : "2023-04-25T21:15:10.190",
      "lastModified" : "2024-11-21T07:48:01.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent (referred to as the TerminAttr agent) is enabled and gNMI access is configured on the agent. Note: This gNMI over the Streaming Telemetry Agent scenario is mostly commonly used when streaming to a 3rd party system and is not used by default when streaming to CloudVision"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@arista.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@arista.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.26.0",
            "versionEndExcluding" : "4.26.10m",
            "matchCriteriaId" : "341CA00E-8BDE-4BF9-90D4-7B07FC484D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.27.0",
            "versionEndExcluding" : "4.27.9m",
            "matchCriteriaId" : "00A7CEC1-C298-4AEE-A079-550167C2AA3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.28.0",
            "versionEndExcluding" : "4.28.6m",
            "matchCriteriaId" : "32D876FE-C639-4870-A412-0239EA0155D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.29.0",
            "versionEndExcluding" : "4.29.2f",
            "matchCriteriaId" : "24621B26-04A1-4693-BCB4-437544C08B50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:32qd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4184EB8C-5972-413F-A6CD-B1365D242B41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:48ehs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED3033F-6AFD-462B-BED4-032D84D41068"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:48lbas:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EDFE460-5163-4A86-BFDE-7F0FA8EC96D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:48lbs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C680AE5-0810-4A0C-9234-405F2A879F87"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:48s6qd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A296BD-4449-447C-AF27-F6C033C686D6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7010t-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CCF6152-815E-4B3C-AE4B-CA598BEBD020"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7020sr-24c2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7781CB15-3452-47D9-A961-8B09F2E9AEC1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7020sr-32c2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A31FB8-512E-43EF-8F87-E02E35F5251E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7020tr-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CBFF922-28D7-42D6-8796-91AD9A178D28"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7020tra-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561B4042-DFD3-4BC0-9C5F-74799A7E92C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050cx3-32s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FF0290-C671-4ABC-8A12-05E4D55FC4AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050cx3m-32s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828C6E4F-814A-4060-8F5E-7FF359C8739C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050qx-32s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253D74DE-97F5-40F3-B179-D2D4442C57FD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050qx2-32s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E03F9E-522F-4D9B-9267-09E2550B5465"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx-128:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895A7AFD-BE76-47F5-B67B-6279046E4274"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx-64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74E258EC-EA50-4185-AA35-5D963C359E74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx-72q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1482D4FC-60B9-4C89-B892-71AA3E1031F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx2-128:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C99D84E9-2229-459E-AE90-49C2EF670884"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx2-72q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D922C725-1139-4DD4-92FC-9FF15E35CE62"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx3-48c8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE35C17F-0C60-4A40-9949-D4C5D94D1D7A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx3-48yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07BA078E-30B7-4E2C-B240-BF64E98143E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx3-48yc12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBFD0706-CACB-40FA-A41B-46B39C6E1D33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx3-48yc8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5951D243-CB68-4B41-A913-D879CE502795"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050sx3-96yc8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73156612-D338-4E20-8C82-0E65DAA72331"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050tx-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78E7CDCC-ADC6-4854-BFC4-72DA47C5F10B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050tx-64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B03678D-AD7B-4B1A-8E6A-1811DD8B1483"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050tx-72q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E803639C-13A1-48CA-A589-C83654AE454F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050tx2-128:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A495D282-D3DC-4D18-AB72-2358834C238E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7050tx3-48c8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "388C57D8-4B3C-4E5D-84AA-0CB7506F825A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7060cx-32s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D518C8D5-A86B-46E5-A646-8939BFA2E116"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7060cx2-32s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1608297-7079-4F3B-857E-708B74E944D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7060dx4-32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "806A01C5-231D-4F9D-A292-E9DD706A0C66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7060px4-32:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC10746F-8FC0-49EF-BB9C-EC49B734DFA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7060sx2-48yc6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26582E98-B710-46D7-B8F2-9286E0592FA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7130-16g3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFA321D-F4A5-434C-BB39-D2B2687001D6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7130-48g3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BE67B8-F326-48B7-AB82-04FE8C2E37E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7130-96s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3264E086-4E90-41D0-8583-8FCF3CE4885D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7150s-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93D74C0B-E470-4D45-98E2-775DE43997DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7150s-52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2CAA23-003C-43E6-87CE-61E4369C2D30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7150s-64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7445075-D130-472C-B259-6BACE678541D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7150sc-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3FA52A-3A67-4515-9790-598860102893"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7150sc-64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6336F166-FAD3-4846-84B9-45F5FAA3D437"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7160-32cq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7620401C-FB14-46F1-979B-B21194F90945"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7160-48tc6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DFC236-44B3-4EEF-8937-4F86EE99EB45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7160-48yc6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "823E5569-C918-40E6-A2C5-7C415E4ADEF5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7170-32c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8EFEEA5-0FC4-4FFC-BF5D-BDBAA1B55C70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7170-32cd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2959C68-8731-4F37-B9E7-61E5936D3D8E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7170-64c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6FB3395-8D13-4477-A46E-37A88272CFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7170b-64c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EE3572E-A724-4057-8776-7A95528DCEE7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720df-48y:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FCDB83-38D5-4F02-97E2-BBEF891DCDD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720dp-24s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EAF795-EB62-4A86-A0FC-A09008E631A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720dp-48s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA03BA0B-BB2D-41CF-BA2E-B21604D6FBC1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720dt-24s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AE185FD-0D4D-4862-B513-BC68BF3F9F7E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720dt-48s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C2150F-2FD6-452F-8C56-7413E3EB8FDC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720xp-24y6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFDBCBB-2C1A-4B88-AE28-EF63D5B9EDD2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720xp-24zy4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58757129-BF9C-4BD8-B692-BB57023F8A48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720xp-48y6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2756BB4B-1053-4EAC-AC0B-785FD5039D5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720xp-48zc2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D36540-7723-4284-A207-6BD27728CA25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:720xp-96zc2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF95CB28-E010-4A1D-A746-F9DDF015868F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7250qx-64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD95B3B-D655-42DC-85C2-2C6FDBCC77F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7260cx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E40D14DE-BAFB-461F-9AA7-E3EDC2D8D468"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7260cx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901E5B76-0EB7-4EAD-A281-15B9F78041AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7260qx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1DE992-9BFA-4794-82F4-66F464BB384E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7260sx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58296832-AA93-4EAE-96BD-28EC368F8391"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr2k-60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F569286-C19F-48CB-AB24-89C4A1EB6F81"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr3-32d4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FEC18B3-7980-4EBF-8E15-F8E92DADD062"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr3-32p4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E85F7C-F33B-49C1-A526-ACC1BEF3B65C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr3-96:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E54F451-CA87-4F32-A088-AE18123CE07A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr3k-32d4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16CB1780-6DEC-4140-A771-9139C77A8A88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr3k-32p4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE9CB6-4453-4EED-B7FC-6374F9225B83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280cr3k-96:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98C94CB-7DFC-4CAC-9D98-B3E80BF1EE56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280dr3-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D9E9FF-564E-4B16-8070-33A366F48FE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280dr3k-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AF4A54-7568-4FE0-BE5F-02BD9FADDCE5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6466FE3-DCE8-4DA5-B893-2BA864F73BC5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280pr3-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14163D2-B236-4C78-9DB4-97DE6D996EBC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280pr3k-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4057906A-B27B-4B53-97F6-3F5F35794990"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280sr3-48yc8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8143579F-AD53-4D74-AE3E-4D465DCD7A57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7280sr3k-48yc8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AB0F1D-ACCA-490C-96F2-FC23A8611CB8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7300x-32q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDF8A65D-6FBC-4C38-8B45-418E6C5EB16C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7300x-64s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F088D51-24F4-49AD-8397-73D1EAF45F56"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7300x-64t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69BA5C6D-40C0-4AA3-AC10-D7F097D8EDD9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7300x3-32c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0040BDDF-D711-4619-9E96-96EFBD33CAA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7300x3-48yc4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AA716D-CAD1-4689-8A26-977A2E5F869E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7320x-32c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD08CBF-6F42-4F98-B413-F65C5613BE6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7358x4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC38094-A539-425D-A2B6-770FAF0FC3C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7368x4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161DB0D9-9BAC-4546-88D3-5547F4B6149C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7388x5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B66E706E-56FB-4A49-BD90-76A8CB6BE391"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7500r3-24d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1BB565-2668-4242-8A00-5CC9C30B9AC9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7500r3-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F1A605-8836-4A64-AC5E-ADAB34F8F104"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7500r3-36cq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8A047A-9FD9-4AE1-9E47-457A46BAE3A4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7500r3k-36cq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019B0670-389B-4A4E-8C72-52202E3AA8EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7804r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54F3D32-5A07-4791-90BF-96BD8A24C2F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7808r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F078B04-2DA0-4A4B-BB1A-408DC14CB61F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7812r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B99200-EC76-404E-9900-5D1DC3B9A758"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:7816r3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A172A49-1A0E-464B-BDDD-A8F52856D595"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:96lbs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBAE5B17-52F9-4FDD-BD65-AA0C1ADB4806"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:dcs-7010tx-48:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CB43CD4-C96F-483C-B743-3D81C9A65EDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:dcs-7500-12cq-lc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCCC3EC2-D68C-49E5-8E72-35F16853CA04"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:dcs-7500e-12cm-lc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D363C8-7D75-4EA7-B5BC-566C1C9ECE96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:dcs-7500e-36q-lc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0CD14C-E2C8-4EEC-AAD9-E2428E8610DC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:dcs-7500e-48s-lc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD40F1C-32AA-42DF-9378-724CD949127B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:dcs-7500e-6c2-lc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB63C0B-D27A-4CB4-B379-570C0DC8B958"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:dcs-7500e-72s-lc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2468E734-5CA3-4293-A806-358FE659AEA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:dcs-7500r-36cq-lc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52C4EAF7-6FD7-477A-B4BE-DE5920BF7BBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:dcs-7500r-36q-lc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA8BEE5-9EDC-4BAC-AB7C-4F9E6680388B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arista:dcs-7500r-48s2cq-lc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB68705B-A8A5-49AB-AC53-02B311900F7D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arista:ceos-lab:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2260519E-FB90-4924-95E7-1FCC34C4B38B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arista:cloudeos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362F2E0F-3D40-444F-87F3-21CA70B1AD04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arista:veos-lab:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B29E15-3CFB-45EC-B252-8F02CC1E589C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/17250-security-advisory-0086",
        "source" : "psirt@arista.com",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.arista.com/en/support/advisories-notices/security-advisory/17250-security-advisory-0086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29007",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-25T21:15:10.403",
      "lastModified" : "2025-11-04T17:15:36.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`."
      }, {
        "lang" : "es",
        "value" : "Git es un sistema de control de revisiones. Antes de las versiones 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3 y 2.40.1, una versión especialmente El archivo `.gitmodules` elaborado con URL de submódulo que tienen más de 1024 caracteres se puede usar para explotar un error en `config.c::git_config_copy_or_rename_section_in_file()`. Este error se puede utilizar para inyectar una configuración arbitraria en `$GIT_DIR/config` de un usuario al intentar eliminar la sección de configuración asociada con ese submódulo. Cuando el atacante inyecta valores de configuración que especifican ejecutables para ejecutar (como `core.pager`, `core.editor`, `core.sshCommand`, etc.), esto puede provocar una ejecución remota de código. Una solución hay una solución disponible en las versiones 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3 y 2.40. .1. Como workaround, evite ejecutar `git submodule deinit` en repositorios que no sean de confianza o sin una inspección previa de cualquier sección de submódulo en `$GIT_DIR/config`."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.30.9",
            "matchCriteriaId" : "A2E4BF99-17B8-4424-B97E-DDB8A4793DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.31.0",
            "versionEndExcluding" : "2.31.8",
            "matchCriteriaId" : "2A1D7F29-E06F-4277-8713-1C19DE714300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.32.0",
            "versionEndExcluding" : "2.32.7",
            "matchCriteriaId" : "0B69F022-B29E-4D9A-B4FC-78430AFF0C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.33.0",
            "versionEndExcluding" : "2.33.8",
            "matchCriteriaId" : "8A2B603F-B8E2-4123-80A4-64E983FF1F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.34.0",
            "versionEndExcluding" : "2.34.8",
            "matchCriteriaId" : "26D3ED4E-246E-4D4D-9E2D-7890E93ECED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.35.0",
            "versionEndExcluding" : "2.35.8",
            "matchCriteriaId" : "D3988013-1332-49F8-85E7-7EB59BE36A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.36.0",
            "versionEndExcluding" : "2.36.5",
            "matchCriteriaId" : "0588D372-41D2-442E-976E-6B24DB1A1EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.37.0",
            "versionEndExcluding" : "2.37.7",
            "matchCriteriaId" : "030542CA-76BF-4252-9E03-D7E44D3DEE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.38.0",
            "versionEndExcluding" : "2.38.5",
            "matchCriteriaId" : "6EAEE109-8AD8-4383-AAC3-E9D2A4794F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.39.0",
            "versionEndExcluding" : "2.39.3",
            "matchCriteriaId" : "BE329F8E-076F-4895-A2A2-A1C0330C1F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.40.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89633B46-319A-499C-9848-2EA60AC030EB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/git/git/blob/9ce9dea4e1c2419cca126d29fa7730baa078a11b/Documentation/RelNotes/2.30.9.txt",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git/git/blob/9ce9dea4e1c2419cca126d29fa7730baa078a11b/Documentation/RelNotes/2.30.9.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29011",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-25T21:15:10.480",
      "lastModified" : "2024-11-21T07:56:23.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Git for Windows, the Windows port of Git, ships with an executable called `connect.exe`, which implements a SOCKS5 proxy that can be used to connect e.g. to SSH servers via proxies when certain ports are blocked for outgoing connections. The location of `connect.exe`'s config file is hard-coded as `/etc/connectrc` which will typically be interpreted as `C:\\etc\\connectrc`. Since `C:\\etc` can be created by any authenticated user, this makes `connect.exe` susceptible to malicious files being placed there by other users on the same multi-user machine. The problem has been patched in Git for Windows v2.40.1. As a workaround, create the folder `etc` on all drives where Git commands are run, and remove read/write access from those folders. Alternatively, watch out for malicious `<drive>:\\etc\\connectrc` files on multi-user machines."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git_for_windows_project:git_for_windows:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.40.1",
            "matchCriteriaId" : "E740B447-D96A-40C3-AFA9-9B058379E04D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/git-for-windows/git/releases/tag/v2.40.1.windows.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/security/advisories/GHSA-g4fv-xjqw-q7jm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/releases/tag/v2.40.1.windows.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/security/advisories/GHSA-g4fv-xjqw-q7jm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29012",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-25T21:15:10.557",
      "lastModified" : "2024-11-21T07:56:23.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Git for Windows is the Windows port of Git. Prior to version 2.40.1, any user of Git CMD who starts the command in an untrusted directory is impacted by an Uncontrolles Search Path Element vulnerability. Maliciously-placed `doskey.exe` would be executed silently upon running Git CMD. The problem has been patched in Git for Windows v2.40.1. As a workaround, avoid using Git CMD or, if using Git CMD, avoid starting it in an untrusted directory."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git_for_windows_project:git_for_windows:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.40.1",
            "matchCriteriaId" : "E740B447-D96A-40C3-AFA9-9B058379E04D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/git-for-windows/git/releases/tag/v2.40.1.windows.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/security/advisories/GHSA-gq5x-v87v-8f7g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/releases/tag/v2.40.1.windows.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/git-for-windows/git/security/advisories/GHSA-gq5x-v87v-8f7g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2269",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2023-04-25T21:15:10.627",
      "lastModified" : "2024-11-21T07:58:16.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-413"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FAA415-53CF-4007-875A-9045AD1A540F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D69DCC-AE4D-4EA5-861C-D60951444C6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63AJUCJTZCII2JMAF7MGZEM66KY7IALT/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FBLBKW2WM5YSTS6OGEU5SYHXSJ5EWSTV/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IXHBLWYNSUBS77TYPOJTADPDXKBH2F4U/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lore.kernel.org/lkml/ZD1xyZxb3rHot8PV%40redhat.com/t/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230929-0004/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5448",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5480",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63AJUCJTZCII2JMAF7MGZEM66KY7IALT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FBLBKW2WM5YSTS6OGEU5SYHXSJ5EWSTV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IXHBLWYNSUBS77TYPOJTADPDXKBH2F4U/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lore.kernel.org/lkml/ZD1xyZxb3rHot8PV%40redhat.com/t/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230929-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2293",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-25T21:15:10.693",
      "lastModified" : "2024-11-21T07:58:19.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been classified as problematic. This affects an unknown part of the file classes/Master.php?f=save_item. The manipulation of the argument description with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227463."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:purchase_order_management_system_project:purchase_order_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03DF14E7-752B-4DDC-9AE9-DFDE24815075"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/biantaibao/bug_report/blob/main/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227463",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227463",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/biantaibao/bug_report/blob/main/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30549",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-25T21:15:10.767",
      "lastModified" : "2024-11-21T08:00:24.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that is exploitable through versions of Apptainer < 1.1.0 and installations that include apptainer-suid < 1.1.8 on older operating systems where that CVE has not been patched. That includes Red Hat Enterprise Linux 7, Debian 10 buster (unless the linux-5.10 package is installed), Ubuntu 18.04 bionic and Ubuntu 20.04 focal. Use-after-free flaws in the kernel can be used to attack the kernel for denial of service and potentially for privilege escalation.\n\nApptainer 1.1.8 includes a patch that by default disables mounting of extfs filesystem types in setuid-root mode, while continuing to allow mounting of extfs filesystems in non-setuid \"rootless\" mode using fuse2fs.\n\nSome workarounds are possible. Either do not install apptainer-suid (for versions 1.1.0 through 1.1.7) or set `allow setuid = no` in apptainer.conf.  This requires having unprivileged user namespaces enabled and except for apptainer 1.1.x versions will disallow mounting of sif files, extfs files, and squashfs files in addition to other, less significant impacts.  (Encrypted sif files are also not supported unprivileged in apptainer 1.1.x.). Alternatively, use the `limit containers` options in apptainer.conf/singularity.conf to limit sif files to trusted users, groups, and/or paths, and set `allow container extfs = no` to disallow mounting of extfs overlay files.  The latter option by itself does not disallow mounting of extfs overlay partitions inside SIF files, so that's why the former options are also needed."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:apptainer:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "1.1.8",
            "matchCriteriaId" : "DE6873C2-2BED-4420-B34A-0D4621743ED0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylabs:singularity:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E717102A-7916-4153-A201-B868E3235ED4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://access.redhat.com/security/cve/cve-2022-1184",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/apptainer/apptainer/commit/5a4964f5ba9c8d89a0e353b97f51fd607670a9f7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/apptainer/apptainer/releases/tag/v1.1.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/apptainer/apptainer/security/advisories/GHSA-j4rf-7357-f4cg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2220eaf90992c11d888fe771055d4de3303",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4f04351888a83e595571de672e0a4a8b74f",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lwn.net/Articles/932136/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lwn.net/Articles/932137/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2022-1184",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-13",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://sylabs.io/2023/04/response-to-cve-2023-30549/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://ubuntu.com/security/CVE-2022-1184",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.suse.com/security/cve/CVE-2022-1184.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/cve-2022-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/apptainer/apptainer/commit/5a4964f5ba9c8d89a0e353b97f51fd607670a9f7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/apptainer/apptainer/releases/tag/v1.1.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/apptainer/apptainer/security/advisories/GHSA-j4rf-7357-f4cg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/2220eaf90992c11d888fe771055d4de3303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4f04351888a83e595571de672e0a4a8b74f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lwn.net/Articles/932136/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lwn.net/Articles/932137/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2022-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://sylabs.io/2023/04/response-to-cve-2023-30549/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://ubuntu.com/security/CVE-2022-1184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.suse.com/security/cve/CVE-2022-1184.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30609",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-25T21:15:10.843",
      "lastModified" : "2024-11-21T08:00:30.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "matrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page. Prior to version 3.71.0, plain text messages containing HTML tags are rendered as HTML in the search results. To exploit this, an attacker needs to trick a user into searching for a specific message containing an HTML injection payload. No cross-site scripting attack is possible due to the hardcoded content security policy. Version 3.71.0 of the SDK patches over the issue. As a workaround, restarting the client will clear the HTML injection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix-react-sdk_project:matrix-react-sdk:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.71.0",
            "matchCriteriaId" : "716CC2D8-1E07-4860-8E07-B82C055FBCF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/matrix-react-sdk/commit/bf182bc94556849d7acdfa0e5fdea2aa129ea826",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.71.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-xv83-x443-7rmw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-react-sdk/commit/bf182bc94556849d7acdfa0e5fdea2aa129ea826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.71.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-xv83-x443-7rmw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20869",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-04-25T22:15:09.420",
      "lastModified" : "2025-02-04T18:15:32.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.0.2",
            "matchCriteriaId" : "B628132D-043A-4989-9524-9FA53B1DEADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.2",
            "matchCriteriaId" : "53930936-892B-421E-B75C-BD2DEC4A09AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0008.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20870",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2023-04-25T22:15:09.463",
      "lastModified" : "2025-02-04T18:15:33.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Workstation and Fusion contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.0.2",
            "matchCriteriaId" : "B628132D-043A-4989-9524-9FA53B1DEADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.0.2",
            "matchCriteriaId" : "53930936-892B-421E-B75C-BD2DEC4A09AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0008.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2023-0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30842",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-25T22:15:09.507",
      "lastModified" : "2023-11-07T04:14:06.137",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-25313. Reason: This candidate is a reservation duplicate of CVE-2023-25313. Notes: All CVE users should reference CVE-2023-25313 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0045",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-04-25T23:15:09.013",
      "lastModified" : "2025-02-13T17:15:52.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set  function updates the Thread Information Flags (TIFs) for the task and updates the SPEC_CTRL MSR on the function __speculation_ctrl_update, but the IBPB is only issued on the next schedule, when the TIF bits are checked. This leaves the victim vulnerable to values already injected on the BTB, prior to the prctl syscall.  The patch that added the support for the conditional mitigation via prctl (ib_prctl_set) dates back to the kernel 4.9.176.\n\nWe recommend upgrading past commit a664ec9158eeddd75121d39c9a0758016097fa96"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.16.68",
            "versionEndExcluding" : "3.17",
            "matchCriteriaId" : "9B65A009-A8A9-422E-88B3-98A19BF90A72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.180",
            "versionEndExcluding" : "4.5",
            "matchCriteriaId" : "A2176BEA-36C2-4A46-8200-B6D084086D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.9.176",
            "versionEndExcluding" : "4.10",
            "matchCriteriaId" : "609BE142-0BB2-432B-AC70-4E7C3DA4616A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14.86",
            "versionEndExcluding" : "4.14.303",
            "matchCriteriaId" : "73919D2F-B16E-4C04-BC2D-46C72195F587"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.19.7",
            "versionEndExcluding" : "4.19.270",
            "matchCriteriaId" : "B1C0BC70-5024-441D-BAA0-E9170C9871DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.229",
            "matchCriteriaId" : "A0C0D95E-414A-445E-941B-3EF6A4D3A093"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.10.163",
            "matchCriteriaId" : "2A1EBCCF-FF20-4ACC-BDBD-821B007EA35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.87",
            "matchCriteriaId" : "7B9E5B1C-CD46-4790-9500-615863850401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.0.19",
            "matchCriteriaId" : "B70FF53F-1F99-4483-9376-CBA1A4EE0351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1",
            "versionEndExcluding" : "6.1.5",
            "matchCriteriaId" : "8C1E7766-4310-43F9-BAC4-3763A36C043A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/tip/a664ec9158eeddd75121d39c9a0758016097fa96",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://github.com/google/security-research/security/advisories/GHSA-9x5g-vmxf-4qj8",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230714-0001/",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/tip/a664ec9158eeddd75121d39c9a0758016097fa96",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://github.com/google/security-research/security/advisories/GHSA-9x5g-vmxf-4qj8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230714-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-25T23:15:09.090",
      "lastModified" : "2025-05-30T16:15:34.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dradis before 4.8.0 allows persistent XSS by authenticated author users, related to avatars."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dradisframework:dradis:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8.0",
            "matchCriteriaId" : "8988FEBD-6558-4753-B319-095CF5504732"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-31223",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://dradisframework.com/ce/security_reports.html#fixed-4.8.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/cve-2023-31223/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://dradisframework.com/ce/security_reports.html#fixed-4.8.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/cve-2023-31223/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26560",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T00:15:09.187",
      "lastModified" : "2025-02-04T16:15:35.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Northern.tech CFEngine Enterprise before 3.21.1 allows a subset of authenticated users to leverage the Scheduled Reports feature to read arbitrary files and potentially discover credentials."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:northern.tech:cfengine:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "3.21.1",
            "matchCriteriaId" : "2EF7B864-82F8-438D-A76F-6BFF97DEC09F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cfengine.com/blog/2023/cve-2023-26560/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://northern.tech",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://cfengine.com/blog/2023/cve-2023-26560/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://northern.tech",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26735",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T00:15:09.227",
      "lastModified" : "2025-02-04T16:15:35.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prometheus:blackbox_exporter:0.23.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF41B4A7-0D76-435B-BD57-3CC09A4900C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blackboxexporter.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://prometheus.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/prometheus/blackbox_exporter#tls-and-basic-authentication",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/prometheus/blackbox_exporter/issues/1024",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/prometheus/blackbox_exporter/issues/1025",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/prometheus/blackbox_exporter/issues/1026",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://blackboxexporter.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://prometheus.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/prometheus/blackbox_exporter#tls-and-basic-authentication",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/prometheus/blackbox_exporter/issues/1024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/prometheus/blackbox_exporter/issues/1025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/prometheus/blackbox_exporter/issues/1026",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/prometheus/blackbox_exporter#tls-and-basic-authentication",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T00:15:09.267",
      "lastModified" : "2025-02-03T20:15:30.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability found in PrestaShop askforaquote v.5.4.2 and before allow a remote attacker to gain privileges via the QuotesProduct::deleteProduct component."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ask_for_a_quote_project:ask_for_a_quote:*:*:*:*:*:prestashop:*:*",
            "versionEndIncluding" : "5.4.2",
            "matchCriteriaId" : "3B662915-A5FD-435A-A507-794EF762E756"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://addons.prestashop.com/en/quotes/3725-ask-for-a-quote-convert-to-order-messaging-system.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/04/25/askforaquote.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://addons.prestashop.com/en/quotes/3725-ask-for-a-quote-convert-to-order-messaging-system.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://friends-of-presta.github.io/security-advisories/modules/2023/04/25/askforaquote.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30106",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T00:15:09.310",
      "lastModified" : "2025-02-03T18:15:30.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sourcecodester Medicine Tracker System in PHP 1.0.0 is vulnerable to Cross Site Scripting (XSS) via page=about."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medicine_tracker_system_project:medicine_tracker_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313F1413-ACA3-49E9-9315-856D212D7DB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Rajeshwar40/CVE/blob/main/2023-30106",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-mts_0.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Rajeshwar40/CVE/blob/main/2023-30106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-mts_0.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T00:15:09.347",
      "lastModified" : "2025-02-03T18:15:31.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Medicine Tracker System in PHP 1.0.0 is vulnerable to Cross Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medicine_tracker_system_project:medicine_tracker_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313F1413-ACA3-49E9-9315-856D212D7DB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Rajeshwar40/CVE/blob/main/2023-30111",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-mts_0.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Rajeshwar40/CVE/blob/main/2023-30111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-mts_0.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T00:15:09.387",
      "lastModified" : "2025-02-03T18:15:32.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aigital Wireless-N Repeater Mini_Router v0.131229 was discovered to contain a remote code execution (RCE) vulnerability via the sysCmd parameter in the formSysCmd function. This vulnerability is exploited via a crafted HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aigital:wireless-n_repeater_mini_router_firmware:0.131229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98062FCB-6507-4EDF-8445-6331EB735BBC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aigital:wireless-n_repeater_mini_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F57200-B5E5-482B-908F-B715109893B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://aigital.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://mandomat.github.io/2023-04-13-testing-a-cheap-wifi-repeater/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://aigital.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://mandomat.github.io/2023-04-13-testing-a-cheap-wifi-repeater/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2294",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-26T06:15:09.283",
      "lastModified" : "2024-11-21T07:58:19.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in UCMS 1.6.0. It has been classified as problematic. This affects an unknown part of the file saddpost.php of the component Column Configuration. The manipulation of the argument strorder leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227481 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ucms_project:ucms:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED914EC-C479-4D5F-8322-2241E409AECC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yztale/UCMS1.6/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227481",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227481",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yztale/UCMS1.6/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2273",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2023-04-26T09:15:09.117",
      "lastModified" : "2024-11-21T07:58:17.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rapid7 Insight Agent token handler versions 3.2.6 and below, suffer from a Directory Traversal vulnerability whereby unsanitized input from a CLI argument flows into io.ioutil.WriteFile, where it is used as a path. This can result in a Path Traversal vulnerability and allow an attacker to write arbitrary files. This issue is remediated in version 3.3.0 via safe guards that reject inputs that attempt to do path traversal."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@rapid7.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rapid7:insight_agent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.0",
            "matchCriteriaId" : "D6C77893-290E-4C86-BA8C-A2667C53145C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.rapid7.com/release-notes/insightagent/20230425/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://docs.rapid7.com/release-notes/insightagent/20230425/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26286",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-26T12:15:09.803",
      "lastModified" : "2024-11-21T07:51:03.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX runtime services library to execute arbitrary commands.  IBM X-Force ID:  248421."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:vios:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F61BE89-FBDE-4312-8422-86D1A9F57C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0402E20C-8B41-4A2A-BFF9-92EC843985F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6791504A-A48A-4ED0-94AF-4C8A3B91516F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35DF3DE0-1AE4-4B25-843F-BC08DBBFDF78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/248421",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6983236",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/248421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6983236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T13:15:08.807",
      "lastModified" : "2025-02-03T18:15:28.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vinga:wr-ac1200_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "81.102.1.4370",
            "matchCriteriaId" : "1CEAF5F2-85F9-4DE1-B989-EE66D6B220B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:vinga:wr-ac1200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC887451-A336-4BD3-BDF2-72B44E31D208"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/yinfei6/3664387cb5b66b68c7eff4bfdb51b2d6",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/yinfei6/3664387cb5b66b68c7eff4bfdb51b2d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29257",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-26T13:15:08.853",
      "lastModified" : "2024-11-21T07:56:45.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance.  IBM X-Force ID:  252011."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1",
            "versionEndExcluding" : "11.1.4",
            "matchCriteriaId" : "421BBE95-3D5B-421A-9DC1-8B08D019B2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5",
            "versionEndExcluding" : "11.5.8",
            "matchCriteriaId" : "65161064-A4A3-48E5-AC0A-388429FF2F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "190AE881-F7BF-486E-BDAE-197337D70CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1BAA43-4C77-4AC7-8561-93EDE0AED000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp10:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FDF4D8-1822-43E6-AE65-3E4F8743D3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "87C39880-D0E9-4487-9A80-B4D1A999032F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8842A8B6-E470-4536-AB5D-DA1C62A05F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp3a:*:*:*:*:*:*",
            "matchCriteriaId" : "92BF0482-E4FE-454E-84DD-27074097F3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "3705A79B-7903-4055-9CDC-55D60D2AC2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDFCE61-EE04-4901-844D-61B8966C1B81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "53A23363-413D-4785-B8C1-9AC2F96000EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "6E22D884-A33F-41D7-84CB-B6360A39863F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp8:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA56D35-93E9-4659-B180-2FD636A39BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp9:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7F0B02-EA0B-4BD1-AA0C-2A4735221963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7F91EC14-CD9A-42EB-9D81-6025A1D74749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5D098641-0833-4718-BB6A-273E1CA0F887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B451F96-2A58-4758-86E6-F8A030805C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "69CBC98E-BECE-41A4-A0D9-9F3AC1602ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "20386F14-BC32-4174-9F3A-F7406486976A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0DD54B-AB2E-4C56-B348-FF87C174270A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "CC14EF40-FE00-47F9-8A78-98713F903D9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/252011",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0010/",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985691",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/252011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1387",
      "sourceIdentifier" : "security@grafana.com",
      "published" : "2023-04-26T14:15:09.430",
      "lastModified" : "2025-02-13T17:15:58.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grafana is an open-source platform for monitoring and observability. \n\nStarting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter auth_token and use it as the authentication token. \n\nBy enabling the \"url_login\" configuration option (disabled by default), a JWT might be sent to data sources. If an attacker has access to the data source, the leaked token could be used to authenticate to Grafana."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@grafana.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@grafana.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0",
            "versionEndExcluding" : "9.2.17",
            "matchCriteriaId" : "5664FC02-E4AA-41EC-8EAA-300AD2272CC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.0",
            "versionEndExcluding" : "9.3.13",
            "matchCriteriaId" : "5A544263-545D-4D86-B29F-F7FC12E9A34F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "9.4.9",
            "matchCriteriaId" : "99EBCA47-A3CD-4C20-B151-300D43426EB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/grafana/bugbounty/security/advisories/GHSA-5585-m9r5-p86j",
        "source" : "security@grafana.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/security/security-advisories/cve-2023-1387/",
        "source" : "security@grafana.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230609-0003/",
        "source" : "security@grafana.com"
      }, {
        "url" : "https://github.com/grafana/bugbounty/security/advisories/GHSA-5585-m9r5-p86j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/security/security-advisories/cve-2023-1387/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230609-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22728",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-26T14:15:09.490",
      "lastModified" : "2024-11-21T07:45:18.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorised to access. Users should upgrade to Silverstripe Framework 4.12.15 or above to address the issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:framework:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.12.5",
            "matchCriteriaId" : "12AC8517-3E73-4583-BD9E-E9D129DEDAF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/silverstripe/silverstripe-framework/commit/fd5d8217e83768d7bf841e94b2d4d82642d5bc58",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-jh3w-6jp2-vqqm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-framework/commit/fd5d8217e83768d7bf841e94b2d4d82642d5bc58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-jh3w-6jp2-vqqm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T14:15:09.660",
      "lastModified" : "2025-02-03T18:15:31.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Medicine Tracker System in PHP 1.0.0 is vulnerable to SQL Injection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medicine_tracker_system_project:medicine_tracker_system:1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12D8990C-56A8-424F-A615-0E5350924342"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Rajeshwar40/CVE/blob/main/CVE-2023-30112",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-mts_0.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Rajeshwar40/CVE/blob/main/CVE-2023-30112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-mts_0.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T14:15:09.697",
      "lastModified" : "2025-02-03T18:15:31.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CLTPHP <=6.0 is vulnerable to Directory Traversal."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cltphp:cltphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "15CDA35B-3FCD-4AAA-B686-95A08504F7FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/HuBenLab/1d1bc201d5df41426d719e56d4421b30",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gist.github.com/HuBenLab/1d1bc201d5df41426d719e56d4421b30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T14:15:09.737",
      "lastModified" : "2025-02-03T18:15:31.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cltphp:cltphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "15CDA35B-3FCD-4AAA-B686-95A08504F7FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/HuBenLab/a6ef7e5efeae2635f54cb69327409a19",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gist.github.com/HuBenLab/a6ef7e5efeae2635f54cb69327409a19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T14:15:09.777",
      "lastModified" : "2025-02-03T18:15:32.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CLTPHP <=6.0 is vulnerable to Cross Site Scripting (XSS) via application/home/controller/Changyan.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cltphp:cltphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "15CDA35B-3FCD-4AAA-B686-95A08504F7FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/HuBenLab/e26ee91c43d4409437df350398ec6cf6",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gist.github.com/HuBenLab/e26ee91c43d4409437df350398ec6cf6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T14:15:09.813",
      "lastModified" : "2025-02-03T18:15:32.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CLTPHP <=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cltphp:cltphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0",
            "matchCriteriaId" : "15CDA35B-3FCD-4AAA-B686-95A08504F7FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/HuBenLab/f5eb8ebbba20c835a3170d392c9e46a4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gist.github.com/HuBenLab/f5eb8ebbba20c835a3170d392c9e46a4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22729",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-26T15:15:08.887",
      "lastModified" : "2024-11-21T07:45:18.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, an attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link. Users should upgrade to Silverstripe Framework 4.12.15 or above to address the issue."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:silverstripe:framework:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.12.5",
            "matchCriteriaId" : "12AC8517-3E73-4583-BD9E-E9D129DEDAF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/silverstripe/silverstripe-framework/commit/1a5bb4cbece1721203977910b8ecd8b79c18dc77",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-fw84-xgm8-9jmv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-framework/commit/1a5bb4cbece1721203977910b8ecd8b79c18dc77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-fw84-xgm8-9jmv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T16:15:10.023",
      "lastModified" : "2025-02-03T19:15:11.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OURPHP <= 7.2.0 is vulnerable to Cross Site Scripting (XSS) via ourphp_tz.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ourphp:ourphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.0",
            "matchCriteriaId" : "D371179F-DCD6-406E-A2E2-F1D355D9EE5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-ourphp-tz-php-Reflection-xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-ourphp-tz-php-Reflection-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T16:15:10.067",
      "lastModified" : "2025-02-03T19:15:11.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OURPHP <= 7.2.0 is vulnerable to SQL Injection."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ourphp:ourphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.0",
            "matchCriteriaId" : "D371179F-DCD6-406E-A2E2-F1D355D9EE5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-Background-SQL-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-Background-SQL-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2307",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-26T17:15:11.217",
      "lastModified" : "2026-03-13T19:21:11.617",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) in GitHub repository builderio/qwik prior to 0.104.0.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qwik:qwik:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.104.0",
            "matchCriteriaId" : "B9B9D6F7-BFAE-474D-9ABD-054DFC55E343"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BuilderIO/qwik/pull/3862/commits/09190b70027354baf7ad3d208df9c05a87f75f57",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/204ea12e-9e5c-4166-bf0e-fd49c8836917",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BuilderIO/qwik/pull/3862/commits/09190b70027354baf7ad3d208df9c05a87f75f57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/204ea12e-9e5c-4166-bf0e-fd49c8836917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T17:15:11.297",
      "lastModified" : "2025-02-03T19:15:11.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ourphp:ourphp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.2.0",
            "matchCriteriaId" : "D371179F-DCD6-406E-A2E2-F1D355D9EE5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-ourphp-out-php-Reflection-xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-ourphp-out-php-Reflection-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29268",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2023-04-26T18:15:09.160",
      "lastModified" : "2025-01-30T22:15:07.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Splus Server component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that allows an unauthenticated remote attacker to upload or modify arbitrary files within the web server directory on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Statistics Services: versions 11.4.10 and below, versions 11.5.0, 11.6.0, 11.6.1, 11.6.2, 11.7.0, 11.8.0, 11.8.1, 12.0.0, 12.0.1, and 12.0.2, versions 12.1.0 and 12.2.0.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_statistics_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.4.11",
            "matchCriteriaId" : "65804033-AECA-41EC-8973-CAE190EF69BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_statistics_services:11.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D37E7A0-F21A-413E-AF65-59340520B6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_statistics_services:11.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3602DE-B5AB-4FFA-AAD9-8C42B00988F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_statistics_services:11.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "510E83A5-B777-4EE6-851C-F9BE10147594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_statistics_services:11.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55EABB66-4B3D-4D72-B028-E40491CDC77C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_statistics_services:11.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42A74F6C-267D-4B1F-BF66-A1F10B0B2A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_statistics_services:11.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C677EA4-6EB9-4B9B-9E1E-97555AF1291F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_statistics_services:11.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE304915-AE5B-45C7-BA5C-79AA880F1088"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_statistics_services:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D69CD443-28E2-4632-95D4-E5EB3F094768"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_statistics_services:12.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EAE9787-53AE-4A38-8223-1F7893CC3CEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_statistics_services:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3ECA9B9-6058-4CE5-9535-8ED98022FB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_statistics_services:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E78843D-BBB8-4558-9E56-75CE514FA143"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_statistics_services:12.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA10C631-566D-46BF-93A5-A7A92266FC47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0458",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-04-26T19:15:08.720",
      "lastModified" : "2024-11-21T07:37:13.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or commit 739790605705ddcf18f21782b9c99ad7d53a8c11"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.8",
            "matchCriteriaId" : "3D30DC5F-EE59-4C39-AC86-E4E52220E21A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF501633-2F44-4913-A8EE-B021929F49F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "2BDA597B-CAC1-4DF0-86F0-42E142C654E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "725C78C9-12CE-406F-ABE8-0813A01D66E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "A127C155-689C-4F67-B146-44A57F4BFD85"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/diff/kernel/sys.c?id=v6.1.8&id2=v6.1.7",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/739790605705ddcf18f21782b9c99ad7d53a8c11",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/diff/kernel/sys.c?id=v6.1.8&id2=v6.1.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/739790605705ddcf18f21782b9c99ad7d53a8c11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T19:15:08.783",
      "lastModified" : "2024-11-21T07:52:04.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.”"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xpdfreader:xpdf:4.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDB8219E-FA52-45B5-A332-CE34400630BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/huanglei3/10e2a9bd07a109995b20ade306612a34",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/huanglei3/xpdf_aborted",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://gist.github.com/huanglei3/10e2a9bd07a109995b20ade306612a34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/huanglei3/xpdf_aborted",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T19:15:08.820",
      "lastModified" : "2023-11-07T04:09:44.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2022-30524. Reason: This record is a duplicate of CVE-2022-30524. Notes: All CVE users should reference CVE-2022-30524 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26934",
      "sourceIdentifier" : "xpdf@xpdfreader.com",
      "published" : "2023-04-26T19:15:08.857",
      "lastModified" : "2026-02-25T17:19:23.070",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26935",
      "sourceIdentifier" : "xpdf@xpdfreader.com",
      "published" : "2023-04-26T19:15:08.893",
      "lastModified" : "2026-02-25T17:19:23.143",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26936",
      "sourceIdentifier" : "xpdf@xpdfreader.com",
      "published" : "2023-04-26T19:15:08.930",
      "lastModified" : "2023-11-07T04:09:44.813",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26937",
      "sourceIdentifier" : "xpdf@xpdfreader.com",
      "published" : "2023-04-26T19:15:08.963",
      "lastModified" : "2023-11-07T04:09:45.143",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26938",
      "sourceIdentifier" : "xpdf@xpdfreader.com",
      "published" : "2023-04-26T19:15:09.000",
      "lastModified" : "2023-11-07T04:09:45.477",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30546",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-26T19:15:09.070",
      "lastModified" : "2024-11-21T08:00:23.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Contiki-NG is an operating system for Internet of Things devices. An off-by-one error can be triggered in the Antelope database management system in the Contiki-NG operating system in versions 4.8 and prior. The problem exists in the Contiki File System (CFS) backend for the storage of data (file os/storage/antelope/storage-cfs.c). In the functions `storage_get_index` and `storage_put_index`, a buffer for merging two strings is allocated with one byte less than the maximum size of the merged strings, causing subsequent function calls to the cfs_open function to read from memory beyond the buffer size. The vulnerability has been patched in the \"develop\" branch of Contiki-NG, and is expected to be included in the next release. As a workaround, the problem can be fixed by applying the patch in Contiki-NG pull request #2425."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contiki-ng:contiki-ng:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8",
            "matchCriteriaId" : "729B4607-C6BD-42DE-91BF-918A57D29A77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/contiki-ng/contiki-ng/pull/2425",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-257g-w39m-5jj4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/contiki-ng/contiki-ng/pull/2425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-257g-w39m-5jj4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30841",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-26T19:15:09.140",
      "lastModified" : "2024-11-21T08:00:57.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Baremetal Operator (BMO) is a bare metal host provisioning integration for Kubernetes. Prior to version 0.3.0, ironic and ironic-inspector deployed within Baremetal Operator using the included `deploy.sh` store their `.htpasswd` files as ConfigMaps instead of Secrets. This causes the plain-text username and hashed password to be readable by anyone having a cluster-wide read-access to the management cluster, or access to the management cluster's Etcd storage. This issue is patched in baremetal-operator PR#1241, and is included in BMO release 0.3.0 onwards. As a workaround, users may modify the kustomizations and redeploy the BMO, or recreate the required ConfigMaps as Secrets per instructions in baremetal-operator PR#1241."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:baremetal_operator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.0",
            "matchCriteriaId" : "AA9EF57A-FEA8-4F8F-8E1D-9F28B2DBC19F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/metal3-io/baremetal-operator/pull/1241",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/metal3-io/baremetal-operator/security/advisories/GHSA-9wh7-397j-722m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/metal3-io/baremetal-operator/pull/1241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch" ]
      }, {
        "url" : "https://github.com/metal3-io/baremetal-operator/security/advisories/GHSA-9wh7-397j-722m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31250",
      "sourceIdentifier" : "mlhess@drupal.org",
      "published" : "2023-04-26T19:15:09.197",
      "lastModified" : "2025-02-03T17:15:14.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "7.96",
            "matchCriteriaId" : "CBB1BE97-A14F-4941-952F-30085276002C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4",
            "versionEndExcluding" : "9.4.14",
            "matchCriteriaId" : "E457DE71-9E4B-459A-998B-D3BDE783B1A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5",
            "versionEndExcluding" : "9.5.8",
            "matchCriteriaId" : "1E1584E4-5BB2-47C9-A183-FCF55BE05784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndExcluding" : "10.0.8",
            "matchCriteriaId" : "AFA826F0-B7FF-46ED-AADB-13408B027C79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.drupal.org/sa-core-2023-005",
        "source" : "mlhess@drupal.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.drupal.org/sa-core-2023-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26567",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T20:15:09.860",
      "lastModified" : "2025-02-03T18:15:28.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO file) places AMPDBUSER, AMPDBPASS, AMPMGRUSER, and AMPMGRPASS in the list of global variables. This exposes cleartext authentication credentials for the Asterisk Database (MariaDB/MySQL) and Asterisk Manager Interface. For example, an attacker can make a /ari/asterisk/variable?variable=AMPDBPASS API call."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx_linux_7:1805:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F799892-BFCA-4184-BF34-4D316A7B5304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx_linux_7:1904:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC57541-8B9A-4F7C-B5AD-BABDE74D987B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx_linux_7:1910:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDB0599D-399C-4B25-AC8D-F0DFD9F960C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx_linux_7:2002:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CC01C41-5999-48DF-BA27-EB08793F9C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx_linux_7:2008:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A62509A-E706-4AAE-980A-538A95FAEFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx_linux_7:2011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44020ABA-8123-4E39-95CD-99C96DA76630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx_linux_7:2104:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59E7AB2A-F42F-495B-9786-63157F8FFD39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx_linux_7:2105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A022DFF-AFB0-4BC9-9995-C0732D4A53D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx_linux_7:2109:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34D4BBD-FCE8-41C3-8E72-4FB06AE93D6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx_linux_7:2112:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938CB1A3-B087-4B13-8017-FB20EA66E25E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx_linux_7:2201:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5091CC73-0948-4F66-A95F-08B2D806706E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx_linux_7:2202:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938FF93C-F1D1-46AC-8EBE-4EAF9B3266FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx_linux_7:2203:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFC050D-EEFD-4DD2-BCF3-A5209BD07A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sangoma:freepbx_linux_7:2302:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D1EA05-C694-421E-BD19-9FEA00731998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://qsecure.com.cy/resources/advisories/sangoma-freepbx-linux-insecure-permissions",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.freepbx.org",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sangoma.com/products/open-source/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://qsecure.com.cy/resources/advisories/sangoma-freepbx-linux-insecure-permissions",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.freepbx.org",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.sangoma.com/products/open-source/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27559",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-26T20:15:09.900",
      "lastModified" : "2024-11-21T07:53:08.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash when using a specially crafted subquery.  IBM X-Force ID:  249196."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1",
            "versionEndExcluding" : "11.1.4",
            "matchCriteriaId" : "421BBE95-3D5B-421A-9DC1-8B08D019B2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5",
            "versionEndExcluding" : "11.5.8",
            "matchCriteriaId" : "65161064-A4A3-48E5-AC0A-388429FF2F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "190AE881-F7BF-486E-BDAE-197337D70CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1BAA43-4C77-4AC7-8561-93EDE0AED000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp10:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FDF4D8-1822-43E6-AE65-3E4F8743D3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "87C39880-D0E9-4487-9A80-B4D1A999032F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8842A8B6-E470-4536-AB5D-DA1C62A05F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp3a:*:*:*:*:*:*",
            "matchCriteriaId" : "92BF0482-E4FE-454E-84DD-27074097F3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "3705A79B-7903-4055-9CDC-55D60D2AC2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDFCE61-EE04-4901-844D-61B8966C1B81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "53A23363-413D-4785-B8C1-9AC2F96000EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "6E22D884-A33F-41D7-84CB-B6360A39863F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp8:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA56D35-93E9-4659-B180-2FD636A39BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp9:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7F0B02-EA0B-4BD1-AA0C-2A4735221963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7F91EC14-CD9A-42EB-9D81-6025A1D74749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5D098641-0833-4718-BB6A-273E1CA0F887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B451F96-2A58-4758-86E6-F8A030805C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "69CBC98E-BECE-41A4-A0D9-9F3AC1602ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "20386F14-BC32-4174-9F3A-F7406486976A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0DD54B-AB2E-4C56-B348-FF87C174270A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "CC14EF40-FE00-47F9-8A78-98713F903D9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249196",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0010/",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985667",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28008",
      "sourceIdentifier" : "psirt@hcl.com",
      "published" : "2023-04-26T20:15:10.000",
      "lastModified" : "2024-11-21T07:53:55.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@hcl.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CA6DCFCA-DADD-4C0A-83C0-EF04662D3336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_3:*:*:*:*:*:*",
            "matchCriteriaId" : "920EC080-63D0-4280-8553-9D94E6109864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_4:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9AA9A1-7D68-469D-BD78-3A89660E4670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_5:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE9D4C8-988A-49DA-BA64-BE30FBF792B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_6:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7A9E28-F984-4319-8FF9-9FC05956BF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6D1F27-AFB0-41D3-B7B3-2CBEA1BA2F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C0B3D9-9382-4184-830A-6CBFD65A6607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5537FD3-5D22-493F-93CD-03D363F7ECE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0E395E-4C04-4D25-8A91-6A6570060C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_3:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9EEC0B-7AA6-4CAB-BF48-70227724E3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_4:*:*:*:*:*:*",
            "matchCriteriaId" : "00D7C273-9FCB-4AE3-BF02-51DC2B57A460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_5:*:*:*:*:*:*",
            "matchCriteriaId" : "560A2BF4-AE58-4847-B2C0-47A9CC79D760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_6:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3BA39B-8216-47D7-873E-55DD1F681360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:10.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8027DF38-47A2-49E7-AEEB-35BFA0759B74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0104371",
        "source" : "psirt@hcl.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0104371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28009",
      "sourceIdentifier" : "psirt@hcl.com",
      "published" : "2023-04-26T20:15:10.080",
      "lastModified" : "2024-11-21T07:53:55.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HCL Workload Automation is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@hcl.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CA6DCFCA-DADD-4C0A-83C0-EF04662D3336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_3:*:*:*:*:*:*",
            "matchCriteriaId" : "920EC080-63D0-4280-8553-9D94E6109864"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_4:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9AA9A1-7D68-469D-BD78-3A89660E4670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_5:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE9D4C8-988A-49DA-BA64-BE30FBF792B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_6:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7A9E28-F984-4319-8FF9-9FC05956BF56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.4.0:fix_pack_7:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6D1F27-AFB0-41D3-B7B3-2CBEA1BA2F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C0B3D9-9382-4184-830A-6CBFD65A6607"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5537FD3-5D22-493F-93CD-03D363F7ECE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_2:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0E395E-4C04-4D25-8A91-6A6570060C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_3:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9EEC0B-7AA6-4CAB-BF48-70227724E3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_4:*:*:*:*:*:*",
            "matchCriteriaId" : "00D7C273-9FCB-4AE3-BF02-51DC2B57A460"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_5:*:*:*:*:*:*",
            "matchCriteriaId" : "560A2BF4-AE58-4847-B2C0-47A9CC79D760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:9.5.0:fix_pack_6:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3BA39B-8216-47D7-873E-55DD1F681360"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hcltech:workload_automation:10.1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8027DF38-47A2-49E7-AEEB-35BFA0759B74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0104371",
        "source" : "psirt@hcl.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0104371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T20:15:10.170",
      "lastModified" : "2025-02-03T18:15:29.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow vulnerability found in ByronKnoll Cmix v.19 allows an attacker to execute arbitrary code and cause a denial of service via the paq8 function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmix_project:cmix:19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F402AF3A-5B5C-434B-A8F5-0AC76894C1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/byronknoll/cmix/issues/54",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/byronknoll/cmix/issues/54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T20:15:10.210",
      "lastModified" : "2025-02-03T18:15:30.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wondershare:dr.fone:12.9.6:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "C2C2D87E-8A0C-4686-BA5A-C8DB098ED33F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IthacaLabs/Wondershare/tree/main/Dr.Fone",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IthacaLabs/Wondershare/tree/main/Dr.Fone",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T20:15:10.257",
      "lastModified" : "2025-02-03T18:15:30.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions (EUCS) v.1.0 allows a remote attacker to execute arbitrary code via the Username parameter of the eucsAdmin login form."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exelysis:exelysis_unified_communications_solution:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DACD11BC-5F95-4E4B-9B91-78244C70F03C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IthacaLabs/Exelysis",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IthacaLabs/Exelysis/blob/main/EUCS%20Admin%20Login%20XSS.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/IthacaLabs/Exelysis",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IthacaLabs/Exelysis/blob/main/EUCS%20Admin%20Login%20XSS.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T20:15:10.310",
      "lastModified" : "2025-02-03T18:15:32.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary code and cause a denial ofservice via the getInputData parameter of the fwSchedule.cgi page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:1.0.2.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D03CEC5D-BA2E-4690-A56F-CAB9125C2313"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0794BB7C-1BCF-4F08-8EB2-9C3B150C105A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:1.0.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F96F02-F565-4760-9417-ECBB5E1A33E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21B27F11-4262-4CE1-8107-B365A7C152F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:1.0.4.128:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CC6DB1-AF1F-4518-B018-47D8F771ED72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A09A9E8-8C77-4EDB-9483-B3C540EF083A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.netgear.com/about/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.netgear.com/about/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29442",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T21:15:08.890",
      "lastModified" : "2025-02-03T18:15:29.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3",
            "matchCriteriaId" : "71A91D5D-BA60-4FAC-92D7-DD477399A552"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16300:*:*:*:*:*:*",
            "matchCriteriaId" : "725F03D7-8655-4C2C-8BC8-BD81A657E53C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16310:*:*:*:*:*:*",
            "matchCriteriaId" : "716C228E-FEB8-41D3-A290-BA4DB9D51717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16320:*:*:*:*:*:*",
            "matchCriteriaId" : "C73EC9D6-B2AD-4E68-B429-EBF9EA2A7618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16330:*:*:*:*:*:*",
            "matchCriteriaId" : "6251408C-2192-44E7-A8D8-92EE97BC3D5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16340:*:*:*:*:*:*",
            "matchCriteriaId" : "9F50F891-EA20-4DAC-A100-C80FC455FF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16350:*:*:*:*:*:*",
            "matchCriteriaId" : "14969EAF-CDB7-45AE-AAA1-8D7D0C1D04A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16360:*:*:*:*:*:*",
            "matchCriteriaId" : "1B69B236-6FB4-4142-BAA3-578283DB225D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16361:*:*:*:*:*:*",
            "matchCriteriaId" : "1A68602E-658B-435E-A456-736C8297ABDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16370:*:*:*:*:*:*",
            "matchCriteriaId" : "0743D3FA-E17C-4AB4-8821-ECFA8760AA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16380:*:*:*:*:*:*",
            "matchCriteriaId" : "125F2CA8-EB8C-4863-85AB-B8ABB3A0B6BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_applications_manager:16.3:build16390:*:*:*:*:*:*",
            "matchCriteriaId" : "65477E77-D8C3-428A-89CB-188E456FFFC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2023-29442.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2023-29442.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29443",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T21:15:08.957",
      "lastModified" : "2025-02-03T20:15:31.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6980:*:*:*:*:*:*",
            "matchCriteriaId" : "C9AAC638-1379-4F87-9BA3-07CE16CAB98A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6981:*:*:*:*:*:*",
            "matchCriteriaId" : "B3470B5B-B8BC-41B9-8CA5-5E7A0EB9934F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6982:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2D9355-B1D5-4B14-8900-42E7C8DC5E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6983:*:*:*:*:*:*",
            "matchCriteriaId" : "03A34ED3-EC89-4BE3-8A99-A5727A154672"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6984:*:*:*:*:*:*",
            "matchCriteriaId" : "4E84EF2B-37A5-4499-8C16-877E8AB8A731"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6985:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDA22C3-8F1E-45C9-BC8D-C3A49EFA348C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6986:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA5504A-8BD9-4C0D-AD5A-4CB188A99563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6987:*:*:*:*:*:*",
            "matchCriteriaId" : "2E4E1A50-A366-4D5E-9DDB-B33D1D1770E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6988:*:*:*:*:*:*",
            "matchCriteriaId" : "356CA7C7-993F-4D5D-9FAB-9E5475878D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1",
            "matchCriteriaId" : "0F8049D8-8FE3-43CA-9568-AEA659776436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDE81A3-95A1-42FC-A526-5F343E73ABD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:14100:*:*:*:*:*:*",
            "matchCriteriaId" : "0575CC86-9321-4502-83C0-348DCE175EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:14101:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B60D55-DE84-4BE8-A42D-98D133D3D228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:14102:*:*:*:*:*:*",
            "matchCriteriaId" : "B79CA06A-17DE-429A-A3C9-4FC28E907318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:14103:*:*:*:*:*:*",
            "matchCriteriaId" : "19C86206-29CB-4ABA-8979-19DF52B8CC1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1:14104:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7ACCBA-56DC-4159-A26C-6D8007B3AC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.0",
            "matchCriteriaId" : "E427ED35-3804-4448-BADE-6DD1E80D093F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.0:14000:*:*:*:*:*:*",
            "matchCriteriaId" : "6E368AC5-E3A5-44CE-8B6E-2454493764E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.0:14001:*:*:*:*:*:*",
            "matchCriteriaId" : "B265CA09-4FDD-41BD-A5E8-1A4666FBDE62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.0",
            "matchCriteriaId" : "5563D0F3-ACFD-4F79-8428-12EF982E0F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:14.0:14000:*:*:*:*:*:*",
            "matchCriteriaId" : "B46588F2-4258-44C7-BCBE-40975D4CE27D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:14.0:14001:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA49D56-60A0-462B-86D2-61391E8FAA47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.manageengine.com/products/service-desk/CVE-2023-29443.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/service-desk/CVE-2023-29443.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2291",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2023-04-26T21:15:09.037",
      "lastModified" : "2025-02-03T18:15:30.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Static credentials exist in the PostgreSQL data used in ManageEngine Access Manager Plus (AMP) build 4309, ManageEngine Password Manager Pro, and ManageEngine PAM360. These credentials could allow a malicious actor to modify configuration data that would escalate their permissions from that of a low-privileged user to an Administrative user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4309:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EE7E99-B428-41EF-A693-7A316F695160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_pam360:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686A57A8-EB80-4920-8AD8-386FB96743EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_password_manager_pro:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D1273D-8255-47D2-BD6C-9BE312685301"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tenable.com/security/research/tra-2023-16",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tenable.com/security/research/tra-2023-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T21:15:09.103",
      "lastModified" : "2025-02-03T17:15:13.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tencent:vconsole:3.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CCBEA9-710B-4F28-AD34-81C2C886B1B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cwe.mitre.org/data/definitions/1321.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/Tencent/vConsole/issues/616",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cwe.mitre.org/data/definitions/1321.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/Tencent/vConsole/issues/616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30843",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-26T21:15:09.177",
      "lastModified" : "2024-11-21T08:00:57.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Payload is a free and open source headless content management system. In versions prior to 1.7.0, if a user has access to documents that contain hidden fields or fields they do not have access to, the user could reverse-engineer those values via brute force. Version 1.7.0 contains a patch. As a workaround, write a `beforeOperation` hook to remove `where` queries that attempt to access hidden field data."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:payloadcms:payload:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.7.0",
            "matchCriteriaId" : "DB7D9BC3-D021-4727-9F6E-DE1293B08E03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/payloadcms/payload/releases/tag/v1.7.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/payloadcms/payload/security/advisories/GHSA-35jj-vqcf-f2jf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/payloadcms/payload/releases/tag/v1.7.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/payloadcms/payload/security/advisories/GHSA-35jj-vqcf-f2jf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30845",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-26T21:15:09.277",
      "lastModified" : "2024-11-21T08:00:57.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ESPv2 is a service proxy that provides API management capabilities using Google Service Infrastructure. ESPv2 2.20.0 through 2.42.0 contains an authentication bypass vulnerability. API clients can craft a malicious `X-HTTP-Method-Override` header value to bypass JWT authentication in specific cases.\n\nESPv2 allows malicious requests to bypass authentication if both the conditions are true: The requested HTTP method is **not** in the API service definition (OpenAPI spec or gRPC `google.api.http` proto annotations, and the specified `X-HTTP-Method-Override` is a valid HTTP method in the API service definition. ESPv2 will forward the request to your backend without checking the JWT. Attackers can craft requests with a malicious `X-HTTP-Method-Override` value that allows them to bypass specifying JWTs. Restricting API access with API keys works as intended and is not affected by this vulnerability.\n\nUpgrade deployments to release v2.43.0 or higher to receive a patch. This release ensures that JWT authentication occurs, even when the caller specifies `x-http-method-override`. `x-http-method-override` is still supported by v2.43.0+. API clients can continue sending this header to ESPv2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:espv2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.20.0",
            "versionEndExcluding" : "2.43.0",
            "matchCriteriaId" : "A20AE068-D587-4CD1-AA65-AC686DDF6E4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GoogleCloudPlatform/esp-v2/commit/0bcdfc024ce96b34db4e1b4f2211b509d9be93cd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GoogleCloudPlatform/esp-v2/commit/e95670146f5e96bb5565b0a9c1e153886b3e04ce",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GoogleCloudPlatform/esp-v2/commit/e98061ee4527a564506ba4e814c0ecf324dc2c6f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GoogleCloudPlatform/esp-v2/security/advisories/GHSA-6qmp-9p95-fc5f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GoogleCloudPlatform/esp-v2/commit/0bcdfc024ce96b34db4e1b4f2211b509d9be93cd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GoogleCloudPlatform/esp-v2/commit/e95670146f5e96bb5565b0a9c1e153886b3e04ce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GoogleCloudPlatform/esp-v2/commit/e98061ee4527a564506ba4e814c0ecf324dc2c6f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/GoogleCloudPlatform/esp-v2/security/advisories/GHSA-6qmp-9p95-fc5f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30846",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-26T21:15:09.380",
      "lastModified" : "2024-11-21T08:00:57.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "typed-rest-client is a library for Node Rest and Http Clients with typings for use with TypeScript. Users of the typed-rest-client library version 1.7.3 or lower are vulnerable to leak authentication data to 3rd parties. The flow of the vulnerability is as follows: First, send any request with `BasicCredentialHandler`, `BearerCredentialHandler` or `PersonalAccessTokenCredentialHandler`. Second, the target host may return a redirection (3xx), with a link to a second host. Third, the next request will use the credentials to authenticate with the second host, by setting the `Authorization` header. The expected behavior is that the next request will *NOT* set the `Authorization` header. The problem was fixed in version 1.8.0. There are no known workarounds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:typed-rest-client:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.8.0",
            "matchCriteriaId" : "FA141551-3739-4DE0-9840-90B89AB8E1AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/microsoft/typed-rest-client/commit/f9ff755631b982ee1303dfc3e3c823d0d31233e8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/microsoft/typed-rest-client/security/advisories/GHSA-558p-m34m-vpmq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0008/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/microsoft/typed-rest-client/commit/f9ff755631b982ee1303dfc3e3c823d0d31233e8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/microsoft/typed-rest-client/security/advisories/GHSA-558p-m34m-vpmq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27107",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-26T22:15:09.443",
      "lastModified" : "2025-02-03T18:15:29.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myq-solution:central_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2",
            "matchCriteriaId" : "2FDBFB80-D33E-4F9E-847F-8652065CE231"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myq-solution:central_server:8.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "38F9E231-EA50-4428-B818-9368F6F99D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myq-solution:print_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2",
            "matchCriteriaId" : "A76077FF-885F-4369-A3A9-676BF40AD3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myq-solution:print_server:8.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "399B63D2-D03D-4993-817E-987EB3C4C23B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/smidtbx10/f8ff1c4977b7f54886c6a52e9ef4e816",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/smidtbx10/f8ff1c4977b7f54886c6a52e9ef4e816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1786",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2023-04-26T23:15:08.690",
      "lastModified" : "2024-11-21T07:39:54.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@ubuntu.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@ubuntu.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canonical:cloud-init:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.1.2",
            "matchCriteriaId" : "3BD226D5-A4A7-42EC-B66E-0252C1706B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "B3293E55-5506-4587-A318-D1734F781C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "902B8056-9E37-443B-8905-8AA93E2447FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "359012F1-2C63-415A-88B8-6726A87830DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:22.10:*:*:*:-:*:*:*",
            "matchCriteriaId" : "47842532-D2B6-44CB-ADE2-4AC8630A4D8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2E702D7-F8C0-49BF-9FFB-883017076E98"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/cloud-init/+bug/2013967",
        "source" : "security@ubuntu.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/canonical/cloud-init/commit/a378b7e4f47375458651c0972e7cd813f6fe0a6b",
        "source" : "security@ubuntu.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ATBJSXPL2IOAD2LDQRKWPLIC7QXS44GZ/",
        "source" : "security@ubuntu.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ubuntu.com/security/notices/USN-6042-1",
        "source" : "security@ubuntu.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/cloud-init/+bug/2013967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/canonical/cloud-init/commit/a378b7e4f47375458651c0972e7cd813f6fe0a6b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ATBJSXPL2IOAD2LDQRKWPLIC7QXS44GZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ubuntu.com/security/notices/USN-6042-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2297",
      "sourceIdentifier" : "security@wordfence.com",
      "published" : "2023-04-27T00:15:08.923",
      "lastModified" : "2026-04-08T19:18:14.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets  in versions up to, and including 3.9.0. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function (wppb_front_end_password_recovery). The function uses the plaintext value of a password reset key instead of a hashed value which means it can easily be retrieved and subsequently used. An attacker can leverage CVE-2023-0814, or another vulnerability like SQL Injection in another plugin or theme installed on the site to successfully exploit this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@wordfence.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@wordfence.com",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-620"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cozmoslabs:profile_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.9.0",
            "matchCriteriaId" : "BCF57CEE-A671-4C7F-B940-591C40E34725"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lana.codes/lanavdb/512e7307-04a5-4d8b-8f79-f75f37784a9f/",
        "source" : "security@wordfence.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2864329%40profile-builder&new=2864329%40profile-builder&sfp_email=&sfph_mail=",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2023/03/vulnerability-patched-in-cozmolabs-profile-builder-plugin-information-disclosure-leads-to-account-takeover/",
        "source" : "security@wordfence.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e731292a-4f95-46eb-889e-b00d58f3444e?source=cve",
        "source" : "security@wordfence.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lana.codes/lanavdb/512e7307-04a5-4d8b-8f79-f75f37784a9f/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2864329%40profile-builder&new=2864329%40profile-builder&sfp_email=&sfph_mail=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2023/03/vulnerability-patched-in-cozmolabs-profile-builder-plugin-information-disclosure-leads-to-account-takeover/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/threat-intel/vulnerabilities/id/e731292a-4f95-46eb-889e-b00d58f3444e?source=cve",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T01:15:08.283",
      "lastModified" : "2025-01-31T19:15:11.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected Cross Site Scripting (XSS) in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GO_LANGUAGE cookie."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:group-office:group_office:6.6.145:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0AF3C8D-6B49-4999-B2AA-5918CEC3ADC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://group-office.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://intermesh.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://github.com/brainkok/CVE-2023-25292",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://group-office.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://intermesh.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Not Applicable" ]
      }, {
        "url" : "https://github.com/brainkok/CVE-2023-25292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T01:15:08.330",
      "lastModified" : "2026-04-06T14:23:28.807",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The decryption binary used to decrypt firmware files has an information leak that allows an attacker to read the AES key and initialization vector from memory. An attacker may exploit this to create custom firmware that may be installed in the IVI system. Then, an attacker may be able to install a backdoor in the IVI system that may allow him to control it, if it is connected to the Internet through Wi-Fi."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hyundai:gen5w_l_in-vehicle_infotainment_system_firmware:5w.xxx.s5w_l.001.001.221129:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1D75CC-4D29-4918-BBE4-84316697F0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hyundai:gen5w_l_in-vehicle_infotainment_system_firmware:ae_e_pe_eur.s5w_l001.001.211214:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E140A27C-DEAE-4DAA-9E91-448A32B1D055"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hyundai:gen5w_l_in-vehicle_infotainment_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875AC44B-6F21-4286-A29A-9E72EFB0F3F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sowhat.iit.cnr.it",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera/-/blob/main/Report/IIT-01-2023.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera/-/blob/main/Report/IIT-01-2023.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26244",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T01:15:08.370",
      "lastModified" : "2026-04-06T14:22:48.023",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The AppDMClient binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the digital signature check of AppUpgrade and .lge.upgrade.xml files, which are used during the firmware installation process. This indirectly allows an attacker to use a custom version of AppUpgrade and .lge.upgrade.xml files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hyundai:gen5w_l_in-vehicle_infotainment_system_firmware:5w.xxx.s5w_l.001.001.221129:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1D75CC-4D29-4918-BBE4-84316697F0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hyundai:gen5w_l_in-vehicle_infotainment_system_firmware:ae_e_pe_eur.s5w_l001.001.211214:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E140A27C-DEAE-4DAA-9E91-448A32B1D055"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hyundai:gen5w_l_in-vehicle_infotainment_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875AC44B-6F21-4286-A29A-9E72EFB0F3F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sowhat.iit.cnr.it",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera/-/blob/main/Report/IIT-01-2023.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera/-/blob/main/Report/IIT-01-2023.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T01:15:08.413",
      "lastModified" : "2026-04-06T14:23:10.050",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The AppUpgrade binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the version check in order to install any firmware version (e.g., newer, older, or customized). This indirectly allows an attacker to install custom firmware in the IVI system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hyundai:gen5w_l_in-vehicle_infotainment_system_firmware:5w.xxx.s5w_l.001.001.221129:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1D75CC-4D29-4918-BBE4-84316697F0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hyundai:gen5w_l_in-vehicle_infotainment_system_firmware:ae_e_pe_eur.s5w_l001.001.211214:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E140A27C-DEAE-4DAA-9E91-448A32B1D055"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hyundai:gen5w_l_in-vehicle_infotainment_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875AC44B-6F21-4286-A29A-9E72EFB0F3F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sowhat.iit.cnr.it",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera/-/blob/main/Report/IIT-01-2023.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera/-/blob/main/Report/IIT-01-2023.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T01:15:08.463",
      "lastModified" : "2026-04-06T14:30:05.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The AppUpgrade binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the digital signature check. This indirectly allows an attacker to install custom firmware in the IVI system."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hyundai:gen5w_l_in-vehicle_infotainment_system_firmware:5w.xxx.s5w_l.001.001.221129:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1D75CC-4D29-4918-BBE4-84316697F0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hyundai:gen5w_l_in-vehicle_infotainment_system_firmware:ae_e_pe_eur.s5w_l001.001.211214:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E140A27C-DEAE-4DAA-9E91-448A32B1D055"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hyundai:gen5w_l_in-vehicle_infotainment_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875AC44B-6F21-4286-A29A-9E72EFB0F3F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sowhat.iit.cnr.it",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera/-/blob/main/Report/IIT-01-2023.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sowhat.iit.cnr.it:8443/can-work/chimaera/-/blob/main/Report/IIT-01-2023.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20852",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-04-27T02:15:09.027",
      "lastModified" : "2024-11-21T07:41:41.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ interpreter. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands to perform arbitrary system operation or disrupt service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aenrich:a\\+hrd:6.8.1039v844:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEB6635-4A9D-4C1A-82D3-3DC765512A6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-7023-8368b-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-7023-8368b-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-20853",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-04-27T02:15:09.113",
      "lastModified" : "2024-11-21T07:41:41.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ asynchronized message process. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands to perform arbitrary system operation or disrupt service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aenrich:a\\+hrd:6.8.1039v844:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEB6635-4A9D-4C1A-82D3-3DC765512A6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-7024-bdefe-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-7024-bdefe-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22901",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-04-27T02:15:09.177",
      "lastModified" : "2024-11-21T07:45:36.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChangingTec MOTP system has a path traversal vulnerability. A remote attacker with administrator’s privilege can exploit this vulnerability to access arbitrary system files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:changingtec:mobile_one_time_password:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.11",
            "matchCriteriaId" : "190C050E-7CCE-49EB-9D4F-3168743E0BF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-7022-2cbe0-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-7022-2cbe0-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24836",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-04-27T02:15:09.243",
      "lastModified" : "2025-09-25T14:13:08.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SUNNET CTMS has vulnerability of path traversal within its file uploading function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload and execute scripts onto arbitrary directories to perform arbitrary system operation or disrupt service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sun.net:ehrd_ctms:7.0_1227:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42728C6D-7EA2-47FC-9E10-CA71EB2FD5D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-7033-878ab-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-7033-878ab-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28697",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2023-04-27T02:15:09.313",
      "lastModified" : "2024-11-21T07:55:49.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:moxa:miineport_e1_firmware:1.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D757A5B5-4CE5-4C69-912A-B0D5525450F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:moxa:miineport_e1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E72C6A-A107-4EB6-9692-C769DE9EEA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn-cms.azureedge.net/Moxa/media/PDIM/S100000223/MiiNePort%20E1%20Series_moxa-miineport-e1-series-firmware-v1.9.rom_Software%20Release%20History.pdf",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-7021-eb43a-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdn-cms.azureedge.net/Moxa/media/PDIM/S100000223/MiiNePort%20E1%20Series_moxa-miineport-e1-series-firmware-v1.9.rom_Software%20Release%20History.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-7021-eb43a-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T03:15:10.107",
      "lastModified" : "2025-01-31T20:15:29.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When users upload temporary files, some specific file endings are not allowed, but it is possible to upload .html or .htm files containing an XSS payload. The resulting link can be sent to an administrator user."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serenity:serene:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.0",
            "matchCriteriaId" : "620456E1-A567-43A2-8B5C-E1F73AB94895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serenity:startsharp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.0",
            "matchCriteriaId" : "C91CF539-3B1C-4A7F-8C64-2606F24BB5CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/May/14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/May/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T03:15:10.160",
      "lastModified" : "2025-01-31T19:15:14.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When a password reset request occurs, the server response leaks the existence of users. If one tries to reset a password of a non-existent user, an error message indicates that this user does not exist."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serenity:serene:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.0",
            "matchCriteriaId" : "620456E1-A567-43A2-8B5C-E1F73AB94895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serenity:startsharp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.0",
            "matchCriteriaId" : "C91CF539-3B1C-4A7F-8C64-2606F24BB5CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/May/14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/May/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2023/May/14",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T03:15:10.200",
      "lastModified" : "2025-01-31T19:15:15.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset the password. This token remains valid even after the password reset and can be used a second time to change the password of the corresponding user. The token expires only 3 hours after issuance and is sent as a query parameter when resetting. An attacker with access to the browser history can thus use the token again to change the password in order to take over the account."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serenity:serene:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.0",
            "matchCriteriaId" : "620456E1-A567-43A2-8B5C-E1F73AB94895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:serenity:startsharp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.0",
            "matchCriteriaId" : "C91CF539-3B1C-4A7F-8C64-2606F24BB5CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/May/14",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2023/May/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://packetstorm.news/files/id/172648",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T05:15:08.807",
      "lastModified" : "2025-01-30T21:15:12.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trust Wallet Core before 3.1.1, as used in the Trust Wallet browser extension before 0.0.183, allows theft of funds because the entropy is 32 bits, as exploited in the wild in December 2022 and March 2023. This occurs because the mt19937 Mersenne Twister takes a single 32-bit value as an input seed, resulting in only four billion possible mnemonics. The affected versions of the browser extension are 0.0.172 through 0.0.182. To steal funds efficiently, an attacker can identify all Ethereum addresses created since the 0.0.172 release, and check whether they are Ethereum addresses that could have been created by this extension. To respond to the risk, affected users need to upgrade the product version and also move funds to a new wallet address."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustwallet:trust_wallet_browser_extension:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.0.172",
            "versionEndExcluding" : "0.0.183",
            "matchCriteriaId" : "049986E2-FFFC-4688-9454-5656A8CECF3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trustwallet:trust_wallet_core:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.1",
            "matchCriteriaId" : "049748BF-4169-4FE2-81DA-4954CC4AC5A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.ledger.com/Funds-of-every-wallet-created-with-the-Trust-Wallet-browser-extension-could-have-been-stolen/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://community.trustwallet.com/t/browser-extension-wasm-vulnerability-postmortem/750787",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.trustwallet.com/t/wasm-vulnerability-incident-update-and-recommended-actions/750786",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/trustwallet/wallet-core/compare/3.1.0...3.1.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://twitter.com/TrustWallet/status/1649699428733947906",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.ledger.com/Funds-of-every-wallet-created-with-the-Trust-Wallet-browser-extension-could-have-been-stolen/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://community.trustwallet.com/t/browser-extension-wasm-vulnerability-postmortem/750787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.trustwallet.com/t/wasm-vulnerability-incident-update-and-recommended-actions/750786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/trustwallet/wallet-core/compare/3.1.0...3.1.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://twitter.com/TrustWallet/status/1649699428733947906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28769",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-04-27T09:15:09.057",
      "lastModified" : "2024-11-21T07:55:58.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could allow a remote unauthenticated attacker to execute some OS commands or to cause denial-of-service (DoS) conditions on a vulnerable device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.17\\(abyo.1\\)c0",
            "matchCriteriaId" : "4C91B77C-EC30-4C88-AAEB-330B7A3E0470"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:dx5401-b0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B293E564-2C48-442A-A415-34383DF3ADBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28770",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-04-27T09:15:09.850",
      "lastModified" : "2025-01-31T19:15:13.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could allow a remote unauthenticated attacker to read the system files and to retrieve the password of the supervisor from the encrypted file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.17\\(abyo.1\\)c0",
            "matchCriteriaId" : "4C91B77C-EC30-4C88-AAEB-330B7A3E0470"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:dx5401-b0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B293E564-2C48-442A-A415-34383DF3ADBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172277/Zyxel-Chained-Remote-Code-Execution.html",
        "source" : "security@zyxel.com.tw"
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172277/Zyxel-Chained-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://packetstorm.news/files/id/172277",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2322",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-27T09:15:09.927",
      "lastModified" : "2024-11-21T07:58:23.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/9fc674892b8b53103098b9524705074a45e7f773",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f7228f3f-3bef-46fe-b0e3-56c432048a67",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/9fc674892b8b53103098b9524705074a45e7f773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/f7228f3f-3bef-46fe-b0e3-56c432048a67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2323",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-27T09:15:10.007",
      "lastModified" : "2024-11-21T07:58:23.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/e88fa79de7b5903fb58ddbc231130b04d937d79e",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/41edf190-f6bf-4a29-a237-7ff1b2d048d3",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/e88fa79de7b5903fb58ddbc231130b04d937d79e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/41edf190-f6bf-4a29-a237-7ff1b2d048d3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1778",
      "sourceIdentifier" : "vdisclose@cert-in.org.in",
      "published" : "2023-04-27T10:15:09.160",
      "lastModified" : "2024-11-21T07:39:53.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability exists in GajShield Data Security Firewall firmware versions prior to v4.28 (except v4.21) due to insecure default credentials which allows remote attacker to login as superuser by using default username/password via web-based management interface and/or exposed SSH port thereby enabling remote attackers to execute arbitrary commands with administrative/superuser privileges on the targeted systems.\n\nThe vulnerability has been addressed by forcing the user to change their default password to a new non-default password.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "vdisclose@cert-in.org.in",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vdisclose@cert-in.org.in",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gajshield:data_security_firewall_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.21",
            "matchCriteriaId" : "CC450B0E-9218-431E-AF1E-66DAE043583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gajshield:data_security_firewall_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.22",
            "versionEndExcluding" : "4.28",
            "matchCriteriaId" : "D8D28542-6331-414D-8C95-40D84D624BF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:gajshield:data_security_firewall:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC0BE30-5990-4A63-A541-2455018D94EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0119",
        "source" : "vdisclose@cert-in.org.in",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2327",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-27T10:15:09.603",
      "lastModified" : "2024-11-21T07:58:23.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/fb3056a21d439135480ee299bf1ab646867b5f4f",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7336b71f-a36f-4ce7-a26d-c8335ac713d6",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/fb3056a21d439135480ee299bf1ab646867b5f4f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7336b71f-a36f-4ce7-a26d-c8335ac713d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2328",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-27T10:15:09.670",
      "lastModified" : "2024-11-21T07:58:23.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/e3562bfe249c557d15474c9a0acd5e06628521fe",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/01a44584-e36b-46f4-ad94-53af488397f6",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/e3562bfe249c557d15474c9a0acd5e06628521fe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/01a44584-e36b-46f4-ad94-53af488397f6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2331",
      "sourceIdentifier" : "security@42gears.com",
      "published" : "2023-04-27T12:15:09.070",
      "lastModified" : "2024-11-21T07:58:24.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted service Path or Element vulnerability in 42Gears Surelock Windows SureLock Service (NixService.Exe) on Windows application will allows to insert arbitrary code into the service.\nThis issue affects Surelock Windows : from 2.3.12 through 2.40.0.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@42gears.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@42gears.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:42gears:surelock:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "2.3.12",
            "versionEndExcluding" : "2.41.0",
            "matchCriteriaId" : "11C640C3-30E7-497F-A3B5-F019890A6014"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.42gears.com/security-and-compliance",
        "source" : "security@42gears.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.42gears.com/security-and-compliance/42g-2023-001/",
        "source" : "nvd@nist.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.42gears.com/security-and-compliance",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2336",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-27T12:15:09.173",
      "lastModified" : "2024-11-21T07:58:24.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/af764624-7746-4f53-8480-85348dbb4f14",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/af764624-7746-4f53-8480-85348dbb4f14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2338",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-27T12:15:09.237",
      "lastModified" : "2024-11-21T07:58:24.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/21e35af721c375ef4676ed50835e30d828e76520",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/bbf59fa7-cf5b-4945-81b0-328adc710462",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/21e35af721c375ef4676ed50835e30d828e76520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/bbf59fa7-cf5b-4945-81b0-328adc710462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2339",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-27T12:15:09.300",
      "lastModified" : "2024-11-21T07:58:24.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/6946f8a5a0a93b516c49f17a5b45044eebd73480",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/bb1537a5-fe7b-4c77-a582-10a82435fbc2",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/6946f8a5a0a93b516c49f17a5b45044eebd73480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/bb1537a5-fe7b-4c77-a582-10a82435fbc2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29255",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-27T13:15:09.053",
      "lastModified" : "2024-11-21T07:56:45.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as it may trap when compiling a variation of an anonymous block.  IBM X-Force ID:  251991."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1",
            "versionEndExcluding" : "11.1.4",
            "matchCriteriaId" : "421BBE95-3D5B-421A-9DC1-8B08D019B2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5",
            "versionEndExcluding" : "11.5.8",
            "matchCriteriaId" : "65161064-A4A3-48E5-AC0A-388429FF2F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "190AE881-F7BF-486E-BDAE-197337D70CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1BAA43-4C77-4AC7-8561-93EDE0AED000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp10:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FDF4D8-1822-43E6-AE65-3E4F8743D3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "87C39880-D0E9-4487-9A80-B4D1A999032F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8842A8B6-E470-4536-AB5D-DA1C62A05F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp3a:*:*:*:*:*:*",
            "matchCriteriaId" : "92BF0482-E4FE-454E-84DD-27074097F3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "3705A79B-7903-4055-9CDC-55D60D2AC2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDFCE61-EE04-4901-844D-61B8966C1B81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "53A23363-413D-4785-B8C1-9AC2F96000EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "6E22D884-A33F-41D7-84CB-B6360A39863F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp8:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA56D35-93E9-4659-B180-2FD636A39BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp9:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7F0B02-EA0B-4BD1-AA0C-2A4735221963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7F91EC14-CD9A-42EB-9D81-6025A1D74749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5D098641-0833-4718-BB6A-273E1CA0F887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B451F96-2A58-4758-86E6-F8A030805C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "69CBC98E-BECE-41A4-A0D9-9F3AC1602ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "20386F14-BC32-4174-9F3A-F7406486976A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0DD54B-AB2E-4C56-B348-FF87C174270A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "CC14EF40-FE00-47F9-8A78-98713F903D9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/251991",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0010/",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985687",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/251991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2340",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-27T13:15:09.213",
      "lastModified" : "2024-11-21T07:58:25.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/aa38319e353cc3cdfac12e03e21ed7a8f3628d3e",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/964762b0-b4fe-441c-81e1-0ebdbbf80f3b",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/aa38319e353cc3cdfac12e03e21ed7a8f3628d3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/964762b0-b4fe-441c-81e1-0ebdbbf80f3b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30444",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-27T13:15:09.290",
      "lastModified" : "2024-11-21T08:00:11.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Watson Machine Learning on Cloud Pak for Data 4.0 and 4.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.  IBM X-Force ID:  253350."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:watson_machine_learning_on_cloud_pak_for_data:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F7FDA1-F5CC-4FF6-90BB-8D0C8D7F8F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:watson_machine_learning_on_cloud_pak_for_data:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF74B76-6B49-4AA8-82FB-8D99E8FC70AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.ibm.com/support/pages/node/6985859",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985859",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24966",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-27T14:15:09.013",
      "lastModified" : "2024-11-21T07:48:51.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  246904."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.5.24",
            "matchCriteriaId" : "0B08841C-A10A-4006-B4BD-C27E171A4D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndExcluding" : "9.0.5.16",
            "matchCriteriaId" : "B56C8C37-DDE0-4E15-A9A4-9AB2A59CF679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/246904",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6986333",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/246904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6986333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2341",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-27T14:15:09.083",
      "lastModified" : "2024-11-21T07:58:25.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/66f1089fb1b9bcd575bfce9b1d4abb0f0499df11",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/cf3901ac-a649-478f-ab08-094ef759c11d",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/66f1089fb1b9bcd575bfce9b1d4abb0f0499df11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/cf3901ac-a649-478f-ab08-094ef759c11d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2342",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-27T14:15:09.137",
      "lastModified" : "2024-11-21T07:58:25.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/42a5bbe5f16b97371fdbfdcf2bb3ee759dea8564",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/01cd3ed5-dce8-4021-9de0-81cb14bf1829",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/42a5bbe5f16b97371fdbfdcf2bb3ee759dea8564",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/01cd3ed5-dce8-4021-9de0-81cb14bf1829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2343",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-27T14:15:09.187",
      "lastModified" : "2024-11-21T07:58:25.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/f1d904094700b513c4756904fa2b1e19d08d890e",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2fa17227-a717-4b66-ab5a-16bffbb4edb2",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/f1d904094700b513c4756904fa2b1e19d08d890e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/2fa17227-a717-4b66-ab5a-16bffbb4edb2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2344",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-27T14:15:09.240",
      "lastModified" : "2024-11-21T07:58:25.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=save_service of the component HTTP POST Request Handler. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227587."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:service_provider_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C20DC3-D0C4-4D07-A2AA-8057A70FC448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://cdn.polowong.top/image-20230427193041378.png",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227587",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227587",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://cdn.polowong.top/image-20230427193041378.png",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T14:15:09.320",
      "lastModified" : "2025-01-31T19:15:14.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JFinal CMS v5.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the ActionEnter function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jflyfox:jfinal_cms:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B33E946-BD15-449C-B736-013773A64DF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jflyfox/jfinal_cms/issues/54",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jflyfox/jfinal_cms/issues/54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2345",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-27T15:15:13.187",
      "lastModified" : "2024-11-21T07:58:25.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=delete_inquiry. The manipulation leads to improper authorization. The attack may be launched remotely. The identifier of this vulnerability is VDB-227588."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:service_provider_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C20DC3-D0C4-4D07-A2AA-8057A70FC448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.227588",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227588",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2346",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-27T15:15:13.400",
      "lastModified" : "2024-11-21T07:58:25.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/inquiries/view_inquiry.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227589 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:service_provider_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C20DC3-D0C4-4D07-A2AA-8057A70FC448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%201.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227589",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227589",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%201.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227589",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2347",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-27T15:15:13.617",
      "lastModified" : "2024-11-21T07:58:25.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/services/manage_service.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227590 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:service_provider_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C20DC3-D0C4-4D07-A2AA-8057A70FC448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%202.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227590",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227590",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%202.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2348",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-27T15:15:13.723",
      "lastModified" : "2024-11-21T07:58:26.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227591."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:service_provider_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C20DC3-D0C4-4D07-A2AA-8057A70FC448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%203.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227591",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227591",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%203.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T15:15:13.787",
      "lastModified" : "2025-01-31T19:15:14.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stored cross-site scripting (XSS) vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emlog:emlog:2.0.3:*:*:*:pro:*:*:*",
            "matchCriteriaId" : "5B872763-766F-478B-BA9C-97A85DC372F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/emlog/emlog/issues/229",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/emlog/emlog/issues/229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30847",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-27T15:15:13.833",
      "lastModified" : "2024-11-21T08:00:57.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "H2O is an HTTP server. In versions 2.3.0-beta2 and prior, when the reverse proxy handler tries to processes a certain type of invalid HTTP request, it tries to build an upstream URL by reading from uninitialized pointer. This behavior can lead to crashes or leak of information to back end HTTP servers. Pull request  number 3229 fixes the issue. The pull request has been merged to the `master` branch in commit f010336. Users should upgrade to commit f010336 or later."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dena:h2o:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "3C540EDB-1F68-47E9-A457-B6BC1EB805D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dena:h2o:2.3.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "128D1D5E-4E71-4ABB-B580-F17E2B74B5F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dena:h2o:2.3.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "E69DE676-300A-4A95-A04D-7463CA372799"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/h2o/h2o/commit/f010336bab162839df43d9e87570897466c97e33",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/h2o/h2o/pull/3229",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/h2o/h2o/security/advisories/GHSA-p5hj-phwj-hrvx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/h2o/h2o/commit/f010336bab162839df43d9e87570897466c97e33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/h2o/h2o/pull/3229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/h2o/h2o/security/advisories/GHSA-p5hj-phwj-hrvx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2349",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-27T16:15:11.063",
      "lastModified" : "2024-11-21T07:58:26.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in SourceCodester Service Provider Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227592."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:service_provider_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C20DC3-D0C4-4D07-A2AA-8057A70FC448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%204.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227592",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227592",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%204.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2350",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-27T16:15:11.207",
      "lastModified" : "2024-11-21T07:58:26.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227593 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:service_provider_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C20DC3-D0C4-4D07-A2AA-8057A70FC448"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%205.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227593",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227593",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%205.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30848",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-27T16:15:11.273",
      "lastModified" : "2024-11-21T08:00:57.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the admin search find API has a SQL injection vulnerability. Users should upgrade to version 10.5.21 to receive a patch or, as a workaround, apply the patch manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/25ad8674886f2b938243cbe13e33e204a2e35cc3.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14972",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-6mhm-gcpf-5gr8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/25ad8674886f2b938243cbe13e33e204a2e35cc3.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-6mhm-gcpf-5gr8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30849",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-27T16:15:11.330",
      "lastModified" : "2024-11-21T08:00:58.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore is an open source data and experience management platform. Prior to version 10.5.21, A SQL injection vulnerability exists in the translation export API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14968",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-xmg8-w465-mr56",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14968",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-xmg8-w465-mr56",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30624",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-27T17:15:08.737",
      "lastModified" : "2024-11-21T08:00:32.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wasmtime is a standalone runtime for WebAssembly. Prior to versions 6.0.2, 7.0.1, and 8.0.1, Wasmtime's implementation of managing per-instance state, such as tables and memories, contains LLVM-level undefined behavior. This undefined behavior was found to cause runtime-level issues when compiled with LLVM 16 which causes some writes, which are critical for correctness, to be optimized away. Vulnerable versions of Wasmtime compiled with Rust 1.70, which is currently in beta, or later are known to have incorrectly compiled functions. Versions of Wasmtime compiled with the current Rust stable release, 1.69, and prior are not known at this time to have any issues, but can theoretically exhibit potential issues.\n\nThe underlying problem is that Wasmtime's runtime state for an instance involves a Rust-defined structure called `Instance` which has a trailing `VMContext` structure after it. This `VMContext` structure has a runtime-defined layout that is unique per-module. This representation cannot be expressed with safe code in Rust so `unsafe` code is required to maintain this state. The code doing this, however, has methods which take `&self` as an argument but modify data in the `VMContext` part of the allocation. This means that pointers derived from `&self` are mutated. This is typically not allowed, except in the presence of `UnsafeCell`, in Rust. When compiled to LLVM these functions have `noalias readonly` parameters which means it's UB to write through the pointers.\n\nWasmtime's internal representation and management of `VMContext` has been updated to use `&mut self` methods where appropriate. Additionally verification tools for `unsafe` code in Rust, such as `cargo miri`, are planned to be executed on the `main` branch soon to fix any Rust-level issues that may be exploited in future compiler versions.\n\nPrecomplied binaries available for Wasmtime from GitHub releases have been compiled with at most LLVM 15 so are not known to be vulnerable. As mentioned above, however, it's still recommended to update.\n\nWasmtime version 6.0.2, 7.0.1, and 8.0.1 have been issued which contain the patch necessary to work correctly on LLVM 16 and have no known UB on LLVM 15 and earlier. If Wasmtime is compiled with Rust 1.69 and prior, which use LLVM 15, then there are no known issues. There is a theoretical possibility for undefined behavior to exploited, however, so it's recommended that users upgrade to a patched version of Wasmtime. Users using beta Rust (1.70 at this time) or nightly Rust (1.71 at this time) must update to a patched version to work correctly."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 3.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-758"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "6.0.2",
            "matchCriteriaId" : "EB4A034B-F7EC-4002-8C5F-0E4176D4CC10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:7.0.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "80F1E946-639F-4878-A2EF-0D0A52B30623"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bytecodealliance:wasmtime:8.0.0:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "1AA99C22-6A08-4CDB-AAA2-7498C0DC2EC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bytecodealliance/wasmtime/commit/0977952dcd9d482bff7c288868ccb52769b3a92e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-ch89-5g45-qwc7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/commit/0977952dcd9d482bff7c288868ccb52769b3a92e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-ch89-5g45-qwc7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30850",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-27T17:15:08.880",
      "lastModified" : "2024-11-21T08:00:58.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore is an open source data and experience management platform. Prior to version 10.5.21, a SQL Injection vulnerability exists in the admin translations API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14952",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-jwg4-qcgv-5wg6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-jwg4-qcgv-5wg6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30852",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-27T17:15:08.957",
      "lastModified" : "2024-11-21T08:00:58.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the `/admin/misc/script-proxy` API endpoint that is accessible by an authenticated administrator user is vulnerable to arbitrary JavaScript and CSS file read via the `scriptPath` and `scripts` parameters. The `scriptPath` parameter is not sanitized properly and is vulnerable to path traversal attack. Any JavaScript/CSS file from the application server can be read by specifying sufficient number of `../` patterns to go out from the application webroot followed by path of the folder where the file is located in the \"scriptPath\" parameter and the file name in the \"scripts\" parameter. The JavaScript file is successfully read only if the web application has read access to it. Users should update to version 10.5.21 to receive a patch or, as a workaround, apply the patch manual."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14959",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-j5c3-r84f-9596",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/pull/14959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/security/advisories/GHSA-j5c3-r84f-9596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2158",
      "sourceIdentifier" : "disclosure@synopsys.com",
      "published" : "2023-04-27T18:15:13.160",
      "lastModified" : "2025-01-31T19:15:13.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Code Dx versions prior to 2023.4.2 are vulnerable to user impersonation attack where a malicious actor is able to gain access to another user's account by crafting a custom \"Remember Me\" token. This is possible due to the use of a hard-coded cipher which was used when generating the token. A malicious actor who creates this token can supply it to a separate Code Dx system, provided they know the username they want to impersonate, and impersonate the user.  Score 6.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "disclosure@synopsys.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synopsys:code_dx:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023.4.2",
            "matchCriteriaId" : "2D045CD9-7385-46F6-8DA0-4F6780FCC363"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.synopsys.com/s/question/0D5Hr00006VdZblKAF/announcement-changelog-code-dx-202342",
        "source" : "disclosure@synopsys.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://community.synopsys.com/s/question/0D5Hr00006VdZblKAF/announcement-changelog-code-dx-202342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2335",
      "sourceIdentifier" : "security@42gears.com",
      "published" : "2023-04-27T18:15:13.217",
      "lastModified" : "2024-11-21T07:58:24.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nPlaintext Password in Registry\n\n vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Registery modules) allows Retrieve \n\nAdmin user credentials\n\nThis issue affects surelock windows: from 2.3.12 through 2.40.0.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@42gears.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@42gears.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        }, {
          "lang" : "en",
          "value" : "CWE-314"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:42gears:surelock:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "2.3.12",
            "versionEndIncluding" : "2.40.0",
            "matchCriteriaId" : "FB32CBDC-CE6B-4F81-A563-8D80FFBE8CEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.42gears.com/security-and-compliance/",
        "source" : "security@42gears.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.42gears.com/security-and-compliance/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21712",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-27T19:15:13.527",
      "lastModified" : "2024-11-21T07:43:29.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "secure@microsoft.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.10240.19562",
            "matchCriteriaId" : "E583CAB1-6CA3-439D-9232-25D4AD4425BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.14393.5501",
            "matchCriteriaId" : "C4E7A8EB-F231-4358-B2F0-86CE298DCB32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.17763.3650",
            "matchCriteriaId" : "FD13C1A3-0D55-44B4-BCDA-3FE16F3FD0BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19042.2251",
            "matchCriteriaId" : "53D74F18-E886-4BDD-BF98-6E3E7FDB416A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19043.2251",
            "matchCriteriaId" : "6CD19777-D4BC-4091-B5DF-196E3A5ECD41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19044.2251",
            "matchCriteriaId" : "A22FD3BC-3283-49FD-89E7-120BD1BD5664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.19045.2486",
            "matchCriteriaId" : "127FA76C-101B-4DAB-9034-1B893016D06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.1219",
            "matchCriteriaId" : "701F768A-FE97-481C-87FE-53135E160DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.22000.819",
            "matchCriteriaId" : "6F3B7829-75E9-4734-9C07-EBDDDE67EE7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21712",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27860",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-27T19:15:20.253",
      "lastModified" : "2024-11-21T07:53:35.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could disclose sensitive information in an error message.  This information could be used in further attacks against the system.  IBM X-Force ID:  249207."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9DA22B-5DD7-4551-AC7A-61949D246F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0279056-1BD2-4CD6-86BA-DDAA6AB53C6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249207",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985679",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28261",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-27T19:15:20.350",
      "lastModified" : "2025-02-28T20:15:42.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 4.2
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:extended_stable:*:*:*",
            "versionEndExcluding" : "110.0.1587.78",
            "matchCriteriaId" : "BA4E37D9-C3B9-4C5B-8DDD-106A86F53C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.1661.54",
            "matchCriteriaId" : "2CE1CC18-EB72-42F8-B77D-CC53F8D66146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28261",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28286",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-27T19:15:20.467",
      "lastModified" : "2025-02-28T20:15:42.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:extended_stable:*:*:*",
            "versionEndExcluding" : "110.0.1587.78",
            "matchCriteriaId" : "BA4E37D9-C3B9-4C5B-8DDD-106A86F53C98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "111.0.1661.54",
            "matchCriteriaId" : "2CE1CC18-EB72-42F8-B77D-CC53F8D66146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28286",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2355",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2023-04-27T19:15:20.597",
      "lastModified" : "2024-11-21T07:58:26.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 3900."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:snap_deploy:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "6",
            "matchCriteriaId" : "E3653927-4EF6-4508-92E7-F2EB2C418A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:snap_deploy:6:-:*:*:*:windows:*:*",
            "matchCriteriaId" : "A12AF81B-8339-4F72-A30E-D5126B0BACE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:snap_deploy:6:update1:*:*:*:windows:*:*",
            "matchCriteriaId" : "5AD3DAEE-A07B-47B6-A072-171E571F7B6D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-4048",
        "source" : "security@acronis.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-4048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T20:15:40.207",
      "lastModified" : "2025-01-31T19:15:13.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDs_fillstyle at modules/swftools.c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6149BA0-2082-45B7-9B43-CAC2F1768770"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matthiaskramm/swftools/issues/198",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/matthiaskramm/swftools/issues/198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25437",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T21:15:10.630",
      "lastModified" : "2025-01-31T19:15:11.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vtech:vcs754a_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.1.a",
            "versionEndExcluding" : "1.1.1.h",
            "matchCriteriaId" : "A1EB7660-274F-4619-905A-638027C35C4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:vtech:vcs754a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83D92E46-4C38-41A3-B46E-80AFED8E0C1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://i.imgur.com/aDuiY8q.png",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://yechiel.xyz/vulnerability-in-vtechs-vcs754a-business-phones-exposes-sip-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://i.imgur.com/aDuiY8q.png",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://yechiel.xyz/vulnerability-in-vtechs-vcs754a-business-phones-exposes-sip-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T21:15:10.710",
      "lastModified" : "2025-01-31T19:15:13.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured). This occurs in akka.kafka.internal.KafkaConsumerActor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lightbend:alpakka_kafka:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.2",
            "matchCriteriaId" : "5EC4C398-868B-45EB-9330-C40ABD6DA55F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://akka.io/security/alpakka-kafka-cve-2023-29471.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/akka/alpakka-kafka/issues/1592",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://akka.io/security/alpakka-kafka-cve-2023-29471.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/akka/alpakka-kafka/issues/1592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29489",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T21:15:10.783",
      "lastModified" : "2024-11-21T07:57:09.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.102.0.31",
            "matchCriteriaId" : "27895D75-07E6-4ED2-BEFE-9718E7418CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.104.0",
            "versionEndExcluding" : "11.106.0.18",
            "matchCriteriaId" : "03CD2A77-1A0B-49EB-9C36-A38B57162FA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.108.0",
            "versionEndExcluding" : "11.108.0.13",
            "matchCriteriaId" : "3F193C33-6199-4643-A657-38D4C583250F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.109.0",
            "versionEndExcluding" : "11.109.9999.116",
            "matchCriteriaId" : "BAABB8A0-5588-4443-8505-7D0A3C16E979"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://forums.cpanel.net/threads/cpanel-tsr-2023-0001-full-disclosure.708949/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://forums.cpanel.net/threads/cpanel-tsr-2023-0001-full-disclosure.708949/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1967",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-27T22:15:09.187",
      "lastModified" : "2025-01-16T22:15:33.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Keysight N8844A Data Analytics Web Service deserializes untrusted data without sufficiently verifying the resulting data will be valid. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keysight:n8844a:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.7351",
            "matchCriteriaId" : "4A1836E6-7210-40CE-AC6E-9276AFD17774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-115-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-115-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-27T22:15:09.917",
      "lastModified" : "2025-01-31T19:15:14.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue in the component /dialog/select_media.php of DedeCMS v5.7.107 allows attackers to execute a directory traversal."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dedecms:dedecms:5.7.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2686D296-F85A-49DE-9323-06E80784B9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Howard512966/DedeCMS-v5.7.107-Directory-Traversal",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Howard512966/DedeCMS-v5.7.107-Directory-Traversal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28384",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-27T23:15:14.867",
      "lastModified" : "2025-01-17T17:15:07.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myscada:mypro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.26.0",
            "matchCriteriaId" : "3460F2AB-1B4F-42B8-BEF4-98E7EBEC16E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28400",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-27T23:15:14.917",
      "lastModified" : "2025-01-17T17:15:08.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myscada:mypro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.26.0",
            "matchCriteriaId" : "3460F2AB-1B4F-42B8-BEF4-98E7EBEC16E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28716",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-27T23:15:14.963",
      "lastModified" : "2025-01-17T17:15:08.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myscada:mypro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.26.0",
            "matchCriteriaId" : "3460F2AB-1B4F-42B8-BEF4-98E7EBEC16E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29150",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-27T23:15:15.007",
      "lastModified" : "2025-01-17T18:15:22.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myscada:mypro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.26.0",
            "matchCriteriaId" : "3460F2AB-1B4F-42B8-BEF4-98E7EBEC16E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29169",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-27T23:15:15.050",
      "lastModified" : "2025-01-17T18:15:22.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myscada:mypro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.26.0",
            "matchCriteriaId" : "3460F2AB-1B4F-42B8-BEF4-98E7EBEC16E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2356",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-28T00:15:08.890",
      "lastModified" : "2024-11-21T07:58:27.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1",
            "matchCriteriaId" : "9D848560-15B3-4F3C-BB4D-A847948CE1EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mlflow/mlflow/commit/f73147496e05c09a8b83d95fb4f1bf86696c6342",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7b5d130d-38eb-4133-8c7d-0dfc9a9d9896",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/mlflow/mlflow/commit/f73147496e05c09a8b83d95fb4f1bf86696c6342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/7b5d130d-38eb-4133-8c7d-0dfc9a9d9896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27556",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-28T01:15:06.967",
      "lastModified" : "2024-11-21T07:53:08.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Counter Fraud Management for Safer Payments 6.1.0.00, 6.2.0.00, 6.3.0.00 through 6.3.1.03, 6.4.0.00 through 6.4.2.02 and 6.5.0.00 does not properly allocate resources without limits or throttling which could allow a remote attacker to cause a denial of service.  IBM X-Force ID:  249190."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.0.00",
            "versionEndExcluding" : "6.3.1.04",
            "matchCriteriaId" : "BE0EAC73-2C1A-4303-AAA4-515C4B25ACDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0.00",
            "versionEndExcluding" : "6.4.2.03",
            "matchCriteriaId" : "A5BD5489-C3E5-4BB6-8142-C900E735464E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:safer_payments:6.5.0.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727697D8-022F-4C78-8BD2-27548DA1F70D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249190",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985601",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985601",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27557",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-28T02:15:08.910",
      "lastModified" : "2024-11-21T07:53:08.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Counter Fraud Management for Safer Payments 6.1.0.00 through 6.1.1.02, 6.2.0.00 through 6.2.2.02, 6.3.0.00 through 6.3.1.02, 6.4.0.00 through 6.4.2.01, and 6.5.0.00 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.  IBM X-Force ID:  249192."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.0.00",
            "versionEndExcluding" : "6.1.1.03",
            "matchCriteriaId" : "2FD3EAC9-EF52-41AC-A784-F8AA19D97C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0.00",
            "versionEndExcluding" : "6.2.2.03",
            "matchCriteriaId" : "47F2E960-5FB2-4A7C-A8E3-D89E7C390D6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.0.00",
            "versionEndExcluding" : "6.3.1.03",
            "matchCriteriaId" : "88AA28EC-168B-4228-84F5-D4060EC65308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0.00",
            "versionEndExcluding" : "6.4.2.02",
            "matchCriteriaId" : "0BD2F86A-17C0-4B3A-943E-F8DBD44A5141"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:safer_payments:6.5.0.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727697D8-022F-4C78-8BD2-27548DA1F70D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249192",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985603",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31436",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T02:15:09.007",
      "lastModified" : "2024-11-21T08:01:51.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7",
            "versionEndExcluding" : "4.14.314",
            "matchCriteriaId" : "D3B1E421-B7D1-4D32-9E05-E1369CD3432A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.282",
            "matchCriteriaId" : "46D20E32-80A1-407D-8775-1F4CFAD37BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.242",
            "matchCriteriaId" : "3EFA20AE-A796-4C89-A0AC-8CC02CDE833E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.10.179",
            "matchCriteriaId" : "29595EE2-9C47-46D0-B799-67D3CD5674FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.15.109",
            "matchCriteriaId" : "4C603326-394E-408E-B5E1-011979F7BD9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.26",
            "matchCriteriaId" : "23989D73-416D-4C1B-8D9D-2A43A43DA115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.2.13",
            "matchCriteriaId" : "BFF8B56C-0201-4D6A-901E-C9C643C04FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.13",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3037933448f60f9acb705997eae62013ecb81e0d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230609-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5402",
        "source" : "cve@mitre.org",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www.spinics.net/lists/stable-commits/msg294885.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/3037933448f60f9acb705997eae62013ecb81e0d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230609-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5402",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry" ]
      }, {
        "url" : "https://www.spinics.net/lists/stable-commits/msg294885.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28528",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-28T03:15:08.453",
      "lastModified" : "2025-11-04T20:16:26.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands.  IBM X-Force ID:  251207."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:vios:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F61BE89-FBDE-4312-8422-86D1A9F57C9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0402E20C-8B41-4A2A-BFF9-92EC843985F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6791504A-A48A-4ED0-94AF-4C8A3B91516F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:aix:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35DF3DE0-1AE4-4B25-843F-BC08DBBFDF78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172458/IBM-AIX-7.2-inscout-Privilege-Escalation.html",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/251207",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6983232",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172458/IBM-AIX-7.2-inscout-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/251207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6983232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28882",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T04:15:38.017",
      "lastModified" : "2025-07-03T20:59:18.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash and unresponsiveness) because some inputs cause a segfault in the Transaction class for some configurations."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owasp:modsecurity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.5",
            "versionEndExcluding" : "3.0.9",
            "matchCriteriaId" : "F57A821A-277E-4B3D-BC5D-395812BF62A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/software-updates/announcing-modsecurity-version-309/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/software-updates/announcing-modsecurity-version-309/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2361",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-28T08:15:09.340",
      "lastModified" : "2024-11-21T07:58:27.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.21",
            "matchCriteriaId" : "72C537D6-67BA-4562-B853-F99E6C14315C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/commit/6970649f5d3790a1db9ef4324bece0d4cb95366a",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/24d91b83-c3df-48f5-a713-9def733f2de7",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/6970649f5d3790a1db9ef4324bece0d4cb95366a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/24d91b83-c3df-48f5-a713-9def733f2de7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2363",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T11:15:08.847",
      "lastModified" : "2024-11-21T07:58:27.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. This issue affects some unknown processing of the file view_room.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227639."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resort_reservation_system_project:resort_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B25E14-73A3-436D-900D-0E09E0A423DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Resort_Reservation_System-SQL-Injection-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227639",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227639",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Resort_Reservation_System-SQL-Injection-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2364",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T11:15:08.923",
      "lastModified" : "2024-11-21T07:58:27.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in SourceCodester Resort Reservation System 1.0. Affected is an unknown function of the file registration.php. The manipulation of the argument fullname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227640."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:resort_reservation_system_project:resort_reservation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B25E14-73A3-436D-900D-0E09E0A423DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Resort_Reservation_System-Stored-Cross-Site-Scripting-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227640",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227640",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Resort_Reservation_System-Stored-Cross-Site-Scripting-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30466",
      "sourceIdentifier" : "vdisclose@cert-in.org.in",
      "published" : "2023-04-28T11:15:08.987",
      "lastModified" : "2024-11-21T08:00:14.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device.\n\nSuccessful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device.\n\n\n\n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "vdisclose@cert-in.org.in",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vdisclose@cert-in.org.in",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n5008-uc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "BE1B2A5B-60C9-4A59-B55D-AC0094C3B1D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n5008-uc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58261CC1-427F-4A52-A008-6B6716112BBF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n1008-unc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "AFA4F551-2D31-4702-92D0-CAA5A13F129E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n1008-unc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB41652-D278-4292-B7BB-7F070E361DAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n1008-uc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "09767926-CFFF-46FE-B4BF-6837B4EA8289"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n1008-uc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE88C635-0150-480E-8A89-5A56BE05D61E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n1004-uc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "67C8EA84-347F-489B-9D14-F5F0FD70CF3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n1004-uc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE04A5-3029-4BEB-BDCE-3C0FAF39E31E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n5016-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "75.9.0.18-r2",
            "matchCriteriaId" : "6942BA61-4138-4E0A-8752-7FDE859648BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n5016-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DA6501-93EC-41A5-B282-C64C21F60B67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n5008-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "75.9.0.18-r2",
            "matchCriteriaId" : "252CCDD9-ADDB-409D-9959-0C04EE22476B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n5008-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8433B3-851C-4B85-98E9-BBC03F9DA4C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n7016-uh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "71.9.0.18-r2",
            "matchCriteriaId" : "5D7FA22E-4503-4BC8-B44B-95D07C76CE38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n7016-uh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F41EFC-32FD-4B45-96D0-99704EBBFDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n7032-uh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "71.9.0.18-r2",
            "matchCriteriaId" : "6BB803FE-800A-4C0C-B3A2-360CAFF8404E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n7032-uh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE84B357-0D42-4C10-A33C-E7800423417F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n8064-uh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "71.9.0.18-r2",
            "matchCriteriaId" : "0795157C-5761-4B2F-8A0B-D517D1ECFB14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n8064-uh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD889EAE-987D-42C2-9BCE-995583A47894"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n8032-uh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "71.9.0.18-r2",
            "matchCriteriaId" : "4EA14E16-90BE-4C8D-A1CD-92A911B74692"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n8032-uh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62654248-D2A8-494C-847F-8AF636506F20"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n1004-upc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "57B5543B-1734-4E8F-8836-1AFDA14B1558"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n1004-upc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9672C3-28C3-4E9B-B30F-86B50EC5BC07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n1008-upc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "D2D27E22-9CCF-43CB-BBBB-4AFDC7201E1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n1008-upc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E4CEB9-6C20-4071-9DAF-6D0DAA1FD1A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n1008-unpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "D1F63759-80FE-4A56-8AE3-0F9B99112598"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n1008-unpc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C8B2388-7F07-4921-A87E-09D3B705A429"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n5008-upc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "9E9E50A7-9795-4619-8C56-C1DB481E7706"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n5008-upc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B49E7A8-3823-4BFE-9BC1-86BA575C85AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n5016-pe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "75.9.0.18-r2",
            "matchCriteriaId" : "2EE2DD36-C16F-4308-80B2-829FEA43CF5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n5016-pe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BCC15F-0126-436B-AD93-5485B0049051"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n5008-pe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "75.9.0.18-r2",
            "matchCriteriaId" : "05601450-3A08-4326-8884-03A93468FBA3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n5008-pe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3BF03A-B2AD-40E9-8287-0A4BC78358FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n7016-uph_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "71.9.0.18-r2",
            "matchCriteriaId" : "C3A443C3-3520-4B85-AE5C-4230F4BF9067"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n7016-uph:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4781C7D-E014-4773-8066-2DC6564557DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n7032-uph_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "71.9.0.18-r2",
            "matchCriteriaId" : "3281A9A5-5838-4B16-8205-14FD64FB9E96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n7032-uph:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74207F3-9EEE-491D-AFDA-127A107DC40D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n7048-uph_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "71.9.0.18-r2",
            "matchCriteriaId" : "A77B9D2B-A8F5-4B4A-9D02-73F3E41AB0C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n7048-uph:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4B94E3-80EF-4A72-8069-15EAB4644D4C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-nxxxx-xxg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "77.9.0.18-r2",
            "matchCriteriaId" : "1AD1E452-B123-4287-BF44-F6D241F10188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-nxxxx-xxt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "72.9.0.18-r2",
            "matchCriteriaId" : "450E1C0E-B7D9-4913-B71B-8EBAB904BFA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0121",
        "source" : "vdisclose@cert-in.org.in",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30467",
      "sourceIdentifier" : "vdisclose@cert-in.org.in",
      "published" : "2023-04-28T11:15:09.040",
      "lastModified" : "2024-11-21T08:00:14.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to improper authorization at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device.\n\nSuccessful exploitation of this vulnerability could allow remote attacker to perform unauthorized activities on the targeted device.\n\n\n\n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "vdisclose@cert-in.org.in",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "vdisclose@cert-in.org.in",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n5008-uc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "BE1B2A5B-60C9-4A59-B55D-AC0094C3B1D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n5008-uc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58261CC1-427F-4A52-A008-6B6716112BBF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n1008-unc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "AFA4F551-2D31-4702-92D0-CAA5A13F129E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n1008-unc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB41652-D278-4292-B7BB-7F070E361DAC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n1008-uc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "09767926-CFFF-46FE-B4BF-6837B4EA8289"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n1008-uc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE88C635-0150-480E-8A89-5A56BE05D61E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n1004-uc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "67C8EA84-347F-489B-9D14-F5F0FD70CF3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n1004-uc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41AE04A5-3029-4BEB-BDCE-3C0FAF39E31E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n5016-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "75.9.0.18-r2",
            "matchCriteriaId" : "6942BA61-4138-4E0A-8752-7FDE859648BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n5016-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DA6501-93EC-41A5-B282-C64C21F60B67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n5008-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "75.9.0.18-r2",
            "matchCriteriaId" : "252CCDD9-ADDB-409D-9959-0C04EE22476B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n5008-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB8433B3-851C-4B85-98E9-BBC03F9DA4C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n7016-uh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "71.9.0.18-r2",
            "matchCriteriaId" : "5D7FA22E-4503-4BC8-B44B-95D07C76CE38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n7016-uh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F41EFC-32FD-4B45-96D0-99704EBBFDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n7032-uh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "71.9.0.18-r2",
            "matchCriteriaId" : "6BB803FE-800A-4C0C-B3A2-360CAFF8404E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n7032-uh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE84B357-0D42-4C10-A33C-E7800423417F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n8064-uh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "71.9.0.18-r2",
            "matchCriteriaId" : "0795157C-5761-4B2F-8A0B-D517D1ECFB14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n8064-uh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD889EAE-987D-42C2-9BCE-995583A47894"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n8032-uh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "71.9.0.18-r2",
            "matchCriteriaId" : "4EA14E16-90BE-4C8D-A1CD-92A911B74692"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n8032-uh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62654248-D2A8-494C-847F-8AF636506F20"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n1004-upc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "57B5543B-1734-4E8F-8836-1AFDA14B1558"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n1004-upc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9672C3-28C3-4E9B-B30F-86B50EC5BC07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n1008-upc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "D2D27E22-9CCF-43CB-BBBB-4AFDC7201E1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n1008-upc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E4CEB9-6C20-4071-9DAF-6D0DAA1FD1A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n1008-unpc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "D1F63759-80FE-4A56-8AE3-0F9B99112598"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n1008-unpc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C8B2388-7F07-4921-A87E-09D3B705A429"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n5008-upc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "73.9.0.18-r2",
            "matchCriteriaId" : "9E9E50A7-9795-4619-8C56-C1DB481E7706"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n5008-upc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B49E7A8-3823-4BFE-9BC1-86BA575C85AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n5016-pe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "75.9.0.18-r2",
            "matchCriteriaId" : "2EE2DD36-C16F-4308-80B2-829FEA43CF5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n5016-pe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98BCC15F-0126-436B-AD93-5485B0049051"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n5008-pe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "75.9.0.18-r2",
            "matchCriteriaId" : "05601450-3A08-4326-8884-03A93468FBA3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n5008-pe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3BF03A-B2AD-40E9-8287-0A4BC78358FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n7016-uph_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "71.9.0.18-r2",
            "matchCriteriaId" : "C3A443C3-3520-4B85-AE5C-4230F4BF9067"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n7016-uph:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4781C7D-E014-4773-8066-2DC6564557DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n7032-uph_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "71.9.0.18-r2",
            "matchCriteriaId" : "3281A9A5-5838-4B16-8205-14FD64FB9E96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n7032-uph:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A74207F3-9EEE-491D-AFDA-127A107DC40D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-n7048-uph_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "71.9.0.18-r2",
            "matchCriteriaId" : "A77B9D2B-A8F5-4B4A-9D02-73F3E41AB0C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:milesight:ms-n7048-uph:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D4B94E3-80EF-4A72-8069-15EAB4644D4C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-nxxxx-xxg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "77.9.0.18-r2",
            "matchCriteriaId" : "1AD1E452-B123-4287-BF44-F6D241F10188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:milesight:ms-nxxxx-xxt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "72.9.0.18-r2",
            "matchCriteriaId" : "450E1C0E-B7D9-4913-B71B-8EBAB904BFA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0121",
        "source" : "vdisclose@cert-in.org.in",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2360",
      "sourceIdentifier" : "security@acronis.com",
      "published" : "2023-04-28T12:15:09.820",
      "lastModified" : "2024-11-21T07:58:27.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.2.0-135."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@acronis.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@acronis.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-942"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acronis:cyber_infrastructure:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.0-135",
            "matchCriteriaId" : "32CC6362-8BB7-45EA-B0D9-AB9CDF786FC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-4215",
        "source" : "security@acronis.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security-advisory.acronis.com/advisories/SEC-4215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2365",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T12:15:09.877",
      "lastModified" : "2024-11-21T07:58:27.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file ajax.php?action=delete_subject. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227641 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faculty_evaluation_system_project:faculty_evaluation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2433CE4C-87DF-4B90-A449-C844403740C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oV201/cve_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227641",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227641",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oV201/cve_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2366",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T12:15:09.937",
      "lastModified" : "2024-11-21T07:58:28.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajax.php?action=delete_class. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-227642 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faculty_evaluation_system_project:faculty_evaluation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2433CE4C-87DF-4B90-A449-C844403740C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oV201/cve_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227642",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227642",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oV201/cve_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2367",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T13:15:13.697",
      "lastModified" : "2024-11-21T07:58:28.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/manage_academic.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227643."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faculty_evaluation_system_project:faculty_evaluation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2433CE4C-87DF-4B90-A449-C844403740C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/f0llow/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227643",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227643",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/f0llow/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2368",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T13:15:13.797",
      "lastModified" : "2024-11-21T07:58:28.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php?page=manage_questionnaire. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227644."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faculty_evaluation_system_project:faculty_evaluation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2433CE4C-87DF-4B90-A449-C844403740C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/f0llow/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-2.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227644",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227644",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/f0llow/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2369",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T13:15:13.863",
      "lastModified" : "2024-11-21T07:58:28.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/manage_restriction.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227645 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faculty_evaluation_system_project:faculty_evaluation_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2433CE4C-87DF-4B90-A449-C844403740C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/f0llow/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-3.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227645",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227645",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/f0llow/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T13:15:13.920",
      "lastModified" : "2025-01-31T17:15:11.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MagicJack device, a VoIP solution for internet phone calls, contains a hidden NAND flash memory partition allowing unauthorized read/write access. Attackers can exploit this by replacing the original software with a malicious version, leading to ransomware deployment on the host computer. Affected devices have firmware versions prior to magicJack A921 USB Phone Jack Rev 3.0 V1.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:magicjack:a921_firmware:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F592B448-BD06-4720-A6E9-316E461F359D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:magicjack:a921:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0660D42E-A7E4-431C-92AB-518DA02DE191"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/drive/folders/1cKd8hksThK610GPtBQ3du8DEkwKywlAi?usp=sharing",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://pastebin.com/raw/irWcawp8",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://samuraisecurity.co.uk/red-teaming-0x01-click-rce-via-voip-usb/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.magicjack.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://drive.google.com/drive/folders/1cKd8hksThK610GPtBQ3du8DEkwKywlAi?usp=sharing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://pastebin.com/raw/irWcawp8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://samuraisecurity.co.uk/red-teaming-0x01-click-rce-via-voip-usb/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.magicjack.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28471",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T14:15:10.307",
      "lastModified" : "2025-01-31T17:15:10.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS via a container name."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "00F33859-EA9B-4E6D-9B8C-62945094ED9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://concretecms.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://concretecms.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28472",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T14:15:10.407",
      "lastModified" : "2024-11-21T07:55:09.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 does not have Secure and HTTP only attributes set for ccmPoll cookies."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "00F33859-EA9B-4E6D-9B8C-62945094ED9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://concretecms.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://concretecms.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T14:15:10.447",
      "lastModified" : "2024-11-21T07:55:10.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 2.5
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "00F33859-EA9B-4E6D-9B8C-62945094ED9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://concretecms.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://concretecms.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ],
      "evaluatorComment" : "u"
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28474",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T14:15:10.487",
      "lastModified" : "2024-11-21T07:55:10.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Saved Presets on search."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "00F33859-EA9B-4E6D-9B8C-62945094ED9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://concretecms.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://concretecms.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T14:15:10.523",
      "lastModified" : "2024-11-21T07:55:10.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concrete CMS (previously concrete5) versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "00F33859-EA9B-4E6D-9B8C-62945094ED9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://concretecms.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://concretecms.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T14:15:10.557",
      "lastModified" : "2024-11-21T07:55:10.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Tags on uploaded files."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "00F33859-EA9B-4E6D-9B8C-62945094ED9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://concretecms.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://concretecms.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T14:15:10.597",
      "lastModified" : "2024-11-21T07:55:10.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to stored XSS on API Integrations via the name parameter."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.0",
            "matchCriteriaId" : "00F33859-EA9B-4E6D-9B8C-62945094ED9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://concretecms.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://concretecms.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28819",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T14:15:10.657",
      "lastModified" : "2024-11-21T07:56:04.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concrete CMS (previously concrete5) versions 8.5.12 and below, 9.0.0 through 9.0.2 is vulnerable to Stored XSS in uploaded file and folder names."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.0",
            "matchCriteriaId" : "F6D15F6B-68AA-45B6-B98D-F2C1671263F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/concretecms/concretecms/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/concretecms/concretecms/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/2023-11-09-security-blog-about-updated-cves-and-new-release",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28820",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T14:15:10.703",
      "lastModified" : "2025-01-31T17:15:10.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concrete CMS (previously concrete5) before 9.1 is vulnerable to stored XSS in RSS Displayer via the href attribute because the link element input was not sanitized."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.0",
            "matchCriteriaId" : "F6D15F6B-68AA-45B6-B98D-F2C1671263F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/concretecms/concretecms/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/concretecms/concretecms/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28821",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T14:15:10.753",
      "lastModified" : "2025-01-30T21:15:10.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concrete CMS (previously concrete5) before 9.1 did not have a rate limit for password resets."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.0",
            "matchCriteriaId" : "F6D15F6B-68AA-45B6-B98D-F2C1671263F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/concretecms/concretecms/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/concretecms/concretecms/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2370",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T14:15:10.807",
      "lastModified" : "2024-11-21T07:58:28.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in SourceCodester Online DJ Management System 1.0. Affected is an unknown function of the file admin/events/manage_event.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-227646 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_dj_management_system_project:online_dj_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6EE0BC-5D40-4EFC-BE67-D3A939B443E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aieouZZ/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227646",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227646",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/aieouZZ/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2371",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T14:15:10.863",
      "lastModified" : "2024-11-21T07:58:28.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/view_details.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227647."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_dj_management_system_project:online_dj_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6EE0BC-5D40-4EFC-BE67-D3A939B443E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yoyoyoyoyohane/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227647",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227647",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/yoyoyoyoyohane/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2372",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T14:15:10.917",
      "lastModified" : "2024-11-21T07:58:28.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in SourceCodester Online DJ Management System 1.0. Affected by this issue is some unknown functionality of the file classes/Master.php?f=save_event. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227648."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_dj_management_system_project:online_dj_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6EE0BC-5D40-4EFC-BE67-D3A939B443E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/yoyoyoyoyohane/bug_report/blob/main/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227648",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227648",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/yoyoyoyoyohane/bug_report/blob/main/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2373",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T14:15:10.977",
      "lastModified" : "2024-11-21T07:58:28.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component Web Management Interface. The manipulation of the argument ecn-up leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227649 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:edgemax_edgerouter_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "1D3FE42C-7A01-420B-BD79-60992B4DC90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:edgemax_edgerouter_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DD084B6E-95B1-43EC-B44D-067F84857006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:edgemax_edgerouter_firmware:2.0.9:hotfix1:*:*:*:*:*:*",
            "matchCriteriaId" : "C0CE2156-E44D-4137-B823-E29E9B504090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:edgemax_edgerouter_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "D674905D-1E0B-428D-826A-CB75E5E0313C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:edgemax_edgerouter_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD593F1-F9C4-40F1-AE07-82015E69429F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:edgemax_edgerouter_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "643B67AA-ED41-4716-8449-E010B44F1900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:edgemax_edgerouter_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "ADEBD144-84BF-4A6C-B18F-4DBC6261D0D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9AD72-BF39-4731-85B9-26036F7C425B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x-sfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F922D6E-7C6D-4984-A0DF-6EDC0C7A9900"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227649",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227649",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T14:15:11.047",
      "lastModified" : "2025-01-30T20:15:31.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wuzhicms v4.1.0 is vulnerable to Cross Site Scripting (XSS) in the Member Center, Account Settings."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wuzhicms:wuzhicms:4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B76E69A-B2F3-4359-A7C0-046CEE2FAEEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wuzhicms/wuzhicms/issues/205#issue-1635153937",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/wuzhicms/wuzhicms/issues/205#issue-1635153937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T14:15:11.083",
      "lastModified" : "2025-01-31T16:15:28.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EyouCms V1.6.1-UTF8-sp1 is vulnerable to Cross Site Scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyoucms:eyoucms:1.6.1-utf8-sp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E07F04-0ABB-44F1-AAA5-E4E8E7B3DE92"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/weng-xianhu/eyoucms/issues/40",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/weng-xianhu/eyoucms/issues/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T14:15:11.117",
      "lastModified" : "2023-11-07T04:13:40.023",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-30349. Reason: This record is a reservation duplicate of CVE-2023-30349. Notes: All CVE users should reference CVE-2023-30349 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0834",
      "sourceIdentifier" : "security@hypr.com",
      "published" : "2023-04-28T15:15:10.573",
      "lastModified" : "2024-11-21T07:37:55.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on MacOS allows Privilege Escalation.This issue affects Workforce Access: from 6.12 before 8.1.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hypr.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hypr.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hypr:workforce_access:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.0",
            "versionEndExcluding" : "8.1.0",
            "matchCriteriaId" : "ACF80E3D-8A91-492B-8EC9-EF0DC8DFEFFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.hypr.com/security-advisories",
        "source" : "security@hypr.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.hypr.com/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1477",
      "sourceIdentifier" : "security@hypr.com",
      "published" : "2023-04-28T15:15:10.633",
      "lastModified" : "2024-11-21T07:39:16.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows Authentication Abuse.This issue affects HYPR Keycloak Authenticator Extension: before 7.10.2, before 8.0.3.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hypr.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hypr.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hypr:keycloak_authenticator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.10.2",
            "matchCriteriaId" : "16BBA4C6-9D25-48D1-94E8-6208707F3E82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hypr:keycloak_authenticator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.3",
            "matchCriteriaId" : "C46FEC6C-01FC-4C25-8D8A-9BBFDBB2AB99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.hypr.com/security-advisories",
        "source" : "security@hypr.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.hypr.com/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T15:15:10.737",
      "lastModified" : "2025-01-30T21:15:10.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "mccms v2.6.3 is vulnerable to Cross Site Request Forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chshcms:mccms:2.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7D0DC3-A426-48A4-8658-E0305C53A538"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chshcms/mccms/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/chshcms/mccms/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2374",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T15:15:10.847",
      "lastModified" : "2024-11-21T07:58:29.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 and classified as critical. This vulnerability affects unknown code of the component Web Management Interface. The manipulation of the argument ecn-down leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227650 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "5E5C7E0B-4335-44F0-A19F-6E68D9CFD5AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9DB3EE14-A555-4DCA-9C16-F3D72489F10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "2844D28C-FAD9-498A-93FF-7A4A217210A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7E7155-EFDC-42E0-A851-8FD2C58A2076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0473F8F-8D1E-4CEB-A7FC-979F3F3AAF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D34B1D-9F1F-4A1F-A76C-FB4EE83D08F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4BC03-E96D-42A9-9034-7017DA6EA389"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9AD72-BF39-4731-85B9-26036F7C425B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "34DA36D8-F0BD-4E98-A74C-5D50AD0980C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "906F4A72-7C6D-45FD-875F-2D2791CE9F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "B919E33F-AC70-432C-A3F8-29FDFC710BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEE96EB-D8AE-4B23-B090-E86FBA4BEF73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "101616F2-CA1A-4BF0-9025-F20EDA26F235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "47ABA9C8-67E4-4DE2-822A-3E17639F745E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x-sfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F922D6E-7C6D-4984-A0DF-6EDC0C7A9900"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227650",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227650",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2375",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T15:15:10.903",
      "lastModified" : "2024-11-21T07:58:29.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 and classified as critical. This issue affects some unknown processing of the component Web Management Interface. The manipulation of the argument src leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227651."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "5E5C7E0B-4335-44F0-A19F-6E68D9CFD5AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9DB3EE14-A555-4DCA-9C16-F3D72489F10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "2844D28C-FAD9-498A-93FF-7A4A217210A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7E7155-EFDC-42E0-A851-8FD2C58A2076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0473F8F-8D1E-4CEB-A7FC-979F3F3AAF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D34B1D-9F1F-4A1F-A76C-FB4EE83D08F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4BC03-E96D-42A9-9034-7017DA6EA389"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9AD72-BF39-4731-85B9-26036F7C425B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "34DA36D8-F0BD-4E98-A74C-5D50AD0980C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "906F4A72-7C6D-45FD-875F-2D2791CE9F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "B919E33F-AC70-432C-A3F8-29FDFC710BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix3:*:*:*:*:*:*",
            "matchCriteriaId" : "F4191452-071A-4BF1-B312-C4F9C28A5205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEE96EB-D8AE-4B23-B090-E86FBA4BEF73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "101616F2-CA1A-4BF0-9025-F20EDA26F235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "47ABA9C8-67E4-4DE2-822A-3E17639F745E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x-sfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F922D6E-7C6D-4984-A0DF-6EDC0C7A9900"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227651",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227651",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27971",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2023-04-28T16:15:09.840",
      "lastModified" : "2025-01-30T21:15:10.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a46a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "6827D248-4786-43F4-B670-DE8FDBDDB4DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a46a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2824878B-A718-4D7D-9016-9AF10399BDBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a47a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "B61236E2-0C22-4ACF-8A67-E506C9AFFC68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a47a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA0AD5B-9E7C-49BE-8190-282427E10EE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a48a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "97967F58-733F-4529-91F1-B73A95663519"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a48a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412C00A8-50D7-4638-B1B9-C2076FE13C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a66a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "D1874BDA-3907-4E83-9337-E25C912EE7C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a66a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA51BE0-E2AE-441F-9ACA-3EB5A2D243DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_93m22a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "6803AA31-CC02-41F3-AB3C-DCF77BC93A3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_93m22a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F66723-5A58-4612-97DE-2E82ED85494D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a51a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "0935E272-5AB0-4869-945C-26B9E30D09A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a51a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6449B5-AAEE-4BDF-A0F0-76A622043C4A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a52a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "9FB631C3-F32F-466F-824B-866922BC740E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a52a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BF1464-C84D-4C5E-A7DE-6CBEBB2F54F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a53a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "28697927-D47E-4F7A-BAE7-2CB88A05ECBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a53a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE480BFD-5423-46EA-A6F2-45C1143E3183"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a56a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "6B0BE218-0426-4396-BFC9-B0F62B4BC2F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a56a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EB49BED-289D-4663-B019-985D608337F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a57a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "8027C164-1F3D-44F7-A576-EBD55FD23F93"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a57a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F417CE57-3FAD-4084-BF42-ED65D7E5EDF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a58a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "F43C3305-92A4-4E43-8FA4-104BAED57C9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a58a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE682C6-30C8-42D3-8F67-141DF64E9B0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a59a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "7BBBEAF8-AA67-45E7-895B-1A7DBCEECB0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a59a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54844167-292B-42A1-BEEA-CB2F4524B4FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a60a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "00D818E4-3668-449F-AA00-0E393B81453E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a60a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8E6F09-0BE0-4BB9-9539-86B822B49387"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a63a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "687111E1-75B0-4047-A0B2-11F8B610414C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a63a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "926EA9D9-83E0-4AA6-BAAA-31C713475473"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y40a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "ED1A27B8-0F51-4081-ABFE-377C0EDCFC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y40a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B8FCC1-8C4D-4CF4-A544-185FC15CC720"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y41a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "7FA2EF63-4AFE-4437-B93D-14E984D9CEEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y41a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3DDD9A-8D86-4FB2-9508-BB8B21EF054B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y43a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "F4E97E5F-B8C2-45D6-B457-DA8793A5E1D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y43a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1A6F50-AE27-45E7-98B0-9804D64188D3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y44a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "4C0DEC0B-DFF9-4C56-AD59-B54B6E33FF33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y44a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80727AC4-3B6A-4EB4-93E4-1E73D199F949"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y45a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "B008B558-D5C8-4262-ACAA-18F98DAE9F1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y45a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4135473E-5D1D-4C4F-8FFD-C2AB797C1ECA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y46a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "DA456248-4C9D-4C44-895A-257C51EEE6D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y46a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC8133D0-14BF-404C-81D1-EA5BC0FDF0A1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y47a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "A4A5F666-8466-4E5F-B9DE-7759774EF941"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y47a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B26BEA-03DD-41E0-9356-2043FF471D30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a29a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "A8A6EEE9-CDDA-4D87-A313-17A001ADB5D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a29a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA3AEE-A266-42BE-829A-B02A1A9D1711"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a30a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "46D45156-2D5E-45B0-99BF-11918D4B1F61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a30a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A21CFFF-B613-49AF-9063-E3B96BFD7207"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a32a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "23AA63CC-C2B3-41CE-A8EF-237D35ABF5C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a32a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E476813-B37C-4B81-8C92-E437055444FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a34a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "2D2C7160-5158-4AA7-99E4-BEC182397074"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a34a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DA0387-AC56-4510-B170-D854E441FCE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a35a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "719BEC44-E537-4999-A380-9BB711BE2983"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a35a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB52262-C2B3-4B1E-AD48-6EE3DF9E3950"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a38a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "509201CD-97C4-4805-A6C1-D3A49A154BF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a38a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB847F0-D15E-409C-B82E-339FBF07AC7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_w1a28a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "A0549CEA-B11B-4DF5-A8BB-C94C55B9B2F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_w1a28a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00A9FF2-35EA-4B6F-8926-4BC79505A7B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_w1a31a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "3B109BDE-DB3C-4EDE-9ECF-FE03C1E18D9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_w1a31a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9AFC01-5C53-4F31-9A3C-A891BC9745EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_w1a33a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "8E5F6500-6961-46EA-8607-844A42C4AF8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_w1a33a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA0578BA-4277-4A04-ABA2-CB4A6F575B83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a75a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "F47160A7-831B-4B67-8E35-E0E2D76A6213"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a75a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C166EDB7-C8D9-45C1-B2E1-C147EAF14AE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a76a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "FA76B5FE-0E09-4296-A4DF-3AA39E26A3F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a76a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6E5E81-C1E7-4917-9CE5-3175618C4F77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a77a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "CF4D0917-16E0-4EB2-B38C-7FC82E186500"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a77a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22493ED0-0190-4620-A566-40C547FC2A2A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a78a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "3292D14A-8839-45AB-8767-4E0487A822C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a78a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DE9C68-BC55-4E46-A6AA-45D73CFB8DAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a79a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "A159A0B7-4620-41DC-AA01-3B38984022E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a79a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC5824A-1DE4-4DFB-A958-A26E7B844089"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a80a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "1BAC93E2-EF65-4BB7-B358-9B117F624601"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a80a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46815386-E459-4DC6-AB89-C4524B6A830D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a81a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "ECA6009E-A1A6-444B-8E5F-D7685E47D47C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a81a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09ED8341-574A-4E0C-A4CF-6A44A48488F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a82a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "AD3D901E-F9EF-4E5F-8079-D383AAF5D692"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a82a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "708706C7-8E8B-456C-AFD1-36DFAB088A85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/ish_7919962-7920003-16/hpsbpi03839",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/ish_7919962-7920003-16/hpsbpi03839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27972",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2023-04-28T16:15:09.890",
      "lastModified" : "2025-01-30T20:15:31.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a46a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "6827D248-4786-43F4-B670-DE8FDBDDB4DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a46a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2824878B-A718-4D7D-9016-9AF10399BDBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a47a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "B61236E2-0C22-4ACF-8A67-E506C9AFFC68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a47a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA0AD5B-9E7C-49BE-8190-282427E10EE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a48a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "97967F58-733F-4529-91F1-B73A95663519"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a48a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412C00A8-50D7-4638-B1B9-C2076FE13C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a66a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "D1874BDA-3907-4E83-9337-E25C912EE7C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a66a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA51BE0-E2AE-441F-9ACA-3EB5A2D243DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_93m22a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "6803AA31-CC02-41F3-AB3C-DCF77BC93A3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_93m22a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F66723-5A58-4612-97DE-2E82ED85494D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a51a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "0935E272-5AB0-4869-945C-26B9E30D09A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a51a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6449B5-AAEE-4BDF-A0F0-76A622043C4A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a52a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "9FB631C3-F32F-466F-824B-866922BC740E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a52a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BF1464-C84D-4C5E-A7DE-6CBEBB2F54F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a53a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "28697927-D47E-4F7A-BAE7-2CB88A05ECBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a53a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE480BFD-5423-46EA-A6F2-45C1143E3183"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a56a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "6B0BE218-0426-4396-BFC9-B0F62B4BC2F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a56a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EB49BED-289D-4663-B019-985D608337F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a57a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "8027C164-1F3D-44F7-A576-EBD55FD23F93"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a57a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F417CE57-3FAD-4084-BF42-ED65D7E5EDF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a58a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "F43C3305-92A4-4E43-8FA4-104BAED57C9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a58a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE682C6-30C8-42D3-8F67-141DF64E9B0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a59a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "7BBBEAF8-AA67-45E7-895B-1A7DBCEECB0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a59a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54844167-292B-42A1-BEEA-CB2F4524B4FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a60a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "00D818E4-3668-449F-AA00-0E393B81453E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a60a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8E6F09-0BE0-4BB9-9539-86B822B49387"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a63a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "687111E1-75B0-4047-A0B2-11F8B610414C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a63a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "926EA9D9-83E0-4AA6-BAAA-31C713475473"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y40a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "ED1A27B8-0F51-4081-ABFE-377C0EDCFC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y40a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B8FCC1-8C4D-4CF4-A544-185FC15CC720"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y41a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "7FA2EF63-4AFE-4437-B93D-14E984D9CEEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y41a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3DDD9A-8D86-4FB2-9508-BB8B21EF054B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y43a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "F4E97E5F-B8C2-45D6-B457-DA8793A5E1D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y43a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1A6F50-AE27-45E7-98B0-9804D64188D3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y44a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "4C0DEC0B-DFF9-4C56-AD59-B54B6E33FF33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y44a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80727AC4-3B6A-4EB4-93E4-1E73D199F949"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y45a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "B008B558-D5C8-4262-ACAA-18F98DAE9F1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y45a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4135473E-5D1D-4C4F-8FFD-C2AB797C1ECA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y46a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "DA456248-4C9D-4C44-895A-257C51EEE6D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y46a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC8133D0-14BF-404C-81D1-EA5BC0FDF0A1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y47a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "A4A5F666-8466-4E5F-B9DE-7759774EF941"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y47a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B26BEA-03DD-41E0-9356-2043FF471D30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a29a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "A8A6EEE9-CDDA-4D87-A313-17A001ADB5D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a29a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA3AEE-A266-42BE-829A-B02A1A9D1711"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a30a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "46D45156-2D5E-45B0-99BF-11918D4B1F61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a30a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A21CFFF-B613-49AF-9063-E3B96BFD7207"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a32a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "23AA63CC-C2B3-41CE-A8EF-237D35ABF5C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a32a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E476813-B37C-4B81-8C92-E437055444FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a34a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "2D2C7160-5158-4AA7-99E4-BEC182397074"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a34a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DA0387-AC56-4510-B170-D854E441FCE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a35a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "719BEC44-E537-4999-A380-9BB711BE2983"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a35a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB52262-C2B3-4B1E-AD48-6EE3DF9E3950"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a38a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "509201CD-97C4-4805-A6C1-D3A49A154BF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a38a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB847F0-D15E-409C-B82E-339FBF07AC7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_w1a28a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "A0549CEA-B11B-4DF5-A8BB-C94C55B9B2F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_w1a28a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00A9FF2-35EA-4B6F-8926-4BC79505A7B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_w1a31a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "3B109BDE-DB3C-4EDE-9ECF-FE03C1E18D9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_w1a31a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9AFC01-5C53-4F31-9A3C-A891BC9745EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_w1a33a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "8E5F6500-6961-46EA-8607-844A42C4AF8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_w1a33a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA0578BA-4277-4A04-ABA2-CB4A6F575B83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a75a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "F47160A7-831B-4B67-8E35-E0E2D76A6213"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a75a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C166EDB7-C8D9-45C1-B2E1-C147EAF14AE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a76a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "FA76B5FE-0E09-4296-A4DF-3AA39E26A3F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a76a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6E5E81-C1E7-4917-9CE5-3175618C4F77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a77a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "CF4D0917-16E0-4EB2-B38C-7FC82E186500"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a77a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22493ED0-0190-4620-A566-40C547FC2A2A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a78a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "3292D14A-8839-45AB-8767-4E0487A822C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a78a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DE9C68-BC55-4E46-A6AA-45D73CFB8DAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a79a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "A159A0B7-4620-41DC-AA01-3B38984022E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a79a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC5824A-1DE4-4DFB-A958-A26E7B844089"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a80a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "1BAC93E2-EF65-4BB7-B358-9B117F624601"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a80a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46815386-E459-4DC6-AB89-C4524B6A830D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a81a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "ECA6009E-A1A6-444B-8E5F-D7685E47D47C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a81a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09ED8341-574A-4E0C-A4CF-6A44A48488F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a82a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "AD3D901E-F9EF-4E5F-8079-D383AAF5D692"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a82a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "708706C7-8E8B-456C-AFD1-36DFAB088A85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/ish_7920078-7920104-16/hpsbpi03840",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/ish_7920078-7920104-16/hpsbpi03840",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2376",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T16:15:09.933",
      "lastModified" : "2024-11-21T07:58:29.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. It has been classified as critical. Affected is an unknown function of the component Web Management Interface. The manipulation of the argument dpi leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227652."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "5E5C7E0B-4335-44F0-A19F-6E68D9CFD5AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9DB3EE14-A555-4DCA-9C16-F3D72489F10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "2844D28C-FAD9-498A-93FF-7A4A217210A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7E7155-EFDC-42E0-A851-8FD2C58A2076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0473F8F-8D1E-4CEB-A7FC-979F3F3AAF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D34B1D-9F1F-4A1F-A76C-FB4EE83D08F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4BC03-E96D-42A9-9034-7017DA6EA389"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9AD72-BF39-4731-85B9-26036F7C425B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "34DA36D8-F0BD-4E98-A74C-5D50AD0980C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "906F4A72-7C6D-45FD-875F-2D2791CE9F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "B919E33F-AC70-432C-A3F8-29FDFC710BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix3:*:*:*:*:*:*",
            "matchCriteriaId" : "F4191452-071A-4BF1-B312-C4F9C28A5205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEE96EB-D8AE-4B23-B090-E86FBA4BEF73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "101616F2-CA1A-4BF0-9025-F20EDA26F235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "47ABA9C8-67E4-4DE2-822A-3E17639F745E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x-sfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F922D6E-7C6D-4984-A0DF-6EDC0C7A9900"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227652",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227652",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2377",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T16:15:10.003",
      "lastModified" : "2024-11-21T07:58:29.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Web Management Interface. The manipulation of the argument name leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227653 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "5E5C7E0B-4335-44F0-A19F-6E68D9CFD5AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9DB3EE14-A555-4DCA-9C16-F3D72489F10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "2844D28C-FAD9-498A-93FF-7A4A217210A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0473F8F-8D1E-4CEB-A7FC-979F3F3AAF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D34B1D-9F1F-4A1F-A76C-FB4EE83D08F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4BC03-E96D-42A9-9034-7017DA6EA389"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9AD72-BF39-4731-85B9-26036F7C425B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "34DA36D8-F0BD-4E98-A74C-5D50AD0980C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "906F4A72-7C6D-45FD-875F-2D2791CE9F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "B919E33F-AC70-432C-A3F8-29FDFC710BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix3:*:*:*:*:*:*",
            "matchCriteriaId" : "F4191452-071A-4BF1-B312-C4F9C28A5205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEE96EB-D8AE-4B23-B090-E86FBA4BEF73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "101616F2-CA1A-4BF0-9025-F20EDA26F235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "47ABA9C8-67E4-4DE2-822A-3E17639F745E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x-sfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F922D6E-7C6D-4984-A0DF-6EDC0C7A9900"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227653",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227653",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2378",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T16:15:10.063",
      "lastModified" : "2024-11-21T07:58:29.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. It has been rated as critical. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation of the argument suffix-rate-up leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-227654 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "5E5C7E0B-4335-44F0-A19F-6E68D9CFD5AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9DB3EE14-A555-4DCA-9C16-F3D72489F10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "2844D28C-FAD9-498A-93FF-7A4A217210A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7E7155-EFDC-42E0-A851-8FD2C58A2076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0473F8F-8D1E-4CEB-A7FC-979F3F3AAF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D34B1D-9F1F-4A1F-A76C-FB4EE83D08F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4BC03-E96D-42A9-9034-7017DA6EA389"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9AD72-BF39-4731-85B9-26036F7C425B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "34DA36D8-F0BD-4E98-A74C-5D50AD0980C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "906F4A72-7C6D-45FD-875F-2D2791CE9F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "B919E33F-AC70-432C-A3F8-29FDFC710BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix3:*:*:*:*:*:*",
            "matchCriteriaId" : "F4191452-071A-4BF1-B312-C4F9C28A5205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEE96EB-D8AE-4B23-B090-E86FBA4BEF73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "101616F2-CA1A-4BF0-9025-F20EDA26F235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "47ABA9C8-67E4-4DE2-822A-3E17639F745E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x-sfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F922D6E-7C6D-4984-A0DF-6EDC0C7A9900"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227654",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227654",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30853",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-28T16:15:10.127",
      "lastModified" : "2024-11-21T08:00:58.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gradle Build Action allows users to execute a Gradle Build in their GitHub Actions workflow. A vulnerability impacts GitHub workflows using the Gradle Build Action prior to version 2.4.2 that have executed the Gradle Build Tool with the configuration cache enabled, potentially exposing secrets configured for the repository.\n\nSecrets configured for GitHub Actions are normally passed to the Gradle Build Tool via environment variables. Due to the way that the Gradle Build Tool records these environment variables, they may be persisted into an entry in the GitHub Actions cache. This data stored in the GitHub Actions cache can be read by a GitHub Actions workflow running in an untrusted context, such as that running for a Pull Request submitted by a developer via a repository fork.\n\nThis vulnerability was discovered internally through code review, and we have not seen any evidence of it being exploited in the wild. However, in addition to upgrading the Gradle Build Action, affected users should delete any potentially vulnerable cache entries and may choose to rotate any potentially affected secrets.\n\nGradle Build Action v2.4.2 and newer no longer saves this sensitive data for later use, preventing ongoing leakage of secrets via the GitHub Actions Cache.\n\nWhile upgrading to the latest version of the Gradle Build Action will prevent leakage of secrets going forward, additional actions may be required due to current or previous GitHub Actions Cache entries containing this information.\n\nCurrent cache entries will remain vulnerable until they are forcibly deleted or they expire naturally after 7 days of not being used. Potentially vulnerable entries can be easily identified in the GitHub UI by searching for a cache entry with key matching `configuration-cache-*`. The maintainers recommend that users of the Gradle Build Action inspect their list of cache entries and manually delete any that match this pattern.\n\nWhile maintainers have not seen any evidence of this vulnerability being exploited, they recommend cycling any repository secrets if you cannot be certain that these have not been compromised. Compromise could occur if a user runs a GitHub Actions workflow for a pull request attempting to exploit this data. \nWarning signs to look for in a pull request include:\n- Making changes to GitHub Actions workflow files in a way that may attempt to read/extract data from the Gradle User Home or `<project-root>/.gradle` directories.\n- Making changes to Gradle build files or other executable files that may be invoked by a GitHub Actions workflow, in a way that may attempt to read/extract information from these locations.\n\nSome workarounds to limit the impact of this vulnerability are available:\n- If the Gradle project does not opt-in to using the configuration cache, then it is not vulnerable. \n- If the Gradle project does opt-in to using the configuration-cache by default, then the `--no-configuration-cache` command-line argument can be used to disable this feature in a GitHub Actions workflow.\n\nIn any case, we recommend that users carefully inspect any pull request before approving the execution of GitHub Actions workflows. It may be prudent to require approval for all PRs from external contributors."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradle:build_action:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.2",
            "matchCriteriaId" : "DF234E1A-9C17-407C-B5DE-703690D148F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gradle/gradle-build-action/releases/tag/v2.4.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gradle/gradle-build-action/security/advisories/GHSA-h3qr-39j9-4r5v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gradle/gradle-build-action/releases/tag/v2.4.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/gradle/gradle-build-action/security/advisories/GHSA-h3qr-39j9-4r5v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30854",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-28T16:15:10.200",
      "lastModified" : "2024-11-21T08:00:58.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint `/plugin/CloneSite/cloneClient.json.php` allows attackers to achieve Remote Code Execution. This issue is fixed in version 12.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.4",
            "matchCriteriaId" : "C7827575-CC53-4298-AA70-AFD19408C79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WWBN/AVideo/security/advisories/GHSA-6vrj-ph27-qfp3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/security/advisories/GHSA-6vrj-ph27-qfp3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30856",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-28T16:15:10.260",
      "lastModified" : "2024-11-21T08:00:58.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eDEX-UI is a science fiction terminal emulator. Versions 2.2.8 and prior are vulnerable to cross-site websocket hijacking. When running eDEX-UI and browsing the web, a malicious website can connect to eDEX's internal terminal control websocket, and send arbitrary commands to the shell. The project has been archived since 2021, and as of time of publication there are no plans to patch this issue and release a new version. Some workarounds are available, including shutting down eDEX-UI when browsing the web and ensuring the eDEX terminal runs with lowest possible privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        }, {
          "lang" : "en",
          "value" : "CWE-1385"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:edex-ui_project:edex-ui:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.8",
            "matchCriteriaId" : "86B052F3-CD9C-401F-BCDA-7BB1E037CE35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://christian-schneider.net/CrossSiteWebSocketHijacking.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/GitSquared/edex-ui/blob/04a00c4079908788b371c6ecdefff96d0d9950f8/src/classes/terminal.class.js#L458",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/GitSquared/edex-ui/security/advisories/GHSA-q8xc-f2wf-ffh9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://christian-schneider.net/CrossSiteWebSocketHijacking.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://github.com/GitSquared/edex-ui/blob/04a00c4079908788b371c6ecdefff96d0d9950f8/src/classes/terminal.class.js#L458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/GitSquared/edex-ui/security/advisories/GHSA-q8xc-f2wf-ffh9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1526",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2023-04-28T17:15:42.973",
      "lastModified" : "2025-01-30T20:15:30.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain DesignJet and PageWide XL TAA compliant models may have risk of potential information disclosure if the hard disk drive is physically removed from the printer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:designjet_z6_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "jgr6_09_22_51.2",
            "matchCriteriaId" : "79275045-E680-4980-AE2E-E4B4FF2F9EF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:designjet_z6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC21A58-00BA-4EDF-9EF0-870AE44D218B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:designjet_z6dr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "jgr6_09_22_51.2",
            "matchCriteriaId" : "D98922E6-9D13-499C-BD28-E6FE2BC60327"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:designjet_z6dr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9830F6D2-A1EF-48D9-A9FE-EF4F3CC37A9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:designjet_z9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "jgr9_09_22_51.2",
            "matchCriteriaId" : "DF1E5F8A-53F4-4575-B647-21FE43BD81D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:designjet_z9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8876C93-02EA-4AB0-BD3E-E73C5293BD74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:designjet_z9dr_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "jgr9_09_22_51.2",
            "matchCriteriaId" : "FBB204FE-BCF4-49E4-B86B-D8DAC3B65174"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:designjet_z9dr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "944C8DAB-1262-4D78-943E-BE43FCA7AF86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:designjet_z9\\+_pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5038AB0-6D73-4CC3-9790-82BADDBF48A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:designjet_z9\\+_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B5271B-CA09-45EB-BE82-5573E15BCB7B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:pagewide_xl_4700:_firmware:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9E35992F-797A-4210-AD84-B73119A8119D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:pagewide_xl_4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7EFD29-61E5-44DD-BF9E-E7A94C7518D3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:pagewide_xl_4500:_firmware:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59D4C8D4-634D-4328-BADA-586D0DB774B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:pagewide_xl_4500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79CA733-FC8F-409E-B7F5-17C62C352C07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:pagewide_xl_4100:_firmware:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F336F37C-C59F-48C4-884A-6EEFE2CEDBAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:pagewide_xl_4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8176BFFE-C208-4E5C-9D68-666A747D84B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:pagewide_xl_4600:_firmware:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8D0C17BB-2F0F-4AD9-9C53-BE5F07D4817A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:pagewide_xl_4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B438074-4FBD-4167-8B49-E632088108B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:pagewide_xl_8000:_firmware:-:*:*:*:*:*:*",
            "matchCriteriaId" : "724920B8-F956-457F-9CBF-0F0620AC4630"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:pagewide_xl_8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9889CAC-98CE-48D8-B49B-BAB37CC8AFC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/ish_7869666-7869691-16/hpsbpi03837",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/ish_7869666-7869691-16/hpsbpi03837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27973",
      "sourceIdentifier" : "hp-security-alert@hp.com",
      "published" : "2023-04-28T17:15:43.023",
      "lastModified" : "2025-01-30T19:15:09.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a46a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "6827D248-4786-43F4-B670-DE8FDBDDB4DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a46a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2824878B-A718-4D7D-9016-9AF10399BDBD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a47a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "B61236E2-0C22-4ACF-8A67-E506C9AFFC68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a47a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA0AD5B-9E7C-49BE-8190-282427E10EE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a48a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "97967F58-733F-4529-91F1-B73A95663519"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a48a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "412C00A8-50D7-4638-B1B9-C2076FE13C1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m304-m305_w1a66a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "D1874BDA-3907-4E83-9337-E25C912EE7C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m304-m305_w1a66a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA51BE0-E2AE-441F-9ACA-3EB5A2D243DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_93m22a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "6803AA31-CC02-41F3-AB3C-DCF77BC93A3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_93m22a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7F66723-5A58-4612-97DE-2E82ED85494D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a51a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "0935E272-5AB0-4869-945C-26B9E30D09A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a51a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6449B5-AAEE-4BDF-A0F0-76A622043C4A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a52a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "9FB631C3-F32F-466F-824B-866922BC740E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a52a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BF1464-C84D-4C5E-A7DE-6CBEBB2F54F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a53a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "28697927-D47E-4F7A-BAE7-2CB88A05ECBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a53a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE480BFD-5423-46EA-A6F2-45C1143E3183"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a56a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "6B0BE218-0426-4396-BFC9-B0F62B4BC2F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a56a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EB49BED-289D-4663-B019-985D608337F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a57a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "8027C164-1F3D-44F7-A576-EBD55FD23F93"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a57a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F417CE57-3FAD-4084-BF42-ED65D7E5EDF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a58a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "F43C3305-92A4-4E43-8FA4-104BAED57C9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a58a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE682C6-30C8-42D3-8F67-141DF64E9B0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a59a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "7BBBEAF8-AA67-45E7-895B-1A7DBCEECB0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a59a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54844167-292B-42A1-BEEA-CB2F4524B4FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a60a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "00D818E4-3668-449F-AA00-0E393B81453E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a60a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8E6F09-0BE0-4BB9-9539-86B822B49387"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m404-m405_w1a63a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "687111E1-75B0-4047-A0B2-11F8B610414C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m404-m405_w1a63a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "926EA9D9-83E0-4AA6-BAAA-31C713475473"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y40a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "ED1A27B8-0F51-4081-ABFE-377C0EDCFC55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y40a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0B8FCC1-8C4D-4CF4-A544-185FC15CC720"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y41a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "7FA2EF63-4AFE-4437-B93D-14E984D9CEEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y41a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3DDD9A-8D86-4FB2-9508-BB8B21EF054B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y43a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "F4E97E5F-B8C2-45D6-B457-DA8793A5E1D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y43a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1A6F50-AE27-45E7-98B0-9804D64188D3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y44a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "4C0DEC0B-DFF9-4C56-AD59-B54B6E33FF33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y44a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80727AC4-3B6A-4EB4-93E4-1E73D199F949"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y45a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "B008B558-D5C8-4262-ACAA-18F98DAE9F1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y45a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4135473E-5D1D-4C4F-8FFD-C2AB797C1ECA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y46a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "DA456248-4C9D-4C44-895A-257C51EEE6D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y46a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC8133D0-14BF-404C-81D1-EA5BC0FDF0A1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_m453-m454_w1y47a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "A4A5F666-8466-4E5F-B9DE-7759774EF941"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_m453-m454_w1y47a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B26BEA-03DD-41E0-9356-2043FF471D30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a29a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "A8A6EEE9-CDDA-4D87-A313-17A001ADB5D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a29a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA3AEE-A266-42BE-829A-B02A1A9D1711"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a30a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "46D45156-2D5E-45B0-99BF-11918D4B1F61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a30a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A21CFFF-B613-49AF-9063-E3B96BFD7207"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a32a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "23AA63CC-C2B3-41CE-A8EF-237D35ABF5C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a32a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E476813-B37C-4B81-8C92-E437055444FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a34a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "2D2C7160-5158-4AA7-99E4-BEC182397074"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a34a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57DA0387-AC56-4510-B170-D854E441FCE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a35a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "719BEC44-E537-4999-A380-9BB711BE2983"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a35a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AB52262-C2B3-4B1E-AD48-6EE3DF9E3950"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_f_w1a38a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "509201CD-97C4-4805-A6C1-D3A49A154BF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_f_w1a38a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB847F0-D15E-409C-B82E-339FBF07AC7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_w1a28a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "A0549CEA-B11B-4DF5-A8BB-C94C55B9B2F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_w1a28a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C00A9FF2-35EA-4B6F-8926-4BC79505A7B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_w1a31a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "3B109BDE-DB3C-4EDE-9ECF-FE03C1E18D9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_w1a31a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9AFC01-5C53-4F31-9A3C-A891BC9745EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m428-m429_w1a33a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "8E5F6500-6961-46EA-8607-844A42C4AF8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m428-m429_w1a33a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA0578BA-4277-4A04-ABA2-CB4A6F575B83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a75a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "F47160A7-831B-4B67-8E35-E0E2D76A6213"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a75a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C166EDB7-C8D9-45C1-B2E1-C147EAF14AE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a76a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "FA76B5FE-0E09-4296-A4DF-3AA39E26A3F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a76a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B6E5E81-C1E7-4917-9CE5-3175618C4F77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a77a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "CF4D0917-16E0-4EB2-B38C-7FC82E186500"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a77a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22493ED0-0190-4620-A566-40C547FC2A2A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a78a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "3292D14A-8839-45AB-8767-4E0487A822C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a78a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DE9C68-BC55-4E46-A6AA-45D73CFB8DAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a79a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "A159A0B7-4620-41DC-AA01-3B38984022E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a79a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AC5824A-1DE4-4DFB-A958-A26E7B844089"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a80a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "1BAC93E2-EF65-4BB7-B358-9B117F624601"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a80a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46815386-E459-4DC6-AB89-C4524B6A830D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a81a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "ECA6009E-A1A6-444B-8E5F-D7685E47D47C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a81a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09ED8341-574A-4E0C-A4CF-6A44A48488F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:laserjet_pro_mfp_m478-m479_w1a82a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "002_2310a",
            "matchCriteriaId" : "AD3D901E-F9EF-4E5F-8079-D383AAF5D692"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:laserjet_pro_mfp_m478-m479_w1a82a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "708706C7-8E8B-456C-AFD1-36DFAB088A85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hp.com/us-en/document/ish_7920137-7920161-16/hpsbpi03841",
        "source" : "hp-security-alert@hp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hp.com/us-en/document/ish_7920137-7920161-16/hpsbpi03841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2379",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T17:15:43.067",
      "lastModified" : "2024-11-21T07:58:29.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component Web Service. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227655."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "5E5C7E0B-4335-44F0-A19F-6E68D9CFD5AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9DB3EE14-A555-4DCA-9C16-F3D72489F10C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "2844D28C-FAD9-498A-93FF-7A4A217210A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix3:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7E7155-EFDC-42E0-A851-8FD2C58A2076"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "B0473F8F-8D1E-4CEB-A7FC-979F3F3AAF29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5D34B1D-9F1F-4A1F-A76C-FB4EE83D08F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4BC03-E96D-42A9-9034-7017DA6EA389"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B9AD72-BF39-4731-85B9-26036F7C425B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "34DA36D8-F0BD-4E98-A74C-5D50AD0980C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "906F4A72-7C6D-45FD-875F-2D2791CE9F4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
            "matchCriteriaId" : "B919E33F-AC70-432C-A3F8-29FDFC710BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix3:*:*:*:*:*:*",
            "matchCriteriaId" : "F4191452-071A-4BF1-B312-C4F9C28A5205"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEE96EB-D8AE-4B23-B090-E86FBA4BEF73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
            "matchCriteriaId" : "101616F2-CA1A-4BF0-9025-F20EDA26F235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix6:*:*:*:*:*:*",
            "matchCriteriaId" : "47ABA9C8-67E4-4DE2-822A-3E17639F745E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:er-x-sfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F922D6E-7C6D-4984-A0DF-6EDC0C7A9900"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/DoS",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227655",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227655",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/DoS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2380",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T17:15:43.130",
      "lastModified" : "2024-11-21T07:58:29.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-227658 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/17",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227658",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227658",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2381",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T17:15:43.187",
      "lastModified" : "2024-11-21T07:58:30.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=bandwidth_profile.htm of the component Web Management Interface. The manipulation of the argument BandWidthProfile.ProfileName leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227659. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/6",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227659",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227659",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2382",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T17:15:43.240",
      "lastModified" : "2024-11-21T07:58:30.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. Affected by this issue is some unknown functionality of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the argument sysLogInfo.serverName leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227660. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/1",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227660",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227660",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25930",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-28T18:15:26.163",
      "lastModified" : "2024-11-21T07:50:26.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 11.1, and 11.5 is vulnerable to a denial of service.  Under rare conditions, setting a special register may cause the Db2 server to terminate abnormally.  IBM X-Force ID:  247862."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1",
            "versionEndExcluding" : "11.1.4",
            "matchCriteriaId" : "421BBE95-3D5B-421A-9DC1-8B08D019B2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5",
            "versionEndExcluding" : "11.5.8",
            "matchCriteriaId" : "65161064-A4A3-48E5-AC0A-388429FF2F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "190AE881-F7BF-486E-BDAE-197337D70CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1BAA43-4C77-4AC7-8561-93EDE0AED000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp10:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FDF4D8-1822-43E6-AE65-3E4F8743D3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "87C39880-D0E9-4487-9A80-B4D1A999032F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8842A8B6-E470-4536-AB5D-DA1C62A05F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp3a:*:*:*:*:*:*",
            "matchCriteriaId" : "92BF0482-E4FE-454E-84DD-27074097F3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "3705A79B-7903-4055-9CDC-55D60D2AC2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDFCE61-EE04-4901-844D-61B8966C1B81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "53A23363-413D-4785-B8C1-9AC2F96000EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "6E22D884-A33F-41D7-84CB-B6360A39863F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp8:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA56D35-93E9-4659-B180-2FD636A39BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp9:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7F0B02-EA0B-4BD1-AA0C-2A4735221963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7F91EC14-CD9A-42EB-9D81-6025A1D74749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5D098641-0833-4718-BB6A-273E1CA0F887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B451F96-2A58-4758-86E6-F8A030805C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "69CBC98E-BECE-41A4-A0D9-9F3AC1602ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "20386F14-BC32-4174-9F3A-F7406486976A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0DD54B-AB2E-4C56-B348-FF87C174270A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "CC14EF40-FE00-47F9-8A78-98713F903D9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247862",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0010/",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985677",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27555",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-28T18:15:26.250",
      "lastModified" : "2024-11-21T07:53:08.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 is vulnerable to a denial of service when attempting to use ACR client affinity for unfenced DRDA federation wrappers.  IBM X-Force ID:  249187."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1",
            "versionEndExcluding" : "11.1.4",
            "matchCriteriaId" : "421BBE95-3D5B-421A-9DC1-8B08D019B2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5",
            "versionEndExcluding" : "11.5.8",
            "matchCriteriaId" : "65161064-A4A3-48E5-AC0A-388429FF2F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "190AE881-F7BF-486E-BDAE-197337D70CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1BAA43-4C77-4AC7-8561-93EDE0AED000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp10:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FDF4D8-1822-43E6-AE65-3E4F8743D3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "87C39880-D0E9-4487-9A80-B4D1A999032F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8842A8B6-E470-4536-AB5D-DA1C62A05F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp3a:*:*:*:*:*:*",
            "matchCriteriaId" : "92BF0482-E4FE-454E-84DD-27074097F3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "3705A79B-7903-4055-9CDC-55D60D2AC2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDFCE61-EE04-4901-844D-61B8966C1B81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "53A23363-413D-4785-B8C1-9AC2F96000EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "6E22D884-A33F-41D7-84CB-B6360A39863F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp8:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA56D35-93E9-4659-B180-2FD636A39BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp9:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7F0B02-EA0B-4BD1-AA0C-2A4735221963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7F91EC14-CD9A-42EB-9D81-6025A1D74749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5D098641-0833-4718-BB6A-273E1CA0F887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B451F96-2A58-4758-86E6-F8A030805C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "69CBC98E-BECE-41A4-A0D9-9F3AC1602ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "20386F14-BC32-4174-9F3A-F7406486976A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0DD54B-AB2E-4C56-B348-FF87C174270A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "CC14EF40-FE00-47F9-8A78-98713F903D9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249187",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0010/",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985683",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27864",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-28T18:15:26.323",
      "lastModified" : "2024-11-21T07:53:36.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.  IBM X-Force ID:  249327."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F9DA22B-5DD7-4551-AC7A-61949D246F5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_asset_management:7.6.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0279056-1BD2-4CD6-86BA-DDAA6AB53C6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249327",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6983460",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/249327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6983460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29334",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2023-04-28T18:15:26.390",
      "lastModified" : "2025-02-28T20:15:42.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Spoofing Vulnerability"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "112.0.1722.48",
            "matchCriteriaId" : "B3088A0C-1AB8-411A-B9E7-A756BD40E4C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29334",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2383",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T18:15:26.457",
      "lastModified" : "2024-11-21T07:58:30.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. This affects an unknown part of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the argument smtpServer.fromAddr leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227661 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/2",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227661",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227661",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2384",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T18:15:26.530",
      "lastModified" : "2024-11-21T07:58:30.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=dmz_setup.htm of the component Web Management Interface. The manipulation of the argument dhcp.SecDnsIPByte2 leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227662 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/3",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227662",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227662",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2385",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T18:15:26.607",
      "lastModified" : "2024-11-21T07:58:30.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=ike_policies.htm of the component Web Management Interface. The manipulation of the argument IpsecIKEPolicy.IKEPolicyName leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227663. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/5",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227663",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227663",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T18:15:26.680",
      "lastModified" : "2025-01-30T21:15:12.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ebankIT before 7. A Denial-of-Service attack is possible through the GET parameter EStatementsIds located on the /Controls/Generic/EBMK/Handlers/EStatements/DownloadEStatement.ashx endpoint. The GET parameter accepts over 100 comma-separated e-statement IDs without throwing an error. When this many IDs are supplied, the server takes around 60 seconds to respond and successfully generate the expected ZIP archive (during this time period, no other pages load). A threat actor could issue a request to this endpoint with 100+ statement IDs every 30 seconds, potentially resulting in an overload of the server for all users."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ebankit:ebankit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0",
            "matchCriteriaId" : "69D21BC0-ED24-49AD-B393-013DC3B55313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.ebankit.com/blog-press",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/172064/ebankIT-6-Denial-Of-Service.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.ebankit.com/blog-press",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/172064/ebankIT-6-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1966",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-28T19:15:16.573",
      "lastModified" : "2024-11-21T07:40:14.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Instruments with Illumina Universal Copy Service v1.x and\nv2.x contain an unnecessary privileges vulnerability. An unauthenticated\nmalicious actor could upload and execute code remotely at the operating system\nlevel, which could allow an attacker to change settings, configurations,\nsoftware, or access sensitive data on the affected product.\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:iscan_firmware:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5000279-D40B-4526-B911-9E0641736EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:iscan_firmware:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7BE281-02B5-4B87-A7E2-D0E3BB5309CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:iscan:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08732A94-734B-486E-AB2C-A2E2CA3C66AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:iseq_100_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22304CE-8F36-4B51-BAA2-E2C564C04CDF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:iseq_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0136ED72-BF05-404D-910A-DA5B73F69771"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:miniseq_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "matchCriteriaId" : "E4B7C1F7-D185-4C72-B23C-A21103267CD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:miniseq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA69772-E795-4A64-A6A1-0BDD503D263B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:miseq_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "matchCriteriaId" : "CC028805-6ED3-455B-8F4C-95A8B8C5E756"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:miseq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFB0D5A-AF5A-4A84-963F-C6307ADCFF4E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:miseqdx_firmware:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "4.0.1",
            "matchCriteriaId" : "E97A49E3-4B87-4FE5-8FD4-5B36C61A0650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:miseqdx_firmware:4.0:*:*:*:ruo:*:*:*",
            "matchCriteriaId" : "BE1CBD4E-42B1-42C6-9B3F-4F715A5DBF6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:miseqdx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD56D9E-B16C-4ED4-A2E4-E73A3A9A599B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:nextseq_500_firmware:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E34BB5-591C-4889-851E-9A66212C8B8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:nextseq_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7AEA5A-707D-4BF4-9DF6-BDE6E6D97B60"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:nextseq_550_firmware:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D02B5D-7E8A-41CD-BE27-5B012BE5C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:nextseq_550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF742B4D-0FC5-443A-8040-7B0A1B298707"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:nextseq_550dx_firmware:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "93DC004D-271D-4075-9828-E88CD7FFC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:nextseq_550dx_firmware:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.3.3",
            "matchCriteriaId" : "E199B789-BF31-40AC-B15E-31A97257002B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:nextseq_550dx_firmware:4.0:*:*:*:ruo:*:*:*",
            "matchCriteriaId" : "78D581A6-38A5-4F0A-A5CB-B25A9337EE78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:nextseq_550dx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AB9D-7EAA-45F2-A10F-A2D142B20D3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:nextseq_1000_firmware:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94B82675-AA38-4584-82BD-9C376F80EA49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:nextseq_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93589C3C-F577-4C67-962F-166E28911ED2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:nextseq_2000_firmware:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6671E6F8-85D5-4970-98FE-6189C8F98852"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:nextseq_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753D8FDF-5D25-46B9-8E66-30FB8E8A9A87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:novaseq_6000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7",
            "matchCriteriaId" : "3A429D26-AF22-4AC2-AB02-76C72B9B9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:novaseq_6000_firmware:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C702B1-4BAD-4E32-9659-D9F5C3F2F922"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:novaseq_6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D879686-89E7-4152-AEF9-DC8A33FDA4A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-117-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-117-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-1968",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2023-04-28T19:15:16.647",
      "lastModified" : "2024-11-21T07:40:14.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\nInstruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications. \n\n\n\n\n\n\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "ics-cert@hq.dhs.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1327"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:iscan_firmware:4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5000279-D40B-4526-B911-9E0641736EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:iscan_firmware:4.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7BE281-02B5-4B87-A7E2-D0E3BB5309CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:iscan:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08732A94-734B-486E-AB2C-A2E2CA3C66AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:iseq_100_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D22304CE-8F36-4B51-BAA2-E2C564C04CDF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:iseq_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0136ED72-BF05-404D-910A-DA5B73F69771"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:miniseq_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "matchCriteriaId" : "E4B7C1F7-D185-4C72-B23C-A21103267CD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:miniseq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DA69772-E795-4A64-A6A1-0BDD503D263B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:miseq_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "matchCriteriaId" : "CC028805-6ED3-455B-8F4C-95A8B8C5E756"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:miseq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AFB0D5A-AF5A-4A84-963F-C6307ADCFF4E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:miseqdx_firmware:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "4.0.1",
            "matchCriteriaId" : "E97A49E3-4B87-4FE5-8FD4-5B36C61A0650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:miseqdx_firmware:4.0:*:*:*:ruo:*:*:*",
            "matchCriteriaId" : "BE1CBD4E-42B1-42C6-9B3F-4F715A5DBF6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:miseqdx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBD56D9E-B16C-4ED4-A2E4-E73A3A9A599B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:nextseq_500_firmware:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E34BB5-591C-4889-851E-9A66212C8B8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:nextseq_500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C7AEA5A-707D-4BF4-9DF6-BDE6E6D97B60"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:nextseq_550_firmware:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D02B5D-7E8A-41CD-BE27-5B012BE5C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:nextseq_550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF742B4D-0FC5-443A-8040-7B0A1B298707"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:nextseq_550dx_firmware:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "93DC004D-271D-4075-9828-E88CD7FFC403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:nextseq_550dx_firmware:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.3.3",
            "matchCriteriaId" : "E199B789-BF31-40AC-B15E-31A97257002B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:nextseq_550dx_firmware:4.0:*:*:*:ruo:*:*:*",
            "matchCriteriaId" : "78D581A6-38A5-4F0A-A5CB-B25A9337EE78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:nextseq_550dx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3D5AB9D-7EAA-45F2-A10F-A2D142B20D3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:nextseq_1000_firmware:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94B82675-AA38-4584-82BD-9C376F80EA49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:nextseq_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93589C3C-F577-4C67-962F-166E28911ED2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:nextseq_2000_firmware:1.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6671E6F8-85D5-4970-98FE-6189C8F98852"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:nextseq_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753D8FDF-5D25-46B9-8E66-30FB8E8A9A87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:novaseq_6000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.7",
            "matchCriteriaId" : "3A429D26-AF22-4AC2-AB02-76C72B9B9B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:illumina:novaseq_6000_firmware:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C702B1-4BAD-4E32-9659-D9F5C3F2F922"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:illumina:novaseq_6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D879686-89E7-4152-AEF9-DC8A33FDA4A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-117-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://support.illumina.com/downloads/illumina-universal-copy-service-1-0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-117-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26021",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-28T19:15:16.713",
      "lastModified" : "2024-11-21T07:50:36.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service as the server may crash when compiling a specially crafted SQL query using a LIMIT clause.  IBM X-Force ID:  247864."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1",
            "versionEndExcluding" : "11.1.4",
            "matchCriteriaId" : "421BBE95-3D5B-421A-9DC1-8B08D019B2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5",
            "versionEndExcluding" : "11.5.8",
            "matchCriteriaId" : "65161064-A4A3-48E5-AC0A-388429FF2F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7F91EC14-CD9A-42EB-9D81-6025A1D74749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5D098641-0833-4718-BB6A-273E1CA0F887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B451F96-2A58-4758-86E6-F8A030805C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "69CBC98E-BECE-41A4-A0D9-9F3AC1602ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "20386F14-BC32-4174-9F3A-F7406486976A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0DD54B-AB2E-4C56-B348-FF87C174270A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "CC14EF40-FE00-47F9-8A78-98713F903D9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247864",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0010/",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985681",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26022",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-28T19:15:16.787",
      "lastModified" : "2024-11-21T07:50:36.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash when an Out of Memory occurs using the DBMS_OUTPUT module.  IBM X-Force ID:  247868."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1",
            "versionEndExcluding" : "11.1.4",
            "matchCriteriaId" : "421BBE95-3D5B-421A-9DC1-8B08D019B2A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5",
            "versionEndExcluding" : "11.5.8",
            "matchCriteriaId" : "65161064-A4A3-48E5-AC0A-388429FF2F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "190AE881-F7BF-486E-BDAE-197337D70CDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D1BAA43-4C77-4AC7-8561-93EDE0AED000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp10:*:*:*:*:*:*",
            "matchCriteriaId" : "F6FDF4D8-1822-43E6-AE65-3E4F8743D3A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "87C39880-D0E9-4487-9A80-B4D1A999032F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "8842A8B6-E470-4536-AB5D-DA1C62A05F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp3a:*:*:*:*:*:*",
            "matchCriteriaId" : "92BF0482-E4FE-454E-84DD-27074097F3F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "3705A79B-7903-4055-9CDC-55D60D2AC2E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDFCE61-EE04-4901-844D-61B8966C1B81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "53A23363-413D-4785-B8C1-9AC2F96000EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp7:*:*:*:*:*:*",
            "matchCriteriaId" : "6E22D884-A33F-41D7-84CB-B6360A39863F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp8:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA56D35-93E9-4659-B180-2FD636A39BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:10.5:fp9:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7F0B02-EA0B-4BD1-AA0C-2A4735221963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7F91EC14-CD9A-42EB-9D81-6025A1D74749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp1:*:*:*:*:*:*",
            "matchCriteriaId" : "5D098641-0833-4718-BB6A-273E1CA0F887"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp2:*:*:*:*:*:*",
            "matchCriteriaId" : "8B451F96-2A58-4758-86E6-F8A030805C51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp3:*:*:*:*:*:*",
            "matchCriteriaId" : "69CBC98E-BECE-41A4-A0D9-9F3AC1602ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp4:*:*:*:*:*:*",
            "matchCriteriaId" : "20386F14-BC32-4174-9F3A-F7406486976A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp5:*:*:*:*:*:*",
            "matchCriteriaId" : "DD0DD54B-AB2E-4C56-B348-FF87C174270A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:db2:11.1.4:fp6:*:*:*:*:*:*",
            "matchCriteriaId" : "CC14EF40-FE00-47F9-8A78-98713F903D9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247868",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0010/",
        "source" : "psirt@us.ibm.com"
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985669",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/247868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230511-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2386",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T19:15:16.863",
      "lastModified" : "2024-11-21T07:58:30.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the argument smtpServer.toAddr leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227664. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/7",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227664",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227664",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2387",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T19:15:16.923",
      "lastModified" : "2024-11-21T07:58:30.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=dmz_setup.htm of the component Web Management Interface. The manipulation of the argument winsServer1 leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227665 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/4",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227665",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227665",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T19:15:16.993",
      "lastModified" : "2025-01-30T21:15:12.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in ebankIT before 7. Document Object Model based XSS exists within the /Security/Transactions/Transactions.aspx endpoint. Users can supply their own JavaScript within the ctl100$ctl00MainContent$TransactionMainContent$accControl$hdnAccountsArray POST parameter that will be passed to an eval() function and executed upon pressing the continue button."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ebankit:ebankit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0",
            "matchCriteriaId" : "69D21BC0-ED24-49AD-B393-013DC3B55313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.ebankit.com/blog-press",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/172063/ebankIT-6-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.ebankit.com/blog-press",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/172063/ebankIT-6-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26781",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T20:15:13.827",
      "lastModified" : "2025-01-31T17:15:10.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center ->Reader Comments ->Search."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chshcms:mccms:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8CE475-6841-4A82-8021-719D1FA0F5EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chshcms/mccms/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/chshcms/mccms/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26782",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T20:15:13.883",
      "lastModified" : "2025-01-31T17:15:10.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface ->System Configuration->Cache Configuration->Cache security characters."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chshcms:mccms:2.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8979D4F2-6C04-4598-B0B4-F98D0F9E8F1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chshcms/mccms/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/chshcms/mccms/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T20:15:13.930",
      "lastModified" : "2023-11-07T04:09:42.520",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-26813. Reason: This record is a reservation duplicate of CVE-2023-26813. Notes: All CVE users should reference CVE-2023-26813 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T20:15:13.970",
      "lastModified" : "2026-01-30T16:51:29.133",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName parameter to /plugin/dataDictionary/tableView.do."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wang.market:wangmarket:4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB4B8A2D-831B-47C5-930F-162F357F140F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xnx3/wangmarket/issues/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://github.com/xnx3/wangmarket/issues/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2388",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T20:15:14.020",
      "lastModified" : "2024-11-21T07:58:31.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in Netgear SRX5308 up to 4.3.5-3. Affected by this issue is some unknown functionality of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the argument smtpServer.fromAddr leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-227666 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/8",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227666",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227666",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2389",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T20:15:14.090",
      "lastModified" : "2024-11-21T07:58:31.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the argument smtpServer.emailServer leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227667. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/9",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227667",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227667",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2390",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T20:15:14.167",
      "lastModified" : "2024-11-21T07:58:31.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=time_zone.htm of the component Web Management Interface. The manipulation of the argument ntp.server1 leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227668. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/10",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227668",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227668",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29057",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2023-04-28T21:15:08.673",
      "lastModified" : "2024-11-21T07:56:28.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "46A578A7-5436-4B92-9860-75F637C2F12B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BC05D-7619-41CC-88F7-90EBC242A15F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "6458E729-5B4D-4BF8-AC84-A73FA849A76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330331CB-6EF1-4263-B579-11E990C85F93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "D9F1172B-8113-4B8C-8455-86B10115E94C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBCFFB6F-C269-425B-AD66-9000BBC5DAE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx_enclosure_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "BB1D00C0-21CC-430E-822C-4E13B65D0880"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx_enclosure:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C22D09-B948-4EEE-9CEA-DAD0D8BE370E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1021_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "2FE708B8-65A8-497D-93EF-322579CE3651"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536A78A4-9C58-400F-AFBB-73186A0D3FDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "EA6FC032-324D-4FDC-8C74-D9CF82797334"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72B2526-8BD9-49FD-BDCF-B654BCEAC8AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "E98CCEAA-3A3C-4087-93B1-6DE7995113A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFD8C5A-D9E0-4EFF-92A3-17A6DBE7D155"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "142D1A60-2F5D-457B-92B7-59595F034765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD11357-E276-44E5-B825-F948D5A757CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "CD6712D8-253F-4952-AB21-BBFA54BF822C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1520-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DD614-F500-4FFB-8FD4-D2B284FE5E55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "688CFB0E-2095-4CE2-8CA4-E8BD32578F91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1521-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33A804F-C94C-4A6C-AA84-957834680652"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "0659AED4-D4E5-4FB4-8B31-550AF9F88893"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2320-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECFCE59-8456-47A3-8A8E-989813E37674"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "15BD47D1-90E7-4FC8-879D-E0EA9F72459A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E515C4-D2F2-4A71-9A9C-70A80477352A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "05CA0D28-CD71-4BDA-82B5-4528E68AEB8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:2.93_afbt30p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A825FF4-4686-4059-B291-64FB5AEBB866"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6D9490-0456-4C77-867C-21339F52D19E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "B915F44E-73A7-4DAF-9B2C-FEFACB62FB13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8CBCB0-7152-4FD0-A50E-280C42BB4B5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "4522BB27-A943-4188-B1C4-FA3CC0D2987C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2720-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2574C115-7511-422C-9383-D09B021B4946"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "8363826A-2858-46AA-98E5-5C89EA581CFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D3EBE9-34C1-45CA-A800-B313110409DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "F734FE11-80B5-494F-BE28-8FB4AA00963A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E6A2F7-7EC0-46E1-A973-2172B076E883"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "3D9FC871-32D4-400C-A1A3-BEB5D2C08204"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A30DA25-C17B-49A4-A5B5-21BC45C322C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "8EFC6D85-7FCE-4D68-84A9-3F155F0C8244"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66A9798-71F6-4884-AFC7-A695A713576A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "F9E5F98C-2B3E-4434-91BE-9CC19832A527"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66A9798-71F6-4884-AFC7-A695A713576A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3375_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "9D8B787A-EF21-4EF8-A75E-E187C0F18E2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8126219-A07C-42A6-9553-B6AE499DB6BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "BEE6A10B-6BCA-4D66-928B-38CF142EBF19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3376:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D7A545-BE29-4F0B-AC77-8E6DE955CA5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "32D2C9D3-D5AE-4DA4-AFF1-6F0FAC642F51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D354C3-0183-42D9-97D0-C9888B023195"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "857D7014-C3E6-478C-BF9C-82169315B351"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3521-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0DDCC8-46B7-43FA-8A4A-BCE8AB7F8480"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "D1E8FF43-8C7A-4354-9721-FB977104ECF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C38326D-97DD-4A6B-985F-968570528C19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "27FBBDA1-52E7-4B14-AFA5-9263739232C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCDE6B9-6505-4E44-A444-C4C3A054B5F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "4DBC989B-CB17-4BCC-9FDE-AE6C550698C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9FDCC0-F45C-4AA1-BB11-0761A25BF16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "9C19F289-5F84-4395-BEF1-F5DA7AED2DB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB95DEC-D622-4AD7-AC69-077A94BD752C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "D0777AEE-1F2E-40B4-9AA6-4782AAE940A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924C1B4B-6E97-4942-8000-BB59860913EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "4239FD66-7A2E-40E2-B953-1EC32C208024"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5521-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5788FFBD-69B4-4FB6-A2D2-4C6BA6CCE769"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "A1B8C4D2-C786-49B4-9B13-6975542D7504"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAEAB68-0F17-45BD-B0B9-0C5FD5BBE2AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "DB1BAE65-812F-4B21-A4A0-060243B45B72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16776C5F-CCAF-4F22-B570-FE49A0B73FF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "94311D5A-15B6-43A9-9030-092421C591BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F350D6FE-7BE1-46C9-B1A6-4EE0AF8BCB55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "6458E729-5B4D-4BF8-AC84-A73FA849A76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330331CB-6EF1-4263-B579-11E990C85F93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5154CD2F-AD5C-45D8-BDDF-3E57499A62B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD32840-AF55-49C1-A8B4-A4D3B0F85B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "E6A3E984-CE12-4694-BE64-FAC6478C0F38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD32840-AF55-49C1-A8B4-A4D3B0F85B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "F611877D-BE44-4937-8341-A00EEBD4E870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2540A2-1462-42F7-949C-9881544DE684"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7821_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "1D2C5786-2B7B-4F04-AFC2-51C6EF62DA7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E153D62-9443-4F52-BA47-5C2704E05BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx1020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5BE64E31-8CD0-431E-BEDC-F23A31DBA009"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx1020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0E5EF6-2664-4DEC-BD90-BF3128DC9DA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3330-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "68A20D8C-90CC-436E-8125-C471C5C41261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3330-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308EAB87-EF05-487F-B5AA-4D7E58937BB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "813A389B-F55B-4B16-A67D-AC565228AE4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3330-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1387DB10-2478-41E8-937A-98012A5FAB6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3331-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "BA3EBCAA-0456-4DC8-834F-FDFCB3A41240"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3331-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2EB352F-AFEB-433D-84A3-5C849B658647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3331-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "FC2F4A4F-C30B-4322-8E54-159E83027FD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3331-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC19B72-13E8-4F13-89AC-2112FC6EE809"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3530_f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "1947D638-A324-483D-BC37-5AB3B345935B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3530_f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55863D2-D2A9-4BFC-9560-2E0DF99388C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3530-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "747BF99D-6B3A-4954-B99E-107E55F828A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3530-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E740BCC-B3FF-4A6E-B9CD-0D13FAE1D9FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3531_h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "65611366-BA40-4064-B617-9320BA705C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3531_h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF566DC8-C3A9-49AF-8B9C-C4FB8D94A7F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3531-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "89CD08E6-5746-495B-A9E1-DF8F7A7BE347"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3531-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F87CEA-8200-4345-9804-693D5B8F98A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx1021_on_se350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "6B7FF257-18D2-4543-8C5A-E37116DC28FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx1021_on_se350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA103E0-C6DC-4D57-8538-6AA71E6CEF99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_1se_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "C23661E8-A862-4ACC-9B71-07C0DEC1BBB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_1se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBC1C9E-C548-4881-817B-109943BEA02F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_2u4n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E93D0BA3-1BA9-456E-856E-C33E247C5504"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_2u4n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5DD2F7-6D91-42A5-827D-9A44F319CB01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_4u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "CB958079-C9EC-45DE-B00B-46415BA1622E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_4u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D2593D-E1D1-4C4F-884A-5E877E92C715"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx1320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "6B6F3B7E-020F-434E-B783-8F99AE03A321"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11E00E8-4234-401D-8A0E-6EC1A15F44BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx2320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "AFE27D87-68EC-430A-81D4-26CD3FF32C59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx2320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7500A0-B95E-4E16-B532-28C139C94AF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "2CE03063-DDCF-41C3-8E87-AF633EC1EF5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx2330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDB5BE9-76C0-4708-805E-6DA37E91648F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "71B491BF-9E31-4F61-99CE-1CC56674307C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8B3E93-970D-4B49-B5A6-6BFAC45BAAC4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "E3A5670D-01D2-470A-8FB7-7C671262EA4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F449A0D-B2EA-4747-BA7E-88CD4371220C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "BB7F61E0-643F-4DB1-9443-64419C6E24A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72422C47-0027-4B4E-9C82-78FE8A8A6D75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "C3B6116B-60E4-4812-AE59-3077C6F2DC54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3530-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E73BA833-D02E-4274-ABF7-8F1D41815AB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "D4B2AF5E-FBA2-4849-A8AF-DABF740EF58F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE87366A-7CDB-46B7-AB89-7839D41B7E25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx5520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "CCB8C97C-EA12-43B8-9045-4880407C1DC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704A1043-7626-412C-8666-9088B3AA1147"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "399D2889-4FB6-4905-880D-7CB54FF3026B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx5530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81BDD8F1-B6B4-48D9-854F-9BFE19CD2B94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7320_n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "8521B23A-3D81-44EE-822D-29CD56DB1B72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7320_n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435794D6-7773-4D93-96E2-7269EB863A04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "F5045D7C-7A21-46D3-B134-D98EC417C0EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166A619E-C222-4169-8A68-8E718BE27355"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "047ECA24-3DF5-40D3-ABC4-1ED5FF7B71E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25483F5-F222-42AF-ACA4-580CD2965C55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7520_n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "5657C581-5228-4682-B7DD-CD80E3FC257A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7520_n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C923CF1-EB97-431F-9D85-0CB5C921A040"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "DE4798E2-B3C8-4403-B17C-4E625DC44A37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD5438A-321C-4C7E-9170-C80DA27F9271"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "CC0BBC40-968C-42C2-9E04-0815105D8042"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6DC1F2D-AA5A-49D4-A0FD-491B1938406F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "F109BF72-D7BB-461A-AA30-E76935BA609D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E690D37-4DFD-477A-B159-C31D50215C90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkedge_se450__firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.60_usx324o",
            "matchCriteriaId" : "B86C0C5D-4B78-4D27-A05E-8BD86A70ED5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkedge_se450_:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F49BD4-9119-4557-826A-7281C23F484D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p920_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "9EA34703-1E2C-4176-8709-605E4F2A02DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D47FCAA7-B33F-4F00-85BA-AA8ED4790572"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "B991E62F-B51F-4099-898A-77163DECC89D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2588DA2E-6E58-4FA2-9AA6-FC669C042197"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "445A9ABC-DE1D-44A6-9923-AB40FD0805FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "123E924B-D00B-4B9F-B890-1EF670D16F45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "F361E67B-3AF7-45A4-9706-89FC6E334FFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1FF5D0-CC08-42B0-9798-55ED911B3EF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "DC2DA420-0751-4277-8A1F-5B91F28E12A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4729C86-050B-4C6B-96F2-7C60AC3086B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "B7366A53-32BD-4E02-9279-7753A450341B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650-n_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E11CA6-2B14-4F2F-A6D3-A3F3A0199FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_se350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "8F3136AC-3E8C-4656-8F39-297318ED0A92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_se350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4B877C-8D19-4AD2-948D-ADBD9B1BEEED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "7432CA66-F205-468A-907A-38D1D682A52A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB64709-93BA-43D8-A1DB-4CE405291430"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "0D45F7DC-29BD-4B69-AA74-49C02932176B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn550_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2728329-AC98-4AB6-B448-C1B203027593"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "366829A3-C06E-487D-8A19-B4E0BA89A1D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB0C393-2CB4-485F-93E2-2F28B19F9325"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E5071012-4ACA-49B4-B2E4-CF58EFCF3F3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6334030-07E4-45F4-A233-4A37F77FC573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr158_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "5DA538D2-D68F-4A81-9542-D16D9B9CDDBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr158:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94182EE-10FE-4506-BDE0-06F4140923FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "B040A2F8-14A4-4771-825C-4DFE8373BFC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B52AC1-714E-4217-8599-80D99E0D33B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr250_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "2DEFAAB8-2DA6-43FF-BC68-56B55896DEDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr250_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071805DB-3A2D-4280-8774-08374DF4CD93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr258_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "3AB2F675-A323-4FD5-AD9E-5043FC7C54CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr258:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB19D273-4975-4957-AE94-117B607CD746"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "3F7C1851-4290-4F17-9AAD-2F7405CEDC0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr258_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466F8F21-C0F8-45CF-9C02-57FBE489645F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "A60174DF-78B5-4386-A6AC-93056F9C8A4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C6628A-8A99-4841-A7C5-0445A03C638D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "335F4367-870F-46FE-B386-99963D299D02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10850BF-A7EA-4B84-B2EF-66DCCC301514"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr570_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "796B8297-3696-47B7-AFF3-208673BEC73D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A7C5BE3-5429-46B0-B0B5-C86A9B6376A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr590_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "549082C5-9A49-47A7-B8F5-A021205189C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DC615C-A88A-4C45-892F-77C5E84104E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr630_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "E9B558D7-23FD-4717-B125-9334740E89C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F10C8D-C9C7-4FAD-980D-7A602C8BE81D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "9FD2C32D-CE92-4267-B721-4E6BA3BCEBEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF029E34-9819-404D-BEBC-F540590EE8FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr645_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "96A0115D-E62B-45A5-9BEE-62A9596D315D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE27586B-1CC9-42A3-B763-93972E204A6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "C7D7FA8D-4AB6-45C1-A6D0-130F87B14DB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr645_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3665C4-48C2-4050-916C-AEA0FAF30784"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "1C5D57E5-C539-4D7B-A32A-E54E7FF5B408"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C2B5BB-6E1F-4E01-AAE8-A8239AB8945E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5A75C9E8-7B9F-4343-B743-BD24A6F72C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D85AE20-A6A9-48E4-8CAD-537B87730867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr665_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "37F155A4-AB0C-443E-B8ED-45267CF704ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr665:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE69184-CA94-4A27-AFF2-3B1B81D25CBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "33898282-91C7-4365-86FF-D71336250153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr665_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C2705-D987-47B7-AA38-8222803CD83A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr670_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "70EFB884-36E2-4CDA-8836-65EEFB531CA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1664DE-A6AE-4365-A652-80CEFECB62DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "C7A54480-EB88-4DE9-8C30-417BCD8D06FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr670_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E97E5B4D-0E6F-49B0-8466-54A818517965"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E4D79679-9E6C-453B-B4F8-195D0AE62A5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19771143-D5F1-4F2F-AB83-09913894681E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "51B4C248-04B6-4B4F-A0CB-021C43DFB933"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4710B7-E7EF-47A2-9585-8B6586FE036C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "ADF44750-740F-44C3-82A7-1A8908A571AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A833BF2-DD7B-4A09-AAB8-14C0C7C5DE10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "78DE24D8-BE6C-4776-85C6-B30EA84F1EDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF08144-ECCB-477B-A934-E4578522BFEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "616885E2-3714-4C4F-B881-441DAA40BF4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr860_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D22E89-BE6A-4664-8E5B-7DB06DF9B553"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr950_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "AD750E19-509E-4C9E-BDE0-D0CA8EF1F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B0407D-D603-48AE-9A42-F4C68056E19D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "9FDBF980-D496-44AC-B7AF-E1FBD0BFEC9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF2350D-34B1-44DB-8E4A-6F29B37D96CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "DB77AEB0-D4A9-4987-B3A0-8F32FB38935A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st250_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A83C7C5-8716-4C2F-A940-8F594DB106A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st258_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "04A90DDE-C19D-47B2-B3C4-A76D82ED39E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st258:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089F97B1-FEDE-4A5D-91D3-0517E8D39174"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "FE973C76-76AA-4DC9-8155-0497E8BD8C5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st258_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BF1FFA-1627-4F21-A9BC-8D3399681DBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "13E3631D-714F-493E-8C1F-059F17A776EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B19107-5B45-4E45-8B34-90B5A1FF3962"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "AF3840B6-84D3-493A-B635-EF9E937BC8E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "968449F6-73F2-42C9-A3F4-3116408970F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "ABC96406-9E8F-497F-BA52-E1E0777F9189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st658_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F32794E-362A-4A0B-8B13-95F42AA470CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-118321",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-118321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29058",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2023-04-28T21:15:08.750",
      "lastModified" : "2024-11-21T07:56:28.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the user trespass message through the XCC CLI. There is no exposure if SSH is disabled or if there are no users assigned optional read-only permissions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "46A578A7-5436-4B92-9860-75F637C2F12B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BC05D-7619-41CC-88F7-90EBC242A15F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "6458E729-5B4D-4BF8-AC84-A73FA849A76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330331CB-6EF1-4263-B579-11E990C85F93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "D9F1172B-8113-4B8C-8455-86B10115E94C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBCFFB6F-C269-425B-AD66-9000BBC5DAE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx_enclosure_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "BB1D00C0-21CC-430E-822C-4E13B65D0880"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx_enclosure:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C22D09-B948-4EEE-9CEA-DAD0D8BE370E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1021_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "2FE708B8-65A8-497D-93EF-322579CE3651"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536A78A4-9C58-400F-AFBB-73186A0D3FDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "EA6FC032-324D-4FDC-8C74-D9CF82797334"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72B2526-8BD9-49FD-BDCF-B654BCEAC8AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "E98CCEAA-3A3C-4087-93B1-6DE7995113A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFD8C5A-D9E0-4EFF-92A3-17A6DBE7D155"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "142D1A60-2F5D-457B-92B7-59595F034765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD11357-E276-44E5-B825-F948D5A757CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "CD6712D8-253F-4952-AB21-BBFA54BF822C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1520-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DD614-F500-4FFB-8FD4-D2B284FE5E55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "688CFB0E-2095-4CE2-8CA4-E8BD32578F91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1521-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33A804F-C94C-4A6C-AA84-957834680652"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "0659AED4-D4E5-4FB4-8B31-550AF9F88893"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2320-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECFCE59-8456-47A3-8A8E-989813E37674"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "15BD47D1-90E7-4FC8-879D-E0EA9F72459A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E515C4-D2F2-4A71-9A9C-70A80477352A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "05CA0D28-CD71-4BDA-82B5-4528E68AEB8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:2.93_afbt30p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A825FF4-4686-4059-B291-64FB5AEBB866"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6D9490-0456-4C77-867C-21339F52D19E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "B915F44E-73A7-4DAF-9B2C-FEFACB62FB13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8CBCB0-7152-4FD0-A50E-280C42BB4B5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "4522BB27-A943-4188-B1C4-FA3CC0D2987C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2720-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2574C115-7511-422C-9383-D09B021B4946"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "8363826A-2858-46AA-98E5-5C89EA581CFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D3EBE9-34C1-45CA-A800-B313110409DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "F734FE11-80B5-494F-BE28-8FB4AA00963A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E6A2F7-7EC0-46E1-A973-2172B076E883"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "3D9FC871-32D4-400C-A1A3-BEB5D2C08204"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A30DA25-C17B-49A4-A5B5-21BC45C322C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "8EFC6D85-7FCE-4D68-84A9-3F155F0C8244"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66A9798-71F6-4884-AFC7-A695A713576A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "F9E5F98C-2B3E-4434-91BE-9CC19832A527"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66A9798-71F6-4884-AFC7-A695A713576A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3375_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "9D8B787A-EF21-4EF8-A75E-E187C0F18E2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8126219-A07C-42A6-9553-B6AE499DB6BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "BEE6A10B-6BCA-4D66-928B-38CF142EBF19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3376:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D7A545-BE29-4F0B-AC77-8E6DE955CA5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "32D2C9D3-D5AE-4DA4-AFF1-6F0FAC642F51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D354C3-0183-42D9-97D0-C9888B023195"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "857D7014-C3E6-478C-BF9C-82169315B351"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3521-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0DDCC8-46B7-43FA-8A4A-BCE8AB7F8480"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "D1E8FF43-8C7A-4354-9721-FB977104ECF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C38326D-97DD-4A6B-985F-968570528C19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "27FBBDA1-52E7-4B14-AFA5-9263739232C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCDE6B9-6505-4E44-A444-C4C3A054B5F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "4DBC989B-CB17-4BCC-9FDE-AE6C550698C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9FDCC0-F45C-4AA1-BB11-0761A25BF16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "9C19F289-5F84-4395-BEF1-F5DA7AED2DB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB95DEC-D622-4AD7-AC69-077A94BD752C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "D0777AEE-1F2E-40B4-9AA6-4782AAE940A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924C1B4B-6E97-4942-8000-BB59860913EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "4239FD66-7A2E-40E2-B953-1EC32C208024"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5521-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5788FFBD-69B4-4FB6-A2D2-4C6BA6CCE769"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "A1B8C4D2-C786-49B4-9B13-6975542D7504"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAEAB68-0F17-45BD-B0B9-0C5FD5BBE2AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "DB1BAE65-812F-4B21-A4A0-060243B45B72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16776C5F-CCAF-4F22-B570-FE49A0B73FF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "94311D5A-15B6-43A9-9030-092421C591BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F350D6FE-7BE1-46C9-B1A6-4EE0AF8BCB55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "6458E729-5B4D-4BF8-AC84-A73FA849A76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330331CB-6EF1-4263-B579-11E990C85F93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5154CD2F-AD5C-45D8-BDDF-3E57499A62B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD32840-AF55-49C1-A8B4-A4D3B0F85B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "E6A3E984-CE12-4694-BE64-FAC6478C0F38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD32840-AF55-49C1-A8B4-A4D3B0F85B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "F611877D-BE44-4937-8341-A00EEBD4E870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2540A2-1462-42F7-949C-9881544DE684"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7821_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "1D2C5786-2B7B-4F04-AFC2-51C6EF62DA7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E153D62-9443-4F52-BA47-5C2704E05BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx1020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5BE64E31-8CD0-431E-BEDC-F23A31DBA009"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx1020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0E5EF6-2664-4DEC-BD90-BF3128DC9DA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3330-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "68A20D8C-90CC-436E-8125-C471C5C41261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3330-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308EAB87-EF05-487F-B5AA-4D7E58937BB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "813A389B-F55B-4B16-A67D-AC565228AE4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3330-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1387DB10-2478-41E8-937A-98012A5FAB6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3331-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "BA3EBCAA-0456-4DC8-834F-FDFCB3A41240"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3331-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2EB352F-AFEB-433D-84A3-5C849B658647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3331-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "FC2F4A4F-C30B-4322-8E54-159E83027FD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3331-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC19B72-13E8-4F13-89AC-2112FC6EE809"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3530_f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "1947D638-A324-483D-BC37-5AB3B345935B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3530_f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55863D2-D2A9-4BFC-9560-2E0DF99388C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3530-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "747BF99D-6B3A-4954-B99E-107E55F828A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3530-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E740BCC-B3FF-4A6E-B9CD-0D13FAE1D9FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3531_h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "65611366-BA40-4064-B617-9320BA705C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3531_h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF566DC8-C3A9-49AF-8B9C-C4FB8D94A7F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3531-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "89CD08E6-5746-495B-A9E1-DF8F7A7BE347"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3531-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F87CEA-8200-4345-9804-693D5B8F98A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx1021_on_se350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "6B7FF257-18D2-4543-8C5A-E37116DC28FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx1021_on_se350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA103E0-C6DC-4D57-8538-6AA71E6CEF99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_1se_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "C23661E8-A862-4ACC-9B71-07C0DEC1BBB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_1se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBC1C9E-C548-4881-817B-109943BEA02F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_2u4n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E93D0BA3-1BA9-456E-856E-C33E247C5504"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_2u4n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5DD2F7-6D91-42A5-827D-9A44F319CB01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_4u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "CB958079-C9EC-45DE-B00B-46415BA1622E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_4u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D2593D-E1D1-4C4F-884A-5E877E92C715"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx1320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "6B6F3B7E-020F-434E-B783-8F99AE03A321"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11E00E8-4234-401D-8A0E-6EC1A15F44BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx2320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "AFE27D87-68EC-430A-81D4-26CD3FF32C59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx2320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7500A0-B95E-4E16-B532-28C139C94AF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "2CE03063-DDCF-41C3-8E87-AF633EC1EF5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx2330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDB5BE9-76C0-4708-805E-6DA37E91648F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "71B491BF-9E31-4F61-99CE-1CC56674307C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8B3E93-970D-4B49-B5A6-6BFAC45BAAC4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "E3A5670D-01D2-470A-8FB7-7C671262EA4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F449A0D-B2EA-4747-BA7E-88CD4371220C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "BB7F61E0-643F-4DB1-9443-64419C6E24A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72422C47-0027-4B4E-9C82-78FE8A8A6D75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "C3B6116B-60E4-4812-AE59-3077C6F2DC54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3530-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E73BA833-D02E-4274-ABF7-8F1D41815AB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "D4B2AF5E-FBA2-4849-A8AF-DABF740EF58F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE87366A-7CDB-46B7-AB89-7839D41B7E25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx5520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "CCB8C97C-EA12-43B8-9045-4880407C1DC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704A1043-7626-412C-8666-9088B3AA1147"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "399D2889-4FB6-4905-880D-7CB54FF3026B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx5530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81BDD8F1-B6B4-48D9-854F-9BFE19CD2B94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7320_n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "8521B23A-3D81-44EE-822D-29CD56DB1B72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7320_n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435794D6-7773-4D93-96E2-7269EB863A04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "F5045D7C-7A21-46D3-B134-D98EC417C0EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166A619E-C222-4169-8A68-8E718BE27355"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "047ECA24-3DF5-40D3-ABC4-1ED5FF7B71E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25483F5-F222-42AF-ACA4-580CD2965C55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7520_n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "5657C581-5228-4682-B7DD-CD80E3FC257A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7520_n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C923CF1-EB97-431F-9D85-0CB5C921A040"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "DE4798E2-B3C8-4403-B17C-4E625DC44A37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD5438A-321C-4C7E-9170-C80DA27F9271"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "CC0BBC40-968C-42C2-9E04-0815105D8042"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6DC1F2D-AA5A-49D4-A0FD-491B1938406F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "F109BF72-D7BB-461A-AA30-E76935BA609D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E690D37-4DFD-477A-B159-C31D50215C90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkedge_se450__firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.60_usx324o",
            "matchCriteriaId" : "B86C0C5D-4B78-4D27-A05E-8BD86A70ED5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkedge_se450_:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F49BD4-9119-4557-826A-7281C23F484D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p920_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "9EA34703-1E2C-4176-8709-605E4F2A02DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D47FCAA7-B33F-4F00-85BA-AA8ED4790572"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "B991E62F-B51F-4099-898A-77163DECC89D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2588DA2E-6E58-4FA2-9AA6-FC669C042197"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "445A9ABC-DE1D-44A6-9923-AB40FD0805FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "123E924B-D00B-4B9F-B890-1EF670D16F45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "F361E67B-3AF7-45A4-9706-89FC6E334FFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1FF5D0-CC08-42B0-9798-55ED911B3EF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "DC2DA420-0751-4277-8A1F-5B91F28E12A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4729C86-050B-4C6B-96F2-7C60AC3086B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "B7366A53-32BD-4E02-9279-7753A450341B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650-n_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E11CA6-2B14-4F2F-A6D3-A3F3A0199FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_se350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "8F3136AC-3E8C-4656-8F39-297318ED0A92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_se350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4B877C-8D19-4AD2-948D-ADBD9B1BEEED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "7432CA66-F205-468A-907A-38D1D682A52A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB64709-93BA-43D8-A1DB-4CE405291430"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "0D45F7DC-29BD-4B69-AA74-49C02932176B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn550_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2728329-AC98-4AB6-B448-C1B203027593"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "366829A3-C06E-487D-8A19-B4E0BA89A1D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB0C393-2CB4-485F-93E2-2F28B19F9325"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E5071012-4ACA-49B4-B2E4-CF58EFCF3F3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6334030-07E4-45F4-A233-4A37F77FC573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr158_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "5DA538D2-D68F-4A81-9542-D16D9B9CDDBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr158:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94182EE-10FE-4506-BDE0-06F4140923FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "B040A2F8-14A4-4771-825C-4DFE8373BFC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B52AC1-714E-4217-8599-80D99E0D33B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr250_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "2DEFAAB8-2DA6-43FF-BC68-56B55896DEDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr250_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071805DB-3A2D-4280-8774-08374DF4CD93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr258_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "3AB2F675-A323-4FD5-AD9E-5043FC7C54CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr258:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB19D273-4975-4957-AE94-117B607CD746"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "3F7C1851-4290-4F17-9AAD-2F7405CEDC0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr258_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466F8F21-C0F8-45CF-9C02-57FBE489645F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "A60174DF-78B5-4386-A6AC-93056F9C8A4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C6628A-8A99-4841-A7C5-0445A03C638D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "335F4367-870F-46FE-B386-99963D299D02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10850BF-A7EA-4B84-B2EF-66DCCC301514"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr570_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "796B8297-3696-47B7-AFF3-208673BEC73D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A7C5BE3-5429-46B0-B0B5-C86A9B6376A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr590_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "549082C5-9A49-47A7-B8F5-A021205189C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DC615C-A88A-4C45-892F-77C5E84104E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr630_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "E9B558D7-23FD-4717-B125-9334740E89C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F10C8D-C9C7-4FAD-980D-7A602C8BE81D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "9FD2C32D-CE92-4267-B721-4E6BA3BCEBEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF029E34-9819-404D-BEBC-F540590EE8FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr645_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "96A0115D-E62B-45A5-9BEE-62A9596D315D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE27586B-1CC9-42A3-B763-93972E204A6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "C7D7FA8D-4AB6-45C1-A6D0-130F87B14DB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr645_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3665C4-48C2-4050-916C-AEA0FAF30784"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "1C5D57E5-C539-4D7B-A32A-E54E7FF5B408"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C2B5BB-6E1F-4E01-AAE8-A8239AB8945E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5A75C9E8-7B9F-4343-B743-BD24A6F72C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D85AE20-A6A9-48E4-8CAD-537B87730867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr665_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "37F155A4-AB0C-443E-B8ED-45267CF704ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr665:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE69184-CA94-4A27-AFF2-3B1B81D25CBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "33898282-91C7-4365-86FF-D71336250153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr665_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C2705-D987-47B7-AA38-8222803CD83A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr670_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "70EFB884-36E2-4CDA-8836-65EEFB531CA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1664DE-A6AE-4365-A652-80CEFECB62DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "C7A54480-EB88-4DE9-8C30-417BCD8D06FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr670_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E97E5B4D-0E6F-49B0-8466-54A818517965"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E4D79679-9E6C-453B-B4F8-195D0AE62A5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19771143-D5F1-4F2F-AB83-09913894681E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "51B4C248-04B6-4B4F-A0CB-021C43DFB933"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4710B7-E7EF-47A2-9585-8B6586FE036C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "ADF44750-740F-44C3-82A7-1A8908A571AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A833BF2-DD7B-4A09-AAB8-14C0C7C5DE10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "78DE24D8-BE6C-4776-85C6-B30EA84F1EDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF08144-ECCB-477B-A934-E4578522BFEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "616885E2-3714-4C4F-B881-441DAA40BF4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr860_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D22E89-BE6A-4664-8E5B-7DB06DF9B553"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr950_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "AD750E19-509E-4C9E-BDE0-D0CA8EF1F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B0407D-D603-48AE-9A42-F4C68056E19D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "9FDBF980-D496-44AC-B7AF-E1FBD0BFEC9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF2350D-34B1-44DB-8E4A-6F29B37D96CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "DB77AEB0-D4A9-4987-B3A0-8F32FB38935A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st250_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A83C7C5-8716-4C2F-A940-8F594DB106A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st258_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "04A90DDE-C19D-47B2-B3C4-A76D82ED39E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st258:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089F97B1-FEDE-4A5D-91D3-0517E8D39174"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "FE973C76-76AA-4DC9-8155-0497E8BD8C5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st258_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BF1FFA-1627-4F21-A9BC-8D3399681DBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "13E3631D-714F-493E-8C1F-059F17A776EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B19107-5B45-4E45-8B34-90B5A1FF3962"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "AF3840B6-84D3-493A-B635-EF9E937BC8E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "968449F6-73F2-42C9-A3F4-3116408970F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "ABC96406-9E8F-497F-BA52-E1E0777F9189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st658_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F32794E-362A-4A0B-8B13-95F42AA470CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-118321",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-118321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2391",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T21:15:08.827",
      "lastModified" : "2024-11-21T07:58:31.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=time_zone.htm of the component Web Management Interface. The manipulation of the argument ntp.server2 leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227669 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/11",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227669",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227669",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2392",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T21:15:08.900",
      "lastModified" : "2024-11-21T07:58:31.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. Affected is an unknown function of the file scgi-bin/platform.cgi?page=time_zone.htm of the component Web Management Interface. The manipulation of the argument ManualDate.minutes leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-227670 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/12",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227670",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227670",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2393",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T21:15:08.963",
      "lastModified" : "2024-11-21T07:58:31.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=dmz_setup.htm of the component Web Management Interface. The manipulation of the argument ConfigPort.LogicalIfName leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227671. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/13",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227671",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227671",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2394",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T21:15:09.020",
      "lastModified" : "2024-11-21T07:58:31.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation of the argument wanName leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227672. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/14",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227672",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227672",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T21:15:09.083",
      "lastModified" : "2025-01-30T21:15:12.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the wl_ssid parameter at /boafrm/formHomeWlanSetup."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aigital:wireless-n_repeater_mini_router_firmware:0.131229:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98062FCB-6507-4EDF-8445-6331EB735BBC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aigital:wireless-n_repeater_mini_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F57200-B5E5-482B-908F-B715109893B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/172057/Aigital-Wireless-N-Repeater-Mini_Router.0.131229-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/172057/Aigital-Wireless-N-Repeater-Mini_Router.0.131229-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30857",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-28T21:15:09.127",
      "lastModified" : "2024-11-21T08:00:59.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "@aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version `0.6.1`, there is a possible prototype pollution issue for the `MetadataRecord`, when merged with a base class' metadata object, in `meta` decorator from the `@aedart/support` package. The likelihood of exploitation is questionable, given that a class's metadata can only be set or altered when the class is decorated via `meta()`. Furthermore, object(s) of sensitive nature would have to be stored as metadata, before this can lead to a security impact. The issue has been patched in version `0.6.1`.\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aedart:ion:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.6.1",
            "matchCriteriaId" : "80FB7841-5B3F-48A1-9CD7-5B4CDF9723A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aedart/ion/commit/c3e2ee08710d4164d796ecb66ed291335dae9291",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/aedart/ion/security/advisories/GHSA-wwxh-74fx-33c6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/aedart/ion/commit/c3e2ee08710d4164d796ecb66ed291335dae9291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/aedart/ion/security/advisories/GHSA-wwxh-74fx-33c6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30858",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-04-28T21:15:09.187",
      "lastModified" : "2024-11-21T08:00:59.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Denosaurs emoji package provides emojis for dinosaurs. Starting in version 0.1.0 and prior to version 0.3.0, the reTrimSpace regex has 2nd degree polynomial inefficiency, leading to a delayed response given a big payload. The issue has been patched in 0.3.0. As a workaround, avoid using the `replace`, `unemojify`, or `strip` functions."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denosaurs:emoji:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.1.0",
            "versionEndExcluding" : "0.3.0",
            "matchCriteriaId" : "957125B8-E12A-4B89-B1C5-7A69686242CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/denosaurs/emoji/pull/11",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/denosaurs/emoji/security/advisories/GHSA-w2xx-hjhp-gx5v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/444f2255-5085-466f-ba0e-5549fa8846a3/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/denosaurs/emoji/pull/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/denosaurs/emoji/security/advisories/GHSA-w2xx-hjhp-gx5v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/444f2255-5085-466f-ba0e-5549fa8846a3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31444",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T21:15:09.257",
      "lastModified" : "2025-01-31T16:15:29.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Talend Studio before 7.3.1-R2022-10 and 8.x before 8.0.1-R2022-09, microservices allow unauthenticated access to the Jolokia endpoint of the microservice. This allows for remote access to the JVM via the Jolokia JMX-HTTP bridge."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:talend:studio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3.1-r2022-10",
            "matchCriteriaId" : "F72A640D-4D85-41AB-8B18-7ACF88685042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:talend:studio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.1-r2022-09",
            "matchCriteriaId" : "7E52295B-76DE-4DC0-8953-995FE9AE5C11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talend.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.talend.com/security/incident-response/#CVE-2023-31444",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://talend.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.talend.com/security/incident-response/#CVE-2023-31444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31470",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T21:15:09.307",
      "lastModified" : "2025-01-31T16:15:29.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain function in the dns.c file, via a crafted DNS request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pymumu:smartdns:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "41",
            "matchCriteriaId" : "A5C0D703-DE83-4A39-B60E-C59EB738596A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pymumu/smartdns/commit/56d0332bf91104cfc877635f6c82e9348587df04",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pymumu/smartdns/issues/1378",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/pymumu/smartdns/commit/56d0332bf91104cfc877635f6c82e9348587df04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/pymumu/smartdns/issues/1378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-24269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T22:15:08.887",
      "lastModified" : "2025-01-30T21:15:09.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows attackers to execute arbitrary code via a crafted Zip file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:textpattern:textpattern:4.8.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B45DA227-247A-48F3-BA4A-60DAAA505410"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/s4n-h4xor/CVE-Publications/blob/main/CVE-2023-24269/CVE-2023-24269.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/s4n-h4xor/CVE-Publications/blob/main/CVE-2023-24269/CVE-2023-24269.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25495",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2023-04-28T22:15:08.950",
      "lastModified" : "2024-11-21T07:49:37.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in certain configurations.  There is no exposure where no LDAP client password is configured"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "46A578A7-5436-4B92-9860-75F637C2F12B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BC05D-7619-41CC-88F7-90EBC242A15F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "6458E729-5B4D-4BF8-AC84-A73FA849A76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330331CB-6EF1-4263-B579-11E990C85F93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "D9F1172B-8113-4B8C-8455-86B10115E94C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBCFFB6F-C269-425B-AD66-9000BBC5DAE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx_enclosure_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "BB1D00C0-21CC-430E-822C-4E13B65D0880"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx_enclosure:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C22D09-B948-4EEE-9CEA-DAD0D8BE370E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1021_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "2FE708B8-65A8-497D-93EF-322579CE3651"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536A78A4-9C58-400F-AFBB-73186A0D3FDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "EA6FC032-324D-4FDC-8C74-D9CF82797334"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72B2526-8BD9-49FD-BDCF-B654BCEAC8AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "E98CCEAA-3A3C-4087-93B1-6DE7995113A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFD8C5A-D9E0-4EFF-92A3-17A6DBE7D155"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "142D1A60-2F5D-457B-92B7-59595F034765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD11357-E276-44E5-B825-F948D5A757CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "CD6712D8-253F-4952-AB21-BBFA54BF822C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1520-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DD614-F500-4FFB-8FD4-D2B284FE5E55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "688CFB0E-2095-4CE2-8CA4-E8BD32578F91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1521-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33A804F-C94C-4A6C-AA84-957834680652"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "0659AED4-D4E5-4FB4-8B31-550AF9F88893"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2320-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECFCE59-8456-47A3-8A8E-989813E37674"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "15BD47D1-90E7-4FC8-879D-E0EA9F72459A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E515C4-D2F2-4A71-9A9C-70A80477352A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "05CA0D28-CD71-4BDA-82B5-4528E68AEB8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:2.93_afbt30p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A825FF4-4686-4059-B291-64FB5AEBB866"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6D9490-0456-4C77-867C-21339F52D19E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "B915F44E-73A7-4DAF-9B2C-FEFACB62FB13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8CBCB0-7152-4FD0-A50E-280C42BB4B5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "4522BB27-A943-4188-B1C4-FA3CC0D2987C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2720-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2574C115-7511-422C-9383-D09B021B4946"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "8363826A-2858-46AA-98E5-5C89EA581CFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D3EBE9-34C1-45CA-A800-B313110409DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "F734FE11-80B5-494F-BE28-8FB4AA00963A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E6A2F7-7EC0-46E1-A973-2172B076E883"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "3D9FC871-32D4-400C-A1A3-BEB5D2C08204"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A30DA25-C17B-49A4-A5B5-21BC45C322C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "8EFC6D85-7FCE-4D68-84A9-3F155F0C8244"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66A9798-71F6-4884-AFC7-A695A713576A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "F9E5F98C-2B3E-4434-91BE-9CC19832A527"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66A9798-71F6-4884-AFC7-A695A713576A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3375_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "9D8B787A-EF21-4EF8-A75E-E187C0F18E2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8126219-A07C-42A6-9553-B6AE499DB6BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "BEE6A10B-6BCA-4D66-928B-38CF142EBF19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3376:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D7A545-BE29-4F0B-AC77-8E6DE955CA5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "32D2C9D3-D5AE-4DA4-AFF1-6F0FAC642F51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D354C3-0183-42D9-97D0-C9888B023195"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "857D7014-C3E6-478C-BF9C-82169315B351"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3521-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0DDCC8-46B7-43FA-8A4A-BCE8AB7F8480"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "D1E8FF43-8C7A-4354-9721-FB977104ECF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C38326D-97DD-4A6B-985F-968570528C19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "27FBBDA1-52E7-4B14-AFA5-9263739232C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCDE6B9-6505-4E44-A444-C4C3A054B5F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "4DBC989B-CB17-4BCC-9FDE-AE6C550698C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9FDCC0-F45C-4AA1-BB11-0761A25BF16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "9C19F289-5F84-4395-BEF1-F5DA7AED2DB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB95DEC-D622-4AD7-AC69-077A94BD752C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "D0777AEE-1F2E-40B4-9AA6-4782AAE940A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924C1B4B-6E97-4942-8000-BB59860913EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "4239FD66-7A2E-40E2-B953-1EC32C208024"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5521-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5788FFBD-69B4-4FB6-A2D2-4C6BA6CCE769"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "A1B8C4D2-C786-49B4-9B13-6975542D7504"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAEAB68-0F17-45BD-B0B9-0C5FD5BBE2AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "DB1BAE65-812F-4B21-A4A0-060243B45B72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16776C5F-CCAF-4F22-B570-FE49A0B73FF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "94311D5A-15B6-43A9-9030-092421C591BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F350D6FE-7BE1-46C9-B1A6-4EE0AF8BCB55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "6458E729-5B4D-4BF8-AC84-A73FA849A76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330331CB-6EF1-4263-B579-11E990C85F93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5154CD2F-AD5C-45D8-BDDF-3E57499A62B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD32840-AF55-49C1-A8B4-A4D3B0F85B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "E6A3E984-CE12-4694-BE64-FAC6478C0F38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD32840-AF55-49C1-A8B4-A4D3B0F85B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "F611877D-BE44-4937-8341-A00EEBD4E870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2540A2-1462-42F7-949C-9881544DE684"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7821_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "1D2C5786-2B7B-4F04-AFC2-51C6EF62DA7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E153D62-9443-4F52-BA47-5C2704E05BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx1020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5BE64E31-8CD0-431E-BEDC-F23A31DBA009"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx1020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0E5EF6-2664-4DEC-BD90-BF3128DC9DA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3330-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "68A20D8C-90CC-436E-8125-C471C5C41261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3330-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308EAB87-EF05-487F-B5AA-4D7E58937BB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "813A389B-F55B-4B16-A67D-AC565228AE4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3330-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1387DB10-2478-41E8-937A-98012A5FAB6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3331-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "BA3EBCAA-0456-4DC8-834F-FDFCB3A41240"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3331-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2EB352F-AFEB-433D-84A3-5C849B658647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3331-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "FC2F4A4F-C30B-4322-8E54-159E83027FD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3331-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC19B72-13E8-4F13-89AC-2112FC6EE809"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3530_f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "1947D638-A324-483D-BC37-5AB3B345935B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3530_f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55863D2-D2A9-4BFC-9560-2E0DF99388C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3530-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "747BF99D-6B3A-4954-B99E-107E55F828A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3530-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E740BCC-B3FF-4A6E-B9CD-0D13FAE1D9FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3531_h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "65611366-BA40-4064-B617-9320BA705C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3531_h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF566DC8-C3A9-49AF-8B9C-C4FB8D94A7F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3531-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "89CD08E6-5746-495B-A9E1-DF8F7A7BE347"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3531-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F87CEA-8200-4345-9804-693D5B8F98A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx1021_on_se350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "6B7FF257-18D2-4543-8C5A-E37116DC28FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx1021_on_se350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA103E0-C6DC-4D57-8538-6AA71E6CEF99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_1se_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "C23661E8-A862-4ACC-9B71-07C0DEC1BBB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_1se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBC1C9E-C548-4881-817B-109943BEA02F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_2u4n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E93D0BA3-1BA9-456E-856E-C33E247C5504"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_2u4n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5DD2F7-6D91-42A5-827D-9A44F319CB01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_4u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "CB958079-C9EC-45DE-B00B-46415BA1622E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_4u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D2593D-E1D1-4C4F-884A-5E877E92C715"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx1320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "6B6F3B7E-020F-434E-B783-8F99AE03A321"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11E00E8-4234-401D-8A0E-6EC1A15F44BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx2320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "AFE27D87-68EC-430A-81D4-26CD3FF32C59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx2320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7500A0-B95E-4E16-B532-28C139C94AF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "2CE03063-DDCF-41C3-8E87-AF633EC1EF5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx2330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDB5BE9-76C0-4708-805E-6DA37E91648F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "71B491BF-9E31-4F61-99CE-1CC56674307C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8B3E93-970D-4B49-B5A6-6BFAC45BAAC4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "E3A5670D-01D2-470A-8FB7-7C671262EA4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F449A0D-B2EA-4747-BA7E-88CD4371220C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "BB7F61E0-643F-4DB1-9443-64419C6E24A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72422C47-0027-4B4E-9C82-78FE8A8A6D75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "C3B6116B-60E4-4812-AE59-3077C6F2DC54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3530-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E73BA833-D02E-4274-ABF7-8F1D41815AB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "D4B2AF5E-FBA2-4849-A8AF-DABF740EF58F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE87366A-7CDB-46B7-AB89-7839D41B7E25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx5520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "CCB8C97C-EA12-43B8-9045-4880407C1DC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704A1043-7626-412C-8666-9088B3AA1147"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "399D2889-4FB6-4905-880D-7CB54FF3026B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx5530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81BDD8F1-B6B4-48D9-854F-9BFE19CD2B94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7320_n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "8521B23A-3D81-44EE-822D-29CD56DB1B72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7320_n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435794D6-7773-4D93-96E2-7269EB863A04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "F5045D7C-7A21-46D3-B134-D98EC417C0EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166A619E-C222-4169-8A68-8E718BE27355"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "047ECA24-3DF5-40D3-ABC4-1ED5FF7B71E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25483F5-F222-42AF-ACA4-580CD2965C55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7520_n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "5657C581-5228-4682-B7DD-CD80E3FC257A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7520_n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C923CF1-EB97-431F-9D85-0CB5C921A040"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "DE4798E2-B3C8-4403-B17C-4E625DC44A37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD5438A-321C-4C7E-9170-C80DA27F9271"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "CC0BBC40-968C-42C2-9E04-0815105D8042"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6DC1F2D-AA5A-49D4-A0FD-491B1938406F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "F109BF72-D7BB-461A-AA30-E76935BA609D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E690D37-4DFD-477A-B159-C31D50215C90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkedge_se450__firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.60_usx324o",
            "matchCriteriaId" : "B86C0C5D-4B78-4D27-A05E-8BD86A70ED5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkedge_se450_:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F49BD4-9119-4557-826A-7281C23F484D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p920_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "9EA34703-1E2C-4176-8709-605E4F2A02DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D47FCAA7-B33F-4F00-85BA-AA8ED4790572"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "B991E62F-B51F-4099-898A-77163DECC89D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2588DA2E-6E58-4FA2-9AA6-FC669C042197"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "445A9ABC-DE1D-44A6-9923-AB40FD0805FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "123E924B-D00B-4B9F-B890-1EF670D16F45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "F361E67B-3AF7-45A4-9706-89FC6E334FFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1FF5D0-CC08-42B0-9798-55ED911B3EF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "DC2DA420-0751-4277-8A1F-5B91F28E12A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4729C86-050B-4C6B-96F2-7C60AC3086B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "B7366A53-32BD-4E02-9279-7753A450341B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650-n_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E11CA6-2B14-4F2F-A6D3-A3F3A0199FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_se350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "8F3136AC-3E8C-4656-8F39-297318ED0A92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_se350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4B877C-8D19-4AD2-948D-ADBD9B1BEEED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "7432CA66-F205-468A-907A-38D1D682A52A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB64709-93BA-43D8-A1DB-4CE405291430"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "0D45F7DC-29BD-4B69-AA74-49C02932176B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn550_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2728329-AC98-4AB6-B448-C1B203027593"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "366829A3-C06E-487D-8A19-B4E0BA89A1D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB0C393-2CB4-485F-93E2-2F28B19F9325"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E5071012-4ACA-49B4-B2E4-CF58EFCF3F3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6334030-07E4-45F4-A233-4A37F77FC573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr158_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "5DA538D2-D68F-4A81-9542-D16D9B9CDDBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr158:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94182EE-10FE-4506-BDE0-06F4140923FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "B040A2F8-14A4-4771-825C-4DFE8373BFC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B52AC1-714E-4217-8599-80D99E0D33B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr250_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "2DEFAAB8-2DA6-43FF-BC68-56B55896DEDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr250_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071805DB-3A2D-4280-8774-08374DF4CD93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr258_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "3AB2F675-A323-4FD5-AD9E-5043FC7C54CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr258:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB19D273-4975-4957-AE94-117B607CD746"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "3F7C1851-4290-4F17-9AAD-2F7405CEDC0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr258_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466F8F21-C0F8-45CF-9C02-57FBE489645F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "A60174DF-78B5-4386-A6AC-93056F9C8A4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C6628A-8A99-4841-A7C5-0445A03C638D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "335F4367-870F-46FE-B386-99963D299D02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10850BF-A7EA-4B84-B2EF-66DCCC301514"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr570_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "796B8297-3696-47B7-AFF3-208673BEC73D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A7C5BE3-5429-46B0-B0B5-C86A9B6376A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr590_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "549082C5-9A49-47A7-B8F5-A021205189C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DC615C-A88A-4C45-892F-77C5E84104E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr630_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "E9B558D7-23FD-4717-B125-9334740E89C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F10C8D-C9C7-4FAD-980D-7A602C8BE81D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "9FD2C32D-CE92-4267-B721-4E6BA3BCEBEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF029E34-9819-404D-BEBC-F540590EE8FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr645_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "96A0115D-E62B-45A5-9BEE-62A9596D315D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE27586B-1CC9-42A3-B763-93972E204A6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "C7D7FA8D-4AB6-45C1-A6D0-130F87B14DB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr645_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3665C4-48C2-4050-916C-AEA0FAF30784"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "1C5D57E5-C539-4D7B-A32A-E54E7FF5B408"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C2B5BB-6E1F-4E01-AAE8-A8239AB8945E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5A75C9E8-7B9F-4343-B743-BD24A6F72C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D85AE20-A6A9-48E4-8CAD-537B87730867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr665_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "37F155A4-AB0C-443E-B8ED-45267CF704ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr665:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE69184-CA94-4A27-AFF2-3B1B81D25CBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "33898282-91C7-4365-86FF-D71336250153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr665_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C2705-D987-47B7-AA38-8222803CD83A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr670_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "70EFB884-36E2-4CDA-8836-65EEFB531CA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1664DE-A6AE-4365-A652-80CEFECB62DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "C7A54480-EB88-4DE9-8C30-417BCD8D06FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr670_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E97E5B4D-0E6F-49B0-8466-54A818517965"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E4D79679-9E6C-453B-B4F8-195D0AE62A5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19771143-D5F1-4F2F-AB83-09913894681E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "51B4C248-04B6-4B4F-A0CB-021C43DFB933"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4710B7-E7EF-47A2-9585-8B6586FE036C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "ADF44750-740F-44C3-82A7-1A8908A571AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A833BF2-DD7B-4A09-AAB8-14C0C7C5DE10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "78DE24D8-BE6C-4776-85C6-B30EA84F1EDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF08144-ECCB-477B-A934-E4578522BFEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "616885E2-3714-4C4F-B881-441DAA40BF4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr860_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D22E89-BE6A-4664-8E5B-7DB06DF9B553"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr950_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "AD750E19-509E-4C9E-BDE0-D0CA8EF1F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B0407D-D603-48AE-9A42-F4C68056E19D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "9FDBF980-D496-44AC-B7AF-E1FBD0BFEC9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF2350D-34B1-44DB-8E4A-6F29B37D96CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "DB77AEB0-D4A9-4987-B3A0-8F32FB38935A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st250_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A83C7C5-8716-4C2F-A940-8F594DB106A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st258_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "04A90DDE-C19D-47B2-B3C4-A76D82ED39E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st258:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089F97B1-FEDE-4A5D-91D3-0517E8D39174"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "FE973C76-76AA-4DC9-8155-0497E8BD8C5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st258_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BF1FFA-1627-4F21-A9BC-8D3399681DBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "13E3631D-714F-493E-8C1F-059F17A776EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B19107-5B45-4E45-8B34-90B5A1FF3962"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "AF3840B6-84D3-493A-B635-EF9E937BC8E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "968449F6-73F2-42C9-A3F4-3116408970F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "ABC96406-9E8F-497F-BA52-E1E0777F9189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st658_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F32794E-362A-4A0B-8B13-95F42AA470CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-99936",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-99936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25496",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2023-04-28T22:15:09.013",
      "lastModified" : "2024-11-21T07:49:37.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation vulnerability was reported in Lenovo Drivers Management Lenovo Driver Manager that could allow a local user to execute code with elevated privileges."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:drivers_management:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.1307.1308",
            "matchCriteriaId" : "BD64B313-2EEC-4659-8D81-26CDB5C770FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iknow.lenovo.com.cn/detail/dc_415202.html",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://iknow.lenovo.com.cn/detail/dc_415202.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29056",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2023-04-28T22:15:09.073",
      "lastModified" : "2024-11-21T07:56:27.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC. To be vulnerable, XCC must be configured to use an LDAP server for Authentication/Authorization and have the login permission attribute not defined."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "46A578A7-5436-4B92-9860-75F637C2F12B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BC05D-7619-41CC-88F7-90EBC242A15F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "6458E729-5B4D-4BF8-AC84-A73FA849A76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330331CB-6EF1-4263-B579-11E990C85F93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "D9F1172B-8113-4B8C-8455-86B10115E94C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBCFFB6F-C269-425B-AD66-9000BBC5DAE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx_enclosure_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "BB1D00C0-21CC-430E-822C-4E13B65D0880"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx_enclosure:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C22D09-B948-4EEE-9CEA-DAD0D8BE370E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1021_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "2FE708B8-65A8-497D-93EF-322579CE3651"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536A78A4-9C58-400F-AFBB-73186A0D3FDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "EA6FC032-324D-4FDC-8C74-D9CF82797334"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72B2526-8BD9-49FD-BDCF-B654BCEAC8AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "E98CCEAA-3A3C-4087-93B1-6DE7995113A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFD8C5A-D9E0-4EFF-92A3-17A6DBE7D155"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "142D1A60-2F5D-457B-92B7-59595F034765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD11357-E276-44E5-B825-F948D5A757CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "CD6712D8-253F-4952-AB21-BBFA54BF822C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1520-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DD614-F500-4FFB-8FD4-D2B284FE5E55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "688CFB0E-2095-4CE2-8CA4-E8BD32578F91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1521-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33A804F-C94C-4A6C-AA84-957834680652"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "0659AED4-D4E5-4FB4-8B31-550AF9F88893"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2320-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECFCE59-8456-47A3-8A8E-989813E37674"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "15BD47D1-90E7-4FC8-879D-E0EA9F72459A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E515C4-D2F2-4A71-9A9C-70A80477352A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "05CA0D28-CD71-4BDA-82B5-4528E68AEB8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:2.93_afbt30p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A825FF4-4686-4059-B291-64FB5AEBB866"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6D9490-0456-4C77-867C-21339F52D19E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "B915F44E-73A7-4DAF-9B2C-FEFACB62FB13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8CBCB0-7152-4FD0-A50E-280C42BB4B5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "4522BB27-A943-4188-B1C4-FA3CC0D2987C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2720-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2574C115-7511-422C-9383-D09B021B4946"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "8363826A-2858-46AA-98E5-5C89EA581CFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D3EBE9-34C1-45CA-A800-B313110409DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "F734FE11-80B5-494F-BE28-8FB4AA00963A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E6A2F7-7EC0-46E1-A973-2172B076E883"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "3D9FC871-32D4-400C-A1A3-BEB5D2C08204"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A30DA25-C17B-49A4-A5B5-21BC45C322C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "8EFC6D85-7FCE-4D68-84A9-3F155F0C8244"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66A9798-71F6-4884-AFC7-A695A713576A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "F9E5F98C-2B3E-4434-91BE-9CC19832A527"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66A9798-71F6-4884-AFC7-A695A713576A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3375_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "9D8B787A-EF21-4EF8-A75E-E187C0F18E2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8126219-A07C-42A6-9553-B6AE499DB6BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "BEE6A10B-6BCA-4D66-928B-38CF142EBF19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3376:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D7A545-BE29-4F0B-AC77-8E6DE955CA5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "32D2C9D3-D5AE-4DA4-AFF1-6F0FAC642F51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D354C3-0183-42D9-97D0-C9888B023195"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "857D7014-C3E6-478C-BF9C-82169315B351"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3521-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0DDCC8-46B7-43FA-8A4A-BCE8AB7F8480"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "D1E8FF43-8C7A-4354-9721-FB977104ECF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C38326D-97DD-4A6B-985F-968570528C19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "27FBBDA1-52E7-4B14-AFA5-9263739232C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCDE6B9-6505-4E44-A444-C4C3A054B5F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "4DBC989B-CB17-4BCC-9FDE-AE6C550698C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9FDCC0-F45C-4AA1-BB11-0761A25BF16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "9C19F289-5F84-4395-BEF1-F5DA7AED2DB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB95DEC-D622-4AD7-AC69-077A94BD752C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "D0777AEE-1F2E-40B4-9AA6-4782AAE940A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924C1B4B-6E97-4942-8000-BB59860913EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "4239FD66-7A2E-40E2-B953-1EC32C208024"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5521-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5788FFBD-69B4-4FB6-A2D2-4C6BA6CCE769"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "A1B8C4D2-C786-49B4-9B13-6975542D7504"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAEAB68-0F17-45BD-B0B9-0C5FD5BBE2AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "DB1BAE65-812F-4B21-A4A0-060243B45B72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16776C5F-CCAF-4F22-B570-FE49A0B73FF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "94311D5A-15B6-43A9-9030-092421C591BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F350D6FE-7BE1-46C9-B1A6-4EE0AF8BCB55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "6458E729-5B4D-4BF8-AC84-A73FA849A76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330331CB-6EF1-4263-B579-11E990C85F93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5154CD2F-AD5C-45D8-BDDF-3E57499A62B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD32840-AF55-49C1-A8B4-A4D3B0F85B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "E6A3E984-CE12-4694-BE64-FAC6478C0F38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD32840-AF55-49C1-A8B4-A4D3B0F85B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "F611877D-BE44-4937-8341-A00EEBD4E870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2540A2-1462-42F7-949C-9881544DE684"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7821_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "1D2C5786-2B7B-4F04-AFC2-51C6EF62DA7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E153D62-9443-4F52-BA47-5C2704E05BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx1020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5BE64E31-8CD0-431E-BEDC-F23A31DBA009"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx1020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0E5EF6-2664-4DEC-BD90-BF3128DC9DA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3330-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "68A20D8C-90CC-436E-8125-C471C5C41261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3330-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308EAB87-EF05-487F-B5AA-4D7E58937BB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "813A389B-F55B-4B16-A67D-AC565228AE4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3330-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1387DB10-2478-41E8-937A-98012A5FAB6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3331-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "BA3EBCAA-0456-4DC8-834F-FDFCB3A41240"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3331-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2EB352F-AFEB-433D-84A3-5C849B658647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3331-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "FC2F4A4F-C30B-4322-8E54-159E83027FD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3331-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC19B72-13E8-4F13-89AC-2112FC6EE809"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3530_f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "1947D638-A324-483D-BC37-5AB3B345935B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3530_f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55863D2-D2A9-4BFC-9560-2E0DF99388C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3530-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "747BF99D-6B3A-4954-B99E-107E55F828A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3530-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E740BCC-B3FF-4A6E-B9CD-0D13FAE1D9FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3531_h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "65611366-BA40-4064-B617-9320BA705C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3531_h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF566DC8-C3A9-49AF-8B9C-C4FB8D94A7F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3531-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "89CD08E6-5746-495B-A9E1-DF8F7A7BE347"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3531-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F87CEA-8200-4345-9804-693D5B8F98A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx1021_on_se350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "6B7FF257-18D2-4543-8C5A-E37116DC28FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx1021_on_se350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA103E0-C6DC-4D57-8538-6AA71E6CEF99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_1se_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "C23661E8-A862-4ACC-9B71-07C0DEC1BBB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_1se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBC1C9E-C548-4881-817B-109943BEA02F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_2u4n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E93D0BA3-1BA9-456E-856E-C33E247C5504"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_2u4n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5DD2F7-6D91-42A5-827D-9A44F319CB01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_4u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "CB958079-C9EC-45DE-B00B-46415BA1622E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_4u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D2593D-E1D1-4C4F-884A-5E877E92C715"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx1320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "6B6F3B7E-020F-434E-B783-8F99AE03A321"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11E00E8-4234-401D-8A0E-6EC1A15F44BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx2320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "AFE27D87-68EC-430A-81D4-26CD3FF32C59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx2320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7500A0-B95E-4E16-B532-28C139C94AF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "2CE03063-DDCF-41C3-8E87-AF633EC1EF5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx2330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDB5BE9-76C0-4708-805E-6DA37E91648F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "71B491BF-9E31-4F61-99CE-1CC56674307C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8B3E93-970D-4B49-B5A6-6BFAC45BAAC4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "E3A5670D-01D2-470A-8FB7-7C671262EA4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F449A0D-B2EA-4747-BA7E-88CD4371220C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "BB7F61E0-643F-4DB1-9443-64419C6E24A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72422C47-0027-4B4E-9C82-78FE8A8A6D75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "C3B6116B-60E4-4812-AE59-3077C6F2DC54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3530-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E73BA833-D02E-4274-ABF7-8F1D41815AB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "D4B2AF5E-FBA2-4849-A8AF-DABF740EF58F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE87366A-7CDB-46B7-AB89-7839D41B7E25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx5520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "CCB8C97C-EA12-43B8-9045-4880407C1DC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704A1043-7626-412C-8666-9088B3AA1147"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "399D2889-4FB6-4905-880D-7CB54FF3026B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx5530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81BDD8F1-B6B4-48D9-854F-9BFE19CD2B94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7320_n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "8521B23A-3D81-44EE-822D-29CD56DB1B72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7320_n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435794D6-7773-4D93-96E2-7269EB863A04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "F5045D7C-7A21-46D3-B134-D98EC417C0EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166A619E-C222-4169-8A68-8E718BE27355"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "047ECA24-3DF5-40D3-ABC4-1ED5FF7B71E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25483F5-F222-42AF-ACA4-580CD2965C55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7520_n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "5657C581-5228-4682-B7DD-CD80E3FC257A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7520_n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C923CF1-EB97-431F-9D85-0CB5C921A040"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "DE4798E2-B3C8-4403-B17C-4E625DC44A37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD5438A-321C-4C7E-9170-C80DA27F9271"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "CC0BBC40-968C-42C2-9E04-0815105D8042"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6DC1F2D-AA5A-49D4-A0FD-491B1938406F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "F109BF72-D7BB-461A-AA30-E76935BA609D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E690D37-4DFD-477A-B159-C31D50215C90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkedge_se450__firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.60_usx324o",
            "matchCriteriaId" : "B86C0C5D-4B78-4D27-A05E-8BD86A70ED5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkedge_se450_:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F49BD4-9119-4557-826A-7281C23F484D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p920_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "9EA34703-1E2C-4176-8709-605E4F2A02DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D47FCAA7-B33F-4F00-85BA-AA8ED4790572"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "B991E62F-B51F-4099-898A-77163DECC89D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2588DA2E-6E58-4FA2-9AA6-FC669C042197"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "445A9ABC-DE1D-44A6-9923-AB40FD0805FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "123E924B-D00B-4B9F-B890-1EF670D16F45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "F361E67B-3AF7-45A4-9706-89FC6E334FFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1FF5D0-CC08-42B0-9798-55ED911B3EF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "DC2DA420-0751-4277-8A1F-5B91F28E12A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4729C86-050B-4C6B-96F2-7C60AC3086B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "B7366A53-32BD-4E02-9279-7753A450341B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650-n_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E11CA6-2B14-4F2F-A6D3-A3F3A0199FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_se350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "8F3136AC-3E8C-4656-8F39-297318ED0A92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_se350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4B877C-8D19-4AD2-948D-ADBD9B1BEEED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "7432CA66-F205-468A-907A-38D1D682A52A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB64709-93BA-43D8-A1DB-4CE405291430"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "0D45F7DC-29BD-4B69-AA74-49C02932176B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn550_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2728329-AC98-4AB6-B448-C1B203027593"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "366829A3-C06E-487D-8A19-B4E0BA89A1D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB0C393-2CB4-485F-93E2-2F28B19F9325"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E5071012-4ACA-49B4-B2E4-CF58EFCF3F3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6334030-07E4-45F4-A233-4A37F77FC573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr158_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "5DA538D2-D68F-4A81-9542-D16D9B9CDDBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr158:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94182EE-10FE-4506-BDE0-06F4140923FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "B040A2F8-14A4-4771-825C-4DFE8373BFC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B52AC1-714E-4217-8599-80D99E0D33B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr250_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "2DEFAAB8-2DA6-43FF-BC68-56B55896DEDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr250_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071805DB-3A2D-4280-8774-08374DF4CD93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr258_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "3AB2F675-A323-4FD5-AD9E-5043FC7C54CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr258:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB19D273-4975-4957-AE94-117B607CD746"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "3F7C1851-4290-4F17-9AAD-2F7405CEDC0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr258_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466F8F21-C0F8-45CF-9C02-57FBE489645F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "A60174DF-78B5-4386-A6AC-93056F9C8A4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C6628A-8A99-4841-A7C5-0445A03C638D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "335F4367-870F-46FE-B386-99963D299D02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10850BF-A7EA-4B84-B2EF-66DCCC301514"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr570_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "796B8297-3696-47B7-AFF3-208673BEC73D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A7C5BE3-5429-46B0-B0B5-C86A9B6376A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr590_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "549082C5-9A49-47A7-B8F5-A021205189C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DC615C-A88A-4C45-892F-77C5E84104E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr630_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "E9B558D7-23FD-4717-B125-9334740E89C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F10C8D-C9C7-4FAD-980D-7A602C8BE81D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "9FD2C32D-CE92-4267-B721-4E6BA3BCEBEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF029E34-9819-404D-BEBC-F540590EE8FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr645_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "96A0115D-E62B-45A5-9BEE-62A9596D315D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE27586B-1CC9-42A3-B763-93972E204A6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "C7D7FA8D-4AB6-45C1-A6D0-130F87B14DB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr645_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3665C4-48C2-4050-916C-AEA0FAF30784"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "1C5D57E5-C539-4D7B-A32A-E54E7FF5B408"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C2B5BB-6E1F-4E01-AAE8-A8239AB8945E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5A75C9E8-7B9F-4343-B743-BD24A6F72C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D85AE20-A6A9-48E4-8CAD-537B87730867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr665_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "37F155A4-AB0C-443E-B8ED-45267CF704ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr665:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE69184-CA94-4A27-AFF2-3B1B81D25CBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "33898282-91C7-4365-86FF-D71336250153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr665_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C2705-D987-47B7-AA38-8222803CD83A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr670_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "70EFB884-36E2-4CDA-8836-65EEFB531CA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1664DE-A6AE-4365-A652-80CEFECB62DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "C7A54480-EB88-4DE9-8C30-417BCD8D06FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr670_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E97E5B4D-0E6F-49B0-8466-54A818517965"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E4D79679-9E6C-453B-B4F8-195D0AE62A5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19771143-D5F1-4F2F-AB83-09913894681E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "51B4C248-04B6-4B4F-A0CB-021C43DFB933"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4710B7-E7EF-47A2-9585-8B6586FE036C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "ADF44750-740F-44C3-82A7-1A8908A571AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A833BF2-DD7B-4A09-AAB8-14C0C7C5DE10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "78DE24D8-BE6C-4776-85C6-B30EA84F1EDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF08144-ECCB-477B-A934-E4578522BFEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "616885E2-3714-4C4F-B881-441DAA40BF4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr860_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D22E89-BE6A-4664-8E5B-7DB06DF9B553"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr950_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "AD750E19-509E-4C9E-BDE0-D0CA8EF1F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B0407D-D603-48AE-9A42-F4C68056E19D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "9FDBF980-D496-44AC-B7AF-E1FBD0BFEC9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF2350D-34B1-44DB-8E4A-6F29B37D96CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "DB77AEB0-D4A9-4987-B3A0-8F32FB38935A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st250_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A83C7C5-8716-4C2F-A940-8F594DB106A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st258_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "04A90DDE-C19D-47B2-B3C4-A76D82ED39E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st258:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089F97B1-FEDE-4A5D-91D3-0517E8D39174"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "FE973C76-76AA-4DC9-8155-0497E8BD8C5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st258_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BF1FFA-1627-4F21-A9BC-8D3399681DBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "13E3631D-714F-493E-8C1F-059F17A776EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B19107-5B45-4E45-8B34-90B5A1FF3962"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "AF3840B6-84D3-493A-B635-EF9E937BC8E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "968449F6-73F2-42C9-A3F4-3116408970F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "ABC96406-9E8F-497F-BA52-E1E0777F9189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st658_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F32794E-362A-4A0B-8B13-95F42AA470CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-118321",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-118321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2395",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T22:15:09.130",
      "lastModified" : "2024-11-21T07:58:31.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the component Web Management Interface. The manipulation of the argument Login.userAgent leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227673 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/15",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227673",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227673",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2396",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T22:15:09.190",
      "lastModified" : "2024-11-21T07:58:32.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. This vulnerability affects unknown code of the component Web Management Interface. The manipulation of the argument USERDBUsers.Password leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227674 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:srx5308_firmware:4.3.5-3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33645096-A648-4674-8045-6EF6538D7E28"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:srx5308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5768789E-33BD-4F4C-A8B4-5F8D2FAE6F62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/16",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227674",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227674",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2397",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T22:15:09.247",
      "lastModified" : "2024-11-21T07:58:32.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Mobile Comparison Website 1.0. This issue affects some unknown processing of the file classes/Master.php?f=save_field. The manipulation of the argument Field Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227675."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_mobile_comparison_website_project:simple_mobile_comparison_website:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "819E4A1A-2355-4222-A684-B625872A8A54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sunyucheng0405/bug_report/blob/main/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227675",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227675",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://github.com/sunyucheng0405/bug_report/blob/main/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2408",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T23:15:08.267",
      "lastModified" : "2024-11-21T07:58:33.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. Affected by this issue is some unknown functionality of the file services/view.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-227702 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:ac_repair_and_services_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05923259-9480-4FD7-AE20-DCD4D8B79498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Yp1oneer/cve_hub/blob/main/AC%20Repair%20and%20Services%20System/SQL-Injection-1.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227702",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227702",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yp1oneer/cve_hub/blob/main/AC%20Repair%20and%20Services%20System/SQL-Injection-1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2409",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T23:15:08.337",
      "lastModified" : "2024-11-21T07:58:33.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. This affects an unknown part of the file /admin/services/view_service.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227703."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:ac_repair_and_services_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05923259-9480-4FD7-AE20-DCD4D8B79498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Yp1oneer/cve_hub/blob/main/AC%20Repair%20and%20Services%20System/SQL-Injection-2.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227703",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227703",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yp1oneer/cve_hub/blob/main/AC%20Repair%20and%20Services%20System/SQL-Injection-2.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2410",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T23:15:08.397",
      "lastModified" : "2024-11-21T07:58:33.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/bookings/view_booking.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227704."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:ac_repair_and_services_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05923259-9480-4FD7-AE20-DCD4D8B79498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Yp1oneer/cve_hub/blob/main/AC%20Repair%20and%20Services%20System/SQL-Injection-3.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227704",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227704",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yp1oneer/cve_hub/blob/main/AC%20Repair%20and%20Services%20System/SQL-Injection-3.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2411",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-28T23:15:08.460",
      "lastModified" : "2024-11-21T07:58:33.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/view_inquiry.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227705 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:ac_repair_and_services_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05923259-9480-4FD7-AE20-DCD4D8B79498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Yp1oneer/cve_hub/blob/main/AC%20Repair%20and%20Services%20System/SQL-Injection-4.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227705",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227705",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yp1oneer/cve_hub/blob/main/AC%20Repair%20and%20Services%20System/SQL-Injection-4.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31483",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-28T23:15:08.520",
      "lastModified" : "2025-01-31T20:15:30.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "tar/TarFileReader.cpp in Cauldron cbang before bastet-v8.1.17 has a directory traversal during extraction that allows the attacker to create or write to files outside the current directory via a crafted tar archive."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cauldrondevelopment:cbang:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.17",
            "matchCriteriaId" : "3B314898-A964-4E84-B85D-33AB88FAA091"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CauldronDevelopmentLLC/cbang/compare/bastet-v8.1.16...bastet-v8.1.17",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/CauldronDevelopmentLLC/cbang/issues/115",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/CauldronDevelopmentLLC/cbang/compare/bastet-v8.1.16...bastet-v8.1.17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/CauldronDevelopmentLLC/cbang/issues/115",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2412",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-29T00:15:08.857",
      "lastModified" : "2024-11-21T07:58:33.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-227706 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:ac_repair_and_services_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05923259-9480-4FD7-AE20-DCD4D8B79498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Yp1oneer/cve_hub/blob/main/AC%20Repair%20and%20Services%20System/SQL-Injection-5.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227706",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227706",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yp1oneer/cve_hub/blob/main/AC%20Repair%20and%20Services%20System/SQL-Injection-5.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2413",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-29T00:15:08.937",
      "lastModified" : "2024-11-21T07:58:34.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bookings/manage_booking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227707."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oretnom23:ac_repair_and_services_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05923259-9480-4FD7-AE20-DCD4D8B79498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Yp1oneer/cve_hub/blob/main/AC%20Repair%20and%20Services%20System/SQL-Injection-6.pdf",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227707",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227707",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Yp1oneer/cve_hub/blob/main/AC%20Repair%20and%20Services%20System/SQL-Injection-6.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?id.227707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-29T00:15:09.000",
      "lastModified" : "2025-11-03T22:16:19.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanpm_project:cpanpm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.35",
            "matchCriteriaId" : "90D5B630-223B-4035-89FF-84D4BD0D7C32"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.38.0",
            "matchCriteriaId" : "00980675-EC82-443D-AFFE-B83E5239DAB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/29/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/03/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/03/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/07/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/andk/cpanpm/pull/175",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BM6UW55CNFUTNGD5ZRKGUKKKFDJGMFHL/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LEGCEOKFJVBJ2QQ6S2H4NAEWTUERC7SB/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://metacpan.org/dist/CPAN/changes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0007/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/18/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/29/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/03/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/03/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/07/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/andk/cpanpm/pull/175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BM6UW55CNFUTNGD5ZRKGUKKKFDJGMFHL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LEGCEOKFJVBJ2QQ6S2H4NAEWTUERC7SB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://metacpan.org/dist/CPAN/changes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/18/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-29T00:15:09.043",
      "lastModified" : "2025-01-31T20:15:30.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab\\:\\:api\\:\\:v4_project:gitlab\\:\\:api\\:\\:v4:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.26",
            "matchCriteriaId" : "EA38B03A-651A-4674-9F23-AAC1A5334E7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/29/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/03/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/03/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/07/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bluefeet/GitLab-API-v4/pull/57",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/chansen/p5-http-tiny/pull/151",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/18/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/29/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/03/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/03/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/07/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bluefeet/GitLab-API-v4/pull/57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/chansen/p5-http-tiny/pull/151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/18/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-31486",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-04-29T00:15:09.083",
      "lastModified" : "2025-01-30T20:15:32.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:http\\:\\:tiny_project:http\\:\\:tiny:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.083",
            "matchCriteriaId" : "E9427A16-49FA-4E66-9641-A9CC9CA57222"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.38.0",
            "matchCriteriaId" : "00980675-EC82-443D-AFFE-B83E5239DAB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/29/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/03/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/03/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/07/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chansen/p5-http-tiny/pull/153",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackeriet.github.io/cpan-http-tiny-overview/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/18/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/05/03/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.reddit.com/r/perl/comments/111tadi/psa_httptiny_disabled_ssl_verification_by_default/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/04/29/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/03/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/03/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2023/05/07/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chansen/p5-http-tiny/pull/153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://hackeriet.github.io/cpan-http-tiny-overview/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20241129-0011/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/04/18/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2023/05/03/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.reddit.com/r/perl/comments/111tadi/psa_httptiny_disabled_ssl_verification_by_default/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2417",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-29T01:15:08.867",
      "lastModified" : "2024-11-21T07:58:34.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in ks-soft Advanced Host Monitor up to 12.56 and classified as problematic. Affected by this issue is some unknown functionality of the file C:\\Program Files (x86)\\HostMonitor\\RMA-Win\\rma_active.exe. The manipulation leads to unquoted search path. It is possible to launch the attack on the local host. Upgrading to version 12.60 is able to address this issue. It is recommended to upgrade the affected component. VDB-227714 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ks-soft:advanced_host_monitor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.56",
            "matchCriteriaId" : "02579510-CD02-4EAD-90C7-26A3D8DCFBF3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172105/Advanced-Host-Monitor-12.56-Unquoted-Service-Path.html",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227714",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.227714",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172105/Advanced-Host-Monitor-12.56-Unquoted-Service-Path.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.227714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2418",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-29T01:15:08.980",
      "lastModified" : "2024-11-21T07:58:34.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Konga 2.8.3 on Kong. It has been classified as problematic. This affects an unknown part of the component Login API. The manipulation leads to insufficiently random values. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. The associated identifier of this vulnerability is VDB-227715."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.2,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konghq:kong:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "617BECC9-676B-496E-9BE5-61DE5555543B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.227715",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.227715",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.cnblogs.com/andao/p/17330864.html",
        "source" : "cna@vuldb.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-9g4c-xm3g-f8hq",
        "source" : "nvd@nist.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.227715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://www.cnblogs.com/andao/p/17330864.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2419",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-29T01:15:09.063",
      "lastModified" : "2024-11-21T07:58:34.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in Zhong Bang CRMEB 4.6.0. It has been declared as critical. This vulnerability affects the function videoUpload of the file \\crmeb\\app\\services\\system\\attachment\\SystemAttachmentServices.php. The manipulation of the argument filename leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227716."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crmeb:crmeb:4.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5918E587-7108-481A-88B9-6CD63F36FBBE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/crmeb/CRMEB/issues/77",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227716",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.227716",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/crmeb/CRMEB/issues/77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.227716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2420",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-29T02:15:09.383",
      "lastModified" : "2024-11-21T07:58:35.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in MLECMS 3.0. It has been rated as critical. This issue affects the function get_url in the library /upload/inc/lib/admin of the file upload\\inc\\include\\common.func.php. The manipulation of the argument $_SERVER['REQUEST_URI'] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227717 was assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mlecms:mlecms:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E90F4E4-8E32-4525-B344-1FDD9CBE9C3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/VG00000/elecms/blob/main/README.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227717",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227717",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/VG00000/elecms/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2421",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-29T02:15:09.450",
      "lastModified" : "2024-11-21T07:58:35.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability classified as problematic has been found in Control iD RHiD 23.3.19.0. Affected is an unknown function of the file /v2/#/add/department. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. VDB-227718 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:controlid:rhid:23.3.19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B4E7062-946D-490B-80B0-71735FBEE658"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vuldb.com/?ctiid.227718",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.227718",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://youtu.be/4JOLhAuoizE",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.227718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://youtu.be/4JOLhAuoizE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30792",
      "sourceIdentifier" : "cve-assign@fb.com",
      "published" : "2023-04-29T03:15:08.347",
      "lastModified" : "2025-01-30T17:15:16.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where input was being parsed from untrusted sources."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:lexical:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.10.0",
            "matchCriteriaId" : "5A53F19C-A7AE-4626-995D-0DBEB2E3E95D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/facebook/lexical/releases/tag/v0.10.0",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/facebook/lexical/releases/tag/v0.10.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2424",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-29T08:15:11.327",
      "lastModified" : "2024-11-21T07:58:35.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in DedeCMS 5.7.106 and classified as critical. Affected by this issue is the function UpDateMemberModCache of the file uploads/dede/config.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-227750 is the identifier assigned to this vulnerability."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dedecms:dedecms:5.7.106:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81339864-0F89-4EF3-AF10-27A67FA7CC56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/xieqiangweb/cve/blob/master/dede/dedecms%20rce.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227750",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227750",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/xieqiangweb/cve/blob/master/dede/dedecms%20rce.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2425",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-04-29T08:15:11.447",
      "lastModified" : "2024-11-21T07:58:35.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Simple Student Information System 1.0. It has been classified as problematic. This affects an unknown part of the file /classes/Master.php?f=save_course of the component Add New Course. The manipulation of the argument name with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227751."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:M/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "MULTIPLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_student_information_system_project:simple_student_information_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A977027-1635-4913-88BD-002BD8DB5538"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sssddc11/bug_report/blob/master/XSS-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227751",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227751",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sssddc11/bug_report/blob/master/XSS-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuldb.com/?id.227751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30441",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2023-04-29T15:15:18.953",
      "lastModified" : "2024-11-21T08:00:11.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations.  IBM X-Force ID:  253188."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CED2F00-89E3-4BA9-A8FB-D43B308A59A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.7.0",
            "versionEndExcluding" : "8.0.7.15",
            "matchCriteriaId" : "4B6E494E-BA83-4743-B9DD-4DE1F3BC0637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.5.23",
            "matchCriteriaId" : "E06F1A60-BE9C-4922-A4A6-E4E1EF57A06D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:-:*:*:*:liberty:*:*:*",
            "matchCriteriaId" : "7E0B3D5C-C912-4874-AD3D-62B6E6EBE742"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:9.0.0.0:*:*:*:-:*:*:*",
            "matchCriteriaId" : "E79B1229-6DC0-4461-B814-1F671AE0A090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:z\\/transaction_processing_facility:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BF7682-2984-4286-9C17-2B650A4275E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/253188",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985011",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6986617",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6986637",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6987167",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/253188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6985011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6986617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6986637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6987167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2426",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-29T22:15:09.243",
      "lastModified" : "2024-11-21T07:58:35.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-823"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.1499",
            "matchCriteriaId" : "98C576DD-6CD7-46FC-BD71-374BCC670575"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vim/vim/commit/caf642c25de526229264cab9425e7c9979f3509b",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3451be4c-91c8-4d08-926b-cbff7396f425",
        "source" : "security@huntr.dev",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LOJP6M7ZTKZQYOGVOOAY6TIE6ACBJL55/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PCLJN4QINITA3ZASKLEJ64C5TFNKELMO/",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://support.apple.com/kb/HT213844",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://support.apple.com/kb/HT213845",
        "source" : "security@huntr.dev"
      }, {
        "url" : "https://github.com/vim/vim/commit/caf642c25de526229264cab9425e7c9979f3509b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/3451be4c-91c8-4d08-926b-cbff7396f425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LOJP6M7ZTKZQYOGVOOAY6TIE6ACBJL55/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PCLJN4QINITA3ZASKLEJ64C5TFNKELMO/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213844",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT213845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2428",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-30T01:15:09.493",
      "lastModified" : "2025-01-30T17:15:15.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.13",
            "matchCriteriaId" : "C8E79CDF-44C3-4462-BDA6-E23A25A11D0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/0a4980d870bac92df945f6d022726c4e3ed584ab",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/cee65b6d-b003-4e6a-9d14-89aa94bee43e",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/0a4980d870bac92df945f6d022726c4e3ed584ab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/cee65b6d-b003-4e6a-9d14-89aa94bee43e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://huntr.com/bounties/cee65b6d-b003-4e6a-9d14-89aa94bee43e",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2429",
      "sourceIdentifier" : "security@huntr.dev",
      "published" : "2023-04-30T03:15:08.750",
      "lastModified" : "2025-01-30T17:15:15.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@huntr.dev",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@huntr.dev",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.13",
            "matchCriteriaId" : "C8E79CDF-44C3-4462-BDA6-E23A25A11D0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/07552f5577ff8b1e6f7cdefafcce9b2a744d3a24",
        "source" : "security@huntr.dev",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/20d3a0b3-2693-4bf1-b196-10741201a540",
        "source" : "security@huntr.dev",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://github.com/thorsten/phpmyfaq/commit/07552f5577ff8b1e6f7cdefafcce9b2a744d3a24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://huntr.dev/bounties/20d3a0b3-2693-4bf1-b196-10741201a540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://huntr.com/bounties/20d3a0b3-2693-4bf1-b196-10741201a540",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2235",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-05-01T13:15:44.713",
      "lastModified" : "2024-11-21T07:58:12.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation.\n\nThe perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remove_on_exec made it possible to call list_del_event() on before detaching from their group, making it possible to use a dangling pointer causing a use-after-free vulnerability.\n\nWe recommend upgrading past commit fd0815f632c24878e325821943edccc7fde947a2.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.13",
            "versionEndExcluding" : "5.15.104",
            "matchCriteriaId" : "06068228-04BE-4FC5-B0C2-1B9633967D1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16",
            "versionEndExcluding" : "6.1.21",
            "matchCriteriaId" : "1F1CA6A9-8F4D-408D-9116-868EC067DCD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "versionEndExcluding" : "6.2.8",
            "matchCriteriaId" : "4011EC6B-7786-4709-B765-186FA31D6F7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fd0815f632c24878e325821943edccc7fde947a2",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Mitigation", "Patch" ]
      }, {
        "url" : "https://kernel.dance/fd0815f632c24878e325821943edccc7fde947a2",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fd0815f632c24878e325821943edccc7fde947a2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch" ]
      }, {
        "url" : "https://kernel.dance/fd0815f632c24878e325821943edccc7fde947a2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230609-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2236",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-05-01T13:15:44.850",
      "lastModified" : "2025-02-13T17:16:20.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation.\n\nBoth io_install_fixed_file and its callers call fput in a file in case of an error, causing a reference underflow which leads to a use-after-free vulnerability.\n\nWe recommend upgrading past commit 9d94c04c0db024922e886c9fd429659f22f48ea4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.19",
            "versionEndExcluding" : "6.0.11",
            "matchCriteriaId" : "96F47CB7-A27F-4316-BBC3-15AE6B5A0734"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27227B35-932A-4035-B39F-6A455753C0D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489D20B9-166F-423D-8C48-A23D3026E33B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AD592C-222D-4C6F-B176-8145A1A5AFEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8603654B-A8A9-4DEB-B0DD-C82E1C885749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C855C933-F271-45E6-8E85-8D7CF2EF1BE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d94c04c0db024922e886c9fd429659f22f48ea4",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Exploit", "Mailing List", "Patch" ]
      }, {
        "url" : "https://kernel.dance/9d94c04c0db024922e886c9fd429659f22f48ea4",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0010/",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d94c04c0db024922e886c9fd429659f22f48ea4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch" ]
      }, {
        "url" : "https://kernel.dance/9d94c04c0db024922e886c9fd429659f22f48ea4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230601-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2248",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2023-05-01T13:15:44.907",
      "lastModified" : "2023-11-07T04:12:16.373",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it was the duplicate of CVE-2023-31436."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0896",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2023-05-01T14:15:09.397",
      "lastModified" : "2024-11-21T07:38:03.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access. "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:smart_clock_essential_with_alexa_built_in_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90",
            "matchCriteriaId" : "692395B9-A6BE-4FEF-90D1-457FEA03B689"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:smart_clock_essential_with_alexa_built_in:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB56A47-8209-4227-996D-9439C05715A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-113714",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-113714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30061",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T14:15:09.550",
      "lastModified" : "2025-01-30T18:15:29.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-879_firmware:1.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EFB4517-C151-4767-A0C8-12006CBB154C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-879:a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA62CDA4-8F07-4A09-B1EC-C31047221258"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Zarathustra-L/IoT_Vul/tree/main/D-Link/DIR-879",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Zarathustra-L/IoT_Vul/tree/main/D-Link/DIR-879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30063",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T14:15:09.593",
      "lastModified" : "2025-01-30T18:15:30.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-890l_firmware:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD71883-2D02-42A3-9FF0-C145FF15D9CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-890l:a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA7B9C43-D73A-43A4-B00A-5205F7D108E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Zarathustra-L/IoT_Vul/tree/main/D-Link/DIR-890L/Auth%20bypass",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Zarathustra-L/IoT_Vul/tree/main/D-Link/DIR-890L/Auth%20bypass",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30859",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2023-05-01T14:15:09.637",
      "lastModified" : "2024-11-21T08:00:59.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Triton is a Minecraft plugin for Spigot and BungeeCord that helps you translate your Minecraft server. The CustomPayload packet allows you to execute commands on the spigot/bukkit console. When you enable bungee mode in the config it will enable the bungee bridge and the server will begin to broadcast the 'triton:main' plugin channel. Using this plugin channel you are able to send a payload packet containing a byte (2) and a string (any spigot command). This could be used to make yourself a server operator and be used to extract other user information through phishing (pretending to be an admin), many servers use essentials so the /geoip command could be available to them, etc. This could also be modified to allow you to set the servers language, set another players language, etc. This issue affects those who have bungee enabled in config. This issue has been fixed in version 3.8.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-419"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:triton_project:triton:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.5",
            "matchCriteriaId" : "1D5B2B0A-229A-4F2E-8630-E89F5998121E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:triton_project:triton:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.4",
            "matchCriteriaId" : "3C47B5DC-D912-4CDB-98C8-6C5D9E03AFFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tritonmc/Triton/releases/tag/v3.8.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/tritonmc/Triton/security/advisories/GHSA-8vj5-jccf-q25r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/tritonmc/Triton/releases/tag/v3.8.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/tritonmc/Triton/security/advisories/GHSA-8vj5-jccf-q25r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-0683",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2023-05-01T15:15:09.223",
      "lastModified" : "2024-11-21T07:37:37.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "46A578A7-5436-4B92-9860-75F637C2F12B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BC05D-7619-41CC-88F7-90EBC242A15F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "6458E729-5B4D-4BF8-AC84-A73FA849A76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330331CB-6EF1-4263-B579-11E990C85F93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "D9F1172B-8113-4B8C-8455-86B10115E94C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBCFFB6F-C269-425B-AD66-9000BBC5DAE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx_enclosure_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "BB1D00C0-21CC-430E-822C-4E13B65D0880"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx_enclosure:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C22D09-B948-4EEE-9CEA-DAD0D8BE370E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1021_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "2FE708B8-65A8-497D-93EF-322579CE3651"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536A78A4-9C58-400F-AFBB-73186A0D3FDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "EA6FC032-324D-4FDC-8C74-D9CF82797334"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72B2526-8BD9-49FD-BDCF-B654BCEAC8AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "E98CCEAA-3A3C-4087-93B1-6DE7995113A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFD8C5A-D9E0-4EFF-92A3-17A6DBE7D155"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "142D1A60-2F5D-457B-92B7-59595F034765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD11357-E276-44E5-B825-F948D5A757CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "CD6712D8-253F-4952-AB21-BBFA54BF822C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1520-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DD614-F500-4FFB-8FD4-D2B284FE5E55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "688CFB0E-2095-4CE2-8CA4-E8BD32578F91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1521-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33A804F-C94C-4A6C-AA84-957834680652"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "0659AED4-D4E5-4FB4-8B31-550AF9F88893"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2320-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECFCE59-8456-47A3-8A8E-989813E37674"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "15BD47D1-90E7-4FC8-879D-E0EA9F72459A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E515C4-D2F2-4A71-9A9C-70A80477352A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "05CA0D28-CD71-4BDA-82B5-4528E68AEB8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:2.93_afbt30p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A825FF4-4686-4059-B291-64FB5AEBB866"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6D9490-0456-4C77-867C-21339F52D19E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "B915F44E-73A7-4DAF-9B2C-FEFACB62FB13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8CBCB0-7152-4FD0-A50E-280C42BB4B5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "4522BB27-A943-4188-B1C4-FA3CC0D2987C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2720-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2574C115-7511-422C-9383-D09B021B4946"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "8363826A-2858-46AA-98E5-5C89EA581CFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D3EBE9-34C1-45CA-A800-B313110409DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "F734FE11-80B5-494F-BE28-8FB4AA00963A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E6A2F7-7EC0-46E1-A973-2172B076E883"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "3D9FC871-32D4-400C-A1A3-BEB5D2C08204"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A30DA25-C17B-49A4-A5B5-21BC45C322C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "8EFC6D85-7FCE-4D68-84A9-3F155F0C8244"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66A9798-71F6-4884-AFC7-A695A713576A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "F9E5F98C-2B3E-4434-91BE-9CC19832A527"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66A9798-71F6-4884-AFC7-A695A713576A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3375_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "9D8B787A-EF21-4EF8-A75E-E187C0F18E2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8126219-A07C-42A6-9553-B6AE499DB6BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "BEE6A10B-6BCA-4D66-928B-38CF142EBF19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3376:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D7A545-BE29-4F0B-AC77-8E6DE955CA5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "32D2C9D3-D5AE-4DA4-AFF1-6F0FAC642F51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D354C3-0183-42D9-97D0-C9888B023195"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "857D7014-C3E6-478C-BF9C-82169315B351"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3521-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0DDCC8-46B7-43FA-8A4A-BCE8AB7F8480"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "D1E8FF43-8C7A-4354-9721-FB977104ECF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C38326D-97DD-4A6B-985F-968570528C19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "27FBBDA1-52E7-4B14-AFA5-9263739232C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCDE6B9-6505-4E44-A444-C4C3A054B5F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "4DBC989B-CB17-4BCC-9FDE-AE6C550698C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9FDCC0-F45C-4AA1-BB11-0761A25BF16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "9C19F289-5F84-4395-BEF1-F5DA7AED2DB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB95DEC-D622-4AD7-AC69-077A94BD752C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "D0777AEE-1F2E-40B4-9AA6-4782AAE940A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924C1B4B-6E97-4942-8000-BB59860913EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "4239FD66-7A2E-40E2-B953-1EC32C208024"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5521-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5788FFBD-69B4-4FB6-A2D2-4C6BA6CCE769"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "A1B8C4D2-C786-49B4-9B13-6975542D7504"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAEAB68-0F17-45BD-B0B9-0C5FD5BBE2AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "DB1BAE65-812F-4B21-A4A0-060243B45B72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16776C5F-CCAF-4F22-B570-FE49A0B73FF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "94311D5A-15B6-43A9-9030-092421C591BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F350D6FE-7BE1-46C9-B1A6-4EE0AF8BCB55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "6458E729-5B4D-4BF8-AC84-A73FA849A76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330331CB-6EF1-4263-B579-11E990C85F93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5154CD2F-AD5C-45D8-BDDF-3E57499A62B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD32840-AF55-49C1-A8B4-A4D3B0F85B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "E6A3E984-CE12-4694-BE64-FAC6478C0F38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD32840-AF55-49C1-A8B4-A4D3B0F85B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "F611877D-BE44-4937-8341-A00EEBD4E870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2540A2-1462-42F7-949C-9881544DE684"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7821_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "1D2C5786-2B7B-4F04-AFC2-51C6EF62DA7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E153D62-9443-4F52-BA47-5C2704E05BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx1020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5BE64E31-8CD0-431E-BEDC-F23A31DBA009"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx1020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0E5EF6-2664-4DEC-BD90-BF3128DC9DA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3330-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "68A20D8C-90CC-436E-8125-C471C5C41261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3330-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308EAB87-EF05-487F-B5AA-4D7E58937BB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "813A389B-F55B-4B16-A67D-AC565228AE4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3330-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1387DB10-2478-41E8-937A-98012A5FAB6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3331-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "BA3EBCAA-0456-4DC8-834F-FDFCB3A41240"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3331-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2EB352F-AFEB-433D-84A3-5C849B658647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3331-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "FC2F4A4F-C30B-4322-8E54-159E83027FD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3331-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC19B72-13E8-4F13-89AC-2112FC6EE809"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3530_f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "1947D638-A324-483D-BC37-5AB3B345935B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3530_f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55863D2-D2A9-4BFC-9560-2E0DF99388C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3530-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "747BF99D-6B3A-4954-B99E-107E55F828A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3530-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E740BCC-B3FF-4A6E-B9CD-0D13FAE1D9FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3531_h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "65611366-BA40-4064-B617-9320BA705C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3531_h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF566DC8-C3A9-49AF-8B9C-C4FB8D94A7F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3531-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "89CD08E6-5746-495B-A9E1-DF8F7A7BE347"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3531-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F87CEA-8200-4345-9804-693D5B8F98A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx1021_on_se350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "6B7FF257-18D2-4543-8C5A-E37116DC28FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx1021_on_se350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA103E0-C6DC-4D57-8538-6AA71E6CEF99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_1se_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "C23661E8-A862-4ACC-9B71-07C0DEC1BBB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_1se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBC1C9E-C548-4881-817B-109943BEA02F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_2u4n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E93D0BA3-1BA9-456E-856E-C33E247C5504"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_2u4n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5DD2F7-6D91-42A5-827D-9A44F319CB01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_4u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "CB958079-C9EC-45DE-B00B-46415BA1622E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_4u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D2593D-E1D1-4C4F-884A-5E877E92C715"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx1320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "6B6F3B7E-020F-434E-B783-8F99AE03A321"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11E00E8-4234-401D-8A0E-6EC1A15F44BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx2320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "AFE27D87-68EC-430A-81D4-26CD3FF32C59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx2320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7500A0-B95E-4E16-B532-28C139C94AF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "2CE03063-DDCF-41C3-8E87-AF633EC1EF5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx2330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDB5BE9-76C0-4708-805E-6DA37E91648F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "71B491BF-9E31-4F61-99CE-1CC56674307C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8B3E93-970D-4B49-B5A6-6BFAC45BAAC4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "E3A5670D-01D2-470A-8FB7-7C671262EA4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F449A0D-B2EA-4747-BA7E-88CD4371220C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "BB7F61E0-643F-4DB1-9443-64419C6E24A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72422C47-0027-4B4E-9C82-78FE8A8A6D75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "C3B6116B-60E4-4812-AE59-3077C6F2DC54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3530-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E73BA833-D02E-4274-ABF7-8F1D41815AB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "D4B2AF5E-FBA2-4849-A8AF-DABF740EF58F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE87366A-7CDB-46B7-AB89-7839D41B7E25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx5520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "CCB8C97C-EA12-43B8-9045-4880407C1DC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704A1043-7626-412C-8666-9088B3AA1147"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "399D2889-4FB6-4905-880D-7CB54FF3026B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx5530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81BDD8F1-B6B4-48D9-854F-9BFE19CD2B94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7320_n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "8521B23A-3D81-44EE-822D-29CD56DB1B72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7320_n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435794D6-7773-4D93-96E2-7269EB863A04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "F5045D7C-7A21-46D3-B134-D98EC417C0EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166A619E-C222-4169-8A68-8E718BE27355"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "047ECA24-3DF5-40D3-ABC4-1ED5FF7B71E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25483F5-F222-42AF-ACA4-580CD2965C55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7520_n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "5657C581-5228-4682-B7DD-CD80E3FC257A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7520_n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C923CF1-EB97-431F-9D85-0CB5C921A040"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "DE4798E2-B3C8-4403-B17C-4E625DC44A37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD5438A-321C-4C7E-9170-C80DA27F9271"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "CC0BBC40-968C-42C2-9E04-0815105D8042"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6DC1F2D-AA5A-49D4-A0FD-491B1938406F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "F109BF72-D7BB-461A-AA30-E76935BA609D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E690D37-4DFD-477A-B159-C31D50215C90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkedge_se450__firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.60_usx324o",
            "matchCriteriaId" : "B86C0C5D-4B78-4D27-A05E-8BD86A70ED5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkedge_se450_:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F49BD4-9119-4557-826A-7281C23F484D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p920_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "9EA34703-1E2C-4176-8709-605E4F2A02DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D47FCAA7-B33F-4F00-85BA-AA8ED4790572"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "B991E62F-B51F-4099-898A-77163DECC89D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2588DA2E-6E58-4FA2-9AA6-FC669C042197"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "445A9ABC-DE1D-44A6-9923-AB40FD0805FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "123E924B-D00B-4B9F-B890-1EF670D16F45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "F361E67B-3AF7-45A4-9706-89FC6E334FFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1FF5D0-CC08-42B0-9798-55ED911B3EF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "DC2DA420-0751-4277-8A1F-5B91F28E12A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4729C86-050B-4C6B-96F2-7C60AC3086B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "B7366A53-32BD-4E02-9279-7753A450341B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650-n_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E11CA6-2B14-4F2F-A6D3-A3F3A0199FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_se350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "8F3136AC-3E8C-4656-8F39-297318ED0A92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_se350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4B877C-8D19-4AD2-948D-ADBD9B1BEEED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "7432CA66-F205-468A-907A-38D1D682A52A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB64709-93BA-43D8-A1DB-4CE405291430"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "0D45F7DC-29BD-4B69-AA74-49C02932176B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn550_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2728329-AC98-4AB6-B448-C1B203027593"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "366829A3-C06E-487D-8A19-B4E0BA89A1D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB0C393-2CB4-485F-93E2-2F28B19F9325"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E5071012-4ACA-49B4-B2E4-CF58EFCF3F3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6334030-07E4-45F4-A233-4A37F77FC573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr158_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "5DA538D2-D68F-4A81-9542-D16D9B9CDDBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr158:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94182EE-10FE-4506-BDE0-06F4140923FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "B040A2F8-14A4-4771-825C-4DFE8373BFC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B52AC1-714E-4217-8599-80D99E0D33B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr250_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "2DEFAAB8-2DA6-43FF-BC68-56B55896DEDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr250_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071805DB-3A2D-4280-8774-08374DF4CD93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr258_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "3AB2F675-A323-4FD5-AD9E-5043FC7C54CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr258:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB19D273-4975-4957-AE94-117B607CD746"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "3F7C1851-4290-4F17-9AAD-2F7405CEDC0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr258_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466F8F21-C0F8-45CF-9C02-57FBE489645F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "A60174DF-78B5-4386-A6AC-93056F9C8A4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C6628A-8A99-4841-A7C5-0445A03C638D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "335F4367-870F-46FE-B386-99963D299D02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10850BF-A7EA-4B84-B2EF-66DCCC301514"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr570_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "796B8297-3696-47B7-AFF3-208673BEC73D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A7C5BE3-5429-46B0-B0B5-C86A9B6376A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr590_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "549082C5-9A49-47A7-B8F5-A021205189C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DC615C-A88A-4C45-892F-77C5E84104E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr630_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "E9B558D7-23FD-4717-B125-9334740E89C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F10C8D-C9C7-4FAD-980D-7A602C8BE81D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "9FD2C32D-CE92-4267-B721-4E6BA3BCEBEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF029E34-9819-404D-BEBC-F540590EE8FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr645_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "96A0115D-E62B-45A5-9BEE-62A9596D315D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE27586B-1CC9-42A3-B763-93972E204A6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "C7D7FA8D-4AB6-45C1-A6D0-130F87B14DB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr645_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3665C4-48C2-4050-916C-AEA0FAF30784"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "1C5D57E5-C539-4D7B-A32A-E54E7FF5B408"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C2B5BB-6E1F-4E01-AAE8-A8239AB8945E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5A75C9E8-7B9F-4343-B743-BD24A6F72C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D85AE20-A6A9-48E4-8CAD-537B87730867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr665_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "37F155A4-AB0C-443E-B8ED-45267CF704ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr665:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE69184-CA94-4A27-AFF2-3B1B81D25CBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "33898282-91C7-4365-86FF-D71336250153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr665_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C2705-D987-47B7-AA38-8222803CD83A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr670_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "70EFB884-36E2-4CDA-8836-65EEFB531CA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1664DE-A6AE-4365-A652-80CEFECB62DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "C7A54480-EB88-4DE9-8C30-417BCD8D06FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr670_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E97E5B4D-0E6F-49B0-8466-54A818517965"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E4D79679-9E6C-453B-B4F8-195D0AE62A5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19771143-D5F1-4F2F-AB83-09913894681E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "51B4C248-04B6-4B4F-A0CB-021C43DFB933"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4710B7-E7EF-47A2-9585-8B6586FE036C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "ADF44750-740F-44C3-82A7-1A8908A571AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A833BF2-DD7B-4A09-AAB8-14C0C7C5DE10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "78DE24D8-BE6C-4776-85C6-B30EA84F1EDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF08144-ECCB-477B-A934-E4578522BFEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "616885E2-3714-4C4F-B881-441DAA40BF4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr860_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D22E89-BE6A-4664-8E5B-7DB06DF9B553"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr950_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "AD750E19-509E-4C9E-BDE0-D0CA8EF1F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B0407D-D603-48AE-9A42-F4C68056E19D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "9FDBF980-D496-44AC-B7AF-E1FBD0BFEC9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF2350D-34B1-44DB-8E4A-6F29B37D96CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "DB77AEB0-D4A9-4987-B3A0-8F32FB38935A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st250_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A83C7C5-8716-4C2F-A940-8F594DB106A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st258_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "04A90DDE-C19D-47B2-B3C4-A76D82ED39E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st258:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089F97B1-FEDE-4A5D-91D3-0517E8D39174"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "FE973C76-76AA-4DC9-8155-0497E8BD8C5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st258_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BF1FFA-1627-4F21-A9BC-8D3399681DBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "13E3631D-714F-493E-8C1F-059F17A776EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B19107-5B45-4E45-8B34-90B5A1FF3962"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "AF3840B6-84D3-493A-B635-EF9E937BC8E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "968449F6-73F2-42C9-A3F4-3116408970F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "ABC96406-9E8F-497F-BA52-E1E0777F9189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st658_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F32794E-362A-4A0B-8B13-95F42AA470CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-99936",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-99936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-25492",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2023-05-01T15:15:09.290",
      "lastModified" : "2024-11-21T07:49:36.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "46A578A7-5436-4B92-9860-75F637C2F12B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C62BC05D-7619-41CC-88F7-90EBC242A15F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "6458E729-5B4D-4BF8-AC84-A73FA849A76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330331CB-6EF1-4263-B579-11E990C85F93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "D9F1172B-8113-4B8C-8455-86B10115E94C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBCFFB6F-C269-425B-AD66-9000BBC5DAE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx_enclosure_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "BB1D00C0-21CC-430E-822C-4E13B65D0880"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx_enclosure:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C22D09-B948-4EEE-9CEA-DAD0D8BE370E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1021_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "2FE708B8-65A8-497D-93EF-322579CE3651"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536A78A4-9C58-400F-AFBB-73186A0D3FDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "EA6FC032-324D-4FDC-8C74-D9CF82797334"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72B2526-8BD9-49FD-BDCF-B654BCEAC8AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "E98CCEAA-3A3C-4087-93B1-6DE7995113A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADFD8C5A-D9E0-4EFF-92A3-17A6DBE7D155"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "142D1A60-2F5D-457B-92B7-59595F034765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD11357-E276-44E5-B825-F948D5A757CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "CD6712D8-253F-4952-AB21-BBFA54BF822C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1520-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DD614-F500-4FFB-8FD4-D2B284FE5E55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "688CFB0E-2095-4CE2-8CA4-E8BD32578F91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1521-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33A804F-C94C-4A6C-AA84-957834680652"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "0659AED4-D4E5-4FB4-8B31-550AF9F88893"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2320-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECFCE59-8456-47A3-8A8E-989813E37674"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "15BD47D1-90E7-4FC8-879D-E0EA9F72459A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E515C4-D2F2-4A71-9A9C-70A80477352A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "05CA0D28-CD71-4BDA-82B5-4528E68AEB8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:2.93_afbt30p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A825FF4-4686-4059-B291-64FB5AEBB866"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6D9490-0456-4C77-867C-21339F52D19E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "B915F44E-73A7-4DAF-9B2C-FEFACB62FB13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8CBCB0-7152-4FD0-A50E-280C42BB4B5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "4522BB27-A943-4188-B1C4-FA3CC0D2987C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2720-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2574C115-7511-422C-9383-D09B021B4946"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "8363826A-2858-46AA-98E5-5C89EA581CFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D3EBE9-34C1-45CA-A800-B313110409DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "F734FE11-80B5-494F-BE28-8FB4AA00963A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E6A2F7-7EC0-46E1-A973-2172B076E883"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "3D9FC871-32D4-400C-A1A3-BEB5D2C08204"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A30DA25-C17B-49A4-A5B5-21BC45C322C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "8EFC6D85-7FCE-4D68-84A9-3F155F0C8244"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66A9798-71F6-4884-AFC7-A695A713576A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "F9E5F98C-2B3E-4434-91BE-9CC19832A527"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D66A9798-71F6-4884-AFC7-A695A713576A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3375_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "9D8B787A-EF21-4EF8-A75E-E187C0F18E2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8126219-A07C-42A6-9553-B6AE499DB6BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "BEE6A10B-6BCA-4D66-928B-38CF142EBF19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3376:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D7A545-BE29-4F0B-AC77-8E6DE955CA5B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "32D2C9D3-D5AE-4DA4-AFF1-6F0FAC642F51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D354C3-0183-42D9-97D0-C9888B023195"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "857D7014-C3E6-478C-BF9C-82169315B351"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3521-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0DDCC8-46B7-43FA-8A4A-BCE8AB7F8480"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "D1E8FF43-8C7A-4354-9721-FB977104ECF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C38326D-97DD-4A6B-985F-968570528C19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "27FBBDA1-52E7-4B14-AFA5-9263739232C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3721:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCDE6B9-6505-4E44-A444-C4C3A054B5F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "4DBC989B-CB17-4BCC-9FDE-AE6C550698C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9FDCC0-F45C-4AA1-BB11-0761A25BF16B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "9C19F289-5F84-4395-BEF1-F5DA7AED2DB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB95DEC-D622-4AD7-AC69-077A94BD752C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "D0777AEE-1F2E-40B4-9AA6-4782AAE940A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924C1B4B-6E97-4942-8000-BB59860913EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "4239FD66-7A2E-40E2-B953-1EC32C208024"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5521-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5788FFBD-69B4-4FB6-A2D2-4C6BA6CCE769"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "A1B8C4D2-C786-49B4-9B13-6975542D7504"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAEAB68-0F17-45BD-B0B9-0C5FD5BBE2AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "DB1BAE65-812F-4B21-A4A0-060243B45B72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16776C5F-CCAF-4F22-B570-FE49A0B73FF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "94311D5A-15B6-43A9-9030-092421C591BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F350D6FE-7BE1-46C9-B1A6-4EE0AF8BCB55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "6458E729-5B4D-4BF8-AC84-A73FA849A76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330331CB-6EF1-4263-B579-11E990C85F93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5154CD2F-AD5C-45D8-BDDF-3E57499A62B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD32840-AF55-49C1-A8B4-A4D3B0F85B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "E6A3E984-CE12-4694-BE64-FAC6478C0F38"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD32840-AF55-49C1-A8B4-A4D3B0F85B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "F611877D-BE44-4937-8341-A00EEBD4E870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2540A2-1462-42F7-949C-9881544DE684"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_hx7821_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "1D2C5786-2B7B-4F04-AFC2-51C6EF62DA7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E153D62-9443-4F52-BA47-5C2704E05BC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx1020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5BE64E31-8CD0-431E-BEDC-F23A31DBA009"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx1020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0E5EF6-2664-4DEC-BD90-BF3128DC9DA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3330-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "68A20D8C-90CC-436E-8125-C471C5C41261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3330-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "308EAB87-EF05-487F-B5AA-4D7E58937BB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "813A389B-F55B-4B16-A67D-AC565228AE4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3330-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1387DB10-2478-41E8-937A-98012A5FAB6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3331-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "BA3EBCAA-0456-4DC8-834F-FDFCB3A41240"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3331-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2EB352F-AFEB-433D-84A3-5C849B658647"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3331-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "FC2F4A4F-C30B-4322-8E54-159E83027FD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3331-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC19B72-13E8-4F13-89AC-2112FC6EE809"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3530_f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "1947D638-A324-483D-BC37-5AB3B345935B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3530_f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55863D2-D2A9-4BFC-9560-2E0DF99388C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3530-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "747BF99D-6B3A-4954-B99E-107E55F828A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3530-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E740BCC-B3FF-4A6E-B9CD-0D13FAE1D9FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3531_h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "65611366-BA40-4064-B617-9320BA705C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3531_h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF566DC8-C3A9-49AF-8B9C-C4FB8D94A7F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx3531-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "89CD08E6-5746-495B-A9E1-DF8F7A7BE347"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx3531-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F87CEA-8200-4345-9804-693D5B8F98A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_mx1021_on_se350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "6B7FF257-18D2-4543-8C5A-E37116DC28FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx1021_on_se350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA103E0-C6DC-4D57-8538-6AA71E6CEF99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_1se_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "C23661E8-A862-4ACC-9B71-07C0DEC1BBB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_1se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBC1C9E-C548-4881-817B-109943BEA02F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_2u4n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E93D0BA3-1BA9-456E-856E-C33E247C5504"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_2u4n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5DD2F7-6D91-42A5-827D-9A44F319CB01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx_4u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "CB958079-C9EC-45DE-B00B-46415BA1622E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_4u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D2593D-E1D1-4C4F-884A-5E877E92C715"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx1320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "6B6F3B7E-020F-434E-B783-8F99AE03A321"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D11E00E8-4234-401D-8A0E-6EC1A15F44BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx2320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "AFE27D87-68EC-430A-81D4-26CD3FF32C59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx2320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7500A0-B95E-4E16-B532-28C139C94AF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "2CE03063-DDCF-41C3-8E87-AF633EC1EF5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx2330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDB5BE9-76C0-4708-805E-6DA37E91648F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "71B491BF-9E31-4F61-99CE-1CC56674307C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A8B3E93-970D-4B49-B5A6-6BFAC45BAAC4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "E3A5670D-01D2-470A-8FB7-7C671262EA4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F449A0D-B2EA-4747-BA7E-88CD4371220C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "BB7F61E0-643F-4DB1-9443-64419C6E24A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72422C47-0027-4B4E-9C82-78FE8A8A6D75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "C3B6116B-60E4-4812-AE59-3077C6F2DC54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3530-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E73BA833-D02E-4274-ABF7-8F1D41815AB3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "D4B2AF5E-FBA2-4849-A8AF-DABF740EF58F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE87366A-7CDB-46B7-AB89-7839D41B7E25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx5520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "CCB8C97C-EA12-43B8-9045-4880407C1DC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704A1043-7626-412C-8666-9088B3AA1147"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "399D2889-4FB6-4905-880D-7CB54FF3026B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx5530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81BDD8F1-B6B4-48D9-854F-9BFE19CD2B94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7320_n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "8521B23A-3D81-44EE-822D-29CD56DB1B72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7320_n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "435794D6-7773-4D93-96E2-7269EB863A04"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "F5045D7C-7A21-46D3-B134-D98EC417C0EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "166A619E-C222-4169-8A68-8E718BE27355"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7520_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "047ECA24-3DF5-40D3-ABC4-1ED5FF7B71E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E25483F5-F222-42AF-ACA4-580CD2965C55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7520_n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "5657C581-5228-4682-B7DD-CD80E3FC257A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7520_n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C923CF1-EB97-431F-9D85-0CB5C921A040"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "DE4798E2-B3C8-4403-B17C-4E625DC44A37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD5438A-321C-4C7E-9170-C80DA27F9271"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "CC0BBC40-968C-42C2-9E04-0815105D8042"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7531:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6DC1F2D-AA5A-49D4-A0FD-491B1938406F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkagile_vx7820_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "F109BF72-D7BB-461A-AA30-E76935BA609D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E690D37-4DFD-477A-B159-C31D50215C90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkedge_se450__firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.60_usx324o",
            "matchCriteriaId" : "B86C0C5D-4B78-4D27-A05E-8BD86A70ED5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkedge_se450_:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8F49BD4-9119-4557-826A-7281C23F484D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinkstation_p920_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "9EA34703-1E2C-4176-8709-605E4F2A02DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkstation_p920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D47FCAA7-B33F-4F00-85BA-AA8ED4790572"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "B991E62F-B51F-4099-898A-77163DECC89D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2588DA2E-6E58-4FA2-9AA6-FC669C042197"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "445A9ABC-DE1D-44A6-9923-AB40FD0805FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "123E924B-D00B-4B9F-B890-1EF670D16F45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "F361E67B-3AF7-45A4-9706-89FC6E334FFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1FF5D0-CC08-42B0-9798-55ED911B3EF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "DC2DA420-0751-4277-8A1F-5B91F28E12A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4729C86-050B-4C6B-96F2-7C60AC3086B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "B7366A53-32BD-4E02-9279-7753A450341B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650-n_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2E11CA6-2B14-4F2F-A6D3-A3F3A0199FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_se350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "8F3136AC-3E8C-4656-8F39-297318ED0A92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_se350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4B877C-8D19-4AD2-948D-ADBD9B1BEEED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "7432CA66-F205-468A-907A-38D1D682A52A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB64709-93BA-43D8-A1DB-4CE405291430"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "0D45F7DC-29BD-4B69-AA74-49C02932176B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn550_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2728329-AC98-4AB6-B448-C1B203027593"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sn850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "366829A3-C06E-487D-8A19-B4E0BA89A1D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB0C393-2CB4-485F-93E2-2F28B19F9325"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E5071012-4ACA-49B4-B2E4-CF58EFCF3F3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6334030-07E4-45F4-A233-4A37F77FC573"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr158_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "5DA538D2-D68F-4A81-9542-D16D9B9CDDBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr158:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94182EE-10FE-4506-BDE0-06F4140923FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "B040A2F8-14A4-4771-825C-4DFE8373BFC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B52AC1-714E-4217-8599-80D99E0D33B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr250_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "2DEFAAB8-2DA6-43FF-BC68-56B55896DEDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr250_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071805DB-3A2D-4280-8774-08374DF4CD93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr258_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "3AB2F675-A323-4FD5-AD9E-5043FC7C54CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr258:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB19D273-4975-4957-AE94-117B607CD746"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "3F7C1851-4290-4F17-9AAD-2F7405CEDC0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr258_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "466F8F21-C0F8-45CF-9C02-57FBE489645F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr530_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "A60174DF-78B5-4386-A6AC-93056F9C8A4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C6628A-8A99-4841-A7C5-0445A03C638D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "335F4367-870F-46FE-B386-99963D299D02"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10850BF-A7EA-4B84-B2EF-66DCCC301514"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr570_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "796B8297-3696-47B7-AFF3-208673BEC73D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A7C5BE3-5429-46B0-B0B5-C86A9B6376A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr590_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "549082C5-9A49-47A7-B8F5-A021205189C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DC615C-A88A-4C45-892F-77C5E84104E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr630_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "E9B558D7-23FD-4717-B125-9334740E89C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F10C8D-C9C7-4FAD-980D-7A602C8BE81D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "9FD2C32D-CE92-4267-B721-4E6BA3BCEBEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr630_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF029E34-9819-404D-BEBC-F540590EE8FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr645_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "96A0115D-E62B-45A5-9BEE-62A9596D315D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr645:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE27586B-1CC9-42A3-B763-93972E204A6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "C7D7FA8D-4AB6-45C1-A6D0-130F87B14DB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr645_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3665C4-48C2-4050-916C-AEA0FAF30784"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "1C5D57E5-C539-4D7B-A32A-E54E7FF5B408"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C2B5BB-6E1F-4E01-AAE8-A8239AB8945E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.93_afbt30p",
            "matchCriteriaId" : "5A75C9E8-7B9F-4343-B743-BD24A6F72C7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D85AE20-A6A9-48E4-8CAD-537B87730867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr665_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "37F155A4-AB0C-443E-B8ED-45267CF704ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr665:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AE69184-CA94-4A27-AFF2-3B1B81D25CBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.71_d8bt48p",
            "matchCriteriaId" : "33898282-91C7-4365-86FF-D71336250153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr665_v3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863C2705-D987-47B7-AA38-8222803CD83A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr670_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "70EFB884-36E2-4CDA-8836-65EEFB531CA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1664DE-A6AE-4365-A652-80CEFECB62DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "C7A54480-EB88-4DE9-8C30-417BCD8D06FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr670_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E97E5B4D-0E6F-49B0-8466-54A818517965"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "E4D79679-9E6C-453B-B4F8-195D0AE62A5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19771143-D5F1-4F2F-AB83-09913894681E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "51B4C248-04B6-4B4F-A0CB-021C43DFB933"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F4710B7-E7EF-47A2-9585-8B6586FE036C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr850p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "ADF44750-740F-44C3-82A7-1A8908A571AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A833BF2-DD7B-4A09-AAB8-14C0C7C5DE10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr860_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "78DE24D8-BE6C-4776-85C6-B30EA84F1EDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF08144-ECCB-477B-A934-E4578522BFEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "616885E2-3714-4C4F-B881-441DAA40BF4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr860_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81D22E89-BE6A-4664-8E5B-7DB06DF9B553"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_sr950_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75_psi348s",
            "matchCriteriaId" : "AD750E19-509E-4C9E-BDE0-D0CA8EF1F6C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B0407D-D603-48AE-9A42-F4C68056E19D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "9FDBF980-D496-44AC-B7AF-E1FBD0BFEC9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF2350D-34B1-44DB-8E4A-6F29B37D96CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "DB77AEB0-D4A9-4987-B3A0-8F32FB38935A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st250_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A83C7C5-8716-4C2F-A940-8F594DB106A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st258_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.72_tei388s",
            "matchCriteriaId" : "04A90DDE-C19D-47B2-B3C4-A76D82ED39E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st258:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089F97B1-FEDE-4A5D-91D3-0517E8D39174"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "FE973C76-76AA-4DC9-8155-0497E8BD8C5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st258_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31BF1FFA-1627-4F21-A9BC-8D3399681DBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.88_cdi3a4a",
            "matchCriteriaId" : "13E3631D-714F-493E-8C1F-059F17A776EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B19107-5B45-4E45-8B34-90B5A1FF3962"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "AF3840B6-84D3-493A-B635-EF9E937BC8E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st650_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "968449F6-73F2-42C9-A3F4-3116408970F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.60_tgbt42h",
            "matchCriteriaId" : "ABC96406-9E8F-497F-BA52-E1E0777F9189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st658_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F32794E-362A-4A0B-8B13-95F42AA470CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-99936",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-99936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-28092",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2023-05-01T15:15:09.357",
      "lastModified" : "2024-11-21T07:54:23.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system being vulnerable to exploits by attackers with physical access inside the server chassis.\n\n"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-alert@hpe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:integrated_lights-out_firmware:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "669BABDD-65EC-44AB-833C-AFF4224EB356"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:integrated_lights-out:6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F211ABF9-9617-43CF-9DC5-E46CB0518B7E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hp:proliant_rl300_firmware:1.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CCE84C1-7EF8-4460-8417-A1A769933E41"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hp:proliant_rl300:gen_11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E35165C-B5B8-47E2-829C-AE0187F3BBE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04472en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04472en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T16:15:11.240",
      "lastModified" : "2025-01-30T17:15:14.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the file parameter to function coversUpload."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:antabot_white-jotter_project:antabot_white-jotter:0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B15D54A-E438-4607-A5AE-4BD2725858B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Antabot/White-Jotter/blob/c1c5d66fda090b986b8f46a7132d403e3b038c5d/wj/src/main/java/com/gm/wj/controller/LibraryController.java#L63",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Antabot/White-Jotter/issues/157",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Antabot/White-Jotter/blob/c1c5d66fda090b986b8f46a7132d403e3b038c5d/wj/src/main/java/com/gm/wj/controller/LibraryController.java#L63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Antabot/White-Jotter/issues/157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29636",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T16:15:11.377",
      "lastModified" : "2026-01-27T15:58:36.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via the \"title\" field in the \"blog management\" page due to the the default configuration not using MyBlogUtils.cleanString."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zhenfeng13:my_blog:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E31C76-F014-4826-8D52-57028752C526"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZHENFENG13/My-Blog/issues/131",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ZHENFENG13/My-Blog/issues/131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T16:15:11.433",
      "lastModified" : "2025-01-30T17:15:14.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in Qbian61 forum-java, allows attackers to inject arbitrary web script or HTML via editing the article content in the \"article editor\" page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qbian61_forum-java_project:qbian61_forum-java:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F21246B-6BD8-45CB-BDB8-EC715B7A4027"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Qbian61/forum-java/issues/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Qbian61/forum-java/issues/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29638",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T16:15:11.483",
      "lastModified" : "2025-01-30T17:15:14.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in WinterChenS my-site before commit 3f0423da6d5200c7a46e200da145c1f54ee18548, allows attackers to inject arbitrary web script or HTML via editing blog articles."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winterchen:my-site:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2023-03-30",
            "matchCriteriaId" : "7E376747-13F6-420D-BEAF-E4A78226D839"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WinterChenS/my-site/issues/74",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WinterChenS/my-site/issues/74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T16:15:11.523",
      "lastModified" : "2026-01-27T15:58:49.753",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via editing an article in the \"blog article\" page due to the default configuration not utilizing MyBlogUtils.cleanString."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zhenfeng13:my_blog:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E31C76-F014-4826-8D52-57028752C526"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ZHENFENG13/My-Blog/issues/131",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ZHENFENG13/My-Blog/issues/131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T16:15:11.560",
      "lastModified" : "2025-01-30T19:15:12.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipandao:editor.md:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "3D6C2854-689B-4EC4-9C64-B39CAD660BDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pandao/editor.md/issues/985",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pandao/editor.md/issues/985",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29643",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T16:15:11.600",
      "lastModified" : "2025-01-30T19:15:12.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perfree:perfreeblog:3.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D85BC31-3119-4CC1-89DD-CF50428AEAD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/perfree/PerfreeBlog/issues/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/perfree/PerfreeBlog/issues/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2451",
      "sourceIdentifier" : "cna@vuldb.com",
      "published" : "2023-05-01T16:15:11.640",
      "lastModified" : "2024-11-21T07:58:38.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was found in SourceCodester Online DJ Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/bookings/view_details.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227795."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "cna@vuldb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@vuldb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_dj_management_system_project:online_dj_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6EE0BC-5D40-4EFC-BE67-D3A939B443E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ShellHunTerAndyLABA/bug_report/blob/main/SQLi-1.md",
        "source" : "cna@vuldb.com",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227795",
        "source" : "cna@vuldb.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.227795",
        "source" : "cna@vuldb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ShellHunTerAndyLABA/bug_report/blob/main/SQLi-1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://vuldb.com/?ctiid.227795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://vuldb.com/?id.227795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22503",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2023-05-01T17:15:08.993",
      "lastModified" : "2024-11-21T07:44:56.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of attachments and labels in a private Confluence space. This occurs via an Information Disclosure vulnerability in the macro preview feature.\r\n\r\nThis vulnerability was reported by Rojan Rijal of the Tinder Security Engineering team.\r\n\r\nThe affected versions are before version 7.13.15, from version 7.14.0 before 7.19.7, and from version 7.20.0 before 8.2.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@atlassian.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.13.15",
            "matchCriteriaId" : "ACD9E451-29B3-4D59-88E5-9AAB52C64B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.14.0",
            "versionEndExcluding" : "7.19.7",
            "matchCriteriaId" : "D6EA4793-BF98-4C48-9B80-90487A33B8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.20.0",
            "versionEndExcluding" : "8.2.0",
            "matchCriteriaId" : "7D5FBFE8-F97B-4E6B-B6AB-7EF9955B66BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.13.15",
            "matchCriteriaId" : "7A9A23C3-4831-4882-9786-F63F8990206C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.14.0",
            "versionEndExcluding" : "7.19.7",
            "matchCriteriaId" : "B9F35096-F530-45EA-827F-56537235CCE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.20.0",
            "versionEndExcluding" : "8.2.0",
            "matchCriteriaId" : "CBBB9EBB-FFFA-4AE8-BA5A-D06D6D9A309E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-82403",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-82403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22919",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-05-01T17:15:09.050",
      "lastModified" : "2024-11-21T07:45:39.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nbg6604_firmware:1.01\\(abir.0\\)c0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15A296FB-9677-4C44-AC38-854E60C0AC16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nbg6604:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA7D096-9ED5-4F07-A746-29662765F61E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-vulnerability-in-nbg6604-home-router",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-vulnerability-in-nbg6604-home-router",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22921",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-05-01T17:15:09.110",
      "lastModified" : "2024-11-21T07:45:39.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to store malicious scripts using a web management interface parameter, resulting in denial-of-service (DoS) conditions on an affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.3
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nbg-418n_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00\\(aarp.13\\)c0",
            "matchCriteriaId" : "FF173A52-88FB-4D7A-A22B-8F016EE07E06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nbg-418n:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B864E108-4477-4D56-B635-95A4B5F86AE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22922",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-05-01T17:15:09.163",
      "lastModified" : "2024-11-21T07:45:39.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated attacker to cause DoS conditions by sending crafted packets if Telnet is enabled on a vulnerable device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nbg-418n_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00\\(aarp.13\\)c0",
            "matchCriteriaId" : "FF173A52-88FB-4D7A-A22B-8F016EE07E06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nbg-418n:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B864E108-4477-4D56-B635-95A4B5F86AE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22923",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-05-01T17:15:09.220",
      "lastModified" : "2024-11-21T07:45:39.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker to cause denial-of-service (DoS) conditions on an affected device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nbg-418n_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00\\(aarp.13\\)c0",
            "matchCriteriaId" : "FF173A52-88FB-4D7A-A22B-8F016EE07E06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nbg-418n:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B864E108-4477-4D56-B635-95A4B5F86AE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-22924",
      "sourceIdentifier" : "security@zyxel.com.tw",
      "published" : "2023-05-01T17:15:09.273",
      "lastModified" : "2024-11-21T07:45:39.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to cause denial-of-service (DoS) conditions by executing crafted CLI commands on a vulnerable device."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@zyxel.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@zyxel.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nbg-418n_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00\\(aarp.13\\)c0",
            "matchCriteriaId" : "FF173A52-88FB-4D7A-A22B-8F016EE07E06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nbg-418n:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B864E108-4477-4D56-B635-95A4B5F86AE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router",
        "source" : "security@zyxel.com.tw",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2197",
      "sourceIdentifier" : "security@hashicorp.com",
      "published" : "2023-05-01T20:15:14.597",
      "lastModified" : "2025-01-30T16:15:29.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Vault Enterprise 1.13.0 up to 1.13.1 is vulnerable to a padding oracle attack when using an HSM in conjunction with the CKM_AES_CBC_PAD or CKM_AES_CBC encryption mechanisms. An attacker with privileges to modify storage and restart Vault may be able to intercept or modify cipher text in order to derive Vault’s root key. Fixed in 1.13.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@hashicorp.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@hashicorp.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndExcluding" : "1.13.2",
            "matchCriteriaId" : "CE468CF8-6DD1-476A-97CC-9FC0252AE726"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-14-vault-enterprise-vulnerable-to-padding-oracle-attacks-when-using-a-cbc-based-encryption-mechanism-with-a-hsm/53322",
        "source" : "security@hashicorp.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230609-0007/",
        "source" : "security@hashicorp.com"
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2023-14-vault-enterprise-vulnerable-to-padding-oracle-attacks-when-using-a-cbc-based-encryption-mechanism-with-a-hsm/53322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20230609-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-26987",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T22:15:09.483",
      "lastModified" : "2025-01-30T17:15:13.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konga_project:konga:0.14.9:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C66FE5-35C7-4652-A37A-92E647B83056"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.google.com/document/d/14DYoZfKN__As8gBXMFae7wChKJXpmbuUdMn2Gf803Lw",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.google.com/document/d/14DYoZfKN__As8gBXMFae7wChKJXpmbuUdMn2Gf803Lw/edit",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redteambrasil/nuclei-templates",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://docs.google.com/document/d/14DYoZfKN__As8gBXMFae7wChKJXpmbuUdMn2Gf803Lw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.google.com/document/d/14DYoZfKN__As8gBXMFae7wChKJXpmbuUdMn2Gf803Lw/edit",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redteambrasil/nuclei-templates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T22:15:09.547",
      "lastModified" : "2025-01-30T17:15:13.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio and other unspecified impacts via embedded website on the canvas page."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obsidian:obsidian:1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2566DF3-56B3-4DEB-87AE-B4BD88863EA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.obsidian.md/t/embedded-web-pages-in-obsidian-canvas-can-use-sensitive-web-apis-without-the-users-permission-grant/54509",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://forum.obsidian.md/t/obsidian-release-v1-1-14-insider-build/54595",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/fivex3/CVE-2023-27035",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://forum.obsidian.md/t/embedded-web-pages-in-obsidian-canvas-can-use-sensitive-web-apis-without-the-users-permission-grant/54509",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://forum.obsidian.md/t/obsidian-release-v1-1-14-insider-build/54595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/fivex3/CVE-2023-27035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-27108",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T22:15:09.617",
      "lastModified" : "2025-01-30T17:15:13.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in KaiOS 3.0. The pre-installed Communications application exposes a Web Activity that returns the user's call log without origin or permission checks. An attacker can inject a JavaScript payload that runs in a browser or app without user interaction or consent. This allows an attacker to send the user's call logs to a remote server via XMLHttpRequest or Fetch."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kaiostech:kaios:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03AA5112-C7B7-4073-AF53-BE1DA528A0F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/Tombarr/5ed6675f33e0eca149a8b4d38ce76dda",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://kaios.dev/cve/1409490",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://gist.github.com/Tombarr/5ed6675f33e0eca149a8b4d38ce76dda",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://kaios.dev/cve/1409490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T22:15:09.673",
      "lastModified" : "2025-01-30T19:15:12.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext Transmission in set-cookie:ecos_pw: Tenda N301 v6.0, Firmware v12.02.01.61_multi allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:n301_firmware:12.03.01.06_pt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD0BB102-7E84-4569-A742-0FF1C14768C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:n301:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "673FB4DD-EAD8-4031-9778-8EC68C8B58A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%400ta/tenda-n301-v6-cve-2023-29680-cve-2023-29681-a40f7ae6dc62",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.youtube.com/watch?v=m7ZHfFcSKpU&ab_channel=0ta",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://medium.com/%400ta/tenda-n301-v6-cve-2023-29680-cve-2023-29681-a40f7ae6dc62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.youtube.com/watch?v=m7ZHfFcSKpU&ab_channel=0ta",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-29681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T22:15:09.723",
      "lastModified" : "2025-01-30T19:15:12.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext Transmission in cookie:ecos_pw: in Tenda N301 v6.0, firmware v12.03.01.06_pt allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:n301_firmware:12.02.01.61_multi:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32560BC-8CB5-41C8-9E61-90D828EA1DA8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:n301:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "673FB4DD-EAD8-4031-9778-8EC68C8B58A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%400ta/tenda-n301-v6-cve-2023-29680-cve-2023-29681-a40f7ae6dc62",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.youtube.com/watch?v=Xy9_hmpvvA4&ab_channel=0ta",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://medium.com/%400ta/tenda-n301-v6-cve-2023-29680-cve-2023-29681-a40f7ae6dc62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.youtube.com/watch?v=Xy9_hmpvvA4&ab_channel=0ta",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-30639",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2023-05-01T22:15:09.770",
      "lastModified" : "2025-01-30T16:15:29.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. 6.11.P4 (6.11.0.4) is also a fixed release."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archerirm:archer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0.0",
            "versionEndIncluding" : "6.11.0.4",
            "matchCriteriaId" : "5A1192C2-89D0-452C-B273-9B36965B2409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:archerirm:archer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.0.0",
            "versionEndExcluding" : "6.12.0.6.1",
            "matchCriteriaId" : "8E09D8A0-CC2F-426A-B843-D2F76604E8A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.archerirm.community/t5/security-advisories/archer-update-for-stored-cross-site-scripting/ta-p/697581",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.archerirm.community/t5/security-advisories/archer-update-for-stored-cross-site-scripting/ta-p/697581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-2247",
      "sourceIdentifier" : "security@octopus.com",
      "published" : "2023-05-02T05:15:28.113",
      "lastModified" : "2026-02-25T17:20:05.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_deploy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2018.3.0",
            "versionEndExcluding" : "2022.3.10929",
            "matchCriteriaId" : "22D1704B-F501-407B-83F5-97C5E5FB8239"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopus_deploy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2022.4.0",
            "versionEndExcluding" : "2022.4.8319",
            "matchCriteriaId" : "1DDA3B08-F921-4FE4-BBE3-BCC72E60A27F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisories.octopus.com/post/2023/sa2023-07/",
        "source" : "security@octopus.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisories.octopus.com/post/2023/sa2023-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21642",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2023-05-02T06:15:10.347",
      "lastModified" : "2024-11-21T07:43:16.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory corruption in HAB Memory management due to broad system privileges via physical address."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@qualcomm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D9E281-B382-41AC-84CB-5B1063E5AC51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qam8295p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44EBEBD5-98C3-493B-A108-FD4DE6FFBE97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D527E2B1-2A46-4FBA-9F7A-F5543677C8FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8374DDB3-D484-4141-AE0C-42333D2721F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE207DB-9770-40ED-961D-FDA75965826F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E23922D-C37F-476F-A623-4C1458A9156F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66671C1-AE1A-44BE-9DB2-0B09FF4417DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AA3929-3F80-4D54-B13A-9B070D5C03BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054F77D6-FC66-4151-9005-DC7ECDB5C722"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6150p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED3F589-16D9-46A7-A539-C9862473EE0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC40C14-3B2D-4E00-9E0F-86E6BDBF2D81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0514D433-162C-4680-8912-721D19BE6201"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71D74B0-0963-49FD-8E97-148C8993B263"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8145p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910CBFA4-50F7-4C7A-B9B9-B88C8A919827"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69C1B02F-8D2D-42E7-B70D-41F4D9844FD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8150p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEACAA9-C061-4713-9A54-37D8BFC0B00B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8648B38-2597-401A-8F53-D582FA911569"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CD59B-8F21-4CD6-8A1A-7B37547A8715"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BC0A66-493B-43BE-B51F-640BDF2FF32E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8195p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DA4D12-7ABF-4A04-B44E-E1D68C8E58AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A19659B-A0C3-44B7-8D54-BA21729873A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8295p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F978041A-CE28-4BDF-A7DB-F0360F1A5F14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8540p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE8B62D-83B4-4326-8A53-FED5947D5FFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8540p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6F8899-136A-4A57-9F02-BD428E1663DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A024AB04-B213-4018-A4C1-FA467C7BA775"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2A8AB7C-5D34-4794-8C06-2193075B323F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins/may-2023-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins/may-2023-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21665",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2023-05-02T06:15:10.433",
      "lastModified" : "2024-11-21T07:43:22.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory corruption in Graphics while importing a file."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@qualcomm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:315_5g_iot_modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A85141A5-667F-41BB-B84D-908E73A86759"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:315_5g_iot_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AC9E0F8-6E27-4F6B-A667-786272632A24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:9206_lte_modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C2632A-02F2-4C59-AF96-E2C77940360F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:9206_lte_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D10A104D-951A-4FA9-938A-1324640A998D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEDA6CA-A0FD-4A72-B856-C8E65AC86902"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D29295A-7183-46BE-B4EE-F891D1C17ED9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8052_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFE1790F-48DF-4426-96D3-E249D09D96BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8052:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DAAA479-0381-43F7-BF03-B21BCBD87EA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8056_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF26A582-CE43-4571-9815-2A789C5B065B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8056:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30004FD-C2FB-4C77-8489-D7A7EE9A9575"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8064au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDCB8499-A096-4633-8506-63C0A227A958"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8064au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE2C7C3-E928-4466-B537-0D1826E2223C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8076_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4CAA77-CC4D-49CF-9696-6C2542B31415"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8076:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19E8B60-4C5C-4D1C-B9F0-AB1FC1F58949"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6FCE91-BF38-49ED-8FFB-429BAFEE7832"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715A9F94-5F9E-45E5-B07B-699410C01478"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE1ADA9-8042-4CDE-A2B9-E96665CB41BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1DE046-DD70-4ACA-9DF4-59939DAC1889"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C88B9C86-2E8E-4DCE-A30C-02977CC00F00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE473A5A-5CFC-4F08-A173-30717F8BD0D7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:c-v2x_9150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A725088-FC3B-4439-9189-72AA10954721"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:c-v2x_9150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80D6366-4C0C-4C0D-9A38-769C66D62F0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA42F2EA-5D00-42B8-B020-C27675B72915"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:csra6620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCF207D-B8C8-4860-89C7-673C821F0237"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A35ECF-B12E-42DE-A74B-2C3BE03639A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:csra6640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B283D6-B2D2-49B6-98A8-08EDB54C1F15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBF42F8-50BA-4172-A3A0-7FD1BA4B3ED3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:csrb31024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "770F3924-BE27-4BDE-B922-680B3C9753EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34AB9074-97A3-43F0-B829-CDB4E3066AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362252ED-1DB3-4CF6-86DD-14919826D75E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6750_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EE21BA-7178-4D69-852D-2322844FC6B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9BACB28-F6EA-445A-B74F-0C3881FE59CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FBD6DF-F174-4690-AA3D-1E8974E3627F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BF86E1-3FAC-4A42-8C01-5944C6C30AE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn685x-5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3CF46D-E1CB-447E-8371-15C3F49B1AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn685x-5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74FDAF1-82D0-4136-BF97-25C56FCEE77C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn685x-1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A07C2049-B227-4849-85D0-B53D690C7697"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn685x-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D2DB07-B72B-4D44-A373-0C7EAB35F388"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:flight_rb5_5g_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD36089F-92DF-49EC-9C6F-4300E4903CB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:flight_rb5_5g_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19A754C-6900-4436-916D-F5361E0BC324"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca-4020-0-217msp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2A77682-1617-453C-A4CC-40C2FABCA746"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca-4020-0-217msp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82308FA-05AB-4E37-886E-9898B0EE80D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca-4020-1-217msp_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B47A8A5-0004-4047-BA5A-7728C8DA6FC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca-4020-1-217msp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "925301DA-DA5E-4B38-BCB7-9E4A210724E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca-4024-0-68cmqfn_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4997F9FF-4448-45C9-B614-D5A859875BA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca-4024-0-68cmqfn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57E7F9F-42EF-48D9-B841-86C644CA71F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca-4024-1-68cmqfn_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246B4152-2203-45FF-A767-D4B4B90254DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca-4024-1-68cmqfn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48CCBB66-3759-48F7-B989-A84AACB64A9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA44E1D7-C4B5-4A1C-8D89-C080856104EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268F94E5-15A2-4BCA-BE1B-0B6A7179B9C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9628_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC6FBEE-D2FA-4660-A078-D6CE2097653D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9628:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6BD8A1C-D9AB-4BE7-A855-31E58631879C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8108_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C8807E9-5972-47E7-8B39-2E4D68C7B79E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8108:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57963412-14B9-4C0D-AA0D-6928445DB808"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8209_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F64FA7-5EA1-4C91-B409-4A0E966FBD26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8209:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBCA5AB-07E4-404E-A278-28F6004D2126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8608_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AE9AEA-4D9F-4879-85F7-405279EFE5ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8608:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDED3AA7-576C-4437-A466-D627698F4242"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA1E7B0-782B-4757-B118-802943798984"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95CB08EC-AE12-4A54-AA3C-998F01FC8763"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D9E281-B382-41AC-84CB-5B1063E5AC51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qam8295p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44EBEBD5-98C3-493B-A108-FD4DE6FFBE97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6174_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0814A50-D8E6-42BD-A0A3-0768A3E28F53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6174:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2AD8F5C-1FEB-45C2-BC8F-123C2BEB0EA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF653D0-15CF-4A10-8D8E-BE56F4DAB890"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31FA74C-6659-4457-BC32-257624F43C66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DC4FBB-D9CB-43EB-829E-0A892306D0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0F8ED6-EAE7-44EA-A8C6-F5AD408261F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6320_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886CF046-E1D9-4FD4-AC02-EAB61C3F70FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059486E9-3F99-4C65-A763-470564EDAF2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6335_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966CDA56-809F-4FF4-909D-0DD92F44CF67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90747B4-2CC0-4816-A994-58E00F5ADA05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B53119-1B2F-4978-B7F5-33B84BE73B68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEBC0C5-CAA1-475C-96C2-B8D24B2E4536"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E16994A-6DBA-426C-ADD2-B1E8B49FEDBF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E674DE-55AB-44E5-8E00-C804FC9D4DC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6421_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503CEDEF-99D0-4432-88A0-295340743606"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9115A0-0D87-49BE-9A9B-091DBF8D9E6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A344E78F-D15A-460E-8EF8-7C6FC39F2D5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF5EC23-4884-4C2B-8E77-50B1E8E28A3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AFC483-1468-43FC-96FA-A56165C290E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A963FDF-6FF4-4F48-834E-2A14D241716D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6431_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FD6A24-B6F4-4C65-968F-AFF90A1A60B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34661A30-92C3-4F0D-ABD1-8DA8E928DFF9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04F574BC-9AB2-4B83-A466-556ECEBBD3DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6436:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34D021D-C043-4EFD-9AB3-B2174528CBA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00FE294D-4BE0-4436-9273-507E760884EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424CB795-58E5-43A4-A2EC-C563D93C5E72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886124F6-B397-4EB6-8E01-6012E468ABE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93ED74CE-6BF2-4983-8780-07D5336745B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59672A0-2FA6-46CC-B75A-C599B842AFB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3847F4A5-90A5-4C84-B43F-0DDD81BD79CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AC8-4A01-4537-B2BD-8180C99F5C32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C16E1E-9D4A-4F20-B697-833FDCCA86FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828CFB37-76A6-4927-9D00-AF9A1C432DD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11405993-5903-4716-B452-370281034B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D527E2B1-2A46-4FBA-9F7A-F5543677C8FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8374DDB3-D484-4141-AE0C-42333D2721F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DDA896-576C-44B8-85B6-F71F473F776B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A87BDA-5B24-4212-BAB3-D2BBB2F4162E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643EC76D-2836-48E6-81DA-78C4883C33CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477F6529-4CE1-44FC-B6EE-D24D44C71AE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "288F637F-22F8-47CF-B67F-C798A730A1BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0996EA3-1C92-4933-BE34-9CF625E59FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE207DB-9770-40ED-961D-FDA75965826F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E23922D-C37F-476F-A623-4C1458A9156F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA1F8F4-EAF2-4704-A8A6-19AD3CA1B577"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3F7853D-09EE-476F-B48D-BB30AEB4A67D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1C53DC-D2F3-4C92-9725-9A85340AF026"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0585FF-E390-46E8-8701-70964A4057BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA8F9DA-1386-4961-B9B2-484E4347852A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117289C8-7484-4EAE-8F35-A25768F00EED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9367_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD0E09B-92EC-4974-BC5F-66C3AAF586B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9367:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FBA48AB-85F4-4D6C-B811-87756B80FFB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D2B46E-3996-42FD-B932-09E92C02EC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E58C63-F253-4DCC-8A14-48FEB64B4C3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25565FDA-651D-4A05-8B1E-2188B6921253"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9379:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D49750-BBEA-4A3D-9898-28B7A50A7F42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB1F0FA-25F3-4304-A3BC-5264E55CC092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm2290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214A053F-D80C-4AD9-B4F1-83384095A3F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7FFB96-53E7-41A2-BC99-7ACD853214A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm4290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EBA77E-69A5-4145-9BEC-CD39BA132309"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB226552-52D9-44F5-A170-35C44761A72B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm6125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB16DC4-CDC9-4936-9C6A-0ED8E1F6D056"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD6D51E-5787-42A6-8A02-4EBBAFFF9C94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AA0291-B822-4CAD-BA17-81B632FC3FEF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A49DBE04-E2EA-4DA1-B774-A878A71524AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn6024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E98386-3BB2-4E8C-AD00-E05123608439"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn9011_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9306C34D-47E4-40CF-89F4-BA5263655D13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn9011:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BA009F-24E1-4953-BA95-2A5BC1CDBDBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F34DD2-9DC0-49E5-BC85-1543EA199477"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A06879F-6FE9-448A-8186-8347D76F872B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64CDA49-19BF-413F-A0E0-2B9729E45E25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn9024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345CCD64-C09E-407D-AAA2-311C4CCFE24F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65303C2D-C6BF-47CB-8146-E240CB8BBE42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn9074:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B03022-497A-4F42-BB4D-5624EA7DF1B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93CDB7BC-89F2-4482-B8E3-9DDBD918C851"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs2290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E03AE9-2485-449B-BCFD-3E452BB01FC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC43BB27-0516-4750-A4C2-C45298441398"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969585DE-93D6-4406-A632-D838ECD4D5AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06789CB9-E6FA-400D-90B6-C2DB6C8EF153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs4290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCB9F22-57F2-4327-95B9-B2342A02E45E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E634F59C-6817-4898-A141-082044E66836"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29762819-EC90-499C-A8C6-1423DE3FE6B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs6125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4468EA5D-87B0-4FEC-A3DB-617651B0D169"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs6125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA2C3E1-E285-4CAD-9FA3-813C8EC436F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "403AE561-6C9E-49F3-A5D6-C48DDD51D663"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs6490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FAC140F-FC5E-4C88-B777-7F5EBF49A695"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs8155_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487E7EA3-CE9C-4DB9-97D9-A74406C8BC9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs8155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644A4FF4-1494-480B-BDBA-22CC13C4E8EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs8250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CDDD37F-4C3A-4955-9AFB-7774021A0198"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs8250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D13E375-0562-4263-8452-53E117F14E83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qrb5165m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CC1C8B-F642-4068-B9E3-ECE027486E45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qrb5165m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60F8378-B827-4557-B891-A8A02F8F2A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qrb5165n_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BB1EB7-D194-4FE2-B4F6-A7A52F344DDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qrb5165n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2C90E7-0F3A-43BB-ABF7-63CEA7A85ADA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qsm8250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C194363-7FDE-43C9-B6FE-2BD6B474816F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qsm8250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CC9433-6B33-4B9C-8EC3-BBBB43897E5C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8905_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018C0E3A-1FA9-48B8-8697-92944B01DEF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8905:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB14FE2-9C61-4CD1-B8D1-DBF44FC89163"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8909_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5B6EF9-BD77-4BAD-88B1-688440F05520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659F47F0-D79A-423A-81FA-9CBFA04AD6C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda\\/sdm845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5634C93-0C39-43B6-A185-77CE005B7305"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda\\/sdm845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED618D9-DFDD-4306-BF6D-5D5636B60353"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qrb5165_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A1AAD0-9336-4657-8E1E-74E8F490C06E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qrb5165:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386F2F37-974B-40F2-9B23-ABD49C60E32D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa4150p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC99C0C-8AE3-4918-B91D-2C26990FE931"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa4150p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A558A868-1B67-48D2-8A94-FDEA7126FAE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa4155p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8D28764-EF4F-4FB3-B936-B42397450EFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa4155p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7964A762-467B-47D7-865F-30D48A0AE47C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66671C1-AE1A-44BE-9DB2-0B09FF4417DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AA3929-3F80-4D54-B13A-9B070D5C03BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054F77D6-FC66-4151-9005-DC7ECDB5C722"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6150p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED3F589-16D9-46A7-A539-C9862473EE0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6155_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C40544E-B040-491C-8DF3-50225E70B50C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2DAC85C-CDC9-4784-A69A-147A2CE8A8B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC40C14-3B2D-4E00-9E0F-86E6BDBF2D81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0514D433-162C-4680-8912-721D19BE6201"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71D74B0-0963-49FD-8E97-148C8993B263"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8145p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910CBFA4-50F7-4C7A-B9B9-B88C8A919827"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69C1B02F-8D2D-42E7-B70D-41F4D9844FD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8150p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEACAA9-C061-4713-9A54-37D8BFC0B00B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8155_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33EB594-B0D3-42F2-B1CA-B0E6C9D82C6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50EF47E5-2875-412F-815D-44804BB3A739"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8648B38-2597-401A-8F53-D582FA911569"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CD59B-8F21-4CD6-8A1A-7B37547A8715"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BC0A66-493B-43BE-B51F-640BDF2FF32E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8195p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DA4D12-7ABF-4A04-B44E-E1D68C8E58AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A19659B-A0C3-44B7-8D54-BA21729873A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8295p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F978041A-CE28-4BDF-A7DB-F0360F1A5F14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F900C8F-9763-441A-B97E-E5394A68A08A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589C1001-E9F6-41A6-BCC8-A94A3C97F2E6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd626_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9043720-6B49-4305-BB4F-C88CCB6D89E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd626:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8F19D3-F322-4CDC-83C5-A9F7F1777DAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3991C516-4FBE-43D8-835F-413FE45BF73E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CF5EBB-B25A-4A76-B522-951F108263CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8DA94C-23A0-4C99-9F05-144B9B5224B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E10E22-E7CC-41D6-80F3-030083F45645"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd675_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1497D052-884E-496B-BEF8-6904A25125ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589F4888-28F6-4ECA-860E-8054C2A8C419"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd730_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4DA7EA-DB81-4C71-A875-2612D8D7D726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F26F64-98D4-420A-8918-E5E56ABA1D47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA605FD-B801-43BB-B52D-879013F7F57E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908BFD96-0423-4AFC-B8F3-105B2D5B4C73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42B30014-95AB-4F24-A7A5-60A907502609"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F562ED3D-CBE3-4DCC-BFBB-DE0AD2425A9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72433485-B229-46A6-BCA4-394AA4EEA683"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd865_5g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D40EC4-BF31-4BFD-8D0A-8193F541AF02"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd888_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79219DA5-0D09-4CEF-AEFD-917F269AE7DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd888:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D30BACF-71C1-4A6D-8811-9AD708A98307"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E52771-4FB7-45DB-A349-4DD911F53752"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F6CE39-9299-4FC3-BC48-11F79034F2E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4079EC4E-ACCF-4BC4-BC3F-D7951C4B6496"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5765D9F4-4090-4470-A90A-7E72A50881AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93FB34B-3674-404D-9687-E092E9A246AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx55:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FF5A9A-A34A-499C-B6E0-D67B496C5454"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm4125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B93301-AFE8-409B-A8C8-6754BE5A0C14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm4125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B185412C-177F-48E2-87F9-1269E0FB8E31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACA2BF1-85D3-447F-A08D-B90330A22550"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2ABA18D-82C1-4366-B1D7-DED42DD3D5C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6250p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3FB2972-94B6-4716-BA96-4B452BA3990F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6250p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57F4F872-094E-4E27-BB89-D8251FAFB713"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7250p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76DB5472-DF51-4144-8A69-9B231CF782DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7250p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D395018-251C-45AA-9EE8-A638CAB0B508"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7315_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4508742-7D97-43D8-B8F5-041F4C588723"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7315:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8C63E8-169F-4164-BD49-348ED894813F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7325p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BEC725F-19B1-4078-B13D-CE624BE23344"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7325p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA43E38-A12D-49C3-B05C-A2AF07ED2710"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8053-lite_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C3BB753-BA74-4E55-B959-EA0A52DB8ECB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8053-lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A21D60-C115-4499-A2FE-92F378E29851"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7AAC62-F40F-4437-9340-DFB913A5A6C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6705C690-106E-4834-8E4F-3FDA5C72DD3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq5053-aa_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35953900-1F81-49B4-B2F4-A0FEEF0E4F08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq5053-aa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E3FCA2-6CD3-4C63-9EFB-783FEF08D170"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_1200_wearable_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89870DD-3B20-4B06-9A51-755E204ECCDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_1200_wearable_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "955F15D0-2F36-45E7-9828-96593DA7DA80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_208_processor_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC78837-E44B-4D03-A9B1-C3494D823207"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_208_processor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF94E560-681D-48E7-9429-9B4BDB89393B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8909_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5B6EF9-BD77-4BAD-88B1-688440F05520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659F47F0-D79A-423A-81FA-9CBFA04AD6C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm4375_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117FAAF8-4E79-4BA8-BF6B-4572C114890F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm4375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233283A4-193F-430A-8019-EE1B83668E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8917_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1330470D-F535-4B25-B06B-52631B1FB038"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8917:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48CA9E36-AA40-47B5-8B5A-A6991E121816"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFD2C9A-6C25-4B8F-BE64-DAD3DCCDEADD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE61FCE-CA87-46E1-981D-B44697E54CB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3B5AFF-4AD4-4C10-9E39-C553C7E9E16E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09E7B90-DD7B-4617-90FD-29FF5BB190A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm4250-aa_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8615FCF8-2AEB-4820-A0F8-DFCE50DFB465"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm4250-aa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "977DF595-DA7A-48E0-BD7D-2CD89F63D037"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm4350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D4BDA33-248D-4040-B07D-2A9D80C64709"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm4350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0DB9382-CF2F-4690-ABCA-145CDA12F4AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm4350-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86F03E3C-CDEE-46AF-9CD6-4C58BAA4514E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm4350-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "887B369C-4398-4D8F-A95A-B9A8E9B1C1B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8952_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F636D2EE-F641-47D3-A48D-29EA41563EED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8952:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06AA652F-7755-4ABC-9C07-D2AACFDB7DF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8953_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C751D13C-DA23-4EDB-B464-DB6BA1C393C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8953:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B05E94-E1F5-4F0C-AB88-1E95D10B145C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8953pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30BACB4F-9702-44E3-872A-48C92D325660"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8953pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8840D09D-DDFC-4E8C-8D11-86A49CD66CA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_630_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "531A9325-790A-4D7E-BFF2-EB1808C719D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_630_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AACB4E-70A7-43ED-953D-911D2450C946"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_632_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C96DA9DC-A75A-4E73-B51C-4AA059DB81C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_632_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8323F3F2-010E-48E5-BFFF-A9896133D102"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_636_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C558A35-E8E3-43CD-BAC5-C665875D3E60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_636_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F23BF59-9FB7-49D6-846D-52263747E69F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8956_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C7578B-7FC8-4CCA-8132-62BCAF9CF7D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8956:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1AAE8C-BFBD-43F6-B3D9-93D6C7F167B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8976_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0379A607-62FD-4B1D-B45D-5B66F1B6F7F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8976:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2A257C-DA43-4706-8C82-2FC9380D0163"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8976pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E27067-8EE7-4CC6-96EC-926EEAED5CA4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8976pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "756A49E8-CF38-4D78-A933-07A85452E8E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6115_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00202FB3-C77E-4116-B5C7-C0EF172C2380"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6115:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B4CE11-4AB2-4395-86C0-063C396FE836"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE529BF7-0C9B-4B79-ABF8-54D5051F5E94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124227C1-DC7A-4A44-A513-C83976464BD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00865826-86AE-425F-BE6F-162F611FB200"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC0441C-C30B-4D99-9BAD-C1E4387302BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABE492A-3755-4969-9DEB-4B85EBB84644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3D3787B-6ACC-4591-B041-01307ED66C36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6150-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559BBC7F-CF94-4524-AF8A-172013131EED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6150-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BE75B1-0CB5-44DD-920E-B09B1A122C78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6225_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2668D5-623D-4E13-AF37-6F7040A14007"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6225:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B0F4C7-CA0F-4B9C-A6AA-60934B2AB2C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6225-ad_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E089DC83-3849-4671-95B9-E4C958EC79FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6225-ad:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E38F8F04-F841-492B-A555-96DBD7461380"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E5A7CE-9356-4E00-8458-52C60CB34753"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571CC514-7B65-4769-9921-149ABFF2FE74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6375_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737807F6-F62C-4EC5-903A-0BA996834164"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B79990C-AAD2-4A91-A806-E449838054BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D045BE4B-BC19-4A51-90E6-00C18389C81B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F006960-CDE3-4E74-B4F0-2C4B2CA93959"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055E464C-C63A-455E-97B0-0D8A266A428F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "527A0A00-0C6C-4937-87A3-00668CF7BACB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7150-aa_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66B0335-F592-4670-8E7D-7952396B88CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7150-aa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FA9B931-E55A-4717-A700-C3717B681824"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7150-ab_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB73734-92EE-4123-8D02-C7D0CE3029C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7150-ab:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D107A6-3120-4B08-B34C-A8C180474DDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7150-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA93759-49DD-4E86-93C7-AACC9F9E9346"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7150-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D072F051-A8C8-488A-971A-6A5A705837BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7225_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E2940C-5D85-4D05-A1B1-41E20DF01626"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7225:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD2B248-B205-4D7A-B03B-9AC3CEFF8760"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ssm7250-aa_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F42B55B-84AE-4F43-9DDE-72B190DFA9DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ssm7250-aa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78548BD4-9DDB-467F-B010-5C9DAAD04517"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7250-ab_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437D618B-FE47-4DF6-9174-B1335501862D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7250-ab:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4616FA92-3DB7-4ABC-A804-92B9FC7D57AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7250-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A51EAC73-7C74-4ABC-A964-8FE2CCB1C930"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7250-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF142AB-6BB0-43BE-B2F1-679A4BD123D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7325_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6874DE-6D72-4CE6-A78D-674257178B8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E2BA4E-3CCC-4C35-B915-DC16E6F976DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7325-ae_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "973C7278-EA56-425A-933E-30906763A978"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7325-ae:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02698564-E791-4057-A4CB-E22075B76E1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7350-ab_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FD6D80-8DC4-4E6D-A492-537413DA1D56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7350-ab:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFADAF33-D40E-4686-A028-84ADCE43DC57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7325-af_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C78936-5B8A-440F-A083-01AB6089209F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7325-af:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367B4E71-1390-4C89-9495-A30138B36667"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_7c\\+_gen_3_compute_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A050CA-8514-400A-A6B3-F513CC93CA14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_7c\\+_gen_3_compute:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD850305-1E76-4952-A3FB-F6229CBF7FE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_820_automotive_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22B3AB46-81F4-4C45-AF66-C8B36A175685"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_820_automotive_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8198E0-C95A-4433-9EC0-F544CAA90251"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8998_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CB414-1CA8-4AC1-8E16-841AC2E87FDF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A028D7DE-ED28-44BA-8D59-92DFC827FCAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED4B719-53B5-4D16-B3FA-ADE29D28ED86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D342C86B-E184-457C-9F72-BD853ED79425"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9286B1E8-E39F-4DAA-8969-311CA2A0A8AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B9AE36-87A9-4EE7-87C8-CCA2DCF51039"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8150-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC335397-8340-4DD4-B8D1-9AB6E9911F85"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8150-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6CF9F9-8EEE-49AD-B17D-60470F2F9D57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC730C6-FB32-4566-AAE2-B2B261BA9411"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A432773-467F-492C-AA3A-ADF08A21FB3F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8250-ab_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2723E7F4-1381-4542-83BA-E65728F6CA5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8250-ab:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918F0BEB-A38E-4801-ADE2-280D26F9A87C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8250-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056F1BD3-A44D-4876-86DA-1B864C60DAE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8250-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F2C602C-8D7C-4B3D-BC49-B5C36DFA8B63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B0798E6-68B1-4C0E-BF5B-5BC8033351A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70D909-40D1-4B66-AEA3-034F2C53FB0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8350-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D77AA64D-A9B5-473F-98FC-E5859142881D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8350-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "066C3D8A-DC4C-415C-AFC1-0400325B0B10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88AF39A5-F44E-4B14-AA6E-4F80D9EEB017"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A25FE8F-555A-4D85-8A94-A808B62EAE86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_w5\\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C455E7D-D256-4240-BE72-2A93273D685A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_w5\\+_gen_1_wearable_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "423E21A1-8F52-46DA-9AC2-77159FEB6001"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_wear_4100\\+_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AFE82F-12C5-4B2E-9004-52F68C965F70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_wear_4100\\+_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5CD77E-1AFD-4AB4-A752-7AAE195E6324"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x12_lte_modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05396B5E-C70F-4D83-84AA-7A7DB1B7B0E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x12_lte_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E180EE7-5254-4C57-B4EE-BF2A9C21CA94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x20_lte_modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D256F6F-3AF7-4337-9651-A012B70C95D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x20_lte_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE027C8-1A5E-4247-A2C7-84A4A11EAB6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x24_lte_modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAB1351-A614-4E73-B58E-7D624695C657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x24_lte_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4494AAD7-D132-41DB-9756-CAD1F3F7AE7E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x5_lte_modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312A5688-2508-4609-835F-F0957C511AE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x5_lte_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD6DFCE-2D24-4A68-8B46-FB47ABEC6694"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x50_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D1567F-D669-4415-9A08-110221EFA6BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x50_5g_modem-rf_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF808C56-AD46-4351-9A46-6A2B6AAAB5BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFF2095-4257-40C9-8C48-B38C143159ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x55_5g_modem-rf_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FEA2F1D-7D07-4684-BDC1-24224A53A8BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x65_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F74BF53E-DFA1-4750-A638-FE7572B79D16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x65_5g_modem-rf_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "226D1ABD-E4AD-487E-88EB-4C66D51DB33D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_xr1_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E1B7FD-39CD-42AB-A113-2AFB25B5F85B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_xr1_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93EECE3-7A8A-4B58-A674-134040CE43FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A129620-8241-4A47-AAC8-CC7E10A09C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_xr2_5g_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEDD78E-124C-4216-9B57-3B7B53463659"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_xr2\\+_gen_1_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9740EB-F82E-42EA-993E-A393B05CC6BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_xr2\\+_gen_1_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022A5532-03F7-4FB8-BA0D-4221178C9486"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_auto_4g_modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8F12FE-0057-4A13-9A7F-D12C114ECEF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_auto_4g_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1271B0C7-2D91-4129-9B58-E6689DD68C39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1BF9BB-AF11-46A7-A71C-F7D289E76E3F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B8455D6-287D-4934-8E4D-F4127A9C0449"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB599A9F-0305-4FE4-8623-0F86630FEDCB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB883BF-68B2-4C25-84DC-5DA953BFAA2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr1120_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF839E24-6542-4C5D-A1B7-FD3BA00683CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr1120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F12284-93E0-482D-9D35-EB38BA7D6C6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9FA3B1-E4E4-4D9B-A99C-7BF958D4B993"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr2130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95762B01-2762-45BD-8388-5DB77EA6139C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8053-aa_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1F10AB-9CC0-4A35-841D-997268B52187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8053-aa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB21143-2B80-4C1B-9D29-F90399C87F1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8053-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0200C8-84F6-42AD-8909-14C159FC6AEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8053-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C99DC6E-158B-4F29-BBC3-2BD129631D7E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05FD66D-13A6-40E9-A64B-E428378F237E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D665C1-3EBA-42F2-BF56-55E6C365F7DF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2FAD34-B7C5-400A-8575-A12CDE65ACBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A39A2E5-6D8D-4F6E-98CB-96DB1975A4BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9330_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A90019-4E96-40B5-9E4D-CCBDD51ACA34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3D23FE-B3D5-4EC3-8268-98F12181966D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28717583-463A-468A-8073-ECF0F90585F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1A7188-7D5D-4D46-AEAB-08BA84FFF539"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA28CC6-C8BB-4F50-BFE3-A59F664A4F54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D2BDF1-764C-48BA-8944-3275E8768078"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE852339-1CAE-4983-9757-8F00EDEF1141"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9E96B3-F1BB-46F8-B715-7DF90180F1E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1295D869-F4DD-4766-B4AA-3513752F43B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98784DC-3143-4D38-AD28-DBBDCCAB4272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9371_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2503805B-B2A6-4AEE-8AB1-2B8A040702BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9371:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3AD370C-2ED0-43CF-83D9-50DC92A01CA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34143ABA-7D09-429F-A65C-3A33438BF62C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D56DFE3-5EF1-4B23-BBD5-0203FBF9CCEC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70292B01-617F-44AD-AF77-1AFC1450523D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA94C6D6-85DB-4031-AAF4-C399019AE16D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B17201-8185-47F1-9720-5AB4ECD11B22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FA2EB9-416F-4D69-8786-386CC73978AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3610_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD64E7-3F13-4DCA-8C46-6E8FE0C6F798"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044A14FB-64F6-4200-AC85-8DC91C31BD16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9590EF1F-E821-4525-943B-4A315ACAEFFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7D32B3-325E-4B1F-8649-3D0071396BBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99CA230-0694-4898-A06E-9C522CCB86CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B00662-139A-4E36-98FA-D4F7D101D4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2669D0-81C0-4F3C-B9AF-1453815C68B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D7240B-DCB4-4BF4-94C7-13EBECA62D6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB37B5DB-2493-4082-B2BF-60385B7E027C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCD2FE2-11F2-4B2A-9BD7-EB26718139DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3680_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F66A898-3C7A-4D44-86BD-89129F04E654"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3680:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B612B044-C7D1-4662-AB2A-5400E34A3CA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0755F669-6D7E-454A-95DA-D60FA0696FD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3680b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE861CE7-B530-4698-A9BC-43A159647BF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3910_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0D7B24-D567-479A-B4F1-595FAA053418"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A8FAA1-F824-4561-9CCC-7F0DF12F740F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEF2DB6-00F5-4B07-953B-EF58B31267F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120E8F0F-EBEB-4565-9927-2D473F783EF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6E9038-9B18-4958-BE1E-215901C9B4B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36D3274-F8D0-49C5-A6D5-95F5DC6D1950"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BFB25F-013B-48E3-99FF-3E8687F94423"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF676C5B-838B-446C-A689-6A25AB8A87E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2744A053-5BD9-45A9-A2FC-791BCA0CCD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F28E29-520F-469E-B048-62DE2EF07ADD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3999_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF49BC31-A332-4B9A-A826-F63116D7029F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3999:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD3C245-D5F8-4145-8CDF-F635D2C8F088"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5DB2B8-25E1-4C0F-8AFB-7627FF9A04E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6740:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BB21B3F-6D07-4B45-8A71-DC5490176296"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15307882-7039-43E9-9BA3-035045988B99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA85B322-E593-4499-829A-CC6D70BAE884"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E839A0B9-64C3-4C7A-82B7-D2AAF65928F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E870D82-DE3B-4199-A730-C8FB545BAA98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11B69595-E488-4590-A150-CE5BE08B5E13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80BC68E-7476-4A40-9F48-53722FE9A5BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B36F4B2-BAA3-45AD-9967-0EB482C99708"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/172663/Qualcomm-Adreno-KGSL-Unchecked-Cast-Type-Confusion.html",
        "source" : "product-security@qualcomm.com"
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins/may-2023-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/172663/Qualcomm-Adreno-KGSL-Unchecked-Cast-Type-Confusion.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins/may-2023-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2023-21666",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2023-05-02T06:15:10.510",
      "lastModified" : "2024-11-21T07:43:22.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-security@qualcomm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34AB9074-97A3-43F0-B829-CDB4E3066AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362252ED-1DB3-4CF6-86DD-14919826D75E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FBD6DF-F174-4690-AA3D-1E8974E3627F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BF86E1-3FAC-4A42-8C01-5944C6C30AE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn685x-5_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3CF46D-E1CB-447E-8371-15C3F49B1AA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn685x-5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74FDAF1-82D0-4136-BF97-25C56FCEE77C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn685x-1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A07C2049-B227-4849-85D0-B53D690C7697"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn685x-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D2DB07-B72B-4D44-A373-0C7EAB35F388"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:flight_rb5_5g_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD36089F-92DF-49EC-9C6F-4300E4903CB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:flight_rb5_5g_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D19A754C-6900-4436-916D-F5361E0BC324"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:home_hub_100_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E5DFB7-9516-4019-8F74-D9584BC01D23"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:home_hub_100_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2EDB814-A56C-4A85-B8AB-566D42BC9EB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA44E1D7-C4B5-4A1C-8D89-C080856104EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "268F94E5-15A2-4BCA-BE1B-0B6A7179B9C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9628_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADC6FBEE-D2FA-4660-A078-D6CE2097653D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9628:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6BD8A1C-D9AB-4BE7-A855-31E58631879C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B7E25E-FA92-4C36-883C-CFF36F4B3507"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECD99C6F-2444-4A5E-A517-0C8023DDF23D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8108_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C8807E9-5972-47E7-8B39-2E4D68C7B79E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8108:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57963412-14B9-4C0D-AA0D-6928445DB808"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8209_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29F64FA7-5EA1-4C91-B409-4A0E966FBD26"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8209:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBCA5AB-07E4-404E-A278-28F6004D2126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8608_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99AE9AEA-4D9F-4879-85F7-405279EFE5ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8608:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDED3AA7-576C-4437-A466-D627698F4242"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6174_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0814A50-D8E6-42BD-A0A3-0768A3E28F53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6174:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2AD8F5C-1FEB-45C2-BC8F-123C2BEB0EA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF653D0-15CF-4A10-8D8E-BE56F4DAB890"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31FA74C-6659-4457-BC32-257624F43C66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DC4FBB-D9CB-43EB-829E-0A892306D0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0F8ED6-EAE7-44EA-A8C6-F5AD408261F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6320_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886CF046-E1D9-4FD4-AC02-EAB61C3F70FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059486E9-3F99-4C65-A763-470564EDAF2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6335_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966CDA56-809F-4FF4-909D-0DD92F44CF67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90747B4-2CC0-4816-A994-58E00F5ADA05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B53119-1B2F-4978-B7F5-33B84BE73B68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEBC0C5-CAA1-475C-96C2-B8D24B2E4536"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E16994A-6DBA-426C-ADD2-B1E8B49FEDBF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E674DE-55AB-44E5-8E00-C804FC9D4DC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6421_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503CEDEF-99D0-4432-88A0-295340743606"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9115A0-0D87-49BE-9A9B-091DBF8D9E6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A344E78F-D15A-460E-8EF8-7C6FC39F2D5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF5EC23-4884-4C2B-8E77-50B1E8E28A3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AFC483-1468-43FC-96FA-A56165C290E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A963FDF-6FF4-4F48-834E-2A14D241716D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6431_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FD6A24-B6F4-4C65-968F-AFF90A1A60B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34661A30-92C3-4F0D-ABD1-8DA8E928DFF9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04F574BC-9AB2-4B83-A466-556ECEBBD3DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6436:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34D021D-C043-4EFD-9AB3-B2174528CBA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00FE294D-4BE0-4436-9273-507E760884EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424CB795-58E5-43A4-A2EC-C563D93C5E72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886124F6-B397-4EB6-8E01-6012E468ABE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93ED74CE-6BF2-4983-8780-07D5336745B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59672A0-2FA6-46CC-B75A-C599B842AFB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3847F4A5-90A5-4C84-B43F-0DDD81BD79CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AC8-4A01-4537-B2BD-8180C99F5C32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C16E1E-9D4A-4F20-B697-833FDCCA86FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828CFB37-76A6-4927-9D00-AF9A1C432DD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11405993-5903-4716-B452-370281034B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D527E2B1-2A46-4FBA-9F7A-F5543677C8FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8374DDB3-D484-4141-AE0C-42333D2721F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643EC76D-2836-48E6-81DA-78C4883C33CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477F6529-4CE1-44FC-B6EE-D24D44C71AE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "288F637F-22F8-47CF-B67F-C798A730A1BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0996EA3-1C92-4933-BE34-9CF625E59FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE207DB-9770-40ED-961D-FDA75965826F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E23922D-C37F-476F-A623-4C1458A9156F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA8F9DA-1386-4961-B9B2-484E4347852A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117289C8-7484-4EAE-8F35-A25768F00EED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9367_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AD0E09B-92EC-4974-BC5F-66C3AAF586B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9367:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FBA48AB-85F4-4D6C-B811-87756B80FFB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D2B46E-3996-42FD-B932-09E92C02EC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E58C63-F253-4DCC-8A14-48FEB64B4C3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25565FDA-651D-4A05-8B1E-2188B6921253"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9379:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D49750-BBEA-4A3D-9898-28B7A50A7F42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB1F0FA-25F3-4304-A3BC-5264E55CC092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm2290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214A053F-D80C-4AD9-B4F1-83384095A3F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7FFB96-53E7-41A2-BC99-7ACD853214A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm4290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EBA77E-69A5-4145-9BEC-CD39BA132309"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB226552-52D9-44F5-A170-35C44761A72B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm6125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB16DC4-CDC9-4936-9C6A-0ED8E1F6D056"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn9011_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9306C34D-47E4-40CF-89F4-BA5263655D13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn9011:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BA009F-24E1-4953-BA95-2A5BC1CDBDBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F34DD2-9DC0-49E5-BC85-1543EA199477"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn9012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A06879F-6FE9-448A-8186-8347D76F872B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65303C2D-C6BF-47CB-8146-E240CB8BBE42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn9074:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B03022-497A-4F42-BB4D-5624EA7DF1B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93CDB7BC-89F2-4482-B8E3-9DDBD918C851"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs2290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E03AE9-2485-449B-BCFD-3E452BB01FC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC43BB27-0516-4750-A4C2-C45298441398"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969585DE-93D6-4406-A632-D838ECD4D5AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06789CB9-E6FA-400D-90B6-C2DB6C8EF153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs4290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCB9F22-57F2-4327-95B9-B2342A02E45E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E634F59C-6817-4898-A141-082044E66836"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29762819-EC90-499C-A8C6-1423DE3FE6B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs6125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4468EA5D-87B0-4FEC-A3DB-617651B0D169"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs6125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA2C3E1-E285-4CAD-9FA3-813C8EC436F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs8155_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487E7EA3-CE9C-4DB9-97D9-A74406C8BC9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs8155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "644A4FF4-1494-480B-BDBA-22CC13C4E8EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs8250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CDDD37F-4C3A-4955-9AFB-7774021A0198"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs8250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D13E375-0562-4263-8452-53E117F14E83"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qrb5165m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CC1C8B-F642-4068-B9E3-ECE027486E45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qrb5165m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A60F8378-B827-4557-B891-A8A02F8F2A25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qrb5165n_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97BB1EB7-D194-4FE2-B4F6-A7A52F344DDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qrb5165n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA2C90E7-0F3A-43BB-ABF7-63CEA7A85ADA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qsm8250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C194363-7FDE-43C9-B6FE-2BD6B474816F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qsm8250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8CC9433-6B33-4B9C-8EC3-BBBB43897E5C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8905_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "018C0E3A-1FA9-48B8-8697-92944B01DEF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8905:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCB14FE2-9C61-4CD1-B8D1-DBF44FC89163"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18CD1F1-C36A-4840-88CD-8F00BD68EF1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qm215:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A01800E-994E-4095-AD86-F02DC9D9C86E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda\\/sdm845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5634C93-0C39-43B6-A185-77CE005B7305"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda\\/sdm845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED618D9-DFDD-4306-BF6D-5D5636B60353"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qrb5165_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A1AAD0-9336-4657-8E1E-74E8F490C06E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qrb5165:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386F2F37-974B-40F2-9B23-ABD49C60E32D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66671C1-AE1A-44BE-9DB2-0B09FF4417DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AA3929-3F80-4D54-B13A-9B070D5C03BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054F77D6-FC66-4151-9005-DC7ECDB5C722"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6150p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED3F589-16D9-46A7-A539-C9862473EE0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6155_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C40544E-B040-491C-8DF3-50225E70B50C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2DAC85C-CDC9-4784-A69A-147A2CE8A8B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC40C14-3B2D-4E00-9E0F-86E6BDBF2D81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0514D433-162C-4680-8912-721D19BE6201"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71D74B0-0963-49FD-8E97-148C8993B263"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8145p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "910CBFA4-50F7-4C7A-B9B9-B88C8A919827"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69C1B02F-8D2D-42E7-B70D-41F4D9844FD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8150p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEACAA9-C061-4713-9A54-37D8BFC0B00B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8155_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33EB594-B0D3-42F2-B1CA-B0E6C9D82C6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50EF47E5-2875-412F-815D-44804BB3A739"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8648B38-2597-401A-8F53-D582FA911569"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CD59B-8F21-4CD6-8A1A-7B37547A8715"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BC0A66-493B-43BE-B51F-640BDF2FF32E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8195p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DA4D12-7ABF-4A04-B44E-E1D68C8E58AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F900C8F-9763-441A-B97E-E5394A68A08A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd_675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589C1001-E9F6-41A6-BCC8-A94A3C97F2E6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd626_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9043720-6B49-4305-BB4F-C88CCB6D89E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd626:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8F19D3-F322-4CDC-83C5-A9F7F1777DAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3991C516-4FBE-43D8-835F-413FE45BF73E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CF5EBB-B25A-4A76-B522-951F108263CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8DA94C-23A0-4C99-9F05-144B9B5224B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E10E22-E7CC-41D6-80F3-030083F45645"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd675_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1497D052-884E-496B-BEF8-6904A25125ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589F4888-28F6-4ECA-860E-8054C2A8C419"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd730_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4DA7EA-DB81-4C71-A875-2612D8D7D726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F26F64-98D4-420A-8918-E5E56ABA1D47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA605FD-B801-43BB-B52D-879013F7F57E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908BFD96-0423-4AFC-B8F3-105B2D5B4C73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42B30014-95AB-4F24-A7A5-60A907502609"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F562ED3D-CBE3-4DCC-BFBB-DE0AD2425A9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72433485-B229-46A6-BCA4-394AA4EEA683"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd865_5g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04D40EC4-BF31-4BFD-8D0A-8193F541AF02"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E52771-4FB7-45DB-A349-4DD911F53752"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F6CE39-9299-4FC3-BC48-11F79034F2E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx20m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4079EC4E-ACCF-4BC4-BC3F-D7951C4B6496"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx20m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5765D9F4-4090-4470-A90A-7E72A50881AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93FB34B-3674-404D-9687-E092E9A246AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx55:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FF5A9A-A34A-499C-B6E0-D67B496C5454"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm4125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B93301-AFE8-409B-A8C8-6754BE5A0C14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm4125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B185412C-177F-48E2-87F9-1269E0FB8E31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACA2BF1-85D3-447F-A08D-B90330A22550"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2ABA18D-82C1-4366-B1D7-DED42DD3D5C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6250p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3FB2972-94B6-4716-BA96-4B452BA3990F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6250p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57F4F872-094E-4E27-BB89-D8251FAFB713"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7250p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76DB5472-DF51-4144-8A69-9B231CF782DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7250p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D395018-251C-45AA-9EE8-A638CAB0B508"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8053-lite_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C3BB753-BA74-4E55-B959-EA0A52DB8ECB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8053-lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A21D60-C115-4499-A2FE-92F378E29851"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qrb5165_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89A1AAD0-9336-4657-8E1E-74E8F490C06E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qrb5165:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "386F2F37-974B-40F2-9B23-ABD49C60E32D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq5053-aa_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35953900-1F81-49B4-B2F4-A0FEEF0E4F08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq5053-aa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E3FCA2-6CD3-4C63-9EFB-783FEF08D170"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_1200_wearable_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E89870DD-3B20-4B06-9A51-755E204ECCDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_1200_wearable_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "955F15D0-2F36-45E7-9828-96593DA7DA80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_208_processor_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC78837-E44B-4D03-A9B1-C3494D823207"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_208_processor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF94E560-681D-48E7-9429-9B4BDB89393B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8909_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5B6EF9-BD77-4BAD-88B1-688440F05520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659F47F0-D79A-423A-81FA-9CBFA04AD6C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8909_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB5B6EF9-BD77-4BAD-88B1-688440F05520"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659F47F0-D79A-423A-81FA-9CBFA04AD6C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8917_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1330470D-F535-4B25-B06B-52631B1FB038"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8917:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48CA9E36-AA40-47B5-8B5A-A6991E121816"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFD2C9A-6C25-4B8F-BE64-DAD3DCCDEADD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE61FCE-CA87-46E1-981D-B44697E54CB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F3B5AFF-4AD4-4C10-9E39-C553C7E9E16E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A09E7B90-DD7B-4617-90FD-29FF5BB190A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm4250-aa_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8615FCF8-2AEB-4820-A0F8-DFCE50DFB465"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm4250-aa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "977DF595-DA7A-48E0-BD7D-2CD89F63D037"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8953_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C751D13C-DA23-4EDB-B464-DB6BA1C393C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8953:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B05E94-E1F5-4F0C-AB88-1E95D10B145C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8953pro_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30BACB4F-9702-44E3-872A-48C92D325660"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8953pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8840D09D-DDFC-4E8C-8D11-86A49CD66CA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_632_mobile_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C96DA9DC-A75A-4E73-B51C-4AA059DB81C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_632_mobile_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8323F3F2-010E-48E5-BFFF-A9896133D102"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24D7B67C-6FEC-48F8-9D46-778E4528BC20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05006807-D961-446C-B8DC-C87507F1316E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6115_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00202FB3-C77E-4116-B5C7-C0EF172C2380"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6115:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14B4CE11-4AB2-4395-86C0-063C396FE836"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE529BF7-0C9B-4B79-ABF8-54D5051F5E94"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124227C1-DC7A-4A44-A513-C83976464BD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00865826-86AE-425F-BE6F-162F611FB200"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC0441C-C30B-4D99-9BAD-C1E4387302BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABE492A-3755-4969-9DEB-4B85EBB84644"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3D3787B-6ACC-4591-B041-01307ED66C36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6150-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "559BBC7F-CF94-4524-AF8A-172013131EED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6150-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21BE75B1-0CB5-44DD-920E-B09B1A122C78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6225_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2668D5-623D-4E13-AF37-6F7040A14007"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6225:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B0F4C7-CA0F-4B9C-A6AA-60934B2AB2C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6225-ad_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E089DC83-3849-4671-95B9-E4C958EC79FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6225-ad:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E38F8F04-F841-492B-A555-96DBD7461380"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E5A7CE-9356-4E00-8458-52C60CB34753"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571CC514-7B65-4769-9921-149ABFF2FE74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D045BE4B-BC19-4A51-90E6-00C18389C81B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F006960-CDE3-4E74-B4F0-2C4B2CA93959"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055E464C-C63A-455E-97B0-0D8A266A428F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "527A0A00-0C6C-4937-87A3-00668CF7BACB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7150-aa_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66B0335-F592-4670-8E7D-7952396B88CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7150-aa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FA9B931-E55A-4717-A700-C3717B681824"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7150-ab_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DB73734-92EE-4123-8D02-C7D0CE3029C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7150-ab:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D107A6-3120-4B08-B34C-A8C180474DDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7150-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA93759-49DD-4E86-93C7-AACC9F9E9346"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7150-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D072F051-A8C8-488A-971A-6A5A705837BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7225_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E2940C-5D85-4D05-A1B1-41E20DF01626"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7225:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAD2B248-B205-4D7A-B03B-9AC3CEFF8760"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7250-aa_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6809F530-FA3C-455E-AF16-41F57AC3F5D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7250-aa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "464E833D-9FCA-4407-88A2-EDE7D4FAEA28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7250-ab_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "437D618B-FE47-4DF6-9174-B1335501862D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7250-ab:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4616FA92-3DB7-4ABC-A804-92B9FC7D57AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7250-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A51EAC73-7C74-4ABC-A964-8FE2CCB1C930"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7250-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF142AB-6BB0-43BE-B2F1-679A4BD123D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_820_automotive_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22B3AB46-81F4-4C45-AF66-C8B36A175685"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_820_automotive_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A8198E0-C95A-4433-9EC0-F544CAA90251"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:8998_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F10CB414-1CA8-4AC1-8E16-841AC2E87FDF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:8998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A028D7DE-ED28-44BA-8D59-92DFC827FCAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED4B719-53B5-4D16-B3FA-ADE29D28ED86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D342C86B-E184-457C-9F72-BD853ED79425"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8250-ab_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2723E7F4-1381-4542-83BA-E65728F6CA5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8250-ab:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "918F0BEB-A38E-4801-ADE2-280D26F9A87C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm8250-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "056F1BD3-A44D-4876-86DA-1B864C60DAE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm8250-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F2C602C-8D7C-4B3D-BC49-B5C36DFA8B63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88AF39A5-F44E-4B14-AA6E-4F80D9EEB017"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A25FE8F-555A-4D85-8A94-A808B62EAE86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_wear_2100_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C19F8862-65F2-4A80-82DB-44B312C377A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_wear_2100_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07A533FB-1A79-4D28-8C4C-C0E5D59E09B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_wear_2500_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2317B9C5-14FE-4B54-AA6C-3F41B2B15A04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_wear_2500_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EDA8707-6BB7-4749-B4FF-3282FB0A6AFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_wear_3100_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4124C-EED1-41C3-9A83-D96A69A6D33E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_wear_3100_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B22D352-11A6-493C-82E2-D33DA414F715"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_wear_4100\\+_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79AFE82F-12C5-4B2E-9004-52F68C965F70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_wear_4100\\+_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5CD77E-1AFD-4AB4-A752-7AAE195E6324"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x20_lte_modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D256F6F-3AF7-4337-9651-A012B70C95D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x20_lte_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE027C8-1A5E-4247-A2C7-84A4A11EAB6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x24_lte_modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CAB1351-A614-4E73-B58E-7D624695C657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x24_lte_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4494AAD7-D132-41DB-9756-CAD1F3F7AE7E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x5_lte_modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312A5688-2508-4609-835F-F0957C511AE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x5_lte_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADD6DFCE-2D24-4A68-8B46-FB47ABEC6694"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x50_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D1567F-D669-4415-9A08-110221EFA6BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x50_5g_modem-rf_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF808C56-AD46-4351-9A46-6A2B6AAAB5BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFF2095-4257-40C9-8C48-B38C143159ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_x55_5g_modem-rf_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FEA2F1D-7D07-4684-BDC1-24224A53A8BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_xr1_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E1B7FD-39CD-42AB-A113-2AFB25B5F85B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_xr1_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93EECE3-7A8A-4B58-A674-134040CE43FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A129620-8241-4A47-AAC8-CC7E10A09C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_xr2_5g_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CEDD78E-124C-4216-9B57-3B7B53463659"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_xr2\\+_gen_1_platform_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9740EB-F82E-42EA-993E-A393B05CC6BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_xr2\\+_gen_1_platform:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "022A5532-03F7-4FB8-BA0D-4221178C9486"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:snapdragon_auto_4g_modem_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C8F12FE-0057-4A13-9A7F-D12C114ECEF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:snapdragon_auto_4g_modem:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1271B0C7-2D91-4129-9B58-E6689DD68C39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr1120_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF839E24-6542-4C5D-A1B7-FD3BA00683CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr1120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F12284-93E0-482D-9D35-EB38BA7D6C6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9FA3B1-E4E4-4D9B-A99C-7BF958D4B993"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sxr2130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95762B01-2762-45BD-8388-5DB77EA6139C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8053-aa_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF1F10AB-9CC0-4A35-841D-997268B52187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8053-aa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB21143-2B80-4C1B-9D29-F90399C87F1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8053-ac_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0200C8-84F6-42AD-8909-14C159FC6AEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8053-ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C99DC6E-158B-4F29-BBC3-2BD129631D7E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05FD66D-13A6-40E9-A64B-E428378F237E"
          } ]
        }, {
          "operator" : "O